Malware Analysis Report

2025-01-18 23:54

Sample ID 241115-xcp5vaymcy
Target piano_sound.wav
SHA256 318bb6c439b4b3db412e5f247b507c9a6b8e904d4a9b5da5b3456b38b6096b1f
Tags
steam discovery persistence phishing
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

318bb6c439b4b3db412e5f247b507c9a6b8e904d4a9b5da5b3456b38b6096b1f

Threat Level: Likely malicious

The file piano_sound.wav was found to be: Likely malicious.

Malicious Activity Summary

steam discovery persistence phishing

Downloads MZ/PE file

A potential corporate email address has been identified in the URL: swiper@11

Checks computer location settings

A potential corporate email address has been identified in the URL: [email protected]

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Adds Run key to start application

Drops desktop.ini file(s)

Enumerates connected drives

Detected potential entity reuse from brand STEAM.

Drops file in Program Files directory

Drops file in Windows directory

Program crash

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Checks processor information in registry

Modifies registry class

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

NTFS ADS

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-15 18:42

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-15 18:42

Reported

2024-11-15 19:18

Platform

win10v2004-20241007-en

Max time kernel

2070s

Max time network

2098s

Command Line

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Open "C:\Users\Admin\AppData\Local\Temp\piano_sound.wav"

Signatures

Downloads MZ/PE file

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: swiper@11

phishing

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\G: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\N: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\R: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\S: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\U: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\E: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\J: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\M: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\P: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\A: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\I: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\T: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\G: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\K: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\Y: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\H: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\O: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\Q: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\Z: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\B: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\V: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\W: C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\unregmp2.exe N/A

Detected potential entity reuse from brand STEAM.

phishing steam

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_button_square_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_mouse_4_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\locales\zh-CN.pak_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_110_social_0130.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_button_triangle_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps_outlined_button_triangle.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_l2_soft_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\joyconpair_left_sl_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0333.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_035_magic_0339.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0060.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\switch_controller_norwegian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\cmnd_dots_per_360_calibration_spin.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_010_wpn_0450.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_rt_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_trackpad_l_left_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_r3_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\addfriendresultsubpanel_success.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_button_create_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_touchpad_down_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\xbox_button_start_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\osk2.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\broadcast\icon_mic_off.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\btnStdTopLeft.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\dropdown_offline.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\platform_portuguese.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_r1_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps_color_outlined_button_square_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_button_steam.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_french.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_hungarian.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_060_vehicle_0070.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_l2_soft.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_trackpad_r_right.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_dpad_right_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\addfriendresultsubpanel.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_lfn_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_030_inv_0310.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\resizer_over.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\steam_controller_czech.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\platform_russian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_l_right_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamclean_brazilian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamui_finnish.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_ltrackpad_right_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0304.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_110_social_0040.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\broadcast\broadcast_live_grey.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_expand.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\c1.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_lstick_left.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_rstick_down_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_dpad_left.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\CreditCardPreorderReceipt.html_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\config\config.vdf~RFe5cd057.TMP C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_swipe_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0506.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steam_offline.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps_dpad_right.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_button_aux_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_l_click_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_dpad_right_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\xbox_lb_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll C:\Windows\system32\svchost.exe N/A
File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll C:\Windows\system32\svchost.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\unregmp2.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133761698189967715" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-wmplayer C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3227495264-2217614367-4027411560-1000\{F3245D8E-9CDB-4A7E-9051-A519EDC54EFD} C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-wmplayer\CLSID = "{cd3afa96-b84f-48f0-9393-7edc34128127}" C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 572321.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1516 wrote to memory of 3376 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 1516 wrote to memory of 3376 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 1516 wrote to memory of 3376 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 3376 wrote to memory of 3728 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 3376 wrote to memory of 3728 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 5092 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 3580 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 532 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4344 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5092 wrote to memory of 4040 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Open "C:\Users\Admin\AppData\Local\Temp\piano_sound.wav"

C:\Windows\SysWOW64\unregmp2.exe

"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon

C:\Windows\system32\unregmp2.exe

"C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x500 0x4f4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd214dcc40,0x7ffd214dcc4c,0x7ffd214dcc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1904,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1900 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2176,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2216 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2292,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2496 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3188,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3200 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3284,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3452 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3748,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4492 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4896,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4944 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2968,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4976 /prefetch:8

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff6193f4698,0x7ff6193f46a4,0x7ff6193f46b0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4972,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4940 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5276,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4796 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3708,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4944 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4968,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5268 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4780,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5604 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4072,i,2009065806137695593,11296422533617703254,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd213946f8,0x7ffd21394708,0x7ffd21394718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1516 -ip 1516

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1516 -s 2196

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault4b430270hd4c5h4e7dhbf50hf7cdcac4a843

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd213946f8,0x7ffd21394708,0x7ffd21394718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,11608931821970052408,9871042756674065662,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,11608931821970052408,9871042756674065662,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5096 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5752 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1824 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5068 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6644 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6460 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=1376" "-buildid=1731433018" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal,ValveFFmpegAllowLowDelayHEVC"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1731433018 --initial-client-data=0x280,0x284,0x288,0x27c,0x28c,0x7ffd21ccaf00,0x7ffd21ccaf0c,0x7ffd21ccaf18

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1584,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1588 --mojo-platform-channel-handle=1576 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --field-trial-handle=2208,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2212 --mojo-platform-channel-handle=2204 /prefetch:3

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --field-trial-handle=2772,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2784 --mojo-platform-channel-handle=2768 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3152 --mojo-platform-channel-handle=3144 /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3736 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --field-trial-handle=2112,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2032 --mojo-platform-channel-handle=1112 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3780,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1112 --mojo-platform-channel-handle=3792 /prefetch:8

C:\Program Files (x86)\Steam\steamerrorreporter.exe

C:\Program Files (x86)\Steam\steam

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3936,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3940 --mojo-platform-channel-handle=1264 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1731433018 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4012,i,12549290234358197370,18319612700778432470,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4016 --mojo-platform-channel-handle=4008 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7060 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x500 0x4f4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9148 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,17653627944258435366,11498970921368963825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9592 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 101.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 69.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 228.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 musicmatch-ssl.xboxlive.com udp
GB 95.100.244.7:443 musicmatch-ssl.xboxlive.com tcp
US 8.8.8.8:53 7.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 clients2.googleusercontent.com udp
GB 216.58.201.97:443 clients2.googleusercontent.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.204.74:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 133.130.81.91.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 cxcs.microsoft.net udp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
GB 95.101.143.195:443 www.bing.com tcp
US 8.8.8.8:53 195.195.62.23.in-addr.arpa udp
US 8.8.8.8:53 195.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
GB 95.101.143.195:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 88.221.135.27:443 r.bing.com tcp
GB 88.221.135.42:443 r.bing.com tcp
GB 88.221.135.42:443 r.bing.com tcp
GB 88.221.135.27:443 r.bing.com tcp
US 8.8.8.8:53 27.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 42.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.2:443 login.microsoftonline.com tcp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 204.79.197.237:443 www2.bing.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
GB 216.58.213.22:443 i.ytimg.com tcp
US 8.8.8.8:53 accounts.google.com udp
GB 64.233.167.84:443 accounts.google.com tcp
GB 64.233.167.84:443 accounts.google.com udp
US 8.8.8.8:53 22.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 84.167.233.64.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 youtube.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.179.238:443 youtube.com tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.178.10:443 jnn-pa.googleapis.com tcp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 consent.youtube.com udp
GB 216.58.204.78:443 consent.youtube.com tcp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
GB 216.58.213.22:443 i.ytimg.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.200.33:443 yt3.ggpht.com tcp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
GB 142.250.200.33:443 yt3.ggpht.com udp
US 8.8.8.8:53 25.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.143.202:443 r.bing.com tcp
US 8.8.8.8:53 202.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 store.steampowered.com udp
GB 95.100.245.51:443 store.steampowered.com tcp
GB 95.100.245.51:443 store.steampowered.com tcp
US 8.8.8.8:53 store.fastly.steamstatic.com udp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 151.101.195.52:443 store.fastly.steamstatic.com tcp
US 8.8.8.8:53 51.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 cdn.fastly.steamstatic.com udp
US 151.101.195.52:443 cdn.fastly.steamstatic.com tcp
US 8.8.8.8:53 shared.fastly.steamstatic.com udp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 151.101.131.52:443 shared.fastly.steamstatic.com tcp
US 8.8.8.8:53 52.195.101.151.in-addr.arpa udp
US 8.8.8.8:53 52.67.101.151.in-addr.arpa udp
US 8.8.8.8:53 52.131.101.151.in-addr.arpa udp
GB 95.100.245.51:443 store.steampowered.com tcp
GB 95.100.245.51:443 store.steampowered.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 r11.o.lencr.org udp
GB 88.221.135.115:80 r11.o.lencr.org tcp
US 8.8.8.8:53 52.3.101.151.in-addr.arpa udp
US 8.8.8.8:53 115.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 168.245.100.95.in-addr.arpa udp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 gmail.com udp
GB 216.58.204.69:80 gmail.com tcp
GB 216.58.204.69:80 gmail.com tcp
US 8.8.8.8:53 mail.google.com udp
GB 172.217.16.229:443 mail.google.com tcp
US 8.8.8.8:53 69.204.58.216.in-addr.arpa udp
GB 64.233.167.84:443 accounts.google.com udp
US 8.8.8.8:53 229.16.217.172.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 test.steampowered.com udp
GB 88.221.134.234:80 test.steampowered.com tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 234.134.221.88.in-addr.arpa udp
N/A 127.0.0.1:51451 tcp
N/A 127.0.0.1:51434 tcp
US 8.8.8.8:53 api.steampowered.com udp
GB 2.22.99.85:443 api.steampowered.com tcp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 216.58.204.67:443 ssl.gstatic.com tcp
US 8.8.8.8:53 85.99.22.2.in-addr.arpa udp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 cmp2-tyo3.steamserver.net udp
JP 45.121.184.101:27020 cmp2-tyo3.steamserver.net tcp
US 8.8.8.8:53 cmp2-hkg1.steamserver.net udp
HK 103.28.54.101:27020 cmp2-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp3-hkg1.steamserver.net udp
HK 103.28.54.102:27018 cmp3-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp1-tyo3.steamserver.net udp
JP 45.121.184.100:27018 cmp1-tyo3.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.135.105:80 e5.o.lencr.org tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.135.105:80 e6.o.lencr.org tcp
US 8.8.8.8:53 101.184.121.45.in-addr.arpa udp
US 8.8.8.8:53 101.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 102.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 100.184.121.45.in-addr.arpa udp
US 8.8.8.8:53 105.135.221.88.in-addr.arpa udp
JP 45.121.184.100:443 cmp1-tyo3.steamserver.net tcp
HK 103.28.54.101:443 cmp2-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp1-sgp1.steamserver.net udp
SG 103.10.124.4:27020 cmp1-sgp1.steamserver.net tcp
US 8.8.8.8:53 cmp2-sgp1.steamserver.net udp
SG 103.10.124.5:27020 cmp2-sgp1.steamserver.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 5.124.10.103.in-addr.arpa udp
US 8.8.8.8:53 4.124.10.103.in-addr.arpa udp
SG 103.10.124.5:443 cmp2-sgp1.steamserver.net tcp
US 8.8.8.8:53 cmp1-lax1.steamserver.net udp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 cmp1-sea1.steamserver.net udp
US 205.196.6.132:27018 cmp1-sea1.steamserver.net tcp
US 8.8.8.8:53 ext1-maa2.steamserver.net udp
IN 155.133.225.20:27030 ext1-maa2.steamserver.net tcp
US 8.8.8.8:53 69.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 132.6.196.205.in-addr.arpa udp
US 8.8.8.8:53 20.225.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-sea1.discovery.steamserver.net udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.143.195:443 r.bing.com tcp
US 8.8.8.8:53 webexinteract.com udp
GB 159.65.94.219:443 webexinteract.com tcp
GB 159.65.94.219:443 webexinteract.com tcp
US 8.8.8.8:53 219.94.65.159.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 webex-imimobile.nyc3.cdn.digitaloceanspaces.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 172.64.145.29:443 webex-imimobile.nyc3.cdn.digitaloceanspaces.com tcp
US 172.64.145.29:443 webex-imimobile.nyc3.cdn.digitaloceanspaces.com tcp
US 172.64.145.29:443 webex-imimobile.nyc3.cdn.digitaloceanspaces.com tcp
US 172.64.145.29:443 webex-imimobile.nyc3.cdn.digitaloceanspaces.com tcp
US 8.8.8.8:53 www.cisco.com udp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 29.145.64.172.in-addr.arpa udp
US 8.8.8.8:53 72.169.217.172.in-addr.arpa udp
GB 184.26.132.103:443 www.cisco.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 104.18.86.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 103.132.26.184.in-addr.arpa udp
US 8.8.8.8:53 42.86.18.104.in-addr.arpa udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 ciscoadmin-privacy.my.onetrust.com udp
US 172.64.155.119:443 ciscoadmin-privacy.my.onetrust.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 receive-smss.com udp
US 172.66.43.113:443 receive-smss.com tcp
US 172.66.43.113:443 receive-smss.com tcp
US 8.8.8.8:53 stackpath.bootstrapcdn.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
GB 172.217.16.234:443 ajax.googleapis.com tcp
GB 216.58.204.65:443 cdn.ampproject.org tcp
US 104.18.11.207:443 stackpath.bootstrapcdn.com tcp
US 8.8.8.8:53 113.43.66.172.in-addr.arpa udp
US 8.8.8.8:53 207.11.18.104.in-addr.arpa udp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
GB 142.250.179.227:443 www.google.co.uk tcp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 154.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 216.58.201.98:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 216.58.212.193:443 ep2.adtrafficquality.google tcp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 syndicatedsearch.goog udp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 216.58.212.193:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 193.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.187.225:443 tpc.googlesyndication.com tcp
GB 142.250.187.225:443 tpc.googlesyndication.com tcp
GB 216.58.201.98:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 225.187.250.142.in-addr.arpa udp
GB 172.217.16.234:443 ajax.googleapis.com udp
GB 216.58.204.65:443 cdn.ampproject.org udp
US 8.8.8.8:53 connect.facebook.net udp
DE 185.60.217.28:443 connect.facebook.net tcp
GB 216.58.201.98:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 28.217.60.185.in-addr.arpa udp
GB 142.250.187.225:443 tpc.googlesyndication.com udp
GB 64.233.167.84:443 accounts.google.com udp
US 8.8.8.8:443 dns.google udp
GB 216.58.212.227:443 tcp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 p2p-sea1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 2.22.99.85:443 api.steampowered.com tcp
US 8.8.8.8:53 ext2-waw1.steamserver.net udp
PL 155.133.230.50:443 ext2-waw1.steamserver.net tcp
PL 155.133.230.50:27032 ext2-waw1.steamserver.net tcp
PL 155.133.230.50:27035 ext2-waw1.steamserver.net tcp
US 8.8.8.8:53 cmp1-fra2.steamserver.net udp
US 155.133.229.4:27020 cmp1-fra2.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.135.105:80 e6.o.lencr.org tcp
US 8.8.8.8:53 cmp2-fra1.steamserver.net udp
DE 155.133.250.20:27024 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp2-fra2.steamserver.net udp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
US 155.133.229.20:27024 cmp2-fra2.steamserver.net tcp
US 8.8.8.8:53 cmp1-sto1.steamserver.net udp
SE 162.254.198.68:27018 cmp1-sto1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.135.115:80 e5.o.lencr.org tcp
US 8.8.8.8:53 50.230.133.155.in-addr.arpa udp
US 8.8.8.8:53 4.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 20.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 20.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 68.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
GB 216.58.212.227:443 udp
US 8.8.8.8:53 client-update.steamstatic.com udp
US 151.101.67.52:443 client-update.steamstatic.com tcp
US 8.8.8.8:53 r10.o.lencr.org udp
GB 88.221.135.115:80 r10.o.lencr.org tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
US 8.8.8.8:53 cmp2-lax1.steamserver.net udp
US 162.254.195.75:443 cmp2-lax1.steamserver.net tcp
US 162.254.195.69:27018 cmp1-lax1.steamserver.net tcp
US 162.254.195.75:27018 cmp2-lax1.steamserver.net tcp
US 205.196.6.132:443 cmp1-sea1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.135.106:80 e6.o.lencr.org tcp
US 8.8.8.8:53 cmp1-dfw1.steamserver.net udp
US 8.8.8.8:53 cmp2-sea1.steamserver.net udp
US 155.133.253.36:443 cmp1-dfw1.steamserver.net tcp
US 205.196.6.132:27018 cmp1-sea1.steamserver.net tcp
US 205.196.6.133:27018 cmp2-sea1.steamserver.net tcp
US 155.133.253.36:27018 cmp1-dfw1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.135.106:80 e5.o.lencr.org tcp
US 8.8.8.8:53 155.143.214.23.in-addr.arpa udp
US 8.8.8.8:53 75.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 106.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 36.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 133.6.196.205.in-addr.arpa udp
US 8.8.8.8:53 cmp2-dfw1.steamserver.net udp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 cmp2-ord1.steamserver.net udp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 8.8.8.8:53 cmp2-sto2.steamserver.net udp
SE 155.133.252.69:443 cmp2-sto2.steamserver.net tcp
US 155.133.229.20:27024 cmp2-fra2.steamserver.net tcp
US 8.8.8.8:53 p2p-sto1.discovery.steamserver.net udp
US 8.8.8.8:53 69.252.133.155.in-addr.arpa udp
US 8.8.8.8:53 52.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 75.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 p2p-sto1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 crash.steampowered.com udp
GB 2.22.99.85:443 api.steampowered.com tcp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 208.64.203.140:443 crash.steampowered.com tcp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 ext7-hkg1.steamserver.net udp
HK 103.28.54.173:27025 ext7-hkg1.steamserver.net tcp
HK 103.28.54.173:27019 ext7-hkg1.steamserver.net tcp
HK 103.28.54.102:443 cmp3-hkg1.steamserver.net tcp
SG 103.10.124.4:27020 cmp1-sgp1.steamserver.net tcp
SG 103.10.124.5:27020 cmp2-sgp1.steamserver.net tcp
SG 103.10.124.4:443 cmp1-sgp1.steamserver.net tcp
JP 45.121.184.100:27020 cmp1-tyo3.steamserver.net tcp
JP 45.121.184.100:27018 cmp1-tyo3.steamserver.net tcp
US 8.8.8.8:53 173.54.28.103.in-addr.arpa udp
JP 45.121.184.101:443 cmp2-tyo3.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 cmp1-atl3.steamserver.net udp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 162.254.199.165:443 cmp1-atl3.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.134.89:80 e6.o.lencr.org tcp
US 8.8.8.8:53 r11.o.lencr.org udp
GB 88.221.134.89:80 r11.o.lencr.org tcp
US 8.8.8.8:53 p2p-atl3.discovery.steamserver.net udp
US 8.8.8.8:53 165.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 140.203.64.208.in-addr.arpa udp
US 8.8.8.8:53 89.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
GB 95.101.143.195:443 www.bing.com tcp
US 8.8.8.8:53 p2p-atl3.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 2.22.99.85:443 api.steampowered.com tcp
US 8.8.8.8:53 ext2-lim1.steamserver.net udp
PE 155.133.244.50:27028 ext2-lim1.steamserver.net tcp
PE 155.133.244.50:27035 ext2-lim1.steamserver.net tcp
US 8.8.8.8:53 ext1-scl1.steamserver.net udp
CL 155.133.249.180:27031 ext1-scl1.steamserver.net tcp
CL 155.133.249.180:27021 ext1-scl1.steamserver.net tcp
US 8.8.8.8:53 ext1-lim1.steamserver.net udp
PE 155.133.244.34:443 ext1-lim1.steamserver.net tcp
US 8.8.8.8:53 ext1-eze1.steamserver.net udp
AR 155.133.255.100:27036 ext1-eze1.steamserver.net tcp
US 8.8.8.8:53 ext2-eze1.steamserver.net udp
AR 155.133.255.164:27037 ext2-eze1.steamserver.net tcp
US 8.8.8.8:53 ext2-gru1.steamserver.net udp
BR 155.133.227.50:27024 ext2-gru1.steamserver.net tcp
US 8.8.8.8:53 50.244.133.155.in-addr.arpa udp
US 8.8.8.8:53 180.249.133.155.in-addr.arpa udp
US 8.8.8.8:53 ext2-scl1.steamserver.net udp
CL 155.133.249.164:443 ext2-scl1.steamserver.net tcp
BR 155.133.227.50:27021 ext2-gru1.steamserver.net tcp
US 8.8.8.8:53 cmp2-atl3.steamserver.net udp
US 162.254.199.184:27018 cmp2-atl3.steamserver.net tcp
US 155.133.253.52:443 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.135.105:80 e6.o.lencr.org tcp
US 8.8.8.8:53 34.244.133.155.in-addr.arpa udp
US 8.8.8.8:53 100.255.133.155.in-addr.arpa udp
US 8.8.8.8:53 164.255.133.155.in-addr.arpa udp
US 8.8.8.8:53 50.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 164.249.133.155.in-addr.arpa udp
US 8.8.8.8:53 184.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 p2p-atl3.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 2.22.99.85:443 api.steampowered.com tcp
US 155.133.253.52:443 cmp2-dfw1.steamserver.net tcp
US 155.133.253.36:27018 cmp1-dfw1.steamserver.net tcp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 162.254.195.75:27018 cmp2-lax1.steamserver.net tcp
US 162.254.195.75:443 cmp2-lax1.steamserver.net tcp
US 162.254.195.69:27018 cmp1-lax1.steamserver.net tcp
US 205.196.6.133:443 cmp2-sea1.steamserver.net tcp
US 205.196.6.132:27018 cmp1-sea1.steamserver.net tcp
US 205.196.6.133:27018 cmp2-sea1.steamserver.net tcp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 8.8.8.8:53 ext1-par1.steamserver.net udp
FR 185.25.182.20:27037 ext1-par1.steamserver.net tcp
US 8.8.8.8:53 cmp1-ord1.steamserver.net udp
US 162.254.193.103:443 cmp1-ord1.steamserver.net tcp
GB 88.221.135.105:80 e6.o.lencr.org tcp
US 8.8.8.8:53 20.182.25.185.in-addr.arpa udp
US 8.8.8.8:53 103.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 p2p-par1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 p2p-par1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
US 8.8.8.8:53 cmp1-fra1.steamserver.net udp
DE 155.133.250.4:27019 cmp1-fra1.steamserver.net tcp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
US 155.133.229.20:27024 cmp2-fra2.steamserver.net tcp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.134.89:80 e6.o.lencr.org tcp
DE 155.133.250.4:443 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp1-ams1.steamserver.net udp
NL 155.133.248.42:443 cmp1-ams1.steamserver.net tcp
US 8.8.8.8:53 cmp2-ams1.steamserver.net udp
NL 155.133.248.43:27018 cmp2-ams1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.134.89:80 e5.o.lencr.org tcp
US 8.8.8.8:53 4.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 42.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 43.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
US 8.8.8.8:53 cmp1-vie1.steamserver.net udp
AT 146.66.155.84:443 cmp1-vie1.steamserver.net tcp
US 155.133.229.4:27020 cmp1-fra2.steamserver.net tcp
DE 155.133.250.20:27019 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp2-vie1.steamserver.net udp
AT 146.66.155.85:27018 cmp2-vie1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.134.89:80 e5.o.lencr.org tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 88.221.134.89:80 e6.o.lencr.org tcp
AT 146.66.155.84:27018 cmp1-vie1.steamserver.net tcp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 155.133.229.20:27024 cmp2-fra2.steamserver.net tcp
US 155.133.229.20:443 cmp2-fra2.steamserver.net tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 85.155.66.146.in-addr.arpa udp
US 8.8.8.8:53 84.155.66.146.in-addr.arpa udp
GB 88.221.135.26:443 www.bing.com tcp
US 8.8.8.8:53 26.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
PE 155.133.244.50:27019 ext2-lim1.steamserver.net tcp
PE 155.133.244.34:27036 ext1-lim1.steamserver.net tcp
CL 155.133.249.164:27030 ext2-scl1.steamserver.net tcp
CL 155.133.249.180:27032 ext1-scl1.steamserver.net tcp
PE 155.133.244.34:443 ext1-lim1.steamserver.net tcp
AR 155.133.255.164:27038 ext2-eze1.steamserver.net tcp
AR 155.133.255.100:27022 ext1-eze1.steamserver.net tcp
BR 155.133.227.50:27034 ext2-gru1.steamserver.net tcp
CL 155.133.249.180:443 ext1-scl1.steamserver.net tcp
US 8.8.8.8:53 ext1-gru1.steamserver.net udp
BR 155.133.227.34:27038 ext1-gru1.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 205.196.6.133:443 cmp2-sea1.steamserver.net tcp
US 8.8.8.8:53 p2p-sea1.discovery.steamserver.net udp
US 8.8.8.8:53 34.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-sea1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
PL 155.133.230.50:27023 ext2-waw1.steamserver.net tcp
PL 155.133.230.50:27037 ext2-waw1.steamserver.net tcp
US 8.8.8.8:53 ext1-waw1.steamserver.net udp
PL 155.133.230.34:443 ext1-waw1.steamserver.net tcp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 155.133.229.20:27020 cmp2-fra2.steamserver.net tcp
US 155.133.229.4:27024 cmp1-fra2.steamserver.net tcp
US 8.8.8.8:53 cmp1-sto2.steamserver.net udp
SE 155.133.252.68:27022 cmp1-sto2.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 88.221.135.105:80 e5.o.lencr.org tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 34.230.133.155.in-addr.arpa udp
US 8.8.8.8:53 68.252.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
US 155.133.229.20:27018 cmp2-fra2.steamserver.net tcp
DE 155.133.250.20:27019 cmp2-fra1.steamserver.net tcp
DE 155.133.250.20:27024 cmp2-fra1.steamserver.net tcp
US 155.133.229.20:27023 cmp2-fra2.steamserver.net tcp
SE 162.254.198.68:27019 cmp1-sto1.steamserver.net tcp
SE 162.254.198.69:27019 cmp2-sto1.steamserver.net tcp
DE 155.133.250.4:443 cmp1-fra1.steamserver.net tcp
SE 162.254.198.68:27022 cmp1-sto1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.18.190.80:80 e5.o.lencr.org tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 69.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 23.192.21.216:443 tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 104.19.230.21:443 udp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 8.8.8.8:53 216.21.192.23.in-addr.arpa udp
US 8.8.8.8:53 21.230.19.104.in-addr.arpa udp
US 104.19.229.21:443 udp
US 104.19.229.21:443 udp
US 8.8.8.8:53 21.229.19.104.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
AT 146.66.155.85:27018 cmp2-vie1.steamserver.net tcp
AT 146.66.155.84:443 cmp1-vie1.steamserver.net tcp
AT 146.66.155.84:27018 cmp1-vie1.steamserver.net tcp
US 155.133.229.4:27018 cmp1-fra2.steamserver.net tcp
DE 155.133.250.20:27023 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 95.100.195.166:443 www.bing.com tcp
US 8.8.8.8:53 166.195.100.95.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
US 95.100.195.166:443 th.bing.com tcp
US 95.100.195.148:443 r.bing.com tcp
US 95.100.195.148:443 r.bing.com tcp
US 95.100.195.166:443 th.bing.com tcp
US 8.8.8.8:53 148.195.100.95.in-addr.arpa udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 8.8.8.8:53 fpt6.microsoft.com udp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 171.30.167.52.in-addr.arpa udp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 95.100.195.166:443 th.bing.com tcp
US 95.100.195.166:443 th.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 95.100.195.167:443 th.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 8.8.8.8:53 www.youtube.com udp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 167.195.100.95.in-addr.arpa udp
US 8.8.8.8:53 skribbl.io udp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
US 8.8.8.8:53 api.adinplay.com udp
US 104.26.2.232:443 api.adinplay.com tcp
US 8.8.8.8:53 117.68.77.51.in-addr.arpa udp
US 8.8.8.8:53 232.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 hb-vntsm-com.global.ssl.fastly.net udp
US 8.8.8.8:53 imasdk.googleapis.com udp
US 8.8.8.8:53 hb.vntsm.io udp
US 151.101.193.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
GB 216.58.204.74:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 172.67.36.131:443 hb.vntsm.io tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
US 8.8.8.8:53 194.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 131.36.67.172.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
GB 216.58.201.97:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
US 8.8.8.8:53 oa.openxcdn.net udp
US 8.8.8.8:53 invstatic101.creativecdn.com udp
US 8.8.8.8:53 cdn.id5-sync.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 cdn.prod.uidapi.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
US 34.102.146.192:443 oa.openxcdn.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
GB 18.165.154.87:443 cdn.prod.uidapi.com tcp
GB 13.224.81.21:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 216.58.212.193:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
FR 3.164.163.87:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 esp.rtbhouse.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 192.146.102.34.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 86.52.22.104.in-addr.arpa udp
US 8.8.8.8:53 87.70.96.34.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 87.154.165.18.in-addr.arpa udp
US 8.8.8.8:53 21.81.224.13.in-addr.arpa udp
US 35.190.39.111:443 esp.rtbhouse.com tcp
GB 172.217.16.228:443 www.google.com udp
DE 141.95.98.65:443 id5-sync.com tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.72.67.43:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
GB 142.250.187.225:443 tpc.googlesyndication.com udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 111.39.190.35.in-addr.arpa udp
US 8.8.8.8:53 65.98.95.141.in-addr.arpa udp
US 8.8.8.8:53 36.10.230.54.in-addr.arpa udp
US 8.8.8.8:53 43.67.72.54.in-addr.arpa udp
US 8.8.8.8:53 6.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 ag.gbc.criteo.com udp
US 8.8.8.8:53 dnacdn.net udp
US 8.8.8.8:53 gem.gbc.criteo.com udp
NL 185.235.87.125:443 gem.gbc.criteo.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
NL 185.235.87.112:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 13.7.250.178.in-addr.arpa udp
US 8.8.8.8:53 112.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 125.87.235.185.in-addr.arpa udp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 2.19.117.138:443 aefd.nelreports.net tcp
US 8.8.8.8:53 138.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 server3.skribbl.io udp
PL 51.77.56.131:443 server3.skribbl.io tcp
US 8.8.8.8:53 131.56.77.51.in-addr.arpa udp
US 8.8.8.8:53 dclk-match.dotomi.com udp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 www.temu.com udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 s.uuidksinc.net udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
NL 89.207.16.204:443 dclk-match.dotomi.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 31.220.27.155:443 s.uuidksinc.net tcp
IE 20.157.217.65:443 www.temu.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 8.8.8.8:53 ads.travelaudience.com udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 a.rfihub.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
NL 185.184.8.90:443 creativecdn.com tcp
US 44.219.69.224:443 sync.srv.stackadapt.com tcp
IE 52.16.54.39:443 pr-bh.ybp.yahoo.com tcp
US 35.190.0.66:443 ads.travelaudience.com tcp
NL 193.0.160.130:443 a.rfihub.com tcp
US 8.8.8.8:53 r.turn.com udp
NL 35.214.136.108:443 x.bidswitch.net udp
US 8.8.8.8:53 49.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 217.193.197.15.in-addr.arpa udp
US 8.8.8.8:53 204.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 155.27.220.31.in-addr.arpa udp
US 8.8.8.8:53 65.217.157.20.in-addr.arpa udp
US 8.8.8.8:53 108.136.214.35.in-addr.arpa udp
US 8.8.8.8:53 66.0.190.35.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 39.54.16.52.in-addr.arpa udp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 224.69.219.44.in-addr.arpa udp
GB 2.19.117.138:443 aefd.nelreports.net udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 skribbl.io udp
US 8.8.8.8:53 edge.venatusmedia.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
BE 34.34.170.154:443 edge.venatusmedia.com tcp
GB 142.250.200.2:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 154.170.34.34.in-addr.arpa udp
US 216.239.32.36:443 region1.google-analytics.com udp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.googletagservices.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com udp
GB 142.250.187.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 s0.2mdn.net udp
US 8.8.8.8:53 choices.trustarc.com udp
FR 3.165.136.53:443 choices.trustarc.com tcp
GB 172.217.169.70:443 s0.2mdn.net tcp
FR 3.165.136.53:443 choices.trustarc.com tcp
US 8.8.8.8:53 live.rezync.com udp
US 3.165.148.87:443 live.rezync.com tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 8.8.8.8:53 cms.quantserve.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 dis.criteo.com udp
US 3.165.148.87:443 live.rezync.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 um.simpli.fi udp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
GB 172.217.169.70:443 s0.2mdn.net udp
US 8.8.8.8:53 70.169.217.172.in-addr.arpa udp
US 104.18.37.193:443 a.tribalfusion.com tcp
NL 35.204.74.118:443 um.simpli.fi tcp
DE 91.228.74.166:443 cms.quantserve.com tcp
US 8.8.8.8:53 53.136.165.3.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 ads.servenobid.com udp
US 8.8.8.8:53 191.32.42.70.in-addr.arpa udp
NL 143.244.197.139:443 ads.servenobid.com tcp
US 8.8.8.8:53 87.148.165.3.in-addr.arpa udp
US 8.8.8.8:53 193.37.18.104.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 166.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 shb.richaudience.com udp
US 8.8.8.8:53 grid.bidswitch.net udp
US 8.8.8.8:53 targeting.unrulymedia.com udp
US 8.8.8.8:53 server.cpmstar.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 prebid-server.rubiconproject.com udp
US 8.8.8.8:53 c.amazon-adsystem.com udp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 178.250.1.56:443 grid.bidswitch.net tcp
FR 18.244.28.121:443 hb.yellowblue.io tcp
DE 136.243.173.152:443 shb.richaudience.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
FR 18.245.194.122:443 c.amazon-adsystem.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 104.18.26.193:443 htlb.casalemedia.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 131.153.168.132:443 server.cpmstar.com tcp
US 131.153.168.132:443 server.cpmstar.com tcp
NL 46.228.174.115:443 targeting.unrulymedia.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 139.197.244.143.in-addr.arpa udp
GB 142.250.200.2:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 193.26.18.104.in-addr.arpa udp
US 8.8.8.8:53 150.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 121.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 56.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 122.194.245.18.in-addr.arpa udp
US 8.8.8.8:53 215.173.252.37.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 152.173.243.136.in-addr.arpa udp
US 8.8.8.8:53 132.168.153.131.in-addr.arpa udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
PL 51.77.56.131:443 server3.skribbl.io tcp
FR 18.245.199.156:443 aax.amazon-adsystem.com tcp
FR 52.84.174.6:443 config.aps.amazon-adsystem.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
US 8.8.8.8:53 156.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 6.174.84.52.in-addr.arpa udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 idsync.rlcdn.com udp
US 35.244.174.68:443 idsync.rlcdn.com tcp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 138.126.95.52.in-addr.arpa udp
GB 216.58.212.193:443 ep2.adtrafficquality.google udp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 pm.w55c.net udp
US 8.8.8.8:53 dclk-match.dotomi.com udp
US 8.8.8.8:53 c1.adform.net udp
IE 34.249.168.140:443 pm.w55c.net tcp
DK 37.157.2.233:443 c1.adform.net tcp
NL 64.158.223.140:443 dclk-match.dotomi.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 8.8.8.8:53 140.168.249.34.in-addr.arpa udp
US 8.8.8.8:53 233.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 140.223.158.64.in-addr.arpa udp
GB 216.58.204.66:443 ade.googlesyndication.com tcp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 8.8.8.8:53 acdn.adnxs.com udp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 public.servenobid.com udp
US 8.8.8.8:53 sync.richaudience.com udp
US 151.101.193.108:443 acdn.adnxs.com tcp
US 34.98.64.218:443 adinplay-d.openx.net tcp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
GB 3.162.20.75:443 public.servenobid.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
US 104.18.24.18:443 js-sec.indexww.com tcp
US 34.98.64.218:443 adinplay-d.openx.net udp
DE 37.252.173.215:443 ib.adnxs.com tcp
US 8.8.8.8:53 token.rubiconproject.com udp
US 8.8.8.8:53 g2.gumgum.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
IE 52.50.208.199:443 g2.gumgum.com tcp
US 8.8.8.8:53 pixel.33across.com udp
US 67.202.105.22:443 pixel.33across.com tcp
US 8.8.8.8:53 onetag-sys.com udp
DE 51.89.9.251:443 onetag-sys.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
FR 91.134.110.133:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 54.81.74.111:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 108.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 192.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 18.24.18.104.in-addr.arpa udp
US 8.8.8.8:53 75.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 28.233.55.162.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 199.208.50.52.in-addr.arpa udp
US 8.8.8.8:53 251.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 22.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 133.110.134.91.in-addr.arpa udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 sync.go.sonobi.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 ssp.disqus.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 hbx.media.net udp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
IE 52.49.33.63:443 ce.lijit.com tcp
IE 34.252.246.23:443 ap.lijit.com tcp
US 69.166.1.67:443 sync.go.sonobi.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 18.213.144.15:443 ssp.disqus.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
GB 2.18.108.20:443 hbx.media.net tcp
FR 163.5.194.31:443 prebid.a-mo.net tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 15.197.193.217:443 match.adsrvr.org tcp
JP 124.146.153.167:443 tg.socdm.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
NL 185.89.210.244:443 secure.adnxs.com tcp
JP 124.146.153.167:443 tg.socdm.com tcp
US 8.8.8.8:53 us-u.openx.net udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
IE 52.16.54.39:443 pr-bh.ybp.yahoo.com tcp
US 8.8.8.8:53 sync.ipredictive.com udp
US 8.8.8.8:53 match.deepintent.com udp
US 8.8.8.8:53 bh.contextweb.com udp
US 54.147.116.58:443 sync.srv.stackadapt.com tcp
US 3.224.216.51:443 sync.ipredictive.com tcp
US 169.197.150.7:443 match.deepintent.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 usersync.gumgum.com udp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
DE 51.89.9.251:443 onetag-sys.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
US 8.8.8.8:53 odr.mookie1.com udp
US 70.42.32.191:443 b1sync.zemanta.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
NL 89.149.192.76:443 ssbsync-global.smartadserver.com tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
NL 154.57.158.115:443 ads.stickyadstv.com tcp
US 34.160.236.64:443 odr.mookie1.com tcp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 249.129.214.23.in-addr.arpa udp
US 8.8.8.8:53 111.74.81.54.in-addr.arpa udp
US 8.8.8.8:53 63.33.49.52.in-addr.arpa udp
US 8.8.8.8:53 23.246.252.34.in-addr.arpa udp
US 8.8.8.8:53 20.108.18.2.in-addr.arpa udp
US 8.8.8.8:53 31.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 174.30.197.18.in-addr.arpa udp
US 8.8.8.8:53 88.199.214.35.in-addr.arpa udp
US 8.8.8.8:53 15.144.213.18.in-addr.arpa udp
US 8.8.8.8:53 67.1.166.69.in-addr.arpa udp
US 8.8.8.8:53 244.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 167.153.146.124.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 58.116.147.54.in-addr.arpa udp
US 8.8.8.8:53 196.205.247.34.in-addr.arpa udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 equativ-match.dotomi.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
NL 89.207.16.201:443 equativ-match.dotomi.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
FR 5.196.111.73:443 rtb-csync.smartadserver.com tcp
US 80.77.87.166:443 cs.admanmedia.com tcp
US 8.8.8.8:53 sync.adkernel.com udp
US 8.8.8.8:53 rtb.gumgum.com udp
NL 103.67.200.72:443 sync.adkernel.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 98.82.157.137:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 51.216.224.3.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 7.150.197.169.in-addr.arpa udp
US 8.8.8.8:53 76.192.149.89.in-addr.arpa udp
US 8.8.8.8:53 115.158.57.154.in-addr.arpa udp
US 8.8.8.8:53 64.236.160.34.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 73.111.196.5.in-addr.arpa udp
US 8.8.8.8:53 72.200.67.103.in-addr.arpa udp
US 8.8.8.8:53 137.157.82.98.in-addr.arpa udp
GB 216.58.204.66:443 ade.googlesyndication.com udp
GB 2.19.117.143:443 aefd.nelreports.net udp
US 8.8.8.8:53 143.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 166.87.77.80.in-addr.arpa udp
GB 216.58.204.66:443 ade.googlesyndication.com udp
GB 88.221.135.11:443 www.bing.com tcp
US 8.8.8.8:53 11.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 skribbl.io udp
GB 142.250.200.2:443 googleads4.g.doubleclick.net udp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
US 216.239.32.36:443 region1.google-analytics.com udp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
DE 51.77.68.117:443 skribbl.io tcp
GB 216.58.204.66:443 ade.googlesyndication.com udp
GB 142.250.200.34:443 www.googletagservices.com udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.34:443 www.googletagservices.com udp
GB 172.217.16.228:443 www.google.com udp
GB 142.250.187.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 pm.w55c.net udp
US 8.8.8.8:53 gcm.ctnsnet.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 35.186.193.173:443 gcm.ctnsnet.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
IE 34.249.168.140:443 pm.w55c.net tcp
IE 52.16.53.198:443 match.prod.bidr.io tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 70.42.32.191:443 b1sync.zemanta.com tcp
GB 172.217.169.70:443 s0.2mdn.net udp
US 70.42.32.191:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 198.53.16.52.in-addr.arpa udp
US 8.8.8.8:53 idsync.rlcdn.com udp
US 35.244.174.68:443 idsync.rlcdn.com udp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
GB 216.58.212.193:443 ep2.adtrafficquality.google udp
GB 142.250.187.194:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 95.101.143.219:443 th.bing.com tcp
GB 95.101.143.195:443 th.bing.com tcp
GB 95.101.143.195:443 th.bing.com tcp
GB 95.101.143.219:443 th.bing.com tcp
US 8.8.8.8:53 219.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 eaglercraft.com udp
US 172.67.174.233:443 eaglercraft.com tcp
US 172.67.174.233:443 eaglercraft.com tcp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 cmp.setupcmp.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
GB 142.250.200.14:443 translate.google.com tcp
US 8.8.8.8:53 233.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 104.26.4.6:443 cmp.setupcmp.com tcp
US 8.8.8.8:53 translate.googleapis.com udp
US 8.8.8.8:53 hit-counter-26c68-default-rtdb.firebaseio.com udp
US 8.8.8.8:53 api.countapi.xyz udp
GB 142.250.179.234:443 translate.googleapis.com tcp
US 34.120.160.131:443 hit-counter-26c68-default-rtdb.firebaseio.com tcp
US 161.35.138.20:443 api.countapi.xyz tcp
US 8.8.8.8:53 6.4.26.104.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 131.160.120.34.in-addr.arpa udp
US 8.8.8.8:53 20.138.35.161.in-addr.arpa udp
US 8.8.8.8:53 translate-pa.googleapis.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 ums.acuityplatform.com udp
US 8.8.8.8:53 gtrace.mediago.io udp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
US 8.8.8.8:53 syndicatedsearch.goog udp
US 8.8.8.8:53 partner.googleadservices.com udp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 79.122.59.154.in-addr.arpa udp
US 8.8.8.8:53 80.168.214.35.in-addr.arpa udp
US 8.8.8.8:53 dclk-match.dotomi.com udp
NL 63.215.202.137:443 dclk-match.dotomi.com tcp
US 8.8.8.8:53 api.api-ninjas.com udp
FR 3.165.136.43:443 api.api-ninjas.com tcp
GB 142.250.179.234:443 translate-pa.googleapis.com udp
US 8.8.8.8:53 ipfs.eth.aragon.network udp
DE 146.190.204.125:443 ipfs.eth.aragon.network tcp
US 8.8.8.8:53 137.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 43.136.165.3.in-addr.arpa udp
US 8.8.8.8:53 125.204.190.146.in-addr.arpa udp
US 8.8.8.8:53 storry.tv udp
US 104.21.8.20:443 storry.tv tcp
US 8.8.8.8:53 bafybeihc7ztn3asyiwm2ypk56zy6crs22wa7z4ix4f2rhnhxg5uq7vmige.ipfs.nftstorage.link udp
US 172.64.146.216:443 bafybeihc7ztn3asyiwm2ypk56zy6crs22wa7z4ix4f2rhnhxg5uq7vmige.ipfs.nftstorage.link tcp
US 8.8.8.8:53 20.8.21.104.in-addr.arpa udp
US 8.8.8.8:53 gateway.ipfs.io udp
US 209.94.90.1:443 gateway.ipfs.io tcp
US 8.8.8.8:53 216.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 bafybeihc7ztn3asyiwm2ypk56zy6crs22wa7z4ix4f2rhnhxg5uq7vmige.ipfs.4everland.io udp
US 172.67.176.15:443 bafybeihc7ztn3asyiwm2ypk56zy6crs22wa7z4ix4f2rhnhxg5uq7vmige.ipfs.4everland.io tcp
US 8.8.8.8:53 1.90.94.209.in-addr.arpa udp
US 8.8.8.8:53 15.176.67.172.in-addr.arpa udp
DE 146.190.204.125:443 ipfs.eth.aragon.network tcp
US 8.8.8.8:53 relay.deev.is udp
US 104.26.7.5:443 relay.deev.is tcp
US 8.8.8.8:53 5.7.26.104.in-addr.arpa udp
US 8.8.8.8:53 relay.lax1dude.net udp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 8.8.8.8:53 relay.shhnowisnottheti.me udp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 8.8.8.8:53 99.196.67.172.in-addr.arpa udp
US 8.8.8.8:53 132.119.213.129.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 mc.arch.lol udp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 104.26.15.224:443 mc.arch.lol tcp
US 8.8.8.8:53 224.15.26.104.in-addr.arpa udp
US 104.26.15.224:443 mc.arch.lol tcp
US 104.26.15.224:443 mc.arch.lol tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 104.26.7.5:443 relay.deev.is tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 2.19.117.143:443 aefd.nelreports.net udp
US 104.26.7.5:443 relay.deev.is tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 104.26.7.5:443 relay.deev.is tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
US 104.26.7.5:443 relay.deev.is tcp
US 172.67.196.99:443 relay.lax1dude.net tcp
US 129.213.119.132:443 relay.shhnowisnottheti.me tcp
GB 95.101.143.193:443 www.bing.com tcp
US 8.8.8.8:53 193.143.101.95.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 5433eab10c6b5c6d55b7cbd302426a39
SHA1 c5b1604b3350dab290d081eecd5389a895c58de5
SHA256 23dbf7014e99e93af5f2760f18ee1370274f06a453145c8d539b66d798dad131
SHA512 207b40d6bec65ab147f963a5f42263ae5bf39857987b439a4fa1647bf9b40e99cdc43ff68b7e2463aa9a948284126ac3c9c7af8350c91134b36d8b1a9c61fd34

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD

MD5 90be2701c8112bebc6bd58a7de19846e
SHA1 a95be407036982392e2e684fb9ff6602ecad6f1e
SHA256 644fbcdc20086e16d57f31c5bad98be68d02b1c061938d2f5f91cbe88c871fbf
SHA512 d618b473b68b48d746c912ac5fc06c73b047bd35a44a6efc7a859fe1162d68015cf69da41a5db504dcbc4928e360c095b32a3b7792fcc6a38072e1ebd12e7cbe

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 987a07b978cfe12e4ce45e513ef86619
SHA1 22eec9a9b2e83ad33bedc59e3205f86590b7d40c
SHA256 f1a4a978ce1c4731df1594043135cf58d084fdf129dd1c8e4507c9e06eac5ea8
SHA512 39b86540e4d35c84609ef66537b5aa02058e3d4293f902127c7d4eac8ffc65920cb5c69a77552fc085687eed66e38367f83c177046d0ecb8e6d135463cc142aa

C:\Users\Admin\AppData\Local\Temp\wmsetup.log

MD5 0e06cfe0ee5ff9eeb1c93c7b5fa9b4c1
SHA1 75d8cae152af01f3785449f5de71d7cafb52cfc4
SHA256 7eaa71271a0e93fca50ef39c57028e169ade1d12d421676556cd9cbed47f4a00
SHA512 8921e372477a529ed9bac0d54e6e441d33e0bf57a7bb5e9dca6e931ba73fc05f06be40d8d4b76fd94692aa9f1aa9a4aa4b26daea9c3e14487d723963241671d6

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

memory/1516-35-0x0000000004C50000-0x0000000004C60000-memory.dmp

memory/1516-37-0x0000000004C50000-0x0000000004C60000-memory.dmp

memory/1516-38-0x0000000004C50000-0x0000000004C60000-memory.dmp

memory/1516-36-0x0000000004C50000-0x0000000004C60000-memory.dmp

memory/1516-40-0x0000000004C50000-0x0000000004C60000-memory.dmp

memory/1516-39-0x0000000004C50000-0x0000000004C60000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 31572d5cef27f58e5928a101839c2c37
SHA1 a2091cda550c2950f49699937a2c0c16fabe0267
SHA256 dec7c300fe435481df27909a552b541a6065cf4ab0635b01d44653ad518360ce
SHA512 eb40a2158ea8272804a3bff4f48c263d0cb6925040c96768c2c820e3e33cf7eff300d2af41f3d14f4ae1a781c564064a5760fb4e36cda0e1805b660a20dbe8ce

C:\Users\Admin\AppData\Local\Microsoft\Media Player\LocalMLS_3.wmdb

MD5 5cffb97d94b93d901505d9a6d642670e
SHA1 b1cf9093b08b6c073c3091cbaacdff9b6b8fd310
SHA256 14009a8fd1e1b3105e28d52b3e92982514c40149372393926ba7a79233509d53
SHA512 b6daa07813c6bf88f9befc339c9a8bcfca6e8f9fefb6baa2c42c921d3fb04e03e59c6acdee2066afd5af65b080c55388759c15c01405c8e1fa6605302304eb8e

\??\pipe\crashpad_5092_GJNVEGLAZPYCKYKG

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/1516-79-0x00000000050A0000-0x00000000050B0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\scoped_dir5092_1353860348\0a026ee6-febe-4a11-8208-ab3f950a1fad.tmp

MD5 da75bb05d10acc967eecaac040d3d733
SHA1 95c08e067df713af8992db113f7e9aec84f17181
SHA256 33ae9b8f06dc777bb1a65a6ba6c3f2a01b25cd1afc291426b46d1df27ea6e7e2
SHA512 56533de53872f023809a20d1ea8532cdc2260d40b05c5a7012c8e61576ff092f006a197f759c92c6b8c429eeec4bb542073b491ddcfd5b22cd4ecbe1a8a7c6ef

C:\Users\Admin\AppData\Local\Temp\scoped_dir5092_1353860348\CRX_INSTALL\_locales\en_CA\messages.json

MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\dasherSettingSchema.json

MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\_locales\en_CA\messages.json

MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 06cd8559e9cd971bd1e47ef667f60d31
SHA1 64a62736ce146733fe0109a84c667e99c14cf872
SHA256 371859246527b35ca8eba465bce8007e0d1fc7de73af31cc6bf62f534165c225
SHA512 3f1a75b920ccf7f030af20e826fea9c676ee7725ef5228ece527cc69a96cdaff4c22f2d0b225a1c0a6ecd4f73ce51d29c8347f05d5c6e1078f911de116e21179

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 fc2608b8092b0957ebf1513fbd786053
SHA1 c324edc99450eaa6df583437b7725c5b1814fdb1
SHA256 fa55b03704bd5681e7641a7cb9380ce21361ccd55cb3dc834b24ea397e8e4bb6
SHA512 b0c00350b309e91eddb5e54ecbb60608dc3ce28725c7ce7ec20c38fd6ac9fa1d8f8128d4f5f2f06f2545452115b36932a29e5ec9eab3bfb1b841edbef5e7096b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c55f4c1f1ee1c607f4e2f43430b92858
SHA1 5736bb8d3580c84d46a17dcc5c5c68e2fae6af32
SHA256 605383db7199d9a6bd1a14c05a49d340d12d3b3d475e2769abee3e0772cedaf1
SHA512 0770d1aa796b698fc198fceaff0d26bce40967197079d52fdbe1fcb6eb77e1e670d4d6bec841ff1f47c0280123f9459cd8c1548a586852b8e09b8a45ecc7f2be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

MD5 e579aca9a74ae76669750d8879e16bf3
SHA1 0b8f462b46ec2b2dbaa728bea79d611411bae752
SHA256 6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf
SHA512 df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5248bb3eb0525659d6f695e752f52a7e
SHA1 384bbcab1402bda3ce48ca393968749f753d3b07
SHA256 5114144a3f474ef5e3f16d466a65392ab3aad99f4f55456aae40cbed88aad2f2
SHA512 010edc3335477ee671acf47ee4ab51cb7cdb68cbd8e4da241c352d3078c43b188b6c87b346c4acd828d776b73b4d419ffc979ea24e4a477d3fd8814e8fbb5ac9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 bedb37ef7a2d3b7dbdc56a0fb9f8b357
SHA1 a60e7dfc8482349bec5322c0b9bf3b686ae1088f
SHA256 6ef31942d1b3c0bd53d991bc88e7b70056df1890194be31e8b3b81a97c278560
SHA512 d31e763ab5fea500c906cba03eae111ca00207a50e0ebc48217736b3ae5c5865c1e51d2a6ee55498bed4fe1fa7c4a275fdd47d0ebb26eb584e87868d49ab642a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 25dc4b722c02a06be1cb62942b08fa51
SHA1 64f1f4e0e0da3bcaf107929c70f3be95a707f5cd
SHA256 d9748a64aad4d7037a8b64bcc4c41fc6a0daa4d6d4ae32a23f9475a2140b5a72
SHA512 e1d896e6b3f834e9f9e0dca1cbcf6c8fffd88d799bf94169dda1d3db22ef42f7051c68cf25a7db1fb9899e8cf5f68eac8abc0cd853f3bfa9fd79e3e5c1b0d0c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 0e710c4d623bcf0ce3f9787754faca63
SHA1 687fc50a6b3aad839a6c6b3e132a49e35d842323
SHA256 8fd69129c3d3b40899546ff7ec090edacf2c9388043d8082cab038dee223f895
SHA512 59db5995f6c936d2c5839d26f4b72848caa33e6c09ca919eaeb7ade041cdb0e16ea6b810e6c6c1198511c384a59cbdd36f0e69fb8694ff6903efcb80a222af19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 64e90a1b0f623a126d7305ad23bf1766
SHA1 7d2cab1f2f333bcd05cb0bf08ac9c2742e2b7151
SHA256 494f25c82e1bb30650957bbbfd4ac59e8868b2a447a91bf2ff96097da429ffc9
SHA512 6963fc3501acb152086e3ad2d884d512a579c758ddd74e2cc13b3654be95076e4a87f63e69908f5254238cfd148e43323f67d9c1cc65b2262323615c499ca177

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 9daaafdc765459bcd4fac3a2d571d816
SHA1 5ab2f4c76d4e2664a03c0025f540304d35081ee9
SHA256 918a376908e98cdce44e5f0c89c5809efbe2f44d4975d8672c090033732b7290
SHA512 be3cf53b2e07bbb9d2a72f94053feff7141d00bbb813554d427eeeeda8d59975e466104b75ea8724b76174ffb626c0e65a93eab50cebdcd24f7ef4bf3987882b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 36988ca14952e1848e81a959880ea217
SHA1 a0482ef725657760502c2d1a5abe0bb37aebaadb
SHA256 d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6
SHA512 d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b36a943-b7c0-4751-aa7b-4516193ae8c6.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 fab8d8d865e33fe195732aa7dcb91c30
SHA1 2637e832f38acc70af3e511f5eba80fbd7461f2c
SHA256 1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea
SHA512 39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1dd7d4da61573ac47e4d74c5b5508150
SHA1 45861e979504035afd5d907ea3900d045a318692
SHA256 3a319ec301fcdb24a5e4d07637e522ace1f3e1c195edb6a90d0ae0a1d1602665
SHA512 e5fcc03df088d83428ba4c5655a700e0d75265196b8fb9a4ac3d6eb83943f943316a8d9f6b05241a376863016d2e83380169e28a4d501ac645ef6573adb08a14

memory/1516-679-0x0000000004C50000-0x0000000004C60000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8a1a08cf98f587160275fa7144d992c2
SHA1 6cd25724e701a32d432766559eacc16cfaad90a9
SHA256 2691f4a33b0fb3dbacff334a761d629b15fe65827d416abaa11d16a0cdb0dab5
SHA512 45b087db8721c2f23e23193b11416582ee1f029cfa80d2cb5d0673a9bee68d78593057ae593a8bcf2adcd632fbf0899097eb706289ebb961c6592adbb2143417

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 89864500b7280110959c9a85ce2a152a
SHA1 9d7f9a5e74f9b971b851cd54f73d48d05b2ae2b3
SHA256 cc01b9d4fbb330ad0c489399d0ca1e43c5be620c81f3fcdc06ceebbb13029cc4
SHA512 cfb89ac2140a0f2c68686b667f5b7e3b1db8b4fb02bb639496d7f9b07474aa694ccd9118af40bb0da7dbc3a5a198547bbef8ead54873a206b6c3d181e34eac4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c8bb30e8100687d93d3272d3acc82cdc
SHA1 4eb090b67fb7913e1ce2a2f590b4df9412b3d028
SHA256 78e3320030a6f37d3c8930906b1bdf1427743114ac06611b55aad02c5439af89
SHA512 cf047e733a6f9d70b5b9c4694a16bb1f852e097f1968639eda8ac94dd067926fa245a4124cba6fd674e6e8bccb03329c67b861cc487e6221de1322615644e507

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2d111d6eeb5d77fc157bab9d4f9f9df4
SHA1 9b73d87dba2be2b8c75e40f8ba302f2cc6f87e04
SHA256 24da407f654c83a72f3a2f11284056fe0045e3e10eaff9e0ba797d1c2b66f1d9
SHA512 5bdd5523148df8440f4915723ee65d12b8582c456ac829650881e436e35a3016f0171608d197919f9cd6148e19337a4929ce6e39b769bd6e46edd0e9f7458519

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c111cfa70ec59b3330da87082d628e15
SHA1 3faee50a0b45f9dfebfaaefcab282a4fed3447e7
SHA256 40705869ee74de6ff8c0341eaa1e206e335b0bf64d94d5fce6e95651aefc957d
SHA512 abba109d0537521b9790878c96e8431311833a8ccb576bacef6e11b6d11300cf3b10edd56c0a7ebdcb2897bd6c15365d35422cc1138e87eee9c7f55449a5f049

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0db2770f-62ce-411f-94df-52490bf34ba1.tmp

MD5 d630eb5c5ad9094438d9f901642088bf
SHA1 ce192e4f949f3f67f2f0ada2507f7195594edc84
SHA256 835b2844411f7b611bb9997e92f863c4896a1d3c0544f9a8c310da4aef7f3e27
SHA512 ef90adf6b72f7b3142f4533eb741b5edaa442f18fb99eb5f47f5a98f170941f8ea1dabb0d1547eba93158be3205e9da687bffa534feb650b014fcba729e56fb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 904a003eced045c31016d63bea6681a5
SHA1 4ccbdfb1f9cf3ed2690488412517ab8807773aad
SHA256 663c0fefd2524f0a584961d92968967be256ce74b1e018f681936df38f0c5827
SHA512 2118bc813baf9471c66fe717fc92c761a668c4ced1422b20805d6004bab8c745d07070d971bf8da64f178d2962296d08ecf23867442f710bb7bc02f705b514c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 f3fb1f9b41e598871e2c9be1c78b798d
SHA1 04c8abcf24d7a5f78e8155c4df10d73237a70f3b
SHA256 6c7aadcb0c80198a35aae3c8d3b79f1754bea35a4c6397060b7c2ea9a50037c4
SHA512 7e0aec2ba2f59a9745f54830026926a9a8bc93fbe2768b14c993bf05b9e7785e8f7b5ccf005827192c67a94195c1376fe857ee8161bc4f2c6f5c0d4441d8d58a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 7a5067ea832ab80a71befb7372a8d428
SHA1 030da8a1dadfca6933f5d26a9aeb5afc151179ab
SHA256 ccc46a3b909edaa17516a90115a359689f52c1562f4faa28b2ed42e2503d51ff
SHA512 a20743feee180d4ef67c2a5b2d8034efdf6516c0b6193aeff5125d0fa77573c242e973f49da830180d8374e5457238b7758b0885bcac9ae3b936ee7990da3a27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 410ab6ae2d996911ed7d72f4b37a9999
SHA1 2c5ae1c8e9ebbcf54920256e83fe9c0cdb0f91e7
SHA256 f2f6ebf679e947a522dfc6cccdf60ee330dfb4dd2fb8727d93aa276d8470f3d7
SHA512 58859435e2772a78c30c91d88cfc403f4f41f4871c25c1ee50a38ee915c851d08c47ffa091676d91126301503b9ab0ae835972d909e687c52cbff0a3a8dc776a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 656ba77ec9ba5171f69bc99567893fa0
SHA1 74088ef732c17913f9ae22ffa5b84fb267c7849a
SHA256 5d625791f85e293ae3b830699c25abba284df52dd38e8f24a94e2626c0dbd685
SHA512 bf9eb78385709aef045c42b19db8af3fdf43e8989711b9b7053f4139f724bc7edf6edf921daa9c53c81eff107b41a4498b6a49eea543d15458cd7a6aad6f5dfb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a9f6ef317f124fb96d8f9d94bd8739ca
SHA1 e76f4714ef4923df7716bd2e73a36dcf007cc75e
SHA256 f45023502d51dd1fefc8ec291623302d706aae449bf4a50973eb5366e0be60fc
SHA512 a1d9c919da705bb13cb003c2406c38e691b88c00c3d4bef88fcc05ff45982650f00ea7a813e53898fe7629aadc71dc88188aa274dcbf6d08d2b56f5aa6f84d7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe598ce4.TMP

MD5 edebf6585a0675182a19ce6a069475d8
SHA1 f327c341c4c6694507c959b639fc8586ac972165
SHA256 93656511cb653586905fc2a16c9298d390903c0eab0e783885726e64ec97b1be
SHA512 f5ab3e300cb8fd603fc9baaea7324ffd84ee3f1abecebce5f03096adda0a0024e617ebe410e886e5ca0c685947410b437d028467325555ddd450d2e36885c630

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a791.TMP

MD5 da98503a1d321b654254c3c7e6c640c2
SHA1 d360b387ef52b4177abb8452c80ce0e01b4ce4cf
SHA256 85c3e864ece36b5811735668ee370ad9048cca1c66be6550679b24caeae9fe1d
SHA512 dfc05d9a057444337852daa95c265240974212c15423ccd3c7fed9e9995a9f59b547bc671f7211a35ed86f90649cd2ce32905399cb58fb15f47d31d593fff10b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 dcbc519f4f4d16eb23ec3d79ffdf57c5
SHA1 ffdb85bc73c60058e4552dca711fa0a413e2614f
SHA256 1df1c658e310c1b7bcd1fab5269fb8a8f1c8a49e01c1819c7c7864a3f92c421e
SHA512 70ed722e3883988036be125e73ca812a481326fe10bb5170f05173afbeedd91875aafe715f8c357b40d536a7b0ed420b3d2237dbef6d4476da960f4e421e3092

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2f72a0bde44bb770e86fb4d536a46a1b
SHA1 879aa5d556fa843dfc48136df147f449a5312a52
SHA256 29a78bc275775546808cf18ad4470cd5d4bd26ec415e2ddc1b1b072be071b236
SHA512 ac526be934aa14766672df7b603ee8075fbc6663d7d32ea87463a558bdf36cc23a49bf1038fe18fdc0625ce2ec3ebfd5bf55a9e7bccfec4b8511dfb0a630802c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\65270136-2c88-4137-bd58-9762090144c1\index-dir\the-real-index

MD5 8ce9aab1cc559442de28a71b8276b5e1
SHA1 e10fb1c0e9c829c09fe509eea7eaa1c5437f3ab0
SHA256 40e5892ae7cbefcfe362ddc0eef4abe9ecb446bd691fd717e763d313469caa8c
SHA512 12329bbbb23567aa8c9c0c95637d3e3063c99e5a3eb6d8c34ef0ee7f14b3a763b670e9363a8e4cf1c1e86e7977307a4070b04201fae26a53ad424bc69a5dfc90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\65270136-2c88-4137-bd58-9762090144c1\index-dir\the-real-index~RFe5a1f03.TMP

MD5 70cf965c02bf47d716d328e11bc22b6a
SHA1 803df97211cbec0365e0875ef654531957ac3e4d
SHA256 cd7a8ac28fc330e7315148d710ec0c9406d82d42699329525cc5f436fe26e706
SHA512 6aae31bbd2e1b17ae0c879fbfb1975b2c5bd90a236a2c0d386b0e833bb16b83047a72147d8914f9f27683a507a5e9abedb92453d1352b4996e02a6723213863f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2230133f084fbe7350662712833e37ea
SHA1 221b412228686346c142fea39ffde8f4420bf993
SHA256 20c7a4b1eab104ad1147b63e21cdefc75b17fca04955c4d53904f7ab9d6fce73
SHA512 f7fc31970d48d4bea61b4ba1b98e31c057f25c9ba58bd48cf777f0c84200a3ae9d040d68b573308bcf11e0a3f2e31ac405838f2bbb10d4d11652b1e29e5d15d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 c82fc76c262f73e511f451666abc3963
SHA1 88a4cf1bedeb926b45ea17b992b8a600ca53d6b9
SHA256 52707b0367e0d5e2999ccb9edb505468056723d1db1ccd54a0e3ff04cb854e23
SHA512 16230a816787a214c1d349eb402000dad5b2bcfbb06464a658629d9afc7648b7637eee9fca620616914b25ca4d46994c816ba48f3980b402a52122163541ba0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 b275fa8d2d2d768231289d114f48e35f
SHA1 bb96003ff86bd9dedbd2976b1916d87ac6402073
SHA256 1b36ed5c122ad5b79b8cc8455e434ce481e2c0faab6a82726910e60807f178a1
SHA512 d28918346e3fda06cd1e1c5c43d81805b66188a83e8ffcab7c8b19fe695c9ca5e05c7b9808599966df3c4cd81e73728189a131789c94df93c5b2500ce8ec8811

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 eb77b326d29f62d6dbd5dc9846fdb921
SHA1 c9615c1b7db8a89d3bacd40889004e788ec6e4e8
SHA256 d1eb58e3ba3981271826139bd6b0097e66b3ee41999bad58a905274e6410cc9b
SHA512 f312f7cc03083905c9b66ce1bb813b5c48b40b397b1f65001b78e7be3d06680214b3e011f443a024ca94599bbca476d30c7cdf3de4f967361248618d39d27b01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 07e1d183db67cabbc2b70900ec11768d
SHA1 72cd3cbbe5e8a049e416926d4a0109d8da988d28
SHA256 642ad9756f6f5f1b10c6792f7621b7f68eae0c7c9ee9756bc6f3961b8ceb0f3a
SHA512 20930aeffbf1d05fe996ac3e1a01380ac41f74ff0048c83e73c46363d9760dbd4ffd69227da07af52965b09d8750a03c79730fae389d3522b5116d85f0977843

C:\Users\Admin\Downloads\Unconfirmed 572321.crdownload

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 9fe73c2ac7ff52743f1aa3858a6a0150
SHA1 e17be0550f946a902bb13855b5eacad6138e9ce3
SHA256 11ab280b9cc5bcbfeff1c333cab25780d4d06c2caae03205080bf1fff7cfc692
SHA512 725d08d39145b1893a380c54e93f1f80fb7b9c3b1d8cec45b8e1487352d45e84049a418b215b6d0fdd5a011b3825afde6d1486d8020a0fd16dd76fad8e5849e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cced291ff20d34e7e6966900d062f713
SHA1 18c0ef5101a14b00854c9550b28f7767a4c78520
SHA256 f82fd1f25be48c62b6927c4562a90099286cb3eab7269fadb37fea3641d7b718
SHA512 cf51d530e330460ef49e6e0908122ebd4f3757e07662d56c1d03388aaae9c0ac989ff0fd73a98823a61cc9288a2ead7bf0fcfdb1596caed354fc2f8ab3cb744d

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\System.dll

MD5 a36fbe922ffac9cd85a845d7a813f391
SHA1 f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512 1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ea05975b6e321dcd3988481b5b51c286
SHA1 6548cc2555e0cc9997baebe13b2266d4bfc34b57
SHA256 ed3b47e8e765c278106b196eaf928a6a1586b58dee6e570c30294a199123c1f0
SHA512 2d33400bfd076c51ffcbbd5320ceb783c962679a34f6949d16c4146b647c94d290a646d02f0ba3811230cb87301e1c579abdaab85c233540f85a233d5ec35b34

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 dc25ca63d268c939943e0045adeac148
SHA1 5f5b7b9fe6b20d88d94d294bb4d79ca5251e8cfd
SHA256 679e0833985b4371a6e57f2a4fb6e6f4afe2923ebfd5e5156768b21224aa86bd
SHA512 a092107bd96c2346194d725a5de341cebffcd897be52782701eeefdcb5c86574962a1451cb9055e8e3fe4f26267c1610def02069b9e5f8a1041f7f641ec97781

C:\Users\Admin\AppData\Local\Temp\nse89A6.tmp\StdUtils.dll

MD5 db11ab4828b429a987e7682e495c1810
SHA1 29c2c2069c4975c90789dc6d3677b4b650196561
SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512 460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3049fe2570734ae2969e6cbcd2a356e0
SHA1 978a43e89267d9ff77cf78eff2f376c192ced86e
SHA256 4b4e2bb56984a500996668c57f086475b86f29194a08246b6833bb8bf295273e
SHA512 9eb5f4ad8f9df359bc707564d09e4f772ce875bfd8cda1f2c9d919f62153bfd50f68df15f925bd6c7655e05e138913d1665ef299a17aa2bfce38c41fc345fafb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7a70b9efcc5f099e1b7a92b39be0326e
SHA1 7b39ef505099492337adabf309c0505a04a6cfc1
SHA256 0424516fd73ac0dd648d68f34b3ddd6dca28f46813ee85c63c756ff011b57df4
SHA512 26d17ef49131b0766e8f98543707d742c11c29a69553897f81ad02c7084be29326ea4fd9e54892b217dc47fdcbe1f1847d37bc2b178031954a0720455667900b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 273197279660a14ca52c69af585492eb
SHA1 e71df1d681499bbe221100674afcd39f76ef1546
SHA256 2292768ddbd0f92ae213970f4e63995ca2a0fda5727bcae5e655bc3ae5f91d3d
SHA512 7438c4db87522bbaef2f3c4837d96692c17ebe42816fd04dd7c2c3a7f0f6dc96d9e81fea7b626f88a43116e7ea8a7917f38de63008536c742b8e9a30f9225bff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9b1514a5aa40a0547c0389d4778db8d9
SHA1 358f0c5db1fc5184d78beaf58afa29ad87b1d230
SHA256 8dfda21a744ddd5316854cf0f7c8ae9255d0f19e39360e23821bb6d543142b6e
SHA512 72643a6a4fa7b910603a78bead5fb9748cae3e3d5534883adfff4aa76457053e80bdca813e6e7806c28ea556329687e9d669232bd42796789acaa8a74f9a0905

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a1d15162d080c9429daa19ca16599ab9
SHA1 aa5034ad67a69b36bbf7a053c44a6826671a644a
SHA256 fe23d83aa43414eb04cb884cff2fe058e202a5d9688290fadd0fd721c07e97a5
SHA512 39458365ce171a9ae2ef5bd1adaf38068c8422e1d23109b3ee29e29cde4dfb9fa303226e0fc2509967c167abcde50dbd52dc56c4a73a6fee509845742b15ddbf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6add897d8b98a4d8c8ec607de6a8f8fb
SHA1 12c22b6a3823beb79dc7d4ee83d1209b5f3d8ddf
SHA256 54b2ed6b6bda02e3520cfa5d4e5459f4b2c8732934b538e1742dde6d3f3774b3
SHA512 36269c2f08b1b47b101118913a09ac5ea4cfe60878d5ee584469d773e1cc8b31d7cee7af5258cbadcefe305dbfd6e02080ae119a58fdbfb2fc087d4ffb7b3d4c

memory/4312-14071-0x00000000005A0000-0x0000000000A52000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\wasm\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

memory/2360-14110-0x00007FFD3E740000-0x00007FFD3E741000-memory.dmp

memory/2360-14109-0x00007FFD3FEC0000-0x00007FFD3FEC1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Program Files (x86)\Steam\config\config.vdf

MD5 6e6a2b18264504cc084caa3ad0bfc6ae
SHA1 b177d719bd3c1bc547d5c97937a584b8b7d57196
SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
SHA512 74199ff275400b451642cde0a13b56709735676959d65da11ac76dd645ab11dac5de048ff7ede0cb8adb3a3056b3ecbeb3dc7481bac3768d02051e564c74b679

C:\Program Files (x86)\Steam\config\config.vdf~RFe5b91cd.TMP

MD5 3cdebc58a05cdd75f14e64fb0d971370
SHA1 edf2d4a8a5fc017e29bf9fb218db7dd8b2be84fe
SHA256 661f122934bbc692266940a1fe2e5e51d4d460efb29d75695b8d5241c6e11da7
SHA512 289c40fae5ec1d3dd8b5b00dd93cf9cada2cb5c12bcfefea8c862ddf0a16dced15d6814dad771af9103b3a5d3016d301ee40058edde3fdea30d9767146d11cd6

C:\Program Files (x86)\Steam\config\config.vdf

MD5 a2ec2e91c3ef8c42e22c4887d032b333
SHA1 e2c738a2e9400535b74e2263c7e7d1ecefe575f2
SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
SHA512 b069d241efb19e09ec8b5e60ef6c43e00d5cc0f774b9340127c2180356dd1964ac625c1afdfaee5f99e72b26f56046fc329aadbbc365b403af765a55e9c9aab3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d0325f9d04997a371cbfc4199d8d2532
SHA1 f786400a6d3f83e5b10232452e5f51ef478f7e43
SHA256 25812ddab9d12a1d0dd43ab150d8dbeb12cc4fa881e55713d3a4895473b583b5
SHA512 a3b7bf7a052f86e2dbf0e351695e0d52a9a41ab61673f5796d30e8639fccef4c95c3cba706fd27a2cfb5622a389f09d3db3419c98df5320b3f988c8aa7370148

C:\Program Files (x86)\Steam\config\config.vdf

MD5 f3dd186f0655c7a80e411abb70167e95
SHA1 eaee99486cc3ccba34cb700a868c53e04828b2bc
SHA256 9b704f34168401507f515547a9c3a8297b2a8758efab8d3744bc47ad5d607965
SHA512 5d4b58d7e95046a727af628d12809099b79615d13ac7ec8861ef2d9a172bf078fe45ae911aa00fe1a0f18fbb4b6ac814c0585998f5ca7b9eae2925ceba7c2c7e

memory/1376-14252-0x000000006E110000-0x000000006F450000-memory.dmp

memory/2360-14259-0x000002622DBB0000-0x000002622DC5C000-memory.dmp

memory/2360-14260-0x000002622DC60000-0x000002622E0D2000-memory.dmp

memory/5876-14261-0x00000212EF0F0000-0x00000212EF19C000-memory.dmp

memory/5876-14262-0x00000212EF3D0000-0x00000212EF842000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 58b605f2cbdbb8b4287d2c14ecb3b509
SHA1 be593d8e2660f6cc6aa6f67b77149915aa7a9d32
SHA256 d2a3bb50b4d692c32bbf3719552321875c6030966dbfcb21c1287a54ad9239a2
SHA512 d86fd37b2aaeedf1aba2c1de3cd75f2749cb5d8112ca86b4ce324b148e7a0c46e43b92ce002934fa497f1462d192c0191111b910f412a31659d71e6ade9ad0bf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 43939364358c0add8733ee1361bccb1c
SHA1 31ad2a8dabf7e78f771a51396e4380742c01764b
SHA256 67cd0b0757892f9914e41bbd7812785cee14f7dfaf74cb60bab5356a5d0d0b7b
SHA512 e5065a3e06948a9ac117e424cc1204d9437ded0dacb1a24d3be4cdef1f318522ab0720300266520009d108b1f102ffa94e10e1f5c1ef489a3e57cee7a653c0a9

memory/1376-14288-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 0d89f546ebdd5c3eaa275ff1f898174a
SHA1 339ab928a1a5699b3b0c74087baa3ea08ecd59f5
SHA256 939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e
SHA512 26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 8b06b747bf45671dbbfd53cdf42b39b7
SHA1 036ab57ac56e3e82e24d25b1e8fc3da0e758dff5
SHA256 77b7ba43678eb41699aadb083add7958be7f1a7d3bdeca68e356ce734bebb623
SHA512 d8545ae12e2ee9da79e099d02e94b227e79bd7d4b79ebb65fae983c68b1234d3556951805a659876e184db92c8575512e84fa850ff2f2f90bf93e8eb17aa7b32

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 b1b7c9492f324913797649d9396947db
SHA1 9a6c23a0904dd4f6350ed9493684cf55e9b877d8
SHA256 e64d54245aa9251899c409711a095353a8d05708fe022546e235364bd8e276a4
SHA512 43b657ec1cc15814ebb184ed8d05fb742a3d8d1215b91c74fa2f6cc002b8098226c40950822c35daee711bc5af418bf02a35e481e0f454ec9daf5814a241877c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index~RFe5be413.TMP

MD5 a7ae96dc8603bfbb078fa15d0d453923
SHA1 fa84f81b8e87ba2a7d7b4af5ded875840e7414d1
SHA256 f59603471f8053db8fa14485e2c047c5062b05a6983af11d4dea604b2b5ba8c5
SHA512 daf25f0d417a13e9be3c45f8715823994ac8f52355a2c9f8d0551d8c8dd1016b0e99e863a8e52de2e8a10f40da5ad5a96bb7827dda3aaba59574262ba4b24022

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9de8c662113a8266f446e1148915a6dd
SHA1 b62e011182d7d39c2ce4b8c201699b7389e0287d
SHA256 26ab5076344eb4eca00c09e1b2b8d76d47025ee1fa18890df8f396e55395e7bc
SHA512 5c80f26eaf95fa422b975b10f47a7be6a62319ec603fef1ed54ffc03df013586d89fa8cb322a0e3e00ea3aaf83d56859ef378f919198a0b49fe8370643d2482d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2430b74067ace56c3a6314721cbac6ed
SHA1 f701bc45dc111bf5362a58991fb4d958b3241264
SHA256 52cfd65f878c186e3672024c2786ec31d8e954879878fa15cad0467332fd1ed8
SHA512 dd8b41dfa4400f800ec160798c12438f9be942ef674d814cf12a313c1c5de70d04d6a85603b0642805ce36e598253e4bdb4c725bf9782b8d0abc165b0ee56953

memory/1376-14561-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a7

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a9

MD5 115c2d84727b41da5e9b4394887a8c40
SHA1 44f495a7f32620e51acca2e78f7e0615cb305781
SHA256 ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6
SHA512 00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8a819e7497fc30cdbecd6c8b40809349
SHA1 ec88aacb91dc913c5ae6acf764cd34ec9177553a
SHA256 871adf7df48bbbb733df56db3f01391dd6262f1e01890204fa13e9c1d209db4f
SHA512 f58f9444421a7822d6d71f56b2b4f319ae6665ba017bac5d6722970ee00b7ba847cad36b4088d837730853257f4899b46e3d078c926b017b9e28d532be9576fc

memory/1376-14752-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4018075ead92c967b7a680b50deecf68
SHA1 7787ece9ae5ae74842e62ba4cf6c0ce772bef9de
SHA256 639b3637832deec2ab9e0cbbf85f008b44fdf0c0b2a10b92785b87d19fa914ab
SHA512 d1563ff56a9003527f85d939fec20a1c099d91847341c51916d3554ccb5a81686fb2183d22751ca07bc3dca374debc2142c9b0a2ea0115b8b7676928f0121e6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 85f70e401878f3b704cca426ac42934a
SHA1 274f50083a565c27573419470609c75d82936874
SHA256 8319b89c2c2ac4d3604a454ce738b21cffd836cc17f4db9b69ab61256a6534aa
SHA512 a6acac116e4d19f18ac3fb9f381a151f355b112093fc1665e7772fb160a861edc0491ba337e1a9b8a5ddff5ee829a81eefdea26d4866becbb3d768e4dbabe076

memory/1376-14795-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7a57343baf8c907ee9a9d9abfdb0dd44
SHA1 050ba7ab2a06921da8fbccacf13af9f50ad6677d
SHA256 09f3f930d4c790e57cfb10d5c1e4aaeb947634fb5d5b9ddcaf4a6729e32982fa
SHA512 5c17ead2de04e341c1b7917a406cce3344cd0791d481c8d3d85621dd759d2500b5abea19b242e9b1f85d76180d2bc021b5c69328910a039082ce720286925e60

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2865c7f75e8b7bef53499c8386206868
SHA1 02b9494bc2ec0b697ca8eff0d686c48989dceaff
SHA256 9b85962cc8ad6366fcad749a38613fcec64ae0159f6f919c5e83a34fbb1c210e
SHA512 9fe26cc3bf5b0413eb2ffed3b2d2c9bc12e00a752f69815121376425cb9e27f7be766842784b4121068855c2e71dfdf456efe272b3e66882666479fabe8e9310

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cd4d65172edcf1dd5556dab3337f3031
SHA1 6537004ee9927234d37ee2b2083adb2e0735607a
SHA256 6d054a5852331b864d837861d85ee4a3ea3cfb7cc00640d479fb16dc8d10117c
SHA512 704902adc0dc97384aa4e426d673d67d9946727e1d56aecd18e046f7b33842ef4ef7ee325ab7f4edbb972d3b83c60a3fc73c07cd8cb965331e11e821d78de163

memory/1376-14840-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 ff0778499d48b96fc50cadf4f2725562
SHA1 c2c79f28d4149f341a7cf699790676d45d71b2c4
SHA256 8802838e0de0ea881c8862cf5c6a2050b6ae148a3553d495332930e2ba4857bb
SHA512 a6a1c1caf507bebf5a28464de4008c00e1629b8513f34590b6d6c3eaf83fd0833cc64bd373e6d2318c0d53635adc3d54891aa1a211df90e6c8dfc0888a18b5f7

memory/1376-14881-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 2b4b714299cf4ab1230351d2758a4364
SHA1 271b91343d0a5cee0ff0bfda106a421bced421a7
SHA256 2ddf3eb6dcf0dc8b9771ca58de2a6c344ca3832363da1ae82bc7c349fffac7a4
SHA512 ea4af7209b4ed1001110cf7900c4a061ef6c8bcb43340c40463ea753226a73b1d933e73361af9b0f8b01e2127a46aaff1b580062300661f43dad427b9115e4f7

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe5ca05e.TMP

MD5 6300d400a059e183344d25b780e2cbc3
SHA1 a57b3ab6ff146328d65ec924defa6dece8caab5a
SHA256 95d9f84d77ae50e7926ea76d9c31e1d8314531613d8367ebb5dff0827571d0eb
SHA512 79a526fcdfb1470c01995884ae0d4ed516f569d967e0e3192e63abbe607f7a3920e081fc952a914a7ffc833bfbff4211142fba8b04ced4dc900d35e60d1f4193

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1004a00f2e98a12f4f4783bc0757e202
SHA1 24f0fbc85bc0537fde5a9da4751038d8fef55baf
SHA256 85c1896b780755d40527dc19dd9c1ad6e27573870b3530d941279be3cd66f508
SHA512 ec33a5250169a0cbedcd7f174db232137e3b9cbb68ea6e3120e28ff00868db0993efc91d2b09b9157733aeb2b42c1334295a4b78ccd33d81d0dc40df53e12940

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 17c539f981f340dfc22cdfa5476d529d
SHA1 d1fc7908a6f140a18a6859ef176092dc97c26a08
SHA256 e6924162b03599cc40e4b913149b7298498e41542756bc15b52b6f15f1abe10e
SHA512 f2b9c3b3a087ce944a1af37f0954845aaee4c7d875875cd9f5f6b5c2818372af53e9f6263f47382fb8d4ae94ad2050fdf967ea12c47c5c0cdfd13af3d353e4c2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe5cb388.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/1376-14926-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 c38e6e100f46a6ac6b3116d848d5e4a8
SHA1 3da4a091d8db8a646113bbf2d6ea5749a900c690
SHA256 50b50d24c230a36a9c7595d610d52edf32b95e7d07c806c6b08bf7ebc57ebe16
SHA512 336b14e1964b91f22411fdaa0c8fac7b7fe21116ce2a3fb8e75d4c193debb78810bda7080616e66990da205f3306fc40007d83f61afb523c5ccce6777a787510

C:\Program Files\chrome_Unpacker_BeginUnzipping980_1862298781\LICENSE

MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

C:\Program Files\chrome_Unpacker_BeginUnzipping980_1862298781\manifest.json

MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542

memory/3588-14967-0x000001EEEB600000-0x000001EEEB6AC000-memory.dmp

memory/3588-14974-0x000001EEEB780000-0x000001EEEBBF2000-memory.dmp

memory/1376-14991-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 dd028992460aa9756e4bfe72d22675b8
SHA1 fafc70510330dda17f3e399c68032276e0bbcb2f
SHA256 0162a4e4e8b4969f0421d5b7d0dfaf277cf0ecf97fa8cb1a840f41d277480a56
SHA512 0b91548db7cc48a00249556ccfbe47c2375c4b226b79ca91d8628de1a4a573cf62c3d52651de3307e33407a26e14fbd1e3382319d58a29020ae2e6feaa737929

memory/1376-15005-0x000000006E110000-0x000000006F450000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2aee8cfb8e3f9b6a70dcd74137c25a5c
SHA1 44e768fa28a39ec8ed7029913adcaa8765d46f93
SHA256 16dc73274d5c6c58af0f545948ed892089d36479fddd939513370148a7a5d547
SHA512 444f4b5659f5398e177c6130fc2d96b6309afc1ba26a64313f4878379e2aba06659c31574213911e741eba5fb2429212c16c2b65023216bd3061f5630dd8858b

C:\Program Files (x86)\Steam\config\config.vdf

MD5 03c99b9800cda42af60169f2eaa190b8
SHA1 dc458ae8d5a0bec55ce2e930ea55d2717bef96f9
SHA256 80c8b5a620fb6d5f80131c211ff0fc6f240d7861cb85d88bfce73547eeff6745
SHA512 3ffda40ee6bf0ac1d1ce0041544009a3ed1a8002f981ed09088f9310de75aecf880a77d4029cc42b28e4d162e6eeab69e85c396b9ca9822350cb787a18da8e03

C:\Program Files (x86)\Steam\config\config.vdf

MD5 fe22289d17ea2c54826d23aaa4292885
SHA1 724bbf1ca6520bc10e4e766797baa9cdbc47b854
SHA256 be81c621086cef9af9daa65a1eebbc68fda905ef53b5930f03aad0b3cfcef26d
SHA512 5a3e037f19c1142046163658b717f0879af03b23e4cf396fd54805238af60abbbcb1318e8ebcdb54a82dc20dd36a10a9414b992cc0726ee6586d7a7634429a8c

C:\Program Files (x86)\Steam\config\config.vdf

MD5 924efc521ffb3234493bb82ac56f88f2
SHA1 ba7b5fb3fbf6c27dd39c77833c903cb09a9ac855
SHA256 9f9f4cc8933029f5dc4f25f77ac9600f204a42f955c853ab41918c07ebdff23f
SHA512 a7078e60b916059bb378a6f20b208707f683f6d6aca38887826149aa2403378f15fde4701583394235cb40bcb76b157f67e3b58bf7dddceb21cc64440f9dfbc7

C:\Program Files (x86)\Steam\config\config.vdf

MD5 cf3a5728a6aa64eaaf0fdf2a04c6ec06
SHA1 cf5534749cf059538ddbebac25469e54cd34797f
SHA256 6e2b78b3a884a62feb7a6dc771c6f4088f071b125b18951df4687d963cb0546a
SHA512 534d9d37ac47c772ea70a4435a6ebae985bd457e0fe660a9b38da2306fc4769984ae8e0705d018f24a0eabb92ba4db8e3998ea677fb4e247dfd4280376bdebbe

C:\Program Files (x86)\Steam\config\config.vdf

MD5 75e31eb9213235f6f7557bae6b727550
SHA1 e69c6b6ebbe414bca7631eacf609762959b74d16
SHA256 66dd6de24dd846c53d531c12dbbdb7705c2deb9b1f055b83e19e062fdc244b69
SHA512 95ee4f0bdb7f33cdcd75e727b79f95e026967c38136f344b5232acf4507d60d4652e9abf46ebb77dcdeab921b1e1185e922eddac102ad6cf0cb8fed8d96c474c

C:\Program Files (x86)\Steam\config\config.vdf

MD5 c665daad1cb9585ca62b5cf82870d1b9
SHA1 a20921d9929621463ef06ffcb4551bbadf893a18
SHA256 8fd0fb531a188016dbfea9f9b3d68ca26380169d38566dc6fb23129a4eae4f2b
SHA512 7bacff894e9bca420a46be9fd642d8fa0f6a08819ed866eb2b2fe6586b6783a0bc504807616aa70bb082263c398e5cb86cb54efe6dd708b23f5943dcfe435245

C:\Program Files (x86)\Steam\config\config.vdf

MD5 ab54b2e03aec9f1be1e14df309a9c67d
SHA1 7d7bf27b2f225ac4b96decca37ad315774407ae4
SHA256 85fc5621a5efa45033d10ca40180910ac80404de4ed972217ac720a45c6efbc2
SHA512 f6b6d157675314737e99fe7bc7d55f4b28cf78c3934a0c2c9bad990e580c61e82d14f8921b5882c2e3bb44799279b809f75992768509a79bbc4190a46b47f2b9

C:\Program Files (x86)\Steam\config\config.vdf

MD5 620cdd5d61da976299b172663c47b9fd
SHA1 ef3eb5ab17a9048bd8518301b819a63f998a7dd9
SHA256 a62ba159682791293b1191857a0cc9af1654b3e65e953c9d386359b7a7c8c50d
SHA512 a872ba637cbd545126a75ac485a3cbc69c38dbafaab6b76ba67ff43566439cbfe385744820b5115aa9f969a3169ec09a244b433ab3ea97fd3e87eba0171fffcd

C:\Program Files (x86)\Steam\config\config.vdf

MD5 25f45ff20f503c1b751bc4d56a2c3bf0
SHA1 f42a31449b7846d618d239a0b224586671e7b0ec
SHA256 7bfe1d17d1fe0984853382434668507ac28592ca26f9f88aaae92cf0829c43d1
SHA512 664cea3e2d9a5efae4d0bbfe53454bfd49310e45a65e44db4ac90d18de14cb796114e6ccae9c0168e24ecd4846aa55d47d536cd2a2d31013919e99cdf304d802

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000002

MD5 8f661b8c2dc08d06a2992b1006fbf95d
SHA1 51f7614ee218ca027670a3bb0d7cfe1f23869602
SHA256 8bb39a6f700638d352b26ee0cb86fe5fd1127397dbc18d50a5bf37eb9ef6519a
SHA512 80789cf71769f1c03910535c610c942aa4be684433bcdff360ba309a6c15b3878920a49d1d1303c322de64f200b8e5d316b428b66668d51f9ddffaac0aa5f80f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000003

MD5 944531387ce01bdf7ad736937b9b13b6
SHA1 df6268ebe74638714887588a1f43506b915e717b
SHA256 d6c997210287cecf290cc7c5cc99c13a46d874786d1747cace5f00713069e2a7
SHA512 25cbff327f7af6013476a5453847a5f0a4354a8efe773a4f7f8e29c4b8c12ba8105ed344109cf0a83ee6fe986468c2318b212d2eddc1dc2a6fb4ad9c7f9fc4c2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000004

MD5 b63db6116a515c8ec16b58bbb1a0db89
SHA1 c8b53c1566bc23bf614f3faf2dd0e2be49aae50b
SHA256 58cf7a378014be774e0348655722edbf63b5470f6a4e84b19bb46e10349189a1
SHA512 b114bbb09dab653809bc63b9b7ce66be04b4baa50fa4ae938b1cafd86eac94b7742ece421fba8c491ad3b95980960acc9d30dc6f0c5e609f1494571583641ab7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000e

MD5 f222656f7796794674f732c474a033ac
SHA1 cea879731968ace9befe205c55679924f033464e
SHA256 2d9259afe79e20ac65865133ee69f28563201da61bbd8142cd964fd0097170d5
SHA512 9a2b31a325d8030a2aa6b5a932a8c56476a7bf995ac61d419e81477a0c7ecf5e92d5d4884a3d3fd9a67bd33dc619665d5e3bc05c3784c3bc51333abe4332b449

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000f

MD5 38aefef2ea44c17d501cbb38cc0c7e54
SHA1 55dc9404f34f790e42508ea8d74d6ac87c8d6a94
SHA256 29f8a8da900ab06670e7e9c437bd27528ac311b4995d50c702972b29440ab194
SHA512 6cd0e45c109d9ef0e0a3419246af71b9dcca214775116bc5c318df53ab906ca33197d831d0b3c05ba004fd31889a5086454eb6e0ef12e594035d3b89f1d1e157

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000010

MD5 4d9ecc70dde56858a3451017cd7fd8d9
SHA1 88189cff695c454384884888ea46d9c11060c811
SHA256 e10acc2425b736f904ca0ec762a77b516ce7cea7391354841199e55750eee287
SHA512 dccdf161353e3fbd904b63f646ebf616e9eb977d23933575a307336aed6bb044902e11dc5990aa217f7b8cc16e190a968fc9077fe74f335c195c72de46c6f60c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000011

MD5 487b3b54635e5e78cb40f06019e3d266
SHA1 5f27d3247d223035162688d39b8ca8921d662c38
SHA256 6ee6a4b5156c04085388db04e54cd35f0b77f68902545cdcbda5367503c0979b
SHA512 64cdd50b84d9cc6a8b39c70bf7c442e11af54401a02fa745d72f0a12fb9e72a64b9f2772bb8a98c489ab18a8d5fb6ff753e6c6922e2fe86117eff2fa63efea77

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000014

MD5 757750902210ff3c0d12dee4dc5165c6
SHA1 a3599ca4bd5da9fb9c83e26813ef62327c541566
SHA256 72ff7d67ddc7bd23885cbba07f3889be27b50cb597ba41fd546343416676ba67
SHA512 ef5cb66e561d5f208a872c65b6732bdaa082d421f9815c8a5a439d5e749890e032c2309c1d7ec66d93d1f897941bb5e2c5f860fd9cf8e13adfbf1ab60aeca27b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0def6d195d220761852ce13b75a7916c
SHA1 1fb7adc507fc263ccc484cec28d7a81f9dd2fc05
SHA256 780f5591492de833118169fe4e0638474b83b6158d7a0b43609345729089f344
SHA512 a7d424eadfba14fb0380a0112dfaa50ff7fd83cd06ace91b89241fd49a850471dbe8add13a08df86d3a1b69218031343c3f3854e34f8d8652ee9ad12440af109

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 dd626281d5ffacd4551e33aa82c8bfea
SHA1 e18297044987b566c79df1dac67634880868fdfe
SHA256 3ae2b23692ba76e2af95b2c36290d4ea6453d6142a8a22933549c3d36b35efe8
SHA512 bdc0128c8aac477c6e8216d828c41dcd447081234773760c6af145878a4abdddb1d0597b195d973c775d7dfb96243a7029911f93460e3288f376683780d57a57

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 1618a00d5a9bf8774b0c9346cd4932c3
SHA1 79ea39e02b38579cee60b1f488d2eb0ca8cae513
SHA256 83937e8d69565c28ec9ab8eeec14c7b9a8d45c5e38b4e2a2c0c40296b68a38c8
SHA512 d8adddd634efe67833af990472354f3d36a80243437f75d64869873c1416441c41bc549af4f34fe8e8b19523be438a630f936daa9d6fe960fb4ae20f43708ffa

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe67dc29.TMP

MD5 3f8b8dfa8a033659b72ddc127dece306
SHA1 9bc2a3c63b59ede551e32bf073ec69c31fe655ae
SHA256 807b2659f9cd6b6467c0f5f5b4d541f0887e21dc7d09cc18aa6c43cedae9c063
SHA512 9d6327c18c6c57b269fa336eaa76baf4c7f2bfe008e4819b7fab138aa16aa23fa9281dc2ec3927bff3ab99f9923875a2e450c6ba60018b8ce3c1bb95b918687b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 561d3e33d0f89aa9c6cb7c300bc7220b
SHA1 03f40d4caa8e7f16680e55e2a2308eda539dfe4f
SHA256 e32447c1ebf8af01176830b4f1b48b9a843f3af25f030a518dfde5691d9b93b4
SHA512 bb669250c6eb369cd2cd02fad74dfda3562f175e0bc24d4685dfd1c625f1df7b80e3204aab79f83114f55e094ed3b59527064f44eacbe4689784f0ac6b392f15

C:\Program Files (x86)\Steam\config\config.vdf

MD5 7a49f0377aaf61e146c016f92a551721
SHA1 c9a620068b7c6f210938acdcdbcaf7990aa6b00c
SHA256 6cfc659928279253592b4a2d7bf1cf22a51c39af7a310881f71c2d1e9e634b01
SHA512 8a75b6d0e12eef0745d4f93d1901e6d73d77422bcc28c1a259c129e8b4f72571edabb7ff55af6da3cb2c45d9b2aa0a72582edb988ef06f0a775bb5aa294c4700

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 04b2e177e1b8ae7ca083a40697199b41
SHA1 323ffff44a02f507c47b04e9942a2c5bdbb5e6b5
SHA256 5bcb8274a4b328024676f344d0d3181d2cb96214d0c4b1f9ed90bc7c0a4cb18c
SHA512 691a8ffc5fa8594e45dab32cdf91c8bfae843853b0c8c91706325e526d88b5677fd380d96c35a5be6185cbe0242ce0d27bfc7d23cd8457ec9a96215bb4aa6b3e

C:\Program Files (x86)\Steam\logs\cef_log.txt

MD5 9ae3cb627ebd817698398064fe609c01
SHA1 2bac1f851d80649e1115128921a0bf6c39e4f868
SHA256 23542254458917914b23c2934467cb519ec62e1f0d3109c01f26b106f8e1415c
SHA512 fad63253396da948ece7ac758f790b669003b0418ff8d48874b3f6d968cccda607a3cdeb6e6b1bdf75da5a3d387308e880ee2b68522a204fc64e50739c35a65a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 3097c0385f9c709fb142a3e750c634c4
SHA1 b0003540aefbae56aceacb5c662694e1e80dbb96
SHA256 69609431d2661ae8cffaa9b7e2625ff08bcfc6414cb0f2112955b54e41022530
SHA512 6804bb9d9f7dd75db9075184bce65e9a26f3e2b4e8b6bbde6c381c04bd4a66ba3cfcb229fed521b30f9aad811f20e63e1104b6acc179468e468c7e387c121ef9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bb5598673c7af40e7e56bcf52e3babdd
SHA1 8d8e28b9681de613fb5f6bd7f488eb3acb72a434
SHA256 e453887c62f6b29146a757bcd2791da472ff8c63a19e6e1c82aa75811c92b015
SHA512 38aa4fa9023b67cf182af40368101582df830fb654a4d78b2e10853448c28d2e3467149386fc68dd857070a2870173ff576660bc474c509688b4226bb4c65a04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9eca16d0453996c6a413db036e4377cd
SHA1 73583f7df92c259b3f66d8582c7ef81ebd387178
SHA256 b246d8986e87e63adfc708dd82c1a6fa76c1b3388adb9b62d06630118e103e5f
SHA512 d909dd021103cebdb4962b77b19e003b505583187ca36611d13a78fd375f664e6b2de04e23b25e05f988e56e4b74530b7e98cbbf497612045536c0bf09e93f08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1aff53954ca20491_0

MD5 37cfab32cb78328d2e2b53e3295ccb51
SHA1 68f4f08425b8a2b7742d040676164b58065875d4
SHA256 8a4b09f68f17ced14805e7dc59c83e171931410c932291a948fae870da236179
SHA512 c72542f565ace6cdf4504f9a779a8549dfb623756c49ad78e37885c4ee80277d020a29c4e2a974c9f0ab42852b8a7071d8c4fd3b7006f60478d9c70470c03635

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4beaea99ad8bfcd7_0

MD5 7842726b983647e7a0a9c1158b482114
SHA1 c6e336406d04e657c990249f2bfe86a630022051
SHA256 8437ba6f02ac35a42d221ad8ca8007403f2a96c07013816664971cc1c559ec28
SHA512 ffe0fe580551e01b3c823fae0a859fa49d3157487577ae1c80d0e83ff773d0ff1019f57103ae445e079a4a5a08609df7ec2bbe973db3b73bf9a93f345fee7947

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c8d24c1d75137023_0

MD5 5d431717b73d798fcd58430e7c4b37d4
SHA1 c76e47d0ee131fd2110a7644f69def783fa996e0
SHA256 411bd571952924c3acf6b34f6319d53afa9552dd0fcc1dc95f4640c0a7cff59f
SHA512 648b5300efeafea4aef4da030cf65bb9dae1d9c1f7e76c82a49e6d6c18279d31f4a63f6424e3d127d0aaf66e2cf23479ce324ff14febf64ad2805befb7146458

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f139f229e6f0497_0

MD5 1833452d1bc16133ee3406d5b900f34f
SHA1 e8f884e6136cdc266cf8a36c7ed8b860a4a56ce0
SHA256 637f51d419ac35df61f6fb4ff4a6e97ac4d3ae1c3e179dd05b1c9849faebcca6
SHA512 adb44ef4ed5e024d84dfb91b3b0aebf87a801d1899d0bee0e4ffc3129761964a879922a763989d35229affdba9caf6c747d20cf67e02aecfd17700cb52ca703c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c91c845c83814759_0

MD5 80dc1600f7c47c17a7c6395ba01d093b
SHA1 c577e582d9397c92e23cfac974cbdb9c5b0f0cf5
SHA256 da21f3b30c74505ae98c82861be5485bfe0f561e130f137158abc1d212dd021d
SHA512 0c007fbfd269fbdb34ccd75cdc7d2fd3c3ce7e2e1a15abd0295793fb04282d80cc63cdb1bee3641e997760dd96d56943bd368fb0849fbccd20f22f0118b29e97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\61a0b4d20ae0e222_0

MD5 50f91186a363927f75857f2e89733e6a
SHA1 14e7025469f8a84824b4bceecc3d57f38264e718
SHA256 f9e36b25e1b904c0a28d47ccda3415b64e8a87f861a5a1c727c3535ba437ef9b
SHA512 0a8c19f8ca9d5f939d1b3130255fa2a049a318cc0bcbba00aa0a8637efef45dcf9413ef550b9e9942be37e9f0df28b48d1e480683d4f150117ea8bd953e76a2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 f58e0c62a7474c11907ecaa827776d2c
SHA1 20506d68b21b2476119a83354725325a92a8fc94
SHA256 eeef4473461420b6ec8b524cf2cbbf9cf7734377c5a311a700550d1777354895
SHA512 9f5d4faaa8a3f2c6c30f2c125c3b37c6c3bddbab58c17375a42efa4ef6c70e53b717e071049f4a7c5a1e8d51c4415c7f253dca68bb2bc7213e28db6b08071111

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6e1427d19ff38087_0

MD5 3909e9dcc5c2718e26d7ba8ad334584a
SHA1 a48d37d054dc7bb7a04f9707a069021b469425d6
SHA256 1b26289f48de44ebb398d8a84c5ba0ee014dcfab163b93192c1d85415184d6ef
SHA512 c739d11ec96f978d2377fa808f623d398ba03a3cdc9e217d0c8a4290a1d533df25c1c33a24fbcb57b4097899de163ae7f9f456f73cf6d4b29bb4dc16fb5e3660

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4259a0181983ba_0

MD5 eb233396dec21a64dc0093c84753d58b
SHA1 a7bd75607f5e28cd683dbd4d987a009a88bede05
SHA256 9ec2f94079bdcdc6374c0387ea3570e36cf10dbef7b55e161b4d16f46a7058e3
SHA512 8d51861cf483deb488dd2cbd628a8474644137be4b3ef7996f6f11fc295357fdb9f455660b5c2217f622b548e3c418a803a0990072612d46e5948fcb77d1eb68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d81f58879153741d_0

MD5 ebf10315dba8c9394b50772e44d37f2d
SHA1 512e9b5e62606ea52525e521e8b8f20dfe9a6347
SHA256 a9002126c69b88d5911ecab1615d62f568cd5c8191bcace39617a76d2c873323
SHA512 9bbe5f57787bf843488463a1348eaf03a2cad63efd4566e38778dca060a660fa126d9518c2431c4d5ef15c979f7e21a4c7fadd8dd04d4505a6e1a5b10498e393

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d7d7591a1b39bb_0

MD5 1c732a3015daffc1aaf32f7a3a7d561a
SHA1 c2387796aec724860dc8f3abcc28798f47cfb6c8
SHA256 b624dd23579dbd22e5c87e232adb9deaba61e7482fd6078b2c8496758b725698
SHA512 83903cd9230ec574029293ae2200f7304fc24c28bcce68790250a3b9fff28e88a2482f1a028714603862d2efc28fff366d207b9147176814e1cd20cc630423e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\782d018d3f59e184_0

MD5 7b9b2f0fbdc8270d5319e1196ebc912a
SHA1 73bacd9464852a8d516ec7d64c24cf0fd9fb7f6b
SHA256 f5d3c6f364fe262995ae7bfbe5c707d87113a66ec1aa05b13986f654a94efa90
SHA512 201de93c0aa68a066d607df6bc3ab269d2c032aa2f415d8af781328d3a9ccaeaaf65b9155405740cbd5e087c7ca5d2f2bb9805776f67577888997a5fad5fcf8b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 1377c76be1ba8c0b65c81d2d1aba6bb4
SHA1 65e9e4c342e5baf2245ca6d29cf4ab367ed1be3f
SHA256 d63b622d70f764f608a70da8934b0fe5644353d8b00f8c2ff2202e5693ba92f3
SHA512 cf6226725ab6bac262ed568ec0d881086134e87652aa7a3479c0afbb5f7ebec4b38c7151664d95e4c250dd120a73fa1e46f05bd52fe2787e26d151d9a7cc3d79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 d0678432805d6f10c6b0d2c48b0c0625
SHA1 c82256181f9c225e46bebf2ea5835d100d95c4e8
SHA256 703650d900a348cc2718bb00c5ca005041a3ffb89ca6c966ada5b5e2e643463b
SHA512 90b5dbb2a4c88e26ce43e354f1eee68214026121c3130a2d822a876b433a044f9c8351f2e9110635e58e4c3417925b99f7f48b2a1b1406880a9bb7137dcf43db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be6d12311ce2b399_0

MD5 a9f3f43e49a1c692c9bc1951a90909b6
SHA1 9a577bc6de844620cacf61e50d2d3b7423a03f77
SHA256 5ec4cc18e00ffdd3f9d72bb049ce5564c12b0d2d7801f7087c2374c4ca289ae7
SHA512 f54628e2c2ad554ad7c9b6705ababa855bb2fe3bba242fe003e64f1d565859f551812a45abfdd302e02fc076aa161d0c511aed30a674865e30478cd8ef0c9687

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 d2bbce40cfe2e2d62b958aefa7064fe3
SHA1 de92df322a7be1c06187a8a25611739ab7470bc5
SHA256 92af996569aa315d5a8e2e28c10a1f15e48596ad4eaaf4abaf8be90aae14c94a
SHA512 efd4e1a5c14f046d814cefb090b605f1d0c572a23b144d4842b923fd98dcc4a04764acd3ccdf190322f4ad8fac1ead333b73a62300344f28f1fbc78ec2d63a50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d693ac0f52716b_0

MD5 0a07a625fc00aa0001c5444c6027b7a9
SHA1 1de2fbf5d35f880159076aa0bd1a748a41a38095
SHA256 a4a47d430735db0cddbf141fcace3326ee900f02108956e7a77b4735fbb9c8d1
SHA512 fe73e9a51eb6586ea9692e50983d5deddfc3e3c98e083220cd2625cbb654a557bf3515442de04ef661719bf9f706a0b37fee466db32ad8da35aed1ba38f7b76b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

MD5 1a1ee74d1790ba4c19ed1d31d32e2da6
SHA1 0512b7494dd96817708eb1df408e4e83d837f1e7
SHA256 de827ba31cfbf6ab0e8a75b2d1f88feb69427a5bd4101c1b4c900c8ed4dd118f
SHA512 161f26ce6d465dd5a26374eb1bdae944e2d79c4596a6de90f013b50b93b59ff81b83f401e2629d66b70659bbcddd08eb2842091cbc9e055d1630664756b1aa69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71d68e68ea4089fe_0

MD5 9499efd8e716b15435940f310acec3fe
SHA1 9a437959fb0a4257686505618805652b07e8e0ab
SHA256 590756de8b15e2934cb0522886a55cabe1ff7cd0af28b0aeb2713d36bd47d78c
SHA512 fdd32399552aaf73c3acea3465218ff7b9c1faa2bc327e20131f590a1c653c6ec3267de2aea4b24241ef35e4a9ec32039a3e110ae42c4fc545dd41184ce3f263

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 41942d2f1615f82da1adbd0d96211f2c
SHA1 5d145a6bebcd3c0c735740f2c662cd4729480797
SHA256 2532c7879dfe138620e304354f6f50c1705b881b3f1cae1536040abcb65c2576
SHA512 04e1dca56af8c909dc805449dd78fa3b2104cf84a99cf23ea6921e3ca4e7def6bf5ac5e7c8cff4a5dd4eb1c1759fdab98692eedd00b2c733756f135d0c6345a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 83c66239cf35324d314b04e4d115a1b4
SHA1 6cee93ac5dae538a3acb6cadd11a754fcc140d1f
SHA256 97c91521f46cd5be05f49898fd36134b9300bf61001a12db063420209f788c71
SHA512 9d0d556c817fd2d8f23d10b74e48a41e1b5764047a2fa82780a3bce023bf0d1672cddbeef86b32729098dd0bbd046ef6a50d5882632c019f410df9229308dfbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f4680e8f8f8a14f_0

MD5 a0552dd2db74bbc16ecaf744c1046fc4
SHA1 c3bfa22a9518f00d51290a936f2244b025222777
SHA256 5957c9d2bb14c06c5919b45037c237e1f8b4d3f79d89632cd31b7e17920a298f
SHA512 a8a11f7c2722a8326ec4d6e94f124ee04208204e4effb950dd2adc90dd9986fdf4c1448aa77ff83dd7210de68de04482f666c5706edf0b49843f480e3a69aa54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d79e0a2891fc014a_0

MD5 09350cdcf6439cf2c5bfa53fcabc2ab8
SHA1 7f0ca2f32afc61a76d276fd46ffe06b9d329ae13
SHA256 5a8863869aba755cafb66831b06a008e58ac89c54d26eaf89909689baadaae99
SHA512 a8fda5cbf780d92a28ce7cf13310b718f37e59c86b19495b4ff76e4384bb9f9d08dfc8f68ac3fa180683dbabc962a796186dfe39275e973863424108c05319cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\769fb54348524410_0

MD5 a32ce6805b224fdf1c88c16c97cf5af5
SHA1 bee65b2f78c79c9248edd7d038c5ad7d47fda4e5
SHA256 a4e01fb356707a79c64b28c24fad9404da7b84f0bd2b4d32fcf62981010316d4
SHA512 a1f047495e573849cad69e6c9f43b3b7ac947b0e20a527c6262a71a067c6fd3a44a7b11281f0c0cd7c602cd707c86135369cf69e288756df0f8bc04dd241278f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0

MD5 34b4b9e7510f0251a5a04e2a39a41ba9
SHA1 d4aab56d6507cd6c19f1ab0005ccf7abd05ca37c
SHA256 f06bbfe7ec76e8cfbddccb3db8793381922ccd5949e8c5215fd29f329382288c
SHA512 d20e71aadf41b16b50773ee21fc52906ea450f35bf3905e1e214f7155088ff94556d525fa986a7cfc7a49ec793003a7e0bb6016c3ba7c2bc429dfa5bd434eaff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\766094f4b47e839c_0

MD5 a5b4533ea96f35e97dea6bf754624ce3
SHA1 2495122c1a2bed0beea0295a791cd7e9ad98e5de
SHA256 0d77dab317aae809f4b5a3806a45cdcfd935b2a0e897966b810f3908dad0c9b0
SHA512 747b868d53d938b3603c74309d06b11968bd1c7dcae58310488bdcd0dc948477cd56ba9ed40aad34529980e7af6542f9713269647ebe9dfb5d3cfbed87505650

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e146fd968644d345_0

MD5 656d7b503c50ecfb81c4db2dd518c4f4
SHA1 8a67e8670af4908efc560e7ebedba6452d5b2c44
SHA256 443df1125b1e796d8d1795a9cdcde8f14bb913b126d08cdfbd9cff2240e58248
SHA512 999372c1a801b72ca8bef0ca79e29d80bb33e2946cb357b5440d94816523378fa9fcdfe10ded832dd385e21605e5abcbbf820cda5612ec8605fc267cb49b77c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 a3ee4ca1389896b99f134e6428bd5b19
SHA1 7a27aeddcfb1c1d676efc6e897ec4e3d531576b9
SHA256 a17f342c4f00f09acf667665a9dd843ee5ff1918cf2f6548a9935f73d4652075
SHA512 462ea93ef236fc7947efb57371a0db3aeb9922d5f1859b2c150c215573131e7c1169cedaf0b3bdcc51b6b4c4ab8ef7c97dd00e512805e39491716be9f9209b5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e239929a95f56ab5_0

MD5 8b0f9d332be9342e3b1cb0f5f768d8b9
SHA1 8e3c4395f770c297c5a861d62fc972f500349d99
SHA256 071440efd5e4feda9e09e63f24523e5135469d1116ab515a3206709d6905ae69
SHA512 51a924d313bd0415e4940825e01814324625fe6ef39fc4392138dc40030af476511edc7e3fa5bbe37fc166ae62aac1591a4ecfb72e65818e2e3981dc4e2fc25b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

MD5 13a5e1dc0bee967e4556830de6fc7be8
SHA1 dd2bd5697eb68a1e975f1b98ebe749ebd367fbdb
SHA256 d7edd8f30d5e9f2845e05b0364cfa74dd979c941a001ea6708bf8d020783d49b
SHA512 2d9253b0abc950bfc268cd729346538560bfc6431a079beb90d81ab9517e94000676b4a13f8f425b116c2a0cbf53857f025e65e01f0c2528af93113303214d4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0143edd150d6fe42_0

MD5 74f965ec8c3c59ab2af9443bd2d76251
SHA1 8eb2eb0c1e9ee18409c38613339751bd0e8f767c
SHA256 a68cedec59f43fd0f31e0afdd35b962693f89bae4a0656f1d21c215042f0eddf
SHA512 4c181c79940473351971f2546b3300e11bd5dcb04df3612a82cd1d70ffd23062322a0c6d44c0379e4432a3b7f8e1b1206f9bef4fa3c025ca5d41f522a40691c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7d07dc3a67fdc3b2_0

MD5 d2cb0314c2174103167afd0df6ecfb28
SHA1 b5fb985bb4d00ecb37fa472602ccfcdb5d222aac
SHA256 98da07f87808a589009fec153a295d1486e64914580d733daf3e8e321cbda664
SHA512 454da2ac01d0905b476587638e6161a63fe38bf85d41619df7ba4e7e6e06e4c7f6a6bcbfe12ef7de0e866f1263308727dc4f01d7f5dd865faae79bd3f3ccc804

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3e82669a81c981d_0

MD5 eca00e5c240f8e2692b894a84a43e69b
SHA1 6ec64abfc1b9f5a6b3beac73fd00ebe15e6473e8
SHA256 a832e136ad7f9125c90752165544e6f3a652b9801fdf97b1b48a60a54e18224f
SHA512 ab0efd572bcf333c8cd3ddcfe8ecd379a1510b57a2173733ac1216778cefd3f65c51955cd1c334b0028fe1778f7acd6618dbd78a2bc186e04141c3e59d12cdc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e9b18b0f66a7183_0

MD5 4344d81e007203c8686ce79446407ef6
SHA1 ad07c354fba286c64d76eb604a9e06377f5c4367
SHA256 961667ad73eb4fa2b259c9e3545462a6f025b9ca3ba62cc920c21906ca17b395
SHA512 623057a30a3c6c505ade4894fa362c0647b66c3d9e4b9efb6ab9bcd678d30baf1f272ac42730c8568aa15d1ac7edbfd664c41d5b55621dddff143d3dae222dc1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6a5e8bb53a565b9f_0

MD5 e5b5bd8096340c6d48415b5b283c734c
SHA1 6bed0e6587ace0f70195737517b011eacc4081fc
SHA256 2cfa6d985d6e2e0317099ce47f5dbfc26b6159667d40cb4489f92c0c1bb11c40
SHA512 6b7fff784a321d4368ed57ca035d43629fc40a7c5e1e3af96e095fdc3dd20aa86825d2207d4956603304b7d59845d9b4e97b94539aca4c4ea9ca461a8d9fd926

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e7862ad096650a1_0

MD5 08f87217aa7e663c1a5b9b4c9eb9973a
SHA1 36ffb0744da61b7f47887047a8a4ac2a4b85b64f
SHA256 1b782eba3bc59624d086a01e169168edae82b7cedcbfe845e24ef3dca6c3eb98
SHA512 9992c584cbfc177a4c6fe4c1795fd5344b9adbfa38d3b2a98abb3de13b32e7caed761f300fa383596e4c43ddd557060f616eea8d66f7163fa788977bdb0d04b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0b70fcf9a7b3013c_0

MD5 280423fe3fffd1e51f28f3e9f8dec939
SHA1 0e3c34fc82a18ea5c8e5ffbdf432fe07053ba747
SHA256 29b9adfe05b6248d86a55d74a8bd5fa91bf6d6a7b02f18ac61f03407f1d4b73c
SHA512 d69479b34febc1c24e127b342fde10008e69e134195f7e0ec1fdee3b848a3f332199bd87e8717afd02136c13531988fdcd259525e7b7c8db37981b297deda712

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6858824e1b35f50_0

MD5 a5c1482ccf81040064e0a3fd049041f4
SHA1 4e97f5a3212891d51c163891d3ba20e0f091b659
SHA256 aaac3bc8a7859ff23701ecbcb4172833dc9810ddd033d6789bd58dea39c25436
SHA512 6df156ce07f13766ecd41b11c20621cc8459e407e84b04b532b4071fa971ed15e6981c15317983363da51b02f63628d30c455cc3a48db12927d26725338252b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0720badf6795a0b6_0

MD5 958781803e9803ef373aaa804c8cbb0b
SHA1 77d60fac399e6ece570385669465f2c7af9b2706
SHA256 3043bee2075eadd7c5bf2d5cc64245b8dc81a08d4ee8c4e1e097b7c3e7cd1038
SHA512 b143bf3ff1b08e7890d2eba127de42ec05a9a01498080b1e8768239c76c701b5c8d0e214dc14917150c5d320f6f0327694e715dac0655383fdf39fc585b2a81b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

MD5 47f5853b1ecb0cda8c15c5c22a28bf16
SHA1 3db79f51ec2e396641a455d1c2ef9696b7e7830b
SHA256 3d3eb66989a7b9413ea4503ea2bca8ba77a8ee9b4199a993d9260f5d61ed21c6
SHA512 700b73d863bb1390ee9bd3c891916d5c12004851bbf512ddb7f82d3f784482fce4eec4271258d4749111a7b879f496d1e5865bb581081b07870bcb45e77ed791

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca5bb3c84b908d6e_0

MD5 510a9851d4112052973af801fa1a4c08
SHA1 5ed777dc240fb72e2bbbc09900a1feea9de66131
SHA256 6e1563dd22cee4814d2b2b6ff53291e79bc00d2f784edc965963d9c7a40f6667
SHA512 f38c668055b95d0f499c9c13ae55fc59ef919baa2da63c1c801f466c892e60cc7063d0ce281c410258e5122cfc0452ad531b82e49be035552d7ad8dee915456b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f1d94d5862e00f1_0

MD5 75d7173d3e43be5079a6b303715815fb
SHA1 70f5159b96bf329beae4cbc4c650153200973da1
SHA256 65917a7a05b64f66669e7ba5fdacc14e40390d6c20c5575651b14e2b1f671fb8
SHA512 ec15118f83717cb19ce4a3b324d60a9b22d9d551ee95aa9222eca8bb99b4a2cca5f73465399152403b2292aa37658b8320a0295345d23e9f07eea51cefbe29b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

MD5 51a863c3e443835cf6e2a467061cf282
SHA1 643888413f59d98fb99f8022dc4bff704193c273
SHA256 db0430468127888813180f752f82f76253cdbd4247436ce7d0441be5c08be30b
SHA512 8ab77aa33f18d282329a72c67040b7eeb7f0fdcf394bd5f03a5ab9dc47f571e065fab73db726ddf3cc00fccd209a98c539adba988d6011ca5fce662d3b3dac7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6db290dce274a012_0

MD5 a5c40747c3e74580c798c85e84debe59
SHA1 8e8daaebd70ae1b45ea60dfca3986eb3e274e446
SHA256 ff7c1ba929ce91b119f08c4cc0ee9266ab3109c416ca65cd50b5e050bc9690c5
SHA512 2e595bfea141f89229e74d6dbb2a955dfde34de351ef14e975543d14b667ff0f11fa82981ee0ca04c02310520ec3c598c03bb8e4901acaf6d9a3155af5d11b87

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6aa9a2943612cce1_0

MD5 59744f7b564b809c9496deabb78c5863
SHA1 f8ab0b86e78cc33eda29699aae8ca14881f56793
SHA256 506a7004d11144be86869d5d4ad0e5924b09f2cbe5a1458cf9ba334272e15d10
SHA512 0032c7efadb884132346bb1907778c6283edf777722194f1518e66ea1d1b9dfb5049ffc1c69e6c038fdb19f5db305256031442ea7635b9690730877736ffe70f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\996f94088648ba82_0

MD5 7ba0ddfdcbd2c81f55f1b90e4a7a8d3a
SHA1 98125800cb185009c774812dea638f1ffb79af5c
SHA256 c377d377aa8d24e2ff5f358ae3bf4ec2d471422686e92b5c676ffa6e0bf52625
SHA512 5234b7b729bce6a629067983aaad4dc42c25db7da355390da7777671da6d8e2213e0d59a4e8ef3d572fed18f925bf7ad0465feeca85ab92e8e60e1d3d655d8a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8551150be49776f3_0

MD5 548fbf0efe9e67384c37c4c39f8fed0f
SHA1 e04bc3d57cc85d279f28ac106dec3bb1163847d6
SHA256 03d99c884cfc369b0ff9ce2d9be7d798f1877b857555b5b1d27b8faeea20eea6
SHA512 073ee51f0f0527ff361eeadc29ccefac0bfe5eed0c6f8a75d7df805438403e3e1c51b59167bad5d5bce5c454f68983fb7f26880b895ff8bfcc40ccf90957daf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c211c9dc68f4bf01_0

MD5 4223f2ef7de3dce754b71212829bdfac
SHA1 29ac438ce96edcebf6cac68cd4641f78138e0a5d
SHA256 15cb51de4b13cf150ee42832dd82cd71dbb38444c4f0fce542204349addb87e3
SHA512 2c955f17e42bdd66c971bc30b48d9847b1b32643b707a7f6af0055df3f2de5d96f1c7e446369150707b3c0a89ca51ddcbdfcd5eee6e82f10e9022ad4dce208e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4de9df79c57fb3d8_0

MD5 e269d7b26c8c7c7fd0e8fd5329bd069b
SHA1 5bcab152e86379d9e8aaaf0d9c70a2036d05c75f
SHA256 3cdd2d6f9bddfdb05c31ebed9de266ad996a1b2b1e137770071958936408bd91
SHA512 111db9abff87e6a84fa7988f6554f36e8678748af4771809fa4f64441a71f9650e0218f8e3ffce65c81304a36025215909c30a443563ad0684f16ad462cb0b1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\163cfbbbd670a71e_0

MD5 2bc7af1dd39335d2103b05def0422c44
SHA1 2e4c8e6f79b3f73538b2ac66bbf1e06140b64c80
SHA256 0737417ce3465168509266b51415863edf55ede18fa6c5147d4f2d8cb246afce
SHA512 e2be3890c774928623a279f6c6b8e44a73f5de020296b8c91bed62f210df432e19cb2fcc91c987153e9aaa4e9a6b2f3d92ae531ed7dbfd6db01377a952952985

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2a9ea3bd54626568_0

MD5 a813eda82171e09468de0be0207dc048
SHA1 93a124e793556de943737690eed9b1106bf16900
SHA256 4fe0e31d7882b9f9c674ec01f0d6770e97818294da72ed7abd1e2a35030801b1
SHA512 7e9da65ed3a4b10f33b909067f977ba630d775743509ef24968e3735614d26bb3b94c88be2494c11d079af37f1c506a0ad2b4da0cf802d3904172f6e969e8f83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7015549a31e707dfcbc667f77fcfc28a
SHA1 70490f8376a3af4228952242b56a0551f8dd4fbb
SHA256 ed14574fbe5773a628c1e2cd0cddd4dd55b2752beee3bea8f021a2edf30fb875
SHA512 3f268000ce1b0af89e3350de12bdc518b0ad24ea670280bc9328a8eeeeb194d23d504a55b9fa6a984d03376dd9eb1517fcb5d5968dd38c5601a679b492b48571

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 eaf520efa16d60b7b3315dae51ca04cf
SHA1 c72cf0cbbdd75851d1e9d3d324471ca2974b6810
SHA256 45ad381a4fe277823cc4b43aa4acf77edca13b883ef9e5766b5df7720a9d7e84
SHA512 db793543538bbd7e88e4d315aa57853c10ab218cfe4f3b1d0a287597d4e142416877413170281f81f37d0ce6f83934106ac72ee5f5c9897b7b770665b5bb599f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 0f86a89b85ba0718b79096a211bcd467
SHA1 49a85bf17b226f417d5a74c85f1797965cbd8972
SHA256 78eb96fa9a0fef9f88be87c6d9d2439cc0f052b461f83830614fdb7140f9a498
SHA512 471e101b83238756beceb1babf232fdf8c93db8811d81df69c71f65fca85ec2af700c3ceae89c8843dace7aec6d65ec1bfcaebe7cdf1892a6a73178dac4ea07c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6e29ac1a9aacab9b3173c41f434b3624
SHA1 13f471d522b822d8f6ed5a03c87a5ffcfa51f18e
SHA256 4a99c304d930da8eca0642afb291289a254ca6bf660743d20f3024a60c2260b0
SHA512 d6cae2a510362c75428e208aa59528d765a587a4bdc118e4f9bc0a071cbc9a3a605dc485625109b3bdaa594bde15253a945f7743583ec699451835d18b9f91e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ff4b179c1c05fed_0

MD5 11b7756461c19f238c87d5ed739d8f3e
SHA1 fe07295b664ed519170e21fa2198a6cd967157a1
SHA256 be1150f438361a75169ef70da0dbb0011ef21acd374cc9290d73b21e26662cd5
SHA512 a1f589c6765b63cc9e479661a2311226b2e714cbeec45e0448da70b164767e558ee442ee5508fadfc20dc787906911bc5a05bb64762ee280d3afe045d2e84ec4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 8f9e9f19201798ff6b30b4bcc6685e01
SHA1 19a18047cc9545aa88d02f4f1359c061bd39cf94
SHA256 b8b5bb7528615322a3fd3012bdc9689db96baf94b4211f666e071ef00278f69d
SHA512 7648550d22d8844f36a9f61a65b2dacf44a70eb1153ec07209a08a43318dd943890817adac3f89a8442c5c4c53bedc6f2525a57fcdb1efbf2cb7f55ec25a9146

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\86b9cbd77d05d034_0

MD5 5bd1d45ef7d48de63556015cab773de2
SHA1 62b51126b06b5a0b3be03b5339b2ef1cefa21ef5
SHA256 37dbb73c1136baa08c4bbc0b13128f9b40a9ba8ee0e605df40b256929e2378ca
SHA512 b6371ad8ee64aea33d69b2ac89d6dbef6d683eb549a731b4e25d3c477774a555c9f367cda90e51bc097ef745a629b76dfa55a0e7fe29e6999dac14a444d61529

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\96bc766215a93e35_0

MD5 013a5a8eb81646d3e0677fd82243b849
SHA1 6404c8d4620688fa44c894e69a18ceeee79e695e
SHA256 847072ae7301f2339cee31fdb6ade79a9a4248e993fbfe2aceb29a5985ef240d
SHA512 ec3cd2ef4ec6cc82b0c7c952f77fe941e8d07fa5e10e0318d0ae85f425383692e370e6c722e1f1193847af909e039ab10fb57ca00459ac2fc7571995d709e98f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03eef0e77feb64d4_0

MD5 152b902d7468fb50164711317f700a54
SHA1 8f01cb2e049c7c2dc01935fbef9539c87212fb7d
SHA256 26444221427195af28f7733e10bcb9bbbd39f48b49f736c3ff9c83ab13af590f
SHA512 0b55e0fe69aa5fc7c2064cf904d0008ee2e2185e1f23e101edb2cb472459c4076c09fc0c25f183fddc2296d7357d37e93c0a7724b7a872be4fd703176fef7ea6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d45aae6d8d9c9ff2_0

MD5 ff00d88c13d6ae6f347b9457b8258959
SHA1 9055ed52985a014e64cdc6f8cf66e748314a7bab
SHA256 4d20afc8d6a0e2beef8955a194cf665a023a030aa82572429a9a3a15e3194bec
SHA512 80baaff844ccfbffa68d5718cb207014d92e3016622fa553967e78d1dbc4b0f1884c7a3d8dd23b86865ce4ef468ad4f9e62fb3269929600d13f1d881ac975f20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\78bc646c0524ce58_0

MD5 0e94cb6ddbdec270cefec9e629b34374
SHA1 d9d7dbb0c3c3c58e721cdc53cf71f01fbca73558
SHA256 7fa477899069abc26a35eaf6484fb3261a46ae7d6185c879bd237971c4db62ee
SHA512 1514c3e9c14b70b938e0d409857c44dd16488d1f154b9eaf9059a609750417d878b342096f90600283730b435fe5dba79c8b42c3929f4d141c287fa4fb736c96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6e2f3d5cfcb3712c_0

MD5 25c6040f51a44389901e40d3cb9b890c
SHA1 0e0a1afd8a1fdb35dcb83a012e433e0d66c39e80
SHA256 e0edcc89e867609288a086e0462fc38aaec563fd253e898c821ca68889868174
SHA512 0c08e4c494dbef031298b9db2c31fbc8dca6450387a97dc347d9b37017a717a9b6550aefed310a28ef5284d306d865de21878e64af6d99fdd0a6f23c890a42dd

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 4db065c6035de6b759b7d2fd6e5ee22a
SHA1 014c4e5cd9688bc520b54141dbf21f0f52a93533
SHA256 4bd4f0066721ba5dd4c36d616ca9f5fae211d62fd3675ba914a321d88b69f997
SHA512 6d1a46817e79c1ba9e5d95eb5de6fa4d82e4730280c970951ac390279ff7905eac14b54156a0da8ed41c6a02fc6b59f47021df29a303177af9a3321015488f7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1f4b608b8e2d6dfd1d1e971c578ced31
SHA1 134c213c2f32e59aac5325206f87f8b6f67c83a9
SHA256 b40ade352db3cf00f34f6f5f8a0989bea2d6997b96b37c9ef18f0552ed46afdb
SHA512 fa218b0225e9fc43de3005eab19fad2b25ad3d08b2239de9097d0ebb0eb01a1efff3721712577ac2c8c07c74a1282130a2f2654dfce67e2f78b06cedf41e7ae5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cda8ee7f34b8fa5c9b947e3366fe0cc8
SHA1 e16cb827d03f79036e0513bf80de2515a3a4e2f2
SHA256 8f4fb056045cf418ee9541a5f21573d7c43da6bd0dee8206fde1199a723ce2da
SHA512 c29022024f0d6ecc2bc03266b7cb7d3e54e5e64e0763bec5da44d9ffb8441fa679f3a558265323536171b2655a63949c7941e4976ed8046ca46638e70927c81f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bbfea718d84779c3_0

MD5 a28a3c778b78e2759be27bf7bfbeae9c
SHA1 a8f22dc6c84e4cfbb2662afcf6b0d90479b8905e
SHA256 d1ed6e51fcc5c46f7d6a346b2807bf067e7364a9bcac9c4796b56bad3bf6371b
SHA512 7ef4f799a93e1e63ad54e7a58cca0a1909d931543e1562c0d1cf03ebaf905ca57b369a090d646194bf47205c1d364e9e4148f6db0b3a31f9e1fb441b3e1596af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db88ec6257763ed8_0

MD5 a0b8bfa0121ea573df04e984bb44f5a3
SHA1 4f5d66f1365d494e814ff117e710b050cbb310ff
SHA256 19e53c5ba3ce9a1a557e9f1bcd8e8fac3b5c86f96818f3d367539f41ee12b348
SHA512 3e01dcdadc11ffec7122bd25df69644fc42673076039278e57338f65ed0ee8d08dfbd2216f8b29cb3a8a9ad0306a90ce11594639505958a299de43a8d7bf262c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45ab2194e4956afa_0

MD5 a3f15675e2810709b88e9d56a9cdcaf3
SHA1 40e6b38ae95a7be09e03fec61612d90a01d17d35
SHA256 eb5875243d13f47bf7726e5254773979de95a5b08f0ab734673393b18bee0b3b
SHA512 e936abffe454158c4a2d5ec1ad438cee9424bd5dea803c84c12d2dd4b434101b5daee061d5411e7cde80e5780e4d8f6ae34c3b6b1b9522e8937f519faf98f38a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d6

MD5 ea35549990f54b349e6508f4f4cac0e0
SHA1 8efdec385374e1a3b51bfd29c3cc9315e7dc2df7
SHA256 4a1c17a1326271540f84968f43e9f55f936ae9085e99a6d06592a53f98aeff2f
SHA512 67c956058c45810b4d06f4c3f2974c3b264289be435a06ca219df51cd51f9e25bbdf1db42c20d9f435f1689431b5106c21dff8a400ed6263a6b102dfb51ba7ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d9

MD5 05cb4b9f101e025994f9686f3999fd43
SHA1 7450f129ea39792645b56de215eaab1d91182fbe
SHA256 07fba84e209fffc2a8eea1a88ec8c77cc92644c9050b7669b212bf1db30663b3
SHA512 9fbf0e99a1f19b362d9e7e31dc0b6f0d49177cea922d9d6acbc1b5a84d1bfce40c3a07e123b5b47ed9a531befc9a2372be3393502b5f00221d74ae23fe80efeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dd

MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000de

MD5 0d7efacbf81f99f9b3b82ac627cc34cc
SHA1 54ba921739b19ff14708d61bf424e4713a51cce8
SHA256 ee19dc2db1f7d41b35f1a8bd976f452d5fd58012d0eff83c53fb835a4ffd8764
SHA512 cf8b4b0f8f586c1ac11d220b4033f91a3a98f167110bae904947407a8b4896afe18bef08871d09f6a2634d58a7118345e90a358b386d889f83abb246d8b6e44a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e0

MD5 c83e4437a53d7f849f9d32df3d6b68f3
SHA1 fabea5ad92ed3e2431659b02e7624df30d0c6bbc
SHA256 d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
SHA512 c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9660ec28d329de8cd9bfc214660b0003
SHA1 dde0b7ad00ee16ddf83eea9909975a0d9cc6e178
SHA256 b5c89eaa83ddda11516b6c485fffa813a9c1084bb124b5a862e1a59c683c3411
SHA512 b60505e3c26fc55eec85576a24f9b8fee03e419161d9aed19e1055ea80531d1628b0fadafc34622614f8c39cfe8a154a765af5e9181d342fbd9d9043c5d769d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3fc7f23bb0b658f365933616137b303a
SHA1 f05b9daa8ab46273e047eb9cf1f651f357d0fdd0
SHA256 b1e68abe6e50dfa6c6eb0cd20189005f8b3f8df213e774a442985d51cb1fe9a7
SHA512 a91474b623886bcbe12486b7164cd59f3d041d208f8709cf97cca2fbbd490c19508156787ed716d7c82e988984f6d922e9f6001cdd1724d049aace922d069c42

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 641b388af8e9ae00abac90262d6d3cde
SHA1 73b4f8b3e295e34435ea9fd6b1473aaf03da6044
SHA256 abe1bf8b4f13df096e73fa330a733e3df695ddbe14259948c15837552e4929e9
SHA512 757a92a099a001d3bcbcd7702062ad1a821c38023897b6f0b90e1e0f261dcf3c5e0a30640b1cb134ddffedd3ca4dcda9709130899c0c95e226fab51ca33bb3e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e3080411e418b34542f7277677a58ed9
SHA1 fc687a746d8bd33042aa3854b5e31d4a05efc443
SHA256 060beac5925ed603b8043ff3d80110f4ad187525474abe27f0e299cc6feca5ee
SHA512 926f197127bc6bd9fdf2d3eff982597807b4c9e58c87ad8fe6df9651a6f2d6a1fb734e7d0987b042bfe61fc90399b27b89c0adae64fc15b8c1b9f909ac411438

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e5

MD5 fa4cc25f0f72ac052e9413b46705327a
SHA1 72127f17a73fdeaf1d867ff721f8115e90d82e8b
SHA256 62215bb3463a1bdbeab484739c056495d60f9e6feab8e3974cde6bf69504f05e
SHA512 b33ebe5aad7802e7aadf31bc490bb697a7a941c4ec9a03c211b42bf54403f05dba02fdbe42bd7c28a27e309c868f4d74c060840a4aefdff57ac9c5c2cb66921c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000db

MD5 bbc50fd81daa634956356ebe01811131
SHA1 4430a7accdfcd1b3c9c9859e66c4215512083b5d
SHA256 49bdd4c96a6000996d9104a17eafd5a15443e9bd17d807df424bcbc4a9440c0e
SHA512 9d21a0ca98d07ee339631f494e423830c2da5de55f69bb5fc70f54627d3e4311c234dfc03ca77ad28fb64ce2fb28972e6422dd7b3cd76200402c25df67041793

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7ef8d8531d6db9f189214e88a2149946
SHA1 eebe90b8ea09561333a0c817ea49214dd4d3f4f7
SHA256 acaf4e4de58b08a02b9bf537461878f70d0889dda6e9fe988cdcc2e682d467fd
SHA512 f6479dda326ab9b8fd3897bde13796094d9d21c1ea2a59cb19fc2bdde542526b4fa6dcd1ec4a41f04fec252a20a84f55331c2bd0a11d33a78bab172370e83d98

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 82c60174839a2b919e146faf9c1e6875
SHA1 2a829566cbed7cbf8e4cacedbf3ae5d1bf1f9153
SHA256 b59a44c2368c956b0290fbb50f79cd01075bdec0e9d602764214d570f7504a63
SHA512 c81f8093b7565f6b0e32b90d42d08f62d30c14f015a744b2006a39c199128b93c58d4c62de5189871a7888abf620e1d47f826106388c86a7c3c08fc8f526a3f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2c2fe9997bbabb255168bcb025ba48c8
SHA1 95498ab21aa02afd0115602d186bfaf49509851b
SHA256 7f11426f585ed13f646d95019499e69918c1677e82aaf3424933b9c21d0394b8
SHA512 c8c511af6d07aacaea002ab19251194df93ed20066019a0d07c76b3b204e6e2705fffc26f638423ebe34bba610074f5564ef30b05af8fcdc55b97e282af1db57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 de9c9ba7b3412284b769bcb9082c383f
SHA1 d34ff2c3462d782bc6592d841c1dfcc69ff3ad50
SHA256 fe7352774a0a37cc85652da5f80ce9556d6db999314f186c8fdc4f2ce9dbf7dd
SHA512 f3020a27688b65a02c0b54ced6cab9cbcb7e1ae33a5ecf9953a127ed6b5b370ca75476da94f844cb0b0cb6758d0a8f5e2e7e66406e30991dc64109f80553716c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 39af0c20488132b19acb314f02d88c07
SHA1 3eb28ccb79d495b36bc5b352d9a77b2fbc2633a8
SHA256 e83aa77d7cc3ce3871426521569fe9e29862c118f5bfe1e256d46d4a982c30e7
SHA512 1207b76093661a3b2faab9a45a069b8e203455df96647410b98e3412cfa7120e018b6405853548cb36712b888db73d7e5e15587cee64cb46d9ca8de55f7b104b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f5e90dacd36d0621_0

MD5 60751574a9f267a83839332b5a12570e
SHA1 7140eef9d8b5dff0f803305113da6de4febb077b
SHA256 8edb922d5ecd4b4c0b74901e3adbbee5a13f1ae26f2739b223b442e102bd4fa0
SHA512 945872337d390228cb0924cf0329c303e38a1cac9f670b363e3cbfdf69543c1f77c0887e48d393636f5ddeb574fb4705f00f75c7f2cbfca55bcc059cccdf57eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 41863bcb0fccf88a484efcdd0646d6e2
SHA1 c3ff65ff721866789598895f60e3af9cd6c43112
SHA256 0536216c40bf98a0e9daf10ec82c3628bf5620eef6829a15c9221cbb660c4c40
SHA512 275beb38a9393bfca761b55c9ba4e0d8c091edf4ebddd8d53d6a44fc2ac18adc58a398014a9db3221fd497a94f50c8d1087fca63c1cff28a64e9512ccc664b04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ced1a78f9bfaef31b2bed52298840d79
SHA1 4b4f9576193cee928bc1025cfd9f68ba5ae592ad
SHA256 5db76f28553179a4652dac818d55697c352cc98344724e017a662cf46dc290b6
SHA512 203883b8a4504a257e2ed81b8252ac9e30d9e6c5a6127cb125dabbee7686a08a3847afc67d1dcc5a051c6f9751c72debab4fbb9344216dba9a0716b4ebab4d06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2940972c0c7cccc13c4185ef9a26155e
SHA1 b21b26fba78569fb451318ea04f4217a696e0ee7
SHA256 ad4a14569115c7c7ea9500290ae68424673bf8b651e43bd0a5bb443ec4b4429f
SHA512 3f23b373b2b3fb192151d1fd61e3fd4faf3bfe78240de29af74483f22e4dcc017d2005dd311a1746263764b746f05cd3bab538ce955304314c9e241a124c045a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1a8dd87654b0752aaaa9f57295a60ca6
SHA1 85e2ba4cd02e98bb8afad84ac59bc995fe962659
SHA256 6727d11263f06d63b2c2f222fdee158d88136b3a1c3db412d1e8bf4f23340d52
SHA512 20d8d8a5bf12000db743408dc2ab14d073af0004f1064481cfeda3a3825228ca9d1b530bd2b574a8fecb977850268b779390f75c969f4588f3cfa268038d119f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 edcb6e14eda33c8fa217c7aa0ac4f1dc
SHA1 b820cb6467d1e3fe80d6aa047e9eeac2ff57ccd2
SHA256 f67333c207b00c9831f64d84b4061ca5d4bd82ed3d4b7e87216794c2a5535575
SHA512 a146938475fd9d15e91b0776aa3439719cf6af0d7dda9f1e6306784eaffe49cd2f4636f5f271e009e991278435181ce8c343f5f6256de9e6d9c74da772a48a55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c3

MD5 af0b0eb7a4f16a1c0f01ea80a48b8b80
SHA1 d91ae203a55fbbe685e4caf0548f3eb56f6b0166
SHA256 91ee20cf6a5e97932e1e1ec3657e16ca807895ae74312ddbe185a7c978970c73
SHA512 74406e6ea63c992945bab3292be42b776a541f0a2c08c480d99297d16f30d058815b262b9635dcebdad61463210b26176a75857d83c2c73a4a6419cb2e667e9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c4

MD5 a875729ca13fdd8a6c26fb19105ab69e
SHA1 48b96d99fa25f1609a1f67e03512170ea7e3a56b
SHA256 3b21e9129eb679487f85196252d45a2867a99add5e72e1f57d541230de27a76f
SHA512 b09ec2982a6ae5538b10c4d9c1db7826ea915aa0e14842e02112a95ae4966ada9bd567af92f6aa0091794600f09310e9c535fabc6f8e6f6f98375648da5c407f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c7

MD5 87fb88c08947e1a81939e81fb2ea50c8
SHA1 45da4a2fd7d2b726df0dce1c8cee704a649a5054
SHA256 a7aca2b0fe0346ab3ba0d638278cf1413a838f8e82bed0ee99cee068f218ce71
SHA512 fffc71d5d2f420d5d7c4ecc7a164bbcbe4bcdb7ea6316ef847e4e8d13bd192d554cc18481f95420013ba2dd1380efa86a5d579185dfdf8a78fd83ba51d81d00c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ca

MD5 e9c5dbb5b925bbb5ddc18dd1a2ce8264
SHA1 b3ae4d5426f6a3a52a2518ac7c920cae6082f345
SHA256 5a84b21d8e31bdd438f62a40568f9b90461d71d615d8c53980648b15244ed255
SHA512 e65cd45a7717e827e795d68a15794a7a6c2a0ea5835346fe0043fd3ac6cf1d100750408219f893363057bd825b797cda26ca5e3e44d83e5efa205aa136cb3f5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cc

MD5 dddaee7a596eca753bc9652f83189c49
SHA1 0a8a585fadc033aa740a3920e681e7b3c3f1fd6e
SHA256 3897c18b09f3b5005e13b76df4dce6dd18a45032a8a476b02d787aa79158b8d5
SHA512 94146175d12b62a083f8779585fb4bf87d14c08a94a83a4cee33b16c9e45024af4435cbc5c4c3267fc30934e2ec9daf6781f1c57de29bef02689d9e25514d1e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cb

MD5 a4abf33199bea4b66a32d24287e94bad
SHA1 9e73d00d1bfbbf19e2e957b7a9926aaadc5b9063
SHA256 158c20aa070ccabbd1c9767cf2166241c3babe8b49999e01a99291fe5bd6a0e9
SHA512 0c65b9cc958725c2237e4dedfe70289c6aedbc51b9d39bc2b41f2038874590fbb90b1723b8cce6013732b15e346f42faa5a8f7a9df12a95679b336eb27614a3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cd

MD5 0ed1814f505eec2506f3003c31fa35da
SHA1 c694ec9332ff1fa5474e2ec9eb504b7eaedd2261
SHA256 55e81a8489541ab71d003d184ab3f5115953d031a5ff3315b6133e1a7a91d060
SHA512 1517ae8b3162b0dd948fcfdf3cf355b1f6485da5018e21c0b81226e5bd2ac0db47bb9693d2d4019405fa35137375dfc1f242a9fcbf1bdcf2e23f2ed83644f699

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d3

MD5 0e2df6b02e309957ca42c1389e8d9172
SHA1 790f4c3af0de52fcc1b45938adb9ead4ab912165
SHA256 16e7d07a3bb6b72b2305217df583d6a186ea58f2318dee061aeb6ff27f20ba26
SHA512 59dde54a07fb7a6a399741fa375d5d4680cc1663bbc457d447583b67c473270edcb8b15586f12ed80ab121c83dc5168ba171844e3744cc5b3316f63f1ad9cccb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d2

MD5 9ace6a669bbf289669f4129506bf1986
SHA1 34906bb23e81ea594a4aedf531d69773ca0b35b2
SHA256 63f217cee4e28460e0023bc78ae22e4a87dbc87f9163002ea962d8fe421d40b4
SHA512 53854baf93bd1f3d3d4d90190e35d3ecf38e521214c2ceb9b8aa84957e9843bc8bf7eef6a4014a27302b76e0a031d238c52fe99e7044bbb9661691440783f13c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d4

MD5 9dcbe53b5efb3a60a970ac50bbfcc64b
SHA1 43cf2da4710961b398b934b04819ee291bcf5dc9
SHA256 da4d1866b77c0b9b69bf2dfa96bd0e43589eb59565b4bef1909d9e9b2d05c664
SHA512 efe93a2c1d9e7b6ca556a61c3b34d102583dfe7d2195fc7d5f3402f2a74b54b607cd884dcb6949a0969b569ccc9d5a009969cf2f1652c40534b443230b0f33ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dc

MD5 c22bbc677d945435c84b2af57650d376
SHA1 017002358239c305efa3a36ad92be993af3762a2
SHA256 d0dc8c4b99df79c112bfc0d299de1aca34c11da94adaecd31cb88cfda3f9a674
SHA512 0a7de9c72929901ba28fc0b89baed5671a8073b85f4b927486e7ad2fd5bf1de6ebbbc6c67a967447861ce150bcd17ad5e8da607826516327310bdafb77f8110e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cf

MD5 186918c75c235cece372ffa22fa805ec
SHA1 19210a2548c0f84a644447cdbca76a62c3ebb8af
SHA256 387c19fe8e3f8467f61080b205bc5e4106e48f7ed45ad908662bb5b1a2cb6bcf
SHA512 76af07cd3ad230fd2aee42d9ef3fe883f9fad64827b10f03bc80c54e7dde5e7e3c02f1c69af57d52193b1360165a0edbfe6cabb482921009ffc8fa7ed76ee4e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d0

MD5 39aebbbd8ab18cf3bbd436599a1c51a0
SHA1 381031615a2d4af189a02ae2c787c5f6b6d4f604
SHA256 04c8ac096030d0ad7e5929b545d8441cbc8d102699e101eaba616d4723d883da
SHA512 0fe6d39a5c2dc78bbe684b91bf3505d6a0b6b587719a5857f851c8a8d4f38f99b9b7b514a4c7e2b1cd694b54b045f3b13e32ddd1dbfa22b8c4b9f0e0645309f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d1

MD5 345abb9ea4f2b5592fa9e6c768d0bdac
SHA1 9023204feffd9c98ca1966014b4a2abdb2fd5dba
SHA256 aebafec3fe6a7b364d40cf9f713400480e11b14e41a65bd0cb205e69530ad82e
SHA512 c1dbca213557a0a65e98379f7523a8da421d7f15abf8c733017fd4ab93101ba2d24f3037a0f15b15b72355346d66a4c1683d2c71847f59809550c4ec30610c93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\JumpListIconsRecentClosed\4c15ebbd-557c-4008-bf11-f9cfbf7e9a91.tmp

MD5 a36e9e4606a1a5ee16ea8104cf1a5c7b
SHA1 e9fdbd0d5e058441e42da0a9443c10b08b4501a1
SHA256 226522107a0e534d988a5cdff6b410f66d4f26b03ce28ea915041920f7f4047b
SHA512 12ed66f9f12dcbac9bdfa98c5ec58ee6d6abe8327cde11fdde47e838ad0dfc21ae37f48d0bea85d6aa126553e560e2de0433151f6a5d2dd3223850423f931ce7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 15021ab32b829ec0c758125d9e5cf556
SHA1 adafe472abd203595a0aea4a1eddba16a23a709a
SHA256 97c20a2f27a0035add5688119757ace8b992986bef3996e1f0628f806879a42e
SHA512 5f150b05d2025914a71b299cf71943d610270184ad0a275f11567acf8036a21c304b5469a6e273ec5c103cb35ad2e1d28a8930f4894837354b63367691d81bd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6fc107d6e7873d6724fc66b69922acd7
SHA1 daa67b443a62520f02f6bb8f1ad8c107fbf6e3b5
SHA256 af97073753f8ee33dbe48c878518ba7efa94d5797ff91691c23d8f02b852c06a
SHA512 8de3957269b730600686d6fe8c4448e003f801407cb23d7cebde614086536a2dda834cba157c8bfffab6651f6a77b2e9e0d22dd92c486b0358c3d1947c954611

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a3983fdc8115d488a720502cffc37449
SHA1 f2b2b564827349f8c84015263dd3631d041ed466
SHA256 e0cdb347a0ad6fb9ebfd122b9f897b56868d267f8d4427a3e065a30bf8ece183
SHA512 8b4ad400f513183cc33166867c6e5be7dfbbd9e7cce561f18e7bda47f527a0101aa51f025939e6bfae58c9652028fe813384f1f0b55e207e206a86e7e71dc5df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000106

MD5 9ba2064d38eeb5042951f9699bd24192
SHA1 5c3589f43e20ad11b238e51298dc63b98d256794
SHA256 c34948200ad5e17597d3b3a34052dadee91382d802028495610ec2b9cf1f42de
SHA512 9a964d695e064549bae9931601c084cf2187398546309b8a94a955b33f1a94763295486d6e053a63f5f6f9c4a32d5730bc5b18ae2a17a52d986f6bc0311b4553

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0d434d9a7d7ea8a9_0

MD5 2322828f94324f0d8ed7e500397edbb7
SHA1 858eb5dc25b0e1a31c58edd8aa3e65d9f785f59a
SHA256 3e1e6f89ecf58cad52b547e2793e394ca057c1fe3a51cf92035bd4de858ed330
SHA512 81e43fa744656c6c6133a15972371b6f07aee70e161361283d9962b6109fb3aad51db26426b99f6b1ea031c73f185b94950ff50e81d23a6719693f9f8b810eec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000118

MD5 503766d5e5838b4fcadf8c3f72e43605
SHA1 6c8b2fa17150d77929b7dc183d8363f12ff81f59
SHA256 c53b8a39416067f4d70c21be02ca9c84724b1c525d34e7910482b64d8e301cf9
SHA512 5ead599ae1410a5c0e09ee73d0fdf8e8a75864ab6ce12f0777b2938fd54df62993767249f5121af97aa629d8f7c5eae182214b6f67117476e1e2b9a72f34e0b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_eaglercraft.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3c5da3b4588326642b18c989cc755818
SHA1 df35706676954c33e9348c90f68c18395a5e199f
SHA256 884c7ab340ea9e22bba6163cc7ed4a8adc8363742afb0e16e6f3079b6cbec35d
SHA512 057d878a582d8e4b2aeab948529d0d9df552179499001e57aef20ee0f2cbdcd9b7d59385124cb13e9cf8d0560d21d5c3582cae25151b78c3c12ab14a96200c76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fe7a58817aee13e4c5b5d6ac78df628b
SHA1 bcdde61581c631b86e22acba44a78fbf7be9cd63
SHA256 c4c4e65255aec701f2bbb79bf045dbeae1fc31bef42a5f5da200914e5eb36247
SHA512 f140b23bfd04b7e874ac499d517d51e9a26385df3c92667890dfc9a816915958aa1419ae5e9fc43127ff9c84e525b05c2f7e2799d14e4cf45219122521f74423

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9ec865acf28e0e51a604ba567b28701f
SHA1 53f74283f94b97d6d073947c5abffef4510ea586
SHA256 e227aca8dee2e231645e79d625b72a68dd784d9151256d490b0f52efc4675f5d
SHA512 9d3abc5b708b87ccfefa571cc9fa1f0b99656a3f97fd19f8b2ec577bcaf1eb4aff1890b07c13e66587643e7afa439f06eeaa200c1e1dee60c2118d5b56c7244c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f1a578963af451ed47fab7299a0ef8d3
SHA1 f9643231682b2a109165eb12cf8dd81721cfc3b9
SHA256 744c79536f6d81fecb6525b7887a464f480bab7697e864d25580ae5e15164e5b
SHA512 d829fe507ac554ecfa0e9f2de721d0fdd76c074da8534ab6ad66b501a097b6730817082dbf5b2c9ec06e0f74b093347b81f7bfe431703ffd3b37d21d086f73a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0ea9fc2d475d5788702ce8bd33f60f72
SHA1 6a360f000aa191e296d48161376cf657daf1b5a9
SHA256 9b7a7417c3192e0ba179d276115f52bc9f17fcea92192e7334d49f50ec8ee1fd
SHA512 0da9d6093ff98ea605b0fad24230ee7485b90b3a802e0675ea38c33116ded34561bb541dc95f8fcde6532abb25317f03eab09d8d3ed941ecdfbf8d4d126be32f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5fc7f11eecafd1c21eb3296c5df5364a
SHA1 d0bdd5efcb3e1ce916960e37980fc75a6b5e1f45
SHA256 1f2a9dbc129f122679c883e013e83006d8d88e978a2ac2122a32d81b28a7b341
SHA512 6b786514cbf361b370f9b88854149c5e39e3b5b5dd9b180611323a2bf6dd689bf66459d14a89a4ff19ba08474bb6cceffb2ed861f5c6a97b27c662de20b6201a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4940226f6b15ddd2fbe784df5a552a18
SHA1 2d711fbb16295a99a50886ed23f9199a25ae5bc2
SHA256 03d19b8c1026b6f12717635fb9a78838703b737ca56b36f396298906b61002bf
SHA512 895d995137ffb87f5cfc13e3b4c764bf471a60aeff73d04e808d37fca1107115407f5d53f460002309e2cad0a2942efe20cdc7279219eb8f9c7bd7aca0828c80