Malware Analysis Report

2025-03-14 21:46

Sample ID 250131-txh1gs1jg1
Target Xeno.exe
SHA256 326bae0bd1398234dcef4c3d71f00e30cc9b447fa963e21d6f29605f42bb7e5b
Tags
google defense_evasion discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

326bae0bd1398234dcef4c3d71f00e30cc9b447fa963e21d6f29605f42bb7e5b

Threat Level: Known bad

The file Xeno.exe was found to be: Known bad.

Malicious Activity Summary

google defense_evasion discovery phishing

Detected google phishing page

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Checks for any installed AV software in registry

Legitimate hosting services abused for malware hosting/C2

Checks installed software on the system

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtCreateThreadExHideFromDebugger

Enumerates processes with tasklist

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Windows directory

Browser Information Discovery

Enumerates physical storage devices

Unsigned PE

System Location Discovery: System Language Discovery

Suspicious use of SetWindowsHookEx

Modifies registry class

Enumerates system info in registry

Suspicious use of UnmapMainImage

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-01-31 16:26

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-01-31 16:26

Reported

2025-01-31 16:40

Platform

win11-20241007-en

Max time kernel

841s

Max time network

840s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Xeno.exe"

Signatures

Detected google phishing page

phishing google
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Downloads MZ/PE file

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key opened \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\KasperskyLab C:\Windows\system32\reg.exe N/A

Checks installed software on the system

discovery

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Enumerates processes with tasklist

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A

Suspicious use of NtCreateThreadExHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Wave-Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\find.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\tasklist.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Wave-Setup.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe\" -player \"%1\"" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\ = "URL: Roblox Protocol" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\URL Protocol C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\shell\open\command C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\shell\open C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\ = "URL: Roblox Protocol" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe\" -player \"%1\"" C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\shell C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\shell C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\URL Protocol C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-556537508-2730415644-482548075-1000\{3DA206FD-335A-4AA0-85DD-F3BFC9C44E76} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\Local Settings\MuiCache C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\DefaultIcon C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\shell\open\command C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox\shell\open C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\roblox-player\DefaultIcon C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 633081.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Wave-Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Users\Admin\AppData\Local\wave-updater\installer.exe\:SmartScreen:$DATA C:\Users\Admin\Downloads\Wave-Setup.exe N/A
File created C:\Users\Admin\AppData\Local\wave-updater\installer.exe\:Zone.Identifier:$DATA C:\Users\Admin\Downloads\Wave-Setup.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave-Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave-Setup.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Windows\SysWOW64\tasklist.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\Downloads\Wave-Setup.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2420 wrote to memory of 3936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 3976 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2360 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2360 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2420 wrote to memory of 2876 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Xeno.exe

"C:\Users\Admin\AppData\Local\Temp\Xeno.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb601f3cb8,0x7ffb601f3cc8,0x7ffb601f3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1880 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2512 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5720 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004D4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5884 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3048 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5880 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7264 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7924 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8084 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Users\Admin\Downloads\Wave-Setup.exe

"C:\Users\Admin\Downloads\Wave-Setup.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Wave.exe" /FO csv | "C:\Windows\system32\find.exe" "Wave.exe"

C:\Windows\SysWOW64\tasklist.exe

tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Wave.exe" /FO csv

C:\Windows\SysWOW64\find.exe

"C:\Windows\system32\find.exe" "Wave.exe"

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe

"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe"

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe

"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1768,i,17154013230728194189,15445126130307865087,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1760 /prefetch:2

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe

"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --standard-schemes=app --secure-schemes=app --field-trial-handle=1964,i,17154013230728194189,15445126130307865087,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:11

C:\Windows\system32\fsutil.exe

fsutil dirty query C:

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe

"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --standard-schemes=app --secure-schemes=app --app-path="C:\Users\Admin\AppData\Local\Programs\Wave\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2812,i,17154013230728194189,15445126130307865087,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:1

C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave-luau.exe

C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave-luau.exe lsp --definitions=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\globalTypes.d.luau --definitions=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave.d.luau --docs=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\en-us.json

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\Software\KasperskyLab" /v Session"

C:\Windows\system32\reg.exe

C:\Windows\system32\reg.exe QUERY "HKCU\Software\KasperskyLab" /v Session

C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe

C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe

C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe

"C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/y5k5qfFabm

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffb601f3cb8,0x7ffb601f3cc8,0x7ffb601f3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1908,17669428528697861153,13250081689517827889,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8084 /prefetch:8

C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe

C:\Users\Admin\AppData\Local\Programs\Wave\bin\ClientManager.exe

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe

"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2888,i,17154013230728194189,15445126130307865087,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:10

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
GB 88.221.135.33:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
GB 142.250.180.14:80 www.youtube.com tcp
GB 142.250.180.14:80 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com udp
GB 172.217.16.246:443 i.ytimg.com tcp
BE 74.125.206.84:443 accounts.google.com tcp
BE 74.125.206.84:443 accounts.google.com udp
N/A 224.0.0.251:5353 udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.200.46:443 www.youtube.com tcp
GB 142.250.187.238:443 youtube.com tcp
GB 142.250.200.46:443 www.youtube.com udp
GB 216.58.212.202:443 jnn-pa.googleapis.com tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 172.217.169.78:443 consent.youtube.com tcp
GB 172.217.16.246:443 i.ytimg.com udp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
GB 142.250.187.238:443 youtube.com udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
US 172.217.131.168:443 rr3---sn-q4fl6nss.googlevideo.com tcp
GB 216.58.204.70:443 static.doubleclick.net tcp
GB 142.250.187.206:443 www.youtube.com udp
GB 172.217.169.33:443 lh4.googleusercontent.com tcp
GB 216.58.204.65:443 yt3.ggpht.com tcp
GB 216.58.204.65:443 yt3.ggpht.com tcp
GB 173.194.5.39:443 rr2---sn-aigzrn7e.googlevideo.com tcp
GB 173.194.5.39:443 rr2---sn-aigzrn7e.googlevideo.com udp
GB 216.58.204.65:443 yt3.ggpht.com udp
GB 142.250.187.238:443 youtube.com tcp
US 34.149.87.45:443 www.kingexploits.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
NL 18.239.69.89:443 static.wixstatic.com tcp
NL 18.239.69.89:443 static.wixstatic.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
NL 18.239.82.157:443 dt3y1f1i1disy.cloudfront.net tcp
US 34.49.229.81:443 siteassets.parastorage.com udp
US 34.49.229.81:443 siteassets.parastorage.com udp
US 104.21.42.187:443 umedadelemp.com tcp
GB 18.239.236.119:443 signamentswithd.com tcp
GB 18.244.140.100:443 ghabovethec.info tcp
US 104.21.80.1:443 ukankingwithea.com tcp
US 104.21.80.1:443 ukankingwithea.com tcp
US 8.8.8.8:53 89.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 157.82.239.18.in-addr.arpa udp
US 8.8.8.8:53 15.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 119.236.239.18.in-addr.arpa udp
US 8.8.8.8:53 187.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 100.140.244.18.in-addr.arpa udp
GB 157.240.214.35:443 www.facebook.com tcp
NL 18.239.83.98:80 crt.rootg2.amazontrust.com tcp
US 34.149.87.45:443 www.kingexploits.com udp
US 54.152.238.44:443 frog.wix.com tcp
US 54.152.238.44:443 frog.wix.com tcp
US 34.149.206.255:443 panorama.wixapps.net tcp
US 13.248.169.48:80 wave.gg tcp
US 13.248.169.48:80 wave.gg tcp
GB 142.250.200.46:443 www.youtube.com udp
US 13.248.169.48:443 wave.gg tcp
GB 184.28.198.202:443 gui.afternic.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 92.123.26.50:443 img1.wsimg.com tcp
GB 88.221.134.88:443 ds-aksb-a.akamaihd.net tcp
GB 142.250.187.227:443 recaptcha.net tcp
GB 23.64.41.76:443 csp.secureserver.net tcp
GB 23.64.41.76:443 csp.secureserver.net tcp
GB 142.250.187.227:443 recaptcha.net udp
GB 88.221.135.50:443 www.bing.com tcp
GB 88.221.135.50:443 www.bing.com tcp
GB 95.101.143.35:443 th.bing.com tcp
GB 95.101.143.35:443 th.bing.com tcp
US 204.79.197.200:443 bing.com tcp
GB 2.19.252.146:443 aefd.nelreports.net tcp
GB 142.250.187.206:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com udp
GB 172.217.16.246:443 i.ytimg.com udp
GB 216.58.204.65:443 yt3.ggpht.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 74.125.175.39:443 rr2---sn-aigzrnsr.googlevideo.com udp
GB 172.217.169.33:443 lh4.googleusercontent.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
GB 95.101.143.35:443 th.bing.com tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 142.250.187.206:443 www.youtube.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 172.217.16.246:443 i.ytimg.com udp
GB 216.58.204.65:443 yt3.ggpht.com udp
GB 172.217.169.33:443 lh4.googleusercontent.com udp
GB 74.125.4.197:443 rr5---sn-2oaig5-55.googlevideo.com udp
US 172.67.73.56:443 getwave.gg tcp
GB 142.250.178.5:80 mail.google.com tcp
GB 142.250.178.5:80 mail.google.com tcp
GB 142.250.178.5:443 mail.google.com tcp
BE 74.125.206.84:443 accounts.google.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 142.250.178.4:443 www.google.com udp
GB 2.19.252.134:443 aefd.nelreports.net udp
GB 142.250.179.227:443 ssl.gstatic.com tcp
GB 2.19.252.134:443 aefd.nelreports.net udp
GB 142.250.200.46:443 www.youtube.com udp
BE 74.125.206.84:443 accounts.google.com udp
GB 95.101.143.195:443 www.bing.com tcp
GB 2.19.252.134:443 aefd.nelreports.net udp
US 8.8.8.8:53 cdn.getwave.gg udp
US 8.8.8.8:53 cdn.getwave.gg udp
US 104.26.3.170:443 cdn.getwave.gg tcp
US 104.26.11.174:443 scriptblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 2.19.252.95:443 tr.rbxcdn.com tcp
US 172.67.73.56:443 cdn.getwave.gg tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 172.67.161.127:443 bloxstraplabs.com tcp
US 8.8.8.8:53 setup.rbxcdn.com udp
GB 2.19.252.160:443 setup.rbxcdn.com tcp
NL 18.239.18.127:443 clientsettingscdn.roblox.com tcp
GB 88.221.135.50:443 r.bing.com tcp
GB 95.101.143.177:443 r.bing.com tcp
GB 95.101.143.177:443 r.bing.com tcp
GB 88.221.135.50:443 r.bing.com tcp
US 20.189.173.7:443 browser.pipe.aria.microsoft.com tcp
NL 185.15.59.224:443 meta.wikimedia.org tcp
NL 185.15.59.224:443 meta.wikimedia.org tcp
US 8.8.8.8:53 login.wikimedia.org udp
US 8.8.8.8:53 224.59.15.185.in-addr.arpa udp
NL 18.239.18.127:443 clientsettingscdn.roblox.com tcp
US 172.67.73.56:443 cdn.getwave.gg tcp
US 162.159.134.234:443 discord.gg tcp
US 162.159.134.234:443 discord.gg tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 234.134.159.162.in-addr.arpa udp
US 8.8.8.8:53 232.138.159.162.in-addr.arpa udp
US 172.67.73.56:443 api.getwave.gg tcp
US 104.26.2.170:443 api.getwave.gg tcp
US 104.26.2.170:443 api.getwave.gg tcp
US 104.26.2.170:443 api.getwave.gg tcp
US 104.26.2.170:443 api.getwave.gg tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 2.19.252.146:443 aefd.nelreports.net udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a28bb0d36049e72d00393056dce10a26
SHA1 c753387b64cc15c0efc80084da393acdb4fc01d0
SHA256 684d797e28b7fd86af84bfb217d190e4f5e03d92092d988a6091b2c7bbbd67c1
SHA512 20940fee33aa2194c36a3db92d4fd314ce7eacc2aa745abec62aa031c2a53ba4ff89f2568626e7bd2536090175f8d045c3bb52c5faa5ecc8da8410ab5fc519f7

\??\pipe\LOCAL\crashpad_2420_SXWCBWPGJGZEYJTD

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 554d6d27186fa7d6762d95dde7a17584
SHA1 93ea7b20b8fae384cf0be0d65e4295097112fdca
SHA256 2fa6145571e1f1ece9850a1ac94661213d3e0d82f1cef7ac1286ff6b2c2017cb
SHA512 57d9008ccabc315bd0e829b19fe91e24bab6ef20bcfab651b937b0f38eec840b58d0aed092a3bbedd2d6a95d5c150372a1e51087572de55672172adc1fc468a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a17b9692152b5916d31ee2c5a0c7bfca
SHA1 c0bd54e9c6c0a5536a6b85a702a91a3e68d89f16
SHA256 a75836d789a7b6869d777d26fab52dfbc6a6f23cb0d09c0912f61639acd25cab
SHA512 f777ed82d901d7e708a6588a23f107e68599f3855b3a574db85c25ae9abb13d9fb946a3678b85ed2fa63af3a762b82a464416b8c62639aa5172db5d239c98e1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 045ad919cc96bb57bf581599491cb460
SHA1 c5f351d632500ef06c7c1ec06fbbd95b39c158e8
SHA256 ea05ee8fb2a8028ded95ce8e951ec01f1c8c83666aed1e5d9eaa4c2633e7e5d6
SHA512 cb3836c2ca0ae3ca8bdaa3a2c24ae827503a44a8b8961a3585ecf1e6314dfcf947ff6c7104a339b61ec58942730ceb4774bcdaaad5ceb4c18aeccf546821403d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 83178660e73bd38f00297a1caa0a82b3
SHA1 45ffcefc3be3cbb38a1c333ddec18e2e7d8d01ed
SHA256 f7baf55e54611f21dc274efccf7dd154fd65a713229963741c94c64ccebf88c2
SHA512 5cbd452783466abb2fdea596a4ebdb3156906e1c0b56371c8cab77f5ca77d66ab16e6a947784ecac1b329c878b5ace5dfc8d4b5db5fbc6cfc0f81c3e74433b89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 d590a040c9d8f14440391bbfd9915dab
SHA1 8ce9364e8ef8eebf8b29999bbf94daa80232a6bc
SHA256 80f1bec90b1339942b0c6d6117856e7a3e6bff5f628b684686496faf73eb91a8
SHA512 6f4a8e8df85b2636a2cdbf8ffc8c34f1eb3817991f089343dc851cd664ebc7caf7bbbb4097d200b6a88ec75f4bb53ff8992db381dfe4f498af39370dbc9689d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ca7d40d5ebe19927b728570482b2342b
SHA1 743b6cab3af399a79cc311c724dc016096ca5001
SHA256 ca9dc2223c1d88072932ba4226a5e73f0c1a34975223d94ddb7d70ad816f5b4a
SHA512 f1e8878f8d490bc159ef29dcf29b7ae47103fa4eec8c855463ef1ba3c8482518e23df47e3c42db737c555564e1664ed95539f30b5356b3b27fe35f4b592877d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 89d74d2a4508b71593661b5fd4960333
SHA1 93092f836a6e70d308c6644dd168f6f956c0e918
SHA256 0de32e42e5f88135baf417ea6927db7c097496e768b4167b498d44826aa74be8
SHA512 17268badeaaba6f5f3b256cc9ce84c68101241c52701b317ba8b1954a3c042918b7a293669940585c27a4ce3378b43a7ae47e9d1b624b193bc48db9832c2f608

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8d104b8b-3284-4276-a86b-b421ffad881a\index-dir\the-real-index

MD5 fca7da574b3d00967acb0d66f80f1177
SHA1 bcf51c4b8910a46c8da3ac5f28918d3481df2c2b
SHA256 9b5c460ea10f463041d1df1fd11e2deda8a7c2e037bd8430336e18466daff221
SHA512 abf923f958d400884e05cdd0af9bfed94d5369d2f578d099ae09c60d227f42915aabaa2df3377cff10ad4f4ed9a06c6fa5195afd2c83b88492c5c524fa063622

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8d104b8b-3284-4276-a86b-b421ffad881a\index-dir\the-real-index~RFe57c081.TMP

MD5 11d4f4ef9de002622a38c5229909e72f
SHA1 9dc6bcd7eb669a691e3a5a8f1f7bfbcab5e6a463
SHA256 378b262aa865500ff2c25c951315a480474bb3a1ab347f61c3a39e8d6cf4fce7
SHA512 b2efcb574528dbbe13edf43d33f872354d5f242486137c6b59a74358d77140fdb021cc712f6f0a2b55ac7ac7e212ea36a1a55c11b6658c8b0b536487d830c5d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 af6eb015c127ffbc987d7d3b5d69a0ec
SHA1 67e97f46910c83be4efe41916ba63900bc14c576
SHA256 c79b0d5d7b3900ff76d74b26bb4e687e100f51c6b326c6149132f7170c7308c4
SHA512 32a5642e6a7a77359e4c22820a29d0f03a6ccf50fb495459bc15ce78ce5ce4ae27a3b04fd85a557c077ed74ca49cc0cc22a4a54d2a9755150a53d7b4efc84ca2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 0e62887617150157529446790d5d73a4
SHA1 d2d52e290f731463f802224a239144c906e5d1d6
SHA256 8c4f3d7b0bd36d73393539d1386aa507d16de6e64017a18018ef2c7d90810c0c
SHA512 5d79f5e0c49656d968f26d0b15e412c4230364671755eb389d70cfe5805d2efc82378faf9872621ff368c22ed9f7b35b131344e2f29e18ce60c0418103bb7efb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c4ed7f19-9072-410e-831d-98ad37c68077\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 e72e92ff6370a9583ab84ea9c451ada7
SHA1 c04b4a5ae2b8730962dcb0680285822feb0b0651
SHA256 44922ef4918426c565b724e576822210d81772f990b3b7a6f163a313dd733ba2
SHA512 869af330aefd5cb4bea20bae8af258d3a0b2df2787b36bd8eecf8cab951f9af624b241d72b8ea2f3a4971c65f069bf02f12f2e3884e802c8e8556bb7ce03cc3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 56bcfc292f5b13f996bcd9e3894f8e9e
SHA1 ef6491aeb70e32284da1b9704a9073e9bfc8b6ca
SHA256 f9872892acf766ffef419d57e033927850e47ff2d1bd111d0ffd353aebc5f20e
SHA512 385f337347b9db945795d7e5bbd84c1de99d7263926edf495c78e461371ca21732f9e693a6040af303ee4369624514b9a0568c86ee6c5e0808ef7c5517cbc300

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 ccc8fd57770d828ee39ece3a1118459a
SHA1 d83fdb4adaec98c020b19afb7d92c2d33b24f5b5
SHA256 edef1966e17edea3d8ca71ec9ea1c9becfd2937f45111179542f587349211b36
SHA512 3c78ea069dd1937a07b9976c57fd2d40b84a58695493efcb193d5c5aa3b911ff7700c8203bf0efa8ec79af353f42ce3cd48560b5af2787990188c0b39870a6d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cf32c73ec08f35a47e164e3c1ae6ca71
SHA1 2e53567a13d96650ec224f5a1706fde50e380302
SHA256 8561f12bebaa662354960585c8680c54431fec4fc63b0047cd05be5a08f99290
SHA512 d52b35a9c029180435a667f60d4c7e7586ccb3527d6f0baaf3bcedad4593c6eb7dc9249192be67b68d91dd5e63332458a58f6fa7a8ffb4822c28e356f57fd9b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 42a29e184cc231502b64f8534f3b13d5
SHA1 15ce337ba3dbdc8f87a7e09f7e23212fcf2d0d78
SHA256 c5cfb8c6bc22fc03d8a9ccd1738f2a10504e7de429bcfe13fea5046fa8931737
SHA512 0534be75014951c49ea93e6614f9db45f1e7fc42f407fba7835cf2a30798b27e0fddaacdf77b6baf4fcf4789b7c0455dfc1d654941d02bffe2e9229b71d6a9cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5812d7.TMP

MD5 979e679e8463a37434a274deeafee40a
SHA1 7ea792c6102504fece49a375455c78c9c8a35ef5
SHA256 8f27c6e4c0a63454553fe0cc55a577174b8641cd66b5a8cee62e91b96dfa7460
SHA512 ad7409bcfeb1bde4aef1a1281cce9bcedc3b85afcd31ba20921f6cae411d63d1f13df37bd83174aadbbbc3b233714dcbb25f5e4e92d5f1b9763abf55dd98ecc4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\36ecf0f1-c793-43e9-8e86-1e1e9740a18c\index-dir\the-real-index

MD5 c86dc57aa98a5e27e43cda11a21f347c
SHA1 5f782e479d94cae82dba3888a75b01e57092014b
SHA256 fa5c1eb13d6b76cd94f53daee6d3feb8311d1df4992d02f2eb63a3260d5e0aba
SHA512 3280b89447e9f970aed53ef4fd82a9b8ffd702d6cab195c976a6d5d5b0478d7751db37bec740ac6e10ff38fb9a55a7c4ded28ceb74672354b22204c8032e6b77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\36ecf0f1-c793-43e9-8e86-1e1e9740a18c\index-dir\the-real-index~RFe581a49.TMP

MD5 824ff9c30f21a39efd916ca9a0025831
SHA1 08358e78df34f269854da0250494b13b1b567ba6
SHA256 fad77ee694214994a69693e155718cd8df6efb3f4dcf3007b45e5ddd2dd77851
SHA512 733605d64ed08991a95247e127238c4c250c2ce711644dcb872902f392bacbd309b103c8bcc004d09580b31f5455e1bb7a6d6ac5186d4dfb6de4a59780c18d08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8035866939f8d24c2f279b00304ce6bb
SHA1 a937229f1dcb34045121ccf737a5ef4e9a871355
SHA256 d02c4e9df16fdf14e9156a8705b83a0a443574c2afdf944a600bf93b9ad5c332
SHA512 b9f36197f887511256216b33cccb27c1bade902a340f49bd41149080aaee072f64be9e6eda1b820fb9718d3a1c439f8c38b21c31356464b63101fbc618dc634f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bbb6b5e478ba85d13548a97baedd8e38
SHA1 a312a0f3df581cd86feb5ef5bb3c792e68e36503
SHA256 0dfc2d3ffd4f5d26ddd17ea955c036bf3e3c268f88e4151b2a292b32dfb5137a
SHA512 0a9a11add928722ea77aae7328d6f853c588a838d8f45cf602392281290dc027d9efaa004cc6ff69d7a8f56488ea03704355e5ad598836b1680013118617eaee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5835a1.TMP

MD5 b3c75dcef5ed59f7fca65e283754948f
SHA1 a368cc907a5a13fda2191bb5fdd20a3198c6cec0
SHA256 9d09e848ebdde6813c291f8e45aa3da681de3f96e8c7aef71c2f5426a5bafe38
SHA512 68ff1064ebb40801e9f8f0289f9e022232e26f0b7b49153c730d67dfb270aa9389c5542480eb06eb000dda2143d55158a346ea76bcfb9a2a8031268102ac3c6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

MD5 ba958dfa97ba4abe328dce19c50cd19c
SHA1 122405a9536dd824adcc446c3f0f3a971c94f1b1
SHA256 3124365e9e20791892ee21f47763d3df116763da0270796ca42fd63ecc23c607
SHA512 aad22e93babe3255a7e78d9a9e24c1cda167d449e5383bb740125445e7c7ddd8df53a0e53705f4262a49a307dc54ceb40c66bab61bec206fbe59918110af70bf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 704d925b8a61bd20174b27032a8cc35c
SHA1 1d198410def226945095c18b41291e95f4b5f1d2
SHA256 e6c50da08916f3005ee8d40c20cca0170613df01a767973c639ef0176dcbdfaf
SHA512 51e0e4db83ce75fa02f54c49965c0941bbfd983076f435557675f6f7f8f83904c41493d10388620820bbac0fa979d744817cca50fc0d81bb7a0f5465610cc261

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 3605f800666a9d30aeff679929532862
SHA1 439d526484ce937c78a993a83e9720b7960cf425
SHA256 c05f05308d655ebfcaffa876aa269461a4a3af809c544e911b8112c3a8e9b937
SHA512 f68aa5ba608cefc87b87312a2106825cf12a0b5cf7851c84842575a13e9d5715e21b70d6d9eab8f434eea7f0683503b37736d4ff0a762a772fec2e72fa9ce750

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 67280040eab132a01a1ea4afb9b80f5e
SHA1 cdaebcdc12ac0a59d1f162e949e988d0ab77ee46
SHA256 e9b619f650ca6cc1392708153a5f94c9e32b825c1dc9e045bc62608692b3fcdd
SHA512 54a5824fbe508184442a044f861063fa94ad75c8e7fba17a00db4c68da366c574a07a0682447305dba517704a7ade122a7923baf5165eea79f475e7246f882d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1dd7bd4425a7a56ea14ae96af3e3801e
SHA1 f3057b40341af898b2abbabc45dc2e25f8dd1382
SHA256 912ec38f82543f735d74a4b65b1f4767f16bc61865d0f1b24161651838bc18d1
SHA512 97470e2a34e965e97593da2687b36ca4785238208f17a28d21f4142dfd4ba2ac2eecd90bca770f17801aeac230779e1c5a1184af79dc709fe43c2e44a2c8fde0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8d104b8b-3284-4276-a86b-b421ffad881a\index-dir\the-real-index

MD5 85e18d951c4f5337dfa425b297cf4b6d
SHA1 0e9b27436ab786adf304d1da144b227ad47de1f9
SHA256 0fb68654b5804a8f427545b3c12aea777bbddf1fde44bfd372452e0c565eecc2
SHA512 3385aa76dd40eae2fca2fa5dcb7acdfbbcf59e64068cc7d2ccb226fba3703ee0b36d0c75dc81fcc35304e54b81a608859869e6d1a0263c2036adcd14d8b55050

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 07d30642ff2870bfc95b5647b7764b90
SHA1 eeef4b214d086e39362e760e3351a3c0cf08cbf0
SHA256 51021faa628b6b177baa06a951cbb50482df2f143bde8445ebd4776f5bb4e7cb
SHA512 ec3c588e4100b4d55c2e278e616174000489df8d57a49ef6fa27186d76c65e08639864f32bd36de61be0f7d4c58ee62705756e813ac71266a153c9c283e39cd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c3d534d7208c623f2c7bbbc744d7b6cb
SHA1 b8488ed5ac531041ad76379f4346468455d75bc0
SHA256 7e17a6076adfc808c8d7742acd74df46278472fba1288dc5daa0b3acd5b98baa
SHA512 82a4e16eaa53412e3cc1feeaf867101c4a3b77c2591ce00473d2201050ae153d7de8f801e070deac3c702503d029cf4d81df823cd0bde33663a008f083efeb85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 eaf0ed53376900a46a5a72286a51a9b5
SHA1 5e3e5616816300021e40bc4f0cc3f70efa531bba
SHA256 969d012b7ce923570089a8caf9e033ea40c6ce15089596d34cf68879f29f69b9
SHA512 54d13004d8b29a9ff251390bb39f4994a63bcf5a3b40e81b394d6ced1ffe2c55baf8fe8e3442802fb0f738c5593d6756ef746c7a3e6be9e6d18e65f9635d261b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c9cb105583d7af35bc2bd2b22a2a9642
SHA1 97fddb9a8318936eebb65f881fe57dc4162110a2
SHA256 7e61ee70627bd40dd2d4c680f69b36bb44464896d9e95dd36c6be322c5582ae6
SHA512 41122ff889853b7898c7f076c9e7da774e9a777d73d3e0ad604e33cb2916a6477e77268f676056564f85725781168e8eeb9c9b2b3040629690797facf80b5e71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\36ecf0f1-c793-43e9-8e86-1e1e9740a18c\79da3f8a290d145f_0

MD5 2a26e8d27d83e74247b346d45655469e
SHA1 4eebcf2bb642f870a0361a2c05b88bde580fae50
SHA256 468d594a5e36dc5a5fb26864d529ce0ee93e27c1767cf22565bff32f31aaca4e
SHA512 a17f66b75109a7a7d0885899e1514fb2a98d6eadc55996c375c8d6d7020f6c88a36127289b051b2f5dfb8e80a7d2d35c1dec3745e2cd982757d209a3963b1f1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ec42e72a58b4cba24e8de7e2c96996e4
SHA1 68c00533eeca440c5693c86f024bf599e7c907f7
SHA256 8e38b69853c65119251a101c084cd60f07b734065121fbe4c3ff7366b4785a12
SHA512 26cab3ed7a01fbdd5825794364fe198aacbef0ba3ccc090602d366a5b4f23bc877658eac61b608fd255621282f2a6d54dd59ecfbbcc64e141d36c3d3e6e2952f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8d104b8b-3284-4276-a86b-b421ffad881a\index-dir\the-real-index

MD5 e5cbb3b09ae1c92b94b44ea0e78938e2
SHA1 805cf16b18e1316db9976788f36ef9b1afed50c6
SHA256 614e868998b02ea89fc42295d060c208298e007cb27778be924186bc8c771c86
SHA512 da7615f4954880ff9f284371886a8a855d45ceaacb6d640efd1ca11e94f2ffb45269dc142a3da2b5c9a2925be373691b61cc582046a10691c23c37934842b674

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 25cbeeedba960c090dc902999cd1bed8
SHA1 d5294ea56689f79efbb03f49d2df679cda656a94
SHA256 36a590d9646722877f1439d161ac6032fbcfc1c521fdaf89bcd94f4fd87349f9
SHA512 ece6431652ce799e962ecb437e504cb7dae17133e9615d0e9bb24beccbcc5c4114b2b06abf0d66971153dc6c7ec02f0945e1fea762ff703b77ee0dc9ed2ad0f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 69df804d05f8b29a88278b7d582dd279
SHA1 d9560905612cf656d5dd0e741172fb4cd9c60688
SHA256 b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608
SHA512 0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4a6e1d9da075a32e8bf4582c6dff5503
SHA1 8e2a07bb8580f7f927f90559d49d6c3da6d485f1
SHA256 87417cf059472b3048ba89781b1c65d6cdb7b484e18c64995244f1883f9f803e
SHA512 690c35f5ee0961a7b5d9a9df717b35cd24ab132e70fee07bc56e016db77979f27b7f49c38994feb9510bfb2d8ecf97b1fdd65b5097e167b1dfbd9628e25471d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b34e4e3a839c2834ab9e16ba0b960cbc
SHA1 4aeca8e7f278cc383877febc6d5387e874348145
SHA256 23a4d3fa2130813016113451f3779763632eac1814b249e5558fccdc9a0b1dc2
SHA512 0632e0ecab838f94e33a4c89f31e57eb2d337e2a9b3721b4d774a59bada7c1895e59bd9351bcdc8527b652317ad1b61cf6c409388c14fd7ab3ffd9085a8185d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e870b8fd149cbf2fc9a097591c9c729d
SHA1 39d82a7ee60fe08ef7f065dd23088f7c129a12eb
SHA256 fae7e1fd44eeda6ba95c57590aedca089da920129855204cc2e033b4b8899c98
SHA512 e747d1ce87ca24a2273e37364c4dec3cb2fd7ff8531b1954bdf2ed78e5dcd5ef08cb662fa02f7c13197908f1ce1bee9436791347ec9de7c1b7e9a29937cd3873

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 96b7e65e64eb2fcd713da62b158fb560
SHA1 a79df6f7ec812fd025235905880beaa3296251fc
SHA256 0fa626b5319590e5d8052c2d10e6c664208fe11fba862baf2844bdcae7170364
SHA512 5942f986e4e0067023af04ec632f3b18c78089dd61bc184bfb7db303c7b018374e1cf7f96722f0815dea695bd99b39e7132fb0b091a1635e3c50eb3be03e305c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 c2cbb38ef5d99970f0f57a980c56c52d
SHA1 96cff3fd944c87a9abfd54fa36c43a6d48dac9cc
SHA256 85369a1cf6e7ff57fe2587323c440ed24488b5ed26d82ba0cd52c86c42eec4a7
SHA512 50371320c29f0a682b9ae3703ef16c08f5c036e84d5056e658f5d9be7607e852adf72c13bf2d0b63fc492f5c26d330bdeb2ba38bfd8b0d4567f0cc6b0c0f7bd9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00000f

MD5 8235f98068f731038d8520df4727c625
SHA1 6ef1e3ca36d59de490e593ec195b632e8e09565d
SHA256 98280dcf81e7ed7a29b2d383c12027481bf771aa6358012ee5ffcc8b3af21e38
SHA512 d75d4b688898ee9c9ee07f7be6e9dafd0154518ac54042270666969dd15dbc3b7c8cf92997c510f42f20a5ad8270d5324dd8f2ef91666a9d6d0450d60bacfd83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6d712696fe8eb1c8ce50eb7ace7f2793
SHA1 e03f761cc3772fb172216efd2a0f52cacf9e4245
SHA256 52c7bb3fcdfd397cc88ff4426a598617e93d70a2ec372de0172b6746a2f2a7a6
SHA512 006d2c9c548026b5e04cbffe23848f245a67c8352cf95eee12b0a07b353c506cf44d2fcae45736614bcc41cdbc36504d6be28fe3d3f108f716e1a133b29501c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1b7eb21dd0ca0219333f7822a725e069
SHA1 5aaa3c0e9b5817f6750d6a6401ae32258132cae8
SHA256 8e992da4149189f140b9441d199b9fd49ef8dab34769557aa5519ea9e47e7a8c
SHA512 2f94a967ca3a6f45618c03adfc8e008e5fea43d55791a7d08c1e9033091e29216781cbd681dd553a4c199f8d64796a2f73826a9e0d6a93cbf37c3a09dd28c907

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 df1d27ed34798e62c1b48fb4d5aa4904
SHA1 2e1052b9d649a404cbf8152c47b85c6bc5edc0c9
SHA256 c344508bd16c376f827cf568ef936ad2517174d72bf7154f8b781a621250cc86
SHA512 411311be9bfdf7a890adc15fe89e6f363bc083a186bb9bcb02be13afb60df7ebb545d484c597b5eecdbfb2f86cd246c21678209aa61be3631f983c60e5d5ca94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

MD5 41314510d0dabc7c04ea7fa60a4fce63
SHA1 c87b87b184b2e2a31a0db3366203507ad4acdbc3
SHA256 fa7f30946234f1659235aa71220edffeb57d8bc9905c7b32287a65f140e0d7cb
SHA512 b9df3c464ff84ec0255c95578df7784ba59d111b0289af8c3c267899fa518143d80e57f359c561c7af41b2f4e609fd9e907f12d06b6b645891f7238bdda55830

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8d104b8b-3284-4276-a86b-b421ffad881a\index-dir\the-real-index

MD5 bb645c1041e84c02cf3c0796fff500f9
SHA1 2df65daeee9037bfd86d07069905f4e83ed982df
SHA256 1e5e0b8ffdfd724f78e0cb230076a2fd3654ffd975b31964f48aab1eb02fc86b
SHA512 5bb8a50210d416b18c05582d8860454f8bdac37f8426d6d90abd965692ec511c7507cf6085332b1f2bac82fc76d4a8864c2d60a1263bcb5b0234dcd3a81fc4fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 2359514aa301a3a8ec10ad6292103ea8
SHA1 2d2993219ce40df2afedeab9555b8de69bd50af0
SHA256 9754b6076348b47aa8736435fbfa72fb866de751a1856c3160d5858816814a3c
SHA512 481903fa188f59010e02aa6e663474142f05361b751012eb34f168971021fa164e838bc6e74caae4b55f2845c6545c5544f4f17645a37cf65675fc104bfdc995

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 88e5d3fff7874f8ffde49869791aa945
SHA1 2acf176d1324f11e758ffdb1756e227e9a82ea3c
SHA256 1598f2c02c6b625ca430b7caf2ccde89dc68df52616fdd74136ab7fa70f79890
SHA512 063abd65ff80afe5eb96b6f5cdf1039bd0f48bcc23657fb2f450d2c16d492d3af092754a55a726bf53ab31ab423a209ee1cb02aac440b55af59fd657880ed270

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5b61446ae96f198bb4071a0843bc9220
SHA1 1b4c5418f0dc3fdc7e15dba085a8d4de44c5d39d
SHA256 c26bbf05424f29a28a02626dae97bc76dfa2678de9be7c6e72b24de6d8adf932
SHA512 8ef5d5b08c6571b8a5b9b88235fdb8913f3373a53e4cdd8cb2aac3eaf0095a3822105decf2d018798c894065be2f80f62f46b17b53dad0061e19a0283064427c

C:\Users\Admin\Downloads\Wave-Setup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ec2701298eaa7104447c4c418c9e1363
SHA1 f4e4c0a2a18394a9fb296ea004dfcb77441ade4d
SHA256 9cd7a5aebeefcde9f860a1bccee1d1cb0148162a5e27498f4e1eed3115067e35
SHA512 ffac2db6f818eeb9123f10a7637b9db221eccb61f54c98c8352ce72aa9f93aeb7936016117016713e53eacc402d86084bd643e95063b923a88b3af4b2ba39c70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1db7324e1136ed8f824b9a73819e9036
SHA1 7cc1392a5e9d5cd623268013ebe0eb5410086984
SHA256 a3d30cdf97003caf5d87771811cd5a75245bf8ca54fad2f13ca15a1cc4ad76e3
SHA512 47fc25d1d6925cb76937e771ea59bf07b3e8eb4cf4381d039d6ef17ec91fb54c7ad577d217bf7be5325dd7cccdb9f0d09a025277641511e3aec738cf80b3ecf6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fb74516e88f64a1006ce99bc2653a889
SHA1 8ce46a0e9444f66063935715625970fb6587fd8c
SHA256 b2a8d100247083c11a7c176546525c837a26cfffa5f2e5024abe4ccd52419574
SHA512 b80d850647381c2220b00facd4d9a1e5c796f6fd77365b40e28a57a1449985d5f9c499ee593890de65a0d5149fe737aadd924cba008a4b7a140089a4b4b582fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 28ba50a5765f62df62502feed062e95d
SHA1 c7bda8ae652dc0394f357fd42a9137f0e5fb3b6e
SHA256 ae67fea08f2a6ba104e9f855c601de7cf765d74acf8c40ccdb7034697d598c8f
SHA512 42dea4f3354479a9bc998bde6c3ff15308a52389dc8c511c9ba934ec684291a6e8251e6455661a18c26f9c6bd18e0af2afb3c7adf1fee812c39ebf7729cb966f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d75c0e75e6a0e2c7ea61ad05845ed543
SHA1 469afbec15f4d6d5a53841ee37ef65c8ef6fa5c3
SHA256 fa05dffdda517bdc80ed8f9d863d6a0c725df7c6833060ddeb790265ff9469bd
SHA512 4defee5491d58ea873bdd21e3acb5ab1fce03aa0b93069ab5c422e65280554cb6d916fbcf23faaaa01425cbd7a51191202a76a4e49076bf18818566a54625f88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d08cbdec9d85c770d9978d4fa4c68301
SHA1 5fd36eb5c74a53bd41d230f3938f727f73a938d0
SHA256 f180511c0cbdbc26dca1ff0fc18693d3213bfefc0bd8b652406845de21dbe336
SHA512 263828285b27b1bfb67208bcfa1e4e6a4d34154de1f198de24f998c062ce7d589961bf191ec8fa592825ea23ca1d5f14516f08ef68d45c12011ee9c4e8d55f43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2fd869faeae667511f85fe87a35ef3a0
SHA1 ce7042ab19a9b85254ff6c98039d5a9929535208
SHA256 f26095aedaaace1f99b5d1b8f8d1d8c1c1dadf9106fd3719c6eafdcb22485f10
SHA512 1ef957e47ddcb5472029d1fec7f0cfda960e59a8fc4ef19aa42c7e7cabe5a690eccb87a5c68b4844a596e5d07d80d40d3cacc67284cf2788dd9d65f6ffef0fd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 82320ab392f7f0a3b39f50a0644572e2
SHA1 92896e8aefdd25df7324a981b65c9ac90ab415ae
SHA256 858dc6465b4c17a1d248216fff47f4920e9f0232cea93dacf8d37735a55a2181
SHA512 13cb85c6b7aef8ba4a801d758892de4b051702b8a80b1bc7330e6685d830c9a277ea1959d4a303ba218df34038595136bb48944c0981171cc001e42fec60bcbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b22e6e467b40ed4af6a5573f072e17dd
SHA1 a5013704268a88a7cad1093cbd792d28eb04162e
SHA256 0e69766be84f6121441bd6f51a746db461de1765c608a992873e8b8ee2d3938b
SHA512 936d38e0c4e92146b7cb95fdfe291a9233abad8e8e2febab43d1675c06807e1f9e1cce37354e7e98dcbc948b87c7135586350b3be8990cd8ba752063b8483b5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5245343297da6f13cc73617edc128565
SHA1 59a31e64f75e3d274e8d1025cf1d3af917f880a5
SHA256 8eaecc1e11517d71ee31ee52e94426f135fffcce57273aef8199a48af1ec0a8b
SHA512 110d96d139827560ccc8d035bb8679f289b01d0ccdfa433900eddfda89e1da92db37a249e7e15c65f7ec2be7052bf7942e761ad8bf5dd34615170c89d2eb9d0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 78aaf280e3c303430f8e4c5061e0b9d9
SHA1 e2b1719c4b44d6b1f8b1e30726ee251f4f6654fd
SHA256 931afc637272839776736b4b6c6b4174b17ce08fb48afcd9c54c389e1df203b1
SHA512 84d1578ee9df357e50705b3638cd4c02c80cc9fccc34301aecaaade8c5016945fc3b71e9d3625c745d2cdb13695db5c79f39300b31f44627d8af06111775796c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97b56ee7a52254a01ec60963220e965f
SHA1 6e12f159b71d385019ef85fb3cf3430651d82efe
SHA256 d2868a9b087346ba56cc4dcdcdba224d3bd4e574c4b3207e472a2862db3fef11
SHA512 eb74e2f04f5b66b5471d7ac2584c8c86a7b0cdc5ddb76dd189d3cf9bfacf3a322b04baaf55d64a5fde988201d76fe4be890230e54769ebf298e6246d6e511983

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 68e8f1d034c7552beef2b549818de518
SHA1 e8ff3fa58f05ac959ed99dcf448e292b6a77d9bd
SHA256 4a0a7a0b2ddeb85276ed153fc8525d981da6940120db307437993784f7cc9ac6
SHA512 3c510c1b391859f1e92b70b580da4702c99ec6b54f76e52ff9f7c03ab3415d534f7aaf16426cc1c50cf9f5b9ace9d35f3b71872f17141733ceaffc544a7f70b9

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 910d6f54158f3de6f9af1ba27d45bfee
SHA1 3859f62762a22893f07fd87eb1690495af2d5cb9
SHA256 e34d2315ab783d5cbf02e26294755998e029e314d234fa13b7e37a9f105dcf9f
SHA512 6b91f11e34256d1869432b86ff5227a7ef938eef5bb3de85254fe8cfc664dd45ae0417afbb25b7449025a20f836f621089c436d0e6e6d8c0a3d357f5ef434044

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\System.dll

MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\StdUtils.dll

MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\SpiderBanner.dll

MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\nsExec.dll

MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\chrome_100_percent.pak

MD5 cb4f128469cd84711ed1c9c02212c7a8
SHA1 8ae60303be80b74163d5c4132de4a465a1eafc52
SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
SHA512 0f0febe4ee321eb09d6a841fe3460d1f5b657b449058653111e7d0f7a9f36620b3d30369e367235948529409a6ce0ce625aede0c61b60926dec4d2c308306277

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\chrome_200_percent.pak

MD5 e9c1423fe5d139a4c88ba8b107573536
SHA1 46d3efe892044761f19844c4c4b8f9576f9ca43e
SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
SHA512 abf8d4341c6de9c722168d0a9cf7d9bac5f491e1c9bedfe10b69096dcc2ef2cd08ff4d0e7c9b499c9d1f45fdb053eafc31add39d13c8287760f9304af0727bf4

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\ffmpeg.dll

MD5 9691e33909895bfb5bb0355b6f439c81
SHA1 7fca2dfcb9aca4ed92c644e8f7ceb98f87116a52
SHA256 223448ec1715cb4b1a2abbf1427547956f3ce583092177c287542e6d226319c7
SHA512 9ead46836900c054d8740a1e2f569bc321cc53cf3c47e3fa927f4cca54809bcf173bdea239fbdeecd694277e8869565e476fd272df393b924bb62a845e897533

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\d3dcompiler_47.dll

MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\v8_context_snapshot.bin

MD5 a62fbbb671bf975ed46b42d9cf437bcd
SHA1 408b595b1dc6658533e0db1d35f509ab9ee70525
SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
SHA512 87c934670df70afcced0ea5c73449a17ad27d5b6a25cedad9eb61634aaff8a42b713f578e861c2efbc77593793bba240a1495822b69c99a8ecaef64b07b6a62c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\snapshot_blob.bin

MD5 62b9e00c46ed829e06d0c2494aa994af
SHA1 988882632b95bb78d80db60e4787c576e48338e4
SHA256 22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e
SHA512 03b7c57782923ca3a011fcb85f74e865bb7ff9976c89152758770be3bd3d40684ebd216fe34f0d0050936b536c8bab5eafcaa35fc26e893d30a108e36687876f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources.pak

MD5 3a87e8d6dc2d7dab0c3c37fe4a74308d
SHA1 5ddd587a6541e034203f24ee329796dfa316656f
SHA256 61216fee0360053988d5be52ab626c89173c86da1cf0b5a697bc32944282fe14
SHA512 7ba1bc093f25cec2539fb462084cb1fc32b17841f79be95679c90f4c735772d1dbe652471e52f4be254b10e650d31e3460ebebc82d89efa6a9ef801e5d98ea6b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\LICENSES.chromium.html

MD5 ae174699b663bd90d8d06c68c6952477
SHA1 8c76eda61d320779909adc541593b8e26b24815a
SHA256 c6737ef4ed9de369077718824f76c5e7026d0e39163e26af8606783e41c93e18
SHA512 3fb72dcd790464dde34978c9d0895376827f4d839b4a199c6e9fe77ab810d62b960babc4b21f6e189dc70147b5fb4334815730f4d1cdec05489c19e0725c2158

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\LICENSE.electron.txt

MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\libGLESv2.dll

MD5 02374701c3dc3b26088763fd3cc11bc9
SHA1 84e582496c53ce139d9efd219b762ad38a50d011
SHA256 8e68245d98bb740f393472938612979a56391f127d1af7683253e9e749e7af41
SHA512 09693492447b037e8ce16095fb3d63d806604d18c3340bf57fecc0e0ae3c877bdcd83320e633b0fb898a4c20616bfb4558ccd8d93a10d235dd90c3be8020a8a2

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\libEGL.dll

MD5 09d3bc8a5c6104d78566cd6e51c5a6a8
SHA1 d1db4f83bad27dc0caf75f77d510f2eb62dd84c4
SHA256 1307025ed98ecfd00770c2d5c74c8a5e498c4e457397f17c3cbd176ca8a62a85
SHA512 198072fff54bd6ae5ac21bd891c23da9d657a4525dd5944719eda6f7062775ae66d9cb15d29105d2477378ae605351e4b840c9934106bf80f936a596e7a1eddd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 1e997f222bd9b48431b349db4cad8b28
SHA1 b4cfd5043474194ba9a9827474c997c704bc0eb2
SHA256 f194c659dc1a790b95dfcdff3356b74b2520ec624f25abdf206af8761ea90572
SHA512 a5b7dbd1bce6b01e311d2ba6eac67ec9d7013c992a1417d05ed7e7b20b8d2deb9aaa02e854f4f82c93acda321c1d3f13fa43f6bd649fa086d5aaafa9414d53cc

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\icudtl.dat

MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\vulkan-1.dll

MD5 6db4abe9370ef778e93cfc6bd6dbd292
SHA1 0d7bd9d21524780b6f8904a82c3ce09ae5d03f97
SHA256 52bf439424759a84cdcb6d379ed88582a6d6ba58127c44adf1b8379f0e88e5ec
SHA512 1ec07916d82d78243d9a144db3e947c95ca92fce1350708484c45fca2f953bb76728889b8d9a02c041849bcf005f998804d7066a90359fa180d94c237d014317

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\vk_swiftshader_icd.json

MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\vk_swiftshader.dll

MD5 337b0322f328251f01bd0fda8948217f
SHA1 6e59fb5df7773c8668e8f18755e62b532a9071c3
SHA256 11f24457eb9af084eb845780f3fdc1989605766c2749fce6fb003dd988d5ff65
SHA512 3540b2f5df1f20b5cbb6e61caa005fe7da5d1cfbe58f639ae0c40f6a4e7a9d8786f3db4691dfee9a001a2a87ac7b0bf39b7f308c14f809874a89f86b18ff8fbc

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\af.pak

MD5 e48860fe82ef022ffab38cbc4c96dffc
SHA1 a832fa66bfddabf3ae7f219cf379f66d2903162a
SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
SHA512 e4d0973ca7e59091c482d2acc384aa48ec87d3ce72d8d42a03a183b230fd209e085a4e907473a05d02d41e15ebc527df942774c23b4804c150367fcd727af7b1

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\am.pak

MD5 d6e8c344b2b40a9c671304f6f252d51b
SHA1 c59ddcaad921b6d2d3f70b7ab07026c35e5d1e08
SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
SHA512 018ce2bf4beb4ce066703b2ac7413c6517759be68f889f27990de5d6694e9f84b4027f9861901ea4b15abdd1bb570e5a16651c935713feafc4d16cd57be0b911

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\cs.pak

MD5 582fde87aac61961e4f7955f16d31769
SHA1 3a8eb832317dd7e07efaaeeb5885c32b9d381622
SHA256 7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c
SHA512 adb04ccce5471d80182f7ca73bf1a2e4ce63a4980d455837fb378bf679a0022d4ee6f9fbe148d6932fad83f458c76ac229229542092e0cb9b271c8d44639b11b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ca.pak

MD5 7474c8e0c3285b97f1f12792964b6824
SHA1 8b9381be0754fc3df2f4f13f8575bd4abab90e9d
SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
SHA512 4ad524fd530bfc72d72edf04ba4890e06ca0a20cc1d5c2c3d95cda746b1d884a62ec2d4463ad7be9cd01c7529b41bef65f9e669c62719808a83d3c70f9475d43

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\bn.pak

MD5 57eab375114893a5ed0de36a516e8252
SHA1 16f23ab3eb62bc7a2525a7a5d86139fa88670b89
SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
SHA512 895bc282484ed028f5f023cbbb6e2755091f036e540c531b6ff639cf9e0ae5da02801dc81d7910eb141edd5c255d8b088d1abb531b152fbb161d6c2bf9615f4f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ar.pak

MD5 f6ca56d15814dd5afd5e7ff985257880
SHA1 ef236d7027cb50a188c1e771527e6628702311ea
SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
SHA512 46c0436c110d6f1a8f3ebe962226c51af525228262cd56744e4d89aeb05d1eda614801a294bbfd2e08598e355750d7a2d200b3e7b594da03dd26ece4cdd31e3d

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\bg.pak

MD5 e6608ecc589e87a6f78f9ce553ec2609
SHA1 9fdb2ff6291549df773ba243b3a92b984b15bdf6
SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
SHA512 25450b23acc962be85977ef08be9b484c2a9127775039c521158c1801cd57d5781bcd8d5b8784f8a8b9403ce44b59964a20dbe36ce181f1d239143b22b53d5e2

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\da.pak

MD5 5f8f09aa98ec3a4c8122d64c5bc6610e
SHA1 08a6dfaa3a11d8c994da90460e78ce0a4fcfb644
SHA256 3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee
SHA512 9c643eb6415cad6aca0584d62211aed5ed21a0f8d71ac4f692bd420a4a190a9781add7c874d0f56bb5c1c0f65d543d932d0f50caf127e8d014c05d015ae61ca3

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\es-419.pak

MD5 15d1e262602e54d76de8bac02dada000
SHA1 54e93995675bcebc595befaed6b73c9ff5e6e735
SHA256 ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483
SHA512 a232eb97021f17fde322697db2c00423cd70e9741772912c5f7a41849b35dcf3e2fe84001ff0a7902b2b54305d1f805f53988e421e192be0d5abd157bf8b5f1f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\en-US.pak

MD5 5c52a86b21633b55b383c20f16859b2f
SHA1 126585e68cb17f241351004e21c1d30e65de1cf6
SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
SHA512 2a1b6a4becfb97d470cd7de74857edf2cc9cd4a77f377ccd9bf60c30539862ff1ac3ed6cc849632a3ed4ea0e5b92679f3cc5b4cb26cc7eaaa2bb2f4ae9974a6a

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\en-GB.pak

MD5 56bdf77ab3487e28d354a8b0f9ba8d2e
SHA1 b10ee918320a50a417b1ee6a28cd4b05a5f77238
SHA256 7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb
SHA512 8d74c79ba3a554d69f26fb8c20210c9a339d85c0e9a9af445901e8a5c7ea544ea6ec713f9dd2db7b8bb5cb0afb0fb385236d4668a73af37dc9ef8d2f73c57fcc

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\el.pak

MD5 34c6150acccd20c7f260b269bce06930
SHA1 277b6d2387f600c84263847d6fb2342fd4746cfb
SHA256 162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840
SHA512 58308b1f4f92f1eb26af8516351194b96defa8b40f26cca2776aeb9e804e585fdb9918bd2acb9c6318b63c3768c29893574bd0a4fc18fa9dee96b9112732ff94

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\de.pak

MD5 d1a513308f9de55b6c7bbeef7c4fe90b
SHA1 a4a5e99fe73d5f9df2e508c3c8e9b73dea03a76d
SHA256 662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b
SHA512 9756e16255976569584a3a5e2a17421a31bc8f9b158c0ad3d30f6fe624ecd0e77c255571e46554c03c54d58b06d3f7b0fc77d347548f435547eb1ed9173b30be

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\et.pak

MD5 3cad945e9ae6e31cfe66c89365e5d353
SHA1 43758cb523d60d936b9a417123f337b8e123481c
SHA256 ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461
SHA512 ac07e7f72b670a2e8b7a46a672fefedc58d9384d4773a6f220c231c619c1134613ff68c0ccb0dc9e03eb5f47dea7ac57de318af5f3f242d6be7ae43071e2d947

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\id.pak

MD5 91bad2312491410c7f0393be512b895f
SHA1 6e4e9cc985c5b96eaaad91787f8bb7f72cddb604
SHA256 a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059
SHA512 5c0e1cd1741e78fff90f3ec2be02bd47bfc669e50ad0cdde975238a74cb4081536faf80d0a28dc9fea6efda6548dcca4e569c54b903f5c2773c17f72000a99e7

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\hu.pak

MD5 2515bb367f56f282657b3dd3b9ffcbc3
SHA1 8cc350e359f1cfefdf0ce3b016109dd483d45a8e
SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
SHA512 779a77b3380f08dfb1d1e9bd65806f3d5ab56619d040bd6ecc9726c17944f4d0c3a619edee06d638549250fbf4c6a2be46cd6196a3a8862d184a68d45d6f6d72

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\hr.pak

MD5 1973723b9c45b9d971c97229e7a441cb
SHA1 2bfa4922bf2084486681af45cd7f7dedf95b2d66
SHA256 afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f
SHA512 6a1f35435b01ab187cd93b376b76444dff575284632fbf37bf8b08e6cfe7783f985d0fad2425df3d3c332aad2278971412455a748e83c2d6fabd0f6afc3dc292

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\hi.pak

MD5 66ab509000cac52c805d6871ca6c1f25
SHA1 e3d3e7bacbcfaa7538ca89d9d26218eca06c01f1
SHA256 9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8
SHA512 356642a19f044c6e192f658ca2bf8764431129cdf7c9891b5b5bf4e99f6b990a1428c1e483487b619865e7f2d31cb5c9bbb3b49ed25fa81c4374de3e8e65519b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\he.pak

MD5 ad6af80367f0b5d408bbe2c7b32ade48
SHA1 9dd4e4e5a63e50e9d3715667b8149edd8d07a52c
SHA256 20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934
SHA512 95df5ce7f7885d0e72b2d89e1794a3796a1ab407fb27174219db22c668f74a8c3ba1f680cbf990be533c35ca0b2136b1917c0cb92d4556e3ff2ef3447c55efbf

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\gu.pak

MD5 e884bbc8ded4f5f059211fbbb85ed351
SHA1 8f4ecb45ca73902791ff5e56e0b272252c08508e
SHA256 087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118
SHA512 50837daec40a2624097cf36dfd7beebba4db748fd9cc470bf71b526e612c1aa6c88ead7511ba751e370f6f5d28ad9d6338dcb3581d7e3d53e2672741915b952f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\fr.pak

MD5 79d945ef9b8ebc7d39fd03d05d9b2f27
SHA1 6fbcb748515f97056689d4a747e4df3a830fe049
SHA256 1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424
SHA512 f1a26715ad9399052b664c71fb60b6eb6f965fa80d6d8d6c47e0b96ad0d4a4d2028c3e19dad49e008bbc29edc24e656777ce073da008d3f4dfdee4c8f2212a07

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\fil.pak

MD5 c744b92c8feff1c026034f214da59aca
SHA1 95780d3374841efdbc0d8a46cddc46bb860a26e0
SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
SHA512 eeefc73474642e75da61056f2841e7cfeb8d8475be55a39852dfe7de8a972f7d86e9d1df4614b3ca3ae4fb01b68e5ced664bc8e46ccfc94f44b06e29a5035b43

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\fi.pak

MD5 6d7aaddb1365b3efee94d4c510a3002e
SHA1 2a970204894c5ac163c980ec0fac2dbd1711e5b5
SHA256 11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274
SHA512 f44bab9cee552dddac17d4ac1949870943cf138b3fdb0e649e8827acb6de9528dd9cf738757e5b495587e165d1c750b8bcc6205bdd029a01eb92aecab22ba49f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\fa.pak

MD5 7851efacda8438c041c9a511f4097de2
SHA1 64cba381a17ef0ffae2dff5135d57fd1f9300ab1
SHA256 f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8
SHA512 d94fb1d04630cc292296ad6033c6beed1a00dcd4c11eaca04a7eacb50c238269b21e4d2a4002836f4d41e0f6d951624beefc95beaae23530eccded4569ff1869

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\es.pak

MD5 f90d43351ffdc63bcef25bf634c1fd35
SHA1 f80df8034cb64df1ef62e586891275a74868ab6c
SHA256 0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573
SHA512 7bfa70a5de14652063d261c28ffd3df89ea5e38877cc7977ab27f7280c48084a4ab1e5bdad0c2f624a7434a5d975feb9d8d221c010e24963d3c42921f5a36e65

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\it.pak

MD5 591113bc491e5c388ee3876de4aab3a1
SHA1 a63c2a18eb92fd03445bd237a5755d557e1cb593
SHA256 33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e
SHA512 66f1e79c9bf179f19942352258181858268a991b42d4a79747ca580df3fa219c2be71ab6597cec4ba7bd4c691a5e1328aa03a565b3eef442c6e2216f0d82653c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ja.pak

MD5 412bef3ec11f53c2aa6511ca139b1f35
SHA1 8b42655c2b62edc13c61a4625f55c961cefd1c49
SHA256 c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985
SHA512 85760c2a0dd4404a2d41f0d957c9cf8962d6b80389df838cd2d85b6a31a54f4e50c5f19ee73d2ee66e3e61a8809aeb5b493e7170aceeef9bda53e135ae02bc42

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ko.pak

MD5 965ac0d213ccdfd83ac4970de23a8f11
SHA1 8326841ab80c40a7ca8b13589a3f5ff54fc15827
SHA256 3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07
SHA512 5eaf14ce5c493bb4704716add07428edc6569f2dcb721679e140916c0e426cfa8e8ce27a2c38c48ae6e60461a678525e48e42c2938ce40e488b59d3f97a2f9cf

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\kn.pak

MD5 a11d186b8eec7362a280abec3859107f
SHA1 966065cc6f69c3a222751d2191a0efeb6049cbdd
SHA256 a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508
SHA512 099e73977453a5dca329b1d8a8cbc612dd2739bb3db034b7509af35877ede6ee12450875302ff3f9351fc7096b60be1b2d8ccbec89ace3145eb264f25946d46c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\lt.pak

MD5 20906aec4a21bcbb8bc8bab067075ba6
SHA1 369da9c1567d4376852cebdb87cd9213dc4bd321
SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
SHA512 8d1ee40bff980b889af83b95fa408bddf2ff5d257f532d2da46bfc3ddbcc31b9cf14b473fdfca1a574c0316fd689a424ae241e9bcc533b7dfe0c7203d4b252fe

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ml.pak

MD5 39d4a5ed8cf7c8e0df946220fbfc0f68
SHA1 70794849b41d00f2b895f1211a6baaae3fa7d261
SHA256 87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6
SHA512 ac992b9cebc2fd51f7477b36f1aa4d9157a84c3023949c02ea236d909c78fb5ccce28dd213c089820131ee3f669164529daf58901766630ebcf40546d33e132e

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\pt-BR.pak

MD5 b4183914f46fd63a7bd32d715b8629f5
SHA1 d0295b556e55a74e357f932473f9dd2bb1cd2f51
SHA256 5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8
SHA512 3bcd37cc49a827c03fb5b3a97a5eeb863ebb6f071fb2af697ebfc4f57dda676227533cc6a2fdb00505cb2395aae685dae087970ce13af113260d856b845a985a

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\pl.pak

MD5 8d4db26e2ee5181afdfdd513053f3c17
SHA1 0da427a085927a5c02d2a67c424ea99cbf5e6b02
SHA256 f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786
SHA512 bf441f501d746f1fd996c21e5e2cde643b9031bf58bac31474e68a72ea6993447f8bfad3284351bffc94d6a088e183e0b24d109398d65dac0edee8826076ee21

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\nl.pak

MD5 d59fed8986eee2b9d406ad52d88cbcf5
SHA1 f7e409e17723e21174361bc81e54bcef269f40f7
SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
SHA512 234aaddaa7677b39667b4078dc3a630d67b4f2ab7df5ce763d509183a4d88e8f7bd1a231113b8a51418d577e4aa630860a7f2735c34ef59e0f65966cef825597

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\nb.pak

MD5 de04250ff403e9af66a1351598d2a64d
SHA1 4b7a5a2bf48d988f95aac6e85b11a8c2b2fd007e
SHA256 887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15
SHA512 71527c025205bbcd63351283b7b123d8807c05bc68f2f7555f10386e330e052d031b9986ae2c1f0398bd174e67962657e0b8d4a57a07d167c233390a4e6c5556

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ms.pak

MD5 9fb7c18f376b46b254ef9a960e08655f
SHA1 31cb060fc606d011151f1b5464e2a469372113a2
SHA256 2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2
SHA512 23ea07d917bc0cb9a2f530f985c4c1930d31eb6e8271804709126b8b0f5266dc51636f679944d2e3d8dd7b603564defe85c1088a33a922e9fe15c2073b509a8f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\mr.pak

MD5 649e76b6666096a2258b942745ff9fe1
SHA1 82edf8ca68dff0caa36b17901c1e12a17172fa51
SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
SHA512 92f51140416cd6dd53109ddcc1ee24c1d26999de5cd48a11e6954dbbc985298c1b90c0b4a7bbd8701a2737b71340e8a257e8b1ace85ff3b4876b714c60befdce

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\lv.pak

MD5 a999e734f9addcf07c080f9861c3c170
SHA1 522bb12a0cd4e5232570001684aed84f421abcd0
SHA256 33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653
SHA512 ecb92c4ddf7b252a3216059e63b387c6847f6eccde532c300b74e6b04ab56da0208c2ecbd00ab1d5e48acced909db74b1aabf88e34d0d5928b89320f45200dc8

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\pt-PT.pak

MD5 03138b2e4fb822b03713f6c4f0fc67cf
SHA1 8f6f6585743676177eaff5a582d18691e3386bbc
SHA256 02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364
SHA512 b000f1b8fc952849d1ada21aab665cbb97989fc28e892a75077ae9a24c4ef1d15b7d5cf1c5aca89d27d40a01c64f343a08f790049249fcfed43a1a430b4fef9b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\sr.pak

MD5 eb8ec452c7079ef7dc24bc7975513ed9
SHA1 4787250292b8f2040c7ec0b265f60edcfd1ffcd6
SHA256 4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41
SHA512 3ab2eafd3f09627efed8263cc2d59d5780b6a856a6d1299be511bbb5c1350fa05f98b0e77c53c3707ada17e7e44b8801b191802e2cf5129548e279703983a8ba

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\sl.pak

MD5 6c71fa576a41711dcb351abf92a65ea4
SHA1 a0281f6b9dc363628e7d6045f7dc2904149c9dad
SHA256 458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47
SHA512 258e49b51ee65bf508d05a5b3286a8937d3a876a876635b59b97752c5171e89458b9d23d9d7178153aa16b6fc908cc011a8e855c6d3a0152c919b40349cdf4fc

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\sk.pak

MD5 5d41e75bf42cb12d7674986f4e5dcba4
SHA1 7c3375226997e3f69e3c9a3a5ed762ec40d24973
SHA256 89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623
SHA512 a2b91c888ea3dc2e618bf8faf7ac9f0fe562ff16c85d03afac0778ed671b1868a665b892aeb2d588e7f5bf32a7eba57b75e2e15f2c51fc9264e0db2f95d804d0

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ru.pak

MD5 46fb61aa9515e97293969683fc330764
SHA1 5bcc41716976eefb65870ba2a2b230238f7e53d3
SHA256 4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558
SHA512 c3acfc1c902c651e5fc0501a7a77358cbb99daa020597f7f6be9fc81ee53509dcb0d63c6bbc5ae308c88d95dace7099f024d698b6f364dc7db4ae2a7660e5b31

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ro.pak

MD5 cfd7cb2444248216e12193689ba56c10
SHA1 0a9d65fdbc68688bf1624a8c98fd42673961e0d2
SHA256 655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9
SHA512 7ab384dfe93c4de0d82d3a581d0c4b988f823f49848cedf081067e052be2d43c42389899588839dbc7cb35ba70617648bd0c7c199900e78c487f3dd77e64b4fd

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\sv.pak

MD5 819b5e4f2b7734ea4677f6d579d72f84
SHA1 aff3048d8e35fabf68a756513b67efedba59f85b
SHA256 105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e
SHA512 3e1ff5d934c7e0656dd16265be697420c31b191f88a5140c3598b4fe37a6bd3031f50d45ac7e961acaf0886934951a48230f7b10a53d85e015d6d5e1602c3eff

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\sw.pak

MD5 be2bc09130635406f560b95e789f9a81
SHA1 f189cd6eb6c844e2d96ffaeda66fe4d5f1453130
SHA256 f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58
SHA512 f651ea959066a5966f35493788b9833597dff653f649a5bc8b09a8ed748bcf086bd0586a36e1f4ecddd361d04774253e21d67801760d0988f3e17f0c6e1121cd

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ta.pak

MD5 52ee28471f2f9d01ef3f57233496554b
SHA1 abd7dd9989fac90636626a41f007eb6aa5ec7a2e
SHA256 1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242
SHA512 af2e9593faf60319244c90e9c06604dd3830705f14c18cd380dc2338aaa0c1e137bf751603ab9beaf7f1783839f83bcd4fda357b7cebc66ee94155d560b6f691

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\th.pak

MD5 879a881174501e22c3de65b9f80bc19b
SHA1 a2e020d5ed1be7dee50a495a2f8581e751cbf735
SHA256 647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d
SHA512 b8961a90036b94340283237da57659cc277e65e545764251f7d3e406dc5f70c9ae29366184d0aa8831aaa0a7cb5c12ff825078bb87528606cae223fba58c73d3

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\tr.pak

MD5 414b557adfe76e3564d43cb93f513c5a
SHA1 f775095f7c55e834a777c7f25fdfb81f1e63ca08
SHA256 f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291
SHA512 8b1be522ef23888d46c13888a18229f4c9cb6e1c6e6730cca79d9b13d71eb86ecd3d0c172ade6f70ff63a7fb5242e4de7d9742b93376669d13c77de0cb622f94

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\te.pak

MD5 3a71904057869c23d1bc108f1e8d0d31
SHA1 6fb6e60c80bc332a2bb66d02a1e3db69961a9c41
SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
SHA512 7248058b2d357c4a8b9c2e95d580a2000a96d9a5adb0b822adeeba5c4422e08cc12ef84b9b9a627a1f6cd07a08698ec000510885d14d64afd40c6e8d69376022

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\zh-TW.pak

MD5 e302e1102f3f5a21860f38f41b3c30f8
SHA1 78b5d1c451cf674a7641dfcc815f966fc920cf57
SHA256 d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b
SHA512 1f96b197eb7ae6b7983ed38d4ce33ea0c845ffe527fedfbc9e53a6009871dd3c39084a04cd1d43fd6dd24e7f26e3ec4845d4225df828de0b9ba346cbc98efea4

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\zh-CN.pak

MD5 3fe312d9859b299c3a332373172c33f8
SHA1 ce6a99d79dcfc363bcf68bdb1ddd4e6862236020
SHA256 f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b
SHA512 488a6043381834c9d69a906edd9e3273da01b618e9f3351a89082e6a4727f9f882e435eca3d590cb30336cab289fc71b109322d43804ddde5fa038a63a0b84f7

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app-update.yml

MD5 4dd45d9de32f1a1a9aaae5d05314e29c
SHA1 80e458fe95becbdbdc82b1c06c92ae4f3781f497
SHA256 f2063da30e10724592fa8e42767f066c34520c4fc8302b6647a1d2a0a039d71f
SHA512 f5b0ade03d39d867ba3d7db972f999b92696beab9c20d1eb0440d3a0aaf66fc6459f0d6100f3ee8d9dbaacb5d6d78b8d3e0f8abcef8dd76f05719b7f896a7c40

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\vi.pak

MD5 565abf3f9b296fcff95fa5b169a7d598
SHA1 24de1221b2adec13b5bcc23c4a54b8e987e9f12e
SHA256 fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257
SHA512 53bfe0c1c289ecdf48114048e15807c3143dbbe357736753cb845a31a6a3fccd0dbae652294508706076ca4b30e5da00e53bc6aad11b06fffbf2621997e7de36

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\ur.pak

MD5 fb978b7d211112a0774ce09ca54ca96f
SHA1 fb0c69801230437dcd20e3803db81ee60fc042b0
SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
SHA512 abde8d79f46b27e0e315034025837a3126d6e5d2bc52504d49c946fe96828bd9b20cc4a5c05283fb9f8813e6820a28249cfd68b30cb27fba216970c16ecc8d44

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\locales\uk.pak

MD5 241fc33569b22647e7d2c4189a8ee7bf
SHA1 f56a73cc81b1e96560b74ee5e73d7af792720ada
SHA256 13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232
SHA512 ad16f84482f0c7c3d3c3fb98caa3dbd0048138f361aa6eba2b6338ff6e25da4c3ab39450354f2a86a53d655cad99e92fab2c030b5771d7e6a25190617f1a9385

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\elevate.exe

MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\@next\swc-win32-x64-msvc\package.json

MD5 704b387859cdf10e134ba4c181773747
SHA1 626f9cd6f668b8f310a4c11f331b96cb4289e44b
SHA256 f6b59292c52960efe68cc3813a78bc505d80cae11d632006770059380173cd53
SHA512 5416f7ac6d243bd04f32d5a776b596b94db1858cbf904357d8eb4733a22ddc94bcfbc116437e86799ccf402493212117f65289308f4ae16f3d39083693f9ae66

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\jsconfig.json

MD5 21cfa078a36c66a3d1f4f2caf729fd56
SHA1 8849b6bf237cf4464a4628f0c2e163e866dead8f
SHA256 87cd1d700216892ba7d388d04f42e373e1abda0b5d407c54a60e67b5dde48ab2
SHA512 92f7960fe79d8e5813372d7a7833bf883c3dce6eddb083302314a2d9ff52d800178f8ddcbf071c169267b346dfbc5d59b1dc0f95a70671bd63453e56e18846d7

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\.prettierrc.json

MD5 e502800d651a7ef3ff58d918c68aa81a
SHA1 c3b456549821510c5729648bfd93886491df1db8
SHA256 37055c98043228133ffcc5cad7bba5ef6c8f24698a551cae547b90f51d22e519
SHA512 9892bb44616c6c2761027562371e5c72a355ce1b519072ce5733ea1d4971ffb8c9b3e83f935a18120e0702aae644d07274ad4b09214459fc13679a8ed6051e7c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\LICENSE

MD5 9b54883148dfd5ff6b9f1a23f9470a30
SHA1 f062e421fa2d8f722e9ccb2b0b4be9502a7386ad
SHA256 0fa6b5d2902f7ac42db390dfd2cb3b4ce82ed45cb5ad5dea41c11d1d67e0934d
SHA512 d2af503c12f0fda687293452af39f98f5c3987eb8a57cf12c47da5aed67c761349e5186c15371a96f5d490c140e8dd0d5e8bd6a6164139dde0562d6ee46db90b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\package.json

MD5 d973ee4a6969bc5e14e93d99d4680c16
SHA1 22ad20391ccb50fb6343931a1312751b2f7e049f
SHA256 f0051785c8178f10c2b5ebe86edd6949eb9db7b293d9abbb51a857f7e62500aa
SHA512 2f8c64f04b3fe023d296899b16f6596f42cd69c1b8230c5bee561c18af6bbf44697966b45b50d718eff75cbffab37054a6de7b57bebc16b2d85a5a0e307dfa9d

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\bin\windows-kill.exe

MD5 de5ecb14c8a2212beb309284b5a62aae
SHA1 cf89d1cbd52f3183590b33bd6be591f95a6f5291
SHA256 d35c0d3af8f66984b1ead5cb56744049c1d71ef0791383250ad1086c0e21f865
SHA512 fea8a49538f5fd4cb8c262c1619f9f8e906edeef7d3c791bd3b85f032a0499aa5f18b4370a00e1f4dab9698e1958b042cab467103598f1bdaa583eb1fb918c07

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\authors.txt

MD5 b5c019895f49ad741cd49e6291aad090
SHA1 03567a03c8346dd89516e2e03957bb674af91408
SHA256 e1e0dfdaaed1f025c106731aff67d664b849635cc6cd3b9b08674db8dbcbc5e7
SHA512 ff13c9416d29d9a3fe636e14fd63e5424129a6e72366c06b1bae3c5a06f60cbbf3520d868c492d472450e35e547881be93955b29eed63e66979592da576f8bef

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\logo.txt

MD5 f55be3331bb0e69fc47994610da41ada
SHA1 d8415b399bd3853ef658a5f2057812404598b5c2
SHA256 cb0c73fe1bc7676104d6a92ca91250cd562b7f37a564edc260de01a3fc636b6d
SHA512 505d427c6d0add618e0c54f8079e4303fee73e0ccd9c4edfa67b44660ce5d5deab4fac09601002f73cfd00f445640a69ce9fe9a39b8a0f3039b200f5bff058e7

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\usage.txt

MD5 1448d12c8524497e0abecc6089aa5a99
SHA1 183f63e7726b128a36e247e6bb506ced31272e49
SHA256 844e2d826c59dbd72ad383fe8a23b24373d83e9b184b437f7f04c42487cd5759
SHA512 e14e41721ee4bba6deeedcc5786a113042cd595024eb411ea7d874f282547c5943dbdf1eb7674d752ebbac16ac4e1c98149b957ed5cf3623e85a561a42354e45

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\cli\parse.js

MD5 63db540f7184a372ac611fc3d7f21136
SHA1 0b3a8e70600a6705297a532849b7470c34f8c19e
SHA256 93b9bbbc19e6f0456185d7c9e9ce11e994f41c01e46067959c5168bd345b0313
SHA512 1f56bbc4856fbefd21f6de0738712157b91f1388a71a957c37444b617ee161885822b21fcf4e7efe14d5af54b9706d8181acbb286dbd7525c91a56b53dc391be

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\cli\index.js

MD5 05d07534c94e2d589bcc02e96e1b9503
SHA1 3c3712ecff74a1099c4d65e4eefd9cf2e38f1119
SHA256 5c5b008f28d9aa1d6f8c30a30de037b95b50141a20ad0f029d0d79bcd75caa4d
SHA512 7c7526f2b4e685cc7e20689ebe5abf7630b738d2d15ab7b5e94765e0e6f221492e9e029f715f5b3ac156d3d11ffd907e070d2d7f968b5f5fb401aa9c7ec84ea5

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\version.js

MD5 7232bc938db18583ac3447bebc844430
SHA1 55051c267076fa3bd3764864ee77d4c41c4b3233
SHA256 5071083e2e09969b2741a46cdedbbfcb2608fa35c1d1237e3bcf134749fb5ecd
SHA512 9167690b0ad72c815c3d8c7227ba8d3574acbab95236de0ddea28c73f6a2899dd700ef9083b06d2badad19c21659a93ab101ecc439a42292d2540ed8c2ff3c5e

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\spawn.js

MD5 ad2e1e41a1aaf8c0d0b622a27bc6bf9e
SHA1 139625411959345da513904bcb7d73d7c312b63d
SHA256 7804d7450f305b9142af45967be5c96f52be8350dba2a403f4bf79d5e092bc60
SHA512 e43ecd8af261ad4cbed89f549c18c18df9cfae6338c0719c1e5c06361c6cee4598d080ee32dfda56cc742e23fad5db56a842ef8511d9d5e2c28b7f7eb4eac091

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\nodemon.js

MD5 392a1c2f9f7dec3e4f64bb738f21785d
SHA1 02d0364639bbc6483d727e5e24e6c6b39c8f0ae2
SHA256 3bb0b111682da4977e265b0bc746cd57191e294e0c25bf667f129771897dace4
SHA512 48b0517f41013b024dd5a674b88a9e53590113f664482b0420236babb9ecbf0428c40c9f708b204bcb1f2d59789ef6383641eb8efcc7a7ac506d4345c78358d6

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\whoami.txt

MD5 5a53b8ff8c3670ff035f6490a24a0789
SHA1 e079a16d67475a83eea085058af0cd704da97393
SHA256 4e7d19dfe1603ca93a0421b1abd4b19cfa5324ef458ff549809c5e66a2efc596
SHA512 e906ef44ff0273e4df3397ba719c173c87a9919b7f9d2580e2c3354fba22f69b0c0a020eb049d276934dbc66f497b279d15c135fa0e12e04acd39802fc5dfefe

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\index.js

MD5 5250f6ffce08844c0f9f139fd707243c
SHA1 b5646886daa1c00461042d1a35c1a83675f8c8ed
SHA256 95111d84575ab36b697d760e130d722daea3d322cf56612f2ae67c7b3e8cef19
SHA512 49dc989edab7b4ce7477bbc5c678e1b1f4aca0f77e0ad6323d3c251164ed28b59f4d18d5b0280d53108b93e133eb2dab5469093ecbb2f1fe2bb32b758f59e729

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\topics.txt

MD5 57a5e0be8307585fffdbe867f0d047da
SHA1 0185976215d973431c6810571b21d6804bf64632
SHA256 5f8f41620ccdc1d7298df4ab786abc7edcf049fa7e06fc69bb26b38cbd453643
SHA512 4c05c95f21225be793051bf799255f6e021145e17ca384697877aa9dad66303d8bdb6e47751433eaf17b22dc766758cb799034a34e1e7851a8328a95b6784273

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\options.txt

MD5 016f8e569786ff8f5f6c321a735e2323
SHA1 b7a7a46bf03f4564d6e47fa55a4fc6b9be1e39fc
SHA256 3c8ec4fa239f82b2b9f427925ac2f75af2af9147eaecc706b1990540b95ae94b
SHA512 6b8372648371ea46ac98dc49ec93cb2efb9cc81f75e8ee7a5e1f0a01b7bf209ca92e07649c22630722370b1f254e956ea7ffe4be68d0f9ef419766f90dc80fe7

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\help.txt

MD5 0034cf996f84911ff0646b717ae47ee4
SHA1 5aeef8ef12d8023fe208c0492174a960e57c643e
SHA256 d98c56a3cb9643b399fa04c422da35204dc91cd869c47019e9783fb4f7289adc
SHA512 b1f174300ee58e16676ee8ccfae4e48794ed5412d89e0cc0d8a134ec055dfbdb596d0ab43ab376f46adbf76cf970210455bf46ed666839d69357d0ded8c057af

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\config.txt

MD5 73ea33e660552d101eca031a0baf6be3
SHA1 3d3384db49a197a8a616a274598bc18a25ade114
SHA256 032c4ca3b1814a39579d7a0a00154a3772d89aece9884d135fdef782f36e27c1
SHA512 c7b9a4bf4de7d13bb45b4db857511cb411a7927ee4db759af263905e01cfda8d95477d2e2d6ad6c51c9f301710e20ef64b54a4d15082f5054680da9cfbca1146

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\bin\nodemon.js

MD5 30894042a167528293c057f833e7b6f2
SHA1 ec993fedf1f1a22c77b985c72d8b0074811ea680
SHA256 9bb0e59dfd1cc00fc40bed0ccf10d88414d915d79875b9dee5c1d5009f4e89cf
SHA512 2b544b29e44e0471a9da5474209bc15cb81a44a38448a74a7a67f4ed3ca7d1926cef4b2b13d3269fb785a468d00f1cfc042d2a7d6b4d563725da65028e2df15f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\command.js

MD5 90c1aa9f031e818373c2f2f7ed6b9dbe
SHA1 b6476cdfa45ab967436ba9bb32aac1d65e531a9f
SHA256 50f10478098f06b77a58b351a93bb8fe7a7572bfbfb3e6f0bf668460865da3a7
SHA512 4ee766da766530bb372d8e04b058edd6b28ca5d77f603b175336e9b5e8f5c677e77e0ea4afc07a642c07c48e0c209716dbd9cef4f6ab97864a9ea51af2b49bbc

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\exec.js

MD5 efcab0a70d5e71fb513734cf92f2a201
SHA1 aa55660d5d6a38e2ea632d4de0640ad2b1b7fc5a
SHA256 fcd713c63326ff75fc44afdcbd2bf63991c3c76169a26a2646defab46ce24155
SHA512 260a468807d297c2fe85ce8341ae10be64a7833a8249f2932c6a93e6ade07438ca4bd26222326a1b0e3203ba0c80a6a6fb78e90015b667feda8f68538e1011ad

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\load.js

MD5 3379b8830f56cd13355114f157e57857
SHA1 cec1a9f2c8ca7f666cb4efc2f3eb99317ea59602
SHA256 7329c732d39f8e884c0ec197e1133c536545bf4137417e6d664bbec962990e29
SHA512 0690be21833aa598da0d7d20312ee8a2e2ecaf164981c94c3bb12036cea40a206e1b25e839209db78419d6262ae87e29a5c94f583ddd9b45e05bc5a107842d22

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\defaults.js

MD5 2e6f9c975170db8136c9ca5c5ecf2a0c
SHA1 404a2c64977cae3407aa138c23a2f841546f713d
SHA256 2b577f3fd8e3d03d64c1ee07ef13db89df04d0a9cf7b69ebf2c17041f7251104
SHA512 15bfa9fad522ddc043383704cac725c8cc2b4565708b891e9e03d889237cd528ee4d347e54a983c801550856c2d1ac1269dcc127edfa6d63bf3d2aa0a19eb358

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\index.js

MD5 ac3af2f96d2e824bc37e36e30cb35cad
SHA1 d04e50eb9464ee715a940819ac7af1b612884bb4
SHA256 be155df5dbc29c88c67c936f2840d2bb3abd09981fdb6db6480d54beeb27e9fe
SHA512 060bc19e10d8b9cd959869866b4ac5e0739edd72ca1e61a230a5f3c735feda6fb75ae7a8ea13349013082bedbcd40e30219ca09ccfaad43571059a765bcaee8c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\help\index.js

MD5 e47db45cd167c663151a07e6a3396427
SHA1 f3002a966b346ef937a47576d754787e4bddabff
SHA256 1c1678d18dc75f67bbfae8c92836543af6990bce6b1cf1ad3acfb52285dac393
SHA512 3f8e10d09fcb527e1c1753d50c9bcef2b8fb70586f34e600c0d60ed27a295f077f380e1df2fdadc78b0d468a54f32a5351fb5c4cb638e3012c96358094d31dea

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\watch.js

MD5 a0bccf8a21d0c4332643a758c666f725
SHA1 1aa6968e927afd86a3f056126f31d2eb6420573f
SHA256 efb0a3f37d9a6279614b29fdbca3f29c1a6d47f2d26067be1c86bb56fbaefcf1
SHA512 bf4dc9c5b4f3b0a01ca161feee0ed13e6f1db24b0a64bbf01b325d0a2788380516da7da7654ee983818f3e0684983302242fe790bbb384dcc126ac4c394c41b8

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\add.js

MD5 4739ea852e85157f1ab60544ea5ce663
SHA1 d83c88f7f8bd7ec5d1b36f86009ac7eba9ca1bbb
SHA256 3cc60361f99b1080c66fce4d6ea0390a38c2a49e821e7f21dc43ed2fafa31277
SHA512 780001095f33fe4a18fa06c3311f3505949dfa762da5f1c0c6665b5501190b6e6c45eb69633c99e02b8b59d01813abfce2baa611509f2a0e65364ccf71965bc6

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\signals.js

MD5 0b71010f098a8cbf8ea47a83a699693a
SHA1 456a713c6a78b49bbf6d613ff9cfc4bc9f01f589
SHA256 5c16e2e5f7101eea3f13c19da7c7a9e6fa02f7d1098b170e71f07d14f915e394
SHA512 95a382907ac465d95db0cc41055038e839ed9164d4010003c08e6ba4456c19b50158c908b8d287eea09a153e38fdcc7f9a8c0052f35eb069243628e0968750fb

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\run.js

MD5 47603d83844b08ba9fc39ac940d78f50
SHA1 4b8dfa2ec30dbd1146a9908b10c858ecbd73521a
SHA256 d93e994fddfcf6c7683976452a3d877a51e68f56ce2a49b821240c93cca86d13
SHA512 52f33cfc03dda936f4641f1ef8b3f14659247053a701b8990f0713742fb90016ba5d51d1e1f44fde84dd883c92166e77e908d586c527858bd3c0a416b9c9d256

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\match.js

MD5 65475ff22153cb7e1cdcd5322341c398
SHA1 c026de2f4276472496755344bea58e11e6b38748
SHA256 d09e469209e55541c8c67fa7ab25b7d4e051ce26d36f737c6264d4ade4b26d63
SHA512 8010e71be183c4b1a02ced648f083be4c8e4be9ac474e1405d91d9925887b00fed0aa07d15b994846417a48ebf768c5402f5d0b004cf9107cb44149bac3da655

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\index.js

MD5 532b43e5038c9f6a6d65d40ca44375f0
SHA1 c7fa3f4fbab77df0eee87d08d428cc06d18faf76
SHA256 cc16aeb163da6cc7746bf5ced2d11f1436e458c7ee803241e9a9fa1d107450fd
SHA512 809479d0b075c9bcb3eef6670cdd652a6caf39ec7f93f1d7dde0eee8a792d518238cfa9f78a2ec1a11ebbfeb00d2a117d25b198718af668c7f356bc3f93ebc1c

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\parse.js

MD5 078e15305c8688746d2e6933d291babf
SHA1 80f0b4201c45af197cae63c9d93a88525cd5c5d3
SHA256 9259995d8e1ca1737ff36cf4f97c80e55d812726ec4ead43b6c0829ce9679df9
SHA512 83ea7a6d31845542cf03f4b27be92087e417ba5f995ec740824440ddf92932d3623576b7a1022ade20deeff2f1741d617e32dfeda52efb5fb85e9be28de27df6

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\index.js

MD5 0691f1f2acabdb82da7d67e05479ca5a
SHA1 dcff01be935756a732591d61fab8e64e530ddeee
SHA256 3e64a2a35a97e41ff8c073299f07c3754d99b0a6e7d42faef7dc02d61d67757f
SHA512 85ac8207410deba52d3b58fcf30e468ee46b1073544b61376b4b015e588a52973fefa192a027bfe8019b6cfedefc3c4c1cb4fb0ee88e7c2ef88da1c7ed0f9eb0

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\bus.js

MD5 e469c4cef4116cf230f86394586c5775
SHA1 8849ab04de5836797a3839989d4325906bea9dff
SHA256 8ebae78d8d75951b714acaa3e1a3d7f15b382a92b90c8040423e9866d97f1ad9
SHA512 923ecfd5103fc6e266e53dbb1d35e11f4058893177fa00cc392a628524dcdbe616c90015a24e15b987f971c5eabe0e53a3b107878bc41bc73aacf1e370d660f2

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\clone.js

MD5 9ef3c7b72b1d63f5e3a7975ff67bdfeb
SHA1 a406bd661839b5efeff4929af9fcfa991e51be12
SHA256 5062a7c87599935fec99e505f3f463c3e0872455da73f8c8054ce0788c513ba2
SHA512 eca4c0784695d43435573725f659409ec33a3acd3a5695665935439cca28122a6d8fdc1eaeb8ac6fbdb921893ad4226467777e8c35e3b9b0b672b2196f4e12d6

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\colour.js

MD5 a85f32c2180651cc03bb1f293271bfc4
SHA1 0d04f9086ace00f08c628c1af25c728eab897d66
SHA256 a4969a552701982cd415005d5ce162f955cf26c205229d2f4c75ed4a75bceceb
SHA512 b32f6f7c1bd75a3a23aa5f170e5356cbe1ba7eb031f6eced706aeff8c15d8b37fc771c29a82580a48a95c65334d8e41b0ddb551409164a43bff29def7277c89b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\log.js

MD5 fa4ca8a08fd35bba58f2af0f046320e7
SHA1 5f672b1e8d504a468b7946514e854425fe938d29
SHA256 dabbcccb1bf0089d96ce9592a575cb64139926d6b899091c1dbd37632e9269c4
SHA512 70cdae1e1983fc7bed3bee24f50196ec281752e7567d5c4d5aa2859172141422f3eb6a7ffe9165c408d5e3354d7c139fd90382c73f7ac0de16a5840221dee399

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\index.js

MD5 2f2a9c006f17f892a78a9381932918c6
SHA1 80905883f8b96a2265d60202f61de419e8c6d3e9
SHA256 c69735d5a8d259dbc87614ae268de4f6581fcadcf6f931dd20b36bc09c0a502c
SHA512 702966aebbf2a8f98a89da8640a3e0f610fdbd063a19bd4c7ce2097dff7ca1d49a2c8040885ca3b31f85662e6a8b86769ea9224e8f64a03bcd0bdcfb71873b35

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\merge.js

MD5 b5932e306173a01da5d3f814bedcf4b8
SHA1 d3ffa9ab328864682cbf2f5e9c5e5f6437d92541
SHA256 c4598a00e91b93b7964bb874e8ceed6d614436335a7fd81aff7f504499e210dd
SHA512 cf565fea7c0b2453b8276fc25b5e0b546b0ef79eebdea4022aedcfdeb7866687c925d95cb4d56de413d53db51d03168b8302383ca9f8b04c3b5e501fd3be0fab

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\bin.js

MD5 927d799c0c996a865d11a78f04198211
SHA1 f5898b61159f1f56ebd3cd439b498a177d413c0a
SHA256 7f69b31efa09c6e7d442d6229e82e65f38faeafeda1fbed7c5e54324aff062e6
SHA512 97e1061700f32af28dbc946e2f3be0358234689f9d3482b37429dc28697516916cf1ff6c7891a29b835cdd775705f432ff7f437bb67ba87d7ae81d62453407b2

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\package.json

MD5 2ac7232223dd7c39ae2e82220d9a767d
SHA1 cacf598ea739460d281587549421ce95546b3048
SHA256 0f49b6c0282be08a5dba3e98024401a921167974a516b630ce9f9a9f2301df08
SHA512 249f93debdc2f2aabc8a1d977f2c1a9a54cbc0e3580e4dae06a1193ff83c801518a7cfb7919f98c3b943eea7c7b99d85c8148292b0b96b3bce4788277b956b56

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\LICENSE

MD5 216384c4c084ff996a55be20cbd26ef3
SHA1 0510d5fdf8e7bf002b8396958f2240222dbb2a5a
SHA256 fe0982bd7d38ee4cb08b2f111067bdeedb9732a6621c761bcf7dd01aa6211c5a
SHA512 eed68402c44f099b181ebbf43ff7efd1dcf6791f7f35f6d386d66202bae0da6e7f0108fe9c3d62af0f69989d92286fd0c307d2192db0113b9fc857746dd01abe

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\index.js

MD5 e5053e64fdc67009804a42cc8baebf90
SHA1 8814ef33fe018ed0a1817e77c7ed7ddb16076137
SHA256 5e591255fa35fb3650502e648ff51d6d7c7e57ada312bd33058da03cc412efb3
SHA512 60f941a6814dc3efea6a65c6dced552d4248273e1ce57222b428f813e0ab655d13546a0951ad3c0b22adffc7fc40542d7667ce70d315052308ea0fa1195526f5

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\skip.js

MD5 92a4c6dc39d38ac078ec80977508feac
SHA1 edc8d81988e99c77105abb1455ea224fde97d212
SHA256 c12583530edc83dcc7cacef4a428eaefa84c10bfe4b62c0c9707de015e338859
SHA512 3833af1f274d3bb89776a8dc6b9ff015f5d219ebec47f5e98bf88670e523517ad8a493b0959dd41dd6e658c230335338325e8c2befea61f2f22f8e83822ccab2

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\LICENSE

MD5 7cb552557240a921e34ad313a224d17d
SHA1 92ad1627269adefd696ac5a67131e4af575a2cfb
SHA256 7d355d1a2324c2073059ffe7ea4d96852c873e718bcc197374440dc3efc3f7ba
SHA512 b4bf90a3cd77805fc149a4112f822ee47b4f13404ee92455ecab9dd12d796ffe81d664bf21042ae3ad6419abf6a9de6df231328be6bd8ca2426e3432d456921e

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv.h

MD5 349864c2d1fbc9c7788cdf95c541ff52
SHA1 fa968f5bd6560675c26078de4e7d52b454c778f7
SHA256 7340eea1def3c1d832a6f40c5022725f1704a783f7f992b71d5f3ba2dcaeb34c
SHA512 5e1910c23dc08e79199fc80ab8e0c7b300e2e1bd2678d0d9171a73d8f328adbd32021146e5e43485f64f25fcc6bd8413ce1ce3846afd7fcf49ffe3a04d0efbf6

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv_inl.h

MD5 a5a0f8294daad33a66bf30c329157a2d
SHA1 02b5d7fab93d942033fe9ae2620d1a2363914469
SHA256 4955fbf455cc29d63f5dc777d3aa5172d6e1e6df221a33808a913bdebf5a1277
SHA512 f583116ada3f281c208a98d053fe6b580187d6922e2ceae69917770a46f56c16444267172db2cb0bdef3b8012088706ba1a2203631f9ff79d2814714b25fa78b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-ia32\node.napi.node

MD5 8a50b5876633dd9bb73612fea622a521
SHA1 27fb94a39849fe6ba1ce7b983c0d9e4ca4e62ae8
SHA256 053c3100121939dfa1fb936718c6088e4490e72faa3c713310b556ea90155278
SHA512 958d901f7c72773a2f9439842f422048a8cfa941ef943f5f9e61c5e9d48b4d9ebbbaf72acb2a07138ae66f925b46dd98717656a58719902d417a14ba1e5aacaf

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-x64\node.napi.node

MD5 0b3ffb5b756beae28d8d9da67c288283
SHA1 7c2a0be0a5ab1b936c4752254927f5ed066abe5a
SHA256 462e527de86494f96ed0d42a80c261e46bb57352e86d6175607186c1dcdfc7b0
SHA512 a1568e7d02bd34992236c587cd77404e4cc9c25011a075dc0cbe52b59ae254eea65cc31ee7fdf26898386e370a752df8bbb2ce70592244d6f24b10d39f9f7854

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\src\showver.h

MD5 6f621ba192a6fe2228ef9965757f0bc9
SHA1 e3625cddde946f5ea21e4c00be95cad214da4016
SHA256 2b561b980e0a01191a6c7cc1cf94c8d5c061f9f299ea256f1e7ca17250ae08bb
SHA512 ab90bc30f2c23a3032334d30294aa02007e0db180c82c6c8f0d84781203be7c342134cc17bb2ac0c7bd89c1e5902c852afb2d09b0c7d4dba27f5101577491f4f

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\node_modules\language-server\en-us.json

MD5 de2ac61fe7207c1b2f304b05fae4e39f
SHA1 72a4623fde7103eebcff4a55ccb8eb6acf6bbee8
SHA256 c8dd69f4f8f07ebe1c73a433bbf08f67e3bef3047c35251a243c3ac78f500647
SHA512 4d0be337f5d6f760fef3f79d14ef6835045e12e7eef5cf906a5f73841b01bd59d3171c31f63de34e5b44f791d5912f940fa391d96685532e0baeb7613526f8a8

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\node_modules\language-server\globalTypes.d.luau

MD5 6fb690ee838bebdf6591733bdaf632e5
SHA1 658ccef6ada0551d661d78706266ff6ad2797858
SHA256 ae99b7b676e4becb10e6a9b77229e99bdd60e5a91d2e6bbb141c85721962313f
SHA512 7218ebc8c64a7bbec231989ac7d2221be63f29302f6f16bfc0bd67ed5e9c5ddfcb50ae781f6ef73a3d891a70ca73ecc62bbbe6c5a4a218225b24c0d19c7737ff

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\node_modules\language-server\wave-luau.exe

MD5 12fd29fcaf6f6518b8bf9e976928fa38
SHA1 1f9352e217518eaceefdd041e3f085ffbb93acb0
SHA256 d38d6297b4653f30397b7f45964ed99a70c8ab73d60063f68d3380c309e626a4
SHA512 b0c5bfb87639585564915f284ecff5af7e6664097ea3d9df6908c08ce09f9f6c31912225620bb7f7cf818efd6a7146280ce37e10ca7fb55bd381b95bb8a2189b

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\7z-out\resources\node_modules\language-server\wave.d.luau

MD5 7e477f85c45cfca5731e0e45ca63f8d5
SHA1 35390d8d2c0dd00e3c60dd6fd7f1727e36874566
SHA256 e58e8b24642a8693b1b1ebad703a7efab1cece9a1b12dcf353c4b4432f23062d
SHA512 dd3d9b149dffd31ba4e94b9c84ed0fda1fb67f1f7d633900688cc9e4e40c26f55048c1730f205e5c22b5030362683f0abce86033816f1e089c3b67cc3853ca70

C:\Users\Admin\AppData\Local\Temp\nscFF87.tmp\WinShell.dll

MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

memory/3004-2966-0x00007FFB6F2B0000-0x00007FFB6F2B1000-memory.dmp

memory/3004-2965-0x00007FFB6EFC0000-0x00007FFB6EFC1000-memory.dmp

C:\Users\Admin\AppData\Roaming\Wave\Preferences

MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

C:\Users\Admin\AppData\Roaming\Wave\Preferences~RFe5d5a09.TMP

MD5 d11dedf80b85d8d9be3fec6bb292f64b
SHA1 aab8783454819cd66ddf7871e887abdba138aef3
SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
SHA512 6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0

memory/7284-6890-0x00007FFB6F3A0000-0x00007FFB6F3B0000-memory.dmp

memory/7284-6896-0x00007FFB6F510000-0x00007FFB6F540000-memory.dmp

memory/7284-6899-0x00007FFB6F5A0000-0x00007FFB6F5A9000-memory.dmp

memory/7284-6897-0x00007FFB6F510000-0x00007FFB6F540000-memory.dmp

memory/7284-6898-0x00007FFB6F510000-0x00007FFB6F540000-memory.dmp

memory/7284-6909-0x00007FFB6EFB0000-0x00007FFB6EFBC000-memory.dmp

memory/7284-6908-0x00007FFB6EEC0000-0x00007FFB6EEE0000-memory.dmp

memory/7284-6907-0x00007FFB6EEC0000-0x00007FFB6EEE0000-memory.dmp

memory/7284-6919-0x00007FFB6D010000-0x00007FFB6D020000-memory.dmp

memory/7284-6936-0x00007FFB6F1C0000-0x00007FFB6F1C9000-memory.dmp

memory/7284-6947-0x00007FFB6CB90000-0x00007FFB6CBA0000-memory.dmp

memory/7284-6951-0x00007FFB6CBD0000-0x00007FFB6CBF7000-memory.dmp

memory/7284-6950-0x00007FFB6CBD0000-0x00007FFB6CBF7000-memory.dmp

memory/7284-6949-0x00007FFB6CBD0000-0x00007FFB6CBF7000-memory.dmp

memory/7284-6948-0x00007FFB6CBD0000-0x00007FFB6CBF7000-memory.dmp

memory/7284-6946-0x00007FFB6CB90000-0x00007FFB6CBA0000-memory.dmp

memory/7284-6943-0x00007FFB6D210000-0x00007FFB6D230000-memory.dmp

memory/7284-6942-0x00007FFB6D210000-0x00007FFB6D230000-memory.dmp

memory/7284-6941-0x00007FFB6D210000-0x00007FFB6D230000-memory.dmp

memory/7284-6940-0x00007FFB6D1E0000-0x00007FFB6D1F0000-memory.dmp

memory/7284-6939-0x00007FFB6D1E0000-0x00007FFB6D1F0000-memory.dmp

memory/7284-6938-0x00007FFB6D0D0000-0x00007FFB6D0E0000-memory.dmp

memory/7284-6937-0x00007FFB6D0D0000-0x00007FFB6D0E0000-memory.dmp

memory/7284-6935-0x00007FFB6F1C0000-0x00007FFB6F1C9000-memory.dmp

memory/7284-6934-0x00007FFB6F1C0000-0x00007FFB6F1C9000-memory.dmp

memory/7284-6933-0x00007FFB6F1C0000-0x00007FFB6F1C9000-memory.dmp

memory/7284-6932-0x00007FFB6F1C0000-0x00007FFB6F1C9000-memory.dmp

memory/7284-6931-0x00007FFB6F1A0000-0x00007FFB6F1B0000-memory.dmp

memory/7284-6930-0x00007FFB6F1A0000-0x00007FFB6F1B0000-memory.dmp

memory/7284-6929-0x00007FFB6F1A0000-0x00007FFB6F1B0000-memory.dmp

memory/7284-6928-0x00007FFB6E290000-0x00007FFB6E29D000-memory.dmp

memory/7284-6927-0x00007FFB6E290000-0x00007FFB6E29D000-memory.dmp

memory/7284-6926-0x00007FFB6E290000-0x00007FFB6E29D000-memory.dmp

memory/7284-6925-0x00007FFB6E290000-0x00007FFB6E29D000-memory.dmp

memory/7284-6924-0x00007FFB6E290000-0x00007FFB6E29D000-memory.dmp

memory/7284-6923-0x00007FFB6E250000-0x00007FFB6E260000-memory.dmp

memory/7284-6922-0x00007FFB6E250000-0x00007FFB6E260000-memory.dmp

memory/7284-6921-0x00007FFB6E1E0000-0x00007FFB6E1F0000-memory.dmp

memory/7284-6945-0x00007FFB6D210000-0x00007FFB6D230000-memory.dmp

memory/7284-6944-0x00007FFB6D210000-0x00007FFB6D230000-memory.dmp

memory/7284-6920-0x00007FFB6E1E0000-0x00007FFB6E1F0000-memory.dmp

memory/7284-6918-0x00007FFB6D010000-0x00007FFB6D020000-memory.dmp

memory/7284-6917-0x00007FFB6D010000-0x00007FFB6D020000-memory.dmp

memory/7284-6916-0x00007FFB6CFF0000-0x00007FFB6D000000-memory.dmp

memory/7284-6915-0x00007FFB6CFF0000-0x00007FFB6D000000-memory.dmp

memory/7284-6914-0x00007FFB6CFF0000-0x00007FFB6D000000-memory.dmp

memory/7284-6913-0x00007FFB6CE40000-0x00007FFB6CE50000-memory.dmp

memory/7284-6912-0x00007FFB6CE40000-0x00007FFB6CE50000-memory.dmp

memory/7284-6911-0x00007FFB6CCD0000-0x00007FFB6CCE0000-memory.dmp

memory/7284-6910-0x00007FFB6CCD0000-0x00007FFB6CCE0000-memory.dmp

memory/7284-6906-0x00007FFB6EEC0000-0x00007FFB6EEE0000-memory.dmp

memory/7284-6905-0x00007FFB6EEC0000-0x00007FFB6EEE0000-memory.dmp

memory/7284-6904-0x00007FFB6EEC0000-0x00007FFB6EEE0000-memory.dmp

memory/7284-6903-0x00007FFB6EEA0000-0x00007FFB6EEB0000-memory.dmp

memory/7284-6902-0x00007FFB6EEA0000-0x00007FFB6EEB0000-memory.dmp

memory/7284-6901-0x00007FFB6EE10000-0x00007FFB6EE20000-memory.dmp

memory/7284-6900-0x00007FFB6EE10000-0x00007FFB6EE20000-memory.dmp

memory/7284-6895-0x00007FFB6F510000-0x00007FFB6F540000-memory.dmp

memory/7284-6894-0x00007FFB6F510000-0x00007FFB6F540000-memory.dmp

memory/7284-6893-0x00007FFB6F4C0000-0x00007FFB6F4D0000-memory.dmp

memory/7284-6892-0x00007FFB6F4C0000-0x00007FFB6F4D0000-memory.dmp

memory/7284-6891-0x00007FFB6F3A0000-0x00007FFB6F3B0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6f18414710977bc0a04573f40c59b0c7
SHA1 04bf2f5e04066d761ad7101dc4c599d3e4dbb8f0
SHA256 867584214015f67e49dd4d00b82f8eebe7a228ab88877dc3606cd2c46dea2836
SHA512 ce78a2ac959783ff150ded112e54a1fb9f14319dfd15d23e4b5d8da1e39b2ce50e4e618028836de51342493191eff0dd4133a57da18a8b5d16aceeb6239acdf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8d381940742979f55b00928c4afd113e
SHA1 b2535a05b18fa3af1cb4774d9e4a74558352d4e4
SHA256 a670c88f16875d3569f3d933fe4b7d43d7e589b42a5fbe2c655300b681701c1f
SHA512 856df06596f7c185db0a9678cd95957187cf76325ed3eb98a57341b1c7ae22cdabd13ab87109b635499b7b76fd777388efed938418572e1ba98af9c9630be36f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b832e8563c04e2449995cdae6f7da568
SHA1 c6236f5574ed0fe1422adc5a24233a15f4c05090
SHA256 d4956ae72bd75766a1edb4a5d368beee2bcbabebdfbedbd6329ce900c924e896
SHA512 66005196571616580a7307a1a1ff1681724d3db095fe0fa4e7e80e48e4998d06e14e79d6d4153eb022094f8b404e62c3266353c7095056c0e0d5cb8fb71063af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 005ab93f16627d0ed13102c853ca19aa
SHA1 3d094d2f51e2e85a567da5d5148583e368efe64b
SHA256 4071633e1c4fd82ffadfc2f7211c23d0ec1c26eea35c42f247ac8cd72cda1625
SHA512 2219b9583f877a92a0768c09ba8c95fb64205ed4c5983179b7b9f510f0778be0f362380895510c7d59f7851c57ce040b4757d7ab8ca8d183fbdf401a5f082db1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b5cbb0898cbcdd439eb7adf1bcb1115e
SHA1 c7d94583070f353ab3097d0cfb807b73af4b7f9c
SHA256 85cdb5cba23e2afd37a28858b09d1809126bf453c7da94cad1bae951cace3343
SHA512 ed84522c62ce249e6b97550f3d7b69116c52bd397adddb991f1296c999f177e8f05267b9ebf4919e7b7ea885aa0fff123c6f4f08b53871660d69081a9aa23b4b

C:\Users\Admin\AppData\Roaming\Wave\Network\Network Persistent State

MD5 b63a65914c0bec53b0bb53df1a1128f0
SHA1 218986078e5d9e3a1cd7d2331ee4cdc498f88c76
SHA256 10297565f9ee94e9e3d8f718522ec29bb845edd20ee4013a4acab7015c173e26
SHA512 e0553e8556e28339ef9d7ea118395c33a1143cf02a5238b7cd1197224d7652aa9788d621b28af24d48173ade895fe270802b28dd930cd29c5f07af3c1009b30f

C:\Users\Admin\AppData\Roaming\Wave\Network\Network Persistent State~RFe5e49f7.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 51406143c760905a6cf961ab141067ca
SHA1 e0a69a91463ba96d4bf9c9429200e61bba82dcd4
SHA256 1ac4945f08e9ec388de04f3fbc298a04f5af417848a6d87dd1382b40ebfa8237
SHA512 2cc95c5a45007ce6aff8a2d1a598f2c988dab82f2c3ae04f7346919d00ec6d16445c95361a2d4ff17b3fce768766bcef9715a1491be7754c8d8be916722700d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e651060e1ca3c7582b9078552de438e1
SHA1 55c363d0d3fe85b86885c1b0a23a2c747e66966f
SHA256 714b081b9664ac73eeb4e53f58e342d438f5c16ede7165d9c129275a6581fde8
SHA512 5a1574e7d0690ba1bd1ae9874d5b54b0ed1f767fe3e3853e83069232fcdf9b16b26342a37ed72e648df5ed072af2173781a63d76647a2520aba09e7eb079d50d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 17b4b05ee68f2212bb32f2dd4d11037a
SHA1 d48bdd7d7359f46531059b6424cd60817e0a878d
SHA256 a67067e04915f58e2deb86994bce07db31e8233a96b52d65a839efa4e0b43374
SHA512 76e8907fad12bbcb4c645203951aad46f935abfaff079f6d20972902a4a203a7ee6fcb68b1da59a7ca02c122b4981e36384ce1aacf8063b9011c068f79920c5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ce1052c1dd20c9e648d7ec5a303c0eef
SHA1 be922b666a0ed8dfdb6129a6bb39f82c6479076e
SHA256 2bca3b0a1f1ac8a25c62c07f630b5fb9d75094d86b48f059f66bb595651bdc73
SHA512 856f0a6e9f38a6fb609bc8b8fa21f2ca7e08364851e70bb8fa7a253e229ff0e02b35465bb2b646a238f09672c5d120f21316e26ab1d62507995906444bd3e270

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 98c2dbca964ec4d6615a0bef655d42bf
SHA1 d50b64b157de892e787d5c20ca10a8f172bf8388
SHA256 17fdf5cd689b5a184fd723587950771aeb24c3aafed221fbd267ec2657226968
SHA512 3fd0b28aaa8af7d253673d48328d64214bb09910a5bdfc59622b7187e9ac5075d15a49221fca76c9f2f8c7c7b46d11220fe3a4282798137ce8e1088b2c073508