Malware Analysis Report

2024-09-11 09:18

Sample ID 240617-wfmcpasbrp
Target builder.exe
SHA256 6fbb1c25814dd749fb423bc4f9bca99919030278a27ca09b9f997b3ef84d3c1d
Tags
discordrat persistence rat rootkit stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

6fbb1c25814dd749fb423bc4f9bca99919030278a27ca09b9f997b3ef84d3c1d

Threat Level: Known bad

The file builder.exe was found to be: Known bad.

Malicious Activity Summary

discordrat persistence rat rootkit stealer

Discord RAT

Discordrat family

Downloads MZ/PE file

Legitimate hosting services abused for malware hosting/C2

Unsigned PE

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Persistence
TA0003
Privilege Escalation
TA0004
Defense Evasion
TA0005
Credential Access
TA0006
Discovery
TA0007
System Information Discovery
T1082
Query Registry
T1012
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-06-17 17:51

Signatures

Discordrat family

discordrat

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-17 17:51

Reported

2024-06-17 17:54

Platform

win7-20231129-en

Max time kernel

121s

Max time network

122s

Command Line

"C:\Users\Admin\AppData\Local\Temp\builder.exe"

Signatures

Discord RAT

stealer rootkit rat persistence discordrat

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2180 wrote to memory of 1692 N/A C:\Users\Admin\AppData\Local\Temp\builder.exe C:\Windows\system32\WerFault.exe
PID 2180 wrote to memory of 1692 N/A C:\Users\Admin\AppData\Local\Temp\builder.exe C:\Windows\system32\WerFault.exe
PID 2180 wrote to memory of 1692 N/A C:\Users\Admin\AppData\Local\Temp\builder.exe C:\Windows\system32\WerFault.exe

Processes

C:\Users\Admin\AppData\Local\Temp\builder.exe

"C:\Users\Admin\AppData\Local\Temp\builder.exe"

C:\Windows\system32\WerFault.exe

C:\Windows\system32\WerFault.exe -u -p 2180 -s 596

Network

N/A

Files

memory/2180-0-0x000007FEF5A83000-0x000007FEF5A84000-memory.dmp

memory/2180-1-0x000000013F070000-0x000000013F088000-memory.dmp

memory/2180-2-0x000007FEF5A80000-0x000007FEF646C000-memory.dmp

memory/2180-3-0x000007FEF5A83000-0x000007FEF5A84000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-17 17:51

Reported

2024-06-17 17:54

Platform

win10v2004-20240611-en

Max time kernel

140s

Max time network

149s

Command Line

"C:\Users\Admin\AppData\Local\Temp\builder.exe"

Signatures

Discord RAT

stealer rootkit rat persistence discordrat

Downloads MZ/PE file

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\builder.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1844 wrote to memory of 1364 N/A C:\Users\Admin\AppData\Local\Temp\builder.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1844 wrote to memory of 1364 N/A C:\Users\Admin\AppData\Local\Temp\builder.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 4596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 4596 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 1248 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 4324 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 4324 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1364 wrote to memory of 912 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Users\Admin\AppData\Local\Temp\builder.exe

"C:\Users\Admin\AppData\Local\Temp\builder.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5172 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5172 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6204 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0xd8,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x38,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7544 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.pornhub.com/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd087746f8,0x7ffd08774708,0x7ffd08774718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x514 0x4ec

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,450684037611138913,7388658173396374918,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5056 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.130.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 g.bing.com udp
US 8.8.8.8:53 discord.com udp
US 13.107.21.237:443 g.bing.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 234.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 232.138.159.162.in-addr.arpa udp
US 8.8.8.8:53 geolocation-db.com udp
DE 159.89.102.253:443 geolocation-db.com tcp
BE 88.221.83.227:443 www.bing.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 152.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 227.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 253.102.89.159.in-addr.arpa udp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 www.pornhub.com udp
US 66.254.114.41:80 www.pornhub.com tcp
US 66.254.114.41:80 www.pornhub.com tcp
US 66.254.114.41:443 www.pornhub.com tcp
US 8.8.8.8:53 static.trafficjunky.com udp
US 8.8.8.8:53 ei.phncdn.com udp
GB 64.210.156.21:443 ei.phncdn.com tcp
GB 64.210.156.21:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
GB 64.210.156.22:443 ei.phncdn.com tcp
US 8.8.8.8:53 41.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 138.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 media.trafficjunky.net udp
US 8.8.8.8:53 prvc.io udp
US 8.8.8.8:53 cdn1-smallimg.phncdn.com udp
US 66.254.114.156:443 cdn1-smallimg.phncdn.com tcp
GB 64.210.156.20:443 media.trafficjunky.net tcp
GB 64.210.156.20:443 media.trafficjunky.net tcp
GB 64.210.156.22:443 media.trafficjunky.net tcp
US 8.8.8.8:53 21.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 22.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 20.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 156.114.254.66.in-addr.arpa udp
US 172.67.177.254:443 prvc.io tcp
US 8.8.8.8:53 ss.phncdn.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 ht-cdn.trafficjunky.net udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 storage.googleapis.com udp
GB 142.250.179.251:443 storage.googleapis.com tcp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 254.177.67.172.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 251.179.250.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
DE 159.89.102.253:443 geolocation-db.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
GB 64.210.156.22:443 ht-cdn.trafficjunky.net tcp
US 162.159.138.232:443 discord.com tcp
GB 64.210.156.22:443 ht-cdn.trafficjunky.net tcp
GB 64.210.156.22:443 ht-cdn.trafficjunky.net tcp
GB 64.210.156.22:443 ht-cdn.trafficjunky.net tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 64.210.156.20:443 ht-cdn.trafficjunky.net tcp
US 162.159.138.232:443 discord.com tcp
GB 64.210.156.20:443 ht-cdn.trafficjunky.net tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 a.adtng.com udp
US 66.254.114.171:443 a.adtng.com tcp
US 66.254.114.171:443 a.adtng.com tcp
US 8.8.8.8:53 ht-cdn2.adtng.com udp
US 8.8.8.8:53 hw-cdn2.adtng.com udp
GB 64.210.156.20:443 ht-cdn2.adtng.com tcp
GB 64.210.156.20:443 ht-cdn2.adtng.com tcp
GB 64.210.156.6:443 hw-cdn2.adtng.com tcp
GB 64.210.156.6:443 hw-cdn2.adtng.com tcp
US 8.8.8.8:53 171.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 6.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 eg-cdn.trafficjunky.net udp
PL 93.184.223.43:443 eg-cdn.trafficjunky.net tcp
US 8.8.8.8:53 101.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 43.223.184.93.in-addr.arpa udp
US 8.8.8.8:53 ads.trafficjunky.net udp
US 66.254.114.154:443 ads.trafficjunky.net tcp
US 8.8.8.8:53 hw-cdn2.trafficjunky.net udp
US 8.8.8.8:53 ht-cdn2.trafficjunky.net udp
GB 64.210.156.3:443 hw-cdn2.trafficjunky.net tcp
US 8.8.8.8:53 154.114.254.66.in-addr.arpa udp
US 8.8.8.8:53 3.156.210.64.in-addr.arpa udp
US 8.8.8.8:53 ei.phprcdn.com udp
GB 64.210.156.22:443 ei.phprcdn.com tcp
GB 64.210.156.22:443 ei.phprcdn.com tcp
GB 64.210.156.22:443 ei.phprcdn.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 8.8.8.8:53 203.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp
US 162.159.138.232:443 discord.com tcp

Files

memory/1844-0-0x000001F558E20000-0x000001F558E38000-memory.dmp

memory/1844-1-0x00007FFCF9A73000-0x00007FFCF9A75000-memory.dmp

memory/1844-2-0x000001F5734F0000-0x000001F5736B2000-memory.dmp

memory/1844-3-0x00007FFCF9A70000-0x00007FFCFA531000-memory.dmp

memory/1844-4-0x000001F573D30000-0x000001F574258000-memory.dmp

memory/1844-5-0x000001F573800000-0x000001F5739A9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 56067634f68231081c4bd5bdbfcc202f
SHA1 5582776da6ffc75bb0973840fc3d15598bc09eb1
SHA256 8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4
SHA512 c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

\??\pipe\LOCAL\crashpad_1364_QZXMEOLCFMVAYXRY

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 81e892ca5c5683efdf9135fe0f2adb15
SHA1 39159b30226d98a465ece1da28dc87088b20ecad
SHA256 830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17
SHA512 c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8f68f11fa22e49693d0281be21330ae3
SHA1 99e38de9484da5d671aeab382c781d9cb0a46bbc
SHA256 ed7f31059d3110ecfc45c869f62949dab704a0ccd98386d6e594e879a97dde43
SHA512 7a3455d317bb2a860b3caf5df062b0a26071fcd123867d5ed827f6d4197921c7c9dd17079f78ae3ac408a7472feca33706b16668393f7506d9add6eb4190514d

memory/1844-59-0x00007FFCF9A73000-0x00007FFCF9A75000-memory.dmp

memory/1844-135-0x00007FFCF9A70000-0x00007FFCFA531000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8dc547ca70df608997c3c1041bbc587e
SHA1 fafc9d8addf1b1363515e7be21d17981a79dcd62
SHA256 e4461c1b33989c0fc9da6cf043320fb45f332f20f1ae60b876a5ce155eb07c80
SHA512 16dd30b2726e692b4e334ac768709048dbb5c63947842e64e9b73b7cb3bb0cec7e79353a7aff042deb594d92adc253933fa59bcfcb0938d09e9237a6c58a8cd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d08749ea68b5e49d5bf43582a51a4e0c
SHA1 db37d736ced86933fe7b3e2252beaf83fc688907
SHA256 c5602c82f2d754ce3c7cb0cb037294d6ff279ae2d5c41b0dd0a54eae57ea211a
SHA512 50fe319a067d63abdf01b16e72118d1b99d5f264e19e6583c0d30f523d73110a9fac25db894685d79af40d7e9e4dc0f10657ef7bb9e84475a6103aecdaea2eea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ac2f4205c15f6eae5ceab34049d41849
SHA1 b95aba53c603f95c782e12d1880ddca55ef4e433
SHA256 3f40e3d9af47d5bbbdbdfc5907688193367164e0c3e0930366349713a76601d5
SHA512 20fb100b722702c473ed3a0c9630f28465c0998a10e31cb0f7c57f2e3450df6dfcfcd46507e93bf0c45f8093293d2aeb738085636153a178e5d512bf4c12145b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 c04ddb412ab72794b36d2cf04be5c28a
SHA1 9ce58af2b103232bf8f212a36735248fae33b986
SHA256 ac7d801b67ae39f017a18e3e0bf745256c9d7c9db79786a7636745516a668689
SHA512 d03406976416c885d16e0218dc94f01b245724d1af4efb791f9b3ad6c6e153f111a1d0d83a0369eced6a24c385b9372146c632211ae22180342bbd05d5eb657c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57d801.TMP

MD5 099537429c8a0b731dbb3a1415f7e617
SHA1 d0002f58268c2cf3f103c0dc58a4bc9542cecb11
SHA256 a57d264cf08f2345947cdd9de9e906d7b9de2ab4052c505b32cf110d9509b8f2
SHA512 bca037492c135dd663c44a4e954556d12efdd42757030abc5fdebfd359fe6edc9fb3b75aa2d6f8754e497ac113616a46c2fc86c9576d1b58dda28e8608e449be

memory/1844-194-0x000001F55AAA0000-0x000001F55AAAE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 75f1d5724eddb6c481e2e87727c0a19d
SHA1 3cfe079018e25b2646f23e0744bc5af2114ee256
SHA256 751f9ea75e28033193df30031bf3d33e0553e1644ccbaecb26fe7d3bda21b78c
SHA512 a52fade9a438e7896f12afb5b8cccf05ab2cdd71dcc8683ba80001e74800d0c6a6d446d162e75eff573ccfc7106c1beb6f91bdd41753b81a6f5b7510c7c36b4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 4045892353177ba19bbb34bdd5b3c9d5
SHA1 e2af8dfe39c196bb8848e435708f65d18e4fce58
SHA256 38078ab6d3eb1389812ed15c225f95b82898d33efabe3476c3989e976e952810
SHA512 2796c224883bcb51746c0f752f79b185016ea08f68c161249c20a76de88706b69d43cfba5a981e513a85ec3041341f8ac2f2d934ec90c54a28c8f3103f6597c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 c3bbd12a92cab698daacf43ad8e6f974
SHA1 e4b8f8040b2eed8ecd664f78ff47b6a201e598cd
SHA256 837f02e378c5e7aac4d640116cab10236b666f3d9d6b1901bd3537f6a1e38898
SHA512 c6cbb1b75663579b9636492d61db30e7eea1d0cac3dbe39bb65c77bb9762b5dee477ebba14a42cbaa95e3fad29d2d020e8d547ab1baae4cfee5a150c0914c682

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c8799e3485373888_0

MD5 5c6017d4472e88298de6bb785789a384
SHA1 fb95e40dfe5f979dec113d4d453a609a902db1e3
SHA256 7383d2d7a6ac7e4c6984b8bfd6e3f2e2cda822c5360e3c61a05c65d081c974cb
SHA512 b40e1d067ca0dd550786719f0acedb424e33afff2e8ef598329afc770cc080517d5b80de54fa0257ba9009c3479d398885e5fff63510bb779e413409f27253e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a10a720a1bb4ca6a_0

MD5 01eadd8077f0984a08b6ac25e8d20bab
SHA1 42e455a44749c05b590ad4d2e139c78b27e2de8a
SHA256 99ee8b28a192fdedf9c10094f42f48472bb4d1346b0f9749739667a890aae608
SHA512 ee94b0d8a68e8b93081775e8ba969f1623123ddf2bcda37c6ee243202787fd671667477073dc7c8f1af391315ad10d48a3a6f141983b6ddd68b3bad80cdc1805

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5ca945c3248d1dab_0

MD5 fb5e584f98ac9b31f432b1fd09974035
SHA1 21d21f4980dd3eaecacbea29a969c1f3ffe8afd7
SHA256 3e5c035d3d1b0045e92562451e6f4e65b7ad9ffb3e8f67c635663b3afad372c8
SHA512 83e7fc8cfc3a6b08f201e01a4fa344fb5089a5507a79dc652af755e5813b55667b820fc7b3c6508ef2543b8dc10ed3556a97c09fe21ae949244382e47db2dfdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\794a28efef760392_0

MD5 354a9be04f1b72f6d33a9f8fe7c4c393
SHA1 a9edba8de74fba15a78988227b7cccc01fcbff86
SHA256 a55a59996415ec94ea128e92fb2fb9f690605028af36ed19a22265308c6033ff
SHA512 d663dc1ee42bc7d11ed6d17f9fb1b659771e0f6fbad39e8c955fb4390f3fe9e1607c1554d3ed20f2e121bbdef1daadc368b08bfe0c9e337f82f3824a55a5f9da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3656bf9409cb2da_0

MD5 d5e9789e43a7e5225d360bf78907bb72
SHA1 74092fecd180416cd375c254cebb9662783f9413
SHA256 e6c1141f983ab62c9060775595f37f6821daa815fa9327a0846eee74e2c59000
SHA512 9352fcef5dd6b3dfb21bcae3b0909def03b90137fc3060e72a9ca3f19020d20babf356b3066f10ff7c180ff67e8fa441e480a83e4d5f0a6854149310f71fe998

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed6517829ce84926_0

MD5 e4300c811c66bf00bc125ff487e8391f
SHA1 c5acc688d4a22e73a64d0a53891ae482dbd1f1a2
SHA256 2a497e084e0f0100690a37a1c744ae189b25b7fa6ed22e4e0594828c680c2057
SHA512 8cd38ba99335f2a57c6b5922989d16b369dde8ab8beec189e69a3564ce4eb115bda3dbf1a455b9dbf77874bd9a57bd65b162461f6d57c39c012634796b98cd7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 b428010d1e63888d7dc91920c2135e24
SHA1 7d88aa246f53abf5ad5bb1cbdf940c5bf2daac50
SHA256 7abd2b3f2ce7c0eea015a4168b6818ad555db2202abb0514d5fa082d713e9080
SHA512 cbdfdf274b143d8569aabdd8b190e5d484781f282afca5f4342faee3172b741324ad7cce992be0297430e3be1062fa6f9a8a156a2452f5881db52a8e49e443f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 7f8a4f124f314e0f1a6d26a2ad2606f9
SHA1 b10bfb19db2d40eb4ac17735c385493e7dd04c48
SHA256 7bb5dd5ba2a9a34556880c1a064625644803bc44e86914e0185ba6004e917676
SHA512 217479bdba2eff0c329faba1f3c90cb287a716d50c1270617231efd40fc554ff9867875582222dbe0120d0f0325730fa4e43ba76683faea1cb8868e10e0f13f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 4b45bf8d765a704e2caa4bb095daca76
SHA1 0d7b45de129a91f18d9afa92798c67e904b89a76
SHA256 ae143afa703e92836cee7188fa3abc52ee84af45bf3b24f2a9bf2fad8575d3e9
SHA512 ccb712749d496ff941ac8c026fe854e44234b2111d7683cba9de9aa4473f7b241597e572a9ef9490be68cfd353b3deebcd49af2989729e9e936a8a70c9e0ab98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 1869943d94708af350f94b1298dde82c
SHA1 7d9c8660a4c8db3f1043747295fc5bb56d0febb7
SHA256 89174ea5b02f393214e972a7644738ecbfd21aaad2736bb1cf89559b067215a2
SHA512 3344a3d419da0b703834afbfd3c10ad6f916f6e80bfd427b6fdc4ffc993787ae397134d5ae92118989f5fa7c2f1574bf90434dff5d7fc2209060f105af336aa8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2ec4b2227e2a0d505733d781cf8614cc
SHA1 0686f768ece386f6a05608d70306ab94d35a9bf5
SHA256 8ffc3cc16c11aceb86cefb14a9c41a45c5b094d4725d48a75cfd0640e5b57561
SHA512 5b2c007b858a6ac83501ecec6559d5f578a8027f815972ece55c46febff9f65912b729d5cf7af1825299e8138d7fb36f75d2d3673281c1810301f4ddff7691c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f878c7420b45bb8_0

MD5 c3b1e32d5f45149e8548e1aee9f8fcfd
SHA1 38b3b5bb88ef32bef185474c17542fb19554a6bb
SHA256 b0fadc094372280811de1d66f39bed6ce9bb571cca2c9d8438139daac3cc5bc4
SHA512 7913f76ddd848c50342c201411bfea2c806163f80eeebeada58afdac5ba01881d93f70010268c9477acd20c7b7eef6acb5fdc7182939c48b7fa8a2e1aec82d26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d9b34c1234d3b532_0

MD5 ac49a8ce544ae8dd410e5177fc28db27
SHA1 31ba2d869e797f046d45856c46ab9c977675e974
SHA256 cd2a0139e5000c50e354ec96cbc76eea58ffb1609e3d56e1a46e63d44d804d2f
SHA512 db4eea89a723569f0f6577853fb21e5fb148f056e303b0694398c2f8dc92de760d2016c00a863b6cf77e3f2de8573056631c7f5859840d13632de2ef8ebf9576

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d3c3fb446694839_0

MD5 2ebbfcb805f7b22f741259418a2eb09b
SHA1 ade018165b99f544dae71d5f74058cd6cbe65771
SHA256 2246991e43a62df19b534e28c9832e22ac46b20db7074f6895b2c8b8015d44f5
SHA512 c0029b835746f3e72e07a497084d064f515fe2109c4f70c31ad004659537d28ea21f102751e301220f10c7597f19fb9cb83aaa4aac971fe82fe2ee6aa7ff5ed0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9843211dc0adf611_0

MD5 fe09865418023ac17ec3edd28a287405
SHA1 6ca2b99faaf0c13192106bfbca8d0e52d66b0fa7
SHA256 b2fca4d842bb5c1ab698754c6ceb52491a557c523065ee79c9904fe1bec6171c
SHA512 7b0ca5e0132187af266740c7d43411b0074cf3efe7ce742eb1bfac5629e220e7365d0d2dd140b9df12bb01a6319f2b5549e9a9d5dd81512902a57b96368bc1b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e5e19d43a55c7f5c_0

MD5 6598b5142081b3f91d8b777a7b257f72
SHA1 57c3d5f28ed666b5c153c02c57ce31114ceccdcd
SHA256 3a2a2f6284cf53645cc7b2fc4505cfb8a301d430bdcae32074b2ef66371647ca
SHA512 1eced09d0549d34099e5eefa46151235b1afe03da6774a1a77abd68d810b391accb469a73e5a19ef35b86f8ec390e6e948a0d1f19515ad73a78878256a23c0cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\96f1c8632c50351d_0

MD5 19630712c8bd4b00ba7454b6b177f8e7
SHA1 d4264926d6fbf6c21bf4791c02f1cd693bafa0c1
SHA256 ca3e704f03b9830f35474122d7411ebd949ac77269aaee4b6e2e1c108c960915
SHA512 6334c9dc4b39daebd647958e6bd534e0ad13e9a973f565cdb4bce6c2058256e3ff3c0f061f3d1b83c6a57a7befb96893dd3aaad41b23c82f4725285fb13316e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\abd5deec87476762_0

MD5 50013f13900b4801b4780a7430795cdb
SHA1 4f2fb66ece8f7ee52a36989ee5e77ea654625d40
SHA256 4935cbdf146952eb8bd6d7955c71ecf42cfdfc2b504f7d37e0de8f7f7bbf8af8
SHA512 bce1c2783d5a303853e8ec035afbe6753f2059d30e49b09f9d7534e6db24093ac791fc4cf0c1f214e969704949643da808e67cb5ef02d9ce33932de3d9ce33d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\783ae520453e395e_0

MD5 31ab358b0a50f1f79158e42d06980131
SHA1 7ee4ad13433c75f82887b70a29e66783dcd28ec6
SHA256 28d71637898e022f4253d45fbf7878728b4c53b34a13dd727663a64de332a06d
SHA512 98d1f3ff2d9b72df718131bec7a555f7537d5246acc947cd679f3382df0a1c808b46dae6ed76dd1507c76c9c6f2a809c77ab7878012d873800a650fa374203ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 7784f6e7a5daa081dd4ece5c54d67e2d
SHA1 af364cf929dfec00a33839e436d8dc57a49e7915
SHA256 7efbe3daec13b20f8fec63ec66ca52f3daad42800863a447636efa922f936a67
SHA512 bac667153ce442dbf25f7558948a0a11f4ba6b067ba9a1ca9d487e30da1138d4a95e84e42df6e66c30980d9d1e3d4887b46055b174c7cd123d6b0743e3dbd905

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 cf776b128a74f76a26e70ddd68b46b61
SHA1 24c15fb603cd4028483a5efb1aecb5a78b004a97
SHA256 346cbe6774bf3bf9f3a5aacf287f859103045b0dcd4a32839b00be9f391259fc
SHA512 20751f34d1a3a63e580581d36902928c7780dde70fafa75b87e406965f2dde501b9821cd45c824584d1ece21566eb5fa501d1effdfafff0b2e27ec806bce8f32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 230ae9aac57da690e69c6808c4c047c8
SHA1 adb494e07c9520a760e773af8766392f511d1cbf
SHA256 9a4a7a8a4470a3a47fb6518b936328bc059d65528213fbb3c2d8d4866ac080a1
SHA512 b5a80d993cbe1c4ef148f83290c915fe61559dcd3be304d27c1cfdd7dd3fad4fc42df296e2ec9bcc1f975a4cedf3bbffb330f22372310e6ed1721d5a5f438681

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 d0485deadaaf7f9daeacd46d0f784585
SHA1 c69db7c5885aee2cb9c76910a4c65931ed312bc5
SHA256 411e3f1cf268674c88f80ae9b554861fc199710a1ea3c8deb0a987c71f9b7f3e
SHA512 bbdcf8d3364ef9d887c039609cac9256b814be4d48a6e2db6f1fd25208abd9fff3a20a6094e33f9d769415229079ccbb136a9c3e9fe54dcfd782d295dbf229bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 a465efc8acdadfa48f0f3a370b78a185
SHA1 72e2cfec438ded16afbcb03aa9b0ce0b1741fa60
SHA256 885a34ae014078c3036829a5f5f612b9934c962cf490124f4eb8037c3f648306
SHA512 4fe1db76082c71c691d43dd82cfba4adf976b25c84bf7da6e972986a23f16804b4ae7d896875036d45c617c05424e131a595bd36e38c41ef2ba313719e412d74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 31a67914a5e3277894d01f55037cfd20
SHA1 947dd96588e6b1c96762f5fb4355d415278051c5
SHA256 6bfe22483b9bb9bef54b51f5b0521352a1adf04fa68322644146fc8f738d3eec
SHA512 c671f872cb2d5fd6553b8dc92d5ebeae7b925f53b3b89a27f8c2191e5b846861c2f36f1dcf8e5824b7b50afad725c5584d851e105e7e5f5bc2ed59d66ed020ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5 f85e85276ba5f87111add53684ec3fcb
SHA1 ecaf9aa3c5dd50eca0b83f1fb9effad801336441
SHA256 4b0beec41cb9785652a4a3172a4badbdaa200b5e0b17a7bcc81af25afd9b2432
SHA512 1915a2d4218ee2dbb73c490b1acac722a35f7864b7d488a791c96a16889cd86eee965174b59498295b3491a9783facce5660d719133e9c5fb3b96df47dde7a53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 5d061b791a1d025de117a04d1a88f391
SHA1 22bf0eac711cb8a1748a6f68b30e0b9e50ea3d69
SHA256 4b285731dab9dd9e7e3b0c694653a6a74bccc16fe34c96d0516bf8960b5689bc
SHA512 1ff46597d3f01cd28aa8539f2bc2871746485de11f5d7995c90014e0b0ad647fb402a54f835db9a90f29c3446171a6870c24f44fb8bbb1f85b88e3ade9e0360e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 18444a2fe97b2576494f069ae739d777
SHA1 9105c1da3dd1400a4eeb93a78c503cbc7bf1fcfe
SHA256 9d635d2bf8ca838aa76f3454bc2cc80a4031936d1af3c17509afa6019fbdec5b
SHA512 9208a9540a3004685add1c9861d97a59c5f67604c7bfe444c0a2719483ecbbb34d871108d049ebfb907a764fd61b78ea4096368bb93bb36ee7368ff7decf1202

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 ca175eaa546a945824c84d7b0b4b5e06
SHA1 cd89b26d5e34510c4774127d8a60fdac5a4c3e60
SHA256 87e4211e690efa0f820d821785f0f8268d4499f492c3671f51f3101bade9652e
SHA512 ee49a48ea3904ab1ab07cb8f0ac636e4f01985544acc402a9dd92687c2e4fb6e5d2d0d93bb672b858a45666d147f56801a0d138af58dffc74794dc5a54fdb614

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5 e864acd5dee5cc7a0bca989b404e8ba1
SHA1 91fe768414f8e475861bbb80dc4ed4cd5c621eb8
SHA256 bba00f91d30787360e58f8cd76b02dc99ea1349af6153dc2d71024268a006b2f
SHA512 9d857bb3a7c532e482aed8e648ad07e46f8b0d1eed3d0e790d4d96488fc3f90e0511f2bf90c4afbea48f266adcfeb03c0a07042c17e770b56f278855f0e79b47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c89b86baa43de7b7_0

MD5 ffbd2dd671a38e6e42ae2c7a46dd0529
SHA1 c451adf3cee2ea2e3319d75c0426ce94b7ab564b
SHA256 645e28df0230a595ad50b55e34ed0ba22da34c58d9ac2fa7fea7d454d21c3c14
SHA512 0fbc402cf8ef52e268a0686824771d507906a34d4cb7139d7259031ce08cc5f3bec372851213a0ce672b5b18d91188335c37f7ae9cdf62095f81be5315511576

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 353788540cb42dd047ce7cd6f8dfa053
SHA1 2ef00c35af539893e1f283ae7d226c4bbf9a4b55
SHA256 c9e38a1f1dff9d17fbbc7b87e27e24e227a263368806235fb634799239fe4a10
SHA512 0322104f50e43b968a51eea971ff63bc9f7fc7e735d240edf4ad2d55d115b1f8d067d128b2ee64dcddb8a84e2fc1720bbaef5e010c88a728495c72eb218e9eb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 6fa2cdae6036b2c24a2468987d21b682
SHA1 a23d6064ed395204210a7382eeb3b6e4f78071a7
SHA256 e8ef7a2d8ee9e4de649586c92d99e4c2adcf7f8d6314dcc634a7ef33cbcc535a
SHA512 f1e3063cba80029ce14abb68b0053f981d292d993b920b1af4cf658625316f472f923cafa6a671531a909ab0cfc9d398c9992ee0886221364b15ff6e27a9ca41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 34cfc705bd6ea81f323ba3de427be347
SHA1 2b7c57f9c0c7dc71a38f27ab16f49f5f3c031033
SHA256 2735c5c0cf7cdaed8be58f8e1aca64ca62fc0eaf77a6135b76c3e0bff87c16a2
SHA512 ae1e76a39f2cfc8ada5002268629e3ef2f47fb82504dced6628c21d885b129ef515c000021a01237359f93f154511f58934c4b911ac1c5b50b807bed4b04a4bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 334491198c7695b1bbef2c622582f666
SHA1 c4f838f8dc99f8e63de3c3c0d8be93111324b227
SHA256 01cca2f47e52683d04bb28bb1823d186d31df07938dba0880f624055ea4b46c1
SHA512 ff82c4f72c8c8d74b161747dbdf86dcf74127b1aab2dec81d23bf1a34fdb14c06d6715c75174b545280dad497abffa8b7a83153ab6ff9471dd33dee83d2f1453

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 cc998c11a55f1c739c7ac4d55c16373f
SHA1 aa7488acbf89ec3bcc2ad2d44814725ecbc18208
SHA256 92aec7031e0dee540ecb167706966abc27762023bfb13c65c76a0e9756c3201a
SHA512 706fbe4855abf8a0dc5b081a755e06b556fbecb528e174f03778f76969399e5114fa5286dfcb73900a1ecfa4c5842767e4c6000960e693917bd27a9b6900a128

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

MD5 34feb63300d48b5766a7931624d11087
SHA1 d850b2e8e9db37638c3cbdeb55fc202efeec0702
SHA256 048fb768d914fbaad24f2968373f11b8fdad13be422c4bfa39298449c8300302
SHA512 499b63c4e20cb813d5c7f981188624362039730ad6d8cbd06f20443d801743eb0b7e0186d046ea3afae7de94450bae7f9caf26fd62e7556d1fcab91b28dedb9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 e8914639f65d661b552a8c558d7aaa82
SHA1 aaf3d7ce204054ac22c5420a83cd12342861d09c
SHA256 a416a19f8c6b8df3e9c0cfeb2a39333ff611452c1246a670fb19a19d087cfe85
SHA512 33bf86d2c282d9fa5df5910d20ed0eabd406dd5efabb1936c50a8cdcc1866a9e4c43f4473b078f051ecaa1fea98277bc9f68e085de3500b1ce265ce68f88637f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b57c78baf0829aca_0

MD5 0005eaa3edf0954e4cd4fe2c203a6bfd
SHA1 31dfb22e723231e3f47c6a7818c5af6dc2cf1bfc
SHA256 1342507f66bfce44867f8bc736d589bf0d9feba92782bfee3a439e0b0080e7b4
SHA512 acf8ef69d6ea2cec94e052dd3e4461deb96c50fd6dfad8345073f67737462de3fbbfbceeaae35156b784f0105c992b20fa04a050c861f20a4f25f4f3195fb79a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\849091142f4f1ba2_0

MD5 2d110a3a00c2cc28e6335aa5d30bfb20
SHA1 393dc361316bdf2c4a133153b051004e2659f0e4
SHA256 d63c4a7a250590d591e7889955061617f0ede9ed83bdbdea61983d328e673b03
SHA512 441897b5ce01603bc8c71b3be332b033e2523ad2882fdc448b87836aeffcd812b3fd9000a18357cb5e0938a38a693b4a353f6731e2406991f77775f90985337b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 bf644e86de58038632103fbf57d55971
SHA1 9689d1b145571b2a7305ea2a0280de17112907b2
SHA256 011bfcf02343d9357699762771745c7b4ab70fecc03198a38a535e8bcda88f0c
SHA512 f089ad7a74fa53ecd64206296034ed38d16bf5b0792a20c76b379a08e9ddfe384a378f4d0428b65b50d2d2fc07914138190afc492f74e4a8210b6a895a0f29df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

MD5 5da50e839fed4a4120078458e9cdc179
SHA1 cd9fbbb355b4194e5ff932e46b86b58ff167bdbd
SHA256 7a1b47f3c22626d9a8631b16e6cb07940381c449660b4cd2ae714a42676609d0
SHA512 01031a2f1fcd91d7a6dfee28ae4cd0018cb20ad26c3f81a795e388369458c95781268344f76f53c03debebd838f7fb198e869e4923c932be0435a60abc4e0a0a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 b5885c9c8cbb7dce33c74fa0baf073a6
SHA1 4d8600c49fd5e2ab9d6b4aba430ff1330ef76714
SHA256 9686244e35d60c5ff512b671aa61d3201ff4ecaa79409409ea72f935ef5d3c26
SHA512 00159a5db701c4129c3780798dc58623a5bde494c83551a4fc2a5a784d87c3159408276b1c0abbd1b261d3efa81f0c81221dc7ff8d3491325bc53df535286ab2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d6e1a4601df0a0a_0

MD5 cfd2c359a5fdc167088c956c5444f0b6
SHA1 ff3c44501db33cd83946a6afa496088e758f7e55
SHA256 fe0c1f6a6b57c37e730c19426f6522aa98e4274327be608851e83449e1b82307
SHA512 8427ba5b2d4b4321378445de59a1df668e1902fd010f1e8f5033a9f3cfc9c578616991f876c2ba0797e993561605510c9d7919bb5c9c4d6c3c882688b6432616

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 3029b42859402f4dc00b57e0a2e80a71
SHA1 3523acb253b17622c935cc3b43ec17196f45e6af
SHA256 ede107ff1abd53d0d147a6b782676ee1fe622111a9e24d39a4ab817f7f6ff2a7
SHA512 ec619f29cc9d720c552ae6a2e26ff95354ec76af37a84248f7710053c09451d6d265e45225235f49efe219cec5998265f5c90202d30120bab0e99639389e2628

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 3b454711d349f15e6fc6ecbcbbe0b9ba
SHA1 ecf6d1b2d8898724f039ab9aaa4b20ff882b94da
SHA256 22edb22e9bde70260ecc74d1086effa5aef1db416f5ef4de99575874d1d822f7
SHA512 14156ebd3ac3af2dab02f25475149eeea7475ab7928b9e023848426ed01bcfdbe44bba669925ce87d2f9d1d5c7a47d8fb97522c358cc3f3282cbc4a0373a807b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 a8cdc8bdfe58cb0749126ba8749a58b5
SHA1 f4ee79446d25c718a014af9d7551d351f08dfc8f
SHA256 3d5722fee9edc52734f5c1f9eb45eb5dfa5ee40783a832678cf1e5997cb01829
SHA512 5b4f6b560b433a59ab963854bc83c78a06b3dab0073086e72f204296beb48b3ec085a0b6bbcb1554e08b09e98040b2ba58a9128dfe2e9119b74a223503b7a4b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 d210e0dafd149e58c8f85843da82a15e
SHA1 b00ec14e8297a2c4356729788d6b16b93388fead
SHA256 4013897b549749fe1f699c48df81b54e0e6627401019320132c38a906add6980
SHA512 56ec8716ae8a5ba6a275d2481552cc70a99b1ad292c2823f72cfa2d83e9b7797eb3b62441adf1d6127386d0b336ae97b1dd4cd6552b7946316da956a2235bfde

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

MD5 75d17594a09a7c7852ae87f4519d0e75
SHA1 8f44c0db802661d169052a3af882bb285abd6b1e
SHA256 7ed7232447b33ed04276b57c08dabc302ee16ba10f8fd250ab1728b249897077
SHA512 b8856e9e26f8ae692cdf8ad0aa07441e9e9c25c24c1fa1f4bc2114895b716928830e3ab782fb2c4db89a0afa58bafb2f762007dbcdc72a6bf20837106b4d151b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3ab4a4a6cbe839724edf0dd18cf1bb80
SHA1 cd3592b1af1a7743d27f5d8209f91550c02b78bd
SHA256 38e4c3b4dcbab15b75a3da18cdc0ed2876e620ff439e103202d4b49aadad76f6
SHA512 8582ba9ad80f76432855b83689392578380f6cee25680891532c1665ffc703277442657b95976f56190f6067a752a878ff896e86cf74d23ce0c4146eee16f831

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 176131b7f647d0093e79b3e152d502bf
SHA1 b43fe423990f9e71255831c35c06ea82b75e1279
SHA256 ffad854c3567281371b10b453af99bc6c7186fa70e404de20f7dcdd8369b03c9
SHA512 8073e27d4e2048a61334b7df9087dada3c240f78b7d15d753270dc5bb385109332ebc242b044e0d9c9fcc9413cc7b54c0d113b822defb2c9b164940e0236702a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

MD5 4479d93ac5b6435fc95989b8c7054e84
SHA1 c29a2fa70fe3879a239d18a982675b757f1cd401
SHA256 0fcb4c76dbd6eb0ee6b6f0cfaf3afc218b9ae8d2b1e39627d93bde6dc05fe097
SHA512 2ced414f72b1d471567dfc5b99ba3f8e8aff39798faf8951fc21dd9887d898875d7a56fbf771db85805ebb8d5233b7b9a8de5c26052f22d110872bee6564fe4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 b5cef1fdd919e23c9a1d618c920c413c
SHA1 a5ccc5c5348af13753a8bffc7e6d6517a43c4cbe
SHA256 d50216c3b6da1dddf4f3039a6b03c0f0c912ac9ea90df7e08405de4a0744586d
SHA512 348f87c3f0e8a7d2411a8d8ddc1225113c157e91f11a5e0e1667b72179e343281881c3f538d2b80a56bc932455e8bea5cd805412c7be8c924c4545107eb24a00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5 5e952edaea02d4f98baefba47d40b2f1
SHA1 d397ef770842b321bd59aa8072de00f91cf0f001
SHA256 d29efff5508987dc01d3aa334fe47d4af327827ca80f663e77a96895de0bcfec
SHA512 ef9d924390490cefe2f721db3ff0d5f2408486c0fd1bbba37a0426412338d1cc9c6ade6486033084e85b2ba6848f6d9ca64aac1b54f3327d93ca958a377eb1bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5 ca11c2154fee8e2091ac3987fe44ea26
SHA1 1856e717d568f856e2a689fbce45248387568f70
SHA256 4fb5d9d740a023c924ec4180cfaf00d96fede810be6e601b2d56ae4b09fdccb6
SHA512 4deb5ae0d3e37d04f900f3bc089f107ca1de5a15a7965fb158655a12eb6be7600a4e7e601f823cf3e155cc5ea57fc727a9d560ae96079eb7798722a8d9dc687b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0b707413711ad5c6010fb9e5b37acd9
SHA1 3c5ae07471e8911b1e4854a7049287b5256432f7
SHA256 0eb805cb12a93ffaf1034c49054aff51b50caabaf4853a359578cf9a369510bd
SHA512 f935be8bb2f2bdf986a01736d7ef488ccd88b29bbdc53a4b2ce37740a0c729c961e26fabe554f9cebcfbebbba5584afb2a9b7661534f7f1da3bc07207c3c933a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582ac4.TMP

MD5 6cd6c35115ee6d247e8ee50f27b5d368
SHA1 abc5841fd6d945a28824e6adb3308fdba1bd0e7b
SHA256 eee95c396e49e118ebf99033510dba3078268666d2e24f34d00537496026533b
SHA512 24cbb23fdba40d5ec7d8d95b77f1607dd0630f9482cb555efb3afa9b5e3762002500d2efb4244e98f698399f8873393836cc0a7ad9b1c0cb56c099d57b947d2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 5d0b9fc02906b1d5541d38b5cf4f4e8d
SHA1 9ce5c68a91b4e16e746436a9bdb7e66da5c648b1
SHA256 680a42e0f5dd7ce3ef904e04fb6d6e84fad25a5b38bcf1caa0454e6be6006270
SHA512 cc7026a0dbb73920fdec48bf5ff2c52fef4891518de667a95a8f60f454a7e5c427c85f3d901b0625b55f7f28441d5844d54b602b0fbc068750db98bbdf5844ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5 b9969344367a6a48545c8fa3194177f2
SHA1 2398f2520c68cdff07c5073ffb324be6f4f8e37b
SHA256 1034426d2efce4b0753d6fa63a2245e34b90103d3e2b40ec6aab1d0e2a9d3b9c
SHA512 d97076853819dc2d31cf52cbd21465dfcd1fdaccc22d11ce2700f496e6ebdbb057b77be5830284238f1e08e9eba3063b4eca56888a3c4ba51d969200ca9d3f4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40c71aaf90b34e0a_0

MD5 ca8e206a084a9ddce09fd54f84c29ce1
SHA1 03fff6c2229e7ad7f3d8152262f93125bfe6ccee
SHA256 b3048f21dd20e921dcb7709a066453b87cfa97bdf579b859766ab52c732be59b
SHA512 41d2112211cd1351e8ad1761a21c365ad265a9ed76b7457e0764196a639b4cb02dc594b685cfe35ee91767694b83efff42db6a48e37db778ac39c1bcd90a4c9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ef075775c69ab20_0

MD5 7a420192b8a2cbd270d6aef215c768bf
SHA1 f7026363d57dd87db02c26df47eccb1f29285782
SHA256 d4fdf12c4c0ae72a0fe08aaee9c2eddf17d963aa469d361110e90f804f0e24eb
SHA512 b42d1f5d531840e199c46e2a50290280428a8eae861c78780626b67f01da6d1f265e58355373a10fe230828ebb1c36419606a16f3d86c7f5c939751ec934a2de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f39752e2a6b60dfe_0

MD5 80156104b0f1e655bd53fe06d8e648f4
SHA1 e7e9b4e1e40ce9678ac7d74fba00b79aa7d87102
SHA256 66ab7f600a5ce0512b61db096177f7654b267ed7dc25dcdbbf55c09e9887630a
SHA512 e6f1f39d651359691fd57b6b9d9727d150fb51591504f7c20d3088f816ac855683fa06315369b1e6a89682dfd6fa36805b6b29565273311b7e7931e2c3d6bd2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7eea23e4bfc91df5_0

MD5 2906cd25a8891ba7caae6ad18f5c2600
SHA1 6441cd8c829571ad787598d03c38b3b2380c4e2b
SHA256 d75ae1e33ee98206934a80f984fffe565cc7059ed884355863df98c5822b40b6
SHA512 828ca34c06766165c8a5bc520c973033626a22b81c958d122ac09458007dd6c1ec7f09abfbab9945fe4d8301f8819a03fb3601a4fb20e723291119d82a0ba323

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\009dadc03ce0fbaa_0

MD5 330358ae9d36abd4b7498e609f9d8ec3
SHA1 7c8b96f8f26bc02e0fa1bb73b5a05e5ba95e58fa
SHA256 519de048db49734957c15f7d70ed754cf88c12c742e5b825e9a5a6018dbe1357
SHA512 8be0b3b63a71f8b086fc42724e020f0120c999a865060f5970cb2c98a9a8e7dfd3fae38bdefd29d9070a45181d5bdb1216ed697c650dd4aa5922823f5e2c1ef3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 51bfb3bf7be53704b206b6fff2ae9fb0
SHA1 8b94019f6d5328975d6f18b4f23bae5f74264692
SHA256 f4f55ebc081eb21a9fc4ad3cc292451d73bfa3edc238e224cb6d18dd547e399e
SHA512 7fa69e5064ea69fcd1614dfdb1026a11fabb0895678fdfa0294aa2b4ca2c56c3468d8db35937f1d7d9a945582c8f30015977cef6a2247fac93f317f6531028d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5 323eb4e58a3a514cd115e1860fce7138
SHA1 cba661bc68e82f1da911758b2ebb368f8a970c5a
SHA256 cc8b832dfdf1fbfbf73ddc6dc89be1dceec0c054e9ae59b99730f34f1a8736dc
SHA512 5c9a7869b3c851c3e85863bff62d05eb8ee3e11f43b066a14d62a141666e96ddb21cd9847460e243402de94673f5c43269fe60fccd7f376d0d2188801faf30b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3e06f5af569ce76_0

MD5 c5adfc751ad42418c0ece991e4ec79d2
SHA1 87d617c19d3b4df940d0163ce354f4481c9bf0b6
SHA256 ca0dd5d213494e99b7236dce13def83c7cc02a6670de9fbaad4936ca3ebffc75
SHA512 b86b9c905128a01aa67ede5543f71a740766d993138f2ea77fcc185009e0d1fabab86dcac1dbbeed03d1f108362f5f833582d507536f27cc773e957ab2195e25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d274db2116316aab_0

MD5 035a441407e2e4d5c6c6f019bee617f8
SHA1 99fd7098f6cd09422dfd82798389747352c0463c
SHA256 de99d235ecf445f50a559800a2958dec5874a2be54b8c662e5a4b76fd4d1108e
SHA512 4ff6a153c8146d1eb67e5f99630572716c3381fa9f7892426a1f70a5755d33c947cd0b15f298f1295e642a621c27464862c88fa60ca34824737a65299e8c41f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\60af2b3026994812_0

MD5 a3ed7936758f9382bbb0ecd6409da099
SHA1 33f0052e93b2af4df9c174e618a4cdf8a55594ca
SHA256 570644ab034e891f10a3d22e731ca589b718e2a5b685f899baf824b30c6f9f59
SHA512 504c100dbb5076d2aae041b14e98a8bf1d21e790e87e925c4c9075424fdeee684949699b851fe5790c81805a44db81d72f3f1c6760746fad2d6ed78fb6438cc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

MD5 b918fc304918af4e337354c8ea335ce6
SHA1 25436803619437e7bc4f4d5f13e0b5934b433a5f
SHA256 0fd42ffd64a43b8b8e02731d46852e7c7607bd8e025823575676042573941768
SHA512 d20f6ca49da63501e1a3c58b610ac09c17755e7f9239af73e853d91a4c3c5b92b1bf95fcb077071b35ae78143a88cae443151b06afb79c1d10dab91d5923103c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 c9bc0db2ed9fe7ce07c2d8089f1e9540
SHA1 b2aed5d8f5b759873bcf1639aeae176bff3c79f0
SHA256 e88aa0d3df3979522944f86d8b53bc581da1ffac99f3a857c570b2bf44dfbe7f
SHA512 ab31ea954458913458118952aa7a7722d00cb0751add3083d44d702cf53bb0ce406730a4b136877ed5c1ddd24d5fec7987de792f6ffd1e8fd076b5bb9b4a926b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0e7aea3eec036c81_0

MD5 79d29c7380f45c5cf6811f1097d010c8
SHA1 9ba55de40d7cc83b50157f640cb72255d8a054d6
SHA256 4bf9a5ecd609fde8519b936dd5daa00ef6c267fa49a65acaa432b7924e253530
SHA512 4f313e71a5493c004d030daabe0843763e6b69d15447084a7b570452f81d1144e91ae1f90557d42fcb16c3d3d759e5d6c69c043d11b03277c9304bf5ce323418

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4efb6b07d46b57fa_0

MD5 118a7d99f516211dc705106cea0d7b83
SHA1 6de7e326c3fba7ffb54d7090bc5d6729d2777b0b
SHA256 f69a3442f944b6e8d79030ca16966fcabe336196b4dfb0a6bd541ada8a3773ed
SHA512 f4b7998423f9b3450c271e105bb04f0a234eb92dd5ab63d98f33d3dd166d12498ddabed4c579ebc977176fb9244acf7400a6adda85847cc23083ebc091449059

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5 8307fca91ddb5b66e0c1c619aea0af73
SHA1 16162797002025b280f5fec83bd6c4a5abda2e2c
SHA256 3efbcf564d6c218c4907746ecc908270f2e6a7cb9c5869d04fdcf696f51495f6
SHA512 e14650268ae54908715f45dd4cad8fe274ed55be09921dc40a933de16d0a1fc5a7ce75a9f771a75d6a19be649e8032e532eccb01c721850480a5e06a286715d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 eb5f80d0082dbe1119b16ddbc4e63112
SHA1 f69ec006182389a1c7a0944952bcbf63a47f16a1
SHA256 33ec49511a5b16a05c927e02a6e26c7f4f7aedeee9847caf07538f96dba9c634
SHA512 b758b0a9bb14bd1bf8612d3c79682ee59ebecbe0cc90072388e4a5dc76be6a8d934aab338c5777188a6ab53d69faaef10e376ba063b4b42fdf3b9f9063667999

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

MD5 780af68b5ffb1de45c145a8451dd5879
SHA1 9ee92a4d7db69eb57c5765f124c3d511a2f7fafe
SHA256 79bdaebbb1c7e5173742cb5470070af4a4d308757dca8275c4657efb372a2327
SHA512 c495799b5b0eb74831c2a800fd431124a527da331ef72c22fa86ebdd32dad446860e7c75b9892a38408035084615b52d86485344d258f36f4aef6b601fc4545f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5 868adbe86e1d2d62eb9d7117e58685cf
SHA1 36be166972fdb602a1bdc974ac65e35dfc27c753
SHA256 34528ad4217d48eef263c98f94d6765befee755dd23e1d98b1967ae7e77a1397
SHA512 326a4e135bcb014503fd3defceacf327498b381a70edd6f14752fa509d4197cf8c2676cb55af0d19b0ee9517c9e4f225ee47413baf4e823295b25b969fd1a2e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 aaf0b2f519a206c4c283d2062371b4dc
SHA1 653a72cf425a332f2d31f952c51dec89090a14de
SHA256 05a0cc4b2537373057193f03607910322a6616a33a5e5b116c12ab8d243f9d7b
SHA512 46b1526eda288b3708735ca5b43c832fbb68ea287f8199d12c0e21cc426e9b37c5956055acc052097ed93b5cdb7bcc59a485a0645910e915d58086466236d78e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

MD5 e143170f8b53e4fbd57f648e647110ce
SHA1 d0890dec08285b1c014de55ecac552d0150f2af7
SHA256 1f7a85cc80a90aade3c3dff1ef4cd56e2ca774dafdadf1f06141d95635f4e29d
SHA512 e1b945bfcc86fb0cc8a27f0c03d7293e8315231ab431374c3e1667d4dc99e28ea894fb21ed0ebb2b04a40235170881512132f6c242136c9793df8d54d519ec46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\400e6743efdb27d2_0

MD5 a9d9f7012c7715f2674fb31a17e9ef39
SHA1 051ab7a21e6977bdfbdd26994f32ac7d258b1278
SHA256 809bee255d2472dd4670678700688ab38551f60575dc580506a74d36462eb3b7
SHA512 dd9ec2d6b9e8290f37e63d54b2c4e249f72a782c669576fc67ae541788e93f3b99e087f2f1feb6fe7ec83b26b1cfd95aafc4b0d05e576138febde480c6bf5b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8131f5e1b3dda0fa_0

MD5 172b08d2eae8e421e76bce2ee78e5e2c
SHA1 d290387e5847b167cf90e703cd825f3def308e50
SHA256 6d967e77b2066866af9c2372fb83c4e144aba7773e8d89f0a864786a67eb4811
SHA512 d2919cba586e8fb90720a67adab80e0892b3ee95c14301e88d9775d4833efe80d9a2f9b9fb6a5c51e2929abf74f67a5a5d749c0a3074aa79a8ae4a1b001e2c56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\43083b4464fa0b85_0

MD5 3f48cff9f88fdc4598e135f5bed83d82
SHA1 771aab15f88b5575a8f9df2c4983e2ef41b68b3f
SHA256 693d3e3369e67a9ee6e10bfebc946ab34d2f0bdcead6789ee58dd99debe26ad3
SHA512 dd3d5423e19a9211e48fca5984b85d654354623e6b7008b62d6bc9919bc8df8af7b22c3d9a7c9dfc502c9dc484cf9df34f0f8d20cf97f5b20525276387f048a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\829451afe91fd099_0

MD5 9324074ab93844d6d58538328762f2a6
SHA1 6c1aa2c17dab0fbe617fa524745e43a65c5684f0
SHA256 1217e76ddb76be14707914090949a34fb8189da9031475408533d1fd9f375e9f
SHA512 539bf78213b95afdddfc6bac28ac340172f21d917ac5086bb4b9e8d0ff09616f80c001d18c063310962a5077070043ed93ec0093904741bc64c2f141ca69ef35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dad6f749d16cc675_0

MD5 690397b6d0ff58be915e5d0f31503328
SHA1 737e48b4cf350c09aae3aea0722581e9efdcc5d9
SHA256 7970c03a5fc5d6946a2b6f87e53800bdfc6ed68851188dcbdf06c0470fc8661e
SHA512 10e61c46bd2d6f50c3b564eeaf9d6f7d31f83bfcaf9507127ab9a56a4948ca395e599fe324166292cba7db71d52c4882f7c97588f5580bc5a6b6778f1d44a2b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\984c0f3f07e5edf9_0

MD5 69d5139aff7d800cdacae89fa96344e2
SHA1 b93e51908f6d75d287078b8dfe61287c02739b78
SHA256 27f12fc799968b54f13a9d07f9daef74c786de323a740c6b4317abdcb253c40d
SHA512 dbd92370b4f66ec9891f0e4dd199bbec557318af5344d5d1c0e278481f496f86dbd58284a0cb4b8de7399332ccb3352b527f8bbbc51d7399414bfb2d8234238d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 5ec658956c3d44122b5ad67f98d18d80
SHA1 6dd09556a8858602f8834e7df8d9b78896772f0b
SHA256 64eacf1fae5c308127ff5ce9884cb0cf3356497783def7acb8c5db6ba863c91e
SHA512 4f34aba09aeb300c6995926a5bed0d55febf11fedf27a6d2dbebc6c2ffd06f716c0f9d414c8c6b4852e9d455720de47a075be8faba1137f0ceb6870b99209b81

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c89b86baa43de7b7_0

MD5 74b33ed69f5403574501a3e57a37d6ec
SHA1 30e0870cda994979352bce7dde5151f5debea5e5
SHA256 73b620b362297d9be19bfb7810809f4690cabefc71765393063880241cc446ed
SHA512 97c65b5f777d3ffa8d7bc2d09abf8b355eead104890dd7984aef3a1a40cc995c72748f248e12f194d7a5af093ffacbea952ca18aad0063cbb062fb956684a8df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c667cd7589a91565_0

MD5 36a98cbc4dca67e15becaf78f7ee7cfb
SHA1 6cf97f93ee5aa334fcfa96938161cdab43ffc1b8
SHA256 bba56938c87846c772b22d1800f223520d7d196aa107a91f84a17a59ad37de94
SHA512 35354d2c2bd75cc2e40ca02b80dedaf3233bf118efb5b205b2f4939dad8aabfc8514d19652e168cc1a5655660edcb4613bf3d5ccbadf31c998a2ad5af91c1bcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 0c05d083abc9a45b45e73ea77a243bd6
SHA1 b797ed67a0e30c40d67a1f0fa48fc0b58b1c5cf9
SHA256 2b22cdbb52fc8d56f0c547845b3b3b02a33ac973a4b65b65f9e2929d3aa4b1ee
SHA512 8f7a282ef213cb277e657c84191323fc846adb7f43cabf6136f268b002c8add986a1a38458a9a64a38db5d6c3cd442c60fb4d47621fac942c02c30e247fac2a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5 cdbcb8998687332aae4f0c49ccf4d32d
SHA1 824cab837383ddffd093c9c95d76a89ddd7ce1e2
SHA256 f1574caec77a18c89d77b3a2f70b4d7cce1455ddff7f220be6e887f775554230
SHA512 ce9b76b30fc75977c9fbc1842941508133467e0509238340b1a27428cee41c1cf58b001a18f726c4d2aaeb56d9a84d9857f96379f2f87da8dacd421c909cf790

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 7d7fb9eb2492d3d2e0be57797ad6c069
SHA1 61c02774992933227ad36d46831f49e210eb02ae
SHA256 a9eb40d7367779b13f39c51a2b9523a8d0f00087bdebe65702e6afea3ab6cdd5
SHA512 9f3d694b49b4781230eefbf513cab13e32781e2938f46d13b6eaf31657298233f1d020e63108e617f2c6a99f3c1d981ee94524d88b9ca6d84955acc68489e8d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9297dbede6424e63e13c7ac9bd114b6
SHA1 ccbcefd91bcf7eeb7d31529a710d15f33656c54b
SHA256 d56f0b8ab4cfe526e598c42c95f895a85b41deb0dd97a790cd9cc2d30a2a4e23
SHA512 d4e5a201a9455b269b78634c3695819277a854fd7598dad5e13e8b02563bf1fb6c15644f78d447e57783017a06afa90ba201efb0828ed546e9e9488c589f36fc

memory/1844-1741-0x000001F573B80000-0x000001F573C2A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ef5c406522ee5e6513e2452ed91eb1f3
SHA1 cc272cb28aca629034107171c7752ee801f6aaaf
SHA256 5e019bee8b26b29346a92215d9e8bce75dff1784978b63e2c408cec5550fd949
SHA512 dd6bb60fea4cfc355de83f92e4ed1bf384e1b459540fdfc882c17e8cb08fc8418d73bdc44854d323ca64386506322e2d0b74a2144ecf279fd87d363345870f7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 3920858a70776f39f819c88a2a9968dc
SHA1 c12f52e7a21086578afc2af6790e13c14d6a37cf
SHA256 dc326d816a243fef3f818ba590c8e301131feb60c108dada8f45c36cbf95e30c
SHA512 d4864f94aeed190f9c4bd6d76501ac192497fa8940378ac4c800ffc5f49bad9471723940605cbf94759d51104f410b5bdb28774d71ea4956ace494d5e29d51c3

C:\Users\Admin\AppData\Roaming\Microsoft\Speech\Files\UserLexicons\SP_3989000C459D422296CA12D93F2F6FD8.dat

MD5 9cfbf1c1c71c6254081e787802558b25
SHA1 620d4f15b8e398723a00a1a4bbaa10865f140af8
SHA256 eac8efa0670d14e944936dc40aff2cc30282162c37a571ae81ede11f1bfdeb29
SHA512 e6bc4292c767cd82c172757f3e0618edcd8da02af9698fe036b0ff960c88326449ee10bb072f35fc56759c044fb4e2ee96c4ecc555d26ce6dcd75770a5c8e9a2