Malware Analysis Report

2024-11-16 13:05

Sample ID 240819-sv6s4asaqg
Target https://github.com/moom825/Discord-RAT-2.0
Tags
discordrat discovery persistence rat rootkit stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://github.com/moom825/Discord-RAT-2.0 was found to be: Known bad.

Malicious Activity Summary

discordrat discovery persistence rat rootkit stealer

Discord RAT

Executes dropped EXE

Legitimate hosting services abused for malware hosting/C2

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-19 15:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-19 15:27

Reported

2024-08-19 15:55

Platform

win10v2004-20240802-en

Max time kernel

1650s

Max time network

1658s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/moom825/Discord-RAT-2.0

Signatures

Discord RAT

stealer rootkit rat persistence discordrat

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\release\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\release (2)\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\release\builder.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\release (1)\builder.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1302416131-1437503476-2806442725-1000\{06F999C2-AED3-43E8-8A74-CD761928BD4A} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release\Client-built.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release\Client-built.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release (2)\Client-built.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release (2)\Client-built.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3312 wrote to memory of 3492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 4820 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3716 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3716 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3312 wrote to memory of 3956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/moom825/Discord-RAT-2.0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9931e46f8,0x7ff9931e4708,0x7ff9931e4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5284 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5284 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5440 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5384 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x510 0x30c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2692 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6568 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\release\builder.exe

"C:\Users\Admin\Downloads\release\builder.exe"

C:\Users\Admin\Downloads\release\Client-built.exe

"C:\Users\Admin\Downloads\release\Client-built.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7820 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3696 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3696 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1728 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x510 0x30c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7504 /prefetch:8

C:\Users\Admin\Downloads\release (1)\builder.exe

"C:\Users\Admin\Downloads\release (1)\builder.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4724 /prefetch:8

C:\Users\Admin\Downloads\release\Client-built.exe

"C:\Users\Admin\Downloads\release\Client-built.exe"

C:\Users\Admin\Downloads\release\builder.exe

"C:\Users\Admin\Downloads\release\builder.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2144,5627813567036227676,6590783020918941720,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1256 /prefetch:8

C:\Users\Admin\Downloads\release (2)\builder.exe

"C:\Users\Admin\Downloads\release (2)\builder.exe"

C:\Users\Admin\Downloads\release (2)\Client-built.exe

"C:\Users\Admin\Downloads\release (2)\Client-built.exe"

C:\Users\Admin\Downloads\release (2)\Client-built.exe

"C:\Users\Admin\Downloads\release (2)\Client-built.exe"

C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe

"C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe"

C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe

"C:\Users\Admin\Downloads\release (2)\Release\Discord rat.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.111.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.113.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.113.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
GB 95.101.143.183:443 www.bing.com tcp
US 8.8.8.8:53 183.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
GB 88.221.135.25:443 th.bing.com tcp
GB 88.221.135.25:443 th.bing.com tcp
US 8.8.8.8:53 bing.com udp
GB 88.221.135.25:443 th.bing.com tcp
US 13.107.21.200:443 bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
US 8.8.8.8:53 192.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 25.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
GB 95.101.143.192:443 r.bing.com tcp
GB 95.101.143.192:443 r.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 20.190.159.73:443 login.microsoftonline.com tcp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
GB 95.101.143.192:443 r.bing.com tcp
US 8.8.8.8:53 5.181.190.20.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 discord.com udp
US 162.159.135.232:443 discord.com tcp
US 162.159.135.232:443 discord.com tcp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 cdn.discordapp.com udp
US 8.8.8.8:53 cdn.prod.website-files.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 cdn.localizeapi.com udp
US 162.159.129.233:443 cdn.discordapp.com tcp
FR 216.58.215.42:443 ajax.googleapis.com tcp
FR 216.58.215.42:443 ajax.googleapis.com tcp
US 172.67.41.53:443 cdn.localizeapi.com tcp
US 104.18.29.203:443 cdn.prod.website-files.com tcp
US 8.8.8.8:53 apps.identrust.com udp
GB 88.221.135.104:80 apps.identrust.com tcp
US 8.8.8.8:53 d3e54v103j8qbb.cloudfront.net udp
GB 18.245.246.158:443 d3e54v103j8qbb.cloudfront.net tcp
US 8.8.8.8:53 assets.website-files.com udp
GB 18.244.114.78:443 assets.website-files.com tcp
GB 18.244.114.78:443 assets.website-files.com tcp
GB 18.244.114.78:443 assets.website-files.com tcp
GB 18.244.114.78:443 assets.website-files.com tcp
GB 18.244.114.78:443 assets.website-files.com tcp
GB 18.245.246.158:443 d3e54v103j8qbb.cloudfront.net tcp
US 8.8.8.8:53 232.135.159.162.in-addr.arpa udp
US 8.8.8.8:53 233.129.159.162.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 42.215.58.216.in-addr.arpa udp
US 8.8.8.8:53 53.41.67.172.in-addr.arpa udp
US 8.8.8.8:53 203.29.18.104.in-addr.arpa udp
US 8.8.8.8:53 104.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 78.114.244.18.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 158.246.245.18.in-addr.arpa udp
US 8.8.8.8:53 89.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 6.39.156.108.in-addr.arpa udp
US 104.18.29.203:443 cdn.prod.website-files.com tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 104.18.29.127:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 127.29.18.104.in-addr.arpa udp
US 8.8.8.8:53 168.214.58.216.in-addr.arpa udp
US 8.8.8.8:53 remote-auth-gateway.discord.gg udp
US 162.159.136.234:443 remote-auth-gateway.discord.gg tcp
US 8.8.8.8:53 234.136.159.162.in-addr.arpa udp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.130.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 234.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 status.discord.com udp
US 162.159.136.232:443 status.discord.com tcp
US 8.8.8.8:53 232.136.159.162.in-addr.arpa udp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 media.discordapp.net udp
US 162.159.130.232:443 media.discordapp.net tcp
US 8.8.8.8:53 images-ext-1.discordapp.net udp
US 162.159.128.232:443 images-ext-1.discordapp.net tcp
US 8.8.8.8:53 232.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 232.128.159.162.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 88.221.135.0:443 th.bing.com tcp
US 8.8.8.8:53 0.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 238.75.250.142.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.134.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 234.134.159.162.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 162.159.130.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 17.173.189.20.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 88.221.135.16:443 www.bing.com tcp
US 8.8.8.8:53 16.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 discord.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 92.123.142.97:443 www.bing.com tcp
US 8.8.8.8:53 97.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 discord.com udp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.136.234:443 gateway.discord.gg tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 92.123.142.98:443 www.bing.com tcp
US 8.8.8.8:53 98.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.105:443 r.bing.com tcp
GB 92.123.142.105:443 r.bing.com tcp
GB 92.123.142.130:443 th.bing.com tcp
GB 92.123.142.130:443 th.bing.com tcp
US 8.8.8.8:53 105.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 130.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.133:443 objects.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.135.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 233.135.159.162.in-addr.arpa udp
US 8.8.8.8:53 status.discord.com udp
US 162.159.135.232:443 status.discord.com tcp
US 8.8.8.8:53 images-ext-1.discordapp.net udp
US 162.159.128.232:443 images-ext-1.discordapp.net tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 discord.com udp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.135.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 234.135.159.162.in-addr.arpa udp
US 8.8.8.8:53 cdn.discordapp.com udp
US 162.159.130.233:443 cdn.discordapp.com tcp
US 8.8.8.8:53 233.130.159.162.in-addr.arpa udp
US 8.8.8.8:53 media.discordapp.net udp
GB 92.123.142.176:443 www.bing.com tcp
US 8.8.8.8:53 176.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 185.199.110.154:443 github.githubassets.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 gateway.discord.gg udp
US 162.159.134.234:443 gateway.discord.gg tcp
US 8.8.8.8:53 github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 162.159.134.234:443 gateway.discord.gg tcp
US 162.159.134.234:443 gateway.discord.gg tcp
US 162.159.134.234:443 gateway.discord.gg tcp
US 162.159.134.234:443 gateway.discord.gg tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

\??\pipe\LOCAL\crashpad_3312_STKTNBITIVCMRIUM

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9bf5e294b8146893bbe9aac81cfdff36
SHA1 b682dc015d4eedf23a03a79e0a012ef26a1d7c5e
SHA256 5e919f79c26a254c7eb5ece9682f8ef3cd4c4f12b90a8131ad58c9d9b1eccc29
SHA512 b5750d2e628bea1859e86d416ac6fd7945d86e89f5f66f5ee36fb8c9db93de8127816e0fe1dd2005526e0196c39a335b8671a4e4a4bb6c9c703bc2d134600a7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5a8aff5831e634d8304f81eddf0716e4
SHA1 f010ec09b72a8114090ae39fc8f091bebcc87527
SHA256 780d088f8b0d0cdccaca6e10a3cfb618a91d62b69b043fd36ad1fd27d3035cb3
SHA512 c7ead13daada8aeae1df2661ac97d7ed6b4cb1a64d6f0a6ea90de69f132fb9312443dd4e91e3279312301e38f0c91bf6d8ab8a4acd7bd7d84a92c769bbdd9bbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a4f37a1d0596ebb401e385c6f8de9402
SHA1 1782a97c49ebaf03a28b7bd93725abc14d419027
SHA256 d1f4916dde1eca394e0c8c039782cf8bf34b23b78d5dc8d53307243e53ad6212
SHA512 c82d73d2a0c783a11d93091efb9cd7f0009d25656bc567e008222ada7ceec2a21f0b5f1a0be375c3beb4ffb0c5d0da56676208660aa3140fe8183b7f523e53e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 57cbfc997ed505ee55338b5e912a9149
SHA1 709f0351e9e292d6f15f0c327e1a6565bed1746c
SHA256 08036fb5c0ad497cb9b491cee797e3ca82b9d78e157962229f9a4c69c3802ab7
SHA512 c250e25e75d3b4fbc85b94a8e8c7bc224fe0c85cd5b24edc44788131d91fec863a93bd3a1789d523590b714eb5888142885edb3c38921716d467559843907682

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1963e06799629a7f36126bff5d095646
SHA1 3866aa3276463c76854ca7a4312a1e6f22fba5f8
SHA256 348cf07c2c4173f14f37b793e0bd35d874edc884adccd2092fab7b7206ec482b
SHA512 5905e5f97494faae67f847bf007d8e01f7fe1059e72e7fb0f075e5be60c491a8a13b88367ccb0d3ad186af9a5442921896defe5a157a552d49aadf4e49b44700

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d2d3f7b875783c825254fb8822418274
SHA1 bf3a1c20bf3107e7216409e8c4d3eb12552d931f
SHA256 e9072f0199bd9d946f2a0f8ee693e06223b030b1f4204ccff95059a220f3c177
SHA512 515f7a59aab3f3c7f12db41d80c376348188fc1416fd0f6ff4ae70f597ebc7dd9ba1cd28bd6125405ce1b6e3d0879ea5d0ef1c32ddc2ea41ac42e2f8eac9405a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57dd7f.TMP

MD5 821bc4af6e439028c8d12c5e00743134
SHA1 32c86e01cfe155f6427ec0697f630ff0978a7457
SHA256 86e4f664596dde17a1f79ce945a3687cb1ad927f75ab5d5a0c06d3f9ea86756f
SHA512 9fe1b00fe89459f1b1e9cd520e8abe35b68bae367d3d4fa2f492ba71c61b6455b1584f274a76071e8a66ff821b314313059610fc4ab8b1146a00b5f1447de4b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7f7b1a5dd880de631220b850ad365441
SHA1 b0586cbe4c0d0823e50ec9c4dd9d068e85d65fef
SHA256 f497807de1fee5e23fde472cfc96fccea5f3b3bf2fd7bbb98f8203b610e2c074
SHA512 58b7563c31dc74af772d0c854e00d6abe187706799d29c8aa7b8c74226afa15abc90707aa29845b8f37cad88b1e62a119b06ba5a5e59e8d5ac1e794693f6fcca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bb977a9b29f14f4a303cbd902f2341a8
SHA1 d150d42379a02f443c1ce174b4de2fd66f5695cb
SHA256 98f42cd8d98b4a18162a82e080edfbe3e040d4ac78cf4ec4cd580ceff4d131da
SHA512 f965ceb4a5be10bd9cfcaaf9ca88602839553118eeeaff6e2e57dcd78daf21ffcfda7a029ef96365aee3bf1115d3ff3e902a1416f93aab596df0ee1e956d474e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 570288a69bf055cff64bb4b6ed34dabf
SHA1 b6a3f9d707e8953f8d55c0ca540558f79072601a
SHA256 a1a265993be5f4cbd33c69250852777fcc8634edcfa7489a1d3d05f624edcd26
SHA512 98c0f0fff38223c6b53cc3648ecf2fae5ea53560e1ec27a3449684391f801c158774270e90a947135fd0814746c7daa4b8df06d48c7698e6bd57750eaa435da9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9adfe5f30d0fa5260ca9e74ec5e7836
SHA1 517d7a3651f74d1526814f97a8c13a550ab7013e
SHA256 c47951c5e549b273f9f3f6071f4a1500bae23d1fd22bbe871b6806408fc459a2
SHA512 03df6dfe6b5039ade11b5f78f66dd17e438cac0b4a9db733006fe0a1a1b2338a8c8e7a92c85f1df075a788f0f77a875df0366d4964b20b815a22c2d86d0a6720

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fb4ec82dcb7df4665a0e97d945eba9d1
SHA1 2ed6d71b2aecacfb82421c420ec42b252c3561cd
SHA256 5ec7017e6795d4a617a51a3127cfa3c76d87e465749e4e38cf38cad05f697504
SHA512 9f89aa45abc82c0bad949297b8dc784db61ebb6146d904d10b547d1c2fca4397c9b03c7059c601170aea6a8d22e034c0d4ff7d129690df4cbe8e8eb03b5c2de7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4508cd6f61d9891b3462610de3cdd564
SHA1 2da57f8ba10b8b1d0b4fb03b27da7e8c3b342eeb
SHA256 1d036e6f942254d87cef112064b8e8e8f758c6a6253936ddfa5c9f95d99377dc
SHA512 9b97186614d1911be1972fa5148c4266e93fdac5e79d011918a0e25ce696e2c4c10b91d98d495a234474874818e5508fc564e8397be9cd380858ba76582a6b7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 33a64a9b60eaeba8b27bf125d4034080
SHA1 98c80062f243b9e704914f48d1e52fd4e265d130
SHA256 2124e0a79d654e481cd5798bde36b146a5f8b92bbcf1d725763a9ee4a4741ad7
SHA512 8e4273cb46785da551eee0c689f281425cb25d33b37e4929fa33f6e237357deb54c990bad639ed8763f44484d4f399afb75525983b73b02744c6b62b6df0ab40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8e528e4402533af1e2cddc4e0d9c3968
SHA1 617cd028129446ddfe2572c41629124d80e4791e
SHA256 49a6a628ecef89c724c912ac751a1d3d052a87941560a8847928a32f6805e6fa
SHA512 02fc56ebc4350291335701dcba6883530718ea36ddfa2501a2432e1b095a67341a6739b039c3a9bc4b74dab5cae42a3f443a083c0238cd3e4a42180c5107bcb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7f8fcd575a899ce55d98fb9e1450c1f
SHA1 32c85e12e3ff8192f9958fce67147445d7ea38d7
SHA256 a55836e107b26785529446d53844b459551f8508bcb3163ee9890782d3560849
SHA512 3fb0fd2133478e6421d608bcd210858ae5b76242b6606144365446f546311c352f7060becf44c742ea32ede6b7e1e31febe18c7622f6ce06e7a93677e51d5eb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 0f6e110e02a790b2f0635d0815c12e5c
SHA1 2411810c083a7fda31c5e6dd6f1f9cf1b971e46c
SHA256 2f7018f3c214ace280e4bd37aabe0690bd9d8d0532f38e32a29d1f9de1320605
SHA512 2f2fb7c4ddfb6abb5dcde466269f625eea58a2c69d25830e6bb24126e7679ec7c83fdb0d8ff2a7de4dd4b994513f5e80813dbf1f5d6a9a474c3a60d8bee74f4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 e352d970a4f70796e375f56686933101
SHA1 20638161142277687374c446440c3239840362b4
SHA256 8a346ccc26d3ae6ded2665b27b443d6f17580650d3fdd44ef1bb6305bee37d52
SHA512 b2c95bc6a7bd4cc5ef1d7ea17d839219a1aa5eba6baeb5eab6a57ec0a7adbc341eb7c4d328bcc03476d73fd4d70f3a4bdec471a22f9eb3e42eb2cae94eeb1ccc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 78fe9120112b8ea313c1800ed9f0aa8f
SHA1 0f63351c64f5ce70d9730956a880cb24b4b3ba2a
SHA256 bd4b1e7f11907e91f49dd3a5dc2935960f1c42f92f0e84bd03359f8fd1811fbd
SHA512 c0e8248dd72d893ac0fea2746d168f92fb06b5d3a5ff4b7e9babbb21ba8abc1bd92b2f7bb68a2e8080ede1ef1020d0d7cdc9ba4c5037767c36c2dedd144febf6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 555549c56fa73632006b20b39e2fc73f
SHA1 6ef030a4927f0a9335380ca8b9d203ccf2e9262b
SHA256 910135a4afa370d33242acdf10e7e1c6755f99f2d573559fc867e1d71664eea9
SHA512 c81237f27037e97169f91bea51f3800c98bd4a046625cc13036c330becdb62cda586bc3e7af4debdb57f919b6f76868fbc010928c99ed356fcaa5744e39b0f67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8c9db3acb05f6b8e95e8a81527f27b70
SHA1 0340219f379acfaba8b7d17a3cf07d89ac37d2bb
SHA256 02d6dae99ef5c06608405c3932d11047522fa0a4c19955787e5d9b2f29229653
SHA512 01146e61a4a71bdbcd726d029d07680744453b476226325e6ac372f903d73eaee3fbeeece46772c05ad8ecbee7ba2f9902cc3dc2b01fd8c220a6d6e81d9e189c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0d3df476ee5a13a28865a435615b0409
SHA1 f301ef291c0ea076b778040c05ffd9f4593cd8e0
SHA256 51432be15315133b702c893c0eb7be54bb2e0afb18c9e6f1d25dfe73f1d4e375
SHA512 3d219aeb08a1f6e92eeef1a1a4d47312b3328b63cf3e4520289835ba4bb8700528602c0d7a3ab39a362384cc3b4680cf8e125f64523742d1e0754e0785d81cbf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7af15b3ba6ce9d6aa3fd31ae1cc2c48d
SHA1 ff93e07da2e0e45c329b7668939faa694152d496
SHA256 0af4495ef7c204dc3d09be17b39e69a6102a1b92ec8ec431cef7447519f1ce18
SHA512 2dcc042caf4f67b065a765cb6bfd8fbc16ab4764535295075a9ce409773752834d3e858a742507d08a8de5fd45b2407e2e87c0c6672872097af727ff8e720a39

C:\Users\Admin\Downloads\release.zip

MD5 06a4fcd5eb3a39d7f50a0709de9900db
SHA1 50d089e915f69313a5187569cda4e6dec2d55ca7
SHA256 c13a0cd7c2c2fd577703bff026b72ed81b51266afa047328c8ff1c4a4d965c97
SHA512 75e5f637fd3282d088b1c0c1efd0de8a128f681e4ac66d6303d205471fe68b4fbf0356a21d803aff2cca6def455abad8619fedc8c7d51e574640eda0df561f9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7bfe5a119b2cd2dc18e3259829298c0a
SHA1 4284f89e14eacefdc0beb4f03c832c1d7088816d
SHA256 7b9573176992301c8e25ddd01df63f5ab173c3476acc6a69af1327853be64fc9
SHA512 12b943ffc1123a9811ab8e924b5d6832ffc105d6f7d124a006d6323ceca80492887afad9f9b818b3e01e99659d783eeb5079cc8d9dd8840a6f64cfd2053551eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f3d0955ef817b23dde1e2f954779dcc2
SHA1 1ae753ec5e2c472cb1b9731d34b4c94c0af6ee7f
SHA256 146fe8a3091e59dea3337c73911f739466f81723051118cbae045057129061ac
SHA512 7046885c3955df777fcbce97f48331dfbc41da4a02e911d667f4b6ac15075e74beaaffd7a021e04113407d1be834cff2d891df2706ddc8cd994d8b6965172a49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5a7468c2713d6e72f9ade4453dad1c5f
SHA1 74f60452107f2207e0ed09ea909ad3154d8336c6
SHA256 226b69c90920a11b7901ed42cbfd4528fc7e2c12f31be0f4f88272ce1ce4713f
SHA512 90e5fed27820c3a3b7ba5f8a126b880b855425eec82f8d683c4975ceb0013ae4b7bd4ca6ea3a2033d817ee48d7628d7b5ebd44262c9a43ee57a9b2c25d8688f5

memory/4732-1250-0x00000000004B0000-0x00000000004B8000-memory.dmp

memory/4732-1251-0x0000000005400000-0x00000000059A4000-memory.dmp

memory/4732-1252-0x0000000004EF0000-0x0000000004F82000-memory.dmp

memory/4732-1253-0x0000000004EC0000-0x0000000004ECA000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6ca7a796074062e8ed14e62c0caee1b7
SHA1 f0b73270e42a124204b7e6eb25b231fd432f0769
SHA256 180911d92208f65f789c858e89fd4b42bb70a68d9d91ff06c2b8ca3bbf85fd74
SHA512 84347fdbde2ec18c9278b7d57f8681e8f25ed1009fb527b1e15e4b11a704c0f1ea99d3039d0e073209c1300edd2b19244bbe171d3d3b3aab12e28b7bae6ae3c9

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 3ddcdc89e1aa483e9e2ccf5c3f4ea838
SHA1 722799130bc73861a1d4a7705f0667dc02014d9a
SHA256 8480b2c89f035a45b29a7f04d6e8368c01201e2a837c9c85dcb973c310ca4c0b
SHA512 dce997ff86f9f1846168491e8657c5c621a362edafcdd6f4b00b53256795bac028eb4c761f99115b364f0ce8557c5e5db405325922d1de06d45bbada9ac5e3d8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 402e6904b0fe3cd39abaa6b9a26f9f5a
SHA1 e514b66b0d192f221c9084b914d7c0dd97ead5e0
SHA256 21a312afd7d21e9e441433210f1e6d1401d3a85b13558ce4c87a18efb45ebaf6
SHA512 a5ff36f3da151df94abe76b70be8a802187742318fca301eb0e2b091d8a5341760ea95a614cf40d59b7d0eb85883e892e3dd27382c1df35d0351cd378ec3b9db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5401362a0637f3bf604142da62e47ea1
SHA1 d4e34c6df30ab80bc6bd5f376c85baf11bbdd533
SHA256 9cddfc5b77958f481fc716d4e8dea05de2ac836fd5d86b30ea5be65214f20da0
SHA512 d1151daf389f047fe6706c7a26cda79515bdba87f201d75ce054215964ab495ba561417206e9b399a1d0bda863bbceed42c82486de86b82c0e3803d9847a8538

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e76b6003785f7e999ec7ac309edbcb6
SHA1 60d54251fd67cabb4ffb30a24695132b85deafa0
SHA256 4504636d5a050385d5c3f906342ce0b42683d3b2a64cf5a0efc645574512e6b3
SHA512 dd80b8fddc61cec8c356caa57871d9c33c8ab2b131c11498ffeb98227be170cb47b6be4f9904f8838aaa8ea6ed4578c6e0785cda5bbab3bc422731c2c23e06b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3def1b2997d5c9232707f22c066636aa
SHA1 427cef7509921c61eab5356d45a1d9433027f44a
SHA256 ef207f4a87ebd84f8c93be05a1a4103cac8f36db74dd5bbb0f22eb9866b589b4
SHA512 c197abb9902ce1891636ae9d648f22fe5926bbe27ea0af0f20af2f89f724fd0fca7656dd6c8313625ca98fa267c6fbc157418df4fbee4a5f0e67483b19246c1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f815ca03001eeff1368f8e15df93f0fb
SHA1 8fbff390248968a79354fe8495089b5d3f5f08ce
SHA256 94db37b59ac10d5e9ab2bb1195cec69574c361833ce5fd4d6120349a333f9045
SHA512 a8b70ebae6f1c025841d7ec3b4d552efdb9b4d31b08e29f6022613559dd4673abeeb1ef2954d4855fac500179dbe3408b081b437828f928f43726398a672b1b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3047ad4909e8873bf460ef4986202c14
SHA1 329129b963cae5c6f6cf6d567df85dc97a56fe1f
SHA256 9ca74f51e45bcecd7048a1e1252e9623c106ee24f26c65782eb940abfd6de28d
SHA512 7a66a14850d310bb02c6fe1cc8eb151fd5d64d28fa83cf3c3b34ee1c8d7116b07856b33625c9c268139f6636a2c5b00f4c05af90f0e37fb558bb7cf4f58cb3ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b805eae164d07499708f0f4b8ef9134d
SHA1 2e6c69a78e28e580f929cf0ad01b89b1bb70599b
SHA256 c6e9dce679b7128126671f73955af51c4cc7c410e20a28fbb560ff90c34c3d07
SHA512 6f0fe9b960ed9a520493d42b3a2584759816b4c6f3025d9f8b9beadfb29dd3641e12ce2643c04829a2096707a72ba5317ecf554b223a3123949eca73ed24297d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2602a517c086b392893b3c912e33284b
SHA1 86ccd190c5814674f87cad0983aed5cf1932e002
SHA256 6466dc46373ae3f5d13042b441b8547ee46fa53350f004dcc5b459ee1ebcb9c1
SHA512 10e0283c5ef4e18a80986235b5a7dbb13b9efa1484e3aeefe8a3c0804d7d1d09a9e885c428a05cf0289dfc016113822217267a6962afe599387ca2a1fa333301

memory/4732-1401-0x0000000008190000-0x00000000082B2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd1c9198761d1754ebf372ea4d138563
SHA1 15d372f0368905157d517ba1a6fad14b64b128b3
SHA256 470e4a1c7c167a3cda20e6bcfdf0b48bd3003df796a4d843958384aaf0ddd4c6
SHA512 9f3e7efe8a4a93e792f95d358f8fb6820662857003ded1ed17ae4507124b005095b88646653fc6fdbb84675677942f56c7a0f6082234aad9c2fa805f130a8147

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a218e1d25074de264cc44d4442509cbb
SHA1 916e0210d95c4e1bbd4742594e1ea0b3fc9376dc
SHA256 4edfe565345eb7e51fcba52345f75ed2cff75130f1080dac994be6007bb81557
SHA512 15d52100acbb3ecd889e07696f0ce39cfecf88e47de921db42d4b019dc6b61651fcec2ea662e64cc3a684fd6f3efb693f479cbf2e8c949e177808b90706c02df

C:\Users\Admin\Downloads\release\Client-built.exe

MD5 5a420b08c6688aa17e081de082084fe2
SHA1 223a70e5767c19d196ab3275bb97e6fea12b6400
SHA256 8f38961ddcaf3e5abbe9f6fe60f78ae7b6b9820a4200babfc3ef15d198ad0c06
SHA512 4ba6bc8deb2b25b29b3679a3830055951a4e70e0ed85746fcca793f916fd7d8917e0ecba1f46fcf32a656cc572da6e7dc1acca2a66b33dc9067588d051ef8e06

memory/3140-1432-0x000001D6BC540000-0x000001D6BC558000-memory.dmp

memory/3140-1433-0x000001D6D6C40000-0x000001D6D6E02000-memory.dmp

memory/3140-1434-0x000001D6D7340000-0x000001D6D7868000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e8a4e7aa9080ce41df9d71caf06a4fd4
SHA1 b393b0a481742853e2b515c82481c907b65d1d3c
SHA256 674aa90c7f64bbef0d0e100c96f15851f858bfd39622c190c73a3f3015b0ab97
SHA512 e85f61ae19f234b02b137e409f57ce9a9e87cfc07a21968d2b630342f4ec60b555b409744fe32a1e372a57fc4cb50bdfb91f5a4abea3da3f22e0ff81182aae1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5 3d6549bf2f38372c054eafb93fa358a9
SHA1 e7a50f91c7ec5d5d896b55fa964f57ee47e11a1b
SHA256 8e401b056dc1eb48d44a01407ceb54372bbc44797d3259069ce96a96dfd8c104
SHA512 4bde638a4111b0d056464ce4fd45861208d1669c117e2632768acd620fcd924ab6384b3133e4baf7d537872166eb50ca48899b3909d9dbf2a111a7713322fad4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005f

MD5 7f63813838e283aea62f1a68ef1732c2
SHA1 c855806cb7c3cc1d29546e3e6446732197e25e93
SHA256 440ad8b1449985479bc37265e9912bbf2bf56fe9ffd14709358a8e9c2d5f8e5b
SHA512 aaea9683eb6c4a24107fc0576eb68e9002adb0c58d3b2c88b3f78d833eb24cecdd9ff5c20dabe7438506a44913870a1254416e2c86ec9acbbcc545bf40ea6d48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

MD5 ff5eccde83f118cea0224ebbb9dc3179
SHA1 0ad305614c46bdb6b7bb3445c2430e12aecee879
SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
SHA512 03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14bcdf10ab51a77b50210fb3b77adbfe
SHA1 bce8fbc7b70e7e2f270012aa54b444a2f63f7509
SHA256 cc7728d0c8ab4f984a0eecd4da6b013e4fd657698c057465fd6ee4a6ae1d63e5
SHA512 5fb3ee673b19e377efec026b4ce32bec50c12dd1247585d2583c232822ea7116d673c9a813ff2c8eb964b386abda7dd051d486fe2c5852e6f58cf9d0956d849c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005d

MD5 71d3e9dc2bcb8e91225ba9fab588c8f2
SHA1 d7e38ee4c245f64b78eb18e6ecd7b9f53b3254a8
SHA256 ae99aaede2f373187a4fe442a2cb0ab9c2945efbab01cf33e01be517c0c4f813
SHA512 deda05ebd575d413aa2277876991ecc2ea238907390753485ba1b487ede2f432363c46daad5f3f240eaaf8d3258150829a3ae3d2d9c420ea59567cfd440361a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ae8aada0256803b3acc130712a160800
SHA1 d15220dc67f158cddf3d1f1b3fa130341b9311f6
SHA256 29e65054c04d864f42906d2134c9fdb8297295762378e44b89a3e7c8e3b6f1fe
SHA512 7af69e4ad47324ce1e7919bf31a1bae64e0462f9d9c7fc5ce0cd8a85e37d440a86b0041620f9a73546a41b3d875087f72691dc3064f1f954e4bd60af959fd48c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e0fffe38daf00e30d797a092c246d43d
SHA1 c191cffb01a652fd0341fd0ac980905679f9a224
SHA256 198234e8e089a4afd43174fb29a039e9d1afdee70bec7764351079c15baac349
SHA512 5adf098a78988a8d058bb77aca64dab66ec99958735337065242bd011f21e598bbb93911fa843577847945f14b06f1e5f9dc67213673f509c836748ac59543af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 5b7a3f09ce1a1aa78afcca491e91c476
SHA1 f3d20cc1d05def41f44f681f338ea4b2b17db4c4
SHA256 23abebec39d4d3bafe409001becc70d3782bb7008a8d9affa605c5ae294dcca9
SHA512 992f9c25eea6b1780bd4bdbbb004f05f0d581e9e4abe7ad65156232c073b1b71ca020ccc16d81fa6fe6efeabfd70c05e61c5ecec826f756adc0617b24ddb3f75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d09e8c931cb199ffbbc0a024136650c
SHA1 8d4f6c81c4cb7fb0b0d682b0871a1e88eb2c8ec2
SHA256 40adc7f407aa5da58f5a3f6e69c51550f95fc39ee5cad2b276e5a437e54165b9
SHA512 6c60822ac221d1a53d225a572f7e2ea7897621ed60c98a355b2dc00c204291ce64ebfba732a8d43857511a6ba41c4c13d729377abf348b4c5fddea46d17be3e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

MD5 12d1fdcd37780f8db6504f926a11b2cc
SHA1 a933e63209d891a27f0ff7692c9e54f26ea14d56
SHA256 e98e14320ed629319eb51b3b6c4dc70fe05155d24a626010e464b49da1cebf53
SHA512 8d91280638813bc8b36a527de7f784cfefa3cfc5b1762a2db0a7f6b0ca1c3239817569736ca1d1eb2de57ba176ca73150e620cd038ac974f847329648bf7774d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ac5d0d9369d229763e2bff56416ce0c6
SHA1 2387ab64406446e78a78dd3da0ebf38cc031c90c
SHA256 2c09b36c090814934848d893f735946825102483e55f01847d96f85ef2d8bf5b
SHA512 de94a3aa0c0a19b07f2ba24dc2f2a691b0128315ad2ea6a46a2dbccabf40ff934f16ea9fc9e9082cbfa195b3f5d3db6bfccaa0c9ac1c20f7416e082a593a57c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be1854018b83e9b4f9bcb70fe4a04e9f
SHA1 94f0c326ab32b9550f4b91c780ccb13272630019
SHA256 802fc3590b1cf6c90407234474a81247b254ec6415e0ebb3e841caea85aeddba
SHA512 01b461c3d99f0d8de87235ebdcadf7fee87a38e746a9a8b2bc3da5058d30411e387fe2871554602104eee43f941fef2233a30b3161a3c2877cb775c8beef4bef

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 7c1840652ba20398105ef5a1057e3bde
SHA1 0aa3ca4eeca6b5a3c6d6891911340d0c1dbcb21e
SHA256 8568ff14d8610a3c8ff27f2d7b60641719d33193b9ac9f2c154c86dbccd07a0d
SHA512 51675d1e9903bfacb8672ed413a0d424a4319badcd897e2d6c5669fcdedbbbb782d24316f58b4b52fab21b902643166a43a5bcdd74cb73c2f8226353d5501ca9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 381a3c5942183e29107a019117f61f15
SHA1 ea23061e985434571b151966ac085a664767c036
SHA256 5a70fd19537e7e155d1842ec6bbe502de529ecda499b266055ca5d093bd27c1d
SHA512 882db9106461c10299c6882deaef161960a9a123d81a786b22e68080ff74be775e9039c280cb9a8520f1e4ac43bb9b4226d55484b78930a0fbbbf21cafc5b12b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7cc7f8b2393fd9ae14f09a3fcbc9ab7b
SHA1 3559e11b07e188e1b66105821c89d80f1b664c6e
SHA256 861d44c961664784b5ff7b83c8dc66da6c746357071d97d157e6ff36324129c9
SHA512 ce6ab504945af8958476f18a59e1b27b7c7be5fba333a7cd8b8de9c3168b915024577fa026856db0850c87cc35edb57182ead3d5ce6a620937c57db0993df894

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 8f056ab6a3965203628fa377a6a5cb79
SHA1 0d83c3e261255b3e10f044cfba709e9cc3ca9216
SHA256 e3b10873ca61c3d823a1cbac492e0302ebbbe5688c4c9c7cc820d66d93cb6113
SHA512 105aa37c577c34e3366405153701388746129f9102a85c11086183481306a3ae95369126a1238cc6e737b8ca324578c9b252b36b09a3f4cd278e068aa437d3d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 60b70bb60d74afeebafbf79411bfab92
SHA1 7ed356800f04728d2a6251a3ef89cd58885180a1
SHA256 c6e675ed3ccd5001370b2e6f11a98f432a2353c56de4bfaf11b7cdeb5cc011a4
SHA512 a26dd97b4be84ab3331f3d372dbe6cd54e44b6a8e97eba4807a544a4311342b8c989aedf5c9bb7c95be9f59ebcf7969252bda959ff9e5532fd877c1e86f3ee9a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 278c7f6da39f470ce9bd0726b830febd
SHA1 ff8996df6494d9e651b9db1d3f03602a14bbd910
SHA256 80a2fbe2bc51c2682d52cc707102b2366bed7d546d028790aef94e0719fecfb4
SHA512 8aa338919130fabc1db6e5dbd90e26fb115b87e865b62c68773544153abca75685254473feeb62631a6ab196f323df403e0a5b1a8e2fae05aa18f31437705289

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b72bf2ca3c80661a2709567720e43aa0
SHA1 a91106b0d00fbaee77da431b2bf2613b673221cd
SHA256 de7311fa7d2c8eb812d70925a47e3717a1d235842307c35c3124774b4e91b85d
SHA512 f543c84a7abb5a919b78ef8ff9e8ea770c0acd6b581f22fadc88355f63c4defae42d7631cbf857709c0581d290356719158f516510a30976c0df65dc8061d3cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cbb79a4421a555dc53c71137deaeeaa4
SHA1 1b395b00071a2c589829c51f40beae5e37b3107f
SHA256 2a92d6501c55960b3c1743a67ae7c25ca68f1a06707804a120ab115214747229
SHA512 6dda81d4226c0fe18443a2303489fab931ede1ae9285fffa4ddd6b13655a096702ffe94d93a454cdb4bf4a68a5e0d6349e7b7a279760e271f92d506b9f23edaf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e47f6b83e8dca035a96753cc3fba7ee
SHA1 f12f99fa2490d4b008f4271fae0600b5a732e096
SHA256 161e1c184e2c7b0953361271353c10d72e415e77a37bfc9c143efaac70946f18
SHA512 fb35facdfc0d0704323114e18041d48bed2403c264b7a3d73ac47e39e54b5ce68b42a97cdcfef8879d461a4ff7829ba689c9d6c3a85269f869b6f13ab99a2d52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aa336b5a92ef0d530846fa65e6dc74da
SHA1 eff806b6212ff515a266738aae2ee94124c0c4ac
SHA256 61a1a269c5814b4f077f383707b02b633dd6eb88a072ac11ae0b4a178a5c587e
SHA512 613b12670faf4fceb5f2b4577ba694d4340fd2f75f692c7792422df9692493e19796fbbdac84c27bcb8f95eaf61989e2eac6c461a9f210b9dee44535744fc466

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 68afa60b7c0ab2b2cc65a81900561d29
SHA1 fdba09d3ab69b314c321d16f9a11eec2a7cd6cc1
SHA256 13666c7672a9854c0bae14f3f36f56934f1a2e408e15f855f2b6b4b60023bd11
SHA512 026e3755ff26825bda7e8f76a44226afdecf1a5b5dffeafaf770cec2a20e6bb399eecf166753edb3e97debe8a2919856ec5201c14632af2e761577b53ef07bed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e97f35a31a20ae6899e983cf8b3de95
SHA1 a1916a984866ccd3c92ea967c1949edcde8add16
SHA256 a117c5d52c01907e3e6c33b9eb69c0dbada39df945c76d2a89a01cde1f33d908
SHA512 a82aa81cfb96e5fc78654bdecbcd3ece73a044e961eecfccf7d39c5ac929cfd08701cda66f41ccb141b4278eedd79797ef1a2740fb3c365a4b5af4178f44f571

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8f9ce237803f99255f5f8368b251abca
SHA1 c6d80593cbbc9a09433edfa5ea31eefa9214ac1d
SHA256 b0edcd8a16a08017c2d407a83e9fb37b51cfe390195b92082eb7d397115b5363
SHA512 099483709de1b6f813b7f15ea71b21d4b6ac2dc2e467169046343e49d0453622e3302b14ee528cd574ff0755e36de4880d05f5f5d1eea591a225970ab11dbe44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 430d67309a30b6321ee0490319edf450
SHA1 c4d055b6c5b1d7abbfc8f13f7257df7651878d6c
SHA256 bb0eabe6a7a85e3200f2241cd363e5032e9eaa11a4743c6013d8633670d14e2e
SHA512 bd9f1960c955511da571b0ffc601e51771cf798cf7e18c752d19856ca53ec2f01e3ffeca86062d1bbd8758b29879a5447f00c4385758557baec11b197bb3fec0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 8d9d3c978de6f415454e68c284e79784
SHA1 211ba2c097f371496fd8f14dc2150dea5f52b24f
SHA256 2def90bbd338493877ef936e3277fcf8993a98475737992921c70d66fffa305c
SHA512 28e3b9ea9a2490435393625030e7dacbc23ceb21e4ca3559687001f7f82785c21b52f8461792692b1ec567fa3a0b2c27d6f3b8327d61f16af3bc23ce2bdaae93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7cd6674b51e5ad304735f4616562401b
SHA1 9ee2acebe489dcec2f745e4d30bc8bfee4d322b2
SHA256 cae01de14830d3c18c2496f2647c1081c843aa91e8d6708dbd27a7fe12522b14
SHA512 eaa22f95e448226ceffde97e43e51948ea61dd79070cac95e998742fa856f090788f00579f31a6181cdee4175633cbdbb872c0cb97b10e98a4e9ebbeba5527b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6994ef1691dadedb6a7bc8ba92c8b705
SHA1 cca4fc2d2281db781d907d71ab3a8146549e4904
SHA256 b6f1aad6021cab9f0e86075b6e6ca28afec3a28a35310445f4fe8e25b240ef2a
SHA512 ad69c7f667b3a0e54c1b7edf645dac0b9d071d3a3261f879e6e25dac077803ce831648a05b9fe626202a17e75b3d7177f0d0e8d4131965cdaf620fdb4bfecd79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b48befdc4b4d7e44e74d8dd769cf4fea
SHA1 8134c4bdec7174d6a2d388890cdbc488da2a5c95
SHA256 9d31e7fb36970de1945ad09f0caf5e9c8fb8dd6496f163a1f61309700e4d941c
SHA512 6f9a8a8982533d4ef9245e192f6bc7697d2b31207acfad286d8363d17fc75dc0286754502246cca41c545e629c780254ba56c2793568635611d4e4128402fecb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0323fcd9754a365c7991242f9de076a5
SHA1 2380160067bf848073cb174706f1d3a10b0b68ff
SHA256 880ac1e4106050641fd16f474a19ea9055f6dfc32ae463c457ee50da261e1fa8
SHA512 5b0b6b202e5a203e33e746945f62932c4fb6597f01f50b79444bb248dfbfb6d0603e1e9b1524c245de1dbbeb7acda8b961787b62a2398d4b31de42a5de7285da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 be3457e2e5e44098f07e693673653661
SHA1 19b2ad93403c33dc55675f7b686e309763bd341b
SHA256 67ffdc049ccaf58d8ed7d4d75cbb3929a9ded363418d7e676268b20a7357d588
SHA512 32cfd30fff15749ba57e5483ff4844ee6b05411107e55f38d0fabc51a408e3af1e70739fc4902171f24f13b92e225f052374069c4f620a3b9f8a8961bc3282de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 117796f74f34f7b52774a3b01dcaca05
SHA1 9c8908f46b21f7bbcd1b8d4be943e8ef24090807
SHA256 208bc0e87e85d3cef6d3d37b7f97b6ab83999586b184cc6dd19a123e6ed1cc6d
SHA512 76d2c7080d55e4829c10d2c3a529d9adc52c2900240752a7b5853751892ac4858b229d65999dccb4f602365c82a93d1e3f6eead9586f0feb31b03986655ded65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3300796179a8ef9bf4ec236afe73e7d
SHA1 280af1e22d4ab431223dd49c7ee689a89cdae9a7
SHA256 9056d5b0803f85ca09e5ace7375cc1516d2064ce4a15c243b23fb0ce1002e8e0
SHA512 716100e989365a69a1fba8fe3242dadcbeca2b30adbd032fb99f38b56ba171c398c740d2349bb224ff568d5a6ffc703f35f9c632374094c584691df8cbc9c71f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c34e3ca390dd46f4e9da85cdc004f84b
SHA1 8f32ff6c885f0762c5a1edd686b8e76fc4ca5176
SHA256 9dba1ee507870495be078fea7ef780021665f89075b2bb6bfc00892f74ae026c
SHA512 ed7687ab26f772cd3d27f8d8bb01c62966211d10827eb21dc64c8425e9e42aa991b86239c1ec8f65bea37c05e3397a4b1a04a9638e8159c06c9e7517b0abc338

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

MD5 1349791850715c2e82a76a3941739b77
SHA1 043f05e8db0fcc1156f6c65e253214ed609640be
SHA256 2fd0cd0c94eae5de3fde0e70d2f99dc6a02772e414e31048e0c132e0379af3c4
SHA512 dfc55000a10287a3fcf1ce64242d7bff30fefabfebd83d92bcc495d21d15550aef4502c268eb194465c4ee9fcb746a9910d5c15d4e58ad9ed2341d7c66e3020d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5 f82cdc3ee7ea51f0ca1772bc4032dec4
SHA1 4e519db04abea28b4269407397c3ec6c953c64f9
SHA256 a5ad94a83c148a8bf44886a502c97b2263b457276dfff0db0d6e85caf935cda1
SHA512 4bf8f275c0d352ce58906a6f7e7cbf470349348d9230bf414bb4a2af69259d56dc37659fa4062ec9a503e41af6ec8e252ec412b635d1cba78338b091212f5ab2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

MD5 7e03d6d5bd41b9aa83e5cb02a2e3b905
SHA1 4b252276cf0161e2189d7ae1246023a2e197c266
SHA256 606d3ea1d5ec280faf2b1c9177764c51edee621feeb87845f68f219cdb982797
SHA512 35ad1729c5864edb13dd2a9a3f12cd90b7519a4801a557209ccb38bae486b9c273065b92458542826ae7f09058d32c386855e65b96853b012f1738b12b3db42f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000076

MD5 5a65ddb60574f1579b35dd1003c6d3ef
SHA1 83836e5e65e7e7aa2f0f29be61239ce393fc1c55
SHA256 9e05c49c4c670eb274f563dd9244d451d3c8688c98468a2dd9518b38d966b35d
SHA512 7b77ecf818b9b61ac3bcf6fd4d74a85db47f8141fec585767059f9b5fdd794dcd0c79b4a9ed94e1f288bd377a6639d188582bbdab0de6dc3221f5d9b1e301b49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000082

MD5 5d47b4af2d7a906547d6a89d0f636e98
SHA1 3d33b7d039f550c204d4ecd4149955d08461750b
SHA256 16855c900490f1091a33fe165f5b2bb5d588b170adfdbcf8aac9e1fe04d46409
SHA512 dc413e8244ad7d6e7d4493cccfab82556347dcb01ed1224f7c1768054b9614810b87758153f8644fa634366e048602ec95fdb119406698ced66c8cd959103cc7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000083

MD5 6fbd3f0995307600371a48cdb4cfaf5c
SHA1 fae0a851ebd84c24127706fe8c55785386453b7a
SHA256 e8511fe224ca2fe8d1b62d7151e056676f47cf7383d5be05c19c8248605d5619
SHA512 c2d818d60ab2b7b7a571bf931a4400f872dc7ccf44685c77387f5b0131d4f58ff8c5a9aa8c8231f6dda60dcf761c88896107eb8bc41cf59d2210d8ad01f3d24b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000088

MD5 8d0883104826b1e2c992597c0249fe50
SHA1 4c04048dd8546bc4c66d023585775ea722d4429b
SHA256 8876b5ac29c5bb6b11572d7780e277deaa674cd5b8754103d0a58a873aa9b9a4
SHA512 2cdc106f42498235d7d76c371545e6cdf20f85e98eb43e0cc3d18410a11496abc6b43ac6a8193190eecc261ad93524ee0db5ec4662c8f12025062bc283c9c8c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4b8eb30d6d82aeb7b0f551f25e6950d6
SHA1 ae3fc0158564b20c4335222bb2042911c5a6d5df
SHA256 e35035d8d3f2bbdb9ea1c1510c1983f16ba303b0f1012252972fef81c5387665
SHA512 23568d4784d838d73b995662b7853b787fbb3f685a56767ccda0b15242836b05d352c8d7f7680bea664acbe8671b818d24c8406e8a7b90dd7fb633d095523f69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 916c56f1329f18488b3882c85d89ae79
SHA1 ca643dd6601f0cadd8be0c79653afedf17c022af
SHA256 d38549656a1e768cda7604a5006b28bf802862198add424ecf794a80cc78ec1d
SHA512 c3014768af525ea5b62a8f24cd3a96105dfd7a6817db542fb295f37142fd2f5320772a28c18b064f831afa343aad8c2c4ad340e30403bb1f6e90b7d7eecfe8a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

MD5 e4bace723abb7e9121bcfc79385d9d8b
SHA1 4edb822ef510911041ea0eafc41f2d96f0c9e144
SHA256 3deaec68dde07eabf21963e9ea063e805f3d8e1357cae29bc844c471431109e3
SHA512 32a7c534e62879e86f968e0668a466f0e504de01f357f7353b053b99964bc39bad71cd55096b8d8423e978ff7e25cdf18fc527dab89898f28647d58afbf28aef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 39abab8c3921f2f99f7ef596618cc9ed
SHA1 5ef78add679f7fc7755587753fd2afd90310581b
SHA256 bea8439fcd229614ba3386071933a8e4e1107b661c72ac29f5dca5eb818b580f
SHA512 d812c2ef2e415bf5ae573559156622c63a785eaff5cbae17e2978466012d62a8872e36c7eafdc13f34e43e567e087530c3f6a066977323c44855c3c70e8c5daf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 549f6a86de5d808f3d30cad5c99ce2f6
SHA1 765a3422c9ae5125a5e77b6ab64695f3ca6e2719
SHA256 14dd94a18ec7e7cf5425e48fd5803f8c22a1fa1f6b985033f82411b4e558fc9a
SHA512 4fb3209891af9ad65924336ac1326e6651c17e9f2e867569c2cb9a931b81772a4f03c2ab3f26f7a2f2f30774393930147a5dc0d87b57007124125dd9f5087310

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 465fae05112ed45aed6231a9b95dcb77
SHA1 c6e29131b2728ff9207e1e9cf5cf374a91fd82d3
SHA256 f925d15dce9a92fb86a667245a80b4d7ff56dd4a21ba5b76ca1f3b805eed2e65
SHA512 2b949db5fcf879801f402833ee7fe9ef91380ba2dd240f29537ea8f10de35a9d7650a4b9a83e018beaacdeeb72627b5880c44395ee107fdf8ba8a9ab152b3ea6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9d9fb51d59b3a65afe445d4fb1bcb0c7
SHA1 368fe4b6ff79a116a21ee32210b61493b20202c7
SHA256 0c946822d4c55249315c5b6eb0f5a61af7b0755ee55d025e1ddab2916573c96f
SHA512 5a971bf27911a0b5bdcf8619a259e1d68c01417d0c4c0bdf658c07492351ebaca970372a97bbdd995268192c821b1f48f989188a7b1f52bc5c1f3083bc2b6407

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 873a80c759d2ab1e36d5c4736c8d64e4
SHA1 6d958a26a971e6f5d0d9380d3936948420833d90
SHA256 74397c13f5da939fac9b727b201176a00224ecfe0a32eed256840b655ea47dbe
SHA512 105c3c842f63d05ace55a128e14e5f0902bcdd897dbd301d5826fe46b36a9b49f6dfbd40993b2266b9d4c7ab89eec08d50550f2fa918f7c37087777788442b54

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 8ca1b4bb8c2e35c3f52ed3bba53c84bd
SHA1 d38a0e824c077c70e3ce0e89eb90380388ab1c79
SHA256 f84f9312887e752a5cd26685f0e5d3db76fb86159ab84403db155339bb9d5735
SHA512 f2f76f99e393592c43f07faba9dee0504d2ff2d0644d9a4a407d0874d265add8a58443d326f5c83967a012c08a1d7ff43d25974129b7de899e99e94650ccf497

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1d3eea852242e42bfb7452e0b63182ea
SHA1 82489a5b6556e91aeef17fd2ea83d27cb88a464f
SHA256 ec6fbcfc7414ba00198cfe5b9848b9790a9b670a2d46b185ba30d6d72a5de2e5
SHA512 3099334acb81386f2ae475af6a6bb39f1f3ee407ac309edf46d6eaeb24a5c0d36ccdbf2c334b63a5ddffcabe8fbf3b2b376a222703428a7c41efcff1ff105f4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 c3bd38af3c74a1efb0a240bf69a7c700
SHA1 7e4b80264179518c362bef5aa3d3a0eab00edccd
SHA256 1151160e75f88cbc8fe3ada9125cc2822abc1386c0eab7a1d5465cfd004522c8
SHA512 41a2852c8a38700cf4b38697f3a6cde3216c50b7ed23d80e16dea7f5700e074f08a52a10ba48d17111bb164c0a613732548fe65648658b52db882cacb87b9e8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5cb389645dfb17062bf4e4c582e3e5d1
SHA1 ce90683bb2fa6e0d245125e8783ac9275f60e30c
SHA256 c109a0cff9d39de4ac9d3f3213e8c1aad841757c001dbe5add7ccdc132a30086
SHA512 fd7d99de7fa7c1142df3b42035e6aaf71286eac33bc2cbe726848c2f541b4d6363284d4864918919343f9b85b770f5f2102119181094f4e4bfb2a69a18c7a5e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0ca28f3bb14e2c7bfd72e2df0c8ae5cc
SHA1 6e1f883baf595ae93106d4501509f302517bb5b4
SHA256 61ff90cf58b5efc79e74d225bd0d3b96c37c9dc154edaf86ab41a8f53b3e1e0a
SHA512 49f28749b4ac24ca5960bd68be243ccab9af4d558f0102dcdc4396d32db4f5266d88c9b540288e2f11b8dbcc9393f2b9deb8adcb08241a6bf2db0fd1f31b12c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2e23d6e099f830cf0b14356b3c3443ce
SHA1 027db4ff48118566db039d6b5f574a8ac73002bc
SHA256 7238196a5bf79e1b83cacb9ed4a82bf40b32cd789c30ef790e4eac0bbf438885
SHA512 165b1de091bfe0dd9deff0f8a3968268113d95edc9fd7a8081b525e0910f4442cfb3b4f5ac58ecfa41991d9dcabe5aa8b69f7f1c77e202cd17dd774931662717

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c0787f5d1b69b21f797644348a2e6025
SHA1 e84d252b1fbf78a6973d0dfefd6ede431842f07d
SHA256 501518afb815e897e2a19044db3189a1b21228473b825ccc31afec3b68ca6e72
SHA512 e2437d0c2384da53cad478560bf58bc3d639a130214731d9217c325b43a55b7ffa04712fdb8b4894f9464949dcd6e96496ee4a005250c7022a4ff35d38e4a36d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 897a7a5c93fa7a4ccab99f380324bfb0
SHA1 90b100edd0f4444e3cdaba91edde0682539211aa
SHA256 4c87c9f1ae066a736a9312c597d83fed96ba955d99a38db4f78b38bdb073aa29
SHA512 00d64d65e2e19b46e65cad7606623478f43bacf688088b6745aad42fa2b921e7823fda46896c86a044ad7d24373e26ccb1128db7278dcadaa48ee19922032e06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b1aef7fd1436bae610bcaab69344bf5c
SHA1 9ef986d9690c440a88c3c9715008aaf7488a89aa
SHA256 cae7b9c36b077f439a6c5e1076075943e6e3cff3f2b20d45167ec25acd130b6a
SHA512 3487a25e9ce45e682cc1bfe17d441df0a0b58bd23eb11e0b5b551af659ebe661b773af211324bc4d078c2e52daf36816d2ad072e56083afb0ba8bc4736dc88d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b65a25ac74dac55d4e3d4cc1df943865
SHA1 699b0324baf81b78e371c439a7c9ee0fa4dda0c5
SHA256 09a3f16cd22ceb7662185ffa7c2bec8271ad5d1401e73671be311427c6fcabdb
SHA512 a1b68dec9c75b94a14b3d45294d1191f1dc0424b76bd667a0d0e8409ede63de3c0f74d2c7ec1112a05ee8ba3cbe4c9de503756a88ff6713cc6e86b1fa3811542

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 59fc75c693ea62b0efdefb317db18288
SHA1 69f0975ba6530a58442f14ac47f6df6df7cd5805
SHA256 e41d8a2975257d9ea494ac199c807ce623b73f2dd57c6404dbf7d7431711a39b
SHA512 be86fca2c53a530cc92373ad91b72f6ff9ac07249d4a367cf42e8e161ce57e605b1cdeea84f55250d0d14b15f091b92cfbad5b84dfc4521444658e090f7ffdc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 369be95b7edc8d25c20c1e93af5caf0b
SHA1 b377195b6d8428c7d27ac4114c4fc06576ad0bff
SHA256 f664917a359d74998929719fbd3c5fe8c7772da654fbde35931b18f14fb71690
SHA512 dd3ece5beb98cdc9a6e6199b2c8d69b8fa4fd2cd1d8cb300ee6de5a28a05d13e6fc2b03b142af997a9087fd977487c6a171e1a3bfc8710d51abf053983564262

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 78a94488acc9741736b3610b3bbcd86b
SHA1 e084c7f252b54076af9e914e1b6e8a58d8cddb4c
SHA256 a169190e8312e271858a95798327dec86df198ef13dcdef47ee51d89dada21a5
SHA512 66739ebd3f07a861a0293bab3691b7f617197b3f63cc312a39b2a4fb8763be7bb3ecddb913a61e1b0547429e0152f75908511a978afd3f7773a500e71aec006b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c55f6496e69526081f3a9f64d32bbe72
SHA1 d4f3a8dbb0c8f421017e3723d074de74fb794c6c
SHA256 c78df09c3b3711149d2cda05bcadfe026b0dde2826a453bd4e571e15abe2c052
SHA512 f91e794b079f394cccd9994ea135fc847a02987b9cbbc4ab4c0c7083feb0efc38fbad6d109eff7e81aec9ae1f25fa9ed13678ee71fec650c1021b856639688f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

MD5 af10603066e6f81dd8adddb4106fd5a2
SHA1 d50fb30dac5691b5b0aa9cb24c4826f0d769cebb
SHA256 44e2b8ed925a846cab7c8ae93881504ac16567feb3407b61d13f96cf026b7f3f
SHA512 36b922d9c3150d55974641474bf778233f1beff0d7b77acabe5cfe9540ee5cca37a33882cc0fe2d5745c7ccbf56cfe650991a50cdf0637211c3baf5cac442361

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 358c7c3b7b4fcfefb739c0830460717e
SHA1 b6e823a144dc7f9bf96154b6a85da8dd7155993a
SHA256 681359bef09fc67557327091d65e4a04abace096846bfb99575cd6fa03b9cf9c
SHA512 5c739e50a0776eed4b9f183fe04348de0a7c9fe2dc936ad4e57230d9f24950b755cf26cf66bb8de1c47dfbe2e3d6752c8e51a7ec84460fdc711ddf3cc399bc3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 223fc3bcfb1865e28f9edd1d7f7e92c2
SHA1 e37b2a309aacba2491f82063236fcd22a2eba6bb
SHA256 550c4aa508ff2f6e2230b7b721980b8b32e762afdd82d162f3a0805056fa8871
SHA512 c77c1947b6d550b90ed5f72c102fcac29ea4d0134edc8e7853c02f8b9b978b97aa8feb248d4ee42a26ef2900451a4cbb5d652e021d8946564bdc16091b2467dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e19cf2a4a1bf7ba07940711266a7784
SHA1 72bae6c0ed00c520fe9938d688014183dfe2cc8c
SHA256 88b9d0913be9931b53c2c0c2ddcec418ce97a33e3d8ab61d607c034cd8321a2a
SHA512 baf6c9730fa985c08294a04e5f3ff6928da75f81e18bb9cfb80f2998d9609d4734d04e9d27886b6a7b84bd78b41965cf393a0ad94e607781587f398011c48aaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5104e3f2a59b2d8688913c589fecac2b
SHA1 f69cd8890eaae67c1006e0b8ac365f09b3d70336
SHA256 88e49f1b9ba6416b58b30859324293eb4bac1bb4ce9f62453ff95ded8723b0d6
SHA512 a2d553b1625a617a1be8430128e1f317cd1ec82513d7136731f1c30df715127615d7bbda6fe2545994de4f25a539d79696dae4c5acb348326ef1d2762c026cc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 17605398afba55b01317afa04bd2dcc0
SHA1 ae43347680f571ccc81b1ca32e8fa8ab3e9cc845
SHA256 df3efd073e72c7cf342374a4fddbe7b4e110e21bfdd3a61d8bc7bcecbd701fb2
SHA512 5bf1cb41e1cd941d7f06f52a8980c8fcc2b5c52fc84aa7801c61dbffd03e4f696ea13e2fe60d89cb6aa09dea8776f38cfa02ce58da87d51d4133d04da1b4feb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e40b84181bd7c7320b29bfa1cc22b6f4
SHA1 d13ae19673811f061e7976eb740d73c434cbf5ed
SHA256 248861e06b27fdd29dc4d1c1653d72bb2f6c3f1d8cbaaac5ed5f793104e6e50c
SHA512 f83d0abf9790d70e46fa64d0903a897ec97375c7c5f3341b26fff59d3ba45d2e9b66c6bc89f8dc9958f1698260645962857546713c22caf09d172fd8806d500e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f1ba03ce489a0d2711771cedc481324
SHA1 84ef0e7cdfa8bfbd38ddfbfb281bae78e7b349da
SHA256 29f9d09f3586d4abb733742e2408d0f307904327a99b8ecf28fb495e5d128bf9
SHA512 137dbdfd14c48dbb9ffeb81561279fecf517f844d2550dc211ad360fa3c99aa2394c4a41e42fe464af3a3b66c49e2ce32f3a60945b5040bcf6b6cb630a7363d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0387d89d6606bc08bfc870e40ab1db75
SHA1 b8e7ec1a0ffe2894c5b5b7e4dff3de1caa82c90a
SHA256 aa026edaaeefcb9268fcccca96d4b0aed1627e968a95e35432789520f2b3942b
SHA512 dd8ca66745c2214e48225961fed50b5f8085f9ebe4e57f335882e743cebf5016d7e25072e0c5c24d02388bb57d8c3cd40722c21453362b11c62a10f6886f8d0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2437a73ce8b99f231911ab946f7de4ad
SHA1 738ac76c27a175dfa461befa8f57bd05858f1f46
SHA256 bb2b155191b3673b758122d1228eaf1cf7b50f3bb656658878a7a67e6330827d
SHA512 f45f5e4923f8525e82c08d8165aa1956dbf9ac08f526215d145b7fce48620715813ca608fc65bb40991620ada43ec59d50b019a739d71e4e7fbd1e2b89230ecc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e0784d721d581b391cdfd4041c362037
SHA1 7a6da2c03dad53bee5aa2231a012a2e81ea7b3b4
SHA256 3bb5ae2f5ab92a25222d2fc89dd35c57596cd5a4d98351ca85f6595f99a5d134
SHA512 6b9dd3f538132e39d25d09f8f7e5aa599eab5854e4bbe32f450424dabb6ed627375b85952d014a575fd7790241e068d2afc1530cd8a7f832ff9ce0bbd4787615

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9d10d4f36eb18553612122d7fb832f41
SHA1 d4bfd58b316bd17315ac67357687bd48d40c7aa5
SHA256 70fd5f115d3c07056e35b9c09e35bfd0d588c636b888f1abfd8d5b0ad5374dd4
SHA512 1ba6821205cf1bfd7cdd50bdc1b32003ccea6b86928bfca545ce573c6a217860d527f7c358c71186933b2d57c4e007ebb7d037056ebdf33fa061868cfd76eab0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

MD5 8bff858c53f12a1052ea9545e1cb71cf
SHA1 84ccd32efa7b5ad58d263a52bb14096e4b446e6b
SHA256 44425ba77889e048f8420c4d489944c852edb660fa37e6aedc563c0518b99c7e
SHA512 f98640906148e7de5cbab5ef141b334903902a9f3d19503eb65ab88fe2bb4cbfa3d417f3512ef3d10fa8cdc5a3a64e0f1037a2c91a712dac7ac821b37b0b3cdc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000060

MD5 46a19864d49dae58bdb6c49ceb71ffe0
SHA1 f52458451131afbc0739bf65f9bdf72e9e0595d2
SHA256 34bc478451e0fe925f6ae9ea1a7366cac81ab7c96447c6a9633f46469a729bf8
SHA512 d524f287e4485a418a4aa80bc0bb90ed5c699d1528b989d5b93e243e542b06a32fd1bcc84a2ffe4f0f70baa78b93a045f5a922d94907cf3c35edeadb890050cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000062

MD5 9aeabf019994c61a18d26240641df4e0
SHA1 f95681c42dff32e56442a74556cb0f15573e3322
SHA256 825af697fe0cfced2b963462ee6082cce767c437d29f7fa07531027bb6d73aab
SHA512 3dcee45e6f3d041d8c2c2e7d1cadacfd9e98c45474f4c0b2fd7549f3b9a558e1c48e1fcf80a4902b2c858c2cfbe08b95e01f4b9a14e7c6ce81bb010a4fbb0a4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

MD5 5894a65d30e2fed33078f7304abdf06e
SHA1 5ca65b424292e03944a7f46197cc7fbf3d0dbfc0
SHA256 4708ebfa87c89f9b611e3d69c52988aac9e7433fcdc47e8d408a38cd6e8a6ff8
SHA512 ca9209ae89f6a08504cd0e49f7b37258ff8d7a0122ebff87a761495d0266b3f490a62b6f170cecb5152aa445de712dabdadc5b7275e17079b1c5a85748d5c0e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000064

MD5 bac00e5b1d378e6b6203ed8555ed762c
SHA1 95ad8451a94d86eec1740f5f4bd0d24edf36cd81
SHA256 1400e56a3c5b992bf4172c43daeb466ada3ea62a8e7286c25d8e12b113ba0026
SHA512 137dd5c0a87af593ff8789163dd517c784d79d381de7db9c4090a3a58d8bb2da91fa56a8d0f23d53769d6baddec32627055cc8db6b810f07b786efed6d056110

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000063

MD5 486a7416d50efa2febefaa63eacb8f1d
SHA1 097a9a2419ebd81b5efd8f13576cb2bdb0e0ee2e
SHA256 07cd0a8e1354e848c65a8a2e74067a4ddf672ba1d30aec3f9f82aad7fb15d09c
SHA512 c0fadb5168678fc224190998f4c53815efaaf4a63afaf17d8ff00470db414e5fa1796c0d96a6173deb73d74ee8dbac6b803fd30368d7b138e5c55ba52c5a4443

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 860e0a24965d7ce538c8c1218a2c4c95
SHA1 46610f1c66e6886b6490f3421606866dcebcb27a
SHA256 91d6d1492670d1edc419de930acee9cbe8e0edf8284ad6a0b6a21ced9c4e8908
SHA512 e598fb59e3642667652eabf8fd2c6d887a6ad34c3054793e3853c6981fc0868a585de7f5abba0a2a9f5ffab878f09e498798d9cbfbb8e6483a0e50d662fbf0a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006a

MD5 4824adeaaf19d7e8de3dba4607fb6a89
SHA1 4ab72c9ee7285a4d3b429f1fd45c7ec5f5d77536
SHA256 cb4a660c30ca8d9d11c0dc892c820c12fe3422278489abdb4478f8e1ff872b61
SHA512 30d7aa32574c74879583c956e6e29dea0dfb1e4c68a2b066f331f522f3f7ff75a6dffbdbb46a9614c0dfd96bb777cccdb74b3377714c4480a32a985654aa8b1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000068

MD5 98b0f9590c1066ce1b164664d2ef7a01
SHA1 9feb0ad77ad3156f7e9935081d1589a5ccf9ccf8
SHA256 9ae9d9d1e5a0da600ea3025800cafac26f1f9003f05f8f94931e1ae1703c6fe0
SHA512 afe9d4c9d96d6f663bfee5cc7771241485010eee185f57c0ae8353f7d848e28cbb59e208af417ba7fc53d2e8684d52549c8a02381322dfb0eabf64161b50dfd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000069

MD5 26da592c539d8a1563c7d5d37761065e
SHA1 52e4ac6babb2ef6b378058030a163c28530311e1
SHA256 96f9df5b65779a3c8e2cd0c7890f92aa21956019d158778770e96ec7180b84e5
SHA512 7ee8cc3fe7658244fe4f15a609e5e9a839e7043181a876895eb675fdaa705cbed24e7b70c0fda758221410af241b0e216c408292eb4d8bb6ce2cf14a158bbb6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006f

MD5 c63591f3cac1bf0510eac4e2ca527126
SHA1 62dfd255fe6cc56fb7ec5550e6c1431b3e4e925f
SHA256 e98839c9610e31d14dea9e710919b6ace7c1cb985be63775be6130b22068a866
SHA512 6b477c70505d0d61f4cf31569f2e78786549413684dd6df56b423a23d71349bb9820a48c31395ec58cec4c631e7602ff7882397db94289fc73d2d0bb92ce07f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006b

MD5 6c8508017feb129f4f75f8fefa0d716d
SHA1 5a7d3442d2abdf9769ac2014571a8c4137cc0fb3
SHA256 08894b9dd0c66b681d6a798b3d6648a4616a628df370f55589171fc47853d5ac
SHA512 b701995182192b54d10fefd607fdf4d8ebecbc38ec4076e874517b08aad22437c637d9d169e2f493a8d751e65efc7c2faa13d5911da5f70ec18b7290b9a77bc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006d

MD5 ab44b080c5031b02fe363d5af4cc2a1d
SHA1 2b2d28798d593a577080815e61d82f87b30f50df
SHA256 e3b5a5641edf640477440e2ff3cd9935dbd4e5cdedd2d6edc5b6e0093dd69076
SHA512 c46e2e33b11ec8e20530f7e290eace752d1ca8e1ffacae069b8f821a50b1784c5065cb0a38bf489db7fd2fce7ef1c76f6fdedb19c209d52d025de393295ca83f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006e

MD5 8e203944a6119fccdad440b4c8865a32
SHA1 41c6aeb1e2a99d43633fe601b498fcbf3500e3f7
SHA256 ca02ba0f9f1c7075a8826d2fad0c9ca80cd7b01b5a55466209ff5d9b28e6cfcb
SHA512 14dc4c57619d7e562c74c7ce1cc68fdfef871b3d2968131fa95881244b82fc20f5e5418ae0dc115a5210037b784ac4e128991c85ab84e1bf8e256785e224a7ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006c

MD5 c34d96b84cfb63b4c2bb5ca6342ff88b
SHA1 f50ac28f52d68b64770eb16f6dc93a719c4191df
SHA256 bb46ae228ba2bef8a55baf621425c6e165afa824b792bf58af65e868a3806c4f
SHA512 62b68d326c13177fa79e3bcd57a15c106fcb67f39ea9616af03fd56cbfd60e89ca2ef80726b26b8f580e8def7c92402bab3d21589855bb25d0745f788aa153c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000066

MD5 cb1c9110adbb487a69234c777c3d5a3f
SHA1 bf96859730bf898921cc8ba308f31d461f606d08
SHA256 9117d1656a837193c0f1c076de405bf320f5b1d154947e6e422d92e2f8bf59d9
SHA512 2609b0ce70c945e30af58a7392d98c0f017267a90d7c5f56b70453258dce8f2086670280a2261a9075cf0397a05d899199dd193eef7a32d456233773147776bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000071

MD5 6a2e5861078c5396ad7c60ffd44dc235
SHA1 54d792231fcd86b2b602e9101483f651c6c6eefb
SHA256 d80c4039a76cbf583b259417801e2aed8b3c7d8916381bbd5034a1a381491cfe
SHA512 09a9f6e3ef6d917c25aa395a72b6ae6092bfcf8e203adc09ce94fc3774e1524a7a432d00ccd11acbbe189111076ffd86ada2caeab1511b6b21e3a7172873a267

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

MD5 5ab96e6aa63726204c4e04abc31c5a6f
SHA1 32dce68feb23d92cfc72cc47c52cf6775a408fed
SHA256 2267b964dca9abb0f85c419ecaa53fd2766160dc7d73a839e5398daf8522579a
SHA512 f7a2e14013c0896dd24a4523039abbe795adb3ce4a568f13b5ab67a57f015d2951e8633b7648fd105d6b1ad661feffd01a9dfc3627ca73558a845cd935b6cb45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

MD5 3b0d96ed8113994f3d139088726cfecd
SHA1 1311abcea5f1922c31ea021c4b681b94aee18b23
SHA256 313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074
SHA512 3d78c250029069e1850b1e302a6d8a5154f6e7bc5cd58f449b8824ccf418e80dba2d5569a9cff72f51ccc9de140dc91148f93ec4717f4a880e2ba94898fbdb24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

MD5 ae7d16bb2eea76b9b9977db0fad66658
SHA1 4c058e3962a59788b413f7d6be3ec59a2c4078fb
SHA256 1e7f6ea1298758403297e8f9049b072db59dceb3518186164ffc16550c5c5ac3
SHA512 177f7ab63e2f8e185b4d4efd0bd9d15963fe316701219a6127f1d68a72bfc130eb1e46bfc1f213a06299328864778ecd9ca0718eb3c2acc45abb22c74e2ea6b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7e4516a8073856c8e11b64032931242
SHA1 5d5b28a58d7b538fa231b68abe6de0129727be1d
SHA256 fdda55682332e495ee251d6ac0336313bede5d7ef11d5e0dc1e2a466d1590e71
SHA512 be0cf31ebad771f035882d9595f0b32e38300245fac67bf013663b2e68901c33af0aa56d026725363adc15944bcd1fd2a054d51d79facd6ec17b14452729c829

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007e

MD5 ba4529ed44c53af1e94ef77407dea1a1
SHA1 be69bac7731925847199bdf7a2759964dcee1a73
SHA256 33e4e14004bf1ae91410158ce091c9ca612a834a5a4afd476f3086485334e15c
SHA512 924836905efb7f8eb6e6c145b4b19547c36d25d0de1f9b711f42264189171c193e732166cecbaba23f2035f6db51dc0757e528582aea0f9830cd9b531eb2bdfa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 de241554b1b3845c339cf923a382bf22
SHA1 557e6857540d8e0859c7827e87cb39cd56ccce2f
SHA256 1bf5fc75c2c719da735a4f6ef400fe3a7da63da2eb213bdf473177baf1ab5058
SHA512 85e07403ee112fd9d5be2b68782bcac7d5212edbd7c8fd80d83805dd14941283f915bce111dc915d32d248e824d1f8a00c1e9a34ae771ba4480d12f5f0863999

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cf8b7066ea7e66bfab61671c4fd21d5d
SHA1 931f49d78f40f35a5489f0cf139ea3aa210bd58a
SHA256 8c1f1404a2e8f3cb09920e9ea434a9105e262aa7e720f62a4592a0a88ac5d559
SHA512 b99cc1ffcbd227a1ba82635c5f4390197559a0cd6ef57916a2f3b49d2bbcacd16e0c6d1aaf9f00308f7ce0ac0d9ad437bd19bac7429380fac284844ffdfaf66a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 745b586f7b792964ee4983977d8df73f
SHA1 6b42eedcdfc7f2c29594894256954c9ffb657c7d
SHA256 c354222dac5cac2561a301cabab183019c7a57207c76e8bc94a22e330768c92c
SHA512 185b164ef159e1a13e6cc88a736be8141c09b9bfd16780518426ff126b2003e969f96d589a4e05c558e9dff5b4c1d7e11bbc44d9e36d42d9d3c8deca3a037585

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d78849d755fc5214636a3c90b854099f
SHA1 064f740b3ba3f0b16c87bdfeaa781ffffe04f6a3
SHA256 a447d34040d52fb9e4d1210861f1aa988ff7e27a4eb48e6b95dfab3402f12ece
SHA512 ecd95296eb40ab84b17642127a1798f203d313d323a4cfc4107f9e2be15dc51f803ed7ad49b2b6e4556665b33584bb81342a01e12d511401aac1351e0fa6bf2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b91e8ff9a83414c1aca4e1d4695ff2c0
SHA1 c8e422d4f2e837aeabff712064365ae1cef215fe
SHA256 20d953ac9fdfba24a8e59b9849263fc7e092b3c27c029234087cfcea424c8f8f
SHA512 47067507c3ec6b9108c6a9293137d09201617739a910616e7c78610bee3e24d2ece06799d5d575d220e8d328c9820195e5a89fdb37dc383469cf2b7854a47904

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bc0208af270d4cf59c9f90581e35abd1
SHA1 bc549476811d0c0b3febed9bf94f47040ad3d036
SHA256 c127edf55d023a29b1fa0aab28128df8ca7a1a701a6e9f15f24b6363c1358dfa
SHA512 20d7afa53381727775b00b5d0fe10304070bdb060e6e489d7fe2b4a702f5eabfe100106fb59611fbcfd9ad61cafb962ccefb052a6ad0eb3c2f19d50e36173b96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 43a1a91b71ccf64ce784408528b75e88
SHA1 7566d82a7e87a3fdef2154789fea0101f9902319
SHA256 1d72f3069b0eeee0d2dc9152f567fc81877ee283d30ff88ceb692ff1dc003bf8
SHA512 3d205e2f6bd63d3ab53bde520b42757fdbe97972ec81532bc30fa2a12bbfec49e73109030f7c3648059f31119595212b3028ec7da1ea6e472db2185cb874e0af

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\builder.exe.log

MD5 7ebe314bf617dc3e48b995a6c352740c
SHA1 538f643b7b30f9231a3035c448607f767527a870
SHA256 48178f884b8a4dd96e330b210b0530667d9473a7629fc6b4ad12b614bf438ee8
SHA512 0ba9d8f4244c15285e254d27b4bff7c49344ff845c48bc0bf0d8563072fab4d6f7a6abe6b6742e8375a08e9a3b3e5d5dc4937ab428dbe2dd8e62892fda04507e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b9750b7db1cd79df19a08ca744459dff
SHA1 7602d6014da63ab0c70844d4c6b828f6144f9f90
SHA256 155853a8130673b3764d88b4263f07f34d376357d00ee78c34dfb9de48dbd763
SHA512 87ffab2e2583842b77d67f58e6fc163cb2debc261e5ccc4edcc38245275eae212fd1eeff98a616079640855f589b6f5072faff3712be7707a00f6b4398cb85a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 888d99db30ec7f89e6e37c0aadc761b0
SHA1 3ebcacb67548a52c4c9a189e2ad27a8c4f7f1922
SHA256 30c2360097ac11ca95e6162b8aa4214c1c919956e7a0f446e2ee70301c6be1aa
SHA512 74a425f414cc1c8b91d7120b26457555168367c671811cd1f22951f8f23e7089b18457f694bb46cdfaa523dba4218d1f901be5e115d7f8594142ed616645f5c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 655f8f3ec55366c53836a966ff0b57de
SHA1 ab22bba0f92556ec67d0b46343e4429d6b7776f6
SHA256 3457832c35cc7b8db94d7d0ddfeb56bfc2f2fbda1d60ecc8a3a0bf5aea996273
SHA512 782989b34efcb130c9c66aa0193938b264455e7f4ddea6919ff08e065127264c19e3fe5e32c06d23eb848bea1af62820e355942f96089458700570dd30c0013e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cec8c7062fb56d5ad1d09e1b3b37a5f9
SHA1 c4915c3faa7111277c3098efd91816133c6ee7cc
SHA256 103eb619ba88eafe088a0a1967a8b02b7391a58b000bda6a6db633ec2a21cc80
SHA512 5057a25c5d87954817c9feabf8a0ec31bd33f99c3ad3ed90cddfec292c57b0e87127e8f455cb7d914a57ab87dd39e47756346baec32a74ea3a5c29a421597fc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 74fd6fe5144496f7b4c19ea24545f811
SHA1 744e8d2ddee911bd278d12d5cd2fc0b4ae23cc84
SHA256 f04ba5e4c768cd2eacc98a478821f38a4dfdf2248ec5f4e5fa47d57089086c37
SHA512 958033784cdd2b1a4ec8d9bc82cd37f2d35ea739f001d14e5fb8b543417d696827cbb1ad0f4711b70f237e5ed55e9a784d8a540f61128ae2359dc3e2e3f53272

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005a

MD5 0b132f8117d23307620446dcabaac844
SHA1 2b8effc6ec228f6c119985dfa4ec656a5f145e92
SHA256 dd0b85dfa2859f3ad25e5c26f499c38f3586fdaa476e4c447f7b79d75e04674b
SHA512 dea089938fcc8d382832ec4c946bc368d0689038556df75131b281df9aced6d979439f8122b9e2db5733405f9f887328a76cce5cdc08d9e1500a5d4587718289

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 449fd47886e013238020e8ce2ae6cfab
SHA1 a41133d77502d4445d9cb13cc8eeca12aacb0610
SHA256 4761451e50883fe2481446aad0c9739b9950d280e32d5a76cfadb1e0901cac0a
SHA512 209d2b65dd02fc533a36187c1a2891c65a93109a5e5ae0d15e9d6446cbdfc751936dd1a365adf87a61a159175fbc5e3e359f972754bec413ed53028b41d5bbc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fd83825ffedc895a9c28f508dd753367
SHA1 6aff3f7f5f5c56686ef93a420b51806f2017a161
SHA256 6258a08f34f16497cefc61ba674f084b22c51a51ac31898d35c7b390a430f986
SHA512 c6707059096d6938a6e854d28c86d47de5e1018a2d5f0106b6ad8c6520e240b6274cdd5f90c75742966911843f789f8a5d61872b3dd768a2a8f7c4aa93d751a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 74c2ab61cd912d09abb362d00b18fc99
SHA1 671201339a39c17b4bbf9c0da13fb1c0e886071e
SHA256 10070560bfcb232f4fbf04b8bde3d76e80951e116b8d4e0ec2a5a8c0ff4f2f20
SHA512 1a4d67c8e7e3b7c5e947ddfb4a0e8bf9c6ae56b30d8cfa4f71a499b0b0b68d5b21a0b4d5803c78e7e1e6840af625a45d77b050179b4bdd6a4ebdf0838a721be0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0502d8a694ac9afc8da90e95faf4a3bf
SHA1 c7e8c47a32e0ef17b91a6b9afab03b273e278229
SHA256 e7be49b03ab0fd49690f220af4d2783e5385593fdcbde530b3c165b2e1ad4b02
SHA512 27bd76f6abc2ba305e2687e81ba5f6b9c8be0901553a6eef72292831dc77af622639eb20248b6712e1206a746ad9ec66658ffc5573fb161205e28d8edbdbb3f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ee8fc380760ada2db5c017abc69b0a46
SHA1 00f332bd8aeaa8a2ada1b860e5f7b41494c70fae
SHA256 b36d74bf1e071aca0c998db6d9736c6572aa07b5797c181d61eca8f0c2ece5c7
SHA512 3e16c386f7da38d6477252eb4f10281d274a90d21be40ecbeb18a94e8eece2221f451e1a5ba2f28bb5010b615186accb81d13be779e736292c1f279792560bce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d53bf19f84519effa97d9b0706bc780d
SHA1 cdb6630e5be9b0a718ca0583b1c3d1a85f33cb52
SHA256 8bb897335a7cbb081e5c82e0bd71a5dbad60c2fefeb2a7f27eec67e0f6584638
SHA512 dbff6e405c43b588fb7d6eff4716fa6831161c984b5ce4dd8afe99f31827733775b4c6ee3b718c00f40c41b41f85b1979aa4ce6ba607a4fd1e49ef22569d2f51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aaff0b798c87e9591e46afa0767ff2e1
SHA1 998c9f0a511ff0ffe825f24faa145554af0b1275
SHA256 5b1c0b77c44f42bc51e9b160b59641db26327fe35667047fe54f2a10f10f11d1
SHA512 fa9550eed4308154464de1ace6e2bd0c5f17d12395fa13da5d2c9d01610323764c4a3fde069f35f229b3e205a0694a7616686a996cb841fd25ec3288800077f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5c602f36dfef0da0e33fa694b8ce70c3
SHA1 4bc2c4d44587ae0d01315eebb4bf7c4786100516
SHA256 a495432658324d47731bfababf14372e25c8fb3f32d242dd9a16d3eceb8a81f4
SHA512 459cee0988b3aa3df2722fe335330122dc5dd73be2c822a3aa930eeebc8da6ba5c80cf0092a0ff20ba462cd48a8a8dbded9661cf6e6aaca8bc4619a3c0e650cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9eab5f2d4e3ef9950451587a6fc3063a
SHA1 37b208c2fb89a45d5c7c6d4c19e43ad4d5460f3b
SHA256 7905ec4b4f8f8cb9e09c63532f92b5eeca2183bcb054143fa75fd60581facc8b
SHA512 b11b179eef2f0c820c3c721edb9310860d813839e8ecfd626fe986861c18bf6296d0c4c3f1991dccc9555cd1b511b316a7449170b8d80bca31295985fe168b4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d9060cdf741e38bc93e1ba1a234a04b0
SHA1 725655e786a1b1ca44a8f3fbcdda55e1b92c9920
SHA256 ac8235ba21f7403e5159bfefe1e415aec577dbdddf0d48f716ab5053248c72b3
SHA512 f75bb1e3f62a98d6acec87d9de109bc8243d2a4a1a1410e816918c61b139c3c4283c14e7fd057ededdc02730875a43e9045ed9ade19d4d99972950473e235de1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 409466fa0eb15445e18bb88ac449fdfa
SHA1 e1c1cd4f6f3747a9fcd030208dbb15feb8fdf368
SHA256 7ec3c2b88fc7766f23301654b052fe5667a20bb7ebb3295c9951be541b1c1b7d
SHA512 df48043b05d7c151412e620c20d51e468c38b813f13dad0b3eef77debf50e168871150614ceeb5aab6a9f508bf1184f35134fde375e63dac20ce02ca359382c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2f7ab2877ebeb4eb6db5b626328d149f
SHA1 d6f0018165e04ca6ee0ed867f13414753045692a
SHA256 d3f09dcb75093291c8b1aa16481fa16f0b61788cb5340f1ad44066ca90293b78
SHA512 eaa1b364a6ad0ee7eb6b6b7812f9e3cd8e9ba5edab67ef1e25f8a32396135b7d3caf0cad8241556c5a88fcd1c3299d64a0b2b4d9dc5cc70b3a66801b0e06c5ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a830653439ad5e82751d9cb379db3ca2
SHA1 7b33683265bf22ca153ece5c8c1763566e2cd553
SHA256 b137561ab79bd6873b03d98b79b96f91d65a438b9fa1f9c105a8f81eeb4051d4
SHA512 5878446758af6b4a574bbf8b39d1f23c9bc7801cb5795444e230f88765d28e5253ed70f492ee4f661591bfb9d2fba0bebf0dbee3b15a3d7c92cccecdd3eaf7dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0ba205f69148b387497ca40da66ae9c
SHA1 52d9af1e72ba0068b38f44952eb500ab93a430e9
SHA256 b50db890ca560c5f8b002f68432f5175fa87227ddf8afc11a0f60a684e2785e9
SHA512 39ff08c1ab722d008102f038821153d3c96e660a0b4e78bae42a1ecdb803eb73cc35824fa96a4d1474ae41c3ca8392ffadf9cae0ada1f1fd3888bc741711092f

C:\Users\Admin\Downloads\release (2)\Client-built.exe

MD5 3f5658fd01f5bb4172e5c84640ea360b
SHA1 fbf6c24d9cfeb4d8cda9cce443b4ea9db21a0af2
SHA256 0ec41f722e09f7cd87cceeb5ffb18e8c9804dc56dcbe2f6900dac3c9785f61b7
SHA512 21b22510836bbdf791e1b03ca26928086d93b83ebba13876462dc1845a7fb205bfdd7043c66c170aa2b3ec4255fd9218506a7a1c2cf09caa66456b0976dfc676

memory/1508-3742-0x000001F31BF10000-0x000001F31BF28000-memory.dmp

memory/5520-3771-0x000001EE22010000-0x000001EE22028000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b47d677a78a01ae2941513e490d306f3
SHA1 355e82e22969878909210aae5487c6eb2bb4266f
SHA256 d51a85e3a237fb2cbf7bcbe75de2cfdf939c4c9615d5fcb1894a6c9d9c3bd281
SHA512 c7f3f2e4bae3f4f5fffcbae96762b6d25b150d0b25b26dc4b4722fb9578e6c871476456060be371733e7f64b1dfcdd9e20b46af4d55a6e6b98fcec3abd09aed2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 017f2ea39cc37bec98242030954f9601
SHA1 5686d1b070c687bcf8c169619ec9b743c08a7400
SHA256 e2aee6601278b8cc1aea3322a7f21d6597917936b1ee9d7c97922ba87d15ce5d
SHA512 1306c62c1f2b42fed95e5c9a449567c39688e1065b6a6ca524e7a52a5f2d0441c85f8a58f19ac4b515d36bc0261bf546a33c27802a5b44a60adf482370e4547d