Malware Analysis Report

2024-11-16 15:45

Sample ID 241106-waqsxsvbna
Target http://www.google.com
Tags
aspackv2 google discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file http://www.google.com was found to be: Known bad.

Malicious Activity Summary

aspackv2 google discovery phishing

Detected google phishing page

Downloads MZ/PE file

Executes dropped EXE

ASPack v2.12-2.42

Legitimate hosting services abused for malware hosting/C2

System Location Discovery: System Language Discovery

Browser Information Discovery

Enumerates system info in registry

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: GetForegroundWindowSpam

Modifies registry class

NTFS ADS

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-06 17:43

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-06 17:43

Reported

2024-11-06 18:13

Platform

win10v2004-20241007-en

Max time kernel

1798s

Max time network

1802s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://www.google.com

Signatures

Detected google phishing page

phishing google

Downloads MZ/PE file

ASPack v2.12-2.42

aspackv2
Description Indicator Process Target
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\ScreenScrew.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\ScreenScrew.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Directory\ShellEx\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AutorunsDisabled C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\ShellEx C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\AutorunsDisabled C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\ShellEx C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\AutorunsDisabled\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AutorunsDisabled C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\*\ShellEx\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\AutorunsDisabled C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Folder\ShellEx\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\* C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\ShellEx C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Directory\ShellEx\DragDropHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AutorunsDisabled\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 353041.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A
N/A N/A C:\Users\Admin\Downloads\Autoruns\Autoruns.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3648 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 3928 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4148 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4540 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4540 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3648 wrote to memory of 4984 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://www.google.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffff6e146f8,0x7ffff6e14708,0x7ffff6e14718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2516 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5836 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5356 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6692 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 /prefetch:8

C:\Users\Admin\Downloads\ScreenScrew.exe

"C:\Users\Admin\Downloads\ScreenScrew.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,11613143151773211223,11815148214425296505,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6904 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\Autoruns\Autoruns.exe

"C:\Users\Admin\Downloads\Autoruns\Autoruns.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:80 www.google.com tcp
GB 142.250.180.4:80 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.201.110:443 apis.google.com tcp
GB 216.58.212.202:443 ogads-pa.googleapis.com tcp
GB 216.58.212.202:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
GB 92.123.128.178:443 www.bing.com tcp
US 8.8.8.8:53 178.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.172:443 th.bing.com tcp
GB 92.123.128.144:443 r.bing.com tcp
GB 92.123.128.144:443 r.bing.com tcp
GB 92.123.128.172:443 th.bing.com tcp
US 8.8.8.8:53 172.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 144.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.136:443 login.microsoftonline.com tcp
US 8.8.8.8:53 136.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 77.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.109.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.109.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 154.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.22:443 collector.github.com tcp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.128.136:443 r.bing.com tcp
US 8.8.8.8:53 136.128.123.92.in-addr.arpa udp
US 8.8.8.8:53 classroom.google.com udp
GB 172.217.169.14:443 classroom.google.com tcp
GB 172.217.169.14:443 classroom.google.com tcp
GB 142.250.180.4:443 www.google.com udp
GB 172.217.169.14:443 classroom.google.com udp
US 8.8.8.8:53 14.169.217.172.in-addr.arpa udp
GB 92.123.128.136:443 r.bing.com tcp
US 8.8.8.8:53 learn.microsoft.com udp
US 23.192.22.89:443 learn.microsoft.com tcp
US 23.192.22.89:443 learn.microsoft.com tcp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 13.107.246.65:443 js.monitor.azure.com tcp
US 13.107.246.65:443 js.monitor.azure.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 23.192.22.93:443 www.microsoft.com tcp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 web.vortex.data.microsoft.com udp
US 8.8.8.8:53 assets.onestore.ms udp
US 13.107.246.65:443 mem.gfx.ms tcp
GB 184.87.176.59:443 assets.onestore.ms tcp
US 8.8.8.8:53 microsoftwindows.112.2o7.net udp
IE 66.235.152.221:443 microsoftwindows.112.2o7.net tcp
US 8.8.8.8:53 89.22.192.23.in-addr.arpa udp
US 8.8.8.8:53 65.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 93.22.192.23.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 20.44.10.122:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 59.176.87.184.in-addr.arpa udp
US 8.8.8.8:53 153.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 221.152.235.66.in-addr.arpa udp
US 8.8.8.8:53 prod-video-cms-rt-microsoft-com.akamaized.net udp
GB 2.19.117.148:443 prod-video-cms-rt-microsoft-com.akamaized.net tcp
US 20.44.10.122:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 148.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 122.10.44.20.in-addr.arpa udp
US 8.8.8.8:53 eus-streaming-video-rt-microsoft-com.akamaized.net udp
GB 2.19.117.135:443 eus-streaming-video-rt-microsoft-com.akamaized.net tcp
GB 2.19.117.135:443 eus-streaming-video-rt-microsoft-com.akamaized.net udp
US 8.8.8.8:53 135.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 20.42.73.27:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 learn.microsoft.com udp
US 8.8.8.8:53 download.sysinternals.com udp
US 152.199.19.160:443 download.sysinternals.com tcp
US 152.199.19.160:443 download.sysinternals.com tcp
US 8.8.8.8:53 160.19.199.152.in-addr.arpa udp
US 8.8.8.8:53 215.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 ocsp.trust-provider.com udp
US 104.18.38.233:80 ocsp.trust-provider.com tcp
US 8.8.8.8:53 crl.trust-provider.com udp
US 172.64.149.23:80 crl.trust-provider.com tcp
US 8.8.8.8:53 www.intel.com udp
GB 23.194.11.2:80 www.intel.com tcp
US 8.8.8.8:53 certificates.intel.com udp
GB 2.19.117.76:80 certificates.intel.com tcp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 2.11.194.23.in-addr.arpa udp
US 8.8.8.8:53 76.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 52.168.117.171:443 browser.events.data.microsoft.com tcp
US 52.168.117.171:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 171.117.168.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 7de1bbdc1f9cf1a58ae1de4951ce8cb9
SHA1 010da169e15457c25bd80ef02d76a940c1210301
SHA256 6e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e
SHA512 e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c

\??\pipe\LOCAL\crashpad_3648_VEUOCXAWYYCWVPWF

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 85ba073d7015b6ce7da19235a275f6da
SHA1 a23c8c2125e45a0788bac14423ae1f3eab92cf00
SHA256 5ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617
SHA512 eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cc8b6c351fdb28fdef683046d29c8bc7
SHA1 5688241dda5f4ea6d7d5f5aefd74aeb75937d975
SHA256 3c56690b85ce5d31bfb1e79827bdd09f251f1f0dd3092959a0190d84d13f779c
SHA512 f65ed494411d57f854a95cc5fc15e16be9ee4131327a5059e77116f7786368d7a45c129b65d6a726d43eac2ea2aca3c586ec0ff27c36211f1ef17fd4a62799e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3ffae7f2c3f94a690618e982348d9b44
SHA1 0b6dd4c033459d21c7c778cc9c647eea0271ac19
SHA256 009c88b75bafb2310999d99f819dc4ef4106cc938369ef16f4ffed28cd86b6eb
SHA512 8d3a9d76cba6654244a899646cff133da0661bd65779b7340817095d16e96fc9dd7a94389b44679ebbecafa772b32d318982e52eaf9a180fa38c2174b69f83c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 35ccdd44751507313a761354959d6cbe
SHA1 4e7aeb949a947df0672c87f8b012521f4df89728
SHA256 52aba06ca33049895117d17754550b5ab962d6c53a6f964cfec5d4ae2dd5a64e
SHA512 36377f3c1e6ba2322464942289845bff5109e1d52de83a06bec6d630cd46c2773b22b8f5bb608175e60a202246c381bd6c52c2cfe7cd1ae2f093203ea7732a53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec308eff688586c3b6dad3a3cc4450e0
SHA1 26e61408126828e3f89c8706c69444dfc1f5531a
SHA256 a1e181ca7c9dd531f05a1c85276684f42e6ea5b61116328fc4db0ee82a8bd44b
SHA512 e8397bd7c70d4e1cef442fa3641520eeac3d340b88d6709420ce4e3f785af1b2d4a7c2f773fda639a0ccf90b0b150b2abea11fa824f2b25e6db55aca96d1c2a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 70778939d63855157f8500a80c61f0cf
SHA1 314263f2241e36703a6b06ead1dcd493cf5f8ede
SHA256 9f1af505d8408a08bf3afb54b7a45f84b52c7ba850b127ae813dfbf7f5c70e69
SHA512 aae6ed7a20c0f7b431306db7e003f3adbe7aa6fd3b0265cf9e3e6cbe6bab4977e938b62710b9dff82304e159bc78e02a230a707a63dc5fb7433eb306c86549bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5bcaa949417767f18f86e6383da95137
SHA1 c56e7bf30049ab282bd452fc833f5a75be7fa71c
SHA256 f7fb15a6667ebff153198fdc0245b24b66898350c827aa49ba2343b6c00859b5
SHA512 5a1644abb86110b773a5b183b4e0bde5db44a4f80301368e7ba180200c842f1592832ed437b3e78e7b95a20b09e6c4129ce6c1c07f5355d578b3f8c971414f39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4dc1e1b29c28d95a857f4ffc7705bbc7
SHA1 aab9cdccb29c78036abc9a380cd0eed9eb8bbccc
SHA256 a7e892c6c65bf5f9a67d482b6dd228e2994336d1fb0797e0cd377d030ba30480
SHA512 a0624f21f67ea454490f7e087ce6c73726972dd2c4d1cde87e6c25547b6263992f1efedfdeadfa692a422f3ff50ca635474723be32c37d4e1addcf52ff965f2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58605b.TMP

MD5 007c0f7e286fb065913ed66727212c66
SHA1 6b62727d1f4a939c03aa007ccc73451b0baebdb2
SHA256 25ec1e34e5f704f2b88c672eb3e2b04bc47c4a964e42fa262d8f31d54e4600cc
SHA512 b8f553dcd78a48d93ab3b0a339000c611841c860f7fb11235ee78cc129937eec19c184a05a7da2f0b5689052a0cb4e2d96abc9f5cbf0d567086f49900e862554

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 369be8ac66f3242d9fa65e4f2e94ddd6
SHA1 1d06dc5b18d5cc20f4a49f155f6cefb5f5c786d4
SHA256 fe31fdcea0033cf5367da178b9b9fd17803c17e58a5f830f198d0df12e3d6880
SHA512 4ae080a2728eb9e294456c31ab3724e4816ca4ecbb449c83a22c811c1f1627c4f9038787e73ad9f60a85741d8a1a90f8bd20c2e9096e5336cacd6fddfc56a241

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c08f2fa09f48d1f0c814075bc3280e94
SHA1 1215d00f711f272bb38409bfd2b25223978c273c
SHA256 ead18770ace0b9d789dfc12788d7857762b7ac59712db76c44d2f934bfdb9d44
SHA512 582f851369a5eba849d861f9f43da439c01797138aca76ac71c1e1afc7896c00179e342b30cd7f5f7d6afe6c9b2c97f9593082a8f90b295379f2d0a74a2f23cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6c16b335fc668b065cee480286b5fd0d
SHA1 c778ad970c7e31bf64937fa2045baa8af569ec3d
SHA256 c2dc6ad3e5dbb89f007df0dadccd631dcc2e1f1b1ab538beb0f4dc7c99afa757
SHA512 b795e943964452fa2e763c55858b1199920fbff9a5533ed72293faad7b1548b172b427db41aab57d918de34bb74725ae8c55f7801376da2b2829878cb89685c3

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 cccb63c35a3592c6666c9b7d8cc442fd
SHA1 2e8e177e798ac4864fa50fcc19eceb3a5827f948
SHA256 2a3958ec47258d7f42d52288bd32449c59d23358f6b1565daedb99e7e04f7b1b
SHA512 7dd4889c97194e8aa832b22605eabec8535d50822b352b8950ab022c9738a61874d7c2f00b8fab08c99bf6eb21919d65af75b50e74d2d4d728ff2c3f3461ede5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 81744514e8188101fc08b8a5b03d6407
SHA1 c3f1abec16b4af27cd0c5478820bcd7bd4c5431b
SHA256 4c4aed582fb1b4554e211d2b32491fe9c95a13880abadeca6fe45063cb414e8d
SHA512 93fe68d5e1a5764186f5f582cdd7e729b515db57eef4a4f695f6b1fa9306faff6f5a5b74081e5672559a9ffd808a2b89cec0ac995d4e80b6b8f459e3bfb25472

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\177e8c16-5334-4421-b97f-f1c70348d48d.tmp

MD5 6da742d6729bafc1c514303d3d57da40
SHA1 68b84ef1581d53e57733b1aed598c832816fd9ec
SHA256 aa4988b3c73dc95a2429453bfeee379311c0136896453f8b18c41343898e3b84
SHA512 8be6308a558f70eee559f15ef3f3d13c01d127b0b54535e8c1e846c2637713e10eecaf93dae31042740382b3e12ff58958390ac3113d8c7731f85493b7cb43f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 807dda2eb77b3df60f0d790fb1e4365e
SHA1 e313de651b857963c9ab70154b0074edb0335ef4
SHA256 75677b9722d58a0a288f7931cec8127fd786512bd49bfba9d7dcc0b8ef2780fc
SHA512 36578c5aedf03f9a622f3ff0fdc296aa1c2d3074aaea215749b04129e9193c4c941c8a07e2dbbf2f64314b59babb7e58dfced2286d157f240253641c018b8eda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cd5b9543b7b5f73a7856d225d9d672da
SHA1 17c2d4dceaf2bb05f3c4bbfe04cedcd498063b55
SHA256 26405f9ccbcbfe224f0f55b102bc7d84e2bbdf29eafd5acb7ce4efcfaeed6bca
SHA512 8d126bb7c3883ed46b18e50f4a79a4b23e336e547319b03245ec48d06f23459626298427880cbfefd28b095235180303c1662f94c95b690c8fa1573ad20da36e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8b752c8524633e2912f57d96c5418b7d
SHA1 e3c805846ca8657a609a78694d4ede66f856b99b
SHA256 b6333fe870f3ae2d2451a6d7f1bb3134b81be638916911deafbe833c238121be
SHA512 83e46533c118274350bf6a0318f0e0daba43ae4bee3e3d6ec1bf774ab120cdcd700f13909d7ae068231945b32416b3fe0086065e2e322562981c038a07e939f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 affb2c80d97fed4764776308e1451418
SHA1 ae2d5b03b4beaa5c6f1f44ea0c66e04d6b911401
SHA256 83b8c451be11c37fcccb0df88972cd6048bd8642ebde567f38aea7c61b12260a
SHA512 3ca61351ecb9274dc9d70d82c28a59971a580383d1f761b7633d9e4ca95392a6b3125f170aecb31c0bd8b00bcc9f4ebc2eae32428315b68c4604d1fcad5762b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 55a93dd8c17e1019c87980a74c65cb1b
SHA1 4b99f1784b2bb2b2cc0e78b88c5d25858ff01c5d
SHA256 4925dd477b8abf082cb81e636f8d2c76f34d7864947114fc9f1db0e68b5a9009
SHA512 f9ade542c593067dbcd13ed94da1ba17a84782575355396db8fd7c28aa70a3120d0c0a22d3ca3d2f0774c1dcb06b9319e243b36001c618c92e0af25cb9c8e46b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 407490850a11d4ddbfa8cfc8ca4b4134
SHA1 4a4ef50edd7d20ee11ee064a2ffc4f6ec7929d8e
SHA256 76585e2caa825e3e419d14abf626b43897ebc5ebad8eadebe23fa51bec943555
SHA512 49db102c324cc21339db0e9a0119cfd8281d881fda7a8e7098bf967151eee8b51d5fc4b9ebe4f2aec63c6c0960230d784e9c4cbba51260ca289618cc61e10ef7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 841aa4c5b30e8aad11edf04ccac5cc15
SHA1 db8d61d6e6116e07bd25ef3e17bd34e81d54d484
SHA256 2efbe77c10123b417f9fe7d01dc3a28706c4ebcfbf5d79b426cc8a2564d7d758
SHA512 1f0ef40f0e508fb3994203fc8ca2774d6f4085e48a139e953b3031f644753dbdf7829b1a3f047a87384a3c2a7aa6bdce1bd84392ecc2834a31710e7a105dbb11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 35938466d111944a844c3c3aa919fe14
SHA1 83d3ded65d1bd33c2c818dc7281962f07c2789dd
SHA256 1c723d65be64f965d2e70e527a5211e080543bbfd3b0b7f6adc672f45b4348e8
SHA512 71fd8e79af7a8060284e151277f39227bc3cb7fc18ebf9194cfab72dc20b28a692b1bedb9d78cc552e7892f34b4b227e6f8fab387635a178228e23253c183eaf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 f5f58580aeeccd2e3c22954965392421
SHA1 94ab5844c5944492e9c4df12ce0077e0835e4b8f
SHA256 73c4794ffa9182ed2fd053271c0f67db503218b33bbd50838f0fafce6159a482
SHA512 3dba3c5c0e64910cb7e3e2c7f5d56877e06d8946c6686d835373a3e9dd3aafa42f294bf16a614864d31d38f740c0ee5006de1169981fdd3a969be3270004b979

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a20f05c40a4ed5fa6c5b05589b4a9c37
SHA1 667394f90a9581c32838b3d125c8c2276545a8bc
SHA256 e448d4e551dd9d4a30ae6c27db94ce2b9435c55decd19a25b948c7b043b50b4c
SHA512 12e6c177f9323168e00b2c44871e160285fe20857f5eb1ba00014c442f26b003fd9b6a8a1fb8d11fe69db273a3de1ded6b8297574069690915f8fc46b0118f90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 526129c3db2e8b3f72a629d88cbf0537
SHA1 d3b8aa0435c3ad8755d9df4a106228eb58faa139
SHA256 562c94ab72d0ebc83f1ae7d8634d20ca13b73bb3210f42272614dcc94e6406f5
SHA512 a099b15560d518d2acd2bfa0e2ef2585ad4ad559e4ed75210193838eb6c4c2e7b94c8820b123b855405eae780303662dc3893851f5f51a214342cfe929a9d8ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6cde685af2b64f0b2d50316e599faed8
SHA1 9c091954c5a0ea5b49cfb4aaba32388608daa56a
SHA256 3fa8b019f60a0762e3a15fe6e1cde12bb794e1e772169051ea766b5fe74e5079
SHA512 43b0f00e8dfc60fa4d4f8c77d99857266b2104d7d4a0641e99283db61dec5909a4e29de703d632331c46a042b31a838c972955cc57807aa195d074ce61b368ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\89b38590-c931-4d78-ae2d-93b4fa6a7f4f.tmp

MD5 8351447aca6d8ed15a62329aade7aec3
SHA1 094475669118bc18d8ce0032c30e387da8f45539
SHA256 0510842f3d5c7474b53900178ef7b13ac0911fd2c14e357248d65a762e3e7b6e
SHA512 6916958d0911599927cd98f01d042bb35f80b2888562c4556059a39cf43f1c28731669c06ef9c217b476efadf4793c278b626e8dfde6749dcb588de81e2bea2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 dc655d5c7234fa18c4fa79895f44436f
SHA1 cacba20b75c02c5ca085dc99fae30c6894264c66
SHA256 11de6c02658e082034e69dd2f8dae71961ac652df0412447c677530740b1e249
SHA512 69f3e799862b57f2e9d9bbb5928ff9f917706e6c9e7aac6d5056161dc3c218d697f4c6c630407ce421f56845983d33987d3bdfc6c853a0c89491d9132d0360da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c7c3e60535f7fde42ea155148228b76b
SHA1 67fdfb79159473016149e4f2535dec43a18de662
SHA256 5254c7009f5830f50f8c71ee095b387260ad03c644963401b3fcd0b8df32bce9
SHA512 2c1778440cc61c2a31c6577306b905b585ca657b8ae699b200372c08ff3c25446e3d7f16b83f18a04c032b2aec3c0fcd4a2d9c48f697100de7a660993749f204

C:\Users\Admin\Downloads\Unconfirmed 353041.crdownload

MD5 e87a04c270f98bb6b5677cc789d1ad1d
SHA1 8c14cb338e23d4a82f6310d13b36729e543ff0ca
SHA256 e03520794f00fb39ef3cfff012f72a5d03c60f89de28dbe69016f6ed151b5338
SHA512 8784f4d42908e54ecedfb06b254992c63920f43a27903ccedd336daaeed346db44e1f40e7db971735da707b5b32206be1b1571bc0d6a2d6eb90bbf9d1f69de13

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e48a1edcd9bba0585c542bab6891c63
SHA1 ccfc46176f1262c8138677fd5c01ce3a0414e114
SHA256 59ec951c72e5e7cf30613ff1297d3a1624a776de7b846c9e0c7c4d892d5d4586
SHA512 f8720670ad5f9b1425a64b7d47ee59364c3183319278de42cd165fd5d9e37e092e4964300247e923f8d981b0a66cfe262922a5379e723134e733d77f9e05e8cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 405135aac6f41dd4347a84b34004a7b4
SHA1 e866dc75f0870a79385910c241b3d25f6b430bfd
SHA256 2666cab30ffa758e0437b02d1431d11fe05924cb72750b813b9a6d93700bde5d
SHA512 848205ed4c3dc23925ec4477101947416c4db7eac4efb78cb3d4dffac770506ccc377f668ea5675886ba1babfb56f2524991e6c595d10c3b3959454b5e3a42c9

memory/2596-987-0x0000000000400000-0x000000000044A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 89998021a53400519073786ef282aeb2
SHA1 68b076c64a636e5cde2f5710b9e5ba810bcb5f2f
SHA256 68a103c39ad1126e8de3d6b14de698eac8b865b5f5c019ca9a481118ba4dc54d
SHA512 c70b5fbace74100d7083d1833b59e9453b12d8ca653c485a0e4c25a959346f8fa924f61a11a1075518c7af56a93ca855adcef1acc11ce09a1ca8bb11105f71f1

C:\Users\Admin\Downloads\Autoruns.zip

MD5 09aa3a18f9dbf8588b0a3489f5c752f4
SHA1 130a744a421ca914f2809685af8262c468f4177a
SHA256 b04d2ac6dcc287a4b01a9cdc5bd9580a38df8a3379e03698cf7b888cdab7ea0f
SHA512 d0a18f5b71fdf9df60e604d12c9279322a6aa8ce6001cd980bd9df138718c59bf7023690de51b64e6926f154b2ebd52950fa21a89e5e30d6942c784a28edb453

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4378bcbd84b93683d41a17820e1e59cc
SHA1 407e6095a56c317e3c3b654f642b49202b90224f
SHA256 45c2e6938efc20b6442cf8e6fa6e27db125baf57c4d1ab58276ba0eccd21569f
SHA512 e32177407216c7198210bf357c5d72769ac9310344dabf8e1660a31b79a0bfba383b66bcd24c890f456a148ebc082945edc50d95b16e7b7bd67233f81e698100

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 fc95aa15aec2468494c6053e11e1f6be
SHA1 2c3af6e6146a51a031f6e4a5250943da147bfb33
SHA256 90b75c7a43a6a4fc723d7c1026abe01d1c87debdfd39ec1d575a91bfe779d14d
SHA512 a0732af2ab8c8089821137b8058db6a8d08d8bb24a7ec6cc2902ff9a61d5773747219f3350c5950a7671b589e0251d8ad522625456f343bec4bd251df9ecfbd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4a1910440172e3313a4b51468627e7e0
SHA1 8ec421e8dc8f65ccc6a031dfd244a7dfd5b8fd5f
SHA256 6831d2916078554c5ec095f54777554ed610a120abb062f40e59bebfc1780781
SHA512 fd5112040bd218f88ae6a0cf2abcae29759215e444d887d3d7a19a89191d0e95cb388c8b8f444f66a1e1fdda145e27e8a1857d5ead4f3bff2883eda5d0b653d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6fc4830b12a4660814e4fb213a526a31
SHA1 d73522e1e20aaea86b3b1d21657e596c9303d130
SHA256 76d636f35876aed1d7b193c767f2538921420b04e85d2ead62abef5af67a56d9
SHA512 3b25ff75dade71382160106f40a9af77eacbf21e3c277f9515c4bc2d20068bb484654bdc1627a07aeff3a6f69d4684d16fafa19290ba2f6619a1a7dec1e521c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1c1736a289a42b961c83f778ed8c268e
SHA1 f1b957aa892c9988059155fcad47a509f1eb15b2
SHA256 73895a6f107bd7bd7c67a76927c9e12564a649d43e1a024256066b2c6e58a70e
SHA512 12ee194d0e2a0bdfe494a44df5a3eefd54dc85be4f88a40184f49e5fcf733210cbc9c3e32daab2192f2a1e3620aab7834ec242545b95a629a6b8c2e68b298a45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 47c8d4e9189d33b63e0f8e4d4a845b0f
SHA1 2975eef554842884b20a84ea23f775ef810f86ed
SHA256 c3859c48d1418d3fc03cf5d10c2a782d20c50d32c3fea08e27a22ade25a14526
SHA512 70ad4207c17b05fdefea8fb3cbd38bbdf9ff74a8dbdc02ead4827f9dde70ce3be5bac8037e135b198b4cbf73fe0964c367c46e3596e7d0a88f9900cd1f802f52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14ff49839d9a6c9790bac90b7bdaa97e
SHA1 1440e250f5a56b3bbb1670fb417e1202d12a55ab
SHA256 deced072bb4a88cc8e904ef04560036a55f030a120047ad4b4646b9305d9695b
SHA512 35bbbaa2a5fa6c2abf1993e267a2700a592b158d18784e93674b24d7c9b765e58ed6637fd80704d56b326ccef4c6f22a139843a3cf117bcd98d7382e3e6a56f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92c4021a3d1f7f8a47802c28d5ed68f2
SHA1 6726133fb13565a53807df9a05fec311798bee58
SHA256 0b792a7afc63500471dcef5c9f39c14f4c4172172b358f459fd1985b0b6fcce4
SHA512 0a47dce987bdf4a51247844fd71b7d48d868c0fafdc70d892d86ab42b5da0020567a65cd61671b9117a9a80c0f6c9ba6665f64ee647cd3148fc9cb1733de65b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c45fce12d29e515020ba1399ca925781
SHA1 c3b05b66e0fd3687257b8dab2e1394a7ab3d153c
SHA256 541a3f434d056af94ecb1d0f5309a6e92b46487ea9877ddc5222fadc9500f294
SHA512 ff240a357265f804174331fa38c9bbc7073824cce6ecb86cb28a475bbd08108ce353e406585e540f4934b241beb0b0f1309531e63ad1d5f760b121712b8f4739

memory/2596-1167-0x0000000000400000-0x000000000044A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0630a7e7a04a08c2a07011d204f26ed1
SHA1 c2743df5e51b432fe7b5d662e3060792b3407d88
SHA256 372215cafca9a2e3542e91caddf76aa284611becb43223b8a4d0972aac58eea1
SHA512 7246d7e2be3b165b9a67ce79975aa0524958d9b00ba35846787d7ce8cebc987b1391523837f967a4d49cd95de6277d14977917ab693503f672a9035f9037d492

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 82a69b3934234de46946013873e1f23b
SHA1 49fc44a1e2ced7dcd0db7d8809e0a5a13be0d792
SHA256 e0e7332d6bf1d94b664c48c09094086e0de70555a2851debb22d3fe2b85f91a6
SHA512 e0ad132c32bb839b2fb8d412fad7e541c5f5fab51bd9c0c9b6458a66c90e44400fa1fea5ad4364da87bdd2558a5f6bbe87f3369539680ca39ca3896fcce0e2e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 67a4ee47c6f194d6f704a2e5808bdebb
SHA1 641d645d685a952e97f915ca1c1cf86f1741a141
SHA256 917a033c3a3f136a396d5d370b4b3072dbb0f5a2cda430647e85181431d1e4be
SHA512 0a1f9352bc8c84e03fe96cd0cc8045641bf0b3b65338364c4c55d7ff456030ff464477f6507ceef0942ffa6fbdeb61615d9930704da03799633927b9d61a440a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 da437279e7fcb00376048c698b13b409
SHA1 173f52671f6337f3e72adafd08569a1888d7e010
SHA256 c2b9fd4ef192432a423f58e5893ac420e1ea70260fdf817c97ecceb2c657a044
SHA512 cda3291fb6cfd4b9718db9794a5ab5a0573d6657ef7321fa6d011de7c1bb5e25d8854c92aad21a5a43acf1077a672266d4053b5a819c3707817f61a8670b23d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 944c27f1257d368607b43f2bdb377a14
SHA1 3f053b9c39e2fdefa5293a2f94da4f922de4a980
SHA256 6e8f17bee9648447d7512c8b6d28f4fc8dd382f5b7b55d0dbcaaa7f339729f61
SHA512 bc42503d9257fcd70f4ac6ffe9afd16565967a152daa7ab4222a58e8e52fdcea3c757f63edac5663667e8e2f9198c663ec5b97f28b64e2c3dc43b1624b4bc378

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97352017d45837b7a4e3cf854be58809
SHA1 75e0b05e2260f00610f8487c2b5195d96af28198
SHA256 7c2fe53ae98684f5fd5439032973339be45a92f220e773ab159d6b16aca2e050
SHA512 8a3580f31bc95eb84fd6c0ea5fa04d76a4bb5c0629f498f17300fb7038c20b9c748c6e91f4d51bdb406332c3d8e2feab3373061b74a03a953bab454410d20dad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 88574e971d4e9f5f47e415fc6659fb06
SHA1 43eb13967c7c4399beb0c35fa057a4ea61e150d7
SHA256 feb592b89e1185b5154148b156de2aa0600544cfdb82c0cdd15c118c6d7d5230
SHA512 579fd0f58f6700dbf289f1aec0f6dbd2a6d4b362df91c7c20f52036bca1e60378ad0466d327a98ebcb096b8dfbd29a43b6203c6f0d4ab875800377520f38ef79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c80d2c16bdf5e1cd42af27b3899098ce
SHA1 3c6e15b0e74b2193aa7455d21ddcbbf71b7655b6
SHA256 8462b7cf655daf560c0e1ca9320f027a35b5ea94677805c722e3b4930a82a2b6
SHA512 3ac826ce80c5e1c5460725de1395563bbd30c1b3fea46dde17349cee401650dcd59841c77adccf198ba3c19113e5aa715498144530ed2614e677538299cd71e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 476567bd8c2ee10d4c047b33c71d9179
SHA1 cba869c94876b93df4e6db169e42053657184c9e
SHA256 cec390a5bcf481945a1bb02f6768f2cf1338fdee47afd1832e6477d6b9cc56f5
SHA512 f97993c013ac1de3a1af21bfd05554e891935958efa23440cc52b12d782f6dd964ebdff786fb6a2100f407870f4e6ac4b2e2c4e1b0bd9edafc4a3b630de6cd8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e3add0ca9a7e3b208548646efdfb07a
SHA1 3712a761265bd74798f20c21a46a591d027203dc
SHA256 e7b5d09166f2a64692dda4ca9ef1f5602b15a3311be503f41babda54cb1ee8ba
SHA512 651652fde66a49ce7529e59e4f7c2ad8436ae0b473a6d09b7103ccd8cc40789c757a48c41f34d510665187e5bd72eed33f55f92453eb957e5f9f99c9f811c276

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e5114db5cfb3b71d09291cb142f5864b
SHA1 86c5dbb34083d1b98594f42fdcb801738acb4808
SHA256 f0da3d0b506eaf6c82b358f25c3b9de95457dd29513322e654d6074d22ace2b0
SHA512 5b4527b079afd822c473651655d8e8ff076d92153f6e4efd0e8e081d3a75154a61679785055d618aa72011fea2df7f47bc38baaa15e55200350a2989f66e6ea1

memory/2596-1289-0x0000000000400000-0x000000000044A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2b030c59b33ff07b7b6e15ad9b72a7a3
SHA1 8c481fe309a9172ba442cf2add6db723dd8e521a
SHA256 fb1b423b647eb83f6a1228d10d4a3ae6b3181b0d5963946b49d0128e3ae3aa80
SHA512 1efc41cae57369f56490ede87e002cded88d440e5d26f3f6c7607f42d5f4bb21f5a6182ca0a2d675c0cee206315d65d88c0ccf2f89859526fa7c3578780f56c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 02f980f71ed947191b94aa4567ade6a3
SHA1 de6d646fc31349f51e0e9ae5a89af92e0e1586cc
SHA256 e1f7dd09aef4c13a9b1d2cc1991aa8bb2c6028d9b1f150155daf4aa229876607
SHA512 e7a2a2853327f3f5a897fc589867ab5cc431ad354128e0cd249b7ce230a4d9f325649258e052f4ad673668a9e4a675cc26a3928d14a1241b8d4b726afba69174

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9b4c82deac27786506748513c87bf541
SHA1 48ef57f0c644610885d2cfd875220031f5ec82a8
SHA256 8f0f7136647c06f6de63ec318c58094adbee1cf5815ad754a6f0ce1d5f432752
SHA512 d7f2a52c222164be446418c89483b85a8de13779255b9408e48d43b687558c34355517ab2e15a4a5ca9d31b675482fcbab234683c196363328b32f634a55dca5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 19f1e537da4eb33ca96966a05d2c5840
SHA1 7ab76119d2c8a07d0f659e2bdf39b698983646dc
SHA256 162535cfe328fa609e246612c90891e0c8f325bf0833d53ba350893e9363b112
SHA512 3040eb5e5ffb28a0ac6d94c17de002bc8393678d4ec7684b312c23520e597360b4ea65b6fc0dc3cd5e5ba4d77104e07e49626e319d2de3dfcb67d79f3e1b13d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6b2b03fbc4941c4b8f827a42c89b7c0e
SHA1 fca2d500eccd653533670aa3d644914c53f195c4
SHA256 bba4a4551c78e6482fd8bfa3a84bdefb5bb3d15a8effe634b023844cd751dea4
SHA512 aafb41d24cfa789bedf0893117d347a02a74f44b65860a5cb0e4744c898f07684f6375418578784fc01661796eac67340a6fb9ebc0edbd70a3b26510c2b788a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a8ffad69d676cbe6cedcb88697e182e7
SHA1 e321f070fb7d1e0da32352d8fe3478acb8a25534
SHA256 2aa4a693b5e8bc17b209ff27178a243b82f06f63a28412ea437a445191ddf1f4
SHA512 d24d729b37ef77ea94ea5b891fac02143c3c53cf3507be090988b2a9a78f8ccd93de335996b1ba49bf7df002082d21aae56010e067d2d187c73ad0531710b915

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0f0d4681d3b342292a5bb1b628e91475
SHA1 d8be8bc4745fda398da0afff8dee9ffeaa9799b4
SHA256 23bed151b2b93e495eb585935fc52f257f30fbeac425d31c3ac183903a5f6a13
SHA512 6ed2b99fcef914021425691b3c10c9b182b55ec61cfbde2d7ff066aa7a54efe1fcf6c0fd75b317075b0591ae050affc47bb8c331703a208547bf342070c6e20e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 93b4d839b47c9b6a20ecc8ab98e3a9ff
SHA1 a2af23ac1912741938f251cee8759d318ee35afb
SHA256 74f63d86ce3f965303ed6324c058ea80208d015aea877e087d766532972a3fcb
SHA512 04189e8fd064526a97e26345cd3d8c58218643b363346c4cda52cd25229c087eaf362b5027a2f49e9a9399f030289e7b8fc6b7dfc7017d2395f0c8463c0eeb36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 649efd58315767bc6611d541efc6a029
SHA1 f2f3b728454bac27c4c8fcc260955e4ce0711740
SHA256 91b1068437031f1e276131020341e80765b7522a5b8ca0ec38a02671d1c5a2e4
SHA512 8f23869aed616bb0dfbadb9c68fa697d862a41d726f5d53bd3df162812a37202c45c35d5a7dc54baa702bd2850350f4270f7f8c74408bde810f916cedb2a809b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 254d0ef5e6522b9d078155cd4dc8a20f
SHA1 6e7046bb4faafdd17ff0b5ab109f1fdecc04c8af
SHA256 f7b70126c07ca4504cd2edc02e5e5020e1d8d941adb9275dac4460cd7ee23cb7
SHA512 ade4be17d6a959dd6f094aa2510f6da77353d6d26ed2215bb604488bfd5be91eb6139ee50dbca505d811fa8bfc67f61d4ce36ee15628e405eaa5033519b91a21

memory/2596-1392-0x0000000000400000-0x000000000044A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\72c44f43-79bb-476d-a142-a556425cb685.tmp

MD5 9c5bcd898ff69b0e0cd8b71d0946d46d
SHA1 c7c10e7cecf94ea079513f32e0f12915d42a44c4
SHA256 c9fd7fc2f3722656681ae8e54b0fae26cb4f611fa72c56b29dd8a38c3dcbb074
SHA512 eacb27de963ae8a7ef88250e34a0872164913b3ee1dadf53d76790a05aa2ca4cddcc59df1ab1fad4d6f4f46aa1d23fd97e6e8223f14c6dbf4eab753e598321a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8dd62e8b6e7e4e46d68ac2689142b36a
SHA1 2b02e51afb9102592f9665dbb16313667c39c5b9
SHA256 8fe9c9ca50b366d1d00cf35132ef74cc64efafdfb5abd475576640529e9c83e7
SHA512 4fd2748e3ee4bd247e916afef273e15d1c7e45fd52cf9621fc85e037acdb99508f8c307c3b5272790fa1c5f5794e9dfe54a632c0b2923bba61fbd0479655b2b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 592d9334e3ca43f5f13551dd716ae68a
SHA1 12402ae222617e6337e4ac592be675671d52ca4e
SHA256 b12cc707b8767bf00d7803eed9362fa4f54eb03ed03ef6b2c1839469877390eb
SHA512 bfdda37d3f90e85d76410890d6046ca58476049822b9cc61337b14a0c6a1407a44da4f4f7edac3669a71a26f40b3fef6a639359ff31acfa40c6347ac0245992d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c9e5c396f98035e6b8035e6e41f9d393
SHA1 c64274cdf1ef21b5ff8901e65dbba6a07ffadeaa
SHA256 7de67a334ea22b0aa3748e991bfbc64e82056da8d2866e69c14b36521f24c660
SHA512 d94fed105a94f667f28c88d81566e8f38bd60da6445e06564cfdf3bbc43bec0cb192bca209c821b232188b554ceae6f2ab0a705f2975cb1629b8d9e48a37ef9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8d79f30d2d04ca9140458e245dfa2c3d
SHA1 19a59c3a0adc2111eee39064b954c318c2e5c4fe
SHA256 d0cfc6b64d3a155879310f21314a90920e08a737812ba2ef869965634c15005e
SHA512 e0b1fa24e8952d583b9a0320fe510795c0e6be83ac13935adcad455d4a0cc8011d0a6a1cc153f80fe2335f6784b4c6383955aafeb94891b887001e080fcba461

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d821e3e4da2d1f606cb8021e7972fab4
SHA1 37d968040a7df2bfee484f78c84b2c7c7cad5c2f
SHA256 a94155676a57d98dfbabc68add9add142b2762de1e29d9e0fe8a6854d785c28e
SHA512 f4b974073bc319a40e91d772b197a68e0a93f05c18ff1e85ef0961ccddea5aac9dec3129022bfadbd813934fc8bc85e4c779d9839086cd823c59153d04aaddee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a36d73c205c5abcc2eab6bf7201dec8e
SHA1 4d026d4397ec3eaab6795fea2fb86c9c22beddb4
SHA256 1e1c63bebdbc7a3fe316135cd877b9758fbde686ddc6800caee84330892464d0
SHA512 92f795a0da049dd8cc535981f362a682da9267523863a75eb192a52b46128dab7cb1727557ef2f0eb8f68aec9da5ec9b37bc0b1df2526e7806b4597821356e1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 48b29b2b3a3426415a08f6a110e10186
SHA1 1897990768d46c67b4c24daea6d8dd4c088acfe3
SHA256 2b02f715ce75feb3f66e01351895bac65e5a4df2389223673bb968eb3ff8c94c
SHA512 b45808de065f7e7331f36ac8662fe1dbf4d118face524943e511a21075b8f834db870c5a3ffe89eff662ddb490719f61851d2284439233c79784ec1aa076bfae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bbbae6e669ec3b1d44c3bc598dab0ba2
SHA1 64c393a7cd6145278f52e9a3551aa90a0dd59405
SHA256 f50ce46280f3fdc34b3a81734d879ded841370b8a6f8d989dff93a0c0186e319
SHA512 aa3925c158490d30bf23eca5e6ba4658e92399d9768dcc83d5675fb4421ac054af0c4d29eda7f257cae1900d540cff50fd8e412783c519fc842f0b27de877881

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ae125faad3bb9f6da04388034437bac
SHA1 c73975c719ce9523db901b5384ae21b5fca85450
SHA256 c338b31c987ae16886e94105b37cc93d8c7bb19b29acfdf17db8117540edb14b
SHA512 30a0c5fe70cbdc3fd3e1ee6a8ec98fb3382e69dc39815f11383aee8ec45ee133e31f849b736b25e14d39a082c5ab7a0ad276f1afab9a821ca818dae651fde341

memory/2596-1495-0x0000000000400000-0x000000000044A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9c446e06af37009a4fd803ab81e44bf
SHA1 e68e1191b13e22de9c7f175faafff8de90130c62
SHA256 d9fbcee25b7139e17baee2fb12ce39e56bdb677c72498204e009d1a4e029b6f8
SHA512 a43741ae6f854ac0081f7cb5895cfec7169913471d5872bcdc3af406703132687f31fdbc67724a343b7e26bc937c66654c6fc964a9c30a6817e5550551cab61c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fc26ed9665cc6630133be7b7f217cf14
SHA1 c65202d2ad15565b6a354180095368afecf8dfd0
SHA256 972ffd1a34ef845704034f0a39ecd893bd6c4c352709c05d56eab1105df7cffd
SHA512 829e3035ba26acaa344addc800066d49124459e65dab26e01f6bd79ef7e18b030759b150923399e0dd082d286a857991b4b693921a34920ff8adf9372dab8043

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b8015b52d181f285cb4a1fbfdd0fddf3
SHA1 9ebf7d9bd4b6b6b393c0eb294327d4789ef964be
SHA256 e969a646a15b22c329359bd5aeb6a738451aea58434b68f948c1f346a9ebfbe5
SHA512 06a0220d1604d5bff6d746e03362d202d84b837a08dab96424e8c8d163a3414116155fe893a6a80b7e3ca0f41d763b589bd75ea6c60152dc773db0ad12d5d1e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69b27fbee6afe286cf2d27f2461d23b4
SHA1 50c57ccd0f63f7f1085081d912b68d3c7dedcf63
SHA256 88f7d61565b69cd79076888e512180cb59f4a59a4de2931686c42d94172b3d0b
SHA512 a9916398589907749de222ed9ee3329732a0739349c945acfaea3c344315ecd5abfe7496e6a37e06a32ede75f0b7a25e04b4a9ac004d9544ea0c2acd3b603ea4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2ffcd1e0418136d10182c5066b9a9739
SHA1 f49d30ca35a061c59ca44a8ff81a37122deac7a1
SHA256 00d6f64e30bcff1119f58ac3df30e98e284adcaafbec4203cbd4af76521b58c6
SHA512 78b1901471a7dea57d9343348d57920f8a3f84b98934d77a82f43641128b34d8a6b0838b9c2b5d6ca9af9bd3456649c69acb9a9f4dec986bcb278d0a6732d673

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3ffbef46d6e105ff26673a1b0b0d487e
SHA1 dea75c07f09a695281b87a5ab25bccc02da4c820
SHA256 51317a70f44ff6147c59df7f27a7662586324361986c85317f673d615c710330
SHA512 1924e18a0d66a20bf82c9e50402385eaab3904b4dddcab3ffe2a46db40e228be7c8eb90e8043631e9d0105e37a6d94050667e6738fb820484556b9150b93f4b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e5f107b33c275043d49288791e8c6d95
SHA1 e7e954f27440ced83148d779e587bcb700a85c97
SHA256 5807ce1d16f2b7930200875fd3b50ac328fdd850b7648106c2a999b9b8748dba
SHA512 a385c5814dda9c40042731c8ed3683582474e5f2994731a070db332d952b8080b40fd13ecea7033e640c103a8343a6dbb9afd384d1a07bc87ed335dfc785d3f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 858bad17249e7ba6e8f597e25e19d0a1
SHA1 4d874cea53881194a47cb059db0339906b6964d1
SHA256 cb0f8ca76bc3cc82b774ade381a91bcea7fc8c288b9b5d6e80d7e412833982ef
SHA512 3efe674604f1f52a8cf9c74f2a01111d9e62e272a5bf66bc90045ccc6363dc9dddc34e85ae961512bba92c351ea2a493d30eb5515d755de0de3d2aa0caf5111c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 30c1882631622d441ff8586e75ed096e
SHA1 ec8c0b6d30c9238ddc6168b9e14d41cce0f8b2ed
SHA256 c2a31a79f42973f6649f08cd0618d57984daa705248326972a9474b168e03c8b
SHA512 13a1dcc98d8b66b59a97991d22b5c463dd61376ff47055b2ab89c4f13b7882eba178a5c98d5a1bff2febf68067de5d66d489cd26c86127cf3c74c683ef995615

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f238939c02c3be677d29fa1444dc51f9
SHA1 152a0fc52f85ad36b40b366fc853da3ad2f0cbd9
SHA256 ff3e8027e4bfb6bbb45982975f5a611d4a76da5193010e131a6fd6aa09fce698
SHA512 16aa3986a40a151f54b19de3e21cde810db68e15a2adf834cef2c04b17d203905409676c22ebb255791ea46ee3edac3ac280198b14708e8e76d0ddd74d3119b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5b1012dc601bfa1577735d67209442db
SHA1 ee7341795449bd015ee5a63c062c37d21cbba771
SHA256 5e70ef331bdac2e0f23164160ea4c024bdddf556cbeb3ce5b710434bd6efb65a
SHA512 f61c1ee1d0fd014a1ebe3ca91654e7b6d4b06bf680e19399c374269c196328207675fe5f27c68a361f332e05557f0486a9cda3248ab948bb41eccfc0d5448ac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 782cc6c6bffe81d0a4f5ab367fd48c34
SHA1 7a4bd99aad231461a37d8b1ed2e86cfb51820cf5
SHA256 490f929f350eeb54af8689f62a25a120cfcbfaf493a96641ae1733813f64a7ad
SHA512 741b971a4b02c6a4df560117e2ca7f2e90fe1435f96af12727c9a859a12d0c7ea6f80eecc90f4a4f30872b64e6ba0d58a491fa55108bbca1b127ddbebe5652c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12f9f15310bd4ab93d9371e567e5de08
SHA1 3597fcde13f6809b9cb89e281ec5ded3faca180f
SHA256 dd237a3b6c397d028e39487b80b304666bf845efc25008962cb581f410507da5
SHA512 b7abfa7a7a38dc80822c2ba762234fb8cf2c155fbb46e20df8daf916d7c7184f27cb7b74fa4bf393b1c5616477325615da5b656f57e4750561d1fd55838fb0ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 46ffed669be087c1204a237dd3ca692a
SHA1 577e9ec9df2717c6b7bbdd64a72b3980cbf84f83
SHA256 99367776b035855d92f7fcedda619c1f0a1fd5fe93b345cbad6c91aa35dc86b1
SHA512 6ea92cd30177bd7b77ff4c961dda757f9222c7e809992392d8c753c22a81c435452824278ecc85303cf1fca6da8a72e8fa6048e5d357c8b3afda8e9aaba366ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1169fccfbee57ed905fb9bc1e5a9165e
SHA1 de0c7f6aab7dc1e0076f4a462bfff5a374907024
SHA256 e5d2f7e39d71d9c6fe2135506920315a075770ef38f4993fbc9adc5096b9f13c
SHA512 07667d134de021a0e6cab03898e83fefb51c67027ef870748044b78d2d1e77aa9d1df229211ae80999011bdf0b5563fde288b9a29ddeacb623373fdb706a6986

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9450fff2504fc2614e838446aea617d8
SHA1 62eb5c35115851f1e3491ad5ce36363907b31dbf
SHA256 38edc1bdd1e982daf22a82be02ed06b2839fdb6cfe1248dc99ef4ba3c94ca189
SHA512 8354eac954ce2e90dfba5c91fd2e71f7a28346db20de2dfdbb71b6d872c5fbb58d4bc98a3986cac570de92e239c2fb15216dc7de77ce0a8cf971f28260edc748

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c471fb2b98b2ea0af83c6a1126052701
SHA1 52a36981448834e8c95a26d11b6475f3d35e4601
SHA256 77eaf745649a0bb7802e46721dbbc87a37faec962581803dd52d7754bf58651b
SHA512 4cea92090ee1c2a9fc24d15491a1269ce738b0210a95baecd3ebfe8bb5ee854637ad65a31bc544fc81dc657afd7c794f52301d729e46a2fac7dc350ec3f30125

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 94a7422ed552cda33de4d94b64a3d20d
SHA1 4cb7ce6d0b505d015a020502e43dec2765a2de9c
SHA256 5377d7c16cc6434c7b9030b90302a106a3e7522b6d221a22c490fbf6b07b945b
SHA512 7ed1db98439429c448b319c212b7d6571a664585ab07b1b5cacceb2ad6f87a218880bfb8516211e4e66355959e776a64f7e10975cc9e290ee4e85d071ba06205

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b139d7286f0c68bbbbef6dbbe6841fe7
SHA1 49c84901c8b588728ffa827ef8d5b2c8c3e9d87e
SHA256 162a7d45a3ddf84a8ad72990d14fb177aa592e0451eda5a22ee6e6fcaa3c7677
SHA512 4c610d8b6244fef3ee1f8b089836d0ca6843f2d2fc5e88be58c50d868f997de755c28080420f866f2452987aaf10b9f0a1ae3c826a77c07baed87ac18aab6c43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1a9ff893bfbd95159108a5a05e23575a
SHA1 a85a5a547858171068e14e929562426047fd5c08
SHA256 a4638b895c47bb30df646ca53b0eae93334fb97c5445eef7e6648bf87530449f
SHA512 b70980e0ce27935a3c736dbd12939e4b00ad6d474fa856941e0726a4f10a450ab184dc74da306f3fdc8c0f331c7cf6ce6a3690fb6ee26813a57904249a737b5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 07f0633d5b498cd653aaf5ab78438015
SHA1 5bd82e5bed00cd2b66a40165d5ae8b385c500a9e
SHA256 6e5b5935a16aa12af4d3801a95936e145004f9300ce29fa4c30bf0b682e5e984
SHA512 f93b5685814d4df363f755a55ddacf54df237bcdb575dfc4f704cac2695b3c868d926ff17b315bb914d840f224abd9ba303371b83ecb9bb118077c1e1eac9b7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b84a41a26acad1bd502586bc7a4649db
SHA1 998af612f80c56a0e8910329a2e53ae619781761
SHA256 81d4da5173afbab1d829c250e83c71a850e70424805d422f21c2e84a50e5959d
SHA512 59091df222b2ca838a38a04f52fd70440ccbd155686991922b6619c46d6ba824d7192598bf8970328ce8ea037164667f9ab0c427ea83d41c00722ede4940caaa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 062c281cd26fda914397dab20b7408fc
SHA1 d5ab0e68b0b5353cc1e720788b6cc5c4e5aea96b
SHA256 a42642ab5d9ade26ad173b11b60089039b214a3368a9c2072c0955b99dd6dfeb
SHA512 bb9b7fc10e1eb1ec46b2322c131dc33df58e6083b7b1f36af38eb14775fdf8f515174996728c4ea0a06bbacf920cea73272a9d9c029fe64cfa0fe99a40f7da2d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 322ddf9f4ac4daea01fcd46729738988
SHA1 ed485e136bfdedbe44f9d1815fdf9b76994c0cb6
SHA256 89a141c8082c6ad28e659446614a49f5df5d528d4c02d5893d4da3c874ac9de3
SHA512 ea0d70acd8c550272b921114839902363c4bcfe1ee92dfb459d62db493c75775e5b24c5b95956e348a1f5df76034cfc30aac8af007fd79a414eb0d9bf5cd878b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7bcea15fe6b407339efe2edda09148e7
SHA1 e474d3259074ee0401f5c74eb807aeba81ed3712
SHA256 6b24ab20479b887bf069f185b374b4fbaf4d96d0e15eb491d8df859d41a1de2c
SHA512 4a044c120ec1cb2a5d63704d6046a348e327c0d12654aacc086e77a2792f4c04fb5e1b78a207e680f4fbc2ad77793ab6493820f0dda99084d1233843c2ff5d3d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5bb8e0c1d072e3026515b43c0ffbfeb6
SHA1 3ee67444c76b31f646b6cc5146d2309e545c12f0
SHA256 5d3bfd97e4f9f7a5af3820a65f351cab4f0249af069c4f0bd5e8c517c2c8c3b3
SHA512 75f9660e8f28d71cd41c2e74c8bcadd36db3553e6403e0420221fb98f86b263f34697e58fbcc1a5b099c9b1654779c9935030041bcb70ed90c1424eb52e67435

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d3b46e4f925e9bb669a20555783c8e9f
SHA1 bb5f759213cd6d11165d2adbe214fed21cce3c38
SHA256 06508f7b8755752b4b0435904bde291134639a23d84e4edbd439fbef7d690b52
SHA512 3b1f97ea8ca963952c504ea3697729236d6e8195626dfb6918c99e437d7ac707a930bc644a2fe6b311efdbf641731e8b96c9fbacf968c9876defea28c39b73f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 66c7f54b167bc59f847bc2c4621b560e
SHA1 7a7977e3713a36db591868a4abae32a82632e047
SHA256 d70d5688b638ebe288e5338d0e2a9f054e8e911331b2af7b1a42acea57498e94
SHA512 d7b81f4f38f76958aa2a399ceaae15bf54b4ff117a8d4f862c360b00be9898e81f31398bd84ac9cef613229b2daab6bf9660d904c0742cd22d429f349b922045

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b7c9484b9685107a09ecb3f6b983cf46
SHA1 2290788d62e495ac0f760490fdde4c7b4bab28a8
SHA256 ae0f9d1897bf01ef697be9eff9f183ddc4ff7f1973e37f204857c032da155769
SHA512 193eb4eb6edc1ecdd8186a6a132dc8fb25f9acfd060383dc893b55affaa1f3adb39512169d6f122d99cac3f67eedddebc80381a488af86045444c6056184829c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3143f35b2ff3262af6949e9ae6e9e4d7
SHA1 ba552b0ffed816d2101b76ce5079e8276293a31b
SHA256 c403d5df94fa336f90ab3747ce80844fd382e2c4c44f80afd5119e59ff3bb16f
SHA512 3adf3a4721568feae97000fdad489da7ce842791f6715eb8090e93bdb43d0fe7a586af5ecde13f77c78f30eb45ee2e595b6266055433d82b23ad8a7b9c4b0603

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bac68f0a0a0324cbd1948d58451114d2
SHA1 e36560c369c08f0303bdd16edce69c7b61d02c0f
SHA256 c11e931fe24f89d75d3a34bdadeff51221253681c5b3dacd923060e28ff59190
SHA512 1387ab32af801a710bf5a1a08c76cc314706a90ec9cbb2ee5940cb0cedb9b5de5e70144165ce44d7cd564b0bd0b5959ae88631eadc472a44f2b804de8deb4256

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 36b195b8b3d222842feb8f70e2e0db0b
SHA1 42d6127ac22bb807991bcefa750b2ea5b32c4ce8
SHA256 130ec4cb917231e8b4ea2b07b1bd579c20d8b6404182568622eaa1f0ffa2b4c2
SHA512 57e9c756d300c1d973d650ac08e111e49d3b1b42a4bfd9e2924c1b514deb3a1240c818c76869823a79391cb2efeb1098fcd5802be0c7da8322396d5dbad5f606

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 490fbc6fd5bf95c08a1f97846f5c590e
SHA1 e993f4e12c16e701017e64cae01f9294ebcf214a
SHA256 7eb9572a8fd6102f68c2a24d05de1a01198d53a8a6a7f97855502506a8bc898d
SHA512 a00a1259ac27731ae48a9b7494a5da928154f2b421641b322c10b7bdfd71a72a3cd79c21be82159e1c990ce1d5c8bc55f34e00f75a9fabd67deef86257f3c9af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 28f7915fa2a898035efeaf1b4978a4be
SHA1 27c4cd1e95e83ba37e6ce17cfbe8ca2b846b5dff
SHA256 b29605ca251669b9fcd5706a0d690e43271351fd4a465c81cb970db4f26bdf64
SHA512 0aa35c20edd5f9a71568f0729f5f764fb7bb47b70800cb5a2278e71cea1f4274049788b78d18e8ccd43c90368ea2a0a7292384e390862b9f983fdfecb38b0f95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c2286f9775d7f783acf1cebfc22aec1
SHA1 9b89fdaf21d7391fe8c75384a5987843d7b2f9a8
SHA256 5e18f8d78e031b21241bbac85efb93415a3c662cd59a9c5117c044382905996e
SHA512 ed2f9b8734f0ae8d3d2a8aaf895bf3acb1f1f1449495271baca1f672027ed294d1be0a1f95ffdbf7226e0545c2b0b1d6f69dcce28b61a9d0fa3fdf35d7252d26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e5ad36af50915b785a79974490e3b882
SHA1 13869ccdda89b9dfd3f3e82190124e6e5af89a82
SHA256 97d0a9c204860b2cee0e9d540786336ae3cff14422f35c55e4e34eb3aad21d27
SHA512 ceab6937e5822348fbea5289f594f75a082d8eee2d4272ae153688d028431da294d9c3f22b573b1e1c27d9d28d59197e636d625054a6e0b858604f1ac7b7334c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cef6adf882a1aa0bd37d153e84ac08db
SHA1 eaaaf5d8fa7e58e9ab338bd6fc16ea3d0f65d07b
SHA256 5202dab53fe1e2ef798f0896236fd47642a663b5fbcac31a4c8a60ad0f06a42e
SHA512 4ec90bc7a8ab9d9cdef3d32fd5bf9e42cb64adb840e09fa2879a7aceb72149d996ccbd7a5dceaa2364465d3d4a9e8f5dc5e5e379a168d7f7d4d1600b3fcd7a94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9bded0ba6d2bff6798f67bd67fdfd0c9
SHA1 813c5a5db50f300f63de4c6b4fa123afc238e71d
SHA256 448b66bfef284f0f14e39d5fddf77ae8c1f7c34bd59cf0c5b8596d278c871a42
SHA512 a720bdd2b08a4ffffebadacf0fe645d0ad67ec81d9fed711fcca4e9694ca0adc8dc106f40473279691b05a69306bc97ac5df8616d09b578b5f6912fcaf45a71d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5cd0a4156b9723c1515e09dfc16ee418
SHA1 231d96896a4b135410ff1b57389b665289e6674c
SHA256 9bc4cf9ca452186b99f92728b71b5f51a0695383bbb922876b0d9994976e2c59
SHA512 8940e329ae4846b8d1931d31b30cdea14f5ff8b7dfee87c0fdef360ab5e9692abc93fdb3a0a42ec9e8f8efa7b4655b22240b160dca157c624c8a39b94e635413

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7073bd97dfbaae5a00e1b27d809f375f
SHA1 764c130d744ae7d76f32c5450c676577ac7a6bee
SHA256 fe060f7c2192a9cd958afd34fa8733d85997bd0ccdf41801d7bd945da72b4cf6
SHA512 8d6e075e361e66ce76c5486bf163c4ae21a9c21cec942d86b4538b95e1a2f0f32a3bb145a175a03317d9d64f67cef61d88bda5f346b15ad9d42196007ec8cbba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 960f9100a06aaad2168ce156f1849f39
SHA1 90b4c0d122d4f6d3cd7cf8f9659f1bba48e76903
SHA256 09546421c2b49aa94fbf618ea44e9b3f9d17f40ea8b1c00af37de2232f3cad42
SHA512 b48d6ece36edc5abebe825fe718d839f7d87d4c16c0980b280af019eca441d229ab781ee5a2f3b5fc7e2a6b12db5ee27c7e3002824d31a20719ebe74e24e6aff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 934735bbeb350512361a6ce55a6a5e7a
SHA1 86e1d91e9ad3e5c54e8c47755b7aada0f403691a
SHA256 a89c8299db1d131c85f5250add5be32533d3759dfa3adcf0f331a0a1725a8950
SHA512 9096c25999bd4478f8a9ceebff3936bb470082e0a2123eaf798404ce1d5a59d836f52760d7071ea04ee254719fbc1cbecda19901bb8cbbc69b42a667e3805440

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2987755b7bbb3b49a20b99fc956d8eb8
SHA1 7ca283bb77056e5378941f5cdfc0298125b6dedd
SHA256 7288fcf28a6864d42461d5104f51238ee40c14815c59c3e71c35b1830ae6c964
SHA512 6aea7431a94075dfdcb71d7da7ab04b090e37812d65ec0fcb45bd6c4ac15317fad6ed9caec5d2a6d9096347dddfad71df6dcce4f761362cdd0358c772ffd3563

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 714ddc3b361084539d140b0c8d37380e
SHA1 2a3f1a95eb50fac47e439b343c0d8fae5c1c0328
SHA256 087617a4c2afd578a1be20ca2e41513de3d7ff33568bdf92400b7158996c105a
SHA512 b83da1a04f2eddbabfb044d44ec80f61f3258f20e10df0e37e2c30fabaebfb7e3636fc1412689d2e05c3c6b3802ba1955cc4edbafc9b5957547cf025f56ac29a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3c7b717201f0d9be616bf7a03f7c395
SHA1 5c52763b9e49ad6b3c275ef13405ef9bf2a5fd4c
SHA256 e59073db5509ff8f77d605d8ad85ebbe7e63526d1158eb1fd5a3f82bd9e6f844
SHA512 5d56be493ad3867a4f13bcf077a1e4cb88c5c28878b4d6d40764a03e0620851338ab5f7da5d5a4d3efbaec7fd35b85961d397066cfca5c536d2881aa0210a2da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a14c72b50bbe089f4dba121346ee1443
SHA1 c0c28a8cad7e1ddd5754a43b88639bb93b783cbf
SHA256 69194319d40a5cb3e7e79e818b4a2c78f67e97e96ba7c44d432b6d83b77c79d7
SHA512 a3da61d21dcebc1e897e365349fa572515ae6146e716da7559b5ecd061bcb847d2d0e919f32db851e00677a9f5ba69c98d657b14e39a49a88fcc30bec4d919a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3635551f78779a5282ca70840ef6928b
SHA1 c379c59d7c75376f3a1d72fce8da1c158a20cec1
SHA256 d4fa0d8199edd0f0ef27476d046bc0dba5b3e756c0d2244ac972cf7c15a183e5
SHA512 ecb2ce00d53c5afac91f8cfca38c902e7ec047ff38d9124b193eed97af5ed32dcf6a0dd5955b401f756aed4826599e468dc8c32ac7aeca1b4f01238e228c2485

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0fefd1e05eaa0c76afd0965d0a7458a0
SHA1 858d2835a3f70a0810c8ad66dff12dd34955bee7
SHA256 783ba92a05f4b3feb2b1c71773d4787b7008fdf8a9b7b3c3b91bdfc07949a886
SHA512 aeb03491bb081249e2abab66a25420fa090ebe36cc66511916b56132465c9833c7bc8ae92596922bb750bec6e22aaf748a1e4529d5f0a1f590fb94c19918edbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 482c7367e0e14ddfeb77925ee5b130fb
SHA1 c23e79f78eb5fd1c12ac2444b970a9fcdf73318c
SHA256 9e71e408fadc19bf33708e2cd076cde00fa66df3defb947f91388a4a04c06135
SHA512 eed378a4c92ac7ea38eeebc91adb99384e0fc94342b2eb631c6e883db8934a29f99d9dd801e4f877d56f533f5440176fe7b681fa59707bdaec61e1a6e5775fa5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 68c268d0e279651dd931130479b25d92
SHA1 61e465675dd7c9bb296bd9c8113a3e0f49afb1fc
SHA256 12a1439e9abe3a8f3529f5dfc7efaccad5de975e8df7a3f431de35cb06fda045
SHA512 cc8eed6002ed1ea519fd1a103f9c073b348649292e0592be28424fc9577089072c2ee7f77328850bb76b1d60d2c27b5d4732fda385bddd57ce37fbd98fb6c796

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f80593025c9cf058d9e219aba5b89311
SHA1 ed0dd77d5002e7652a3ba8c7287334d84e2e2fa4
SHA256 99d2e5ed612290268aabb715f161f922f978344cce28b224b75916ce193977e5
SHA512 254e1a9080ea70440a5c3de59ad35d2df55d9d0a81097c91ae24bb1f137afcfbec10157f60e51e0333e41449517a2c6e5f8a0e46cf31f3d54f69e0dae1afd6a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1329c27c11f094199ceddc603811cade
SHA1 99e4aee7b09d7fad152af32aec768cf0f16d9740
SHA256 4e118ccd6c0ef6e9040f314bfe0885a1b30ca4ca6de31060e720310c08fc7810
SHA512 0398bdbe49cbb69b6d93e6450476bc8bc5f7e50153fb45188777e9bbe7a2a555a085fe651fbd228bc1f4ea2abd8cdc7b0c2cf4c27cfd0a84c76028493eee385f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c39b8df0d778f8d22ec3fb216678f5af
SHA1 83122ad5e51177c37ed6a1e23d5de22dab7ec473
SHA256 d924ea0b541a84dcf037a328cd12373155df54f497e3328e1db18fcd6d46ef02
SHA512 27c7a9f22aef57adf6e42b0d21db78ca61a3148b7222d2322e28700dbc06c607e7a820d94b194d39c446e847b116d4367ac7a4d7e984ff209454c9c6d2daca2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2d66f9d4e9297f8f21daa4eb70eee204
SHA1 e06e6d2b1bb032e9bda9b1f6483eb6a0226ccf4e
SHA256 ec8d32585196bce9bcd82e13fbb8e24fa6728c0eee1c34c791ee442f6f6b8f2c
SHA512 5e840bb818af6b224b1ec55e0ede409ab1c79e163dc010b5402e17e8932ada87b08a62859f93637f490865194b69a989fb293d06b7b4820d2f0540beac0c72e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 22236e6a91da43794299d6f68ffaba64
SHA1 cfe3a2a69d730da2a405fcc35fb49da556210e44
SHA256 7fe17aae4cf89e8773fa8539aef59c2c364edba392f9687a8872cc5beb7d7a31
SHA512 857f26bfea5c057d372721db5d7a0106e4b989a38e7d698f0a9bd4a38287b4d811bf59f808105d572915515b50913a706c677df9def80644d9583e30736ca78b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2700d6d3b89eb0c93f07c5a2f6c3824e
SHA1 f39216e2f37b88bc8aa69d2b7a68492ef2990d86
SHA256 f2a8595fc8ad176070f9f4f3682051ed2454ebcd0f7627601e8ec1097e3d62f0
SHA512 14193370b6d0d546a1a30ebe3eebd3b8e35eee688fc9097ffff093711b72bb15af9a49e9a84749a5323f7fd443df31846ffac55c765fc294c9c7798496372b4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 7b12d0084cad6dc3389dc6c035a25a67
SHA1 f691b86df6d8b247a2b9c57a6e0dbafd750ecd80
SHA256 9a533695eba582c2d8478f8c6e9a462de366510d066cf6d9fa1f391f11c5f79e
SHA512 f2bb9c1c39ddff334bc10973339d1b2648ea38ab009c4fedc0bab7793db1972e307fc6aa0214d56f16b5e569746e3ae37fdbfddbd79114ae2f17f8b509447992

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 531592f6ef627ad863fce709f1edaf5f
SHA1 79a04eed58b60de14b4e2ed3c56c1678f1ba9599
SHA256 7b71e30ef1b10b01abcf6da316dffe829c409ca6a2d1967ccbd5dd0eee843935
SHA512 167ada32275617d42a0f82af2867bd0153af7f2bd06486a9b5f1b557072dcf57c06674cd104b069d402b94aeabb06648aa1f0a703962339e22f129225ee7728f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 50d0c3c88605dc90b96196325495b7bf
SHA1 51415d9ddf23d5bee76127d40aa7f84c9bb939f0
SHA256 dd68fdd277331ea6f473e2bbd91acc249e9d78b2e1c696098845298f66779298
SHA512 f143ed67e5a7485e39e8fecc1ac9bc37473c94589c761fc584552a51bbed0461299ae18a82e7356c48989a8836ab078fc9a90ab3b4a21057e966d7a411c25d8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 858a5ebf2eceb0a8a7d3f2538521f7a0
SHA1 21ea8098b9f48f3f5d34d3d9c146904a92c1ba79
SHA256 47165557eb32e0d29f495288f553cc88cee7230af966742d5d3b2278299b236f
SHA512 d0f20931e603eba36138b6bcf40188770e4df05de5b20563bcf2ce1cc4dd6a6738429e9261fae2967a9d786c5f10616abba6666da3f824268ce90c11e367db32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8bd676210fdabdd05eab140282e17cd0
SHA1 2984cea36f026acf23ea59883f4fdd646413867d
SHA256 3e500a10cc3f58b98ffc2e2afdc1354980bb5241a31059d6afd135156099bbcb
SHA512 f014fdbd6f14e1c5b8477ce614c3d7f558b3e533f95aae2836de0a967b9f0293079f6b6e30d5663f0e627415ef79606bf603d22a2401fb59ab31621bc8b4a411

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 89a3c5b52273fb0fce38500e138a23ad
SHA1 8d82deb6e02ef6be940f2103f7e8211ffce8ec6f
SHA256 188a93ba1d9bb09180ca65759d1793e2c8566db3b0f216f3701ab393667c4ef6
SHA512 f80d0a0df1fed14f72ced3ab74683cc4f429b78f2b632eecbfb9fa935570f502dfc89ddfa668cb8289de0b73a100ed675922c17af431ca1462e949b010ca154d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6f360332baad341ceed331726567205c
SHA1 54976aa97420807fdeaaca7c87dd83e1043bacdc
SHA256 4539fa0f6824154d4743520bb4600e391c3b9cde5e478a1fc3fc1438650f8a68
SHA512 3d0d1af0b67901d058f919ca3e81657df5ebd12d3b0028761e20a2a2a60e3b5925a800e4d2b7dca62b1851d6a3c4ed28d44e56219cf30d58589aa57f6c278496

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7847f6085828ebaa27426ef3f9c588b5
SHA1 e86adc9f3199d3e4484395cc3e1e7ed35e5a1423
SHA256 f21b1d917fee0ec5ebec8812a17b8142621e0c4a14d16bd5f74202f67eef376a
SHA512 5df6307bb94856034afc372e8e0238fe5b3edb365aac849a88712366a905747fe49f539824b59aa7094bb8471836fa95ccf7bb4fbbf0f532d90be9d9c450d689

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c538065a845ef283a886b60b5be3c184
SHA1 099344df91ba6cfc521d0b98acb2ad6d4eac1699
SHA256 091f1105bb9752142055c8139cd5f3509f771da8e0d09d7f1ba5bc9067de6872
SHA512 fc756b4dd83135abe5bcc6c413c728e14e84af6478f25049f543aa5adde87abd775b93b5e1d9bd0d5c500b54291e429ede1c7345e0e30f73740aec24a36b5ff4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 056b3d89d8ea09dcb721e977125470d5
SHA1 624035fb1829e1b0ae16c493c5feba05f0701965
SHA256 cbf163bf720e2e70d6a8fbd1fdb4f8bf265fec052a0c82ebe5e677f10d89f765
SHA512 de16ae545e579500524dfc7a9523ad84cad0fb621a5f096f8a71202bc2b5f07dabf361d89e5d4f72d1d651e7e966687384574613d813e0819793444280c5eedc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a573878fd6b8cbf9fe5c8816e186fa70
SHA1 19f55c29ba1e0a1b6c0d0082a269ba2f38e603e3
SHA256 621a7d969fa167f0c51d20f71d72dd4fc6fa4a6bc2e352ce39eb38eead52b4d5
SHA512 e6de611661a4a0ef2738dc3678e9131de906c5cbecad0c630cf5c3b12bb83442fdd398d06f317b7b1bbd94fb443aed62b467182747ed4e4d24ef53608134791d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c8f5b1a984beef557e1db7a0f7a4baef
SHA1 417895ef80a19d32e4e52bb36d6f2b7590a1f372
SHA256 41685b663703638b8459ea2b91f8c30d51a7d8622ca3371023046299c3668fc1
SHA512 7f797ec8c0b7e1fe66b8907e7da9bf87f7908015ffe815b0523dc27b3b4a25812501f71856c07fff802c82371f3410afbfb8a9134c125ee10342ec85e64c9854

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b7e7890a0aee3e1f9403e7aa8f5a6a98
SHA1 b9f05aecfc9144c0e5a54fe439b05e3213582983
SHA256 901c4d9f290c33603a0e7bc4e26a83fb00c49a21fd0d5d67211342c65d8f4b5f
SHA512 86c744a1d77a7ea56d03609f90e4dd4215b3fa63376593ad69d33118ba0a388f70ddcbb996abf4bd78d42827be1fdb18e6618a360f2a37f4baa5bdd72478444a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b0834181d333f7bb7373301c0515f7e5
SHA1 22e7207661caa226ac937cddd37fdcfead7d75cd
SHA256 9ab81f8887926ea4a6c989e8acf0c872abd8c7747da215db7738549166100ae7
SHA512 1e2869c67c84fe7e823f2673fd28acbf2b953334035e64f37e6e0c6e1bfa542c7d9a160587e9dc88e16b955b9b10ac784e7dd9e05ec886d32e063e33f2fa8978

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dba24f674113f95efff3c935072207d4
SHA1 8fcdc617242fc92321044cb30a034c5e252ec906
SHA256 4a4c552e8b1d2a56d84ae9235eac68e4fc668144de2ccf0cb05e589306501312
SHA512 60c6b3995a2d50fd931c34d669a0c639f51d0ab6d214f58fe30fd054d26b8db600fe851309da4f32129d48bcfb52786879661b3f8f48a38dd98942423d117845