Malware Analysis Report

2024-11-15 06:03

Sample ID 240924-xpwhdszbrk
Target https://mega.nz/file/0zcHiZCI#0EaOlcOfcgQyXTT4Y0B2GGhRiZimZgbjfH30mBV-PH8
Tags
rhadamanthys riot defense_evasion discovery phishing stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://mega.nz/file/0zcHiZCI#0EaOlcOfcgQyXTT4Y0B2GGhRiZimZgbjfH30mBV-PH8 was found to be: Known bad.

Malicious Activity Summary

rhadamanthys riot defense_evasion discovery phishing stealer

Suspicious use of NtCreateUserProcessOtherParentProcess

Rhadamanthys

Detected riot phishing page

Downloads MZ/PE file

Executes dropped EXE

Suspicious use of SetThreadContext

Subvert Trust Controls: Mark-of-the-Web Bypass

Browser Information Discovery

System Location Discovery: System Language Discovery

Program crash

Enumerates system info in registry

Modifies registry class

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of FindShellTrayWindow

NTFS ADS

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-09-24 19:02

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-09-24 19:02

Reported

2024-09-24 19:32

Platform

win11-20240802-en

Max time kernel

1680s

Max time network

1771s

Command Line

sihost.exe

Signatures

Detected riot phishing page

phishing riot

Rhadamanthys

stealer rhadamanthys

Suspicious use of NtCreateUserProcessOtherParentProcess

Description Indicator Process Target
PID 5376 created 988 N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe C:\Windows\system32\sihost.exe

Downloads MZ/PE file

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 4264 set thread context of 5376 N/A C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
PID 404 set thread context of 5372 N/A C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Install VALORANT.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\openwith.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Install VALORANT.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2842058299-443432012-2465494467-1000_Classes\Local Settings\MuiCache C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2842058299-443432012-2465494467-1000\{3CD15010-4B6D-44AE-9960-4EA8CF7BA7A0} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2842058299-443432012-2465494467-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Install VALORANT.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Setup.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 605242.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe N/A
N/A N/A C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe N/A
N/A N/A C:\Windows\SysWOW64\openwith.exe N/A
N/A N/A C:\Windows\SysWOW64\openwith.exe N/A
N/A N/A C:\Windows\SysWOW64\openwith.exe N/A
N/A N/A C:\Windows\SysWOW64\openwith.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\Downloads\Install VALORANT.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5112 wrote to memory of 2848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2088 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2336 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 2336 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 5112 wrote to memory of 1080 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Windows\system32\sihost.exe

sihost.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://mega.nz/file/0zcHiZCI#0EaOlcOfcgQyXTT4Y0B2GGhRiZimZgbjfH30mBV-PH8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb4d1b3cb8,0x7ffb4d1b3cc8,0x7ffb4d1b3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1824 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4164 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4836 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004E0

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6012 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6824 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7708 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10072 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6736 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8188 /prefetch:1

C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe

"C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\SysWOW64\openwith.exe

"C:\Windows\system32\openwith.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 5376 -ip 5376

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5376 -s 528

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 5376 -ip 5376

C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe

"C:\Users\Admin\Downloads\Setup\Setup\NewSetup.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5376 -s 520

C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 192 -p 5372 -ip 5372

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5372 -s 496

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 5372 -ip 5372

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5372 -s 504

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=9324 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2472 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7592 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8536 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1904,3024013661523076371,4234565051725744132,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7460 /prefetch:8

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe"

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe" --agent --riotclient-app-port=52335 --riotclient-auth-token=Ktd3JLLOzdiJNAxK50--aw --app-root=C:/Users/Admin/Downloads "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install VALORANT/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT" --session-id=d1b8a218-7420-a54e-99a3-2a0682aef0f7

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe"

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe" --agent --riotclient-app-port=52360 --riotclient-auth-token=s1wldk1zWUz3z1ZDvieWvQ --app-root=C:/Users/Admin/Downloads "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install VALORANT/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT" --session-id=dda80c92-bb45-9b47-8d48-8ae4f93911bd

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe"

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe" --agent --riotclient-app-port=52385 --riotclient-auth-token=-xNhqToxsLYpaQF3pOB-HQ --app-root=C:/Users/Admin/Downloads "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install VALORANT/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT" --session-id=1933a038-7d1b-9449-b0d9-7c9dbf0f04b6

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe" --session-id=1933a038-7d1b-9449-b0d9-7c9dbf0f04b6 --disable-auto-launch

C:\Users\Admin\Downloads\Install VALORANT.exe

"C:\Users\Admin\Downloads\Install VALORANT.exe" --agent --riotclient-app-port=52427 --riotclient-auth-token=_3BfZUQXbPs1yhaPA5N6HA --app-root=C:/Users/Admin/Downloads "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install VALORANT/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT" --session-id=1933a038-7d1b-9449-b0d9-7c9dbf0f04b6

Network

Country Destination Domain Proto
US 8.8.8.8:53 mega.nz udp
LU 31.216.145.5:443 mega.nz tcp
LU 31.216.145.5:443 mega.nz tcp
LU 31.216.145.5:443 mega.nz tcp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 0.205.248.87.in-addr.arpa udp
LU 66.203.125.11:443 g.api.mega.co.nz tcp
LU 66.203.125.11:443 g.api.mega.co.nz tcp
NL 66.203.127.11:443 eu.static.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
SE 69.30.89.23:443 gfs240n113.userstorage.mega.co.nz tcp
N/A 224.0.0.251:5353 udp
GB 2.18.27.76:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
IE 20.190.159.68:443 login.microsoftonline.com tcp
GB 2.19.252.146:443 aefd.nelreports.net tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.17.147.22:443 www.speedtest.net tcp
US 104.17.147.22:443 www.speedtest.net tcp
US 151.101.130.219:443 b.cdnst.net tcp
US 151.101.130.219:443 b.cdnst.net tcp
US 151.101.130.219:443 b.cdnst.net tcp
US 151.101.130.219:443 b.cdnst.net tcp
GB 2.18.27.207:443 cdn.ziffstatic.com tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
CZ 65.9.98.75:443 c.amazon-adsystem.com tcp
US 104.17.31.174:443 diffuser-cdn.app-us1.com tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 232.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 174.31.17.104.in-addr.arpa udp
US 8.8.8.8:53 119.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 75.98.9.65.in-addr.arpa udp
US 8.8.8.8:53 51.201.222.52.in-addr.arpa udp
GB 142.250.187.194:443 securepubads.g.doubleclick.net tcp
US 104.18.128.216:443 prism.app-us1.com tcp
GB 2.18.27.96:443 cdn.static.zdbb.net tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
GB 142.250.187.194:443 securepubads.g.doubleclick.net udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 104.18.34.214:443 trackcmp.net tcp
US 3.223.81.94:443 gurgle.speedtest.net tcp
IE 54.78.188.62:443 zdbb.net tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
GB 45.10.101.252:8080 speedtest.boxbroadband.co.uk.prod.hosts.ooklaserver.net tcp
US 35.186.253.211:443 rtb.openx.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
US 8.8.8.8:53 speedtest02a.web.zen.net.uk.prod.hosts.ooklaserver.net udp
US 8.8.8.8:53 lg-lon.fdcservers.net udp
US 8.8.8.8:53 speedtest.london.macarne.com.prod.hosts.ooklaserver.net udp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
DE 37.252.171.85:443 ib.adnxs-simple.com tcp
GB 50.7.152.4:8080 lg-lon.fdcservers.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
IE 52.209.128.106:443 c2shb.pubgw.yahoo.com tcp
IE 52.209.128.106:443 c2shb.pubgw.yahoo.com tcp
IE 52.209.128.106:443 c2shb.pubgw.yahoo.com tcp
IE 52.209.128.106:443 c2shb.pubgw.yahoo.com tcp
IE 52.209.128.106:443 c2shb.pubgw.yahoo.com tcp
GB 51.148.82.21:8080 speedtest02a.web.zen.net.uk.prod.hosts.ooklaserver.net tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
GB 193.3.26.19:8080 speedtest.upp.com.prod.hosts.ooklaserver.net tcp
GB 45.92.46.45:8080 speedtest-1.london.network.youfibre.com.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com.prod.hosts.ooklaserver.net tcp
GB 185.225.24.21:8080 speedtest.london.macarne.com.prod.hosts.ooklaserver.net tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
GB 185.82.8.1:8080 speedtest-lon.retn.net.prod.hosts.ooklaserver.net tcp
US 151.101.130.219:443 b.cdnst.net tcp
US 3.223.81.94:443 gurgle.speedtest.net tcp
US 8.8.8.8:53 4.152.7.50.in-addr.arpa udp
US 8.8.8.8:53 250.26.113.93.in-addr.arpa udp
US 8.8.8.8:53 21.82.148.51.in-addr.arpa udp
US 8.8.8.8:53 17.12.22.31.in-addr.arpa udp
US 8.8.8.8:53 19.26.3.193.in-addr.arpa udp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 45.46.92.45.in-addr.arpa udp
US 8.8.8.8:53 106.128.209.52.in-addr.arpa udp
US 8.8.8.8:53 8.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 21.24.225.185.in-addr.arpa udp
US 8.8.8.8:53 1.8.82.185.in-addr.arpa udp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 200.197.79.204.in-addr.arpa udp
US 52.0.0.176:443 jogger.zdbb.net tcp
GB 104.78.165.146:443 tags.bkrtx.com tcp
GB 184.26.45.79:443 stags.bluekai.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 172.217.169.65:443 4caafd32f7d0534bfe8a14d25c2d46bc.safeframe.googlesyndication.com tcp
US 172.64.155.119:443 privacyportal.onetrust.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
IE 34.241.56.65:443 secure-us.imrworldwide.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 172.217.169.35:443 www.google.co.uk tcp
GB 142.250.180.1:443 tpc.googlesyndication.com tcp
CZ 65.9.95.16:443 cdn-gl.imrworldwide.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 142.250.180.1:443 tpc.googlesyndication.com udp
FR 18.244.28.63:443 bee.imrworldwide.com tcp
GB 142.250.187.228:443 www.google.com tcp
NL 185.235.87.28:443 ag.gbc.criteo.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 185.235.87.108:443 gem.gbc.criteo.com tcp
US 8.8.8.8:53 28.87.235.185.in-addr.arpa udp
US 8.8.8.8:53 63.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 108.87.235.185.in-addr.arpa udp
CZ 65.9.95.106:443 ghcbigacyozxqpeqp2tegw35yechv1727204599.nuid.imrworldwide.com tcp
IE 54.229.33.157:443 fw.adsafeprotected.com tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
IE 52.17.20.155:443 aam.a47b.com tcp
IE 108.129.51.190:443 on-device.com tcp
IE 3.251.39.94:443 pixel.adsafeprotected.com tcp
CA 185.170.62.151:443 a4379.casalemedia.com tcp
DK 37.157.2.228:443 track.adform.net tcp
GB 142.250.179.226:443 www.googletagservices.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
GB 184.25.172.245:443 ads.pubmatic.com tcp
US 34.98.64.218:443 ookla-d.openx.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
GB 142.250.179.226:443 www.googletagservices.com udp
DK 37.157.2.250:443 s1.adform.net tcp
CZ 65.9.95.99:443 static.adsafeprotected.com tcp
CZ 65.9.95.99:443 static.adsafeprotected.com tcp
CZ 65.9.95.99:443 static.adsafeprotected.com tcp
GB 184.25.192.159:443 servedby.flashtalking.com tcp
IE 54.72.142.98:443 a.a47b.com tcp
US 3.214.55.104:443 dt.adsafeprotected.com tcp
GB 2.18.27.142:443 ajs-assets.ftstatic.com tcp
GB 142.250.200.6:443 s0.2mdn.net tcp
CZ 65.9.95.82:443 agen-assets.ftstatic.com tcp
GB 142.250.200.6:443 s0.2mdn.net udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 216.58.204.66:443 googleads4.g.doubleclick.net tcp
GB 216.58.204.66:443 googleads4.g.doubleclick.net tcp
GB 216.58.204.66:443 googleads4.g.doubleclick.net udp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
CZ 65.9.95.26:443 cdn.flashtalking.com tcp
CZ 65.9.95.26:443 cdn.flashtalking.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
GB 18.130.156.184:443 ad-events.flashtalking.com tcp
GB 184.25.192.49:443 stat.flashtalking.com tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com.prod.hosts.ooklaserver.net tcp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
GB 51.148.82.21:8080 speedtest02a.web.zen.net.uk.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 31.22.12.17:8080 speedtest.swishfibre.com.prod.hosts.ooklaserver.net tcp
GB 152.37.112.6:8080 speedlon.hyperoptic.com tcp
GB 142.250.187.226:443 ade.googlesyndication.com tcp
GB 142.250.187.226:443 ade.googlesyndication.com tcp
GB 142.250.187.226:443 ade.googlesyndication.com udp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
GB 93.113.26.250:8080 speedtest.thn.lon.network.as201838.net.prod.hosts.ooklaserver.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
DE 3.120.207.148:443 btlr.sharethrough.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 35.186.253.211:443 rtb.openx.net udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
GB 184.25.192.27:443 contextual.media.net tcp
GB 184.26.188.27:443 hblg.media.net tcp
GB 2.19.252.138:443 qsearch-a.akamaihd.net tcp
GB 142.250.180.1:443 tpc.googlesyndication.com udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 tpc.googlesyndication.com udp
GB 142.250.187.228:443 www.google.com udp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
US 151.101.193.108:443 acdn.adnxs.com tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 2.18.27.82:443 th.bing.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 23.194.8.4:443 www.riotgames.com tcp
GB 23.194.8.4:443 www.riotgames.com tcp
GB 23.194.8.4:443 www.riotgames.com tcp
GB 23.194.8.4:443 www.riotgames.com tcp
GB 23.194.8.4:443 www.riotgames.com tcp
GB 23.194.8.4:443 www.riotgames.com tcp
US 151.101.194.217:443 cdn.ravenjs.com tcp
CZ 65.9.95.26:443 cdn.flashtalking.com tcp
GB 2.19.252.82:443 cdn.rgpub.io tcp
GB 2.19.252.82:443 cdn.rgpub.io tcp
CZ 65.9.95.96:80 crt.rootg2.amazontrust.com tcp
US 104.18.38.160:443 xsso.playvalorant.com tcp
GB 2.19.252.91:443 valorant.secure.dyn.riotcdn.net tcp
US 104.18.5.5:80 validation.identrust.com tcp
CZ 65.9.95.26:443 cdn.flashtalking.com tcp
GB 2.19.252.91:443 valorant.secure.dyn.riotcdn.net udp
US 104.16.119.50:443 auth.riotgames.com tcp
US 104.16.41.28:443 fast.fonts.net tcp
US 151.101.194.217:443 cdn.ravenjs.com tcp
GB 2.19.252.91:443 valorant.secure.dyn.riotcdn.net udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
CZ 65.9.95.114:443 consent.api.osano.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 162.247.243.29:443 bam.nr-data.net tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io tcp
GB 2.19.252.78:443 cmsassets.rgpub.io udp
GB 3.10.126.228:443 playvalorant.com tcp
GB 3.10.126.228:443 playvalorant.com tcp
GB 2.19.252.97:443 valorant.secure.dyn.riotcdn.net tcp
GB 2.19.252.97:443 valorant.secure.dyn.riotcdn.net tcp
CZ 65.9.97.224:443 www.datadoghq-browser-agent.com tcp
GB 2.18.190.72:443 web-sdk-cdn.singular.net tcp
GB 2.18.190.72:443 web-sdk-cdn.singular.net tcp
GB 2.19.252.97:443 valorant.secure.dyn.riotcdn.net tcp
GB 2.19.252.97:443 valorant.secure.dyn.riotcdn.net tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
N/A 127.0.0.1:52331 tcp
N/A 127.0.0.1:52333 tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.18.157.37:443 clientconfig.rpg.riotgames.com tcp
N/A 127.0.0.1:52336 tcp
N/A 127.0.0.1:52338 tcp
N/A 127.0.0.1:52340 tcp
N/A 127.0.0.1:52342 tcp
N/A 127.0.0.1:52335 tcp
N/A 127.0.0.1:52344 tcp
N/A 127.0.0.1:52351 tcp
N/A 127.0.0.1:52353 tcp
N/A 127.0.0.1:52356 tcp
N/A 127.0.0.1:52358 tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 104.18.157.37:443 clientconfig.rpg.riotgames.com tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 104.18.157.37:443 clientconfig.rpg.riotgames.com tcp
N/A 127.0.0.1:52361 tcp
N/A 127.0.0.1:52363 tcp
N/A 127.0.0.1:52360 tcp
N/A 127.0.0.1:52365 tcp
N/A 127.0.0.1:52368 tcp
N/A 127.0.0.1:52370 tcp
N/A 127.0.0.1:52374 tcp
N/A 127.0.0.1:52376 tcp
N/A 127.0.0.1:52381 tcp
N/A 127.0.0.1:52383 tcp
N/A 127.0.0.1:52386 tcp
N/A 127.0.0.1:52388 tcp
N/A 127.0.0.1:52392 tcp
N/A 127.0.0.1:52394 tcp
N/A 127.0.0.1:52385 tcp
N/A 127.0.0.1:52396 tcp
N/A 127.0.0.1:52399 tcp
N/A 127.0.0.1:52401 tcp
US 104.16.55.40:443 data.riotgames.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 2.19.252.146:443 aefd.nelreports.net udp
US 104.16.56.40:443 data.riotgames.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.16.56.40:443 data.riotgames.com tcp
US 104.16.56.40:443 data.riotgames.com tcp
US 162.247.243.33:443 insights-collector.newrelic.com tcp
US 104.18.156.37:443 clientconfig.rpg.riotgames.com tcp
N/A 127.0.0.1:52416 tcp
N/A 127.0.0.1:52418 tcp
N/A 127.0.0.1:52420 tcp
N/A 127.0.0.1:52423 tcp
N/A 127.0.0.1:52428 tcp
N/A 127.0.0.1:52430 tcp
N/A 127.0.0.1:52427 tcp
N/A 127.0.0.1:52432 tcp
N/A 127.0.0.1:52435 tcp
N/A 127.0.0.1:52437 tcp
N/A 127.0.0.1:52441 tcp
N/A 127.0.0.1:52443 tcp
GB 2.19.252.134:443 aefd.nelreports.net udp
GB 2.19.252.134:443 aefd.nelreports.net udp
GB 2.19.252.146:443 aefd.nelreports.net udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 228fefc98d7fb5b4e27c6abab1de7207
SHA1 ada493791316e154a906ec2c83c412adf3a7061a
SHA256 448d09169319374935a249b1fc76bcf2430b4e1436611f3c2f3331b6eafe55a2
SHA512 fa74f1cc5da8db978a7a5b8c9ebff3cd433660db7e91ce03c44a1d543dd667a51659ba79270d3d783d52b9e45d76d0f9467458df1482ded72ea79c873b2a5e56

\??\pipe\LOCAL\crashpad_5112_QGYNILMXBBLUWPAD

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 026e0c65239e15ba609a874aeac2dc33
SHA1 a75e1622bc647ab73ab3bb2809872c2730dcf2df
SHA256 593f20dfb73d2b81a17bfcc1f246848080dfc96898a1a62c5ddca62105ed1292
SHA512 9fb7644c87bdd3430700f42137154069badbf2b7a67e5ac6c364382bca8cba95136d460f49279b346703d4b4fd81087e884822a01a2a38901568a3c3e3387569

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cf76ede870b0c6feeed0c79a2ed6644f
SHA1 50f715b19310715fa19e09cd39b33c235a95a207
SHA256 000f6aeddbd7cb1bfe71339bc0ad8925699adca02173a2593ae194ceb628d5e9
SHA512 941e2d38e73f1f8844d8e941cf3dfdc255a8857687817e8d786205e247c259142b711ff08403c5785613892b75fd5d13134c17740de5416a684617fb0e3f3894

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 49c20fb683b6f16e01b7b25d7d3e5437
SHA1 496094792b79e01566fbe1262e05bc5268f47134
SHA256 a9ee084dbbbdd3e44802cb34a4969e82801ab51ec1cdcb5e8fd3d490ee8db4e9
SHA512 6b25c9561be7269f8c7fe194cdbbdef99ab7a9f38a318b58d5f0f1a125d5219bb55b93180e044ee15d59dc9d1b1ffb9599cb987faaf2c34ff44c70045aae84eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 46658ad90b09a4ae2291d47499835763
SHA1 c2906ed109d02d72920e2607c2b61a0235464d61
SHA256 c149f2a4d5624d2b64025aa8e691f15483a226bc81f8d671ca5fb636b8ff608b
SHA512 64c003f9344477bdb1e57d174a1dea529dda6d01e259a86fa888c147f240d0ac84903a389d076b5598283f9ad7e988dfc29b12b1c4e86586f12587f6afd59919

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 23130a0e9655030e3489970b4382e32b
SHA1 6d096822d2fe0f902e3518bd997f9d9d222044c9
SHA256 bdf7e387b1076ddb95ac57de2e38d1bb329053c2720c0ec16476d0a0aed8c4c7
SHA512 63f8c625f8a486cf7b1975b39b5db28609e1d1f28c217146c0491fcb7cdc7d29857fa1b568c7ccee7007ad86361ee40a76e101ee2a769af0d77cbf580a3470b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

MD5 929b1f88aa0b766609e4ca5b9770dc24
SHA1 c1f16f77e4f4aecc80dadd25ea15ed10936cc901
SHA256 965eaf004d31e79f7849b404d0b8827323f9fe75b05fe73b1226ccc4deea4074
SHA512 fe8d6b94d537ee9cae30de946886bf7893d3755c37dd1662baf1f61e04f47fa66e070210c990c4a956bde70380b7ce11c05ad39f9cbd3ea55b129bb1f573fa07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

MD5 e5c0848bec1c488b12fe59118f5154b4
SHA1 6fd5569f8b40ce3b2d1d72f188a445ebef2c6fc6
SHA256 93f7cf5f232f61f219cca4822f49c0ce8dbcdbe6d354f3803447a190b219a62c
SHA512 11b819f6a01b965186f5995448d39b50f218ef76b72b54da79b8e2316e4f07ed36903911e17444db696780cb026a9026fb6200e114d098d279d85a34637e9da3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d326dbeb158f69a50f02d65952797214
SHA1 5b57731255f38416a31a8387c7b15deaddb24dc7
SHA256 54e1089f94b77a24636052785aa7ef1cdf63876f1c06db6a82d0db77b0582b15
SHA512 0a1b057f42d02aa2cb9d525080cda701c38956dc89a3ce6a9bbf1cda3d79fc4a434f6c46176d82d66c43ecceb4ba4423106eca2f43b1f9263d1d1d57cfdd3a21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cd5a5251e588fa1a6855067af8f9bfaf
SHA1 3d337646f6fd6900094b6b1c4eb28d54d247abfd
SHA256 cf0f49a1ff8628d8e63e622f45e5db09c398fae0b2e51558c375c7c8051cf8e9
SHA512 381142f267de43ca3ca21211c42ad648eea329030d4fa46e0dd0e5af21a1688857bccb124745ba555aee0880d2adac8163ed670816847fa6f609df50e0790927

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fdd8.TMP

MD5 fb352bcaf836f882bf3e6e9ffe2596b5
SHA1 62dac829b4561c63dd2a12b37e95c9ad4eb9be5a
SHA256 8aa654c677b3e9e0d631ac64b16771144d561b8db2cdb15c85a7fe349f40e266
SHA512 02e92fd5373646f78a2249ddc3667d56f39279e26e09fd560a9dc432aad8a3a41f5903e786793e3950ae3c07967708d4af02f5e3fa7f24fb5ede9a5c168c67bc

C:\Users\Admin\Downloads\Setup.zip:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe580049.TMP

MD5 90a360fc20d49e1bc570fc97b0370bfc
SHA1 f7708368f98a16454a3edc238802df6e33fcd9f1
SHA256 806a3e204a366a350f12bbc1359ba32d26885851fccbfebc7ff32114572b9b37
SHA512 8d1f417d105d839b5894c969ad1a4897aabc9a2d53ececfe62f12b787a16782601e40befe0059ca81e582566f96ff78f667362c2375385af2bfe72899011c794

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 d7c61e7470681148990ddfa629eabfe2
SHA1 8dae8c015a6ef6e76ec7771b42ce896262fde5ea
SHA256 c1a4b2be1489146d57e3e33ea94392c270694e64afe13b7ae5ddff7db2192a25
SHA512 3b050637b2b4130524dab5fe4744f92e57a95ed8baaddf583bacdc6fa1f4e7b97e1f50923df4952e6fbadb71f430347bebaa7502123e02cb669d93341e8639f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005b

MD5 c87cf6549eb181e9ff0a8ec56e0e58e2
SHA1 6109f2d395d746077b181e147c6afb36fff4d231
SHA256 9db94718331e8bb85997cb885c24d726fd5f5106b471d0fb3a10934f01b0ce29
SHA512 5527d84f4421f654710e4986a3eeff93f100a6d76ca8c5215b2b5c9915e001bfc88be40e2b677c92f0f3bb1ad9710801c7f34fc7bbb1f0316fb96eb07b7239e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 8aa3d963cc63b6df4e1e1815c36bc6b9
SHA1 e0a3027e20b6a1aa9692aaaae97ec672e2b7a466
SHA256 49e97ebfefeac34521b1b77161f5627915ae3d70b8a5ddf150e70ee22abbfd7e
SHA512 7a25e4c3a880a9a50105fd54056bc69ae12d9b1bd5079fa665684452a4815cf7d6ae6e2b1f75a05c85636c38c6ae3afc0b2f3c6ac8f31ed8c222c755ff814a0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e4cf25b8cd50e68_0

MD5 8654e13d84b61a963b9cb7056f1c8606
SHA1 b3f63e3021638b306c759c7dd2ef13559901ecd6
SHA256 9644d6f767457b2aa16eb7eed2ca611f4de51d7654b12fff66939e6b3fb1b76a
SHA512 bda10167e52e1a4bf62a2cafe04a9c95b541ebfab94b3ae62077e722a03eac13e9e53d45f910561b015d6cdcbbafecfec05e9ab2dff9d5669f0f1d053c6ece5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e8b92886ae778daf4bb2a078e2a46eb9
SHA1 df154a5050fe1d7d31fbd425856714b61d739a63
SHA256 1e73038c89f61df0bcb55774d0080b524f74106846b428c5502f6437bdf09135
SHA512 2d83c6b497d80c02c0b125d1160b4698dfa5989ac90525b9b9e08663052df4aef18a3d96c149718674915ae48d0477d2b62f47febca40e7efd2a9e81c8c73b78

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d8bf99137a15997f1362b4a66782af56
SHA1 5e97383194c047d9f14bf6fc65499ffe11e1a7d9
SHA256 da6f8aeec5ed6759f53697ff5f74e9e8c19ab2be717853cafe7efc6ba137c3ed
SHA512 9e9dfb0d83b4dd33087c139cf17033adcf7b69cd5d4ca9713be9966220fe67a2e80a7c2ad4dc250e6fb078a1e26f4f9a4afe5c42d22d0de39b7cee032a10a5ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 900553ef4816388d3a3a393398da49ba
SHA1 1aa67c5d800756204912dfa67b349947ccbd6c05
SHA256 60522e8fecdf9bdc977abd3553c903c80486b13dacf359c46298d2fec1299388
SHA512 8c98918303ed1a9bc92ba509a01cf0949fea0f1eaecc0e9f114f3a18ec8f95c5d8168ea9f679a2a3a6d5408c67413f899f74994b9214184bf2b3c8a9f13ed784

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 01d56b990e10314b041b36ca6869318a
SHA1 35a9461a8481bc291ef1d2e353c16497d654385a
SHA256 509a2477dac489c52bf955dbbec7742a5b58bd852dcb3620ae2d27b7657c1e43
SHA512 a2bd326df4f40c79fd970a096d2568c03157b52876425194a3fe1cd4ce1b1ca7345746c3169e3a41144c097b2320efb2d0e6c63b2c3773e08bb919dfc38abf8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 0e30c9f18bd0f9bd8a4a109ffc568a1d
SHA1 90e326b1ce9d994b8e9f5145f41597a914cca0f2
SHA256 e28b3ed9b6ae0b21260d8759f11344d43d052c489477dfdfa12de3fdb24c9b99
SHA512 4fe4665f7a41c18902b54a5526bf9770e880a4d66c43f8d858433e153101a23af870391db774d16836db65973452a0131aa80be963abe72b3af51bedb49b64c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6bdcd55d5f748860a2f10145db3484f9
SHA1 91605112455e246a2e2bf412842f76b36c1fd2a6
SHA256 4e47add1247d78226a6bda65058a36986272996ea861dfcd860d5cc9c687b1da
SHA512 6e59497ec7784d27a75ae806f18640a2e121ab83676cab363620c183bed373eebbf5ae15fe02a26b97705766f34518ba7bbfee56c675ac3d52db8ba73b772d85

memory/4264-949-0x0000000000510000-0x0000000000582000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a9e58eceb30fffd3aeec31fd8285b71
SHA1 66361774a9c928612806098deb35471e52b6a5bb
SHA256 df3dec5a11ba2949a28f418c3e3ea911a1a8a14893cf05c43c50c83b49c59535
SHA512 2b2303eea96dd2be2f8e823b7801a730602475c2422728f6816f0e85a0a7166367a75cd0e3b78e71197595dbf1cb439221abc375733fec16a7e91739713bdeab

memory/5376-960-0x0000000000400000-0x000000000047E000-memory.dmp

memory/5376-964-0x0000000000400000-0x000000000047E000-memory.dmp

memory/5376-962-0x0000000000400000-0x000000000047E000-memory.dmp

memory/5376-965-0x00000000040A0000-0x00000000044A0000-memory.dmp

memory/5376-966-0x00000000040A0000-0x00000000044A0000-memory.dmp

memory/5376-969-0x00000000756B0000-0x0000000075902000-memory.dmp

memory/5052-970-0x0000000000D10000-0x0000000000D19000-memory.dmp

memory/5376-967-0x00007FFB5C220000-0x00007FFB5C429000-memory.dmp

memory/5052-972-0x0000000002C80000-0x0000000003080000-memory.dmp

memory/5052-973-0x00007FFB5C220000-0x00007FFB5C429000-memory.dmp

memory/5052-975-0x00000000756B0000-0x0000000075902000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NewSetup.exe.log

MD5 bb27934be8860266d478c13f2d65f45e
SHA1 a69a0e171864dcac9ade1b04fc0313e6b4024ccb
SHA256 85ad0d9909461517acf2e24ff116ca350e9b7000b4eefb23aa3647423c9745b4
SHA512 87dd77feac509a25b30c76c119752cc25020cca9c53276c2082aef2a8c75670ef67e1e70024a63d44ae442b64f4bc464aee6691e80c525376bb7421929cfa3bb

memory/5372-979-0x0000000000400000-0x000000000047E000-memory.dmp

memory/5372-981-0x0000000000400000-0x000000000047E000-memory.dmp

memory/5372-983-0x0000000004030000-0x0000000004430000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 41ce6cd728e8893a0387cd1d5aaf201d
SHA1 c6c5257c73d52968b03fa7a332f61f050229999c
SHA256 c6ff6212cd4c01ff44605a8339568c3ed2b9dd85c7956873ee9db592e24b654d
SHA512 73c40effe3fa0c521cdd5347e85ac142666a5a7b982d96c80f4c08c079d2f5a8d58c12644af20f27b8480040eb74b28d0696be16fc9566c02bf2d60d08839c27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 509d1e75f9876ecde056faafef5ae620
SHA1 2581fa11587d73ef6f611557954518ebb7908bc5
SHA256 b3b355f7ae6902d546436864f69c20e50ef07a43477109c5bd2afd5f0f06e954
SHA512 ad16b96f2f91ffdc12e08c1b86612bd9019ba6ea4dd2e1a2c98f586eaf27efafbcd5ca6e238a0ba7fd89a065c3bccb88d756837089e624133b2b33e67521ce7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5 cf604c923aae437f0acb62820b25d0fd
SHA1 84db753fe8494a397246ccd18b3bb47a6830bc98
SHA256 e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4
SHA512 754219b05f2d81d11f0b54e5c7dd687bd82aa59a357a3074bca60fefd3a88102577db8ae60a11eb25cc9538af1da39d25fa6f38997bdc8184924d0c5920e89c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 d9b427d32109a7367b92e57dae471874
SHA1 ce04c8aeb6d89d0961f65b28a6f4a03381fc9c39
SHA256 9b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3
SHA512 dcabc4223745b69039ea6a634b2c5922f0a603e5eeb339f42160adc41c33b74911bb5a3daa169cd01c197aeaca09c5e4a34e759b64f552d15f7a45816105fb07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6d9b227cce20300e631600f3178a542c
SHA1 2886dd7ce14f446d055e17e12a41474771f5018f
SHA256 e404ad2bdfe8cf22ab1be293ff31962ad71378c12da7aefd6751ebe51d917d67
SHA512 ecf54393dd68610195049ea24cbd939065ab9072f86e197284039ea8108e4fb7d223b838948444a08ad088df1dc7710f10507f250cf0565dd4abdd3ef85f5ae7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1bfeeb76babb453cb304a7a3658a6e51
SHA1 a85a2497b4c9d3d2a1d8c7c0fb67c9b00983c7c2
SHA256 c520e47a016c9fe54c266b03afdbd75b3f57ae34a0b185cce3dab644883f958b
SHA512 60c303cf6713e974c49fcdd0f68c45c372a4c01b688cca48e517f8e1e37bb62a34e51da2900b86d19d3cc6122f3424e1fa2c99a87b11fb8da5bd31aaf138687b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9341abe3a1629b3f7b326aca9997ea16
SHA1 7d68bf3d6dfda1c09cd9ea3b11afc25cebd84710
SHA256 0000c2c9a54710262b2bac3e2a2a6e39f39c31a12a36b65e7e5c420eb1666343
SHA512 a523be0d92b4c3c185c45147a54fc5620858be4e6c4cb1730b879ac71ec3caae56e11c4bebd58af2f28849d0a0acd55ee883201555e149ba3f8e1cdba64eee92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\068af778bdb72cf4_0

MD5 d9f6cbf38f2f35913d80a588d9941d5a
SHA1 98f08ab4766b88dfba9e3a6c6dd295779bc34588
SHA256 3d9a48386cceea06e02732777b0791fb2755a9a970f3cd8b0d987b56d870bdbf
SHA512 71b6621fc47a4b1cb8b30d540c4d55041b1f4651ea8fe2ab064972aa78fa06f9bdc39dec4086cc555eccefa3ad53e932f74ffe56872034ef2275cd79f98527e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\abd4135cd1894b0a_0

MD5 a6e51743fdc2e993c939ff108bb9e6b4
SHA1 98b01c56d6995f99663c679d869dbecf5f911b15
SHA256 003e9e150e39da8405b615a5fcc9120a251301d199b3a9a04a6b50c9b06a15d1
SHA512 409b1e14ce606a16a6f491c3832be73e08ce56af1b8baea6564f13d46965f5aa8c276a957909f49052316afd26306f6e53e103361465b813a53715d723101bf5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\38f36760f79f7bc8_0

MD5 2ccc1aa837d70f52a81e85afd04e23f8
SHA1 676c12749273db750331a651871c6d0129dddebe
SHA256 adb31d15d45d14f7ac22664cfc3926f5d7c636155a8316a912610c04333dcf9e
SHA512 b99f526093b8b8d709c38f6c036c78010e76dc8cf1ae52d63dbbd9e8a8188183abe0d1f9ddd0b4c9449d22dcb5b874564c32c64585d72ff1ac30a6725aad71da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6c2b7d795979962_0

MD5 b2afbe23bf1c54333d77e8493c5412cf
SHA1 b1b7c3c5382e4c1d67d5b1da694cc3b94201e554
SHA256 94b2d9f7e031e8ae70c6f6aa68bf9a89983626e2b23fdd7dd15bbb2d630617d1
SHA512 574ae83bd085123fa3d01d20313cd6836e07da91d209c40124ca1983a36de7bda7610f2a3faa62da6fc481b32f1e2e893d95d7ad52d9444f0ffde2ad9f1d9ae4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008a

MD5 7a6c2cb74519cabe333333353619e7e8
SHA1 43045dcd78b5b051e487c199dcfcbdabb7b18d23
SHA256 9f80027c16678a964769ef3a40b564a1a4db26d3272d78b578b479a5b91f2e7e
SHA512 50cca740a69888e935d39bf7c205c6b172a15e9d38632cd046265d16c584dbfd0810c08f7245466a38fe2939dbda54a984d81fef6fb3fe78b9491f461d9e149b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75f3557ec577aef1_0

MD5 d63d0667c116b8777cb8ff396dcf88d4
SHA1 9dd2fd4b11ec3a7a2c073eb91be595cacc371122
SHA256 125c835b3c59a4f7b26d3995c492f29a5c4dae571169bd5c359ddc1d0f156885
SHA512 ae7c141844e83f566bf84acd90c8c514325669324fd4b730de13cdf0801ab560d5efe217a21c74c9399e1c95b24e5f72fd5603441a8e5db7a83b797762aebde5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3193de066eb7b6af_0

MD5 f2fb29eafcc405b4294d69494e8863b8
SHA1 34f4f4560d79a6e98e0d9299485b4409b402c3ba
SHA256 d051194fe2e4c34a2379514ad60f2a8f1bf1ea414dcc67032788af65c13f0dc4
SHA512 4947497e39679c43a6f86852690b77e588b413e7fc69e2b676293d48ef4edbb2086f84e996b0544d413db8c9ff8f86385ad3dbca332c5b6bfc14269c3d5e4a09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\05163f7028f15d04_0

MD5 87fdc5a67d40f5537d8f493086d268f7
SHA1 fd4c8cb33bc23e5b777bdd770459eab5e8690108
SHA256 3f2406ddd3d79eb4b6657e5fe28155f929da8ac6a3c8b83ec1e46960481b74a6
SHA512 6f74be49d37006253f1d42659d5fb81ea5d9fe7e880f196a2502502ccc8ec0fd0bc816fd5f87d2a7ad00ede128e5da5f385d9e3ae22598202d64ed7b97c4621b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4f4569eaf35c404a_0

MD5 4ef6f0db0808b2530b660710ecd95a9e
SHA1 526416f6d3b3f4de25ae2f825138ea2242dc4556
SHA256 2ff52253eddfe8545da08fbc31fb7bbd80cedb63c261ecbae7c091302bd41fd5
SHA512 1e6adec2b227cabfd7bc054e54060eb745b3b7ae7125a90fbf677a115da7f8847128c34513f27f99288dbbbc4e77fdd9c0e677c2f610b05ab50b161ff9072352

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d9d71d05c315d32a_0

MD5 6f640c47225360704f4b5ee27f2f06c6
SHA1 bb228b6198461f144cf7d4b2cda43d2d03ed3bae
SHA256 a1f8f3a2226923496c5215065c5eb95b56cfd464fa1c154382b603796d5f89d4
SHA512 3e0102b79ddc602ed0f85a7df6977f7767d97255812b34404eba35a19160081e4188ea4ec97eca68e43230453bca2ee233615401c6ba6aeb05812d92692a8017

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008b

MD5 f128c3c4678d5e58d112693a52952405
SHA1 a382b20f2825905ee3405423f044ffed056dc916
SHA256 ca23b12438182c48d98932e6d42ad73fe80b7998866293e019c3e7faef11c101
SHA512 715522d76e4a0aab71f6d338add279effcc6295f5e72961eef3675e5d3956263fa0d0317204602d8c17071e3d077c31947cb7f5fa93a06ac8f70dc4342e1998c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a6a9b13b65d12f75d7e4201a48b19887
SHA1 d5348387293358c13c64dfb34ca000f76b2009a9
SHA256 7dea4de8846bb7637d22e657b1b06e257c2756eda15387a692770a0dc4440067
SHA512 6fbe19b0da931311e1b3a037ad8b510b3417d856bdda3cd9fb39c7b6a7005b764eb19c57c4ecdf3c774795733ba91d5e03ed513f9074fc7789fdbf7e9c5108e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e00ebe0685310c5_0

MD5 13c64464401436b4c7c19cf37d0bbe69
SHA1 fa919834942c0524403b994e600ba6222523a24a
SHA256 a6c7dff2ccc9f4a6ef9df4f5de22a3a5ee9eb8e9b0374fcacd2906d9026ccca3
SHA512 2cfbe6684e04550b3f04839770d26ebaf51d75abd866378c2ac8ca37503ffc9017831233f8bc78f61279fd3675a3a2a01698e0622b3e0613333210e4a419a0c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a29c135842665b84_0

MD5 2ab698475ffd64a61602dd052100869e
SHA1 2b1f3c89b371b52708982962f44e50e4d768379d
SHA256 31c852bf0f153dd9783f4e2ead23dd4f83d387bebe75bfc5a6075a1c59e75698
SHA512 ef1e86eb4d1ac6a9e08e8ea830690dffa4d1dc6be3f819fe754daf2610366eaa5edef6e1e37ec75ca9e313a82afc14fc91df528238013e61fef6cd3ca14d959b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f7515a4e6f1b59c0b33e9ff7c4539e51
SHA1 c72603c5fdd454b59c4ebc1b9c10416a20505f95
SHA256 745363126048d586aed933496b6636c6f9cae996c8934660d5032ce705012856
SHA512 c9a984e428701cface68270593e50d368af646ba054956891b629c5387405dd530eec72c9dae37c5700d5eff8fd059eb66114fcade175ed087f6a495b9993130

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ffc4a039d7d8773e_0

MD5 1221aafdee53175899584eae44d3eb9e
SHA1 00135e68171857c469bb8d01476aba3ca35f6d17
SHA256 174559ef548cf15e3d3758d320a51c2525b446dcdcd0fece4feee054535c7cf1
SHA512 405d16c6d81c0d8c99f7986d9a8b570a80a62495d726196c4ac5026d71e796f419188ff0a5845c43c3afc1265963d62137cec2131bc58a2a09f07c07edd09eae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2c2db0569def6ba3_0

MD5 8dc21feb23fe9cf65a5b072f4d1ba8e5
SHA1 a18916e82e3bdb44b773b305faf2473c69ba0eb0
SHA256 11c65c91889d3fc7160642b1fce20d1ee9a48396d62081570fd4e836b9b11830
SHA512 3e5e90e5c8f4cad11cb509f81b78279730aad3521c7ff71a1280311e69f23f87f68da0fdddc64575b2da6af82acd4eab2ae46d777b19fffa91d15ac3ce05b268

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1750ca3e4d82b11a_0

MD5 dc7b99cbb40412e15412ac291c5771ee
SHA1 28d46ae3a469b0605e414cc207f2cdd3777fbc8a
SHA256 be01a47bf777c2bd3bbfb09c1d0d570af33f1a3d1060f139ed906e3363f19044
SHA512 6ad962984cd165d9ee8b4ca985452d1ea070f01c305c72c50dbf9a44ec0fd987cd6d383cd9223ac289dc19828b3205999ad983c5e7ed2039f21c04ad61c3d033

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\954954e3568a2ec8_0

MD5 a65f17de6dd09dea7af82635dc135ebf
SHA1 f52e0061b074e352cbf01e145bd0fe9cdcbea690
SHA256 f4a08ffbfe923eea065cfb8e0132bbd80859fc9deff48312927cf5b6e2408126
SHA512 d721cb89612568f1023e52e1edee7fbd690528f9f84a240d485b3dd8c976f10c24ee8071d6966ca0af6e19d3f91ad5d847671b2843515bae9cf852dfdfa86950

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\807fa5ad76eb4ab0_0

MD5 a2ca5aa8a031d8a770bde991900a5290
SHA1 9652c72082272fc20d133b51864a2761f06d3daf
SHA256 cd931b901de6f25875b79b6164e2800a44815035e335e33aac6a0c245f4ae95b
SHA512 5196ba0d3587be84f1ff504f59ddde0ea5721107d5382fc11e191fc4d98115b75b864112e0cbc1516807731cc1b768a00751538e618efe4105238562c83226cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6e8cb0db3e2baacd_0

MD5 b796834c2009370720e4cee4b4be1af2
SHA1 e789abf9dd616fb75e0b422af2b730e6e8a9d9f5
SHA256 ca2ffad34e9ca73caec0a79d7fe70cf076e90cdcf56b81f3c2de48ccae9d00d9
SHA512 3cfb179db8b84ebf2b3651502ea5df2b122e449b44e95abd91a7938179da9983bd71bd190cbad61d193135bfc7b75587edd0f8fc4f0dd8e67a72e34dfc6675af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c56b7fcae16e9b0_0

MD5 32b31185fd632a5276c29061005186d2
SHA1 79f5a1ceba27c8215fc455c5034bdffe72694766
SHA256 108cc4442edad3e934a5e1391125c07376f8e69bc670d1576b96d84925c596bb
SHA512 add909070b87095689ebc8384d2a7aad1305e52d3702920fa3addd7601eea3079d83c77ac65cf67c40e8595d7eb68f8225deb233144016c5a54bf6db062b9a91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\091f81770035338f_0

MD5 ac3ca2bd2a70d5c512b0844b4d9b5b6c
SHA1 3ccb85fe6804351121d49201717d7680b02118e4
SHA256 6239f579faf854833b99d9b92f9089859cbf35115451685f0be9a24754013433
SHA512 1ef41eeb2144892326333de33189a7ab9250fed447bed1dccdc817095c36870ba2806807712fe3364c53bdb111a1dc6693534d773b4007718021ed81d1e30396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\72c09f08b46510fc_0

MD5 687cf5049c0f388350dd78d63283ff7e
SHA1 3a24191f833e8bfeaf555354398ecd001a2bd466
SHA256 100f4f53c17510ce92a198922773563153ccf1ee385606eec457cea3588c4b95
SHA512 0ead578a439dbc428b6acf748ac9d8f3f73874cdf3f2bb458c18361484448a39402d4c950644b8fa5cddc9187300e862c818aa7789566c7d40f6d290679209e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f69a171b9fb5e037_0

MD5 9cfae4f560d255e5034a121d31957145
SHA1 2312d3c6cc2068ad47f7d4867575f0676148ff1c
SHA256 2d4f91c7bb54a5afe599b18cecb0240308598437bc234c0b4e54e0fd041a98ee
SHA512 896ed252a899b4025e64d2f860755a84d015af961fc56c0d137ac3cd1d2b83130fdd187f95527cd31ebee9fdd3c94edc6e5967153bbfd295632c28f79517df74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\277e8df0bde492e8_0

MD5 2ad407bd04b8ecbc423f4d8331fab9e9
SHA1 3a41ddea771e0704d07f0d1637111189ec4827be
SHA256 da75019a4daae982e2cd254f8d03f36f8c460853a7ab68b35b7defb916c7e276
SHA512 dc7ea0a7561ab3c070fadee227cab705b40e80db718e9639b9717ced6c843050f722aa15d405b5970687851eb5fae869935ac2ab46c8b961b862409ef74bb11f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\340bf18b809bec6b_0

MD5 cf72bee171b51339472c03a45465e356
SHA1 af3bc53f509b2e3c3c61d722e4ce7503ed9584e9
SHA256 a2cceeb72d3641ac1bee2b0ec72318148db5868385ba573825a4c46730f34ba8
SHA512 6e579b6814b9ed104da4690a8cbb92854a2e825eba75a4d3bc20e2178c311e8896bd670ce5dda43ce81691d48be9652351ac4a1d61269af1fbb3280c93819f11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\73167c1919ced18e_0

MD5 ad07cf6148bf3a21e8b23138abc40a84
SHA1 55aa3c2a3eaec0011dffedb55c5a5e0e05ea3c73
SHA256 7b60b483789d6f18a40cf8d0cb53351198e4294664b544d3205a10b806189c1f
SHA512 79ed1fe94db0fb75f390f4b10dd19b7f6ff16db05c85094843a99f5ce6db07dc136ae1baf9b7b046e2943df562c94a3143de7869926af389015803890998f749

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a13c80ae925db98a_0

MD5 157e82cf3f3f9fb2bc3e28c367b49d4d
SHA1 91d090495553b072aa086ad34da3e4a601c318de
SHA256 be38fc92c532c9be9df38f7383e91afb4f414739ea7cdc9d15d9c9f485029ea6
SHA512 e32be8190b7c5699785eb2194609ca1d2e1e608eff1e7a627a31382286c3e8b23f6ccfb1c639853f9aaff3198904f6aaab156eb1187320ab98238957b67b0e27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b376b0e247db8dab_0

MD5 c28167f613749ae8503e0539ec7e835d
SHA1 7ffea1f4eb6b4c59e1b26483b7597897317eff33
SHA256 64b05c09a8a156855c7a582834ec0ae89463ccf6d6c8d7980d47f0b0e82eabf1
SHA512 7f508b6f37c5fb74ae9125990c6cc7409d3020cdfc941e35b78e2bd7a72524b81ad04b5ce3e78c9aa3268b1a9b3bbe0327b078dd07c167fa7027a46652c0c5de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\810cdc405ae19c38_0

MD5 c50fba2e02e4efb99fc3cec5626f2154
SHA1 a3fc3dda5e1609f99181400cd5e69fc96210b111
SHA256 d2e0e3c38100c4cebb6fea238cb25ede47951cce55bb2fa05a5dc2edff2e6944
SHA512 57a92dcd7ce46614270ba7f3ce7ec157d381e6078550a6953770b1ab15bf9851a1612abec1d0b4d47b21d9f0f6cd22c96bdf78175c4c9c037fb2beb6d791fd8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0e2a1ede4a368f54_0

MD5 847e34c42e810aa3d3fed76815fbbbe7
SHA1 84181899a91d772b71dc3e9c2b11bac891bbb143
SHA256 3131fa264966a71b00b7da588d401459969c1f75d6eff6c8952555b6383afaf3
SHA512 602850427daad0a6ac6e5ff185a05aec909daa1eb7b32a4b86b8be7776b2a93aa0a17aa3ab994812673a135dc91b9756d77e024421a2b25598480c74eb755b30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\234c4fc6ed156a80_0

MD5 8e2fff1f92138d42ab082a2c99ad7a51
SHA1 61518354d68b968698ea0e894617f2c200bb9e80
SHA256 88d5e03aabd590438589acb0dd24d4ccf5ff409510c6a532028ef4faf015dde6
SHA512 bf8a079cc666847c472c6b4d8d79e886b6742309d84139c8bae1dd5cfaf84ec8170e045d6c2263aa1d76fe9a0c17541c5a156b8fe693f59d97d65201c5c8f0d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6a51937cf2b957f3_0

MD5 deb8a001bf6e79d89233cd40af2ea6c5
SHA1 966da1a21c6914c9db79d18497d60118b26846ae
SHA256 2dd665fcc12946b976798de84938cd1bf28c1513de14937356a0d13207b09bc5
SHA512 7452a105354c4a93f13119f5ba51b8ea0694e33abcc7d9434b4d34276013a5184480b7d94e4f8becb25bd3159d54b0c7eb7599229d26114b4633139e4ab2e2bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\18fd6528eb26590f_0

MD5 f30efbbdd50c7bad4a9435ae180c2920
SHA1 390ae5109370b3e1b5bae071a747e4e8d28d2df0
SHA256 a2842198830b0c952caf420a0f025e06cfee4502efdfa504a30307fd8cf75229
SHA512 53d933c6cda27f05f3559feb0abbdba5f888c38ba24fdbe040d172fd3b0887b8d672eb2443ed87e56e4d25c5e4593f03bcdd3cc9ec73f26d07a5eb89e8497728

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ee7bd3cf83c3b606_0

MD5 aa7f37bf7150e6aeae393103c68657f6
SHA1 54af07a51157c3d7c5f6c844150d10dc967b2c39
SHA256 bf47bfab04861ad357af947f1f7e5924f670b3b128f558ccbae590c4dd54e756
SHA512 0891a7af2bc89fb4b16a2d075027bf1be79bbdcfa75da0b98ae39b90ae9afc5f4dfaae0b615c9b5b4ff0ced8672d9893d773b884ab162abf97bc54b83a64f730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 edea68dd5d049c844b93ddf2a1d0b8cf
SHA1 938cae29b0c7874e8a51f0af173b0ae9c9734b75
SHA256 9148e55829dd2c447b4726c706d52d4d214dcd05a37316937cc92675f950224d
SHA512 fa861cec7f483a957a0bd9e5471802a92bba1715a21c8e7e145ea7fbc5bcf592f3d07ebb422582afae1a395764673d3dd862b3543acde64842bf04cc0ad4b543

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9da4d424c4f93aae_0

MD5 d200093a2d1c158665ead437b695ce2e
SHA1 d65fa7f0e95a85c1136bd7d340f1b0e17a297cfe
SHA256 60fa7c63887ee6b1f2433018710872885df7c1db040b6239b38b9c8d0220ede7
SHA512 13999ee939a8abc5a6059c486785d6e083d3c83163a3e1227dc44d173dc19e2b504c82f0198cf7fb46a0238756778f7f61506b35113eb686edd0de11f3180627

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af8a3fa1aa94636d_0

MD5 6005d2d86e644d52015f4fe8ff585e0b
SHA1 2e3acc54f9caf8aea235f69b9ab8dd55e547c501
SHA256 b089ecd5e7fb291d49540ba26b5e06a24134940952cf6e2f7aec0f7489422e55
SHA512 4d63d80be4743c97412eb7407fbfbd915f28c5a9cd2bbd955f470573a0e759fd74e1ae8866c41dfa084a25a65b1f9942144fc604e858a10582aaffbaab497f6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32642045ddb16c3e_0

MD5 f7b7a415f95680c3b42b849198508c83
SHA1 86623def7f937c96e315f3a29a318c3c1d5cdc59
SHA256 012147937ec01b42e9f435dc6527fd08b84c55879771e47a81a3a3b5c509721d
SHA512 7782e0f30f66c0401bfa1f963f11434b63790ef97e17ee52663c9400d01231b6e6c9e1b258a01dc93a221bd956db5d19449e351b6c1060dc8c34f9e8f17dcaa1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5ce747e164bcd93e_0

MD5 ea61e80ada9ae08f453a36b60182b0f3
SHA1 a3ba8b842185b775f52e785580a316f6ddcaa4b7
SHA256 ff0fe34f09b458d8b4b11aaacbc48470cf531cfc024ba6a7f5f380b7b0fcc312
SHA512 7326eec7f06f9f14f7cc625e37b3f4752ab2d7306d4e0ce599d23101d925860be8c5c9137208990c610de086bc8005b547baeaa9ae49f5a03ae695b20601f81c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2a5355c66ca4f2f_0

MD5 8794fad30ab739fe82f67544cde0d1e8
SHA1 34c0d7a016c79bbee513bc44539fa1091a9cd9da
SHA256 1b0a24b09aacf94241404884f04756aa7688d07851f0faeb49da34374a3409b5
SHA512 262100f9dfc1b5f7fbb010be94d26174ff1ce73319c77b5a9a1612bc2a6dabaeb26c175e72ad6e5e79a3c6273ac6724752ca111e01ea2649e77d50e400542bc1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\540ab0056ece4dfa_0

MD5 1847b12e72d74c758c2aa53aba220bf1
SHA1 3f2bbeaf0830fe8cfb1410ddcc06b38273ae67ab
SHA256 62795f833256f27bdbe3187b427a4a29461ccd7521e551e844266e8ceddf47bf
SHA512 b5436c099eb0b3b9a3b15e1138fd1685e80203efdfbf7a7f5246e1a227513f67845ee4422645939e73c16a42c792eab7152d7964f8730cbf63c3ccdbf68c4dee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7f0579c555fa84e_0

MD5 7ed65a04bd525c6d7c07692c7dde66c9
SHA1 c8190dfe590eb67550c17c40b31d82afcf3bba0f
SHA256 a338a3f6915bea0b69b68137e665e1e36aabb7f997c358de63be663eb06d28d4
SHA512 a7642d780168cff14d0155c954aa7c978c9cae816900f0c8548d193992f4722f5931eed3341a38cdfa0ac3194be76bed5c8f42e695b2871e34adee782dea2778

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4cc5fbf41b2f210a_0

MD5 d9cb8b9b0c647c90db5db60b8eeb9d3e
SHA1 4aa87c4ca959dfb375c2374ac595bafecc6a27bb
SHA256 4f793e0d3cac50723d6f472141dab8e0f79b5730a072da29c06e8ed838a307c4
SHA512 2f1d928df3a780f68857623e085821bb3a4d8da6936ecbcc91c157c569f5866c13216350ba31be0535a28b525a455412c7f844edf29448536a7c4a6a4bdb65f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\24c77008d747ae2e_0

MD5 f1e12d86d2d12c1f5cdafad1e3bc6997
SHA1 947b5e108f62a9334745854f66d320e2bbdc0f83
SHA256 2b0a4918bde1455fb4df9352f900ca9eded6fa52f178c06178b5632d79bb6a11
SHA512 75d7037434e0cf6fbcbf73253d17f4991d81d968476e6ac0f8478155a86c5f29ae1026a52f048fcec9befe29b5ede6fcfd8f4ae75f8f1e2651f97e0e66b345f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed3628b806f9935d_0

MD5 a9a590b09f54cef4e1b2e2bff53f047d
SHA1 479135214cc8a56c57dcb83057c16808b9d79bd7
SHA256 7b2ceee9a3c70632cca4d185b8075441fce8720289de4620daf20c938c4869d6
SHA512 3758828538fd69af6ff8f8f7b949a4dea65a589a2ecd317237f92eb04848bb9ef0542734068482f439d9e5fa36e8ac9449790d46a38718fbe2d6d69f1fcfa905

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c03a041d169b216_0

MD5 f861901841ef91d2e13594e6daf58ebc
SHA1 bd4f4851c1ced621430a5a377230a75d8df5ec6b
SHA256 de1b874b5bca1e4d90e779df8a1d39a5e1c5acd486dfb111e8d933defd667205
SHA512 e1ff97e034bbb46fde114b9098dfb912a18ca309f40816bf0df3de24aeaa85a8acc4e1cac1b8c7c5ec3af3abe00f851c288f4578e25558bf65b8d92ba758b4d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42972c2f44d1cd1b_0

MD5 fe26ba65f442e5626c6ad9d8faab1b8d
SHA1 8a0b2bb97a47251d21cf910e9655734078337b18
SHA256 0f5d730173e3dcd3e37ece14e2a5e062553626e5e41ce915a1334c3bd3cb36ed
SHA512 cbcc260fe5b475f91608ec95fe99f9521bfaa31cb8c90d6680077d15823e4b783f9b29c9f11f7282d8173de06daa44389b014c45755bf4fd04feaa7ea729eb31

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a75d8545da935953_0

MD5 e74e0884319169baa81942ba6146ca11
SHA1 9372da5df0201eb958aeff7057016516ea7365bd
SHA256 af1841d5745253d63c3b3737f9d52a8cc0bf19f0bc1bf05c941d7e8307974a2f
SHA512 1dfc1d9532b87fa5f1326ab55af5eec388b5d3e0ce34307ced2a91a11b2a9c2b042f520f4445e66c028936f7d3840878d370a0363919515bcc55f258e5b2959e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0a1ea0edbb75dba7_0

MD5 f8db6424a731aaea8023506e0a255294
SHA1 3b319cf44e7e13a908c993f0f17e286796d0f9f7
SHA256 286b4205d0446a3673b9c3840c0a80864f8399b4dd7e069eafbf3d5dd9900f5e
SHA512 7571f01f275fdd7f2d710879a3004dd1eb4b8794f7e820f278b290dd2222d91a16b18a8b7da78066f3ab1442c458c2627c63084ef43269706e0844c4a785dcc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c550341ab07095b1_0

MD5 d734f5638c978211690f92772775dba2
SHA1 9d3f11b3d6a9d1228087a53def72c95896c131bf
SHA256 7ae7579314d7ed5afe0961e14f19b969a0f2822df2a4ea00f8e980cbcb5a8833
SHA512 f2f63c132439ae896a8bbc8efca7e711501dbf6b6f7f834add170d5ada725d14f97ebdb948b73591732f8d2daa0e1952cb8208031f443d7a9a45865a30945bc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4675c4d45680a9dc_0

MD5 9672087799c4d6c2072885363aa3dc07
SHA1 e91d6a0d78c2c2d6ce8e65d76fbaed9f50dc5a26
SHA256 1a78865c16d422a9a8d86e494f3a2ecfd331cbd710d44570724f70650aaf2a85
SHA512 749d859c78b80d467667d72df51d722ff3afa60e87b16e1e64898a54c35cd6e97d402793a323b6662516de41627b78e4f1bbadb03da372887e11864a0854c1ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4d0884c7ef760aab_0

MD5 8f6f8b15eb6181991f780f9314bf2bde
SHA1 fc61cf4b4c7ead1100dac69aba532c49d81da109
SHA256 a39d7e9268a06a7c202768dec910be06a2dacfc40e2dc4e5327a91b70283358b
SHA512 69726353879e953094985fe3b60a45bd41341f71126c8879917479f98e1e41ef4c484d58a51d9cc7f3ea3b5d8a95c6c7c6802898b40d9c812779ff5b74768695

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\feb765cdc0e4e60d_0

MD5 28b1583d0e11672a8606b7cd3aef8d96
SHA1 ffce54da06ca3f4b04eca013691b82d3c190f92e
SHA256 463509703bb1c2248b030af01feaeef463a5849d8826d10ddfe96c21298cc37e
SHA512 30561bcdd8210a1a4187b3d792de9c1338430c9df1552b0e87beda2bd5a96e6624b47090d0784cfc56be4ba68501835afb1b665f27d2b7c962dfca473290d4df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b73022bfc04d8b7a_0

MD5 b6d9996a02c2835fc9075d0cad1d64d1
SHA1 50acc82f292cc8cf59275b5048ce1eeadcc1c412
SHA256 27bd6f4cbb94c9878cf1038720af05a680cb10454b4a9b4d6017060bcc33532c
SHA512 1759e52d7c35bd4c0a01794c814ba1077b05f70d66fd344823dd2b476e16bceaead272e07d812f73d0f3e926ef95242807296c4a4a40e732556724a999bd77a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca3e39c741c02d8d_0

MD5 327be326c9b84f995d3ca14f4306c5b1
SHA1 137aeffea4d2510299d014eaa1fa3022671620ef
SHA256 0f2497855f95fae9e61d972ec0acd4a3e0f0217f870a4f99ac23fa0e51262aff
SHA512 2cf444c967ec36da69e5d59c369a186eac6ba21b085a68a60237d77b4debd36648b44faf25f2a81b74fdf962fe7508f8753f80a3f3a8d8e2a2804cfcf7d566ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8d971fbebde6a45c_0

MD5 45a0ec3779e7831477cfa2f3d90a2188
SHA1 8826e28790f3ab8ba6f6cd3fafa85e574039357f
SHA256 a11b82775a7b3c6f1ad64c9f45c14e2fff4f648c6524ff137a6e3982fc24ed5f
SHA512 f7dbb7e3a7dbd71c4276ca3fedfbabb46c16835dba7fd37731b12da9157336741ad1bc0a350edeaba7826a61cb3971433ef256d508c90d84bf14a61c5bc8259f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2f246627251b38c_0

MD5 430afc3ee69ce10e93bd0d78b0ccc215
SHA1 3196ccc8c3e57eba879cdf141966be500d35b565
SHA256 d7c70b33c189db00506dbb3efb16bbccb2d81bede3221bb70d7c9995df886c04
SHA512 d439ab4bf63df9723171feb524d7a653f57d186f9300d8cc5094b558c87209e783d75595298937b3b6d6fd9859b9907d6c4fa128bb57f48df9b4134c23d2ef77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\88fb4cbecb238fae_0

MD5 ba73876074bbd86c9e712237d2bd5e63
SHA1 400266e91d7cb3726b8eac53d246e0e38b12a18a
SHA256 f7571b0b33edb48f912579ebcc4f7588fe4ab8c42975e29e165d84015af310e0
SHA512 03e335239fe17b9eae1d70e5aa2d7b12952f27bff5ca1a656530ba524f38dd9c170649424278ecd8d5a900f448eb15482f7fe424010333a1a287ccbd929acb49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a7

MD5 6b3522eeaa2b864726fc232e142493b8
SHA1 b9d773cbc4bf0abd2f795f3f8bd100bd9b0eae49
SHA256 3395ea808ef51017409499f8042bf2367f31e8376a8aa4009dc516e62248cc99
SHA512 c3e4ac9f26eda5c2ef008f654a35a4ad9d676d994b66c7b06868cba6cbd9f725082a728957c47b8f2c753b3f9d31fe2c4baa8b9933f7a78c04f9f10fd52cb525

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40ecaedc62753ef6_0

MD5 72bcac19c4185029a39f44ef47974a5e
SHA1 08d7ec2d141a33fae55d9edb25e1a05091f9613e
SHA256 5f161997791c4a3a6533ec132fe842f2ea6f8f09fbf60c5a69b476dd887fb2e2
SHA512 9221d8007261ccf17252cd27610c62f1e9063249fd988516424bacabf7d535bd5d961a04391e5967790fee6b88eca7bb6c5c9810d202b3912e8a60a6df754c7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1db4594ca922897f_0

MD5 b90f98006cc578ebfb785a4630642882
SHA1 322608745d34d26e37dd90ae5d4266110b3273a3
SHA256 dae92c9f47690420882bd433f3c9f06d5342972efb37e3151bf020949bc6a06c
SHA512 aacbf1944d221dc46ff1ecfeea74bdb252c2dbc6add847ebe2693257aefdde748c08a4b1202c8f0c965e93e9fa38c785a28b8a90f61dbdb6bdba275f8bd2ab39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\077cb9f5612c32e9_0

MD5 a628e00340cafc8666210c4eadb42de5
SHA1 714af6be6ac13b797d43fdd14f84073a369b2f75
SHA256 1f05159c5d0c32e1e01a2f872e8b1d0af5aacb3c91551d76201d4316dc845315
SHA512 5ad1e93388ecfa1bce2974c9c8546f2d18c24fab9074c411794280f708c5ba42993eaacac4efa659c2e9fc529f969c2dd134ff1b5b6ed3a5e19657477ea19ded

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d20e279eb5613e90_0

MD5 6a64ed402272211b4a8bc67862d03679
SHA1 ffe0d6727ae34be0022cbf6dbd674d37e67fad79
SHA256 1c63fd4f5991e7ee8ce06abbc26d267fc24b9475b9b062d19d0f5aac090327a6
SHA512 c85270c33e08f15654c8367f319105faf15f173b810a7abb5edfaa1ceffe7f0b225ea88e1e77a9b89f3cad612bc128ef8c3e0422cddfd00cb8ff9b9b202237b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8db5c3720cf12fd_0

MD5 8ee296f8487fc031a99154593d2893a5
SHA1 65d1b6796018cf3f0e40a5756317423acf4d25b6
SHA256 e9391498f0618e48be41bcb959b727c035cc0fe9ec772398728a58ed30096015
SHA512 30f63b1a8dc0e88e7603055ac9d2869d783dad16cd2748af70ec5e4907d4f47c198908cacf446665ed47f59f9b69b522b1f7d3fdc6a0a6dcd860262a1b3b505b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5018b8549c349a34_0

MD5 e206789ac73f13eccc22b80f65b0fb6c
SHA1 7577beb014b98a43fa121ed8293e95cdf14414f9
SHA256 d0f998f791c54a7dd0f0cde6e45ad6d8adbd1508e8f23cf1a8454bc82ad26370
SHA512 c0a2be32b333f69b6935aa54793b364165cf19035a5bfcdd894f5e0d7064bb2f77cbd86841bc23f45fe7de0702f1e963d18c97863e1da942e6aade51b4f15a54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\054b3edf923b000d_0

MD5 8669abb69b555f4aa1f4399ced2a7759
SHA1 2c5f1f387d1ff8b9657443c267da2fd04881d50e
SHA256 18b91876530b4b039193461c99812d99f5ba080a35231db6e385cd4edb596317
SHA512 2a99994bbf7f4c8d32653132d89fab3a54184015d26d58c450e8124ecb5cc693b60763747ab487bb48c88b5cc7d77c0c5ce2abb9191665c1f342c73cd9461cfd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aea07d18baee851_0

MD5 d5b27cadff1652c0dc5b138b7c2c44fa
SHA1 b872920b851e7b222e5807aa8c0e41ea4e4c1bbb
SHA256 8ff1a61d35c40b4cf841923075b991a6654e5650bb06e266dc526d4d3b5e917c
SHA512 26fc272fc6993b9c8732eeb896d7ed8d687694d5ff0f99668f78643effc4a289ab8289fe681c446267a847bb9ae7785ec32724e03fea8ab4eeaeca6f69c6b2f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f14d2866807fd64e_0

MD5 076c898dacbd89afdc1d1b897339bbcf
SHA1 f82f055beae361dd8922cc0172cde54fffd5d10a
SHA256 fd773aaacc7c27539f36e4b6f7defc7495848b09d2161e6ec3e1bf2f677b5744
SHA512 ad862e8363dbc9dc03e38ce5e45fedcc9aa01668d3d696837a43473a01ba71e6a8b3011b425ae427aa7e1892efc47e24ae67614888576551b49bcbba2612501d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000086

MD5 75a2cbe7ceb78b30b03db9f169ed3732
SHA1 f5c455aea57ca5620146d866866743f0aec636b5
SHA256 715b89e04a05226fedafb49d4b51782a8555c6bcc50d3e7b10b0ae944fedc13c
SHA512 2f0a2f04d122f223a9c599935913682c8eb2009ad52b8ee36de8915b41336739757f66f20c39f7e1a29e95dfb77c2b37fe35615ce411f775b1f92f9b9186e536

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9d3b300483151043fa044355afa56613
SHA1 61c50acc48875e0fc4952105a4161c6ee9487253
SHA256 665ae2b2f991544982835a4db876116555950ab3efc70fd7969f04e2249260d2
SHA512 b5adddb2fff8ccee35ebf63f2828b37f44aa7c29f0302b1917e77bf44e8535cebf1e33a593479fd555dca6880deb995e30ddcc908b0f41960a93444a081c5593

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d29a565f9ddc2a685aa8788b5effddc8
SHA1 5ba4ada0822d99f7edfea435e8c21fe3b6f5128a
SHA256 0dc0bf979088d73cdfd9fd4eb76377e89e45465577872425482a70fe4abcc0ac
SHA512 dacc56d89ba85c1a6aa99b605916fe57c3844dc9ecb83f0eeaafbae3a6cacb81a110eaa22e7c6f4c4b7fdeb770203a5d92d4578ac33ede457bf6e97c15627e41

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000093

MD5 744b46636598e784b9f4b4affa55c691
SHA1 facc23b988335b6f288cb55c026e68621d93c2c0
SHA256 42abc6508cf93b53a9efdd90e7e6a23da2a00980a6e7244b9073b3e350d0280e
SHA512 23694f1ad294c373db2c956ebd2f1e348f33ba5e2680f0d7b596998a264b44f7e974096e18262880fa8afa1273981f45f040c5c19908435be42253cb3c7d3bc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009b

MD5 c711ca2b628926b9e2ce16fbc97cc176
SHA1 55b80c157eb21b7cf5f434998928a9c0db8a0579
SHA256 b01838efd9948f89ba1bf4baad82e6e0f81ac6bc5cfbfbaf09fa41b3f7b8ba8a
SHA512 09aa3303fbe7235bc963b7ecf9893ce371e0cce351216d90ff854707f9466996c08433dae0780ffb0378296d4fc8e24477dc12f12dfc30c2b9e134e814d7a8af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009f

MD5 5aeb3890e1a5f612cefcc9928d3557f3
SHA1 a3876b96d829ed13d07ff784682a85027644287b
SHA256 13f0c33cfdfde899749d95fa7d3c427bb94b9ebfd5362c8eb2446c466d63afdd
SHA512 b67642538ebc7c01f03226c67db9687698cec19079cacd5493aab833e1a08496f31293178b1cca62a27aadf01ccfd4a971078a28d83dc4dbf3c41b828b342f25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009e

MD5 cb052ad4197e4e730caebbb6cb4342e4
SHA1 62d956a8f77971053067e5bf0d26537895fec054
SHA256 e527c94275f62981966a0de91c6281c1391315fd4fff20395d6a7b1584c89068
SHA512 edae36677e2970155f1cf86d1a496c8fe5387e8fecb488339f223f99804e10478417712ded73a0accc5511d2508dc88f8e2aa1b2862af876620d650fd2e64846

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009c

MD5 026c8bd125881085d1a29a487a63c5e2
SHA1 33c92ad07eb34fbd2a6e7bce6c74506260fd96b4
SHA256 4ae538717167a33ac09e5888d5b0112469885f6c8528ec8f7afde3f7f4518227
SHA512 f46abeb6a38e59323d154f28fc09ff193c678e4cabdb392959d192aeac134de06adc24d14e6e3cce0e39292b5967dbe5346cc9d4778847c601b6fbc4382afd75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e4

MD5 52e38a68c05fe254f215c8215a7d6a2f
SHA1 00f64d78de2374c3c246b87da2a92626ea71f44a
SHA256 bde3bdf4a0eef56f3c96123f5641a3d4805ec28693874ef68047c11113653857
SHA512 03ffbac5e58901e04cc54b8617e71e59f42db13755190ffc53a4cc50cefe8a74109f675244e3642df5c61278fd6afe075d1adcec50e3ec5b98a29df8cf7b871a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f5

MD5 875ce85899f42e9ec6eb746e12941a36
SHA1 3dea50b88956403abfe2d825f0b11a477aeacb0b
SHA256 be47b0de34a09bb926b752ab9162f31a6a26e8bba6501914e529414f01bb6644
SHA512 735296642c7cd1687d87c8e5e8397a5d4fb28f4ebf06c66cd19fcc25afc706e6ec14bc663595c0cb34d44ca565daa9abb2a5a41a6a6f89fc4249a0704357e586

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ea9e12af41e4a17ac41a1b58d2563415
SHA1 678ca1a7d225e95a2b27707e951a4bbc2002dee2
SHA256 ddbf19bac809c45d5ef6de839c18996b4c343dae9625370a6952536246813d1c
SHA512 a5fa141b8bcce92071f4fb8e9f0a81d824b1515b9c26ffd1063b6fd8f5822e177122e5e78ce7dd65df0580413989b3346badc95544b4ba842300308db81dd3d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4dc4bc3adeb2f1b26bb264f7dd949ac7
SHA1 4209996553e9e09b206ecf4a3dd4979fd3bbca48
SHA256 bb741fe2b1ff713c730df8f727f3c05aa57d2f635614e6659bc9df17ba1ec1a3
SHA512 e370027ebeb92587361a42206ac72deb8e23bcadae28a87f02b21f2872c74e701032028b6f9a59e524213ad5fac4f42c76721b3f9f8d8e51dba34011cdddff06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f0

MD5 4418bd1dbea205cff348482533bb9070
SHA1 e842bb6fbea2c099c57f839f0e729dbb926003b9
SHA256 1d5bd403953287433c1c28681d3664a51f4c034b2b879ae8b2e5273977e924ab
SHA512 b4369cbcc55323641722114a1eebafb8140fa1819e88c864a08f64f6c8e83517af2b323f4db3d1fc36514572585e0beafeb71460379797e868128419a4b77815

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e03eee007fcee779266317222dc77504
SHA1 4a8d1e048d764ab5bf2747d51e5f0b2aaca02754
SHA256 7273143b3e4f19e1193b25cc573293c4fa0a672f57cc244c46d9e82ba63b1fae
SHA512 9c8205d95d06cf94da0ddd933734f73622e2abf6f836bee7f8f94eff11cb2a7468dc96081e50eefb6d7f8300647fc1b81c9f19b09161114bea6f2deb662f2d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 07dc566d56673aa3319415d9557dcee9
SHA1 4e413e9f542bb0e7c5896ede68202ec328f5c0c0
SHA256 a13db49fee6db7661a14f767da0f3fb61d5753e98e6562037c3ff99cb16e8bf7
SHA512 62194d3f720531e2029388bc8ae8bbe4357fea0c0c9211b8168cd2ba59072263e85ce6383d9d64d48fda2760e1b47984ca32bf031c7ca33b33196c5f22b66ac8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 59697dc712ec20a66cf0b06e108ee86c
SHA1 ce948c5a9c981aa68b1dca15dec4cc2144f2f568
SHA256 09615ed34e2dd435fdd17ae295756eba635c7139e25935f2f251c37732c082e7
SHA512 cc37ce5426c5eafc33fe89fe23a30abd512a773b9c783013b8730f258e4dfce978adf6c06d6744bc16b6ade4be5f35fe3f6f06b7b9a6578f2a17a1b298bd5e5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c47c047f2da69a0e7bc14963de18df50
SHA1 7035b5fa985fa1773abec72fb4f3c780ba678118
SHA256 9c5374c006abd32161432dee8192e9afff8795e412979449c62e0c92050713a3
SHA512 982ab718b5e4cb56f1caf5a2697cda15ba551fd19a9b913ef2aa75fce6cb26422a9d3742e82b2f77d68da4db5d99a6220850ae5b698839d5572ec4a2269b312d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 245547d6d18de4a3837102040e3ff5c2
SHA1 cdb983e26901a80a743331d5e48a45017c3559d7
SHA256 535323b72aff49d42ef950cc264b02fdccbe13186783767fbc9e8713f7a8b53d
SHA512 62116befe86004b816b821527586549a7e835112dfc97750013e2d3151b4a4fa0ac36fc44d52cbd650a329d6f37ab961a7056481144eaf1f5c7331011f0c6caa