Malware Analysis Report

2025-01-19 02:23

Sample ID 241126-xmk9msvjcv
Target https://is.gd/iDKEEx
Tags
steam discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://is.gd/iDKEEx was found to be: Known bad.

Malicious Activity Summary

steam discovery phishing

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

A potential corporate email address has been identified in the URL: [email protected]

Detected potential entity reuse from brand STEAM.

Browser Information Discovery

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Modifies registry class

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-26 18:58

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-26 18:58

Reported

2024-11-26 19:03

Platform

win10v2004-20241007-en

Max time kernel

299s

Max time network

300s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://is.gd/iDKEEx"

Signatures

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

A potential corporate email address has been identified in the URL: [email protected]

phishing

Detected potential entity reuse from brand STEAM.

phishing steam

Browser Information Discovery

discovery

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3404 wrote to memory of 3792 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1352 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3792 wrote to memory of 1144 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://is.gd/iDKEEx"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://is.gd/iDKEEx

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1960 -parentBuildID 20240401114208 -prefsHandle 1700 -prefMapHandle 1856 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {77c9d298-daf3-4ce9-8460-cb91842c2b29} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2396 -parentBuildID 20240401114208 -prefsHandle 2388 -prefMapHandle 2384 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {309f908c-cc7b-4ea1-bc73-062557c54d8f} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3276 -childID 1 -isForBrowser -prefsHandle 2640 -prefMapHandle 2904 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b9b818f0-2aa7-427e-9b89-29e001848667} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3692 -childID 2 -isForBrowser -prefsHandle 3688 -prefMapHandle 3684 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f2709781-8821-47f6-8946-0f013a66897a} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4256 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4260 -prefMapHandle 4280 -prefsLen 29090 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a640b496-f75c-4c65-8034-159fd07c703e} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5312 -childID 3 -isForBrowser -prefsHandle 5364 -prefMapHandle 5356 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {22f8c0f1-500b-4f91-853e-bf532b895028} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4944 -childID 4 -isForBrowser -prefsHandle 5356 -prefMapHandle 3380 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6938f22-7042-4836-8494-9ec126394b75} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3200 -childID 5 -isForBrowser -prefsHandle 3256 -prefMapHandle 5284 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9581b2d2-f0c4-45ad-89dc-de4078b2c9fa} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5876 -childID 6 -isForBrowser -prefsHandle 5868 -prefMapHandle 5864 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7a593c17-a856-4f10-a67b-a167856b4744} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6180 -childID 7 -isForBrowser -prefsHandle 5816 -prefMapHandle 6120 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fc996ed4-0b4a-4c54-abf0-3aa0bb7c1ac5} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5564 -childID 8 -isForBrowser -prefsHandle 2920 -prefMapHandle 3152 -prefsLen 27401 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a653df81-a7ea-4042-a703-75be57ef4dfb} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5128 -childID 9 -isForBrowser -prefsHandle 6384 -prefMapHandle 6360 -prefsLen 30532 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0f449b07-2579-4382-aee6-dd77f7de76ab} 3792 "\\.\pipe\gecko-crash-server-pipe.3792" tab

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\ClearPop.htm

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd442746f8,0x7ffd44274708,0x7ffd44274718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,2523891268191561897,2829476822050174844,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,2523891268191561897,2829476822050174844,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,2523891268191561897,2829476822050174844,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2523891268191561897,2829476822050174844,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,2523891268191561897,2829476822050174844,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd442746f8,0x7ffd44274708,0x7ffd44274718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2692 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2692 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4216 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5456 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,8750382367989697031,10422142728829155397,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
N/A 127.0.0.1:60904 tcp
US 8.8.8.8:53 is.gd udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 104.25.233.53:443 is.gd tcp
US 8.8.8.8:53 is.gd udp
US 104.25.233.53:443 is.gd tcp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 is.gd udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 53.233.25.104.in-addr.arpa udp
US 34.149.97.1:443 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 8.8.8.8:53 scearmcommnymnlty.com udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 172.67.152.254:443 scearmcommnymnlty.com tcp
US 8.8.8.8:53 scearmcommnymnlty.com udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 scearmcommnymnlty.com udp
US 8.8.8.8:53 164.237.32.52.in-addr.arpa udp
US 8.8.8.8:53 254.152.67.172.in-addr.arpa udp
N/A 127.0.0.1:60912 tcp
US 172.67.152.254:443 scearmcommnymnlty.com udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 www.cloudflare.com udp
US 104.16.124.96:443 www.cloudflare.com tcp
US 8.8.8.8:53 www.cloudflare.com udp
US 104.16.124.96:443 www.cloudflare.com tcp
US 8.8.8.8:53 www.cloudflare.com udp
US 104.16.124.96:443 www.cloudflare.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 cf-assets.www.cloudflare.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 performance.radar.cloudflare.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 ot.www.cloudflare.com udp
US 104.16.124.96:443 ot.www.cloudflare.com tcp
US 104.16.124.96:443 ot.www.cloudflare.com tcp
US 8.8.8.8:53 cf-assets.www.cloudflare.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 96.124.16.104.in-addr.arpa udp
US 104.18.95.41:443 challenges.cloudflare.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.18.30.78:443 performance.radar.cloudflare.com tcp
US 8.8.8.8:53 performance.radar.cloudflare.com udp
US 104.16.123.96:443 cf-assets.www.cloudflare.com tcp
US 8.8.8.8:53 ot.www.cloudflare.com udp
US 8.8.8.8:53 cf-assets.www.cloudflare.com udp
US 8.8.8.8:53 ot.www.cloudflare.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 performance.radar.cloudflare.com udp
US 104.18.95.41:443 challenges.cloudflare.com udp
US 104.16.123.96:443 ot.www.cloudflare.com udp
US 104.16.124.96:443 ot.www.cloudflare.com udp
US 104.18.30.78:443 performance.radar.cloudflare.com udp
US 104.16.123.96:443 ot.www.cloudflare.com tcp
US 8.8.8.8:53 p29.cedexis-test.com udp
FR 52.222.201.104:443 p29.cedexis-test.com tcp
US 8.8.8.8:53 d1inq1x5xtur5k.cloudfront.net udp
US 8.8.8.8:53 d1inq1x5xtur5k.cloudfront.net udp
US 8.8.8.8:53 cdn.logr-ingest.com udp
US 104.21.53.61:443 cdn.logr-ingest.com tcp
US 8.8.8.8:53 cdn.logr-ingest.com udp
US 8.8.8.8:53 cdn.logr-ingest.com udp
FR 52.222.201.104:443 p29.cedexis-test.com udp
US 104.21.53.61:443 cdn.logr-ingest.com udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 41.95.18.104.in-addr.arpa udp
US 8.8.8.8:53 78.30.18.104.in-addr.arpa udp
US 8.8.8.8:53 96.123.16.104.in-addr.arpa udp
US 8.8.8.8:53 104.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 61.53.21.104.in-addr.arpa udp
US 8.8.8.8:53 cedexis-test.akamaized.net udp
GB 2.22.144.37:443 cedexis-test.akamaized.net tcp
US 8.8.8.8:53 a1851.dscw121.akamai.net udp
US 8.8.8.8:53 api.www.cloudflare.com udp
US 8.8.8.8:53 a1851.dscw121.akamai.net udp
US 104.16.124.96:443 api.www.cloudflare.com tcp
US 8.8.8.8:53 api.www.cloudflare.com udp
US 8.8.8.8:53 api.www.cloudflare.com udp
US 104.16.124.96:443 api.www.cloudflare.com udp
US 8.8.8.8:53 benchmark.1e100cdn.net udp
US 35.190.26.57:443 benchmark.1e100cdn.net tcp
US 8.8.8.8:53 benchmark.1e100cdn.net udp
US 8.8.8.8:53 benchmark.1e100cdn.net udp
US 35.190.26.57:443 benchmark.1e100cdn.net udp
US 8.8.8.8:53 37.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 57.26.190.35.in-addr.arpa udp
US 8.8.8.8:53 benchmarks.cdn.compute-pipe.com udp
US 104.18.30.19:443 benchmarks.cdn.compute-pipe.com tcp
US 8.8.8.8:53 benchmarks.cdn.compute-pipe.com udp
US 8.8.8.8:53 benchmarks.cdn.compute-pipe.com udp
US 8.8.8.8:53 fastly.cedexis-test.com udp
US 151.101.130.6:443 fastly.cedexis-test.com tcp
US 8.8.8.8:53 prod.cedexis-ssl.map.fastly.net udp
US 8.8.8.8:53 prod.cedexis-ssl.map.fastly.net udp
US 8.8.8.8:53 19.30.18.104.in-addr.arpa udp
US 8.8.8.8:53 6.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 p16999.cedexis-test.com udp
US 152.195.132.129:443 p16999.cedexis-test.com tcp
US 8.8.8.8:53 cs620.wpc.edgecastcdn.net udp
US 8.8.8.8:53 cs620.wpc.edgecastcdn.net udp
US 8.8.8.8:53 jsdelivr.b-cdn.net udp
US 8.8.8.8:53 jsdelivr.b-cdn.net udp
GB 79.127.237.132:443 jsdelivr.b-cdn.net tcp
US 8.8.8.8:53 jsdelivr.b-cdn.net udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
GB 79.127.237.132:443 jsdelivr.b-cdn.net udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 8.8.8.8:53 129.132.195.152.in-addr.arpa udp
US 8.8.8.8:53 132.237.127.79.in-addr.arpa udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 8.8.8.8:53 p17003.cedexis-test.com udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
US 8.8.8.8:53 p36.cedexis-test.com udp
DE 163.171.128.148:443 p36.cedexis-test.com tcp
US 8.8.8.8:53 p36.cedexis-test.com.wsoversea.com udp
US 8.8.8.8:53 p36.cedexis-test.com.wsoversea.com udp
US 104.18.30.78:443 performance.radar.cloudflare.com udp
US 8.8.8.8:53 148.128.171.163.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 support.mozilla.org udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 212.20.149.52.in-addr.arpa udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.190.72.216:443 location.services.mozilla.com tcp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 88.221.134.209:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
GB 172.217.169.46:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 172.217.169.46:443 redirector.gvt1.com udp
US 8.8.8.8:53 r4---sn-5hne6n6e.gvt1.com udp
NL 172.217.132.233:443 r4---sn-5hne6n6e.gvt1.com tcp
US 8.8.8.8:53 r4.sn-5hne6n6e.gvt1.com udp
US 8.8.8.8:53 r4.sn-5hne6n6e.gvt1.com udp
NL 172.217.132.233:443 r4.sn-5hne6n6e.gvt1.com udp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 233.132.217.172.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
GB 2.18.27.82:443 www.bing.com tcp
US 8.8.8.8:53 82.27.18.2.in-addr.arpa udp
GB 2.18.27.82:443 www.bing.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 69.209.201.84.in-addr.arpa udp
US 104.25.233.53:80 is.gd tcp
US 104.25.233.53:80 is.gd tcp
US 104.25.233.53:443 is.gd tcp
US 104.21.49.224:443 scearmcommnymnlty.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 224.49.21.104.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 104.16.124.96:443 api.www.cloudflare.com tcp
US 104.16.124.96:443 api.www.cloudflare.com tcp
US 104.16.124.96:443 api.www.cloudflare.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 104.16.123.96:443 api.www.cloudflare.com tcp
US 104.16.123.96:443 api.www.cloudflare.com tcp
US 104.18.94.41:443 challenges.cloudflare.com tcp
US 104.18.30.78:443 performance.radar.cloudflare.com tcp
US 104.16.123.96:443 api.www.cloudflare.com tcp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 41.94.18.104.in-addr.arpa udp
US 104.18.94.41:443 challenges.cloudflare.com udp
US 104.16.123.96:443 api.www.cloudflare.com udp
US 172.67.209.99:443 cdn.logr-ingest.com tcp
US 104.16.123.96:443 api.www.cloudflare.com udp
US 8.8.8.8:53 ptcfc.com udp
US 162.159.140.203:443 ptcfc.com tcp
US 8.8.8.8:53 testingcf.jsdelivr.net udp
US 104.18.187.31:443 testingcf.jsdelivr.net tcp
US 8.8.8.8:53 99.209.67.172.in-addr.arpa udp
US 8.8.8.8:53 203.140.159.162.in-addr.arpa udp
US 8.8.8.8:53 31.187.18.104.in-addr.arpa udp
US 8.8.8.8:53 essl-cdxs.edgekey.net udp
GB 2.18.27.98:443 essl-cdxs.edgekey.net tcp
US 8.8.8.8:53 fastly.jsdelivr.net udp
US 151.101.129.229:443 fastly.jsdelivr.net tcp
US 8.8.8.8:53 98.27.18.2.in-addr.arpa udp
US 8.8.8.8:53 uniquely-peaceful-hagfish.edgecompute.app udp
US 151.101.193.51:443 uniquely-peaceful-hagfish.edgecompute.app tcp
US 8.8.8.8:53 exactly-huge-arachnid.edgecompute.app udp
US 8.8.8.8:53 serverless-benchmarks-rust.compute-pipe.com udp
US 104.18.0.248:443 serverless-benchmarks-rust.compute-pipe.com tcp
US 8.8.8.8:53 serverless-benchmarks-js.compute-pipe.com udp
US 8.8.8.8:53 229.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 133.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 51.193.101.151.in-addr.arpa udp
US 104.18.0.248:443 serverless-benchmarks-js.compute-pipe.com tcp
US 8.8.8.8:53 p29.cedexis-test.com udp
FR 18.244.28.117:443 p29.cedexis-test.com tcp
US 104.18.30.19:443 benchmarks.cdn.compute-pipe.com tcp
US 8.8.8.8:53 248.0.18.104.in-addr.arpa udp
US 8.8.8.8:53 cedexis-test.akamaized.net udp
GB 2.22.144.37:443 cedexis-test.akamaized.net tcp
US 8.8.8.8:53 fastly.cedexis-test.com udp
US 151.101.194.6:443 fastly.cedexis-test.com tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 35.190.26.57:443 benchmark.1e100cdn.net tcp
US 8.8.8.8:53 117.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 6.194.101.151.in-addr.arpa udp
US 104.18.30.78:443 performance.radar.cloudflare.com udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 104.21.49.224:443 scearmcommnymnlty.com udp
US 8.8.8.8:53 steamcommunity.com udp
GB 2.22.99.85:443 steamcommunity.com tcp
US 8.8.8.8:53 steamcommuniqy.com udp
US 8.8.8.8:53 store.cloudflare.steamstatic.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 151.101.2.137:443 code.jquery.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 85.99.22.2.in-addr.arpa udp
US 8.8.8.8:53 cdn.akamai.steamstatic.com udp
US 104.18.42.105:443 store.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 clan.akamai.steamstatic.com udp
GB 88.221.134.209:443 cdn.akamai.steamstatic.com tcp
GB 88.221.134.179:443 clan.akamai.steamstatic.com tcp
GB 184.25.193.136:443 store.steampowered.com tcp
US 8.8.8.8:53 105.42.18.104.in-addr.arpa udp
US 8.8.8.8:53 137.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 136.193.25.184.in-addr.arpa udp
US 8.8.8.8:53 179.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 fonts.cdnfonts.com udp
US 172.67.184.158:443 fonts.cdnfonts.com tcp
US 8.8.8.8:53 community.cloudflare.steamstatic.com udp
US 8.8.8.8:53 community.akamai.steamstatic.com udp
GB 88.221.134.216:443 community.akamai.steamstatic.com tcp
GB 88.221.134.216:443 community.akamai.steamstatic.com tcp
GB 88.221.134.216:443 community.akamai.steamstatic.com tcp
US 172.67.184.158:443 fonts.cdnfonts.com udp
GB 88.221.134.216:443 community.akamai.steamstatic.com tcp
US 8.8.8.8:53 158.184.67.172.in-addr.arpa udp
US 8.8.8.8:53 216.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 104.21.49.224:443 scearmcommnymnlty.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 steamcommuniqy.com udp
US 8.8.8.8:53 devtools.azureedge.net udp
US 13.107.246.64:443 devtools.azureedge.net tcp
N/A 127.0.0.1:9229 tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\pending_pings\fae6b399-59c0-461f-9cf0-d1f214bbe3c6

MD5 d524dd025c47b32d68f05077cdf98367
SHA1 c0506e9fac8e1977ddf70de7549c7e815cff130f
SHA256 4271bd3c93fed9df2ba76cfeca1a0829eb80c73340d77d20c5fd35a2b0b70a46
SHA512 875129be5806713db89f7523f29e845aa312b62f9db4c8a5096214d98cedb45473010579d547ec7b46a6aacc47c6d9beec534b125dc6e05a9c373717337e1cef

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\pending_pings\a0c70c4e-57f9-4c2f-b9a8-82321fc0273e

MD5 a4f7122bf485a798f456f479dbbf11ff
SHA1 84f2eb47c8ad73e5e8aa5f718ec21c97bbb83c22
SHA256 fd57a6ec454df8c0319dff7a03f3f6753b7b258be3387e4f6dd38096040c52e0
SHA512 2b645bc07ae78466efc916b75c59999c9da10cc12a5394e1d597129ae16c01f388f4b603ba4bdded3812c3b0cb38adf3c07544f2ff2d2de2f2fd982bd2e475a9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\pending_pings\47fd2107-77a0-4586-8584-7c70fb7a8b7e

MD5 6d606cc214a8043149817edb069ebe20
SHA1 8ca0e57409e0896a6202a28200dd3096c3b7b393
SHA256 b83c07e30e8329066199888661c7fe98e8f79c34373a6db597aa40cb4e7740a8
SHA512 093f181083d9d62bc6f0256371c3b420201eaf6f437a18ff993cbab92c6103f1b4b387feac533684ca79a72555ea887355020a5608878795dd4fe8454040f7e5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\db\data.safe.tmp

MD5 0e6bc792534ad9d86233c47bb7927ec9
SHA1 b15175d27e076d0edeaeae7c24fb6033a2194abd
SHA256 4e662ee7daf9a7d704793ea953a6d835e0d332dd85e340bdff3565c8c6ac0298
SHA512 e1bb8c951c6f52e213e5beebca1d963292dfd5c76cb7bd853744fa3d283324fb2cc71566d3642bde53db9ed6e0319515b2766890b13bfc4a036158563dc2758d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\AlternateServices.bin

MD5 7d183d05ce1296d61603cbb80b4731b3
SHA1 6ca71537894e8c215c2ff7fcec129803a69afb0e
SHA256 1b162fb6c4bbba86012f21677620a8bf25f150f67dcf13206cb02a8d318e2716
SHA512 481a2de8d751ec6bce523e14bf4416a40d6e6577f5551c0969a4e3ec335cd95e361c615833dcd7e154fe44f98c490df1825413806a042ec607635b3a324aeada

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\db\data.safe.tmp

MD5 6b521511dc3d949ca37ce561e42620d4
SHA1 e36a1a0f2670d081c30b38a9aca0ac0f4b2c2d26
SHA256 4ed9880c4a438cd4e7f99292405a1972710fe7dc9c219ea516c6d567c243c7b8
SHA512 f0a4a191065c4a8e8e02bce0ef4eb86f6335242cb0720908557350ac931825f814f9634b76b111f4c432e020d11e7150adcb8b97224d96a6163dde0c180eaebd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\activity-stream.discovery_stream.json

MD5 d3cfd525c7aa810f183fede1b8e5681f
SHA1 2a94b48663cd2543db8012b4bd00ce6287596ad4
SHA256 2e75af4c1f9b28fc0d25057f3a3719aa48290f45037e1f2e2fb9229a2e913b06
SHA512 2beeff8b1703b70d6b8a7b82a3d259543df2ab81a3cf1153b1919642b4e3af1299f06e990d17ee6cd3d66a36a9c98f05304e07bff7a6f0fd1d5f997eaa2450cf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\prefs.js

MD5 921c3635af0ef08f985e255b5c0d377e
SHA1 afa8486472bd18649fb5c00b7fd5fc68a7cbff87
SHA256 7d0e8a2f2ded69c0c9b507a078aada07804b26bc6d3eab39a1c8ec598310e173
SHA512 974a3d517c173867e9eaf13345f0bd43ecf8ce62001aed390707c747086baaaf5d8c1d1e03268130f048f8d0b3907769137c4c8d55b603bc1e12ae2b7e9904eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\AlternateServices.bin

MD5 9877584bcb4f5ac439c23b9bd56d0600
SHA1 a7cf83009dbdc48c2014ca263a45d8dea8f552aa
SHA256 109e2cd5c76d4813fa9aa44a9daf7f53d91bcc6fd9e015dc2bb2acce09863bec
SHA512 fea27ebb7e885907d41612de44be9e36a75cc842cc88a22603204b25527459554c40f68986632e630dee7d52e24cbb414f133977e8ad8f6e10b594031535bfb2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\entries\E17EC9D790EB2697D33CA1C603C570BC63D627C3

MD5 45e88548a9e19a2df6be610edaeef354
SHA1 91fa8ada10714cbd69b78ee1100d284c7717a998
SHA256 84b5e7ac6b2d23dd1c14e1a55856ad12a5ff6a450058d5005ababdf49104aa88
SHA512 394fc846f07db017cb5eaf7d1f04e913c11530d8fb1783b68117f97689826685b8d9684e6dcb9756389ad14aedfcd5a1cd9f1aebcf8aa59672c85c670d4ff5f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\prefs-1.js

MD5 4dc39f50c8e5f8c23a9b013cbc3b8dc4
SHA1 3a2ed8941c8230d4a97fad69708f0d10bdc13a42
SHA256 8cc344e3c3ea67f25efa2e269784c4a0506389d24ff795737d78a026c8e2da52
SHA512 326f90ed59bb4d17f661dcce6724a04ca9f0e3e4de9b05a28c72a5067f8783d6e60323ea8c8ebbf48e28accfa556671795b306d98a51eb2424d0f260cc8b4d2a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\entries\7EB64B2E97A052C88AE121F9458ABB7B7247DCBD

MD5 33b58b679ce5d593919ff286082bf393
SHA1 6a158a56bf40d96a148239661aacfb543e96c7ac
SHA256 09c496a1f13e17602601697c5e66353237d992138075fc8f256526c4044a3a13
SHA512 f1ace7282b507527768a7d5dc325ee94c22d2dc7a5a668950eee1022e2ad087cb5da53ade72f502334fca60a556e765fea964a905e62178a85613938fd68303c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\entries\FD40068662C1CE7420D74759D6B94BAC4C841256

MD5 ca978e8ffd73072f4385ca6078ab019e
SHA1 f0c76a6a06931b17957978bb06e0b382ac963d2e
SHA256 ff68aa2d37cebf499dafd331b925a4ae0428c3d086423815d14be8dddb0d5a48
SHA512 663bfc30c209d49da2c6b7b7c3e9dfc89ba9151e2d0f65a2c553d7262ec097174703de160abc3187e8517ad744e331b0b67dbe14dcfabbaa8093c802074b4506

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\entries\199020276CB098DEF095651E27BA1E6ADDCC5E1E

MD5 09644ea024e76408868ccd2f9c0fd72a
SHA1 be7d22805800491133747db358507cff377c4056
SHA256 a59d2cc201338dd8ac2a6b15bb94f51f2629a8f50f5e23f81d9b699f1b86c52d
SHA512 005000038835acfb4143c950644981486c39c6f43e87b429e0d0e381db8d0c77edc02071cb2cb95247fef9a3c0004a5bb84320bb5efb76f9898ee8ebaee3ae7c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\entries\F24CE0FDE03FDE3E98486682816F40FA7B30F37D

MD5 2a49f895ab340552f2346be18379e97f
SHA1 50c3bfef93434d82f9ad6f0450149228df8fce03
SHA256 7d1bd4ab13668db7d9c0a11eab3225ed54adbca490462aa9e5bc5ceb0b1e4914
SHA512 c3cc19a441d5ef29349b78e77496be410346ce56b5cf036873743706438654dec28be35ccaa4a6faac34145e3dcfdebc8204cf2269eb1a5a523008209d98ffee

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7fmsgkth.default-release\cache2\doomed\4829

MD5 0d8e02071e3ab0c079bfe68d71d77134
SHA1 9f51aa43cfd31e3aecb4adf7de4c6583a1111d6a
SHA256 b10f84bebcde1945a61f285fba74e1e22c0e87b6c22573bae3e3328144ec0def
SHA512 af3b1019442dd3ea8c64f85aabe0503b6971c37f369baff3cc06a694492140d1d3218d3bc78cdeac946140488c4bd0346395c7128aa96c1382d290e1564abda7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\datareporting\glean\db\data.safe.tmp

MD5 fe0b18a31cc2834368884e8d08f85cbf
SHA1 90ba714f624a3ba71956936ffb243d8cb08f21ce
SHA256 4599a2bcf87f90ce396fd6b6f665d40122a7606fb628adbf0df12a9cb658821a
SHA512 04b4eef054d830b3e34ca255dd747270c68e0fee79421c58fd2c0dac6b18a7782ddf1dbb4dd77e0b3829f75b25098dd255a7aea5ebf8bed59519a4ac191578a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\sessionstore-backups\recovery.baklz4

MD5 39f4654d9ea515e6dfee7cf2e2d8dc8c
SHA1 7afe4452978a893f4489a65931f0a78046af4a8e
SHA256 fcc04fbe835ea7e23195351e985bab6d7cebb194b1ea852be246f6f0ecd3df17
SHA512 b88adf96493ff6e8474974db084136cd9ce068985c6c9286ec5d79e46926d348344ed6285dc26b7276b3be495becdf5e5704a8b2db6fa9f52866ad991a771757

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\prefs-1.js

MD5 d7e1e7bf26af949bf16934bb16ba96fc
SHA1 0585ad993a1820917a0615b9808648509258cb52
SHA256 40252c9d470a6d430153198432ac7ae173d1fad93fc5d7f42dcee9a770aee3bd
SHA512 30eeb63faea6cb993d57b3578b93d4f28c3671a5c954f0c4036d913a1627c40081ebe2e5fb07a2bbda7919ec52691b680a7fe0be2527660308cda72981562aac

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\AlternateServices.bin

MD5 99ace2493a4b307e8b39203c6d17b277
SHA1 9c2cd3218c6afe6280cd66f572e3b1022c6e66f6
SHA256 2c80dc7acb8fc7c1d29a061ebb0ed742c78eed015e4fff90b7d1ae17761fde98
SHA512 47628d20852534a245f31b674d839d845981de00d3514920b15c0b63d4e88f317b621041a868f074d4cc68e271cd6ee35c3cc17a975cac995aef8df9ac41e6ae

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a0486d6f8406d852dd805b66ff467692
SHA1 77ba1f63142e86b21c951b808f4bc5d8ed89b571
SHA256 c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be
SHA512 065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

\??\pipe\LOCAL\crashpad_2460_MDQFLYJLODNMTTLI

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 dc058ebc0f8181946a312f0be99ed79c
SHA1 0c6f376ed8f2d4c275336048c7c9ef9edf18bff0
SHA256 378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a
SHA512 36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 643d393268b3e6ce3999a94c21b5ad0c
SHA1 d0e983d2405ab7e0c3154001b7e0b757e9593423
SHA256 a3ed03177a1396eb69cb89b28c154e9d3551b11c101e55402f418dc2ac06fee4
SHA512 6824167184b63da803189879a3e0b6b02b40e8f2b83cc1aa6913d3343236a639242cc56d5d77a238b2ae8c93043be6396dd954cbdbe087a32e9e7a3108171760

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\sessionstore-backups\recovery.baklz4

MD5 6f8b07acb86185e47291144ef3218008
SHA1 f75c0120214cfa9cb35d1c4d52aca37a6acda867
SHA256 2796b87c4cd8f0caa8307581ec9a17a8dde84527ca86c94a527a7f8faf6faeb7
SHA512 d1d7e6d6b3342bda8c5002449d5242c0874400c639dbc606e2ea2c996d011f227c4ab8de3a43a7a10045213878f68fe6e4c31368edf6cddbe91ce2952418d42c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b723b96409b7eb419c3b2bd2afd9007a
SHA1 8e2f3f393affdb28a2ba2cfc139a9ab30d9fe530
SHA256 29c5800890f5ec398c2d2a9bbb7d4beb3f7cef45a800d748651756c1dedb565c
SHA512 45d5578cff12439fbd843755fe1f296f8cdc36be0478b04ce9d32fabbdf0a5492b970072468908e952ea7c95db687797272b4f35fbeefc2edcb103b18ffc7bbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8120dac8e46d82cf9c2f0af32170a691
SHA1 df93e79f7e2ec625e59d7c1600a899d31e6a32f7
SHA256 99f0f0df1663e664ec5318d80c380354d877be6e0fe17ca696efa1bbe805a470
SHA512 d77b4f1c14a57f779c1da6d5708c9ca7349c430af110bdc0f7bd3c9e45a77381d30d61bc0a04c142fd822d7fa1a582bf2b23ec66d91e08f2a4140f5c74d7d669

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

MD5 838a7b32aefb618130392bc7d006aa2e
SHA1 5159e0f18c9e68f0e75e2239875aa994847b8290
SHA256 ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa
SHA512 9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

MD5 f3956252cceb8990596e36ac75fcc317
SHA1 96fade9a33ac2832673c98ea8bb95b7ba514ae79
SHA256 130026f206474d2b012aeaa249f7209a57cd7206cdbca89077cfcec3f4b82bd0
SHA512 8f8deeb5b2e229dd2efcf3085de62be9adbc7a8bae7ddd42198bc952e93f5fb88817f33887151a4a362f76f1d60a3bb34a2285c18b57ba0448c390347c068cec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13377121167316722

MD5 a7bd075daabc48b0afec0618abf65909
SHA1 21bcc83774daa74d370d6a9d391c9d870733bbf8
SHA256 8038589a08cbdc060a45a92c381da97c41e1120d04d598b0641fdc2892b3514d
SHA512 a89bc5a01296a757fc43563ef82b14723813304da938ecd5b68f962c6ea536664742bf0ca7452e9054ae394588119728cda224cf24d80a0cc07f709c7d231e4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

MD5 dd8412e34094ce2a28cd72876e759e58
SHA1 3d95e82ebced9e5e9b4a7788d9ea378e9e2f34b4
SHA256 9fd0cac6dc6f9ac2a64b1007ee17e84a60eeb730eff8180f53416693d0caa58b
SHA512 da1ee5967094f0eea403c65b48770c33c614ebae18e816ce61a0deada75925cdb8ad41def8556ca99a116fac057140d305b975cd01bccb223a8ba1b9ad20cb54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

MD5 2271e29529de922e2aecde9689b2c9e8
SHA1 f3ca0f362d312ccb5040b21920501b4f24df4d3b
SHA256 8c51e08fc369b68144b0cca8deade0004b5fb7d852eab2c118d16801b04dd959
SHA512 24c6870bcc7d972edd4513729703829d6eeb494678309425c778233449aec6d44209a2bfaf1c1bcd757bca28c357841954875a42874ba3e57541b3cac9a6aa00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

MD5 a62d3a19ae8455b16223d3ead5300936
SHA1 c0c3083c7f5f7a6b41f440244a8226f96b300343
SHA256 c72428d5b415719c73b6a102e60aaa6ad94bdc9273ca9950e637a91b3106514e
SHA512 f3fc16fc45c8559c34ceba61739edd3facbbf25d114fecc57f61ec31072b233245fabae042cf6276e61c76e938e0826a0a17ae95710cfb21c2da13e18edbf99f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

MD5 bf3845aa0a5f635e743187b2e558b141
SHA1 c28c766e92f64dc22fa9914018b6a69b3e046d94
SHA256 d69ffb8ddb2eeb40527ead33942acd15c9703521acd76982130b9e8d5f5f1989
SHA512 8d60f60a99e1f0b597cd1c3498cdb46ca58f5ccb262e2c53ecc7b9e5eaa1d280c91665410501dfa7f0a86cdf9707a512ea552784ddedafe61d9d6aed5276672d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

MD5 8b86c4e8bf8c3cfbfb3af7fefc245adc
SHA1 fee47852ce1230566ebc16f6b1150df949ae03ae
SHA256 36c4d3fffae178a2b9a3d6f9ae8d12942e915e31a4167e53b7be5f17e9b7e781
SHA512 d02fa54fdbe195e633c1670f23bff50492c73c95b1710031fb249c6ef9838e240ab8f67618d8067e1516c0d52e245e990073f9b52a2ec94f3ba444e7ad4eabd9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

MD5 98bd58dd2610cf30152242b7dbb4f8cd
SHA1 f2437f07b07ae93c70823f164e409e151dd8ac22
SHA256 9a630df35261760b87f59850614cec43c08ed7eda7af1c9d1948cf5768bf0487
SHA512 382211aa29e8f09116195be844b9704e2d9885b179e13e8b533a9c9b2b77e2fb060a2837f21b5b71fcd3c61a60aaa540608fbd5382e593c21891aa52a69fd0fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 221960cd712909f75d5864e7b906127c
SHA1 acbae3532a83af3d0700b939814eedb60dbf5751
SHA256 03724015751e4ca79520703493b0070b00b15d349550575b8eaddf28adc5ecb6
SHA512 b8148715cc1027bf82e487d4ad1243e2db99edb06914894e500eb3b6fff9fc673b251174887e94703186b5df487d6699be18b6106a704864ff7c2fe97f69a989

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

MD5 a48763b50473dbd0a0922258703d673e
SHA1 5a3572629bcdf5586d79823b6ddbf3d9736aa251
SHA256 9bb14ea03c24f4c3543b22a8b4e9d306b926d4950cfcc410808ecac2407409fd
SHA512 536406435e35f8204ce6d3b64850ffb656813aacbc5172af895c16c4f183005d69999c4f48f948875d9837890f290b51a7358ff974fb1efc6ba3d1592426cca1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

MD5 f760087b0128bc983edcbc23750d67b4
SHA1 d9d067e7e41844a282cd439bcbb770c89fc829f5
SHA256 0e9c9ebe4306ddc512157101005a3e2aa92f03e68540a97fa140cc145b6375d8
SHA512 8814b74470ecc0d362da0b808fd0d55ba0b3085f46f1510a0c22317b9d982365690ff0dd0cac6d653f2bb485a42c04b198d686a454ba2842068799dd4318294a

C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres

MD5 e517eb022bea7595b4e03a56f26b4ddb
SHA1 95717625245190be3d4b45ccf036ef94997c0c98
SHA256 63fdfb7292ca64894d53d2f0375b9c03b49ce99d3617a28d2e86b1a31385ce6b
SHA512 563d3baba6ae625e1f53e9ac45d8dfe49f4c1d9779ceb88b7334d73623aac760b6d44fb9ed5181394df83361238db5ca760af187b29ab0c61efbd126aa198ab4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 cce9e9f4b9fd8e0f9ef79f48c6dbaec4
SHA1 4fe453b717b00775adec43b84db8955e1108d8c8
SHA256 c4191c0180a10c00ab5e70dbb4c01173954a481f48c2202f59257b277868e637
SHA512 ddd6475da132aff41462af588dc4ec8702e2ca6e029f30f42f2410b061530cd535b559a4a5a3ab219e8cfdff388dbb3a25503a4d8d9fd155d9f7e80065fe5b49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3

MD5 0275d254bf6e0138ce78fd502ded01c7
SHA1 0d84c5cff892b9437dfb26150e2ab2c1a8db19fc
SHA256 db8af65952f7abe9feac1d893f5b0b3675c2d69899dd8900ce37d2c3d49ea976
SHA512 c3d0d16e601e63698b18ff4e69907ed1e623bcba8a94ebab9abefd7b9c6fb468b837ae6376f61a1423330933e27e84c37c5d171cac344ca2b69c0f1736613fd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

MD5 88546868e55e3ba31d3e8a7de89a0514
SHA1 c9b90384f257259dc0a09de4b3a1ed7f18073c72
SHA256 8d8dc20d2320d68656c7172e57fe7819e95266b78b3737091d9c54929a2f90c1
SHA512 84353b0dd1e7f2409e468819dea4c34feb5f3f25030461ec98194f8ac2524c1989388eb4add9cc69bbf4a261b8285ed84c5024b9d9fc29a5355601f77ea832d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

MD5 59477ea3bae73931ea3632261686387a
SHA1 66203bfc922b4fcb51000f41b85640ecc9c1e8b5
SHA256 21e7db14e433017fd7a7fc841eff77bef0894e9738f936e39d2bcbd9a97388b1
SHA512 a7e93a76f85f3e8ba9defc0fadc7c0f30b22f6f87a829a1b448f1dc7def17e1fd353e948bfeadf83e520860ee8d60ccd0d0a6c7039e503c928a081c3c5da83e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

MD5 40c94bb4b8c257dad5229dc9f5a68cd7
SHA1 7da4dda5111b1a4f72073a9e1cd69f6193d36514
SHA256 78e877ff32f04603d2e7dee6c09c498c794e778c84819a929ab01ce662d0d989
SHA512 1e1a5b301c1ede13321dd77f4eb79d0850c3bb19c3d365b8e409b3ca10f585f668c7c471c587eddb4d9c1eae08bdf2ca6f2596a8b4c3a68d9aec280bcc6ce553

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

MD5 8883a9b5e678aa91a73eda148ab80f8a
SHA1 14287f6bc6da6123f10060a08417d8b7b2a5a64d
SHA256 7eb261b08ad1e8f0d176e3c97bd9716e0bdbf0b73db545fa3a0b26fc730d2331
SHA512 4802e7c8d88c7bd81a3c19ff62e86a207c897ccc99471d6e41de459b011e91edc9bea9e7424eed0da52295cb2b9c98fa0ae83d8d931d9f92f12acd64dbc60eac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

MD5 5e081c599081659628810461fea92bce
SHA1 4fa32c2a460bb2f1873490c2c7dda40d356ed42a
SHA256 d7b4388495b1ee2fdfb116c486383caa4c9d338dd5e2fef89060efb9f044b825
SHA512 c435f28c4547c452ed89f7f9aee9a7b9c7b5bdcbbdcf291fc1bf5f935523a65b1adcd0fff8eab82a832a9bdd9043711d98fe8215b2543b542f499ae7c28919b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13377121167136722

MD5 9857d1a98fcb6c915f466e79d39fec72
SHA1 6df4166ddc57d97ada659ef7f626f76e02a2c23a
SHA256 fae9c36b87e1c7d3195057f833bd32cd14e0422f0dece231b7439268a0a0a651
SHA512 9fd22727775c423d71ccf2f6ecd0d2586c3557f1b2d753ff03243544aea1e519a0401811a0ef7ef842bf06b99006c7a3b45e35e45d9c4fd3a973fe80dc95a1d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edge_shutdown_ms.txt

MD5 1f213343a8b23f84bb3a4a58fb393e3a
SHA1 562d7a5b0934d3b58bb94ed4bab8249b7671b644
SHA256 3ac88f78a14a90d89653ca88cb957daa6cd4c622077a857c064939371d2230ab
SHA512 9509afa96785b9c7f901dee48210dcf10443c65b5c9dc41dcfd5413aa8e149b0e3aecbe573a46c8164d02446f2822dc7c2c1d8dd20f65a866096dfbadf436faa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8b4654b65054e73236a0dd107ceb2d5e
SHA1 e7a2d72378de62c7b4a7f22dfd8ae1c75b0125b7
SHA256 35a8d19ac19f3f76ca967e674b8d55755e7b9954bf4a89b8abeb0feed767a427
SHA512 aad3901dd4b91260c26650134a3590f5e0bf2e0aa58704525a28ffb776612ec292b570583873fb65b1463de5e162a39164307eb7bef74bc38e8b463e8d197248

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 21ece4a00605f0eb129c17cd12bc67ae
SHA1 138cb27d96d979e8bc2b0f94f347a341f18d5df8
SHA256 42c8f8de265bf960acec2f416d635f769f85f64c5459bbfbb0b1736e10b70882
SHA512 0791aa619f317d5cf3c64f0769dd9c9365c432c45265f2c92891840355eae0d4e04b1f104d3d7c0af82b6d29375ab4777015aa93316c5af27580bec40d4656aa

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7fmsgkth.default-release\sessionstore-backups\recovery.baklz4

MD5 25c7061738b2301371ae9f8ae352f5dc
SHA1 be8a1e83aafd83c41799ecc5e87ed85a8d032f9e
SHA256 01d08131236ba84b3db62768923f78a806824fbb0350adaa2e8451fc84aa928e
SHA512 c7780e935d4c3e546ea0f0513e16656a865076c55dae6b506ea6befa902d1038992694b2c5728a3e61aa0d7addb76b2e847a3bbd68b46eb2701fd1622b61285d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

MD5 373e44a3979938f338645c2b0a052f5c
SHA1 c51534348b16ce9f5f00a5785472e3dbbe24170b
SHA256 12ea1b1f5a9601dc1a4954edaafd931a1b4613e143fe9132f5d6911f9ccf09cb
SHA512 4d55c9497ac85be20fc17afd8a5f5cf097353de4f96de172c39783c18a6cb3c3af228d751124ab088a1888adf3e1731b7d4808fe7fc00ae1aa52cf37615a0227

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 69b92fbaa6bdba24c0bb5c394ef435cd
SHA1 339807f2c1efa8e4144d87f2bd79ca228a97369a
SHA256 af35b3bde0a483e3ca5513956454c742ca7413d237fb2093e1c8bbe3cd574e65
SHA512 c44372848743ff7aedee565a919d8d6dd113e6022627f85348c272214185f16a2bd7c13d4b218db0a3756bb030203a5b8cc62845447b58488abf9188850dfaa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 505ade9ae0022d358dccc4f19b46f37e
SHA1 d288b771075ec8971d92f9f30d98d5f32201c09f
SHA256 f50eec74723a26ac0ab2fd6d5ab88c95718d5ca8daae521b4419a765bdfaf4dd
SHA512 9799b155d112d33d4dd60c965fd4e939b7d82a9ec712a9706a7c9ba9321c22c4e35df47758e192b9eba33e5207e312db811b69a1af98627c23b0c00c7e73776c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58cbc7.TMP

MD5 5cd0ca964ef0e9d309e065fa610ce7af
SHA1 de055a0a2898dc7a3e8241315cc1f9ba8212183b
SHA256 8a53d9c109c049d54e553f05c29dcb68caab18405c536dd8d748d52baf027b1d
SHA512 f9c8faa3a97b1e050e3ad6ef9a9db5f016155a1744be31ee80c1a4d1f5f2edf7a635a2bd0d33311069d62b2cbf1d2f196f2f1c3f874622d3e6dec3d8a32a2829

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1c003955e5b679155cd28c4a7336c18f
SHA1 d9af7dcb80fa557f7f1f50a5017ffc3db5513c22
SHA256 585f5a17fa556c89a1c8fc5a9f8821717e3d7ebcc66fb47009969fe7415bedac
SHA512 a5078f78dfcb54c77cd4ab2b51b4b3c80d41e2fb5b993fe14dcb6e374eb1106129474bb5eedeac5bcac09f6de49252f26b01e8156bc7d7d1d979dfbdf17913a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ea2a57c3439321a304903e92dfa7773c
SHA1 f8e78f6013a5f9bbb45059bf45bfc0daad81217d
SHA256 4bebf17557ae2e5244a18017632f58d8b7b03c98fd258ca0c8c65db8c339942d
SHA512 801cbcd8c4dcca7a89f7b68427f99e98c6dc629518318df39761a82486bb1d7210218dd4f5fc9f7ae4831774aa0f9d13ae6f28afaae682beb88e28c230d8b8bd

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b5fe861c6ab6f7f01742228dfd2df141
SHA1 eef0ffa5c39ef7d1190381080617f0bbd8382137
SHA256 f12cf3f67c4b6affdb10b356c3eb6fd6d8439b0a40beec13df67a9bb59452ce7
SHA512 d5dd4494dded804594fc68a199b4d12f4d234e00caf933ce0b67d601bb6985e86864408a657383a488c407a0a45e83d6a82b2c0b17e5cc4a3a01e2b41c6ddbd9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 55e36e33930ad0c34590244c730c548e
SHA1 a35940eaef6afd971f7e5e07abde80c692e06896
SHA256 76545cc993e7ba33c6044e758b9aa2890074afb8b5937a4eccd130f2dbcf5024
SHA512 3da499dbe3cc596960ba0575cec9f0565a750703af163d90a58dd6570a367e30faa60fca584f78ac4d27ee249f31179513a319ba0fdba6a54a2513493b7d1c0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d543002c909ec96c71e34fcb67131bf
SHA1 52fc1f77997fa02a2772af06dd520c2c585d430a
SHA256 e6b1ee94afc195d0abac4e38ebc63570f15366640eef90ce4d4665d61246b97f
SHA512 f9ec2151eca9cf3a28a123d9ca0c9f889a347d8e58c6f9c3ff8b4cd5572ca0a94b5f3aaa185aa9ab84b067ddbc8d91a54c09f0c37cfba5de107afb2516639f20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fba5821196f7d86d4279de9fa5727ad3
SHA1 e32e262610f24148b3cf86beab13e9e8b5becaa8
SHA256 f9acfbd86c20b1cb58690d0857edc99ad157565ffa5f3ef70d9856fa953cb834
SHA512 730acf5b1c0804d5e0cefb9e64840e3ae76f2391791e0ec9f66dac603c41a50f6b477fb651279c2b420361924bf1e2f2b0e81deec96e38565f732364cc36889b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d1107862dfdca7b035918e64a690e54
SHA1 c2ee4fcef5c243547f03cabf6532b46a4ad71bd3
SHA256 b12685713946f256a041b603c741e9db1e2e668db75f06adce40bec82fd889af
SHA512 7bb377594e8f898f3d3358e83971ac8c1c2a181470086f3ba61cb8182b02748411b79c5bc505f5e0c71d2e8f07ae64cca6e3e25ebf599a00658c2a3217cc91cb

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PUXTJM0VGB76B8VEE5AJ.temp

MD5 d1804c3f7ea2a23bb76233e1ac1d043a
SHA1 c7b800326c207924f1178ba1da412cae28fbe095
SHA256 4780a689e9c22f1db18f26079febbe4d5037c462867c5ffbd7b1608823ffdc06
SHA512 e45cdd6a9ed39b179cdbf21e899804ae9b5fae58fd49789fa8e585908f5debd65f1ce5d19f581c435338452e1a11c9c2e0f1708ba02db87c938feb4e13d2bcde

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e65dc8a4d8245177002326cab7a2c0b1
SHA1 9500d052c49a77a877d21fd6b841c85b832dfd08
SHA256 bc39beacf19f1b912ecf26065f8232fb910784627b914fd1cfe53b677856452d
SHA512 8d40ce7de11f9eccbe35ef6c56da47f11b06a312e436e731d8db97414c95c76e11a22761596fbafeae12dc6f1ced7761a27a845d52faecaca668dd112e1b782d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a9018d723fba217e0d6e1727aa63eddc
SHA1 5fbd2fe16e4484ce19e9c8e7ea3d68ec665535a6
SHA256 ae404937bcfd8c82f4f02aaed6a4497ffc4573efeb3fc9617495129d6505657b
SHA512 7e4d6278c55227c82bdfe3c55c9c781b74e707885ab04bfe7adeda2bb9f81356da91ef79b5650115c4f3d007bcf4f1b1913b5b169c94adf00bfb50223cd97c6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b2a76efc35896a7b50a8c753ce390cb7
SHA1 c715687ef254e3254b876be6d8f0064665e40bc6
SHA256 59a593790077dc8c61dfa1675cab9b2b4fd3c0abf79288f8c7c176b4d343af29
SHA512 2cfcd98855317ada46b0003c0ea85a24c9b1655ebc6320de894d565013680ed3dfac96fc3def8f8a3f4e65e022a297b1d5ac1fd2301f4425767047e620889add

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 58e39a17256fc42eeea4a11283c7ef40
SHA1 0e3436799a1be0668639ff7566e20f37f6a616f1
SHA256 1857a9f5e21e7c163bea702ad10b69d788306ca98d4e3448308abbef7dc9e50c
SHA512 a6bb44716588154539cbb5bf922ac17a0d1f6b072284209dcf1651c1651ed4b7cb2133b369bf72ec1c6c82d2bc51de90b116b247edf4f560ef3b0ad842a635b7