Analysis

  • max time kernel
    1800s
  • max time network
    1803s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13/07/2024, 17:56

General

  • Target

    http://discord.com

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://discord.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3576
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc93a13cb8,0x7ffc93a13cc8,0x7ffc93a13cd8
      2⤵
        PID:3204
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
        2⤵
          PID:4532
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3932
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
          2⤵
            PID:4948
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
            2⤵
              PID:2636
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:248
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
                2⤵
                  PID:3148
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3804 /prefetch:8
                  2⤵
                    PID:4152
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
                    2⤵
                      PID:4196
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5376 /prefetch:8
                      2⤵
                      • Modifies registry class
                      • Suspicious behavior: EnumeratesProcesses
                      PID:4640
                    • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5876 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:3168
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1
                      2⤵
                        PID:2096
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
                        2⤵
                          PID:4804
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1008
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
                          2⤵
                            PID:5044
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
                            2⤵
                              PID:2716
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,3129911119411797293,1620454556283681015,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3136 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:3768
                          • C:\Windows\System32\CompPkgSrv.exe
                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                            1⤵
                              PID:1396
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:1996
                              • C:\Windows\system32\AUDIODG.EXE
                                C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004C8
                                1⤵
                                • Suspicious use of AdjustPrivilegeToken
                                PID:1796
                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                1⤵
                                • Modifies registry class
                                • Suspicious use of SetWindowsHookEx
                                PID:2060

                              Network

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      f1998107017edc46fed4599ad24cfe53

                                      SHA1

                                      47e92f0646f0de9241c59f88e0c10561a2236b5e

                                      SHA256

                                      cc6838475e4b8d425548ceb54a16d41fb91d528273396a8f0b216889d79e0caa

                                      SHA512

                                      ef7228c3da52bf2a88332b9d902832ed18176dfff7c295abfbaab4e82399dc21600b125c8dad615eb1580fab2f4192251a7f7c557842c9cac0209033a3113816

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      21cf39beee4d807318a05a10dc3f1bf3

                                      SHA1

                                      01ef7fc09919eb33292a76934d3f2b5ba248f79c

                                      SHA256

                                      b766823dabbf6f78e2ee7c36d231d6708800126dc347ce3e83f4bf27bc6e2939

                                      SHA512

                                      0baf8b0964d390b9eb7fafd217037709ac4ab31abcdf63598244026c31284cd838f12d628dcffe35d5661ba15a5e4f3b82c7c2d9226ac88856a07b5b7b415291

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77f1fb24-1010-4e9e-8867-c3896cc59c4e.tmp

                                      Filesize

                                      6KB

                                      MD5

                                      1ed17a08c51c5e29fe2b2d9012f059ed

                                      SHA1

                                      c0b930d7064fd9c64bda8d4ed827e840750d68cb

                                      SHA256

                                      e987b1bbd92aff6b9e8969eb99bb14489a997e1356117963c931d4fc2f582619

                                      SHA512

                                      de7c7083266c9ab86ad187cf36bf3b697df71609e2ac4958cde858397e1a613603badfd48f29a3093b95fbe92357ba33ff6302cc42db6192f746d663cf859fc7

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

                                      Filesize

                                      19KB

                                      MD5

                                      863e2bdee269d78acb2c8db4b73ccf92

                                      SHA1

                                      506151db9b9a46752e56726dce954c6684d00c83

                                      SHA256

                                      cdab9881a69a248732967d20a886afcac8594f0a2cae8721dc54c3eab6b46b4c

                                      SHA512

                                      331554a58cfa0e225dcc724e414a9e660538676af456c4198c20f216cc2976170192c982c914515847a5e1d6f9220e776ad06577e6a98512165a7131e2c55cad

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

                                      Filesize

                                      19KB

                                      MD5

                                      2037db104548f8c7958c97f9e4e9cd7e

                                      SHA1

                                      23e280c90ffac500b0755802983fb1e09da2fa81

                                      SHA256

                                      d61bf5436fc87a9cab93bd5339e1fd2ceae1d372169bfdde4c1a805fe082f4a0

                                      SHA512

                                      3ea2fa4cb79dfe3497b0cc828e995b4a763e3fbca3d19c85481170263a252dbf3c29dbb3d9d0a5c68fc20444fb436b9034d58ea38f70ff7b492073c6cb62680b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

                                      Filesize

                                      22KB

                                      MD5

                                      11fac34b1570a735fe64b812cc7fcaa4

                                      SHA1

                                      aa56d84457d432335b0c2698f317b6750d03bfa3

                                      SHA256

                                      cf45501ce5cfabe49415018abf2befb418c13d90d9935b86be8beb2aca432b22

                                      SHA512

                                      84bfdc69838d98573e6d049e433ca454f250bb5e6e997c34cd2a986b53cafcd3a4ed46121a54928ad60423152a94348f1e3224452eb1ce6e7db0bda9e49c283d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

                                      Filesize

                                      163KB

                                      MD5

                                      b2c318bd3ad3a4da1c47e9902617b3da

                                      SHA1

                                      d2074c0e1e65177a488960297f80c66024a670ee

                                      SHA256

                                      56ab4fafb4c33038d540cdf8e70936d91982a45a88366f2da241f862f3e24b62

                                      SHA512

                                      5a6ecf90564e804e455d65c09a7669df71eef2906b8dabea20dab233fad9c73ba57db3d9ebd7667cab1e523bcc22b395ea07b5d649b9884322b9943986230fd1

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

                                      Filesize

                                      79KB

                                      MD5

                                      ef7d6c21eb89ae202410ff930a71b87c

                                      SHA1

                                      67faf82d90fde5e318a64bb2e07698773ce32a06

                                      SHA256

                                      693c10f7457b37f798b9e6a71d19924812ec48b8f2ed3adf89020c3b0e589a4e

                                      SHA512

                                      6c2b88ce555673f9c4e1c19492dbec1f234de3120846d060f9c2c7c2f2e27739ada6afd0891ce99d4044bec3f71f39fb03d7d6c4872565ec144e8f719f3dbacd

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      768B

                                      MD5

                                      eec5e62e9d208c82b5a4efb2567ae0cb

                                      SHA1

                                      cd72e630245c43341d1954a9b30e2437ec2412a5

                                      SHA256

                                      40e2b4a2c6075cc5888da7a72c5ffbabffb7dbca201322f0ddb68bd54f4c2b22

                                      SHA512

                                      335a3aeed08b169b2f2712fcc4b242a2905d394209a987c96ccb8ca88a8236bb132d229beaab8f70c0ace5003e6adb387d2483039f9f4dc854b658d107cb9a0b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      fd920e47d6dc46746f71b8847ef14f7f

                                      SHA1

                                      c3ea0f77db39a50c6715a647997c592046165491

                                      SHA256

                                      33bc03159eaac6bdf601cd6158ce844bd81fec7abf2ecef17fb75aa1924815ef

                                      SHA512

                                      64e2d0150983ed4819457e78ff99e3fd4b4d490ed77d22bc23a7aab31d3d2b3ca26a4c3501a7f693dded5e41fa09baee02689980a981ced6f354ee553d18a1bb

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      302f3db437346be08dcb55f827b92507

                                      SHA1

                                      310c5f0fc3df6d79e3087da42eb883174155a8b1

                                      SHA256

                                      00ca638c0c30388dc4cfc485d2baaea54d6e2a77a1c414199b354dd0597bd3b2

                                      SHA512

                                      56726324bbb2c856379e7874d09b494f18e75d4775c2ae24c542198b670c1e61d2476fd3aae9c8f1f20546fbe8e158179f3015d46103727bb7a585c5c41fe23d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      19a9ea8ad8f204d870fec62fb9c83dbc

                                      SHA1

                                      60d59f7c6c54acc484733dc806550776b42cc8ba

                                      SHA256

                                      4c1b6ac2a0b6332852379c29f367fd94f59522e8238ae3d645dcabce070bd1f3

                                      SHA512

                                      ccf901d0e0e9bd30e5af07843da45fce5233a522924bcf13dd961f17f9fc143b286e69ba44831187f6cf763dc55e12783bb6f235980c916850adbb1d0cf95f03

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      7dc8a4db8912e64126de7a9f0e3682be

                                      SHA1

                                      7caebfdda02b3b7eae3c906c66f81eb4833af9e6

                                      SHA256

                                      59181b77b2e53431651db6d90a1011c9a85ebc0fa5bd9824dd39b9877a66de0d

                                      SHA512

                                      94b70533384c644d783cc2418b62f047dbf7b590feae3e601b32e277198d695cb9e12bf52171e7d84ba63c559c13e23364c95c31fb092f7cb06306d37918cd60

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      40aedfd9ff77e7e4556a2568b719b758

                                      SHA1

                                      f559ccf3546579329cabff2310b7659b8b54ca01

                                      SHA256

                                      5a186fbe3b46263eab887375ed7e30d12bb162aa5af652f9a0d05f854680473e

                                      SHA512

                                      08238d97a904dd278d9bb731fd2600f1edff7e239153b69cca299538cd85bc0c14a1b2793c3017f36f513e489ee47d87fd1962f0255adc7f28f6c15fc2274e7a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      b3a2ca05e3fac58fe11e487d0264a7de

                                      SHA1

                                      ef3cd7de2d94f4abc693679218e17d188c272398

                                      SHA256

                                      9fe7769c177b35161157eac3e6f4281c8ac0d22c10f0075d9034f73e5e38a0b9

                                      SHA512

                                      52c4628ce8c57efb68629f7c748141c0be8741044862dd0b273674f244a27575a5a4f45e70fd29d2891e0cea8cac69cf958095f49cbfd132f5bd65f87850298c

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      b839ae487d8c79801925d45dba12911b

                                      SHA1

                                      0d82592027ce79d12d6f7ede8dbcd22057aee7b1

                                      SHA256

                                      6ddc5abc87f85de6e97688a62045d69d8773f033be69950f74cb78b3d9d0d118

                                      SHA512

                                      18318ce011ff1256470210a01c857758c2cce752037385bfdc577717ab5024f674d9b9b5eb3bcafa018b146a77cd3c9364dbf96548caf90475ed2875c76a2c4d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      ecb6309e616921c09b4dfe6dda578e09

                                      SHA1

                                      fd42692dd4900f718a908f609427b43b42ef36c9

                                      SHA256

                                      b556d1a76643e8309e76f54d60840aa0cf3fc6158820f77af8f94e04d1ce9939

                                      SHA512

                                      0c0459bb5880713ad5d2938722a7c98b0eb9833ea1ddf6f54a419f7e4a399f72ca17603264bfb589f3881aecba9d2b40ef1b5a8d895fa35dbc9f9684256e42b0

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      921fa271f1e2216f164f7319a50baedf

                                      SHA1

                                      46d3064b50090310f033251ad014baee9cbbdb98

                                      SHA256

                                      e44087f43a7f9629c3405d05f03c41119a36eacce6fda86a80ba60aebd34d6ae

                                      SHA512

                                      00ae585bb36a2a7945b18235152211d4dd6008a3f58cdba920066a508f7b041a2ece46304b82b275d6dff7eedb78f158003ae823717ddb21537530c92375d955

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      e1f7cd1ab4878bd3d2c56e61312e565c

                                      SHA1

                                      b6bd14b45a3c856b80ce1eb8bd5fc948b30d25f8

                                      SHA256

                                      754d30bf1fd0da7c4cc421e86089a407d73bb0d866d1fc5374645426f4d6a31b

                                      SHA512

                                      cc0202d02687e850fd281f3aba6df0aaa54ce60f5c212c20e5332876ac1413723ab79184526d978b9ab7cb8356f7418114477caf6d1b9fbe29ee9437a37a3a07

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      73930c70b054fa6605d02a082e93ed0d

                                      SHA1

                                      9bf3310d06582b9e0203c814fec994d26f7a25f1

                                      SHA256

                                      c685e1ad7294b83468a11574bf61d8de2b7bc483807f4aebe05edc91a1d1cf05

                                      SHA512

                                      fb4cef47fc2a8632a320b45fd6b5e03a3e3347aee706678b8593d790fbecac1f9c92735febacd8852042b01424f74de16be7f374d9f654da225796e78a22479a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      ec4d8a1661cea718f22be733391c503b

                                      SHA1

                                      6a71750210079706620b606b18ca140c1a870957

                                      SHA256

                                      b6200e9350841c192ad341691d5e325d921eca964fdaeddcaa0a57c7d566a749

                                      SHA512

                                      fbfdd13f8bc2580a51189e0265ee99f76b22e1680c4395f70d167b1a48ae5fe6106d1625b58f20b835510472ebd0df7fc0784a4587f3cad8aba5a8ae3417d738

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      1KB

                                      MD5

                                      fdfcf26e27423ca0998c96d0c6c1f19e

                                      SHA1

                                      2a480e19eedf8b5b19616416cae9af233f54cbe3

                                      SHA256

                                      2f7f8d4ab9b86b38242cd7d1cc99e5c581ecc22c45755701e91bbc9a2b6eb537

                                      SHA512

                                      fc6ef77243a344a8faad3e074238154b9f8e0ed8fa6362258d450ccbb3671d0c9b93ab21ed9db3987d0087f16b362334be60fd72a5e313e02a7bc37be545b5be

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      5KB

                                      MD5

                                      21d27ca215f6a7a0b18727e48ed4fba4

                                      SHA1

                                      0941b883df5d7dcb435d259a5ce68f0da804f469

                                      SHA256

                                      226c6040d2b806daaa31bc5899ab710264f86bf5c1f5706461f5c939de0850d2

                                      SHA512

                                      79f2c0c24fe0cd9d415640a18c6716c04315b1173b1e5751d2b7916a3786471531417acd578088688ec062ba323da1c06a0ebef57d4bca0aab5398cc6c24ce4f

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      1fbadd0dd75b88cd8a6727792fb3edca

                                      SHA1

                                      1f4740279efac11f207c664ee45dd98eefe6d7fe

                                      SHA256

                                      31629bca032c351c42e612cef782d52bc9ddba7535aa0cced8d669d39b39aac9

                                      SHA512

                                      fbfd76c404014459beb98922399877dcf90f8bb32b9323bf9fa9913af3b4c8eec4483206663fd48ecb80f9efe2309ba8baf7dcf136395b0657df0c2ba75a1160

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      63d84bd6b115be476346a8efd3b146d7

                                      SHA1

                                      6cfa42938c627e788c34eca0400480aa17434b57

                                      SHA256

                                      1bf7fe721797d785419278176642251726510f32dd5aa163fdda0e1eb088a9b5

                                      SHA512

                                      44ca0135a2de57aa3722ae90a831ca5691cb2449632911ab4194568291edb6ff3460081a7f6315df439b7cd63f708c205d13031183d054ae5171ce59bb36619a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      dc9a0ab0de876d450cdd6165b700b755

                                      SHA1

                                      1a806c0288a65c6214f1230ad493c9e15b06c3fd

                                      SHA256

                                      c7cd7d260b0856ebf4d50916a78869a0b6f7de4458da6b2ccf60a8843f77e159

                                      SHA512

                                      b4ff9ff8e574c0f823f916e8d24321a6bb9942ff4e747ab7b35a6c0e47713d642fd91858bcbb203c38d21154a6716b0629ec9f60e485c834276f0b8dec6a7ae7

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      61e046cfdc04a59c277ef8f2e7f635b2

                                      SHA1

                                      23fedcb18512587167d270d40bb6392a7bd2d7ec

                                      SHA256

                                      3452bc9eb8728e30e9b292dda3d4591c7d8643cab1797387f0836d5f33d77654

                                      SHA512

                                      555b53c0945afd84fa96218e36890694c94ccce4f8d082f433c6e31d8a852f4fa734c9afa7854e6999c18f3ff66e69d12a92da01c9adeb4781499c2aa44d4bb3

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      c84c88eff1ee9bf86fcdccc880cd695a

                                      SHA1

                                      8bd052946cd6bdefaec4bb02cad3dc98b5e0e874

                                      SHA256

                                      910690b0f6afca03ca048dbf593ebda19b39560cbe6b79bb3a7e27766c49416e

                                      SHA512

                                      2dcd0ef675ae98c654b393be73d462c56d1a8c840fb0dbb7e9941f5f8f84794c057721ecf8221cce534b3cb6696890d008deba7a072e6f4917a85a64474b464d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      7043691a1c3ae0a813bb4f2328bf7193

                                      SHA1

                                      3027c9ed0e39632b17038b09e1646e8dc4a3cf19

                                      SHA256

                                      827fc78bde7c1304443f089b754b28766f2e58e6a80ce5b8952e8e251bc3b93e

                                      SHA512

                                      54b60081de2cb1bb0a45db35ebb5d88a0ec3577506599570357a50252c851eae1a4ed894b27d68ba09d208f9d59223b33e40ff1b56fcc9325c8272b7cd1a0f5e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      9322f0806660b62c0e439562768766bd

                                      SHA1

                                      8fd6a4f52518c0a864a42af6a80986133383f8b7

                                      SHA256

                                      a38fdcc978fa9d72f20b2812320b81fa36721b0893ef869d79e9e71303f08167

                                      SHA512

                                      f8c5679b992692a62a398c8a02f31d51269dc481c725149fd49942c0f7bfd4b20b5d8d50475ea3f1aa3b23d07d1301d17b343398af5a912b0213224af3b151c3

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      6be75ffbcf81c7076eb25a53fc2b30af

                                      SHA1

                                      b2692e51e7fa4dc9f811875e8199bf310c47e8e2

                                      SHA256

                                      53ed19b592eb300ce24747b45c66e9997b58847745dbd1f0c8b42213534f07cc

                                      SHA512

                                      96fa2a5c74d3d8e89488a3f8bc7d53d47f31b60136018ac1a927b50acdf3d57015a608165866622c323410c0bb22241f2b653b2269cb41f9b7e6a42afcf7f2f5

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      96a1a0d820c1eae14ec7a44e73b08c13

                                      SHA1

                                      dade2722e3178d9eb10a83538981588914714e31

                                      SHA256

                                      12871cf56644543a39dc96c72931c7b3af775ea133cc7f6b04b15ce29b9578c0

                                      SHA512

                                      4747eb2bbb3e5f44c36faa5c21188333c401cc20f21e8a960a6855a273607a5a27b8e6f4907ae816819f2139bf56dff8a13c1f789ed17bf09638334636bfe3dd

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      2653730993e2d86feca60ef2609e5dc9

                                      SHA1

                                      f6b5d04090795e152aa2b73aeb88e5a910226328

                                      SHA256

                                      9836842bc0ca5f559fc898075faf5d724502aafab5643463cd9dc39fbeb78011

                                      SHA512

                                      e0406cd7026be5ce622a67be85ff624741574d57842c671362c9be8358f614819a877b7ad78163b256aaa5c104d1130b32660947d2abc74261ebcaa70af220ac

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      f47cbe7ea8dbb4e82f018b67596b2205

                                      SHA1

                                      b5ab717aeffcb2b3ff363ba7e211fca54a4a236b

                                      SHA256

                                      f1012af8b6729cb73f8b3ef829fd6c9a17f4b971b3eb793ea9fc94b56f3e8938

                                      SHA512

                                      1a71dd0ba71bf6d7335a6408334c72ad709092418ce417ab8cf88aecddd0fe808b7bab8e52c4ffd79e29ce812f7f9e5cb0b761cbbe24007910b5c27197606ec6

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      0f6358a16a6d88dd871a7e191335da15

                                      SHA1

                                      e727ffc308ea4950cd784fd232e5429ef3c3bc56

                                      SHA256

                                      917a79f33402b90a91c55d3476f95a45437bc5d1ae9f826d87997f2d3f52cb0d

                                      SHA512

                                      e8282379d2725d05e40903a5910731fac8d9f32d52e1e0506887ca1cef21c9dd50ebdb808ea5f6ba02138e6437b091c130d6a5a05895d0e802df335a07b6421d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      9e1a9ddea33304972c8923d96f89bb19

                                      SHA1

                                      45475b9dda1e4a5c288046b5c589c3746c5b80fb

                                      SHA256

                                      e19e24879f818849ba6e74088df88a5d8ef531c431121b658be523101a57e6aa

                                      SHA512

                                      fad2ddef190acdd29940ef08f8110e723fbc9918a9bfa8b0db559f04243d304ac1c1b23e41bb477ee220cd1c623a70e07f38617cffd9b7ee25a100938268633d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      fe311e8ac87a5399c093321f287227cd

                                      SHA1

                                      cbb5d0889dbbe055c414f63ded708694db38619c

                                      SHA256

                                      2efb98ca607dae74b13931a5d855baba230a0b6571785fb6fa058dc5cbdda6b9

                                      SHA512

                                      028404ed56d5a315938cc094a42ed4a2fdeb95930e050fe4271636514cee4244f047f5d05656037f66758ffbbd8b267edd965ec15a4c050ca6b48cea232e4670

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      7b32721eb8128aa31af2310a3542c356

                                      SHA1

                                      7752a8c952e6c65ae4a63cf1642a2c84b7c3f3f6

                                      SHA256

                                      fff83e70f6e7e6e18d174dcabc05a203f0777677dd2dde9720f68df25dfdd9f0

                                      SHA512

                                      d916dc4cb6b416ba0dfa0a06deaf88f6b3160ce261947886616372fa608d7d55ed90a6b490b9f9a95c6d1e70ace866b1ab14d21f96746db8fbbc480151672c3e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      00690eb0486d556ea54deb12e9613843

                                      SHA1

                                      89490109db5896b49999a11e5bcbe1c2b7b94f7c

                                      SHA256

                                      03498d03d3286347795f67d2e59adc1a5ae597966458500ad1a4051618cdbb67

                                      SHA512

                                      c05d5acea0da2472144fe8393a19e54407f2a52cf389d687d2f801b840fa9fdf67895be444167a2b7ca3128f96b818ee8c97e2d4131e0ac1a2e6f08dd92f507f

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      3d63038f9f9d056281c38bd3ec971b00

                                      SHA1

                                      0305c8406b6199e1f8ef641424a60cd9c6c265ed

                                      SHA256

                                      ab7c336fd6db5e5f74b7dc2a6cce3bee4f1ede0a2a86936329ad1e97a331cbd4

                                      SHA512

                                      188deb2f297fcbc706a559effe89a107c01874db2236491bfbe80a06c8bac34e608fd85a66800303f1e9fc3425a8625086552202a5e44e52223831a01789c04d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      3dfe559a299ee15a0b869f120fa3ab54

                                      SHA1

                                      f9d8eed110f993a3b83892235ed565bcfc548d78

                                      SHA256

                                      00887d0245d0c5252896d85718de5c304f526a80c98be26e72493c7f47b78819

                                      SHA512

                                      a9ea79a6da8bed29c72f37a12a3e2a19b1e14a6ba0bf48f545d824c1848bfd264c398a524f7c24c5837548f6c7255767e8337bde5a53359dae0f480147d33a47

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      25c25dd0670dff507db600ec0633da99

                                      SHA1

                                      6544cdfb5bab5d0688c48cfb4af459baaa969461

                                      SHA256

                                      68523888a35b2f8b407354fadcee926ec61301895c5041b6932c933f1afe2861

                                      SHA512

                                      b978c85d0072d7b53aeb66db825f59424d15a8f86e39332ac59c1afe42396c933b3e9f23e5294af388d66da5cb017d340f05958a4b68cd70ffd51e325d4f52eb

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      0edf751d3ffb2dbc67ee320a6516e0dc

                                      SHA1

                                      ad38961064a0da18445e26e52d257eda91ba17b7

                                      SHA256

                                      fc91cc182c1e8db5841465171c26bbcecb417773833747fbfd5c2193ba2366e3

                                      SHA512

                                      cf6395cf4614ce7f0a3c328e8021293f5024832d64c3f7071d4af329c9090200884394a8d743a2e8a7cdbf1bd578d4215ca89951e51bbaf14d931ed2f5bbeb7d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      0782c657ade2e7508b3902a0cf1e6564

                                      SHA1

                                      84f4b116e743d32c844038f15cb1717a9e1f1e1d

                                      SHA256

                                      31902f64c962878612cf89602f1b7ca7e0ff2538c4c58856a4cab5e269267c6a

                                      SHA512

                                      b2d1063ed30d3dc36dfa0ef53853047bb691428cbc20d24f27194f3fb0a1fe338fccac7cfda40b53b56c6fbd291ea426087f25e0317cb13961077f0a99bab1e9

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      86b90cb732c93d6fa65a9cc8db50c602

                                      SHA1

                                      89f562364db05d80c6f2d9501efdee3bea24367b

                                      SHA256

                                      6eb6bc4061a23e11b5f30c26578353628847d48e623a5871f0818c77ac678312

                                      SHA512

                                      1b25e8990836b4a64c4cca909daa0d676fa3adef7c93ff74b055b61ffe58a9b357807e03c2d0e574a072eaf8438081d7553be8389697aae6ee387c95378007e1

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      8dcb3d8f15fe1246f86625d66568310f

                                      SHA1

                                      653672616409b7e6a988c6faaf237332ccd6cb53

                                      SHA256

                                      d71c918920282a5113c6e875fb20680b6b1ad8cd50069b18357589a6ea6b8de0

                                      SHA512

                                      dc30285b57749d3493704597e6631fbbafefd686b497f2f4d8724dae915a7d32380d5bcf55b8fa308148cfe21d8ba0027eeeb23d4322c4b18e3a94282beffdba

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      6c2d234d435b6c7a942fb2069cbac34b

                                      SHA1

                                      0ed6fa35ca9bbb4582e935fbb285ca715a9db285

                                      SHA256

                                      b4babb3a67243d2ccc8d8de56bd5bc064c1e0eed46ce2f21a27d6d01c32e5bb4

                                      SHA512

                                      5457cb4d724efa80600066e105a8d518d45736a8211ee595fc7da1bd4721c6b6dc3daecadc8f872a5da72348ce3162454888895cdad602f2d4139c5f4c3e6921

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      22f927a5390d4ea2c5f6c4cb423a78de

                                      SHA1

                                      b30d49949394ddc40ce2bacff6b8dfd35d5f940d

                                      SHA256

                                      1f81703859f59ccaa72c8b637dca9c1132546b99bd5f09774a7cc96f4d7997c2

                                      SHA512

                                      d77f5ba0054cc64900a52fff41a649299c00c23da5874df240490edbd95a60eb93b36f6a81e28737c900f54ee988c133e6c4b4af352d891d15da61f32d20f7c4

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      665eaa4e961640217cba813207b8aa36

                                      SHA1

                                      a36c10a3b099c734b1ab883d19fd272a42f00cac

                                      SHA256

                                      141d445bf950bd91635a46109414915c0d2047f9e2b792d47220ea0f92018817

                                      SHA512

                                      1ad984f1c430c33bd432fc2f2e664cf462b1430b11ea5ad25c69aadc3e26d7b4e4d36e761a3018e529b0de8e12790167892ec1f6aec8e588fd9342ac69dda247

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      0f22fe259a68524bac7c21fbbe5c2d1f

                                      SHA1

                                      a4c78d1f37bbc5eb4bd81dd88e2868799090763d

                                      SHA256

                                      830eefaa34729f50b4b26c43115029348d2445c0daacaee730d6f25d7d6429d3

                                      SHA512

                                      1191b004c846caa633cb2c2ade6e3384263dd4f7ff62c0b8af43b544209f1db48c5acf1f64703fdced13d96a522bfed5500453688b28eadd03601fc77b7d5153

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      601849d594c890377c7d0a3baec3ad68

                                      SHA1

                                      6446f2d9f92c87d42a357524b45944c934e24fab

                                      SHA256

                                      93b16c6a6af733709d634ce711c6d7632f7606153732d389ba4468fb32be941d

                                      SHA512

                                      a244df27003ca443213f1678c3bdb7028e669c1cc885cc96684e9096c2d24524c5105237876ed16685d10a8369cd7d1e7b2a714b1ab24d64ccb9751ed53035dd

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      2a4be767ace6a9a7d6e52da5efa5fb54

                                      SHA1

                                      168c981d38fd62a2bc7a5f0ddef604ef887bc840

                                      SHA256

                                      0e5687a03a9fb1cf1c74e6fd337297be1d39c0fa40235431e8e25c2b9dd4e6fd

                                      SHA512

                                      5ba6351a6899d818648ded3110a071500da21e602ad8daa4045efc85dc21f53d8986f76b0ac90a44bcea4e674fb7b4ba5261746442f53edd0ae1960343f39ae7

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      da67ac3a44973ef977a2f12326d3990e

                                      SHA1

                                      35734fdd9ba7babec11213bba7fd904f7bee07b4

                                      SHA256

                                      1c69123bfdbf6d408adfc326f8bac98390a79b3aff09652347960e29909b88f5

                                      SHA512

                                      914f5ea01d1a2c39a1085f2a5da5f1d98fd47e278fd5b621da0d47a0e3e943edb8e70418348629bc16580cd13cd09f9ba23066c1c351d1229740e2f3e5e1ca87

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      6fc4a82e3d90689b95252724fc832ce3

                                      SHA1

                                      ef394d0ce2dc39d09d96c1fa1cd9358da189c594

                                      SHA256

                                      e16b9de6ea38ca5f2f5e2ba6528903b19fad82c13df9a804cd7be4100fddf002

                                      SHA512

                                      76f31836ba417be64e10da1bc6eef5a17260d25cee0853e014316ae2d103fb50639963f89d1be8b8cc084fa0475cb732a15ac7fca11cc15284f8248700f5996c

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      11e0371ef87df180ba3a578b1509b27e

                                      SHA1

                                      6e82c4d1ae2dc01ed199bcedd91128cd8dac9ab7

                                      SHA256

                                      98ed82adb8cd87284c918327973ecdb9858e5751ee326e07972171eafbf84c87

                                      SHA512

                                      4bf2256d5a3b90ff02b498ad2bf9a9ecd5df3e726552da3cccfb4de363d1243df0017eae1dc5513545b10fafa76c044b3d7da295a0d0e677ee65a1665d3f4143

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      1408aecb7c223640e119871b50bef57e

                                      SHA1

                                      5fb3896dd7b1936e3f2e692406bdf00ecd0cc7b3

                                      SHA256

                                      509630a409cef38e4bf635cdd4e82178c7f01e39cffa03986583ff496b477dc0

                                      SHA512

                                      a723b9b173a8897e6026e81d75e1ddbcfeba148dace0a9a5411a695c1a7f99f81e93f3400f8192e76c559de6f0dd502d4ee122a07e9ac21a415aee5e6c8f1fed

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      939742ae8e655cfe5dffa92e455fdcca

                                      SHA1

                                      7ccea3f97005077903e6ae81d21b5907776d2bca

                                      SHA256

                                      adeadbc824e0df1389de191526ed333171313604847d8553bc8b119efad44b94

                                      SHA512

                                      0d207d0eb8511ddd33c450408460e1476a20c6eaa212e036ecdb7b58fad3f2092a508d2a69049de97f5f53735f21950db3aea4245890c447849cc548352dc6c0

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      8c48c8bbe52e17c4156952e009e0ca72

                                      SHA1

                                      a715936ab4e8ea149fa69f26683d5a150cf82aa9

                                      SHA256

                                      ea5fab34b1a4639bf13cf647bc6ad49e4575b246fcc59c9898000e0c829f8109

                                      SHA512

                                      6f3de1ddee4e544a94c366c5cefdf62ab67330144bac70617bc28f8b7ffd1eb978919162cb10ec446c62056a3962c803a43be7770f2a16c6df86ee75ae1d00f5

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      dbf37b3fdcd5a45f72078d46078f847e

                                      SHA1

                                      bab65d3c350ba5fb5a9f6468d47964f8497d1b03

                                      SHA256

                                      964f7d53e952e367dff460874fd010948b56e90dcd7ac1c0e7bc7ed0907dbc2b

                                      SHA512

                                      44a401836589ccbdff48b981d2b7571809e8f5fefb3becb2ed5d75d2086c0dd95f19601efc6e7ce7937e003c8efd2865f5ed6f5c5b28790739e4a680600c582b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      affde71f2f3f11d29bd6b919077f5bed

                                      SHA1

                                      a9fce0c397878b7d54bfe30ecd08f7f97533ca8a

                                      SHA256

                                      1312da433562d9253c1deaac4c8b653b1b79d7d1a79e7ae66f44fc5629547278

                                      SHA512

                                      dfe4a6df388a8194c4d2fadd6a80ccdd10024a172a84e32de50c2e177dc60522d2e4f52d5c3eb16bad7dfa335cd2a4a6dfee89dd986c41a8c3ae043e6d6f5fbd

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      1279b5c03da2a9d3dac1eba2889fdb6a

                                      SHA1

                                      756454683cf7472a6caf74713b6808ae35d7251b

                                      SHA256

                                      f91c62b1eb946056893e1a22d08443610dac93cca4e72d4307e34e85121496d6

                                      SHA512

                                      65677bd1f6bcb4daf48e649055f08ccf9abb2647ba96e97806344315f0c9e3356943cb98bed1f5d233bd1f876f0dd4dc99690bb70f0eaea541b50c99696890e3

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      d66b69ad4a3b726d022c52fac9465a95

                                      SHA1

                                      23b1080215bf8032007f57a6d4be254e868f8eab

                                      SHA256

                                      bd2da052109b817f6a76975e82cea7a27e0a20c4fff9cff9d3a26de12417a0e1

                                      SHA512

                                      6a74bacc5936a6377208746c464547de07e4eba6caf91e97231c54ebe27a3422aa17b2d4d8d15b7542b283e31f71c475bc5bd4d5d62aec5f0b3f2b8ff3770a5e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      52794af3fa690f28b312eb0aa24d2934

                                      SHA1

                                      9d0b2f36b98655cd9fbd90836fe7500b36ab1a9e

                                      SHA256

                                      13ca90b8c413db6f79e8d8c9282e217c0ba244574b450be5422744fc5f6c7511

                                      SHA512

                                      4d6263a3eb183fbeb9cffbe654954e58db6d05ce7e82803f57b95102940b42ae536bb12b6da5b48c7ae4b6dfc3a5624aceb46831ac3405b749e012ee904426fd

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      647543411dfc910f1d968cbb8a10097c

                                      SHA1

                                      926ce324936a7ee8022f89243996eb8cbcf85625

                                      SHA256

                                      1cb4fe7c9100496636c5040887f0cb90e9e4f9f109b08592de91228d5e95ba81

                                      SHA512

                                      c2c781fa196aa72d0bcdf3f4c1b306ca875a3a0b154b22997e0328da0a7ba36845e75a94df2dee3987645c4235867b1b83491aa8c102fafeb015b39bd8088123

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      1KB

                                      MD5

                                      cf6d26ca4f379929d3d3049f497f972a

                                      SHA1

                                      8f42120ad04facecf6459d600009571183efba26

                                      SHA256

                                      a7e017d6cd56331a6014c7700023ef13e18464359c47bee23c4b9380a0b889b7

                                      SHA512

                                      d874a659c963790acac97caf92674c0b0faca2a83bd96ac05eb8ef31d54dc2bf29ac849efa8a572ceb7cc5ce0a13e1b3d030c4c5e458051c615f9c63707441b6

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580402.TMP

                                      Filesize

                                      863B

                                      MD5

                                      8d6e8f4bd3e637b7cc94e172e2f45e97

                                      SHA1

                                      846c5ee2ee2037f748c10fbb674dadb76e03d5dc

                                      SHA256

                                      a3dd98a7173021510b2616c8af63837657d1be41b9de355b27b1d54b9540df9f

                                      SHA512

                                      0c001deaecb99df1fd92ef50b0e17627edb455151fe709062f9a6c57ffc280566420cc4d0d16bacf0f4d2f6f4d89ae5ed46704f44c30b5c15550a3dd2b128cd9

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8b78b9d-55cb-48ff-99b4-99932b99677a.tmp

                                      Filesize

                                      1KB

                                      MD5

                                      44d6480df3d912b22609ec0abc68f129

                                      SHA1

                                      4060125e37b056c61683ece37f39cd55f29c9ddc

                                      SHA256

                                      5d9d3eb3db0b7781dd96c4fe093fecca56437cd3cd12697101ce5624e460eb98

                                      SHA512

                                      b78401bd608f528892ebe2369504db4c1822ffdf5b01efc56d4c476dc0feb7c4450ba7f69af14a06e7d76ba396477a2b612b827fc4da013f172826a05530927b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                      Filesize

                                      16B

                                      MD5

                                      46295cac801e5d4857d09837238a6394

                                      SHA1

                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                      SHA256

                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                      SHA512

                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                      Filesize

                                      16B

                                      MD5

                                      206702161f94c5cd39fadd03f4014d98

                                      SHA1

                                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                      SHA256

                                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                      SHA512

                                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                      Filesize

                                      11KB

                                      MD5

                                      2c3af6c0a460291a5a20a4d9015d1398

                                      SHA1

                                      929cc01c08421d3cacaf345b1de46059235e05a0

                                      SHA256

                                      0710c31bc30e65c3669b39d26ed88c7645ba6d37ab79eacaa6907ec397b1e9ad

                                      SHA512

                                      86b6b573a07a1cbea6466c895257d34346a85e92e478446b1ebe78944c0b634aa99bd3545c14e91c6ffc1194185d92e4b5fb2f577d247590a79dfb16a93b092e

                                    • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                                      Filesize

                                      10KB

                                      MD5

                                      bd46e85d4c415d6399980d58ee534ae3

                                      SHA1

                                      42ad1e0bc18975fdffd62cf4fcbc6aeecd6e97c1

                                      SHA256

                                      73430968c3ea5381b927aad54fad64eff4e8bdab6a2ff24ded2a74294ae0d889

                                      SHA512

                                      5468c689739c3e18b694e991c1c50a83392652f2506cc63c67eb4981ec3331f6202c7880df15306745ca1ed7861373121e4e94584bf0432c05b20e503ea15eda

                                    • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                                      Filesize

                                      10KB

                                      MD5

                                      72a2bfc58fb8db6a6cdd9231d9ada779

                                      SHA1

                                      a54dca51df13127bc98c1eb97663bcd5e813b934

                                      SHA256

                                      3f1baf48fc55424b066e1146bf41c1a2b84085eef3da7c434ce2ba141be40c37

                                      SHA512

                                      e16636c4f02dfa5a418997a9f9f9fd7148bfee9e821bd25f34e2e1e6b8da5a1bac04354875e8a5f6d71a57eebf87a2fc0a311f6838e1b8060f5ee60f37ce4785