Malware Analysis Report

2025-01-17 22:47

Sample ID 240603-qf4n3sha29
Target time (ft. Ryaxrise).mp3
SHA256 763362aa38753bf8a6c147ee8faa37f7b37ded2ffb0743424fff599016fa4889
Tags
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

SHA256

763362aa38753bf8a6c147ee8faa37f7b37ded2ffb0743424fff599016fa4889

Threat Level: Shows suspicious behavior

The file time (ft. Ryaxrise).mp3 was found to be: Shows suspicious behavior.

Malicious Activity Summary


Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-03 13:13

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-03 13:13

Reported

2024-06-03 13:33

Platform

win11-20240508-en

Max time kernel

1191s

Max time network

1203s

Command Line

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\time (ft. Ryaxrise).mp3"

Signatures

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\T: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\unregmp2.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3001105534-2705918504-2956618779-1000\{2D56E59D-B8D7-4D9C-9B36-B13E38827F2C} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2400 wrote to memory of 2172 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2400 wrote to memory of 2172 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2400 wrote to memory of 2172 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2400 wrote to memory of 5108 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 2400 wrote to memory of 5108 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 2400 wrote to memory of 5108 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 5108 wrote to memory of 4936 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 5108 wrote to memory of 4936 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 4044 wrote to memory of 1476 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 1476 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 3116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4044 wrote to memory of 4184 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\time (ft. Ryaxrise).mp3"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\time (ft. Ryaxrise).mp3"

C:\Windows\SysWOW64\unregmp2.exe

"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon

C:\Windows\system32\unregmp2.exe

"C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe15d43cb8,0x7ffe15d43cc8,0x7ffe15d43cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1868 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2540 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5324 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5316 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004DC

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4680 /prefetch:2

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5608 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,14033906284084098849,14847648314163167866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004DC

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
NL 23.62.61.160:443 www.bing.com tcp
NL 23.62.61.160:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
US 162.159.136.232:80 status.discord.com tcp
US 162.159.136.232:80 status.discord.com tcp
US 162.159.136.232:443 status.discord.com tcp
US 162.159.130.234:443 gateway.discord.gg tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 104.19.230.21:443 api.hcaptcha.com tcp
NL 23.63.101.153:80 apps.identrust.com tcp
US 8.8.8.8:53 153.101.63.23.in-addr.arpa udp
US 162.159.133.234:443 gateway.discord.gg tcp
US 162.159.138.232:443 status.discord.com tcp
US 35.186.224.25:443 api.spotify.com tcp
US 35.186.224.25:443 api.spotify.com udp
US 162.159.135.233:443 cdn.discordapp.com tcp
US 35.186.224.39:443 dealer.spotify.com tcp
US 162.159.129.232:443 media.discordapp.net tcp
US 162.159.129.232:443 media.discordapp.net tcp
US 162.159.135.233:443 cdn.discordapp.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 162.159.129.232:443 media.discordapp.net tcp
US 162.159.129.232:443 media.discordapp.net tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
NL 23.62.61.129:443 www.bing.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
NL 23.62.61.97:443 www.bing.com tcp
GB 18.165.160.15:443 soundcloud.com tcp
GB 18.165.160.15:443 soundcloud.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 api.soundcloud.com udp
US 8.8.8.8:53 api-v2.soundcloud.com udp
GB 3.162.20.124:443 style.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
GB 18.165.160.119:443 a-v2.sndcdn.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
GB 3.162.20.50:443 dwt.soundcloud.com tcp
GB 3.162.20.50:443 dwt.soundcloud.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
GB 18.172.89.38:443 api-auth.soundcloud.com tcp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 124.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 52.178.19.104.in-addr.arpa udp
US 8.8.8.8:53 119.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 50.20.162.3.in-addr.arpa udp
GB 18.165.160.108:443 assets.web.soundcloud.cloud tcp
GB 18.165.160.108:443 assets.web.soundcloud.cloud tcp
GB 18.165.160.108:443 assets.web.soundcloud.cloud tcp
GB 18.165.160.108:443 assets.web.soundcloud.cloud tcp
GB 18.165.160.108:443 assets.web.soundcloud.cloud tcp
GB 18.172.89.121:443 api-v2.soundcloud.com tcp
GB 18.172.89.121:443 api-v2.soundcloud.com tcp
GB 18.172.89.121:443 api-v2.soundcloud.com tcp
GB 18.172.89.86:443 i4.sndcdn.com tcp
GB 18.172.89.121:443 api-v2.soundcloud.com tcp
GB 18.172.89.121:443 api-v2.soundcloud.com tcp
GB 18.165.160.66:443 sb.scorecardresearch.com tcp
GB 18.172.89.86:443 i4.sndcdn.com tcp
US 34.120.195.249:443 o4505708692307968.ingest.sentry.io tcp
US 8.8.8.8:53 86.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 66.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
GB 3.162.20.61:443 wave.sndcdn.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
GB 18.172.89.74:443 cf-hls-media.sndcdn.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
GB 3.162.20.56:443 secure.soundcloud.com tcp
GB 18.172.89.126:443 secure.sndcdn.com tcp
GB 18.172.89.126:443 secure.sndcdn.com tcp
GB 18.172.89.126:443 secure.sndcdn.com tcp
GB 18.172.89.38:443 api-auth.soundcloud.com tcp
US 34.120.195.249:443 o4505708692307968.ingest.sentry.io udp
US 172.64.155.119:443 geolocation.onetrust.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
GB 18.172.89.121:443 cf-hls-media.sndcdn.com tcp
GB 3.162.20.128:443 wave.sndcdn.com tcp
NL 23.62.61.72:443 www.bing.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\wmsetup.log

MD5 f97cf5bdf00c72e9e9342f66b923a6a6
SHA1 a05e16826325b5f46b682fd3989a38fa95439af2
SHA256 aa59f3e1f31fc62c9a3cc7db5a7a49d581abf620411f12aefe643a6db0c666db
SHA512 8648c1e4b2506d9d27489c96c96299b9b39f4ee3b277d6ac5a6f891fa9c9c3d5918a038de861929c6b5167b4204499473cd2bf9bfad7252883d9987b71450bc8

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 9b39c8547503a0fdecd29c6ee70cef52
SHA1 e7449059220cd65a69f5002bb6ef24aca23e9d8b
SHA256 4ee3ec0ebaa01d5d91d526b47b550218816424b6c854e4efcd9284a769ef271a
SHA512 c280f5c0fbf1bc423e1c5885f5a04d38393148487016f34c1ad8a051131ed763892ec6e3ef530e6bf037f9253a2833ea3910f6df3f4bc0d6b1d35c8fe4b117ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8294f1821fd3419c0a42b389d19ecfc6
SHA1 cd4982751377c2904a1d3c58e801fa013ea27533
SHA256 92a96c9309023c8b9e1396ff41f7d9d3ff8a3687972e76b9ebd70b04e3bf223a
SHA512 372d369f7ad1b0e07200d3aa6b2cfce5beafa7a97f63932d4c9b3b01a0e8b7eb39881867f87ded55a9973abea973b2d2c9b6fc4892f81cec644702b9edb1566d

\??\pipe\LOCAL\crashpad_4044_DBXSWCUEVWFZRXVN

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 390187670cb1e0eb022f4f7735263e82
SHA1 ea1401ccf6bf54e688a0dc9e6946eae7353b26f1
SHA256 3e6c56356d6509a3fd4b2403555be55e251f4a962379b29735c1203e57230947
SHA512 602f64d74096d4fb7a23b23374603246d42b17cc854835e3b2f4d464997b73f289a3b40eb690e3ee707829d4ff886865e982f72155d96be6bc00166f44878062

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0357428c-9d9e-4f2d-a835-f7a0666f9974.tmp

MD5 59ab266822b7749751c1b4e590c4f7ef
SHA1 be946bfeb051058858706b2119107ba5653e89e6
SHA256 7cffac4acac82cccdd57a52b702634b34eb738e56c96339c4e3d8a10014b3661
SHA512 f48091e6cf3a345dc8dd700d68a036f5a40969276227328e1b79fc658f0d7599ec6cd102e7bf4f9bf544ba9f2a530aedcb1005ee4b9beee2a8b4967a9342a919

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 56c848c8add6de6b895796f41c4c0399
SHA1 8938ef0fba941080047db2d6b67c443180658250
SHA256 2d838c617756e94dea963ffae8800c3ca25a470ec0f2211002301ae072d3c2e1
SHA512 fffc81730f838ce1147a1ca38482f2decbcb6bc98344766b301b4f1756809634137c46225dbf129f656df8f03efe81bedc0971487d44b59687efad23ea30ef7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 af7e9a48f449c948e3ec7d3008b1b78f
SHA1 c031ddf277480e400c510bee6bd3136a2cf026e2
SHA256 bdbe00e9da0598f35e7b8e2dd01e84c277a9a4b3d1e061edf2d0f1d8297f3c06
SHA512 5ba8c82288e636f044e699f4878249df6067a392b4b9f41e8490546543b62f89cd9da091fd1c4e287851691289bc226ce6144dd3f3b13c6016e392a01bc3e633

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 63bca8b2e5ebd28b4e0e09362d99e7d2
SHA1 288d5d0a94c5046ae46c880e6f84f45728184757
SHA256 811f676b1d6f5c8b9ff42628dd1c67ec7b758ad1c7125fe77f4ebdd6aeccfb24
SHA512 9830c752100f09ca26e490f5195fe391be69ce0e57374d6bfb95475adc5fc25160fd149cbad3e90067d5350059f85eca9300471c7b1b7f6335d95104f39bc53f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5a3ba2991e8b40d480ce0d6e1e018004
SHA1 c489a2fd467f7e57b5286ac774996c3e7ab431e3
SHA256 ecbec120a1498222453a0e8acd79e0088fd8e65b0134df39b530a443538e25cd
SHA512 41c0cfad5ede0554091655b9bf66a16e0a77f2e02d1028776a55b84247eb20ac2741b86d5ea59e2918c1b51a668d39af91a6a3223f82efa9ed2f4046bfe421ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 43fb9d21ebe5ee98918e84b6826c30dc
SHA1 6c0841d0b2eb8850dce7dd26a8e5e25b482d79c9
SHA256 39d3a78af9566234b35d39f1ccd819523e8fee9e8ece19187592002cb97121c6
SHA512 6291e3c6e5525d9b6d10b452965176f696b109c3de0dd5b036a99e8daaaf4139150ee86b4610bc87c0bb9938620b91d83465f39e4cdede5d02f9f2e3f8b41443

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5837c4.TMP

MD5 f3533ddb941033efcc6c9bb7b10d8cdc
SHA1 ea76b6fc5905b593852ff645c2eb60db7938ed61
SHA256 0828aee8601afa436429b394bf36131515adbd9679a71b5181f6d439db653f41
SHA512 d89b07e00b0b1c3a3b4355a116d5d935235ae09a696e40899ab65a83d4566efe7b7b4bd923a4b1bae49ffaf50fa53d47e8ab4a7e3d0aef0a7cae53d72217c204

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 ae9476c202a50528d03cab9f0deb585a
SHA1 011f8fffc119867a8f9c90a38227d8628b262e56
SHA256 61dc51e2b0a80f9a0f30c7822e72a8d55ba698ed4d9802a045135b5cf7a94a3c
SHA512 d69adbdae8630eb3956c9cecaec41aef88c51faefc846bc99be939ad6a61f517a42f3ba6b9ef40e97eb55dd9deb57103e6d7a884bc2d3e7db949c904755299d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b42ca4583f5d97b062d33b877a2cf85b
SHA1 80c57855f42ef73d52b27c57513cda4e291e587a
SHA256 4a77939ed0774d3f89f1448def0b63685cd40d79672424c0c40aa70a0d249e8e
SHA512 145746e717bcb2035f68a36354bf804665b14e6171e45d67dde9aa998e8a391fcf502ebd0b2a658a7638f72ef40c509e3101dac1a9a55ad96ea6969c4ceed3c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 945ddf6d93227d847b6a32d300a4cd73
SHA1 80b42336f25a52d995a3c338587d4512f82d3f74
SHA256 359a00de3ae87a03db28ae619bbc6c01f4c2908d3057638c3c594d8ed990426d
SHA512 643c461f0524cc7e8f053fb638597a3325f69b708e527c3745f7bf73ca46046c1c55f3ef23645f04d1087244f07fcf8d8406146cf4f06239e09c12f896f9e8aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a698c9e8e841d658f414a55f5af5cc0c
SHA1 e86e04c7a6f6fa9be29dfb8801a20b48806b0fca
SHA256 13de36f33a9105a66254eca80291e8538f1314bbc1d94a28dd1b94087810e023
SHA512 2a2f15be5fcf9625b9e41decf87d61157079ab3315639c4eccee7c8bc341bad51528180b550f4c3ffaca2fb032b7e1d9735a68d53a1a1e268b5e90831c433f58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c7881f98595604bfd87f60fadde023f4
SHA1 890a78ab2905b64b6315c3e7cf5a17c6f94f8471
SHA256 38a9fcb0c4f74045dc9258cff44561d8971a74a716a1bfe0fbb4252d4882eda8
SHA512 5dcbffa7b9f20e25ad026ebfb9cb1216a3aa3d7612bbf29a9c8af72eeec2f7c77a446a150695113812ccae4a827f20b2675b43885203abc400cff6f5e93cb479

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cd7290dc834e74fc1b6bbfedf2fda7f9
SHA1 8aeaa8072cf10b60ed04004f1c1021ff5f1804b3
SHA256 782d380d80e528355d720eb43c1ca1d5e9edb8def335b96731ce9025ab09a304
SHA512 c21b7bdde61fbeeeaa1100db2320185a08993fbaf691012aec939ddc8f955b6d75f2c64bcb02c1ee23d3ec31ee2f3c2abba706aecad0be67b943f97658eabca5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9425f04583aec22e6ad60d46d13f1709
SHA1 ca6136192a1fcf544f9097d6532907130443b0d9
SHA256 77cde433a99aedd56be08dbb972c38b3e75138bea2929b8c5eb61c92b6637e2a
SHA512 096a981f1e3350e922ebc8710f58783bfaeacdc296ecfeddd3aa3fedacd2c2c04add49065e705bc362990022c70fd75ce14d1d1c918a2b1513cb1abf8454487b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9ee9304c71087cace815c183a7b4e11f
SHA1 069569e519c5eb1f7d382c8c7d7b05b0a2394b07
SHA256 a849067041e883b6ba0e794eb824ec6d63bebad3520532c88a31c92d838aee92
SHA512 8790055c83fa53b4d745a9ee69ef18a706c397b1b9f56004593e804236fc25ea396b88beefef8992ed168e72ad0411f6ff145db034b390aa61e2c4918c3fd514

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bcf8b33fa4fe38a1bc37e361a57e5e92
SHA1 f63d728e46069022ef78e17f27ce92fa10f674bf
SHA256 55169fa727741113d86cffe49ac686312c09b144ac450f96acafb96eaeb22fa7
SHA512 5374cbb54477a283db35de5ea4e60467557415a8a94ec03049a4cd03088d7840dc129d51d4f7b66d37d37071fe0c34baa4b797d8e4c2936aa801106b35c7320d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8cb6b83137c69a92f1293e77bdd65c80
SHA1 de67743fd060feade9c62589b4891251e9216c12
SHA256 390eef5fe1f714d7b42cb2887d70417365c2c983131e8a2b06c281dd3f9a427a
SHA512 34ce1cdaa1a234c87743ba598844e914ebf20a633b1da352982e9f73991a5e87edb81bb9e7d4c5e49f14ae85c4f1b5d196c35251d0ce4946c3ae11a8103b9d85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bad552a4687121d72e80a34eab8172d1
SHA1 fec187d9a758de70ef761faad160c2a3bad1d5ec
SHA256 fb6e6ea2e4972db369fbf58afad48616c2f6fa50ed7307e704cb3b0e49d6f5aa
SHA512 f6d4572e49a19039358b23f32ae0d7a0a1eb3a608d23aa4cd0b1614dffa862167a1c646fe540c072508948545c0a616564a34733e6431ae9ce18f838c00e26db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 626a768974b0fac7e3ab8822a49e4f59
SHA1 74ae906a47d430c3aed8471b16d236ab032c6a01
SHA256 51d4eaa7c86be3b6ddc25c90f89b6a36a47c6c4088d0ef045e2c034c55ac1deb
SHA512 9e635643abf24872d97af25cadd42875757196710082e1308fe31da9e01df77df910b9e6884e4527147480cbee5b2a99e69a18129171fea52c563bed9861d685

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c8b4d6d58b9fd99b3d7f0a7789a83f0e
SHA1 52c0e9f2a24e8434b749b1ea8535158c5dc891b3
SHA256 dcc6739b897f47ab8f3a9fc10a233bf2c08be2d8d47e6a6b844cbebe665ffc82
SHA512 52b49d75baab183b95479e44ed05214b97538050a217c03aec951832e1665d8206b81204bb21fc5e295a101f590e989b0380cf7fd078422fea6f939a8fdb1037

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92089c55532d3e01d3eaa5404e31898e
SHA1 7b54ee97e5ec1b128ccb2b2c89e0ec416120c7aa
SHA256 e161b2335e3431000f3abbbd19301b5af6a2295d91a741678f510a66341a1f76
SHA512 d50f5402bf278e3dbf97bf28e41d7fff33d44dbd415e4264c3a68620d3235c5d08bee403eb17e24b7fecf3d7e5110e9e729695c354707a82b0db1ae9e0891645

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cfe710082edb7ddaa769702de6f593c2
SHA1 169058f97a8286d0e9b104b537b7fe68c80ce2aa
SHA256 f082de74af9a8123ffb4eda8d74c43b205c30e7904859be9e734f9e1e340c277
SHA512 ad7ce8d6af0a569d96a504bf90886bc2ac42d1ca5ce9fdf7187c2c85b00addbcd3cbebadba0a114442a67ebdfd35204d1e548e9426fac76935f6ad12e0781bfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 16fac66a8841bc01e7be896905fa4c4f
SHA1 a16f447b6489394273dc484da86a0d0e01218df4
SHA256 1b29aaa86940e51043f469d41ab4888e7e0ca0ede16bf5ee8cb460e1284e058d
SHA512 ca568daf73389b9fab11a1fc4c8bca23bc8914a973141768a177d595c4498cd61fd274ac36a91661024ba25fc04fc3242ee34cf3d5955bf04789819bcb5b9319

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0af0be46bec6e8d15aba0e4b85624bf
SHA1 6296d4e1c782f95a92bc834fc24ad05705a25c45
SHA256 221d06e41e566cf543803dc79364936abd7d9a85e82849a16c0bc4da952c1d37
SHA512 2fb8ce357607ccce72f5d490f77ae4e10bdb1cfdc1ee745f8e686a88315da1ac347467829e1ad779a1783c517b04d63e7b80190ca718674eafdaca65a19e2cf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1407aa4aa4483d9184c047f8040df373
SHA1 ed28317e2bee71e783c6133646354b2666034ab7
SHA256 f1469f29ffaf0d79fa80671f67f6ac24c0d998dda972375af5b3a12e07e90465
SHA512 740b950206279efbd1c697ee1a99347eb875742932bdbc2f1cf6a27cec82386476eb1ccb2132de5a83941515ea9ec4abd1da4fb8d4329317aaee8bdee095cf9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 704118ca770e7f03c5bd9b2667b4a744
SHA1 e3ded4a845906e5632f01164cfada29e6e39da10
SHA256 1ef295984cda24b8229dfa040265ca835bdd2d8633a5f7ea509260b80393e972
SHA512 31b71e694569617900c6b506c370e1c8bfd5abfb720f503d0a9a2f24c773660bc05d67319128ef958dec77490e38787ee4b92266a0d9745d16f5cc4c47c725b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3d207c1e9c4f31b7825c390487cad4a0
SHA1 a4d5a8d75b9434ce25ac1aae19531edf045874cd
SHA256 29144229ae867104ad8c1b56cfe918f8e7a812ed4fcb9988c5b1ca3ab00b9f3a
SHA512 99bc8b9a7b0881a2a960a8ea6f2ab7e7f89275f5a5b785d8c187493a3e999fab7f9d11474b70eb1a1eeef0c915e5d7658b351949087759b7a8614affabd11517

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5 d71f21c59d032b8c649c7051989718fb
SHA1 68c5cb8e896d1cbdf1f5e4bdfe6abf223d3405a9
SHA256 88da9424cdf677f9f6a43f2884a5b37d853b81464e791c617d746bfa90be92db
SHA512 b009813bed3af6b3a6cfc19efceb15e69954470d9aab586f5ec96e23d97acd4aa0f400e54bb3f4675378eb5f559578e04246de9efca366288392c666f462baa5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e32e4a4d1a5553dd5e50c9170dc39c9
SHA1 ca918ed7b235eab45858e5bedbb93320be33b6f4
SHA256 a51ad12df6b379a41e5ef6aefd593add0eb06d69f55eac7ff73eea95389d3016
SHA512 745a70f8dbb50ffde4ed6cb94b41ac510ede363c831d6ac1ed8cb94c472fbfdffa8b4691e6a5091ec8881c29d1a1f8b752eb9680825ddde99be7be868367f682

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 381f21965dc220fe43e71eb0bef4e09e
SHA1 4ae547cb40307ffe1d50ef7d1d7c53556ec4b198
SHA256 2e0bb2fa111555568b763a4847c27e52de23ea60308befb2ff082d83b648d43b
SHA512 8ef286ba9c833b69047799f719fe76a6187e16ef50fb3a02346af4d933ecc504335cc53b0ed5872f59ed4af27a2a20fec4b5159717e1d56e6505ff7c88366c20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f33cc8ae9d2cb8c24dfafb4045fad63
SHA1 7df259f116738f1a7276c2edd51a9c1a52bc677c
SHA256 719325740e8adf8a6448edb13ab4016b66f6c6b84d0306be2034f08d229934e6
SHA512 930e294f41b8ec63a860859550b532a7d757b258c615307d8a5715d033e8417d29d3eb6c19df7f18869ba1036e45ebc1ec25485e5dd4a2e5ac287ccf0d63df7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 08fec38e527bb31cab177a8c3a081b91
SHA1 f8151c99434c591e1fde5988ed0df2fadb95af94
SHA256 55a6a10e1b8cedc3592b6f3040a0ac4a59558acc517075c59d48d472a3d56fc4
SHA512 822cd0a5a82f9754503a83f0fc80e184a5aa7e88e878c8048ab3eba5962a55f38458f1e74c33e36088690548fa50ab5e88fdc35250a7f1cd0ef7888acd7af6c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 88fff33af2811e6a5fe68b3dd6b7eb67
SHA1 700b03ab01b179544b2debd3cf1666bb9760017e
SHA256 e197d26cbda58a6508b85a3d4defabcd25b6faf7e69627cf60ec84603514a0c6
SHA512 cc9bb93017f4ee6c017a6eb2e7fc2ce6058d6187f06e797bd7f2579bb530ba6466f5bd2ec2ee5b181a0e5ce77147525fefe87f2eeac326c9a37c44e7ddeaab95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69bbc006e289af73e4c6f7a1677f178b
SHA1 dd3d2427b53c915d447198cf2af8e9f9f3e69635
SHA256 904bb8c1b309f0e13983b1f613e40d8fc36c7ae97918fb1442599da6223167b8
SHA512 06ef8ca26fed780117388840ebf4e09297e6a08b3c79b37696de87709834f6be109c600f8a111e38fe970e13e9889480720add2ff217680b3b38ff050f238f90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

MD5 437493f018151c0f360a8b79694aee3d
SHA1 dd2ea6c6e800497acca1b5a3bf9ccbb98bbac587
SHA256 58355f9d8118a911f5f2219cb7905203ecad228c33df68a7586ab242b114f091
SHA512 51cb5cda2b63d681ebe082435a879bac4bb3ca9faf37fc7a1658e16442f00b67f6ec814b8ebbef9ed2aa57d696052549eaf5fa43751ce1ab757e91aa330a38fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4bcb018665d8d2f4d7ac0efbc37a7950
SHA1 b927a6d6f0ae261bf07bc99b50bc5253edd863b6
SHA256 7aafd164eab302d4dcf5a3af6793f7fbcd364b17f206cc318984244566b88248
SHA512 850e5da5c2a4c258e2bf6ebba44238be52e45a7f8f03f357e03148b4de6cc71387886799f41895de2ffe1eb82bc90e2c0e8ee94404ffc3372a723a7b18cbac61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 410409a49e1bc95139033967c66d6472
SHA1 519e6e352422e427f7dbea3ecd4e5d33f3b890e8
SHA256 c579843ab3cf62cd326cc85e0212825dec8e9cd07d5305fb18249ddfc0b1e988
SHA512 aa98f478d0d49a8a6a16b96c21e56493a898ad5b7da31b80d292da123e409e3ba2b083b3684b0fdb4e295643486a55b6f06712b4270edad5d8084cb8b037c54f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e08204ef903d982b87f2b89ef5abe770
SHA1 b8de6783fba925b532447cd2d38fdb8756bcbcb1
SHA256 53d6e0c4160fe85e7bdb13e88b1d6c9cb98d64dfdf355a12c595a375bead5647
SHA512 7db6af071879fbb01d52d5a5b3ef4bb329cdc4d7964600dedd005e983d993a9125490da322ce1aff199da707207aaabfa877cec5036f524feef41c3ed40641e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c7918bf71ed8d08b65f7f9adfb83fca5
SHA1 83446eb5f7555be9f9f7c57a59f14b874fdf9dad
SHA256 52ee05f3f3b8d6e81ad7b73c642b5278ffea6017962a4ce50359e7cb89a90450
SHA512 0c4f790d6f94a34501eab40d05535ad56e8893b1635b4a6493fdaabf89a95b6f7c37df521ed23e501024ca517fd3d2aaaf90bf9984613503ffb937962def0030

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 177fa591e5ec474c162ad49ad834a463
SHA1 d76796e588f140665e6102fb04aab4566d0bc407
SHA256 a2f6b6b920bbf87c28bf0dd9b236cfea6bf7f14d3c980edce1a9a928f59d0dd9
SHA512 f3c7595e0430054631f5d0631d1f9797b6208279fdf9b9ef6791223f0c5c374937cc414cb1a9277b8c39f3888aecb9a558bda4d8be81135d40d8c3bdb9a6f38c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 866595df46b3e1aa85df8fbcafe96582
SHA1 4fd8daad8185c33ef819c990d183253110b25802
SHA256 6eff3180c8b382c75f172cba5c4c6b41012bfc0f8d9872daa15cd9b500c7fc07
SHA512 f670f2f20168b6ec4bbbdbab01a5f78a483e29a2eb6a9c3875c45aa99deba5f98f08b2094a283decd2affb4c24fe904c1afb737e437b0a67b8ccd21866b6d499

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8cb79c98d3673bf4a36d88891b2aa60d
SHA1 0fb70ad037484ad97e962a2abe16f14686ccee59
SHA256 94ad44f82e30ed03d2cd825ee9d284b18bd0dd992568997b5937dbae36e85206
SHA512 045787fffb22d131b7c858570ab7df2ecf5e2a618d9337a183ebf9cff48c40d9cee07b3ee16258e51135c1d2344d51e1f153d18133a8107f11d45f02e1d3e3e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3a1836c658661eca97cb09fa5cdfae24
SHA1 a151fe8921a10b980d98bbad9e0f2001f91c11ad
SHA256 3001c50b0e76cfd566f07b254eb5b29c99343c2a8eb75fd62e87463e6e3b0e8c
SHA512 80f86c55856499067d5111c7ab2470e6c8b4a4da12bebd78c5a7a3d5dd3352915c3045fca25443e8ff8093f701f55f52c71799a3c02d658b9263d52cdbbe3ab4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0b8d2819e848019db7bd3bc688a4c047
SHA1 c29e9c1f7c73221c2099367171acdf1ce200b499
SHA256 7f948927e9f25464b49448e14f50ecef64097bc5858d7787b40b686a39c356e7
SHA512 f3d4d6c036952e8739f0256ae1dd73b3d98352ef04f7529211dc1bb332d90cda971a7068dc8171c1dc7a59a43cfbb060e270ff3159612c68d6acf7b69f229788

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b966afac3ac7dca6ea27abe83b8563a5
SHA1 1826e6bca7fb3757a408ffdc6e92edfd12c86154
SHA256 9d346231d11833d921d8b87c5b87a1b01d733a481792164af0fdaee097e61d89
SHA512 927ee4f4a50276add5fccad574b8abc6fbbccadd4b32d51cdd97f90ac910fea306e7eb67bb565165ab0061d5c1746d7b46d62408249516227af7ca89fb6d9386

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 031a4c9eff202ec0b5e84c25d623d299
SHA1 edc2c6534715119e6f3c06525abecabb5c4b46dd
SHA256 279de7c6bb4ee1bdf9f584be6a050064a70e8ff60ce1b2a34e2cfda897cc14ca
SHA512 213c77dcc1ff09ce75b1e9ce35838152c8a136673504389927352d7bb8bfc2712335356bd6cb2a92864451c7fcd61662114db52b26d005f554f61759fb3e0061

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 79b6ce762f1df3ca75e067b68a7c24c3
SHA1 18a827276ee839016fcb49e42a1aab6eb6bddb13
SHA256 56afc09d66e92cd49ae5cb5b79e96d7e5dbf8c24fd16e9bb5b7841241025e8f8
SHA512 7a07cef367da65813a1f25c4f4f479a8d7ee45c2e383b6e93e98c5ecbb0a08cabdbb2ab2aed428302e74f4898c57fbcb92ab6e2dc590c65d98d5bff81c95752e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d727879dd4ed76c8358a1cee4680c64
SHA1 7198851c5902c682153c87bf69eb502b5425ee12
SHA256 83296c9c9b1ae11facd52733ce72fa6968d04a82754e00d87c9cd79c55044037
SHA512 c16f3792f1362d52f92840ec2e3d0c10ce20abd3a95771974a1fc79468f556f2147c409e3f5f2cce73cc8cf600a1df322067464b20c600146eb316bd012cc638

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 63f6d01e92606d113cfe3f56cdb7025b
SHA1 1082b12d76dd7d2158ddfbdfdfc6c40bc3cb5f2a
SHA256 c731bfd066fce96aee699c1092f99f20e1ec1b4d2f5982eb8980cea5f51355d8
SHA512 a4fa47885d23bb61396a75dbe4d9ef203a0915ac7a9de008827993f6bf8bde72e5e561340e6fdc1c6d19ec48c23b84aeb6118598d245f40012522d9582de3673

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6bb733f0236e2b9d8af2643ab9e7615a
SHA1 99c1109e9f1ec487c10aa8374b7130931ebd77b1
SHA256 625d48ff471562185626fc61c443efc12a425e68fbda9554bc44c1cd8a01668c
SHA512 d2d97c5705f24a96f7a8dd138c0c54d9f89a092631389992b43fa67eb91f427b4eb14960247fd536cdc7bd14b73c3dabfa10fe2c4c64f981fcefc7fc94630270

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c1f2fa833503aa5cefb7b0be7202df8e
SHA1 e1d078ec0769a60cf17230f6668153a5987f89fb
SHA256 16a357e9828cf5538ef850d4e2b09486a41c925f17376141cff47247b6c7db89
SHA512 826eb9f30d7446881da6f373d313c6d88f2921340f1bf5360207c5bd79e96ddef77211883415b2c0a8880f6c8b2dcd63dbd920026b2e0d6a8790c8019549cba7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 355c72679c2d42c2de14aca129607ef0
SHA1 b8e5916f36950f1ea4e71cf8526fe45a299a2562
SHA256 34980875cfcee8caae268a55a2a319bc3c968f56b9841118d50e7d946c67e632
SHA512 e58c154eb31ae1f35d55909e730b471c9ba227d175fd69c4f6524a21db62d5b675ed20b75cbda734e342567ab44d342623de01a069779d498c2026dfc5769d05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1855133118f8d8b95ca61e67bf61160c
SHA1 bc2728f1037bdce34bc2d3cdd1d76f2602503927
SHA256 1216e1867fc628530425bf03542b3f47cba6343a1b6b8fa63db0b83cfbce702b
SHA512 16fc603d07d59662a649d4e37ccca3687c5bfcd5131ecb4d6b39b36e2528ef32db9932ab5052a45a56b410847c854614b852be3f1910425a8c4edb9ebac3968e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bfcbcc5370e897bfe62f2e1573dfa19d
SHA1 972a4bc8ffd4270b973c71bdd86273464f66441d
SHA256 b341487ac4ac70a97c73b93366de3062b54db50e722c75bfb103a34052eefcbf
SHA512 079f2a5054d6213641107b14ae2bfb3020436de15fdc2cb442778754205043d17bd475073eeefdc5c565e8cef11cfbe2e3fbeeb2f3e279b9c0e8e89fe701a858

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 aec262d2d98bda36a5feb31b956218aa
SHA1 1f10dff7550192713fa25969d7218df697f5cb25
SHA256 6be349a05650288da23da7f7bf6710fa34f52126c1504f287c5518b9adfcd516
SHA512 c4aba1e474c665dc2aa80826ff36b15443cf81f2af9f361e46fa2c7613d49216f6c49ccb652163daedeb8f2d8d7707aa1ea66416f0e45eb9c4d930beacef7752

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

MD5 34bb463b852a2982f916d9b3fe0ee1de
SHA1 ba90fb924a580ec48de2fe2eb2f2e3763911aa07
SHA256 9b8ca1847f4b15fe3c5073a69193129adfb821fcb695c1acd2472b0b7bc18323
SHA512 ed50bc81e31f7d2de8598d3b8a7569fe378f08cda3e689bb409cc25f9a7100b3f7e0670ddce8063e454b24accfe96287ed54d48c5b9134f5d1e7dfa34cc7e055

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 bfabdad7a7eecbc7be4725227ba1800f
SHA1 57a5af08f05dbf1b05aa2c1acde9e99c69bf6eb4
SHA256 4037133400ea17822eec11dbe7cee374b8c8c31982d3554e58ba0deecf15d159
SHA512 b4be6d20224868a477d92c5dccd5616cc2df51836689493e8072f91c3c005b9c2a1e43d64554713a15ee8625fa0df2ee1ae1adf508aee91bd5f2eb76ef9a6776

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 36d506312a2082d95ef397a5121fb3ba
SHA1 793bbe9e11578592895bb971001df123506a1223
SHA256 4dfe0786c7b5feabcea5a176a75ab4ad8d222a978659ad0c42333b0021e2b25f
SHA512 41f287e8eff5e8d17c0e9833704bb71bee4289e09a65f013ed736f88be5631c65de02a4c10c6c189a8648a1a12955e10c78feaa7d45498e7ec18eeb414e79a19

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 4248b02f9d36bc147a8a25e977705dfa
SHA1 1f2250bbac99fc1fd42537f83e1f20e3ca8adfb0
SHA256 6f68c25cd4403a2de9f73986b93a746f378cee650bc650f346a316c35df8df79
SHA512 666fb6a5e5c4c98cc9514372b013ec5118bbdba3ccabbfb86405b80ca89268aee984eb15161b25fce36c782c065a8e7003c6618b4badbcf22cb9799c1333cca2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 13a777e4c738cf6807b99fe4ff834b03
SHA1 900df7fd1830dea7e2ceffda1b5f2a6ee44be49c
SHA256 ff1a86a0da84603e36ed21edab242afad00bb7490d141091c4a95de9a4324173
SHA512 11ee6f60e12c50197782fad3155a3084d0d9b6d4b38b90b30cc3c3e20793903c239a0753fbdf71f3bf0410b8570bb0d8225711796e93c94e7f9d09a273edef48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 725a171411309c465694073e53a716e3
SHA1 f348de7e144cb75774140557cb43cdcaa35fadac
SHA256 0f249dacfbe1ee925884de78a7e0b3e73d781809971f4513df1e4251aa88189d
SHA512 b5144ca875699515a4978a1133d112550650d46fb34d81d1969440da28bddd56851da8b774d4146da5b4ac8c6404821707f7c52a780dd2fbbd1388f9aad3a51b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 803de8f4f372a3d0ff627e4e053e0ed5
SHA1 80c26f745e9e83a0f92903d8853ba05662f86358
SHA256 bcfd3881c9d3a931fd98d4fdb6b3032a422d4042344193635b2c86d8d07c2bab
SHA512 ae9bea9623a2030bbbe9946d8708480f1149a706be84a6d34711c609b3b871b82d9b48535d0e91deca19612e77439bd3cb0d3bd8d72aca013085f7913f1b3887

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

MD5 425e5e06597174edbbb8ead0dab031ed
SHA1 cfc7a4553b8295b17b2d069c4c6d7e3c7a49db13
SHA256 0ef7754ef54ad56461c912125532b5f5b51e87b04f77c62961c27b3480d56b1a
SHA512 1c893c3aa79b0b9feed8c9a8c6efff0140125e701ef6212b734631c2fc94ebe45caeda92e3521fba0a6661924f84af8c50b45b78a477e96107f3dfce21dc0b66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 c610503d4b2ec4085b449c201969663b
SHA1 a6363a4ebd460fa2316f3dd57b2009eaf63fae9b
SHA256 9f3f7a16e905680400af66e67c01b826dc88502a2ac8f1a900bec565d3347591
SHA512 3b34ec0fac819104532e7f34d60061e4fd99d63eaac8314a96a79405df9149fcfdb5aada29e668e30e7fbb6f4b95082d5b19d1e15b2d4be4320edf248972f05f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 747f60bd6b791dd085bae7a2b7958e38
SHA1 116e0f1b9342b043833530a059aaf3693e2ae70b
SHA256 621baca5b8487bdd39a76a14650baad640b41e23064a274c65b728c6e56103d9
SHA512 a089ddda3de3bb713de297bae7cdd5ac503675103050a0b974d9578d7356d839a34492574f412e7a2505e496a5dedc6390d636995f1642d4c18a9c4a56c0b84f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 607f83f8e157ed4859a79e1175903dd7
SHA1 375e20c6a4a002bfbce64447d1363efc601bb935
SHA256 611024bbf4e01ecb6ba2909a07ea359d26d72c2ee09406a8650c9c615e9ba381
SHA512 65ca494b18a1d1f5ca9aa4a7db7da398bc956b92076264a3651d536c5a95a8188bf16e3198957fd404529e2ad229c9c35bb2011b7829d5c1d3b07e777c47a210

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97b6779e27b7982dfa24716cd498a5ff
SHA1 e914ae7844849337dff55242878ef7d4cdb89950
SHA256 d6d29bc38179cb00b98111806175b9c35fe03c49be1695ed6e2c0f3ef035f60e
SHA512 6b1a1b1d7cf0bcec5e0f0b17408ed2741a514486511402771565f32806f46bbf168bd147ee18361f0beed9d3fac5deaaf6d867d980bb43bcb87a50daaa882a07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 577adedf362c4ae7f421cb13c2db816e
SHA1 fbfe75cf120a1ae5750b87bafc77c553af82834f
SHA256 3dcb7de3a00b2fa6a172702b8a396f0c028e4c5a31c1df2ff14014b8074f27d6
SHA512 dc5a0758693bc97f14ea913421771a8c3174d6c5c335b3a13d668e99319bb43ba97ba4d5d10d059478f2f0a97fe01a515d18189fc00248b6fa5c042663282371

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7a7a86b8e914c3bb61c0dc8f04fb4df8
SHA1 fe65d800d01e34627c467c91b74c85416a71805f
SHA256 4494f0bbcb41dc27d52d0b3d07a1e5322c29fb65215a0d746a5549ab53033938
SHA512 79c16d6938a347de48e9538227a8bb99b9f745635fbef630153ff46ab8c682200e364468201a8c5c3e5ef689e052dc67ec1ddbc5eaad428e04b4da1553c38407

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6dc7a75b5edd0a9af5a869072143c59a
SHA1 789ed8bd10080786709d7af02818b91162201e96
SHA256 6015cb057f614df4da8144a72db20c0f27f5829f942b27f11fbdd81697d91e62
SHA512 b868bc7b72def51d0acb5f0e960b1f52ccabdebcbd6fd955541fa297af7dc40b9784cf3eaed9be7a3e95c342764d8ff2cdf8c5962e4d098c18593f12515b9a34

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6d840a0e26bedb1f343b55969e02ce5c
SHA1 f9c88fd7a9c873dd8d5b3ac6528069541d8ff458
SHA256 7b87a8ee11fe0cc20ae3491cf9abe2964e7d1314ee248851a6119d85b13c8c2a
SHA512 2bb08cecc58e2032e135cda0f4b4fe6a0188bc44756c60ca3e1b3d424aedd45197e908f71a471a2a42999fda5b2c8a7a2a99718832b654e1e4f21ba0597b9e6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 332a7b2f2b7ca050c7e4c1629bcbbba0
SHA1 d0d1bb4300dcf23f66103e473ad48ee398d8b09e
SHA256 928a07d289b4116b70daa15d1d08a98c0a33c227791aa0a2b6f2dfdcf19743bb
SHA512 bd9502a33156e49d72cb485f4c3ea36c162a0e4c6e13cf0178399fa65ec66acb0688ecca76de906b1ef98161389b0d0525dc0309a807b3191ff6a3e8f76aadac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b8bb9527bdab062a57ff3091a54fccc5
SHA1 224a3f84cad900a3e66d91c742762ee372d894be
SHA256 20fb2c7e0672b152f96bd238aa159b381bb1168b699ae264b5ac2c38373d261a
SHA512 18440c72c4ef32e4e681c5dcfbac435dff3b380378ace49a9aa3c70ffda47a13b2c6e96f98ab4a3f0b18159e9fc75ca5672b00eb1a317e324d61ebfaea1271ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d5a0f1866b057edc2fca22a850f56323
SHA1 66f5422d94a2e6c78d4b8f1bf5bf41607486cf9b
SHA256 d7fef0baccf98cb00471ce30f0f9b72dd0b680524bf9bb9029263571a84c35b2
SHA512 8bc41dc15bf68f874137d6c69c910d69a77d8661bc84a1c35a1404040e234d97e1caa58bfe1db10b53cca717c392f6372592a36a439f1f4dd9828ed57b8d5a3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ce62d8d69e0051ff56dba7b65dbc86ea
SHA1 2cceb2fffe68136a9549c63939e4c38dcacf37c2
SHA256 d7250f2e9a75e6fc7dc67639acfea52b9153727dfea880e6f34f38238352cfac
SHA512 8338420d642278f1d13dcec79f1db444524d6f54163e50134a9221aafc93c7d3722f74f34ff43cb51922d5f13a32f057784fe781d9c41034da941a1e664a0a12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

MD5 0269d9365055cdcaf55dbca28cf52be7
SHA1 04be85059a6a02366c7e894ea2487d3ea5a2febd
SHA256 43a2805bcc3ef832cc1db03f509f499dc013294268229a85c9f86cd789e0bf95
SHA512 eb75b11964606d011602c33d251e5b73fae2f2881326d917a14b5b5c5248be513a605cbdb21beee3c514ba8ee187e100f8651abe6c83e27683f3520200f45eb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b79ee6c0146ff62d271c220938355596
SHA1 9e14f81a06518e048451561a5b70584c9fe0fa44
SHA256 965d5cc9ede567e3ff2b2aacc09f0f555dbdaecd6545060d89be7121f65c81ae
SHA512 02b6dfa81fcea42426afc686b558ccbf6df382ff91f9e1ac36f1ec17d2bfef18566f5ad8698de3dc426e54987fa04a1741104985cc218b58982a9f2f3170be1d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f72b0a5e292ff02317da03d53c8f188
SHA1 c532406451d6ea192f0c96e26e7650d11b487409
SHA256 e5ce451551d3b2bc4d350030f701bfcb4d24786bf6c6cba71c41d92ee69d9205
SHA512 5055a8ed1c9349da01f8be5f9fe33575aec3a9a0108ec21f4b28a3c07d3076e8063be23129e0b7bf71248bf2f5ad2aae4e60ac784329106710013e9ca105cfb2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6e7a1164e21e1ceb7a277aabcb76d086
SHA1 304c0fee978a3dff53997b311fd2d9f0d768f380
SHA256 52a0550811554744e20f1f856d82dd0dcac040e4138bf1a1fdc9cea542f201a5
SHA512 db5d6e59eb209a44eb3becc09b920397343d2ad434470288f05382a73de0bd61b37b51a322b65546e41cdcf1e7b79d02f8281aae394795edda63cdff5af373a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4439f3ed912694e6c55e0afd00e83da8
SHA1 9021127e310696218e3842002d112130ff01d981
SHA256 0b15cb0eae43687d16f5c6205a9c24e977985d282d7298867b181cd9b9a4616f
SHA512 efebf0cfedc6db728162e7630fac7f3f1836351507d34e1ceb1a7ef90a33371febfbe6d5872c53c49482e1b58a3a5788db668fa5431dc168a59265cd31313a41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9e1fed459b03b48f20d022566af27cb
SHA1 61f043513f17968ef47e53ed2fc01c20385f1e73
SHA256 16cd6708233a4b8c2822c102c11d4281ca116bb4391bac5209250c89ffd00b98
SHA512 afef98bace774055dd1b0cecf8e5c129873fd8c1de8b606b838cbc7d6f10cd70f6c577756b2c48e78719e5c7fd92cb1dc926bfc8f12aab55b6f12fc2193ef923

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6c340362ed58d2a9162a16374ad95638
SHA1 00b376fc3383c09a22e22a109d9eb494572f75f1
SHA256 1c5e150ca8756457d39a61b4bfecd8210e3caf4917dbddb391a5ea1e22bf38e2
SHA512 3d62474c1fe038c742e100217418ec5e163725a0ff0410ed90f1f976bd0a92e347ab54e37c83171b526a1397fd62a1f637a68e8ece47dbd805b60e3a9519b396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b722d785c0af1f12a55c30d63c0370e6
SHA1 6c5d061e4c39ff501000209e105d0970c53c61b2
SHA256 147e23a96566b36e6193d95d4bf9b132581e78566414bfcf836485fdf351f3d3
SHA512 fb3c0f5304aa8b72e4713e1e812913b2fecee59493f35832902a32f414d1cf341e661548d0a2a8076255131dec235cc8df4fde44901d53e5975de177438707ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d32a699d586c90a480afd6da4f02c60a
SHA1 04ae6d275b668fd474f13c72b7515dbfc75a3d40
SHA256 96c45daf39dc52c13fb8ebc8801f77fd12591700cb643c61465b4b0d4217a2c9
SHA512 fec42a40174b0e3e4abac983618b7c9773b5612b81be13e69813825c7f034d03190821d0609124f0bb64faa6511942f0a538148db206baad49f2bbfcf03d9ce2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 43a4feec5af10ab377d6a401b82655b5
SHA1 235a58179583ce9343114c5549e59317fd8ce275
SHA256 e53f008a1780a07f5330f64a62195c34bfcec571de12a42cf51346ea36a71cdc
SHA512 a48f1e3ee3380c522b341b5b4102b121a6529de518092b91f570ee9aa495a906fa3beae9b21033fc497575a844e3fe0fbce1fea3b0a6b4f94e96beefaaff8e24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0e9af41e011ef29358a380b88129fe79
SHA1 8c5d257e16b7623d4f00f3b2424289610c46fbe8
SHA256 ee4b6b6c8020902b6d57029adc36a0c46863d16d8068cf188a922fbda0ce4e32
SHA512 493ad3c987f4e1ac04fa1aa683b25cc1ae380368a5f2e21e523abe231dfb31f22254e066a2025468633eebbe2c628f7a96b53f3af7c0c12292b8f233cb9a0377

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1ce9a3b7accfcd7c7e558a4590ddc436
SHA1 44fce320a18c862a3d75d3d64e25497f9e253a58
SHA256 4d5af486ace80a918cbf8fea18e90b28e6ce723c7baf68572a3fbd4ce8791150
SHA512 6152cd8c79beb40ab71542408ecdbddf4939da6036958f6d483bdc88b00bf060cef0c4997ce1d3d7624cfe1d25f93c657950058e9697db65052d24dc0fa96f67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c5d0e622250164320ab31f6e1199484b
SHA1 5322041bc87e99464db4b8a31c438201f2e55221
SHA256 464ebae92efc859da6acbaf6e68a957d5e2ffff9f71e87b1a45baaee0caee449
SHA512 9eb8c8739f8d5da8c1fe02b77d3a800915f5872df10608cdffc1108f67b05638c32275d5bbdabb7bd8acbb737c9e067b123617da1a0087ebb93aea166c6694d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e419bae6bbde34d0659ee7c8cd0a4ab8
SHA1 ae709ce7a9a6ce60da00db78ed09ba003e0619da
SHA256 75be98cdd4fcac785c1b3321387a0604b3fb2f7d20c0a04a22a78d6d2d624b23
SHA512 f6f99024cdc9413f7e5e0325825dcde42abc39e43130b1a3c5778fd2278d1b2f857f78473ab44ded5ce124b77bf342775b032dc1bc46c106f7c8c8594f79f3a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 40c8b580b22a4c6560cbf2c62e0de6cf
SHA1 ac651adeb8a5f363c6bb03a6ef568d6c426eefce
SHA256 db13e6dace03501e74cead2384a5e3046cf74d87818f77cc8a0b4dd6c17bbe09
SHA512 cb17c2f1ed948dd02f852c7cc50bcb783c33092b18956bd22b6a7c468348528acc24bcc0fa06d77de3c762ad118a685544ea1bf930794df25fa93880b88c15ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0f8e087dc34199e4eb0a051ff08b3877
SHA1 61c5962d2d124121fb43fc9ccc5eeaf17a25f9c4
SHA256 f56432b0655b8e47bedd0d525d027cc2ae5093b9342ec6c412e1c40c6e97f866
SHA512 cf55d144a9c20e0cf77e781b8fcbff2fcb85c8e85dd7223bbe8b6193bc2ecd3779471088144738d495f2505cc72ddac8b190de93201797c86326388f1df553a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e72c7e6bdf3209da07b83631b2901691
SHA1 7e48b56780cbd1dcbe46f299f4d3e64881eaa0f1
SHA256 c6ea65737e00604a255f5d8b73cdb91d4521ce31759ec6927131fb378cafb719
SHA512 8dc74ba26d5002f6f7322d38174708f051a88a26904691771d1c366c36215fc170f356138ab8d8b23098c1b917df17a071037c45a080b181a8117a1329531454

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ed1ad6b97a584269e720052142f2c1cb
SHA1 bd6403cedf5d06863b5ba0787a8fdad377128f6e
SHA256 960604155203a201242be8abb0ea2176e58b3c315e9cb51f35821cd79182e886
SHA512 f07cd0df373bfaa33b0c3eb66b7decb9a013857ae5fb2a42325f4d8e6b62d3f1f833a62c4885b3e12c8eaeb86f00eecf9d0320efd758439bc736a5854be16dd3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ea

MD5 de8e54b71cc518e24a35423d45dc695f
SHA1 e79b9d742f170123a87c537c879dfaccce6c7027
SHA256 7be4e292710619ba43a67f792aa1898a3738c951b5a891cd8af7572417b225c5
SHA512 438aef73f76860fccc098361435aabe3659bedb581d33fdbad82f60b468430e850b2796e409c87d09e3b1c172dadffa6c1626752378a6ea0a4b51837a4c6c224

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ad728f988ed85e09085bf950a0fee63a
SHA1 34da31560e0600c9a740d69bb70f9ea0760acbbb
SHA256 acae645b17ebd994d76459e7f3946a094c2fdb779fffa4ef19f3ac2fd954e902
SHA512 ce3221c5adb3cdb61814cceede812ee69348c64cdb5828465bbd5ffbcc2780e29747305ecc97b6cf650c0ac638d434e669f10ddabe129c14ee4a0ba3cb60acab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 979b8faa93d4170d31273d647d79a8f7
SHA1 bf040e2a15bde8e404f6159a2cc5aec4fc9b1dbf
SHA256 cda553ec509f48ad50b3aba8e88d0d1d25b53efe52debbed95e73b0248e71d3a
SHA512 9ed21c91b5731e1d1905b6c850c6bad82dbbaf5c1f34e80f538904da6730d3b8d067eeafb49f17a4bb1a1824ce19bf40c2520921ecd96a668f57756450ef416b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 8b877d4c6649de06e2d8e9e9f3380cee
SHA1 7b7b23dd0857432e9def4dd756cb0164b669f8a5
SHA256 a2a5231f2fa5fc5f628b65de0569024e7c40107eb30163ea1804d7490f7da4ee
SHA512 10bebdb41fe36ff3df9f741c9665461017ac2658c13237606a5a53f86352c0f8479de2a99bf6b51d0b7c2f625e99c452dfcde4a384e2fc169f01dab531ad7c5d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe644fe6.TMP

MD5 0271fcbf2e3b874372f1e30cd78b16f8
SHA1 f53f9b62cac81fee2bd8c2501642b7ffc81969a6
SHA256 68042389d7921d23a147fc9c8480d818a2a02b54ed872eb86d7a4be4012b888d
SHA512 62744db8a5092f862e07242926d98406487b8152c541a70cc282347d77bb6dcbcd61a99cf1e0f31a2a7028a94e73775ed972ebb0da75903a991173097a689a93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\6acd1e69-6b10-4c6d-9b70-bd2965ebf539\index-dir\the-real-index~RFe64511e.TMP

MD5 4a45e274296e4513a26426b4cb5a7e3f
SHA1 e2874992fa7b9c1b3c062f992279c34453b6acdf
SHA256 f0fae9173bb2da98484060784a6063dc2d8d025cbf9af044d887317706c59bfe
SHA512 edccd51642defcb20ce195ea6ec2ec9854883a786e682b904f392927ff210f9ded601343997a3a29224aeaf96890d2b1a318d2d089a7879757f73922462d11f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\6acd1e69-6b10-4c6d-9b70-bd2965ebf539\index-dir\the-real-index

MD5 9650295711e9907bf2af790bc57397e9
SHA1 abfa560a2dce42fb20ff23efe6573f2dec0123b4
SHA256 ad28c9831f1f3756598597a67264b31f383d9365e895d729bb763c887d625ab0
SHA512 fec51d5de2f7a8ed50b382b544ef6a64e2491d0f1a9e2b89f954c0ee6d19e6b674d03a04ccb271e626af29fd9df22090c3bf8158a3d6229967fd08ad67d30a5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\index.txt

MD5 21d0554bf30c95fa8cf43d5ddaee3583
SHA1 b9a2c4c2dfa7a2fda663771a2d8c90df4a10d0f6
SHA256 212b5a132491c6c4d5f4dae7130baaf6c364a8ad877afd9a31abdab69936d13e
SHA512 fbebbdb0c859d336f1eb70d1e7c839a7eac745053f343077304b7c296097b9e707990e2dd61aa32e51051005feebd397f6aab7c9bbad6bfd75ce63b6b4b5e53f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\index.txt

MD5 8ab1d182accc57aa0d227b559afb5250
SHA1 d73ad5dcad0847077933aaa064437409f475b6db
SHA256 e8f525c2a36ff903aa57ae6d04d54da798b361091c89f03159f11fc18bb128b3
SHA512 ab07cbe5d1c112218fa828d879681d5b6977471f43e8ad26c51fdd77e54ee71aa27a49dae3b9d29dee9dec0a11b65730b66242c14db1c3f3a076612e10fcfb72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 886fa3c5e639f67172f1a7e1d63476d7
SHA1 01ebda4da3da609f5086a0f483766512340c94a5
SHA256 fcb74ac0872c761dee4b0678c52467f117ed9d8b4c7cc4978facd91445ee93da
SHA512 67f5947499acbdbbe3b3a9bf6663e037ac1802452eb98a1829e6c5d6760e65a4d0a8874ca557f5fa82a498be237fdebaddc5abdf488352516f80655c8175ac9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

MD5 c73876307a1a4d3588ea4859a7fb5a7e
SHA1 fc01f10afed840890afe8e4cf5e80c7539d97e27
SHA256 dc25f581fb4155eab9ccec73714c54ebba6364dd11228031ff1c02432ffd2b55
SHA512 1103e6e3510c4bb19cd34e619f4998277ad23c5db2e2f719d50794d75654e93f48548f2fdea8c9325e6df4061658cfc8216bd6afbf3453a4ed5f7ef03b1f962c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cfd41618f09654314560be062e939838
SHA1 a96d22a9690dd2df16131b44932b3eadf0b28dbe
SHA256 0096047c730133b12d93165693c01ccb21c29511e5ddea2d0203bcfbe1dd908d
SHA512 52ccc2e95aab6a0a19158b711bf42dfd8c1bbf079b2e5f4434e0a39c0cd496d8dc7fa2a2799d386eb2957777e6b3f022493534a3f39e667e1d5f81ecce430fd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2c22d38ebf971a3d387f40d19b0b7a27
SHA1 6b6371fc0e6ec5c56271c3f71fb2f3c398f1a9ed
SHA256 7b3e23a36d2cd3494d12c164e02e79c5d2da82ec6ab1f6686e4204f28d2d14bd
SHA512 7200631e1334c96fba31ab2f73eabddcef1854c1260a57223cd9ca2a5afab24ed4318521229dff7e27df899d75f9a05ee3df72056ef2f42baa427c45943d7206

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c89e95247ab2bd7d4213018c4a5d1e6a
SHA1 3158e6c5b1209c113041383d89810941033f3ea2
SHA256 a260b849a71328846e1cf846af1ee1661915778d1973756aeed81d1d808c8c79
SHA512 bc0cd8b82b075ae1289b30254fb3c8f24cf76507f326b2911bf8faceb6b8eb54956e8670fbc32094b2a70dca123861df9d9691600e29217585431e7154b3005b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2801ef3c-002a-48cd-9974-0ab6366d20df.tmp

MD5 e8967bedc6c0161e1f837d3236746d46
SHA1 6d7799ef3e2e966aad8ed917f0081207e603dca1
SHA256 3134afc7dfe9b5feea684e6752eb96a764f59af38ac68ba2b05b926447a1c3e5
SHA512 590a6fd23ebfde7e38174bcd3402f6538fb2ff3b77e10750e2ef1654b2dd97a54742ed6e2d23ce6ee4d424cee243859e13abf05aa45a43856a868cf04ef1002f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 30800105b45f64219658ebdb3fcedfa9
SHA1 13273b4fb75a47d6bec781012f856bbee6993db4
SHA256 cbfc8e4e5532b6ee54af5c7dcb0ddff9a20c76058a2c9efd7aee24ec723b20eb
SHA512 828977dd567af3b6316744ba97892aa947b1a2cd8d94f1e9975d27818dc2e52582bba699cba38c939553f3d0a26213f9b8ac1a12b653fef8fce481a93aa5f4ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 078aa1678046d1a1210e29838f50f712
SHA1 6d19faa61b41fc701b319785d1f3bd8908a55648
SHA256 81625c1e0e12e61b018d3eee151f100178a7cf6350f8fb31bd15df301fc548cb
SHA512 2b4959ef6c9fadf61c1ee9fe4ca035b9f14b4f3b935a816fae0e766208084dff3569238f5b0382414a28be1d17cafed8247cf9f4a52177dfdffd5926557d2258

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 23665cdec724c5d1ad54ae74ce938858
SHA1 2affe45b4432cb49aec0248241dc606754e94d54
SHA256 91a00568c2d36373184152685aaf640bee12f949f8281b1ffa8b60fcdec225b6
SHA512 59ccef16d3a886b7f410f42664c3a4a9d28781f4e5c686e36b2548b10b92059be6af9ee70ed5ed3bbe341344abd4c18bc74f6802a7ccc5a858123f14d26ac389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 52567050d25201871653282adb956a06
SHA1 91c9a437ef7b0d09b066fa834ee6ba3b8b781722
SHA256 e8f25b179e52386e2a773801fb0f9db0ab43cd61b59d93898691375389235619
SHA512 4f712b4e8d7fb91e8ba155bd9909d92f6512ccee8249a2738c83b11a360b57e3d4c8e5909b28f619eaa3c5f8f37b71cc1ae7612c80d4b9a72e9532495f5030c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 79c2e52d8789622946100b6366a574ac
SHA1 3d0b382f86a799c5d021f5802e3b84b4a46b6dd5
SHA256 b342a5a4005532597f22ee65bf23dab2a02f6de0433806a1e7693ee71f47b184
SHA512 7ddaad31b99b278254705149502a554faaf85a802585c6e320aee4f001648efe0533c4d9b1455882f8273af0c15bee480ef04885fe639d6ea5c0df4e869da921

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3eecc586fa559de27b7012819a3ed3e1
SHA1 b21721f14e9715b05e2c28db6097e22e7dc57c6d
SHA256 ec9d8c4b6ad52e13a8d5dfea4f5490abcd9f275d88a08bd48319480848e781b8
SHA512 9e60796199c9cb0e54b22c13aa8275bab6dea272fc4af9a2afa9e992fe9a76ff147fa33fc7d3f0c47021a6e0f3cf317b3bb12cd149b8a265681c124bddf5a91e