Malware Analysis Report

2025-06-16 06:42

Sample ID 240221-q1xq9sgg85
Target https://github.com/Endermanch/MalwareDatabase
Tags
wannacry discovery persistence ransomware worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://github.com/Endermanch/MalwareDatabase was found to be: Known bad.

Malicious Activity Summary

wannacry discovery persistence ransomware worm

Wannacry

Deletes shadow copies

Modifies file permissions

Executes dropped EXE

Loads dropped DLL

Drops startup file

Adds Run key to start application

Legitimate hosting services abused for malware hosting/C2

Sets desktop wallpaper using registry

Program crash

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy service COM API

Views/modifies file attributes

Suspicious use of SendNotifyMessage

Modifies registry key

Suspicious use of SetWindowsHookEx

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-02-21 13:44

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-02-21 13:44

Reported

2024-02-21 14:02

Platform

win10v2004-20240221-en

Max time kernel

1049s

Max time network

1046s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Endermanch/MalwareDatabase

Signatures

Wannacry

ransomware worm wannacry

Deletes shadow copies

ransomware

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD5D7B.tmp C:\Users\Admin\Desktop\[email protected] N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD5D92.tmp C:\Users\Admin\Desktop\[email protected] N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\taskdl.exe N/A
N/A N/A C:\Users\Admin\Desktop\taskdl.exe N/A
N/A N/A C:\Users\Admin\Desktop\taskdl.exe N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\icacls.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\qqacpqnwqsp929 = "\"C:\\Users\\Admin\\Desktop\\tasksche.exe\"" C:\Windows\SysWOW64\reg.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3054445511-921769590-4013668107-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" C:\Users\Admin\Desktop\@[email protected] N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3054445511-921769590-4013668107-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" C:\Users\Admin\Desktop\[email protected] N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3054445511-921769590-4013668107-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3054445511-921769590-4013668107-1000\{27075945-9F39-4625-B7FD-EA5266A93354} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry key

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\reg.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
N/A N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\wanakiwi.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A
N/A N/A C:\Users\Admin\Desktop\@[email protected] N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1992 wrote to memory of 5004 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 5004 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4016 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 4088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1992 wrote to memory of 3164 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Volume Shadow Copy service COM API

ransomware

Views/modifies file attributes

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A
N/A N/A C:\Windows\SysWOW64\attrib.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Endermanch/MalwareDatabase

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff99a8046f8,0x7ff99a804708,0x7ff99a804718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4004 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5500 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4488 -ip 4488

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 1564

C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1612 -ip 1612

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1612 -s 1540

C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Downloads\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4496 -ip 4496

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4496 -s 1456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5936 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6284 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3040 /prefetch:8

C:\Users\Admin\Desktop\[email protected]

"C:\Users\Admin\Desktop\[email protected]"

C:\Windows\SysWOW64\attrib.exe

attrib +h .

C:\Windows\SysWOW64\icacls.exe

icacls . /grant Everyone:F /T /C /Q

C:\Users\Admin\Desktop\taskdl.exe

taskdl.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c 229831708523461.bat

C:\Windows\SysWOW64\cscript.exe

cscript.exe //nologo m.vbs

C:\Windows\SysWOW64\attrib.exe

attrib +h +s F:\$RECYCLE

C:\Windows\System32\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\m.vbs"

C:\Users\Admin\Desktop\taskdl.exe

"C:\Users\Admin\Desktop\taskdl.exe"

C:\Users\Admin\Desktop\taskdl.exe

"C:\Users\Admin\Desktop\taskdl.exe"

C:\Users\Admin\Desktop\@[email protected]

@[email protected] co

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c start /b @[email protected] vs

C:\Users\Admin\Desktop\@[email protected]

@[email protected] vs

C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exe

TaskData\Tor\taskhsvc.exe

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "qqacpqnwqsp929" /t REG_SZ /d "\"C:\Users\Admin\Desktop\tasksche.exe\"" /f

C:\Windows\SysWOW64\reg.exe

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "qqacpqnwqsp929" /t REG_SZ /d "\"C:\Users\Admin\Desktop\tasksche.exe\"" /f

C:\Windows\SysWOW64\cmd.exe

cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet

C:\Windows\SysWOW64\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3728 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5868 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1

C:\Users\Admin\Downloads\wanakiwi.exe

"C:\Users\Admin\Downloads\wanakiwi.exe"

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Downloads\wanakiwi.exe

"C:\Users\Admin\Downloads\wanakiwi.exe"

C:\Users\Admin\Downloads\wanakiwi.exe

"C:\Users\Admin\Downloads\wanakiwi.exe"

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,13351315763990308307,10439724835200428883,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6708 /prefetch:1

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

C:\Users\Admin\Desktop\@[email protected]

@[email protected]

Network

Country Destination Domain Proto
US 8.8.8.8:53 github.com udp
DE 140.82.121.4:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 4.121.82.140.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 5.121.82.140.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 182.178.17.96.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
DE 140.82.121.3:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.6:443 api.github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 3.121.82.140.in-addr.arpa udp
US 8.8.8.8:53 6.121.82.140.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 123.10.44.20.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 github.com udp
DE 140.82.121.4:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
DE 140.82.121.3:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.6:443 api.github.com tcp
N/A 127.0.0.1:9050 tcp
FR 5.39.92.199:443 tcp
US 128.31.0.39:9101 tcp
N/A 127.0.0.1:50536 tcp
DE 213.61.66.118:9001 tcp
DE 188.40.128.246:9001 tcp
US 8.8.8.8:53 246.128.40.188.in-addr.arpa udp
DE 195.90.211.87:9001 tcp
US 8.8.8.8:53 87.211.90.195.in-addr.arpa udp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 41.110.16.96.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
GB 92.123.128.141:443 www.bing.com tcp
GB 92.123.128.141:443 www.bing.com tcp
US 8.8.8.8:53 141.128.123.92.in-addr.arpa udp
US 20.231.121.79:80 tcp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.191:443 th.bing.com tcp
GB 92.123.128.161:443 r.bing.com tcp
GB 92.123.128.161:443 r.bing.com tcp
GB 92.123.128.191:443 th.bing.com tcp
US 8.8.8.8:53 191.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 161.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.133:443 login.microsoftonline.com tcp
US 8.8.8.8:53 en.wikipedia.org udp
NL 185.15.59.224:443 en.wikipedia.org tcp
NL 185.15.59.224:443 en.wikipedia.org tcp
US 8.8.8.8:53 upload.wikimedia.org udp
US 8.8.8.8:53 meta.wikimedia.org udp
US 8.8.8.8:53 login.wikimedia.org udp
NL 185.15.59.240:443 upload.wikimedia.org tcp
NL 185.15.59.240:443 upload.wikimedia.org tcp
US 8.8.8.8:53 224.59.15.185.in-addr.arpa udp
US 8.8.8.8:53 240.59.15.185.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
US 8.8.8.8:53 85.177.190.20.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
GB 92.123.128.191:443 th.bing.com tcp
US 8.8.8.8:53 github.com udp
DE 140.82.121.3:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 88.221.134.146:443 aefd.nelreports.net tcp
GB 88.221.134.146:443 aefd.nelreports.net udp
US 8.8.8.8:53 146.134.221.88.in-addr.arpa udp
DE 140.82.121.3:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.153:443 th.bing.com tcp
US 8.8.8.8:53 153.128.123.92.in-addr.arpa udp
GB 88.221.134.146:443 aefd.nelreports.net udp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 github.com udp
DE 140.82.121.4:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 github.com udp
DE 140.82.121.3:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.168:443 r.bing.com tcp
GB 92.123.128.155:443 th.bing.com tcp
GB 92.123.128.155:443 th.bing.com tcp
US 8.8.8.8:53 168.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 155.128.123.92.in-addr.arpa udp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:9050 tcp
US 104.26.2.150:443 thehackernews.com tcp
US 104.26.2.150:443 thehackernews.com tcp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 172.217.169.86:443 i.ytimg.com tcp
US 8.8.8.8:53 blogger.googleusercontent.com udp
GB 216.58.201.97:443 blogger.googleusercontent.com tcp
US 8.8.8.8:53 150.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 86.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.34:443 googleads.g.doubleclick.net tcp
BE 142.251.173.157:443 stats.g.doubleclick.net tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.173.251.142.in-addr.arpa udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 172.217.169.34:443 googleads.g.doubleclick.net udp
GB 172.217.16.230:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 172.217.16.225:443 yt3.ggpht.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
GB 216.58.201.97:443 blogger.googleusercontent.com udp
US 104.26.2.150:443 thehackernews.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.200.14:443 play.google.com tcp
GB 142.250.200.14:443 play.google.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
GB 92.123.128.168:443 r.bing.com tcp
GB 92.123.128.168:443 r.bing.com tcp
GB 92.123.128.155:443 th.bing.com tcp
GB 92.123.128.155:443 th.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.17:443 login.microsoftonline.com tcp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 88.221.135.114:443 aefd.nelreports.net udp
US 8.8.8.8:53 114.135.221.88.in-addr.arpa udp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 github.com udp
DE 140.82.121.4:443 github.com tcp
N/A 127.0.0.1:9050 tcp
N/A 127.0.0.1:9050 tcp
US 8.8.8.8:53 api.github.com udp
DE 140.82.121.5:443 api.github.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 3782686f747f4a85739b170a3898b645
SHA1 81ae1c4fd3d1fddb50b3773e66439367788c219c
SHA256 67ee813be3c6598a8ea02cd5bb5453fc0aa114606e3fc7ad216f205fe46dfc13
SHA512 54eb860107637a611150ff18ac57856257bf650f70dce822de234aee644423080b570632208d38e45e2f0d2bf60ca2684d3c3480f9637ea4ad81f2bcfb9f24d5

\??\pipe\LOCAL\crashpad_1992_BYASSZZXCBCYDZUR

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 58670ac03d80eb4bd1cec7ac5672d2e8
SHA1 276295d2f9e58fb0b8ef03bd9567227fb94e03f7
SHA256 76e1645d9c4f363b34e554822cfe0d53ff1fce5e994acdf1edeff13ae8df30f8
SHA512 99fe23263de36ec0c8b6b3b0205df264250392cc9c0dd8fa28cf954ff39f9541f722f96a84fbc0b4e42cfd042f064525a6be4b220c0180109f8b1d51bbdef8ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 437fd3388b051b6bf33d343646246cbd
SHA1 25c6b705b446654c601412d610ce14bea7b1d5c4
SHA256 808c3692c2cd8a1ca24d91cbee2fb9a243ff0e6323d80b2d3d65373930c465f9
SHA512 f37954df485ebf2385a640d1ff119088b42ad866d4afb1ed009837f3d5cee0c1e80b77f378fe5c010fa0c24dc53f328c3c31b333e750a5478c52300bd5bb0ddd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3aa62f4aa3183ab0a9843efea377596a
SHA1 d853df72a9a142b83379b9a39161be15559b6d53
SHA256 c209c1ab303abb1be9b72bbf0d23fcf114f75b97348199abd0ade2da588ac568
SHA512 54948dd672f8f9879f49f3f4fbe4ad8bcf66b05ccdb1e02afb58957b72d226f0a4500fab68998fead3ca7e454cc7c90de60be1a59b723d7bae1f42729ce0f216

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4a5450894dc94608882f5c57e040827e
SHA1 07ddc3de9378d6559943515d0c02aac8da3f3caf
SHA256 52215d8eed7a81b5e6a424e34032bab3b515943986e5abd3be3b490a5176febd
SHA512 16e15bb079010eb87866a01d399300ca0e357e1c2bf18c5a91f4c06d4f6a0c25e3494d256b3c3d27f663088bcda4bb429169989702dd9b28720542861fd1bfde

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4ca444fe9cb2e7460273ac4fdaeb8aa0
SHA1 beab22e6c2a155c480e1f3edcdcce98aa9a2e10b
SHA256 56c88267d3872c7a755d8b8555883b4676fbfc14f063255b2c42cec9e1b809f4
SHA512 f55b713fa450786b2718c4d7789d80138d67a818ad318d12601cab916b6970da80af80592825876d01b5d696364534757fc97c2a9a7870087df6cfa5856d4d9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c4897aa78d9edac4710b6abd9081210d
SHA1 82fff6d6a6c64af2e1e64a0a56c46cfc2a3470bf
SHA256 1c2dbad9b7fe623f7907fe8875ae1df241de6ea09e8dbb063b885983420fc005
SHA512 207439940f16c3a029f465c4f4b6d290f15deea00c5d46365d2bbe5a27c48371315a7a5e39366638a4d256c843470b6e9acd6fc7c0b85aac10dde6176aba026c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 11076e0fe862bbe16639f5a5c650af46
SHA1 4a9bfb84e61c61875779550b451ee1eeb5044d4a
SHA256 50cd1b20be06a1820919b07370920a7339f570e53b7a6ce2fffef9c7a23c05ef
SHA512 258ab0f5108393c3ed40c664c7337eb460ada9b50f6944e8590b9d243fcf4402685d74ab53774683e1c49a884e97828175797f909efba5f946f486ff54d5b969

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58cf80.TMP

MD5 a1a18cb9b787f9be70e166ef9c692390
SHA1 b5580045b54a21ce52186ceaf7f8f788a308de10
SHA256 ca9e4b61324dc1a1ed97110c9869b6d1c66fcacb6d63445439a76ff8557fb87e
SHA512 bd5cf37ec8aa7dbcbde173522f3791422dfc92462310b698b7575e0de1ec0d7f608cd146d4d8cc661aba7cc752c4b6b8672db5ed6dbfedf52a631bf84403e312

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 650d3924714cf10286c7938e3437b270
SHA1 67ddb43d8dd06ebd384c4ea901c308afd61a23e7
SHA256 d60b0fb211d7ffc3a6df3907d8766948f86bfe7b7b64eed828b32bc7ca8cb120
SHA512 4b2cdb8064a1fd8ff58dff74bd04b1ba28ebb1bb148e9165a3f17ce1c33a04a6c19422c3990503ad8eee04ee7ab2c4ce304f7d3356ce2fb1073952ab3beff650

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6a48e400f903769cf6c6210aa39a5cc5
SHA1 e7e1ca53614982b0ca8e4eb4f1a854bc39ea6b24
SHA256 1652b17bd7d5fb0f0b1ace3799338c5d07331d222a50062df8d58d3eb8534f27
SHA512 b0975b6b52492cbb1f964e15fb84326c05972ccf7431abe552f45702183138cf2b33415b4e355fa46be151c07517591e4ee71fa1819d20b3ce8d235555abd66b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 28acd5bab3982644b46903fa201ecb4a
SHA1 ac10f28681e02306b71edf336c6ec0ff6f643778
SHA256 57edd40218d45e29afa36b4b98af3c0c4a35f91fa8adf84112748858dade5870
SHA512 be56b303000568fb0e359c0c2bf419db9de0b6fb8e9c8d36890615c0ac6fc18da1398bdfbcf20275b8def16e6b2e84ed4067e2f39870724cc3d04bc6b563f765

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c5ef63770c1441e8df07bec27c034b50
SHA1 da1ac2b7e5bd522d4c405f53dbfa76cd73b5fb4b
SHA256 ccf0dfc736b670fa8e223c5c19eb19acfd2ffdfb463a386070743e3c58027789
SHA512 5362c189f826e5a5a255ce2047bb5edd4c33d622f395d52ae98c106923e834fa98ed66f1e85c79d79737866cc73e53f1f7e9db25876d4931b78e1f327f6b5f05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b8d75fc5d2cb2930b9dbdb70b4419bab
SHA1 d5f8c88c740f2ba6c244b01b58088ea74f12449f
SHA256 5a633a3c14e8e33a60ecb85af4c72f8f9ec625a1b66d195bc3132bfaa46ea5eb
SHA512 9872a7284380556aa352d1e4ba3bc80210560ddf580cdc996f00faa5271b0ff3dee10e44afe2c06759d07b93d38f4b9627270c4a2a925904b52a3ecea271c8bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ce47a4e199d1f65ef1e55ecbcb09476a
SHA1 ef4f2b10d9f7a1e2c4167764c463d82062c6e97e
SHA256 2bb8e61594d92756be63efb4e7532fe7a9a7e3a4678f040d7de479555429d511
SHA512 bf9e3ef0be79244c6c684d6af0d53aa19abf1112a2e6392c60afb2a90c2b5657fcc4a66d52f4381f503b00655876d830654349cc45d269b0c35af5e2cf859648

C:\Users\Admin\Downloads\YouAreAnIdiot.zip

MD5 a7a51358ab9cdf1773b76bc2e25812d9
SHA1 9f3befe37f5fbe58bbb9476a811869c5410ee919
SHA256 817ae49d7329ea507f0a01bb8009b9698bbd2fbe5055c942536f73f4d1d2b612
SHA512 3adc88eec7f646e50be24d2322b146438350aad358b3939d6ec0cd700fa3e3c07f2b75c5cd5e0018721af8e2391b0f32138ab66369869aaaa055d9188b4aa38d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dc7be0c4fd4bc234d7e7adf1e38fbfad
SHA1 b14e41602abc7c8d22b2afd4bfcb009f0a27694b
SHA256 96bf3702b3509e4d1b2e3b832a65b63374bdcafe0afeafa7fc72f141170450de
SHA512 cdb5a7f22f6216d3aeb16b0c73a84062d0b0b985850a77360d2bb81b24f7a389ad47e4cc7576cb865600c7d93c1bde974cf478cd4fdbdb831923c4743d5973b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9c8f952a52b8d56cb0fe9d426898e664
SHA1 8085be6cbf43244c36b5f3136a0852abb2d76e52
SHA256 99d477a477baaccdcf0cc56f2e506db3afa3ae2356ecd6434adca13a7673d117
SHA512 0c48c901a6ef821c8aecc38e6a9476bf9c062b534a9aca57afffac5fdfd73453b169143a26048174154fa7c0547f0f7d8ae71525f50b3ff8cbff5a9edc6a87d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 886dcbc824a9b46b5c7e88732499d08a
SHA1 a5628c58f63069abcde12e0233ae2de4a3d221bb
SHA256 97a3138c646adbc87373d6dd8410e589db83c1139e68e6de9abe7b6e1031f2b0
SHA512 37859563afbc850eff2ff7fa15323e9f9626eb13e6bdac0b9b89f6e3b77cf42245a5ab8ae039612c16c0d7dd4f3fcf936f5b69c6ddaa24a13c015aadcbbfc72d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3b3d1be079d7759e12082832086a15b5
SHA1 cc62c11eee0a142600acf7efc6f63287ef8d0811
SHA256 66e1795c0ab5210ac7273c9a6694e237d541022b3c3cea5ebe96e2ef6c8f4b68
SHA512 26b117ddc459ea339189a23cf98e52b0a55a9db3984740a26cb4d85794b80b202c9efa33fcca829c774fddc71186a360fa1649cde30202d1826bd25f82535199

memory/4488-457-0x0000000000B00000-0x0000000000B72000-memory.dmp

memory/4488-458-0x0000000074F30000-0x00000000756E0000-memory.dmp

memory/4488-459-0x00000000054F0000-0x000000000558C000-memory.dmp

memory/4488-460-0x0000000005B60000-0x0000000006104000-memory.dmp

memory/4488-461-0x0000000005650000-0x00000000056E2000-memory.dmp

memory/4488-462-0x0000000005800000-0x0000000005810000-memory.dmp

memory/4488-463-0x0000000005610000-0x000000000561A000-memory.dmp

memory/4488-464-0x0000000005870000-0x00000000058C6000-memory.dmp

memory/4488-465-0x0000000005640000-0x000000000564A000-memory.dmp

memory/4488-466-0x0000000005800000-0x0000000005810000-memory.dmp

memory/4488-467-0x0000000074F30000-0x00000000756E0000-memory.dmp

memory/1612-469-0x0000000074FD0000-0x0000000075780000-memory.dmp

memory/1612-470-0x00000000051D0000-0x00000000051E0000-memory.dmp

memory/1612-471-0x00000000051D0000-0x00000000051E0000-memory.dmp

memory/1612-472-0x0000000074FD0000-0x0000000075780000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 be85a012866f82533b134a3e7c03581c
SHA1 8f361377763dc0f643a3c2746149ca5850c5d8c0
SHA256 7c0534066657219aeecf9763515dbb8eeb5b0cc4509d25ed75d5347476f443a0
SHA512 38aa3dc3c36a5319162d52fb0bdb7588dfa9fada5247c49ee53d870b7d928ea5be1387e176e8caf3dd6cad9b6975d432eae587c0103f8dffc56f17ef887ae621

memory/4496-482-0x0000000074FD0000-0x0000000075780000-memory.dmp

memory/4496-483-0x00000000053B0000-0x00000000053C0000-memory.dmp

memory/4496-484-0x00000000053B0000-0x00000000053C0000-memory.dmp

memory/4496-485-0x0000000074FD0000-0x0000000075780000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ac70d432632bc4e40a09afc7f1077ab5
SHA1 0c9b2a9e814e000e17b6e8be57e7070502bc8175
SHA256 5575a0d8ddf7deb23c76bdedc9bf110b77eb609d43d0c99540d74012f400a19a
SHA512 b4d20b6c1c1e186997e9e47b16213a17cc0ab6271cf753c1e9ff3ff3d0ad1aa92d1f5365e051d93a291478cfed8a461875b47afea8082349aa5542a62c5dada7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 38072fa8e9cea4ec05f02332d81cf525
SHA1 7e90fec6093c38b14ca1765bbcb13da2b7eb7eef
SHA256 8a3f02d76e4ab78d58d6c48b104c63848d1a2c1ad080e6e51d20f3d887b3b291
SHA512 7a6d5ef167e849772c9d6463ba36b11cf9758a81fb2afe6dc58e3b46ca3885dd9432f290119fa62451f55a726c7f91926f7ce9eea0bad2be18ec9d1b141d2ba4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c0dc8c48171e5b4a8960b38e1d4bab9a
SHA1 f466877737c9260a60e9994cb1736a25c7c16b72
SHA256 631bc0e534fac6f3ad5edbd52f087b3e46367d3faba74a3c1ef3f4fdcc3c54fd
SHA512 ad1d575c72c9ec043bfe4b53524ce1857e14ec4533b9a8cd8271803ee7ddde6107b91b9283f9796af113c956f65c3fc307e923b4f136eb7d642a89b3f10e2c79

C:\Users\Admin\Downloads\WannaCrypt0r.zip

MD5 e58fdd8b0ce47bcb8ffd89f4499d186d
SHA1 b7e2334ac6e1ad75e3744661bb590a2d1da98b03
SHA256 283f40e9d550833bec101a24fd6fd6fbd9937ed32a51392e818ffff662a1d30a
SHA512 95b6567b373efa6aec6a9bfd7af70ded86f8c72d3e8ba75f756024817815b830f54d18143b0be6de335dd0ca0afe722f88a4684663be5a84946bd30343d43a8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c093178f0fbd3a0b2dcc649f5334a109
SHA1 1929bf54de3c7562358a9e484bc18ac179833818
SHA256 d2125e7aee2bb114b522b694a935c1293eeaf0c541df2819605d09204f5bcb1a
SHA512 d557de171c8a10fac942b2b2eab7d35d8b2bf8167101a501202a196c53ca0a381ef86695fba2c40682be0cfcfc368d5a7773891243c6d8d05549d44510bd6f15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0d47f1f44732f1440d8029c6a91f20f8
SHA1 a87dccd71b7a0a6f4bd73b8d0551569e002db915
SHA256 14eba97e4672026dc857e8cac326a924feb9c047a068d7eb31df638b6fff12bf
SHA512 033b8bf16161905dcaef3df2dff4f3aeeca6cbcbe0172cde24a000571c5062aadf7afa54a000229454d83a8d55c0e234898073b987418bc52409f71383c44b5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8bbc76b4e590c04b3712f5209125adbc
SHA1 c8cbe9d4d9f813a8c34dbe523ba5d4554ce9f491
SHA256 97a88293f614f23f2460f7b51da630575858cddff3a3b7f6abe92aba274796a4
SHA512 cb010787ad7d1013e8f176cdcd723935e587288cae76f6348ee500040606da2e3d82aa861f6abf94fdeb26467847eecb63be4ada108629af8654b15481973174

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9cd4c43865788488dbf7ff3fe830165a
SHA1 1358e34f1f37915f04fbe9d91b2bbcce9ab3cb11
SHA256 849ffe1e6ad70302ce2ceb80b522d68ed0b11a166bbc90977ef7891629b2238d
SHA512 08539d3209eb15c74433e0044de934659e2bc43da0f0582d022ae8d54caa74f4ca04765f66840baa6cd42bc286e3b036cc3a115a625f08cc8875d8b81ced7336

C:\Users\Admin\Desktop\msg\m_finnish.wnry

MD5 35c2f97eea8819b1caebd23fee732d8f
SHA1 e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
SHA512 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf

memory/3088-641-0x0000000010000000-0x0000000010010000-memory.dmp

C:\Users\Admin\Desktop\b.wnry

MD5 c17170262312f3be7027bc2ca825bf0c
SHA1 f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
SHA512 c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c

C:\Users\Admin\Desktop\u.wnry

MD5 7bf2b57f2a205768755c07f238fb32cc
SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
SHA512 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9

C:\Users\Admin\Desktop\taskse.exe

MD5 8495400f199ac77853c53b5a3f278f3e
SHA1 be5d6279874da315e3080b06083757aad9b32c23
SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
SHA512 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4

C:\Users\Admin\Desktop\taskdl.exe

MD5 4fef5e34143e646dbf9907c4374276f5
SHA1 47a9ad4125b6bd7c55e4e7da251e23f089407b8f
SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
SHA512 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5

C:\Users\Admin\Desktop\t.wnry

MD5 5dcaac857e695a65f5c3ef1441a73a8f
SHA1 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
SHA512 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2

C:\Users\Admin\Desktop\s.wnry

MD5 ad4c9de7c8c40813f200ba1c2fa33083
SHA1 d1af27518d455d432b62d73c6a1497d032f6120e
SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
SHA512 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617

C:\Users\Admin\Desktop\r.wnry

MD5 3e0020fc529b1c2a061016dd2469ba96
SHA1 c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade
SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
SHA512 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf

C:\Users\Admin\Desktop\msg\m_vietnamese.wnry

MD5 8419be28a0dcec3f55823620922b00fa
SHA1 2e4791f9cdfca8abf345d606f313d22b36c46b92
SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
SHA512 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386

C:\Users\Admin\Desktop\msg\m_turkish.wnry

MD5 531ba6b1a5460fc9446946f91cc8c94b
SHA1 cc56978681bd546fd82d87926b5d9905c92a5803
SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
SHA512 ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9

C:\Users\Admin\Desktop\msg\m_swedish.wnry

MD5 c7a19984eb9f37198652eaf2fd1ee25c
SHA1 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae
SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
SHA512 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020

C:\Users\Admin\Desktop\msg\m_spanish.wnry

MD5 8d61648d34cba8ae9d1e2a219019add1
SHA1 2091e42fc17a0cc2f235650f7aad87abf8ba22c2
SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
SHA512 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079

C:\Users\Admin\Desktop\msg\m_slovak.wnry

MD5 c911aba4ab1da6c28cf86338ab2ab6cc
SHA1 fee0fd58b8efe76077620d8abc7500dbfef7c5b0
SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
SHA512 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a

C:\Users\Admin\Desktop\msg\m_russian.wnry

MD5 452615db2336d60af7e2057481e4cab5
SHA1 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6
SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
SHA512 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f

C:\Users\Admin\Desktop\msg\m_romanian.wnry

MD5 313e0ececd24f4fa1504118a11bc7986
SHA1 e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d
SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
SHA512 c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730

C:\Users\Admin\Desktop\msg\m_portuguese.wnry

MD5 fa948f7d8dfb21ceddd6794f2d56b44f
SHA1 ca915fbe020caa88dd776d89632d7866f660fc7a
SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
SHA512 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a

C:\Users\Admin\Desktop\msg\m_polish.wnry

MD5 e79d7f2833a9c2e2553c7fe04a1b63f4
SHA1 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff
SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
SHA512 e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de

C:\Users\Admin\Desktop\msg\m_norwegian.wnry

MD5 ff70cc7c00951084175d12128ce02399
SHA1 75ad3b1ad4fb14813882d88e952208c648f1fd18
SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
SHA512 f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19

C:\Users\Admin\Desktop\msg\m_latvian.wnry

MD5 c33afb4ecc04ee1bcc6975bea49abe40
SHA1 fbea4f170507cde02b839527ef50b7ec74b4821f
SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
SHA512 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44

C:\Users\Admin\Desktop\msg\m_korean.wnry

MD5 6735cb43fe44832b061eeb3f5956b099
SHA1 d636daf64d524f81367ea92fdafa3726c909bee1
SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
SHA512 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e

C:\Users\Admin\Desktop\msg\m_japanese.wnry

MD5 b77e1221f7ecd0b5d696cb66cda1609e
SHA1 51eb7a254a33d05edf188ded653005dc82de8a46
SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
SHA512 f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc

C:\Users\Admin\Desktop\msg\m_italian.wnry

MD5 30a200f78498990095b36f574b6e8690
SHA1 c4b1b3c087bd12b063e98bca464cd05f3f7b7882
SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
SHA512 c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511

C:\Users\Admin\Desktop\msg\m_indonesian.wnry

MD5 3788f91c694dfc48e12417ce93356b0f
SHA1 eb3b87f7f654b604daf3484da9e02ca6c4ea98b7
SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
SHA512 b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd

C:\Users\Admin\Desktop\msg\m_greek.wnry

MD5 fb4e8718fea95bb7479727fde80cb424
SHA1 1088c7653cba385fe994e9ae34a6595898f20aeb
SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
SHA512 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb

C:\Users\Admin\Desktop\msg\m_german.wnry

MD5 3d59bbb5553fe03a89f817819540f469
SHA1 26781d4b06ff704800b463d0f1fca3afd923a9fe
SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
SHA512 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac

C:\Users\Admin\Desktop\msg\m_french.wnry

MD5 4e57113a6bf6b88fdd32782a4a381274
SHA1 0fccbc91f0f94453d91670c6794f71348711061d
SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
SHA512 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9

C:\Users\Admin\Desktop\msg\m_filipino.wnry

MD5 08b9e69b57e4c9b966664f8e1c27ab09
SHA1 2da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
SHA512 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4

C:\Users\Admin\Desktop\msg\m_english.wnry

MD5 fe68c2dc0d2419b38f44d83f2fcf232e
SHA1 6c6e49949957215aa2f3dfb72207d249adf36283
SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
SHA512 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810

C:\Users\Admin\Desktop\msg\m_dutch.wnry

MD5 7a8d499407c6a647c03c4471a67eaad7
SHA1 d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b
SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
SHA512 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12

C:\Users\Admin\Desktop\msg\m_danish.wnry

MD5 2c5a3b81d5c4715b7bea01033367fcb5
SHA1 b548b45da8463e17199daafd34c23591f94e82cd
SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
SHA512 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3

C:\Users\Admin\Desktop\msg\m_czech.wnry

MD5 537efeecdfa94cc421e58fd82a58ba9e
SHA1 3609456e16bc16ba447979f3aa69221290ec17d0
SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
SHA512 e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b

C:\Users\Admin\Desktop\msg\m_croatian.wnry

MD5 17194003fa70ce477326ce2f6deeb270
SHA1 e325988f68d327743926ea317abb9882f347fa73
SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
SHA512 dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c

C:\Users\Admin\Desktop\msg\m_chinese (traditional).wnry

MD5 2efc3690d67cd073a9406a25005f7cea
SHA1 52c07f98870eabace6ec370b7eb562751e8067e9
SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
SHA512 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c

C:\Users\Admin\Desktop\msg\m_chinese (simplified).wnry

MD5 0252d45ca21c8e43c9742285c48e91ad
SHA1 5c14551d2736eef3a1c1970cc492206e531703c1
SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
SHA512 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755

C:\Users\Admin\Desktop\msg\m_bulgarian.wnry

MD5 95673b0f968c0f55b32204361940d184
SHA1 81e427d15a1a826b93e91c3d2fa65221c8ca9cff
SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
SHA512 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92

C:\Users\Admin\Desktop\c.wnry

MD5 93f33b83f1f263e2419006d6026e7bc1
SHA1 1a4b36c56430a56af2e0ecabd754bf00067ce488
SHA256 ef0ed0b717d1b956eb6c42ba1f4fd2283cf7c8416bed0afd1e8805ee0502f2b4
SHA512 45bdd1a9a3118ee4d3469ee65a7a8fdb0f9315ca417821db058028ffb0ed145209f975232a9e64aba1c02b9664c854232221eb041d09231c330ae510f638afac

C:\Users\Admin\Desktop\229831708523461.bat

MD5 b741d0951bc2d29318d75208913ea377
SHA1 a13de54ccfbd4ea29d9f78b86615b028bd50d0a5
SHA256 595dc1b7a6f1d7933c2d142d773e445dbc7b1a2089243b51193bc7f730b1c8df
SHA512 bf7b44ba7f0cfe093b24f26b288b715c0f0910fa7dc5f318edfc5c4fdc8c9b8a3b6ced5b61672ecfa9820ffd054b5bc2650ae0812804d2b3fc901aa06dd3ca14

C:\Users\Admin\Desktop\m.vbs

MD5 94bdc24abf89cb36e00816911e6ae19e
SHA1 87335eea1d8eb1d70e715cc88daf248bb1f83021
SHA256 e9757f002a632de82ff9bd1283f90bcff2eec4ce6926f8b7e37879ff0c518660
SHA512 3bec73a3c6360499bb280aec0562157cda47c8ed11e3b1280c4fb8a457ab48dc1f3aea42d6a0d5c2842d60ca09436da96ef7136c0652d2b5c613fae87799ac0f

C:\Users\Admin\Desktop\@[email protected]

MD5 7e6b6da7c61fcb66f3f30166871def5b
SHA1 00f699cf9bbc0308f6e101283eca15a7c566d4f9
SHA256 4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e
SHA512 e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bbbf45f0669d3a25c2d929cd3912daec
SHA1 ab043c2477d17cbe7dd4f89f9b0d5b8b4465d61d
SHA256 e5b61c9cfc576c88403e12f93cfbc227d2aa66fc627bf97a5d05d3ff25c6451f
SHA512 ff36ebe659fd8b24d37663dfae86855479f72f72ff44d890f02c35035e89dae426dc16ed0e5b0b556a1d9446b582062597e0b63415973c5e91ce44afafb71e0f

C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\@[email protected]

MD5 786dc151162f4d4f49ec08d952ddeb76
SHA1 e07554a28f546b25026f5999d67402e2c7aaa153
SHA256 de61da0b06cfe3c5f4085f8c63680ce5b791d869e12af57c2484091bfc74c503
SHA512 7c01bfbad6d1fd09d591c0f7697b655c86666e1b377db189856b454c0dc34b197e9fc654b6d4a98fd85b4f2c49b261ecb785fffae0967b7590b429924bbaf065

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 1766dc5a99d9c396627d5f51e1c4fb86
SHA1 c7b1d9924a9b94c58a4a1c05cfb5e82dd91638c1
SHA256 d57fe30967ef9556ed42b491e0b749a02fa0849517bb7e872d8c2cb65e1be572
SHA512 e09d84268cb8795c4bd5a2cc4689a94700a583ae982495c2e51ed41c7ad3bb89499845014ab2da63cd9601c353efe23b1c1e90e8fdb224b329ae83060f990a59

C:\Users\Admin\Desktop\TaskData\Tor\tor.exe

MD5 fe7eb54691ad6e6af77f8a9a0b6de26d
SHA1 53912d33bec3375153b7e4e68b78d66dab62671a
SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
SHA512 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f

memory/2024-2098-0x0000000074280000-0x0000000074302000-memory.dmp

memory/2024-2100-0x0000000074280000-0x0000000074302000-memory.dmp

memory/2024-2099-0x0000000073F30000-0x000000007414C000-memory.dmp

memory/2024-2102-0x0000000073F30000-0x000000007414C000-memory.dmp

memory/2024-2104-0x0000000073F00000-0x0000000073F22000-memory.dmp

memory/2024-2103-0x0000000074150000-0x00000000741D2000-memory.dmp

memory/2024-2106-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2114-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2115-0x0000000074280000-0x0000000074302000-memory.dmp

memory/2024-2117-0x00000000741E0000-0x00000000741FC000-memory.dmp

memory/2024-2116-0x0000000074200000-0x0000000074277000-memory.dmp

memory/2024-2118-0x0000000074150000-0x00000000741D2000-memory.dmp

memory/2024-2119-0x0000000073F30000-0x000000007414C000-memory.dmp

memory/2024-2120-0x0000000073F00000-0x0000000073F22000-memory.dmp

memory/2024-2127-0x0000000073F30000-0x000000007414C000-memory.dmp

C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new

MD5 35c13c28f2929c36302b68af050b1ce7
SHA1 8b895c2995fbdff9f1ade938a7400dc10a2b4a8d
SHA256 e841ae5aa33f7ff7d853a519f63a12151bb59a8e5f6304728d84819e7e07e908
SHA512 0a9f28084ca89f9eb0d52dc3d757b1ee03709ab53da26efdc6df85d4fc7ef7c458e0007910054313ee5cc4637f56713915e0b692577ab38f9f8a6b7b8622ca58

memory/2024-2143-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2150-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2152-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2181-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2186-0x0000000073F30000-0x000000007414C000-memory.dmp

memory/2024-2191-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2199-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2208-0x0000000000640000-0x000000000093E000-memory.dmp

memory/2024-2213-0x0000000073F30000-0x000000007414C000-memory.dmp

memory/2024-2216-0x0000000000640000-0x000000000093E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 69f82680f33b1059442b149579e43759
SHA1 d9574e06e5680dd877fe092b133bfa80209bc3ad
SHA256 5ee348d864b8104f73d57a4a6b6e6a0585ec5851fbe20d749f65046ead2cd782
SHA512 35410581e15d7d6ad9292a1dbf861ddbfcf8a05f8698941db403abcd4e92a87876c62d8a7c65979c405c5ca5964b8a869576eccbada0cb4fa2da2ab399307b79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4aed29699bf627b8c190a991828aaa55
SHA1 2a58addbf6efd83162c26a7ee5eb10194fd3f61e
SHA256 0108194fe07703ce2b37201e3cddbbab593399004398512048c507af6d42b8a2
SHA512 e215e6785449396fbcc009038627257253ed3bdb3bed3aa53cccf84186b50ae317f4ed926e905639c7f8563d65f189a4b557e84197e825880b3ae9c1bf18fc21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 605e412d1d779dd9c380001550ff6767
SHA1 7ec51d2e83f6dd94e6b7446097281bf4c4d123c7
SHA256 140863b8ef7d046c42b349ed475e07ab24d7b8a7a7120c8ba1842db0ae0e86dd
SHA512 7e15be534c07ee1a8bd8200c9f5d75c613eb4934380f594d5379db86659ee95d7f03485a67debfeb13fce18314bb204d101997d1c0f70dd616f22526dfb666d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 a127a49f49671771565e01d883a5e4fa
SHA1 09ec098e238b34c09406628c6bee1b81472fc003
SHA256 3f208f049ffaf4a7ed808bf0ff759ce7986c177f476b380d0076fd1f5482fca6
SHA512 61b54222e54e7ab8743a2d6ca3c36768a7b2cf22d5689a3309dee9974b1f804533720ea9de2d3beab44853d565a94f1bc0e60b9382997abcf03945219f98d734

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 74e33b4b54f4d1f3da06ab47c5936a13
SHA1 6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256 535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512 79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 9582b059dd4071de65ac891fce7629f4
SHA1 9552ae05e68f36a0ac74f02b62c48db2c1faa751
SHA256 00b9a184b393ec52f095fea89197f3e7e2f908527f411846d69f47962dc84d0e
SHA512 6c8ad30645e1dda2e72eb7ac04197ce848684c3309dfc793ea1297f2d7ecf78dd9bc01cc40aa295a94ac70b515518928e012e03e4c900fc2fd92973b09d819f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4191856070db65899f53da43e280c58e
SHA1 c3c376b380733a18eb51e6aa47aa546914ca28fa
SHA256 86c104ecdb955d73c4fe8a58b0b05d0a71b065e26d7fe309000c49f0c70fd600
SHA512 d070824159976bcb9381f318c51985aca0218b00b46eadcc2718968cae01c97ac5d1567b76dde5cc60e76371c9bbe426b133e6fa67deb8555f11757cccc196aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 144f290b2fdfd5a94f99e488ca473931
SHA1 ee181d4a425d76d97672b5ba194993d98eeae7a7
SHA256 009af56a3defb60e84ac3f5392de11b171c345a3bd203ea2f28a80b1f7db18d4
SHA512 075ec4cb72aa1d31527dd43babdd97b4a5534462a37df602bf197dcc236c9338c71325ba995a4f09a1e46f914ebf1415d4bdd0516ff2914e4d67c28051718cda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 20205d3da86be5f5aae99b10dc10d267
SHA1 276cfdb7b317e4478005caa11f5ddd874921a19a
SHA256 2b777a626ff9bcea70473e7ede8a27f3c33733fdb62f9c7b920a878f75ec2592
SHA512 c6fab2e3045e5400d6e49d14c98d23d4fec5a15329423bfcc58b030e97c80ff8796f535c48e69a3630238b6a8541133fd8c0fb7539c56e8d4a954a668921bcf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 3cd0f2f60ab620c7be0c2c3dbf2cda97
SHA1 47fad82bfa9a32d578c0c84aed2840c55bd27bfb
SHA256 29a3b99e23b07099e1d2a3c0b4cff458a2eba2519f4654c26cf22d03f149e36b
SHA512 ef6e3bbd7e03be8e514936bcb0b5a59b4cf4e677ad24d6d2dfca8c1ec95f134ae37f2042d8bf9a0e343b68bff98a0fd748503f35d5e9d42cdaa1dc283dec89fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

MD5 cf989be758e8dab43e0a5bc0798c71e0
SHA1 97537516ffd3621ffdd0219ede2a0771a9d1e01d
SHA256 beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615
SHA512 f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f02e29264d1e5a08eac87b678c57ec5
SHA1 d6790f0745f767cfd2c745a1a7179f1cafec5a2a
SHA256 1fda6329f5e528f2c33892cf7ceb1c50f56dd8e72309b9a20a781b7be16445e2
SHA512 007dfb0f1d17da45229e919cb266ffeb351d98ea9ed686499074029012dd970b4aa14ef3bb88b34e78b85cb50d44287e1ec0d5b2b8f4342c47164638a008107d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fdad30326bed351481f5cd6d48752b18
SHA1 90888877794944edf593c2d68397e6a86e545a84
SHA256 a4ae9697de02944e3a2fa6ac0b4dc06f5bc0cbf2404d6f802f40cd2fcff9c63f
SHA512 26dec023b0e3767e46465dfabfa81b6559d921e5af6999b37cae37a8a4ebf2fb19a3071316e99a0ceac47f531397c518b2a32e49d124974b83367293216e800d

C:\Users\Admin\Downloads\wanakiwi.zip

MD5 e4f370b101104c15269a3b888ed98e08
SHA1 ad5b797c7cc788a21403ca0cc959bb548580c84f
SHA256 40da854572ad619f1e48ebc62e7ac42fc46b2f3fbdd0dd9069eb451b79f578f4
SHA512 5fd22a7bc6ae20461aab75d0806309d0ed5f926219437a2a252dd96a4dcae616c0b7faa91a7f12d693c75ef9e36c26f0f876cf3fa82d85d419bfe08b1b8ab6ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 66db8ffcdcbd5a957c2d6962c90b201b
SHA1 b2d72d83ed943e1c580d3882c95bece3eba3e4bb
SHA256 13bbc81301782c9605c2f18372ba1000368659b66c970f8c45066561f9592816
SHA512 5935cbbaff87601bd412b4f92e7aba4ccbe6c86792c203ec5d441e46125eb9157d28df5423025af37cfdf97d03643e1ebd59e4ac7f890791834466bba17669bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ff0843d3832dbee4bf650e0fac5fdf80
SHA1 eaee3409abcf8454e5ef0e9b3adb1934fbd5287c
SHA256 d0a01990e3f1ca60243aace84c176ff07d4f591705cb2816d0bbc51d5d30fea0
SHA512 6134812618d9f9575f7216ba312cb72b2b8e8c48075faf59449fd937ce2b3fd6cae697c721bfa7af719f0219779be9594c09a2fb4b50d59bd55b43ffc4a3bb01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0309a774fcca4fcb6a260a7e4ef85546
SHA1 538707689a3118a3a28bed730244af267dc0e8a7
SHA256 a81c241d23fcafe2f1a988dc50b495e0b24a8839aaf9e343e16cc42ea6dd9cc0
SHA512 a5d8063878877f29c13c280641fe7d974b1cffeb3bb334c2816a21e07a341a3ed95db7fc2667a6f02700a16ef3821b8584618310018aa4b0751453ecd104c23b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5d49d3876fc5d2115a537be1f58df6d7
SHA1 ed15568d0ace03c9160b4d20739debe070266cf6
SHA256 b5c7adaf4cd51b3620e783885cc93e65a95a415874d1c7a8dc411d3dd81147b7
SHA512 3bd37528cd5682c7a2cac70fc70643c8b9fbd407113adb85a47ac6d29576a4a34d1be12ccc58b874121bb5bba9f4bae7ef6fde77b0a134163cf279a47dca34e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4319bca0234501a54ed96725be1139db
SHA1 42b3f5ef1b527e9ab5c19b7235fb26523e063c45
SHA256 9094cbc66be6a33c37274d74b4adbc9b1c85e69766257fa145826a7769a64754
SHA512 235ee4f88e72e1970439e8277e41e3670d68a8d5166c5cdc1ab6169a4da65fd827271756417884a4b297f7ed431fb5fac46e9ba63fc264762441cf35f8988d32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ab7299793f355f8c1107b23d37d18ec
SHA1 634b6023f75d8ff856774c1bdac271571071493e
SHA256 ff252952ef42561138f89f52d197bf92350c56fa1e69e0a9a1be32ff98b8a7ec
SHA512 77491684e580ec3a13c9c170e68e51706674e320028d9dac9ab8d2554d2e42b49efb113d28f2299b70d2241d5d8213777aa7b67c008cbb005cc70eeac91f29c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ac16c7cd7f4cf491bfb03ae3f34c6a8d
SHA1 bbbbf92c7277f2b2a38e4929c9a2bc64f400fa8e
SHA256 842fb8484b739c4a0551b71004ede5c8cc56add3fcdfec5f2c6cb3dfbdd60952
SHA512 3d48cc589da2c0eed593f0eee8cecd968dadaf476cdd5b43d497a2a90ad65fecce3b4f7b81e699347eddd67bec1f52bdffbe0b5e92e91c1201453d9fa8fdf9b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4144836033926524dcfdfd8d7c8f2025
SHA1 617874d679c26dcc9a2004277f0362770678b7b0
SHA256 63d7f89c148003e1f94477153903f28af3b603b71d1365f42b4d0ad89f5d8930
SHA512 8fca20c3b2161080fbedaf51b5f4983eb7d2b297fb52158c302baf5055b24bc880339e92f44cfdf531d8d0022bc313258970f0f2abcb4cfedb35e35bd4c98fb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 62ccdbe82e891feca10412b5815233d0
SHA1 730dccf9b73b92d8aca37f2875b2b5e114e42a8e
SHA256 68a0a2e62ffe7fec5fdf960027d3f411792dd8c89412d9d65e32ebb4ed3112e5
SHA512 f9ab5ac3fb40d755ce294dc30cd7d3dcea0833f7bbe1e55f5d9a9ff63e6c03793d0e67abdf97bbaad8b75a3fdce8d89b648050c5626f86b996526b57af1070d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 8b99397ee855182156f311ec1d6d8141
SHA1 96c641c3d447a05655e5d8396e5b3066744043ed
SHA256 d85f3fe67a544ddc572a731392215a98fa791b668aaff4be7f8d95cdfc495a99
SHA512 0cabaf5fe60d4fd0439c28cde325a13da6a3fd3832c8c8e15b3c0585cc45e092ad6eedc500a5d7e4f93b99b9cdca1cb0df958a150e5d2571d52731dca7e43c92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 36bc463fc048e33722f1e1ae0802ff38
SHA1 a664b3c456421579a3cfdef4958572747a729b5c
SHA256 b148e78da9fcfda92810eab164af3c1ebcadf3f9d5377956a439a14b5192ce7b
SHA512 efac8603eaa0562a9a1eb7d8c08ba836192b98a382051887b0be6bc7ce45a858dab4c3342f7862fe98df16614a53e03edf8961863aa0bc8ef18240a2a7b890eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8bb2ae268535efbe8952c0a2cf3cb926
SHA1 3d1510e648e8666e07a1edb310e05024096bbcb3
SHA256 75c6cfc33e89b9beb35404898ea64bcb4271d8810b8c4ace60833d1a9e419ebc
SHA512 abcc753395de11cc134318009d5abfe480790144c2344687bb78d13893208674788f1182d0b7bb768a64cda7b6c2ca869a931d91a07d452e67838f55de6bc75b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 657ed1b9ac0c74717ea560e6c23eae3e
SHA1 6d20c145f3aff13693c61aaac2efbc93066476ef
SHA256 ff95275ab9f5eadda334244325d601245c05592144758c1015d67554af125570
SHA512 60b6682071ade61ae76eed2fe8fa702963c04261bd179c29eed391184d40dc376136d3346b3809b05c44fb59f31b0e9ab95f1e6b19e735234d1f0613720e532f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 8d1ef1b5e990728dc58e4540990abb3c
SHA1 79528be717f3be27ac2ff928512f21044273de31
SHA256 3bdb20d0034f62ebaa1b4f32de53ea7b5fd1a631923439ab0a24a31bccde86d9
SHA512 cd425e0469fdba5e508d08100c2e533ef095eeacf068f16b508b3467684a784755b1944b55eb054bbd21201ba4ce6247f459cc414029c7b0eb44bdb58c33ff14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 4b4947c20d0989be322a003596b94bdc
SHA1 f24db7a83eb52ecbd99c35c2af513e85a5a06dda
SHA256 96f697d16fbe496e4575cd5f655c0edb07b3f737c2f03de8c9dda54e635b3180
SHA512 2a3443e18051b7c830517143482bf6bffd54725935e37ee58d6464fac52d3ce29c6a85fc842b306feaa49e424ba6086942fc3f0fea8bb28e7495070a38ce2e59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 bcf8a9566c19c82f4bdb43f53a912bab
SHA1 aedbcfb45eed11b7ad362b53ff32bacec9f932ee
SHA256 52c97dd2602b4d9ac70b61c3dd9b0f9869c5c211e2a4b52e94eda5e150349ae7
SHA512 cfec8603b3eecc261735ddb3d9f292f47e5e34761d73c33b8a1fa1efcf8e07b9b5595a28eac3b238842cf1f63a155b0376840f42ab22ad3186390bcfbc62adfb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 8b2813296f6e3577e9ac2eb518ac437e
SHA1 6c8066353b4d463018aa1e4e9bb9bf2e9a7d9a86
SHA256 befb3b0471067ac66b93fcdba75c11d743f70a02bb9f5eef7501fa874686319d
SHA512 a1ed4d23dfbe981bf749c2008ab55a3d76e8f41801a09475e7e0109600f288aa20036273940e8ba70a172dec57eec56fe7c567cb941ba71edae080f2fdcc1e0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 382e5a265d13d3280b41f54973289ab3
SHA1 e36e2cadb13183bc03fa209b8bceae3384dbb0c4
SHA256 827c580a692dc92d7ae2d2d6acb946352dc61cf7676e27b796548cf793161463
SHA512 1b7b50d939d9db580800fe556149107fb4e062d28fdad79b8481af8e713731a1671e6a8a52f966bab82fc13b7a41fdaa225e133e66aef616048b39beccdad251

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 d07f175cbd2c52604838bcbd34bf7386
SHA1 1e32ac6ef3b42b664a681867b8243ac04a1d07fa
SHA256 0e733fc8c782ac8a05936c392d72e3079f49dc348019a84103184efd011d8f45
SHA512 8ccd985d4100190e76e1443a1bb4a5b1783d1318200ad51a0ed7ef675ba0e8a4e7f6ba16268240ab86d6e38b9d8b26136ab297672889f6a415fbf11132819973

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 063fe934b18300c766e7279114db4b67
SHA1 d7e71855cf6e8d1e7fbaa763223857f50cd1d4bd
SHA256 8745914e0214bcd9d2e6a841f0679a81084ef3fc3d99125876bee26653f4253e
SHA512 9d0dfc21306b3a56c2ecdf1265392271969e3765e161e117c8765125b34793e24458217cf6514b364f351f47e65baaaf5856be0d13406a789f844d6ba8c7075f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 668b709219a3bc003ac35038ad55daa8
SHA1 65d4bd0e7a79f6717d00656d3774c9cddce8c536
SHA256 075482464634359e34d7d49320b08882ce1f8c742904910caddcae0db6d86989
SHA512 6bf60d57cd41c555f4f2a205994690882d44da5617de36a144219983f71f6e06112d15816b138cbd7bd37b29b9802f009c3503204c7e2b8b0354b3b3ac16b941

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 9ddefb34cdc7433e68d58cfc54afd013
SHA1 2a74522efe35efe4956828eb2172a4f9a0e7499e
SHA256 a198b75825125d7755c874913ec2305b557810db78fc3ffabc6ed85b2fedf079
SHA512 7b27c3e6dd1653e1d526f1c070906f119816cfab7dcddd6f12e5367a652713a08c20c9e709f121893d7c2044eb60aa87fbf3dbb1533638e576819473ca469700

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 2f3c7b5f9221520efbdb40dc21658819
SHA1 df12f010d51fe1214d9aca86b0b95fa5832af5fd
SHA256 3ba36c441b5843537507d844eca311044121e3bb7a5a60492a71828c183b9e99
SHA512 d9ed3dccd44e05a7fde2b48c8428057345022a3bcea32b5bdd42b1595e7d6d55f2018a2d444e82380b887726377ab68fa119027c24ac1dadc50d7918cc123d7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 bc4836b104a72b46dcfc30b7164850f8
SHA1 390981a02ebaac911f5119d0fbca40838387b005
SHA256 0e0b0894faf2fc17d516cb2de5955e1f3ae4d5a8f149a5ab43c4e4c367a85929
SHA512 e96421dd2903edea7745971364f8913c2d6754138f516e97c758556a2c6a276ba198cdfa86eb26fe24a39259faff073d47ef995a82667fa7dee7b84f1c76c2b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 af0feff14f26e0b7d060318be3173e4d
SHA1 caaa1a5450babdabf5b9b6e95bd53498ff268eec
SHA256 739bd1bd8a4ae601c1d3e7e744aedacba51e2cfbd21f8c84d4126912e688a2f7
SHA512 41545fef9a9a001792abeb572d4c0beca2813c435156fa8685dd7f880258930a28e0c26cc404682dc68dc0e5ee83555fafd58772f733020a946d8102c4ac4609

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cee0c6e4-7411-4034-938f-a15789067665.tmp

MD5 1bbeb98504d53f3976b0025a2d64a457
SHA1 586215bb791ffa17882b6bbf75230239a656c7a6
SHA256 11d95b6756ed985ddd730de0729ef33321b19a07c3d30a1d3b6b4e176434e799
SHA512 cf4328959c81db3b28c5c5fbcc5a66fb61552f513bf0b61cd557fabae1a5658d9ae566710ad7c75a357ab22cb809570ac3aac79f490b476b375144353defb030

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d980607b2cc436de50f8776960369998
SHA1 30ed6b6a6697f659e11d760f686f0b46e3216d25
SHA256 97986134b0fcef5dde7dee3e18b4fb30235b15d7bb94a1595ae4c1636a157951
SHA512 83c094147fe6e48b2cff88648c31010f0fa34f4f7dc9832b4adc13b6e53d6b106dd8ffa04583c680966c5a15059cd66e90057b3bfd3e2f993eeb35c906fced0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3199ec95c61f25a3d3b925d0128da65c
SHA1 b9c2e7d73237e7a0b3207ab2d60a42da3c347174
SHA256 2a5cc7d89237189ac04a7807c555103e45175e1384ffe912e4e2997d14305728
SHA512 c6c43b26c47ae1b0527d77018a6313134b852e1f16093935e3f29188d161c0a358fbf27dc944a42d9c4c0ddc9f1e5eba84af7fd102a99d166da4f55a519948fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b020cf8a33387da518125314c965765a
SHA1 11f2daac2e0dcc2394ebe6591dcdcebe5f47ef74
SHA256 274f4df11d91dd1220462e99d940b5f7f665beded42fa6d3578831fc7252c3ec
SHA512 abfc1874bc032ad53595537fdb01bbb71e11084c3a10d8a3ae112b67e5f9b5302a12e1542537b6758e0b99c6192543765443e96f2c8d0900a31388d1c88d8f6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 0fae411f4aba1fe3e40df0ea8ab3c892
SHA1 f50507efb1cdf578f18fa2b1a0f77e5a69fe22d2
SHA256 48c604dd551accf3e9ab21c132c82c852766eb15b480a0fd4c57fae5913744a5
SHA512 9871aee2f695e2b44a61dc38222618484a4b59ed3484b90bfea1f84527978bec9369c073129f79a289aa08ab6c73ad50d48edd0945291ba97ebd9635a0ec51b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7f0b6d202960abb2a1ed6b3bd4dbc27
SHA1 4c9328ae6b03023463da8da59ddf4ec53ba1c6ff
SHA256 3511fd4f514429169c6f7dc7189b2b6e985db2491266ebf4073606275ebfaed1
SHA512 6e12d7f7f0457a2ed30fa29a8aa93561cc380aa3552a66d4c46114cf3237426d02feecd3ee35e0d26b630429d8172ece61def363b54962d4d7042d99dd3a14b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aaeb9d091ab6187c_0

MD5 a0a93cec9e5042e631b9eeff391306f0
SHA1 b7f36ee002dfedab2c3ddc7fe6d665b0be148f15
SHA256 537695fdde278189e11577fdb7ed40481557260e8a5a60ef353f8467cb132196
SHA512 b89db4507a3ff9fcf0117fb7cfef7f4f3e1023e05b992b16bd39be49a13883a7430a47397327c49126b600029dc349ebffe5540d4f447bda328e4d002d5c0521

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 544641c851131ad021800d9898b7e383
SHA1 881fbfea59aff7275c3621cb32f350cd693ca3d4
SHA256 5bb55901bfdb9ad79c1dc2830b87725fd146420f20cdad0bd02f041161351f12
SHA512 c45df156d632fd26837654f6345806c785613bca04e2f24773bbc676546f683043d57198019990705ab1e589c7f8418c2ec96f040edf94f289929075b8afb8fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b4c0f674f08ebd72_0

MD5 b08986573b98ed38159ee217566d9a6d
SHA1 4f46b7e691cb1e3309bba989d42c2948eb0e1fd3
SHA256 143b1aa0e2b60526a9febda376261d0a4b3a2ff6587af0dbcf2ac3039e365120
SHA512 f8c09d71c2992e74d717885cc8035033c8f1e482f4b950eaa32f4d048563ece4804a3d75d7bcc7b8e5c6cfac34a1e3c05b6f436b0e0e563b832ce04ba6855f3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd13ab57-17a8-4771-bc4c-79873e7d05bb.tmp

MD5 0c2661da4d15ea239cbe6b9c74e577d8
SHA1 31ead24c96f95543ea20337ad49354ef0ea6f579
SHA256 a42546740d37f4262cc824a97d7ad339cfa8315a545fc12d810f068c00c4baf7
SHA512 7e2bdafc79c4baa5d89cf8808415a9f8ceeb8ddc160d8d88b93b2839608eb6eef4921023c37af71fee324119b3a9bd0668a3908f24652c6f372e5bb25d1efa6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\index.txt

MD5 884b32bfc7fd93479f45e2ff35b476b2
SHA1 8f5812b752a4f16a5d93f6a7908d95aecdde10d6
SHA256 c5e6e4e2f471bb1cd712758be5ea18f305c62780eb90d2883e9bf2034be38994
SHA512 6f2cd8c58d543d2e1fa1f14bd20546e64d9563b98e229f65364f092eeaa98e8614590cbc0d25e08fd2861516411226a68216769a408e0aceaf887b747bd54bcb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\65c461f5f3fe4f88_0

MD5 39e3edd15ed445b1414a62b64fe31951
SHA1 768fa824d01af45bf030a600e88e2e367dd7d547
SHA256 ed80d5b98dc21a37edd23a7c11df408eacafdbadf895923a5b5d08f2fad8e338
SHA512 31236d5c205be6a139b6672682fa7232d9dcf4f064db81fd1cbef1e1e8be83295ee9350db83f36a652068bbd65e27361a6295d4fbff46395320c8144860d62f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\438191a639b807cd_0

MD5 8b068114ea3d60f0c768c0072368c866
SHA1 32efe0a0ef2582d5346790aaf56e498995f0c36e
SHA256 784c697a891537be084e15c44d620e372f6768406ceef7b30be1bea67174a0bd
SHA512 8f6eb43eac5ad1d8ac71b48aeab3f6863474d93ea6d690d37e25a2844e8f5ea2a43fea9ffbedc0bfef4303484f735850c4a8b469f1f06bbbaf4ff736967f220d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\ef96476f7b5abb33_0

MD5 90e755a6bf3f5d7b2644610820c2e09e
SHA1 22a6a9545acc3550d027f661407bb852e1c8c7d8
SHA256 8237e38c9e0d71210c34e25e350340f4f4fe923befff02349b7254a88c9d8d0b
SHA512 8ca118975c3e7daa050804aac869d23aee1e9dda8b53c14114c7b7b053e9c646a96213eb1d5399bc654f01f559ed063220f8431bbe223bf688c09e76632d37cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\c1d7231c79e912a3_0

MD5 c87e7f92f4666d88007c70dc342075db
SHA1 eedd1da99fea0578607ef9eb8868d81f340cda9b
SHA256 e5a50144c3033f7e3b39f9bf7f5808b0c034b01c83dea6705183c5a0108eb696
SHA512 36274ca72f217a24b32c79c54528d45155375552be3f2dfad79e0baeac2a3871bc67d25735c623b4aeb51e634005a760a570ad512e70491533442b3082662aad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\88bfcb5d4382ad3c_0

MD5 bcdbf26f34352390bec5f42b3a0512db
SHA1 5de7d8346c3e3e16739230f3ece01a76d6d02686
SHA256 60bd35a8d086815a8a4211c42b9017cacee9563291fb9e39847165f20100baeb
SHA512 03b903dac56a68b34cc0ce3740d4e7b84c1d5a9b1b943dcb52306f87096097a1db80555305beb19d8321a9afa23ec93a925ccf35e812e6f231008f7273b94981

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\be320d0544ceb201_0

MD5 f0da9e26690ff51e0a13a7a06d98a4d9
SHA1 04b987016731d36b0f16d1dcdb500e5b9f01ad44
SHA256 6f10a3b268be2599f6012e24992928f2e663aeb843799769a04b245550a3150e
SHA512 7030995acca2056409d0c8cae9555644b16f59d800c20680fbfdb0aed57d0dd2a838f0b09e4b7be4fe71079864a990c5fb02c39a121da0749223f74d07abdc8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\65bffce677c810f9_0

MD5 d59bb5e1a515ad93f62e67fda886ed60
SHA1 27f521925ba001228bdc614d67a8c505259d6f75
SHA256 5c36efbd4290c7265853ba6d2ef5fa02f41657c05529a5aa800ae232b8f7c260
SHA512 ca90cd773323732d51db3823dbca1e5109795af29b99dbbb51aa5dbd031f5ee74b13db747f5bb516865748eca4c5d70a62cfc04daa27d47321ba023aa2b0805c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\6eb11423153e28d7_0

MD5 928a8bb0af60686e47a9564a0d69e68f
SHA1 a4d937c7abda8e155aecaf08b3f98235e8a6c4c2
SHA256 a49c0eb02e59f2689dee827ae4e0a78cd6498564f9558d422b7c677183793ce8
SHA512 3801d699a0c44e7b6a83541052317fdc23ffe90a2c91c2db41ab87f1702412edb49b1246504fb16b54c4bdd7cecfe7a6fb09471f5e32d8c16074a023f14712bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\b4a0e616acbaa0fe_0

MD5 9f426e921780c184f28caca6737cdd54
SHA1 44577f83f6813fc93538c45a315fd88d3c417ad3
SHA256 10fccc5c3dfbe0adae9b8631672fd332df5f20235c4ca6d119405931f49b54ea
SHA512 c761194aa4d7c4ff4084661c830ac69950cba7f15362872744465c7d3c16fa9147ee2262f216f719ace3ea34230a1106ad259ffaf2b9700dac4a8912e4d30971

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\0e2120d47277f2ae_0

MD5 2fd469a2cb45896d7ebf455fe99a65c0
SHA1 c32a5b2cb09366c533f8cdb884ce29bc7f48738b
SHA256 a11255e2f27516041cfe355fdfa45f5a30147628d7f40f830c1a203741424832
SHA512 d277206e65bd765ee09aa27e94a2fc523400b93b86416d76a2d14b6bc946e364185bf78a85bd66c1907d63f3903fd77cc87b5e530dbbeda42bc5b061e2ef850f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d531a998567372fa7522f7080c5d16ae
SHA1 5b414434342f99bf088e089a99195bc8973996f4
SHA256 8ec025d09a67de85b09417cf11967e37c335e8f8ad70f9dc2062f84f3a6dea97
SHA512 ec6eb4907ad816f06313c5ce484ccecca9b2645c89fb339faa41387589d1a601c4d7fc15627729037e147d751c837906f462400e4119ca11b1096c2a87db1e7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1fb4feaee15522f38dac1d3302937147
SHA1 0f16edd193ce068b27e62e569801abcd2ff698d6
SHA256 af26bef8f52cfdb97ae2277b8da0e18067101f027708964e3d6387db1ac994a8
SHA512 53e5bd035c00bd0a5cda84ddbe26eb4111a0f1d211e282d16a076bd1c88bd43ef2f9c2c3afdaae1edcb8ce3cd63497bfb8c40027cfa93b8e32cc524afbc30b7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\82da44e78c781b70_0

MD5 f8821252078d1a2c43cb1f7fed5c1ac2
SHA1 aa18d098ca55fb32ce039c5b08baa45bda3a4b4d
SHA256 e47bfa48d9ecdec9c7849a765c5e353974411269cd5024a10de2a4f2c5dfc1c5
SHA512 ce8fd9a9ba03288acfedf44506ce0fb884f573a0b44467ede5b1100caec8d68863cc8dece10eac19ffd86eb3b84dfb65dc4296d7312b73cda9229ccdcebee45c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\ad8774f4505cf740_0

MD5 fb172f906dabc51cd2ae56dddfe26e9f
SHA1 b49a17e159ba217eedc5db51c7de392ec21b07a7
SHA256 3e972ddd8ab1f2dc88bf98b2d5bf28b31a545aca160f7ad2e58572cfaabedbe1
SHA512 21758ee7ac9fdaf2a2fd712f51e4bfccf86b7f41c9b2646be5184e10308ff6b9b0ad608eb2ef43dcec5176b99986895b1270b35f82a7396f571b97a1af49ef59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\a3415a4182d4eb8a_0

MD5 739c89444968f49384458de79defb489
SHA1 892e2ae26b1bd5a67adede7f980e6ce4f1385402
SHA256 c45ad66316f3a2a6135f7a36548b43e96ca1b02740b6ed26a915896a34bf3660
SHA512 d020463f106846249a482eec205c7a074b48e8729b634f6215d6fdb70fbd95c76c51627f696c5d6a82c04ca964c427108c92efcd8f884f1045d6b2eb5d870197

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\5647c5dc4b6658fb_0

MD5 80a825db7e153c62e6be1e698d684ccc
SHA1 e165af041d959e59ca6921c0dc604a8927d8090d
SHA256 4427a78b3c1c398767b87be9d6341d0cf5b4d7076d34a6b82165aca361b0f611
SHA512 9a0b8839edcb22ba05f21a25f4cd5bf3882f65486242e02fa78cf0718d7f265804c0f7df0b5c292843c5c890f44316ccddcdb3e81caa5c4d9400c6670f0c5cc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e73810e7d37e3dc43fc9bd0e0c020553
SHA1 f833b4ecaaebcb876013448fc575a6863065334f
SHA256 1a6e264375b743722446a91caca690a28f0a52a5579905513bf869dd69f104f9
SHA512 90e4128844e86c96190251618d765f7ab48b2ab397ade77577c2e24e3aedc14d3674420c798d9d85619f351599e9cc733767a2ecd69bb59827c31e696781af5f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe635077.TMP

MD5 6ae98efe178840627e1122cc2c566779
SHA1 a1e9de33fb4f6dadc1623d84a55108b41632b8a7
SHA256 d7be901c6e1f64fb740bc528be60b72a5092884b651d72f85020d808854d3f17
SHA512 c0ed14c4355c6f26734d1119dc24684f6249f9c30d81d4d2392105445cb25a1c0e0524335c5ad250c25dd865a4cb413804d78fa04d7d4cf8fdc7c10109191b61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 9d65c9c0699fbabce93fc94947eea9d7
SHA1 ef49e6204f82801de832dc523aa647bd910488fa
SHA256 82fe7a6de1d33d8ec300ad9ff219639df4963228471ebd23bf35ff3f9bfa542a
SHA512 df36560ab154e0891b5a291454ea6f908e719a0a56f68fdfc3181216b80f3cec5c4cc682061725b321d8b03e557dc280abf2ee81a2e72ea3e731a09556fd35ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f8ee5a3701090ac4db220497244f6aee
SHA1 ea7b31abff18d7032057fcf49f3449ffd476ecba
SHA256 45d69cb5afb7d76429049633992af43441693cf1afea3a60995a6a8600e364b9
SHA512 2288c899a934c6dbaefd3e3ecc2bc9c441513f15ecf5d6afdf7526bb04456f65b683c7a1f0cfe62adee10e9918cafe2d0a0f115c6034a85461711d3d02f17bfd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\de98ac3408f42357_0

MD5 ec039cac02d598be63e50014dca5e32d
SHA1 1ce76d2e8f50be4882207ffd9b790ab736e7fbda
SHA256 a645ef32373aa3a8a731c373c5b1697aab94b201a18d8e37b85d6c59297b1390
SHA512 794ac6f3c574df963981090bc80ecf2ac50b4a9c20428a9c71ed887811e03b8c7baea038a6f2dd2262e44f01725a18fe6482a09a7cfa9ec8f9242299236c2716

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 1332d0b6ff8e0382c922c4964af115f8
SHA1 c1879f1da5ee1154ce55a5ca1a490eb09337ba55
SHA256 d408b47a5f6c7e530bcf65bf4e2fbfc5da2d47ccebac0fdae83c1d2849768f23
SHA512 303d18b861167247b5ee709ea07e0948220ce2740e5d085937feae39589f38b1c89b2cfa4d8a0d438d47f16b0d7d16169c99b2eb38a07d66d441fd24dbdf3fb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47e5051cb297755f_0

MD5 068cf845d3eaf25b91476df666c696fd
SHA1 0df9f19f8c790803cc8faf969e50dec2a192908f
SHA256 3528c5ddd9df4f36cefd3a2925a7d0b5e0e3f6c160ce449f727f9693eab516c6
SHA512 ec3fe90125df4e99109e8d83906c36528b3cb1bdc18001d989263fc9c7ce8d51cd1de348d631650e54d59686eb226b509d5b9da25a42d4dffeafc5a4a1728b45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c693273baa0190b_0

MD5 9cf1cc201b43d1d28fbd8f7e434d9c07
SHA1 bb34f4d2c30ed928637de77e3fe0a6cc8f30d050
SHA256 b7adfd8777bba3bdf1c1a1b7975deafba7922a3013646a9cae45d65c19b09799
SHA512 bc4f8819d6d731a135d1e72fe0c66c8d6cd632f65fe5c50f9caa7813927d9d7197e239cce6b9073d6dde419a2b20ea799a465a318191125431b97817f865842d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 e4e6ff476cdfa9c2e5894703e07a01ea
SHA1 565046d4a76345b6b4e1ee5eb237ac1243788559
SHA256 d943460fb630e5d80f74cf06815bc32c724fd8c92d30aff3b633b1ee057a2b0c
SHA512 0dee9d27a33215857d2b3d9ecb9b2559542b590c1627e87662f6e7604482bde538c2ac33ae4fcc1d1cbe96133777ce876d08c3963352d5551aae047dd4dcc9e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

MD5 d60a271708cc864291406462e87c0b19
SHA1 98de7e011bf0114079b476959b711918b60d9ebd
SHA256 df71ff52eca83a72a691644ec27c31e7b93b69a153adca20a69859211f0b1ccf
SHA512 80f9014f9278c916123707ea178666543b25f3f6839886c64f975f348df2957d90ee379464ec567b16ef84c3caf5091e8adc1904ca0c7b4a33e960b2a47c79c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\26535df81b2a57bd_0

MD5 c2d99b088af70b3758da54023f8ab146
SHA1 19a1f110223bba2db8f614c2ab061c25fcf55624
SHA256 7a5e0bbb18ba5f9ae3e5383fa374b5071e28c0d2924be74b119a156cd3c44209
SHA512 a2dd8269d80395fbbec12431d8018330b286a233f13da8a264c1754acd419a6fa99a4ca500074ad7f41551d1a7872966a8114a1265c650f2825fa56f5b85fcc1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af48edbd3578ee3b_0

MD5 0e16275f3a4cd51877d588cbe49c7f95
SHA1 6c98e413c0057dd75399cf04036bfa259f51ff2e
SHA256 b14750cbf492a323d5c48b2b6e620930e12b643aa587f56f095e8db36f61059e
SHA512 8456efa1cfb2aa36a12cfe424c9b908969469a7135b9de66c7be6e7651ca1d5ba27389cdfbf2a287a7a3a3a71c1112a409126e3d3a5ccef102622c33837ecec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

MD5 ac6a8c9d7c1e3f90269b22fb94c02055
SHA1 6cc4f6de1d755de9a5024482af05711321aea1a7
SHA256 0b1bfb9b3016a45b0eca5345a95f5a56ad087c98e708b7450cd7bcebced05dc6
SHA512 9853e1fcce96c8eecc8ba15e791378fef17f5180e9cbc4656108e911e0457885a4fbea5380e6e9bc480675b07c13da1635da84e47dd9c1c8662bb22876cf85d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f056c10eaf255a7e_0

MD5 d44367d1d78d5f2b97654438949fe13c
SHA1 bce28cfe6cf3e54f82935012c15575a94e5fce04
SHA256 4a4880b93a4c9fc9796dae40844347d929563292230c3e65a989bb8cbc9b43ee
SHA512 d26bef81a5e1e7da2b210adffec10bb85f7bd4bfe4b8c59bb0acf9855989322a79178aeab4b96418d9ba223afe0bd31cd66fbfae53978d6bae0e941398fad4a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 e004028ee15c21287c4b3b4940bae6e0
SHA1 5a672482a5f09e4d6b27a1d815c1928205debcf2
SHA256 1cf856e833d32042d9c902e0059c09df21cec83c9747499186c70ac9f89806a3
SHA512 b23af4362d55a725c9a7741ca3b3156802bed6638e324895f58c7b53fdfad0ce49d49543bae025590eab71f732eed952a4d4e2baa3c8ba47c8304ce34e4712da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

MD5 321a36ce465261889598e1da65588c11
SHA1 026ba44095e64a56feacd92619fbfbb699ae8bb5
SHA256 ff34ab1b2d71aef6acd039722a5f793cf31b632d996c118b24b61d76f373678e
SHA512 ebc12dfaf6e78240c6ebbdd5f18de6a4dfc8f270cc74c6dc5745811d3b1ed5a30f201d264267a6705edf03a1470d020eabf710f1c873143b66ea076eb64003ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cca6dff0f171f457_0

MD5 f7dad448fd9cf9df68d77dfd421191e2
SHA1 b66f6c1751c3ce7edd563f3816897730ba002a21
SHA256 3277ccde4f0971bb745d888af7bc84dc2e3dfcfed97b874de7906ea9424ca7fe
SHA512 9edfdafa9943bbcdc46d8b3f0142a18e624d95d48d22069910169fc87dbf7229e0809fb50b3fc1d2974ab2f58429e8984156cbdc89061d6b14a5952c7a49fa9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 f6f3cc7f4aaf80949d405fffe258ee90
SHA1 d1bc4428534720f7d92497fb4a1a48a1297f3558
SHA256 0b9a7e437ecfb1193a75a4ba5d4868d8b9127a4fd73fda046c0b1c4cab825bcb
SHA512 6d4368e4e069a017b7e9bbbd9eff8f55207b609f2ceaa2d33520ba1d404bc4f6dccde4a91db1ef1b859df675b774e487d2dcb9682a20a9e3f3cb3e32c4616677

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 375d6727783bf2e3b639a88bb0d6cf0f
SHA1 a41604a6cc425d4766c2266d6050a8a9f2940c3e
SHA256 a0ee855b033a20f85637e916146b13eb508e3f9ebcb04d831382dc843a6b52bc
SHA512 ebbd75b2cf011c6514d0995c552fa21218dacc5b558f42bd103db1d2c3238e7622d5563d2d3ccd9bdd26cee9a367a0886270ed134412e2bc06eb3341f6edb543

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8781fa41e6538ca4_0

MD5 3d975f1a283f129203999f59ad72e6e9
SHA1 c16874438be30340afef144d27333f7efc1dfb35
SHA256 a1a28d6a23a2ec0b226849118a1af9e7734ee65fa5a8d89c5fe3a1a21d2ba0a7
SHA512 6eacf5fcdc5b1e65b425e38918780bd79368ab318be38183f945a14fa615c394db9fdcf33a37428ac844160dce80023b652a54a8437728b36c2fe221c540e2c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a13367197ebd2e79_0

MD5 c9e456a019a5591b4d91fd16e5a3176d
SHA1 1bc199f94d020051ce25620c418e55d453c45a4e
SHA256 28deed797132215fbede38746050038906c69b7c4a3a0f0bb3a7e89ab8ff1f29
SHA512 a5d1413ff5885b76bccd6031dc78417a17dcf79c8175699df40f320f3ad73bc97094a7fdbb395a181f3c65f5dad513f16a3fb6b6d4de805582f1bb479fd3f237

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 821a7101f2b7d705501bde0ed023fadd
SHA1 f979bf1ea11a7472122a3dfc726b16de519d4209
SHA256 885f7caec5f9784f7f9d904e8745bcea3b7cac3dab151febee32f7d06e5da576
SHA512 c4d6fd0dc70552d86dfac08576454062d2051aecf47d18d4cab2ca9d84db4b896674c4dfd0b08af2be4f8da57229b406dcabfd1e88c2a08c8fc69a8d2fb4e2c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 ffba198bde279e3412d79ff4d4770661
SHA1 3db53aaaf94796955acbbaa01da1f0d699c90e4f
SHA256 6d693f38d4f98df3db20075dba2d635dcb93e0a0f877f8833e4ad162380081c7
SHA512 680709bd1344cdf8572512c15bf08268bb8e8e0717836ccf33db8fd7754d9ce35b8b51512053f815fb7fa150196e2064c938255ee0a3f2df37352a14ecbffbbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

MD5 7d10bd45b78a5f8f5d659e13e1f2f022
SHA1 a31f4bd737b7135bd16f42b8292d424a5d90cee4
SHA256 58ea3e918e42c0b9c583c1855ac479feb0af8a1d1f51b526f3a9ad3f353e510b
SHA512 33a0fbe744b45745db379961829f7b0a61ab86d5d5be737604e5059d0e9bd28ce9b5c96c3130cb281260ebe7f8e96b7466fb78bc3afe9d17c2d05da9a255be8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 64f3d17eb5ccebc315d4cb527ae8f279
SHA1 bc394dda9cb6f683dc8a8e3050fcfab79040d860
SHA256 bfc3393ce3dc2a7079f50c1e5daf0b40c1a281bb2f1eac4857ec3f0fe0332e1d
SHA512 9c3cbd4e3af760ebaf10a3d3ba7f8bbf0de13cabdfbea22f03ea4b52bb85929335f5c36f224a0fa8a9f3acb73f9eb1cc554d9fb66690b8dc4df00934fb5eb9f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6591353e7e8bb2c_0

MD5 5296f8d5a293ff7eac0f6b95a2788eb8
SHA1 3b3654e0c518966c477b445c47d3ea1e532b4907
SHA256 0d4df78c57e3ba7ebb1019adf5a40ecd09c8f64cb1281541fa23f6c818c1fa4b
SHA512 27c657c397e4f0e6ad36c932bf727d7beaa9b85a70596f9a129695272ac69dc6881e1606938f51926be7c7e9a4b01418bef3717fa8d5dd782d5cdde8e453861c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9a5b2100abc1a1d_0

MD5 2d575e873f58c9a4149dfc5a1c20c162
SHA1 ff9084f9d670ba5cd16bec903e36d3b61f23ffb0
SHA256 2476d940bd5734e613f2e2fe3da1a3259a277982c71ed31a2258b769eb53cb0e
SHA512 f66ea37210bd327ddaf4a88d6d640c4cba0387d5b2c2a9bcc438a0a95840a3b7234094ec541d2c0931d8f70f8da3aefaa4b5e5da65e636d30f568dbdcac4413b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5761ba72d084a14c_0

MD5 3b7da0a5386f8c84f82a01c8fd336d5b
SHA1 b44ead757048d1faff3d0fe6a0e865c9b381032c
SHA256 786b18cb8e641e3571200fd7fa46b1f70e6e4f16a3d75117bc5deec3a827651e
SHA512 795d44f1fa87a95efb7cdd0665bf7dcf30f0247d6be2b0a3f6127de4e6ccf8c86da7c61b951f65af2fc6c35e02d85bf4df3387f6fb113c5171c924977103c4bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 ad11a5f156445c4f8fa58ce17f2f464f
SHA1 c2ab875bf0f72845f7c49dc360a0ba66c6285a8a
SHA256 761032d654e94be134c6c3e724c6d01a0d67de16022db97ebe884d54552df8bd
SHA512 cbc0b7948d9e579acacc71da4111aff56fbe06a662d7cd9484f7be634585a65bb7f281ef4da096909cc812be81bc9fe257c1387b67171bb9dce64a6463f69c59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\570b9373b56aa1df_0

MD5 282c4f31fda07334fb4720966bd8a29d
SHA1 918d5c951b48e4db02a1c520e57425e2f2e737df
SHA256 8e87615d2746cf633106345f19d59cd25004bd7acc0f7c38fefd886c1dded09c
SHA512 874308c1a98551d5adbc1eac8b7553a55929c19d745c8b339537ccf40bc1fcbde8ba41365851408b299743bbcbcd803f87cd16604a0561fa0e70b50bcbd596f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5901cd6815f5b8c7_0

MD5 d0fa47e739cb24c94979bbf7a9fd0fd1
SHA1 b6ca8c2bdca48dc70c6f056f338c5aa420d554c7
SHA256 3ac609dd8f587f3653b48d5682bb6c593b4f0d86f8ecdb26042a7c753a59db78
SHA512 a83ef398592bd7be070215c7c344a16181ebd3f01281e9fce68f9da610d7714457a7aeff64dafb36def94532d72cb92d3b58aa91bfc130f2f06e10ca592f6fc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 bbb9187da36b64b61d750f1432bbe1e9
SHA1 fd4d215c6077282b9858cac35210746197acada6
SHA256 05eaf9544f8621bc02dbe97c17a5c632236460416bb02093b320a06b25cf2795
SHA512 236b0d3b8c2893a4ceacdf9cb948f65debdd3e2a65049d74fe7a0e314f39fcc110cc01156a5abc5c774572f36da77446bc839c1b625efef7c5d4d2949af1d576

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\41355e26f96df7d6_0

MD5 caa254042f87b103bbab0bf0cc584e67
SHA1 24d414627ebf63974de917a88f45d5d1a03c51de
SHA256 1acd65c489c029527c85011697d34badf464d333871b9eeebbf24a7467b0b76d
SHA512 eb3444c197fd5fbd37a6b52facdb53496683c357db332c596f9ba90766038cb43f254436f164b3f0e0610fc02e87b0fb05e26342a20b964fb75c0ac20fa4024f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 2b5bd1c2408467b81f21d7186a62cc14
SHA1 ab7f001d0bacb35789b9c24e23f97c7bee97bed8
SHA256 312db43c3e4afa047a2b1b4576aa0d55d1541cc5d1a892c280d1ad977f99523a
SHA512 aa5b3052061d44536757b149603389d793cf613a133f7168bc4a7e70262431537a168f7c26267c6e7de2781eb4028a73720af486a6bb1aed2da68fe294d6f4f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f91005797e8140ad_0

MD5 dd3e754880031072459c9d5005e12f10
SHA1 e5cee16477942e855ff123c3838723e74f974c5e
SHA256 6a20a185f09e15d0494eff8d85002fbd3b1bd0fb0fe0f5663b869391de6807f2
SHA512 8c0e9e40abf23230ecb62f851b272d63300ec4a3a077b3fd1e93c99024fab67c89941b5c2a29b4a11b46e62001fc7b7bdc5da98ad5c628a66226b8fa39cb187c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a0bf23602ca1ab29_0

MD5 8cd11ea11c5d0293d0bd1d583ac95b25
SHA1 73c8d059d76a73951011f257160393ca8ac48ad2
SHA256 e0aa1063c41f4741a342451c83fcee6b8b2b2a36c8f7e7a330efc3172a514e9c
SHA512 5ce8fa6d801507a4a90c9e3dcd53fdd66672289024423b156c15d632b391cbbe1de8908bbdeae3f8a1aceaf93cc9be6b86ac4c52ee7b6cc329ccb3b3c0816ae2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ad24adfdc0f573ff_0

MD5 615f2e8d039c3aac0b348440b046b092
SHA1 c6c4f70cf2949149abfefc79bced4bb2b9308431
SHA256 ccd5a420d8f1f64d70499f0f242dcf563b4953a6af2044825f5600f0e7c08e25
SHA512 d477afacb396dea68779eb36bbfe65afe5d7de879438c6acc891bae55654b0aed0be1cd5db77d0d0c94e3593f43ed83b0e66f6495fbbe02ae83d7c7a3238d05f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c64136d5a82e1e12_0

MD5 2c5c5a3ac7a19cd699abd8917580d899
SHA1 37f0de6efe857ed50e495ba9962dbcb002df8254
SHA256 d1579001767427d70f0c78f5e51a41af54c856dd453a45cd835e1c3a0dc32580
SHA512 91f8c5e6b802ef7401ccde7a71da06881f0e9e6b8a51e9ac51280f28d159ce6c9abe0528112b6181d2c439b9215fb57fdfae004d352d91dce2cf70b7866152e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b4c8db23d035e8e_0

MD5 b05f4db9ab64e31cc892ab4d4ce41788
SHA1 3c88685d8dbc12c612e6518c84df333084491a70
SHA256 7bb3b4c3665fe837636a6d3c2c5713a331bf4dcdea6351586043cc766442e149
SHA512 d3192f2e9b935f92a590df1c06e8e688fbbb9daedcbf25be38eef87bbec294dc3d4db2f958094ee13e16395899f4fbacb0a3b9cca02c9b9c3eb55615f7ea642f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 e3213d4e6b070c52c05579f3f501233d
SHA1 3914c0d164af7fa49505dc3c4da8d353a2b03984
SHA256 3eded07d7e86538984afaab38547c9f7ef21c2e43e7a288a76ea8b74ab9c9ab7
SHA512 451b93440c112bb5a0a5ef7b99e01b5a4850959b71fa34db45864097bbb563a47a15d857bdd19579ae30a7e5c2746d093f705b29ff9febdc75446978ff9cee50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2c3b833452330e40_0

MD5 a7ea331faf70c9ec24f75d55d8666f8d
SHA1 1d4c7c313cce2366146990b414da891bbd8de05e
SHA256 c236eeb5e3eb971fb36f5a31ebfdc4f1d5e952c91f82e03c6e9476495dcd1535
SHA512 58b2c90998efe891e63ed65a5a1cd5003d4fef943906dd08946e160d487e4c4911d4f3dced50e7e6b92b9f395329701d5341f4d6222b23e950e51a5fe4bfd742

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9eb49b832d016644_0

MD5 f2211b99d84f4c83dbb6e8c6babd0d00
SHA1 fe3007ed77731b734f577719f209f61be7eb1394
SHA256 7da944822749ab8476c2ab0f5dd0e663ee6e81552e61809520cb424b07a56827
SHA512 3863a2026cecaef0cfa5d03cc8d29e94b886952f08428d8820a5cfc5b2924571397e10ff6b59aae791910ed5f433341ad53dea1eefd054d29de96722b31ef778

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4cbb37e3cd40ef26_0

MD5 45f7cb66a337ea678b75859438759b70
SHA1 ed24a3e7a1466d9ffa6ba3f0b1297be9f2e0d89b
SHA256 8b4c0d3c5202055cd257e1e22e0e7fb2384e45e2b99339c3be8a065e21fd57ee
SHA512 acf219eb3461cd15008343bdfe6a56e7d714953904d077cf26fc8b8f608e24bb04ba2b3cb212a9b308225a7bc1a90ad2e02a4a314e3ff2f71a503b949da2ba14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 160dfe5d81dcf18bd108f2d37f974f95
SHA1 c51ccb4c42cabff41ae91496070dfe87c145f527
SHA256 4f03d7c4691e47a4e3ebdfb228c1bf12193eb1a983060e4de2cde03b381c718f
SHA512 1f610190127d7460504866b3c458d9953bfa0098709903c7651579fafbc8a0737df70313ab2f4b338d0a958057211d3b60a8d42d2b265ee1190e638d6db87c21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e52ae3fb759a78f0_0

MD5 3300e9c1b3de4945ba1622cb69bcb857
SHA1 48521dbb8878268887c243e6d57c15777d840c70
SHA256 3afbc2672616e084d96da7d3daedafc39a7f69afdeb224384346fbcb4a7975e2
SHA512 ea23db19ef225a9e79c0d2d93f87785630e10a5715c54319e0821d8f083f7436d0d848ab76ce167ecf1809e78e267a185bf8db6b3c8adfd419006acaf70ddcf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\188ce44a0c67afc3_0

MD5 f1ae5a020503caefcab350d101ecfbe1
SHA1 a23e1285857d8f16340ad0861a6e767a1f0d637a
SHA256 242439b7d3a51df5cd856e54665a59395a23018d6f9df661878e004faa9cfbca
SHA512 1fb5aa7251c03b56287e4d9cd9a340bb7e8bc67b8e94c415bee75b360bb9bcff60ddd508376fc03b01ea10e8c97d1b349e256df5a963b2ca8f864df398655622

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e6742505c79459c_0

MD5 9ee49e7ff31c8197c1423d0a47a343e1
SHA1 c2fa22fd9847cdf22a411128df15f1c8e51ba7df
SHA256 3791dd577a8f7efee8232c3566999c761d2244c6b2dd5c28acc027657a17c2f2
SHA512 85c25176f6c2f7e9f351c98fab528c997d03374e753b07e9bd2df8d250cbc725a86eb29e9aaa2758bc2850117826fffec778b54ddf9c19187295003f2732529d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 cca42c6e347745b3e621ff8826bf8f12
SHA1 2bd054dc46f8c5ace6f96845daa7636822bde751
SHA256 af6fa55652e97cfaa28d2e668aa808b897220fefa9209937689b00d8dd7a20ca
SHA512 a3410508e392b93c12a4f39f7cc7d60efcfdee1a3b24edf7aa80ef112d1b1af947bb7a495e28ead6d77e73951d488858b8ccb4ccd7d737de42b0c4944d22f513

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c37dfb5671a046f1_0

MD5 4fb11573a1171d472462a6486ecab081
SHA1 7e8e22d08abf229d0259244f6a49fcafec39cb7a
SHA256 e55cf527aa4a419e1579745609d0f2a53003ab77a38e6f65047625b084b533fe
SHA512 94dff71b3c5ca65b82f6f208b8d7feb6f88398c057d766dcfe35a72302489dbaa774c0b4c1f8c1bb3490fe88a63128d3d0dcdfc3a8433160f82a4926894f52b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

MD5 f392af7132490c2c0064f9878ec1d125
SHA1 f7bd618111bf72af5843e35c566cc203726729c7
SHA256 568fce52605f3fcdca70717dfd9357e3f0974f89a4256579a5e0a6fadc8d86ca
SHA512 47d50a407933a265dabe997bc3451a31c64e5c222a49f6468d2a119fc46a7dd49499ab40a3d5a47fe2c07ff95ebaf01840633f21da668977c0ecc754ace2089b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a37ad9a49149528a_0

MD5 b819fae159ec84dbd6295f4479eb6fe5
SHA1 4203516ff9c25e68f2775a59ecb691ef96222ee7
SHA256 3dbde586b6a7116d9c4f68b8c01013aaf3d3de2c9db4f024c916c7a804e0ee8c
SHA512 7658106bbaba7c62a70d1a36d0c57a1d64947e6c015afacb3ea552d02d1123d64c8d50e3a994435acdd6311d5e52bbeb9a12a274c57639982ade8af46ea54a2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

MD5 fe8b5b0f16b06a3e09f534e086dac924
SHA1 07efcc747cc466a3671eae4d4a9c4ae08b14831e
SHA256 591cca712233b8dfba199ecc2ac19935eeb02c9ad7344427c2ccffaeacaef4c3
SHA512 8071e18e76f1df65d14284ffcbc980bbc38435965bf52bf8d7c021f66258bc4f9623cac9176df42e099d20497e22e40b2dba6ce5ad33ebec10651dca0429b947

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

MD5 c0a70ebcf518da929620d68e13d49ec8
SHA1 d886dd5f3d5477c34e31803d2417876ebed0e711
SHA256 8a1bc51a0f2b9ea995c368e55e22b11884c613aafb55effff6450c3c6da94379
SHA512 27c0914a1076fc2b29cf1dbd24bc53c75258d23245ccaf9072957f66c6e4557be7da9bc2446e453601c03a5c8bb42b55e01e09ea3930588ed5d9201c676065d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d48a9106aefde63_0

MD5 45d08b71d8999588e8b772f5ae3ba67d
SHA1 3e89621ae745588721837b8807d16fbfd9890b2f
SHA256 e7f594d4c148850ab99264d0cc1712436163741342eb1ee4cc386ea99bd4be93
SHA512 9dd55fec5d0ebc1fb7f7ccf2402be2d2d2c4796773d1070c4db60adf910057cf502114e9c0da1f46f47f3aeaa23bbe5720d0f5679aac40c1602fd6c7be378b90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75ffcd5862ddad45_0

MD5 5a53e5c3c7c9a7073bbce2e41314f9cf
SHA1 0766b9c2848765320778f5dec738b781c092fe9b
SHA256 17d2760f9d11ee77e75ae19e3f8c0e6d101b4fa3033cc868cb06b140c45d7358
SHA512 556f98b7ebea44d711d50e775c59c17d8967f0599cb08e53d7fb2b4d53d00d0cf49f6ecacd715352c7683233a2c1273d8c23f348a12dff339b79eb91bb836743

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99110e9a19c3c06d_0

MD5 364c75ecb5b6296c4efeb9e313579b9e
SHA1 438c82e0727ff26c6f680e22e8deef3b5d6d1471
SHA256 f67da0f27424d912753586cf09e40456bfdf5de79b9011775b482a534c4cdf27
SHA512 cda91290641c810fab7cd21677953a815eed9652b8cc9ed38ed26d6c2e0f162cb055a150830350c7cb405c1cb2ad9fd7ddc15b35905d48f4ac50393d92d24573

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

MD5 6a371cbff491a0dee7071cba6c7033b3
SHA1 b3ca7aa41368acc0760722dd9252cdba98c3894c
SHA256 f8293e0dafb632ffcbb7dc38d1fd7bb1685727350877ff41f2a2f537dd24061b
SHA512 88049191fa76b0f4a565032f97f79ba9ef8dd19711f82231c44b5b863d84343b0f72382242c0f506052ee7b33eebb437e3a29492cea6100393b47d8d58c7b99a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ce6240506261827_0

MD5 045d265e20cbe0af1563686a13cdd8fb
SHA1 112d73c40a86624044e017d0288059f4c857f2d2
SHA256 2096d3b0104099aea9c6ba0d0d4b1994a3100dc20b473c918608cff5de135a7e
SHA512 a6597543bef3c2f17be0488aa6b476c25c58940955d5398965b4fa9ff8bf4c6f3ddf92182342e4e2e4c2d7c4c10b50e555b0f21181dd8ec0672cc772a78b7795

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47130442e621a46e_0

MD5 e92b1562854693bd42194ecab30f2cce
SHA1 1044688439505554ffde872bc7c6e0b472e30428
SHA256 dad38b4df99c6631d9baef0e6cfc89bb1faaaf017608863393d93d4bc6ee6df1
SHA512 17ff43c8aad13796e901b8edc970f494b6a5483dd385fb2aa58140cff4f39163a6a20a1160300cf9e173b4a41be7ac6c34a6683c805c1306b73eccec4c7241c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33f0991b0c05bbe0_0

MD5 c1a4ad165d910904eeb514cdaa992928
SHA1 2af4abbab47f5b1a3ba13a3ed60d24c5d5d6fd41
SHA256 63768f2bf063f09399f39548a3e9cbc804ac9a9922c5fd1fbe6f597370ca8fdd
SHA512 4acdbf46959439fe28ea52f5bce75ca7012b5b616ef3eb385122eaf222fd4877b1574904e830f51956740cf075ae658c208008727d07bb1aa8a21372112b5989

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1bc53205118b9d5b_0

MD5 4ad155260592eb96b2c6ea4f68f40613
SHA1 242f8e682feeaa78eb8c59194362c046d0eb0cb6
SHA256 35e18b0ee8747a1c906db0d3bda2b65de7078660e2d7b80f9168e9167a440994
SHA512 ce7f95844d28984ba6f0548d0fa64a7c9f5aa9d5c12b33b41e5dc6644906ab62ce0db68d601b99570207dbafef21a725ab636e5ecfb63cd078a1289843ab4c97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3d18be5d494e38e_0

MD5 e0d5380ddc2dddfc987110401890d467
SHA1 21e215cf0de5805dbcfcdef9ba19a715e87c853a
SHA256 e53ce0b27a208a8f266f6b4a99bf86105549f7a4dfb399cd889ce48b0f4839ed
SHA512 4af0cc8d4a78ddbdcd26ae7dc8ff2487ef30da490d7241cb4d81e5a7b810fb6d8f2676d8bc2fb2569a0f5266b809e3ca5f279478d42e7ed83a76cb7006de5a7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bcf3954c5bb22f7f_0

MD5 fe1a3fbd1b2a5e50d75811d5652eccc7
SHA1 aa06dc0fcbb96f25c55b47dfa7569bd823647f60
SHA256 2ba3b1bfbdf7a1bcd81bc5cca6da4617c00725cf7f65bd2672f47fc6fe13977c
SHA512 2bd46ca53c0dfb1039ed162c2a724bd114129e6b2d32baed374e947e4fb5e634e7fc57eb85de199b2740995eb524dedc802fc73a505cd2f2dd95912bffcedd11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5ebae3eea1f01edc_0

MD5 9d77ff3bda0bedf2175fcd748ae599c0
SHA1 4fc3278a1cd64b6370e2655156e131b16613cb5b
SHA256 cae88a057bedeaeba1fdd9b82e5ad9adad1e0ec56b926cf6ba10ad087e1a4b50
SHA512 11629f516891b98a8ef550ff2d2ba10e47ddceafc19c0041ca2b0757ccd958c18334872b10e849f2b1eb1f18d15f4a8c555f416e6dcf5007b433ceb8cbe8ac2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63c6995fb9eb98a2_0

MD5 54ac6699d1eafaaa19a9515809e05ca1
SHA1 767e141049a3ff7ece1f9ccbc8d4d6901524cd64
SHA256 d0147358a26cbc418737d0766434b34d620df46010c536a613677d9f055480a5
SHA512 86d778d13850dfff5778134796da189aee4b2778408586e3411e172186f9fd163947facf4f14b08a03c3e1d7b2a8e3d79c1790962bf386a6cd61c13bb4f19b41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 9632de298411f6c77f7e7e5e6b682272
SHA1 0e385912f3245401f0d0465185561ec75f7e0496
SHA256 fce38a8262914d5b9f1043b676925ad1ba9da3ae80b8c2cecc6be998cc72d7e1
SHA512 27a2d6524e3f25883a845844c7d35342137146ddfa5ddd3994b9f182b1908f3709f3a8baeb346f3019316369e8ebe9cec4e48de59d79c01cb676e883af755523

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 0063dacdeef5bcb8eb5223a637a03247
SHA1 903cb0fd481539c7c933f1853f30ca71a36d77c6
SHA256 41420cd133ba2718ed3c817e98dfb2aa3ecca0e17014cf3ecf1f7c63ad8e4bdc
SHA512 686dfc42356d6332a9173904fec250af7eae6fc4f830df37311b7861aefb216e91520b9c203d4c49beb7a2a6bf60cdce017e37262522e31311a31be40de1772b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a1687ecf154506c01e4acdac8f08ff7c
SHA1 7b0d174b2ec6796c6a2e30a30530605ceaae8d54
SHA256 91958b81942d2e0bf5d810c0e2c64746217a9649f7c36dbcb3dd3a7c0bfb1162
SHA512 f69300e51bb3867d9e7589d8e38f48ffd4d9c10eb8fcb0b8430c1d9c808e9b6e2fad74dc33bbfa68ee56dadc3f5d59f287079c86cee08404c465787ec267522b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\index-dir\the-real-index

MD5 2a053f0aa54a5d7e741337ae1ee554cf
SHA1 4f460f341a4b1a60a062c3d76d9ca78c2d83ef3a
SHA256 fd7440ce9e3f1562456526ee7ce0dc4b00e3ef7cc6350af2c905d38debdfc79c
SHA512 215b48e425d8191fe08af5197743ea45ebdb0d8f9d51bc0b999a366a695b3861da676404173f7781891dcc92b74988ae81d2e916f8af52c63acaa4367d286f57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\13fda6b8-da88-4455-9454-3fd2000faa73\index-dir\the-real-index~RFe63a9d2.TMP

MD5 3648419cf38985c5ca549960fb3e5168
SHA1 4358481590187afc35588191f7527b6b3074a1ca
SHA256 72465df601a57bbf6c26fbca20af5aec6f12ebcff6978a26d49ff0fa3a8e1d3a
SHA512 7b61c7c88664d324a9ec9ef7670c71c5d6e99095119ecbc95b919879d35749f31bb4fc543275bb42825effddecf231690fc9bc313812c8a7655e993ffbcdffb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\56115d637504abec4f37cc462f00159a1fbfdf03\index.txt

MD5 1990b43eca3f58199f919d19edb1123a
SHA1 41313c497331a2bb8e57e0209a8858471a5449bc
SHA256 314275f189d9c334eca7817244829c3fef1d93b451967b9b38fa22e0da7d7fd6
SHA512 b679c81856cb6d9ff4d658b31ed2536a52fab77de77288a9b6356fe4d6e20ed38d22014a623b07641fb7e29f3cf25b7278437b88f4e22bc9df4fa169edb65eb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 336b9857ae8f00e88d090a060d092f8a
SHA1 52f3c92fb992af28a053279a5be132077750da51
SHA256 c5b42eaea0abc1489eaa584a4ca2916105b46dbc94409f078a91f356814492f3
SHA512 6fcbf09c1798aee8540de4b27d5357ffd82efecb5a04ed938bfa038e09264c245bf1f96f3210643d1c1a4e392bd91c1301da7cc7ed579a0a3e938207f21c2d55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 6981d24dd279e625c8d304182559725c
SHA1 6bc676dfab6826b68acc72d28e052f5fb2fd5797
SHA256 66ef6f232a0a76509d6a460ef496471c393889abe36dbeaa36b0f7afd7ecc0cb
SHA512 e2b3bff3fa222677c3245e99f5c45d618cec26b4c289c990db240a630a7afe28d153d7e52d32283fb8803f66c81d9995f4cede7a77c50ad837565b66a9d32243

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 096eb88c028b6ae3c826514159697cc1
SHA1 9bd1ed813f051b313bc3502a59b1a1edf7bc1dae
SHA256 144fe4b5686ccef42800efe1904201df439d8e3d59c1844ce2e18fd99e3b7493
SHA512 79dd43fac27ea9b251189a74cbd65ff21d0fec2c1c4a36ee0e514b677ffa12558d0371d3d30147c76deeb68354b783cd440e8ed0eccd912278ae73720edf0695

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 806bf2344518d1d19de057c7229344f4
SHA1 4c6567332e2f186098b1192d843604b423565ae1
SHA256 c360a5e2175a9a69e5f81e3a6bfcd7f5ec020ae91250ed8ded7de17d1ddb2cac
SHA512 87d29455a8566e13d825bc424458b8538cc4e6ee150f96ab88377b8a5901754283643ef96c4dbcf2e66826d3d159ed9b76c4bbcd2bea1825ca5c1dfecdf27d10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a815e9191ec2f30bdba7efcb7973fc49
SHA1 f8e375bec473adf235546c46c4c90e0bba276e03
SHA256 a542f4a742caa45cce8e06c4345efebe79b24cb7ac3bf0f6353cf90e155d8323
SHA512 9295ae3fce97e5b775965506bb32c894b8d3f09e9de5dcf08346fb1f1f15995fc0b4b8615e715777539c0067dac67209f8b148368ba16d7ecff8cb06d3849fc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 718fe7cd798659d46908cd33b1f964bb
SHA1 28e0a83c076ef9126f024cccef5695de554bf395
SHA256 1d6b585ab1763ce70f05e8b498428c548f80b5f68ab1f1f68ef9a137ca494c7e
SHA512 f3edb370c2b17a972fbe5f54a4a780ea45343caac6fcda8704e5f430ffd10c25e3f734b604a9f88124c29aecfbd05050ac6a13abced62e372c6c70b15e435477

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b625a0c560b6ce045cd0eb3e4fe5070b
SHA1 7c1c3ba3fba8ef1e809c016b7514c8f6803e4f67
SHA256 bc1504e02208f309a210af01564dc24e470a9394f6f7d9664cb0046243175a75
SHA512 bb4f65513948089de49d7ec3518894e469afefef9995de562810328201aa5fd7a7342e97119e66e64ef4ee6097c1e7db868d5a8d8f29764897d10fbcff13b998

C:\Users\Admin\Downloads\FakeActivation.zip

MD5 6db8a7da4e8dc527d445b7a37d02d5d6
SHA1 4fcc7cff8b49a834858d8c6016c3c6f109c9c794
SHA256 7cc43d4259f9dbe6806e1c067ebd1784eaaf56a026047d9380be944b71e5b984
SHA512 b1b4269da8a0648747c4eee7a26619b29d8d1182fe12446c780091fef205a7b5e6fb93c9b74c710cca5d2e69600579b9d470e31a32689ecc570d0c4bbe4fe718

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18d4b201-e287-4308-86d6-5e6f51873ca9.tmp

MD5 144bd998d8bce690b3c318abd7b4f90e
SHA1 658cb3664606e98dae160539d4ad38d0a4ba2345
SHA256 c8593070909d45b8b169bd03a7d03b8d7067c617d1fee92e4abfbdf55ea161b2
SHA512 291de4f23c57fc34fcb4a2c5d0bd45d43b98fa8b9edc8018376c4abb8cc7e513dfacba729d8c47eb1707750fe492ac2c2fe175b042a9b71a3d3627e4d0f7afbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 02b930145d9804e8e8239bd2ee72f623
SHA1 158c20b9c2c0390e1ed9fd70595a644896c25c8c
SHA256 2823a689611792a89ca445eedca96d4bf835b11b5c9b9483ff59d99f2e1c55b5
SHA512 4a5d6b19b07ba91610b6dc61b5d86b0e2fd0eedd2ff7d13b92b1b980fe18d566c9066e5e9123d996654c9a7a31b492afa948e67c04dd499e8f551411737f75f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 10b1d32fe470ab0db0a25442e81c37c5
SHA1 e8738b6cd853ecbcfd6852bb9d02a8725590de28
SHA256 adb48bda90561bac1181cd2b2cc6120d18e90e68aab27263ca3f0e10f95829fe
SHA512 8f383ee159d52cf5b447679711775b263f66ece8b19163641fd56ffdec0c0e9dabb0bd298ecc85efb02ec86ff240dd5cda6250a4fd82f1d8509e5e28234a075e