Malware Analysis Report

2025-04-03 12:33

Sample ID 241109-2vj4rstgrb
Target FL Studio v21.2.3 [4004].exe
SHA256 e9ba725c4e84213a9379abf1685c9a4581b83b78a245b71d5dfbd064f6878933
Tags
discovery
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

e9ba725c4e84213a9379abf1685c9a4581b83b78a245b71d5dfbd064f6878933

Threat Level: Shows suspicious behavior

The file FL Studio v21.2.3 [4004].exe was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery

Executes dropped EXE

Loads dropped DLL

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Unsigned PE

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 22:57

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 22:54

Reported

2024-11-09 23:04

Platform

win11-20241007-en

Max time kernel

154s

Max time network

193s

Command Line

"C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 660 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe
PID 660 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe
PID 660 wrote to memory of 2648 N/A C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe
PID 2648 wrote to memory of 1168 N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2648 wrote to memory of 1168 N/A C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 1032 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 1032 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 2440 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 3480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 3480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1168 wrote to memory of 5268 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe

"C:\Users\Admin\AppData\Local\Temp\FL Studio v21.2.3 [4004].exe"

C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe

C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\flstudio_win64_21.2.3.4004.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1916 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4920 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x10c,0x110,0x114,0xdc,0x118,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://support.image-line.com/knowledgebase/base.php?id=35&ans=31

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa95203cb8,0x7ffa95203cc8,0x7ffa95203cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,8992913891178035651,7348277322975721304,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=9596 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 support.image-line.com udp
US 104.16.96.54:443 www.image-line.com tcp
GB 104.78.166.172:443 cdn-4.convertexperiments.com tcp
US 8.8.8.8:53 54.96.16.104.in-addr.arpa udp
US 8.8.8.8:53 4.159.190.20.in-addr.arpa udp
US 104.16.96.54:443 image-line.com tcp
DE 3.121.108.89:443 logs.convertexperiments.com tcp
DE 3.121.108.89:443 logs.convertexperiments.com tcp
NL 18.239.83.27:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 27.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 15.39.65.18.in-addr.arpa udp
US 104.16.96.54:443 image-line.com tcp
US 104.16.96.54:443 image-line.com tcp
NL 104.40.217.175:443 hit.uptrendsdata.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
NL 18.239.18.31:443 cdn.amplitude.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
NL 18.239.18.31:443 cdn.amplitude.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
DE 35.156.242.47:443 api.eu.amplitude.com tcp
N/A 224.0.0.251:5353 udp
US 216.239.32.36:443 region1.google-analytics.com udp

Files

C:\Users\Admin\AppData\Local\Temp\nsg3AC3.tmp\System.dll

MD5 8cf2ac271d7679b1d68eefc1ae0c5618
SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\System.dll

MD5 24523fe14bb9ba400a3950016b187915
SHA1 6ec152b4e4ac04038d4608a8a206070185116036
SHA256 c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9
SHA512 ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\UAC.dll

MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\ILSetup.dll

MD5 cd50c47c010aa1e6abd8bd8ce98fb8c5
SHA1 547e445c42b39041204c012f95e146ba7bb3442b
SHA256 1ea1404b5e14ee8572575d941ef27437a534b46aa1d23e112cf40f4144cbb7ca
SHA512 f4c54f3403633167572e36867a0e99164de2cafe873505922b055b65b63809729a89ab3df092a634d18fe2fb8d3d1060a908349ef61b88ff0750815347a4fa53

memory/2648-21-0x00000000053A0000-0x00000000054AB000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\UserMgr.dll

MD5 9210597fba3dfab3c69b1eb490205419
SHA1 6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb
SHA256 7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f
SHA512 4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\InstallOptions.dll

MD5 998189882c9f1be220c9faf0fd2bde15
SHA1 787d50c46c9a2a48565f684fabc7503aca8b0493
SHA256 f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990
SHA512 e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6

memory/2648-69-0x0000000004A90000-0x0000000004B9B000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\ioSpecial.ini

MD5 b4415a6208c567186732a3fb04804cd8
SHA1 9feb16f18616939d88e8fa7d51299adf936d2a9f
SHA256 d00bc5572249fcdb2456c0b64f225b9875a856a8ebc1ae5c17efbece1c97a78e
SHA512 5a70aafd871c8c83f7b859fcda0fbc2b604db70001be05bcf7ac440ed834a85003675e97b6129728d0e3b8bcae4e95b4ce125c697ba2cd8bb1e7e70321026325

C:\Users\Admin\AppData\Local\Temp\nsz5D5E.tmp\ioAllUsersPage.ini

MD5 2ca341e45239fdbc61de81101fb0bade
SHA1 5c176192257d54039d8464e38d5b2a8f782a0179
SHA256 983b4cb1cd6716633c85113434151085e5d55027828b220517793bb32c590bf1
SHA512 d0097464a5f6cec827f38a9430a077b8c8db349bd0d34901c5d378bb01781af5c64891ca83446ae8f1fc6f78bcd26761c204276dc3105882c116ca0f77cf7870

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e11c77d0fa99af6b1b282a22dcb1cf4a
SHA1 2593a41a6a63143d837700d01aa27b1817d17a4d
SHA256 d96f9bfcc81ba66db49a3385266a631899a919ed802835e6fb6b9f7759476ea0
SHA512 c8f69f503ab070a758e8e3ae57945c0172ead1894fdbfa2d853e5bb976ed3817ecc8f188eefd5092481effd4ef650788c8ff9a8d9a5ee4526f090952d7c859f3

\??\pipe\LOCAL\crashpad_1168_QKAKRAAHFGMKRKZT

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c0a1774f8079fe496e694f35dfdcf8bc
SHA1 da3b4b9fca9a3f81b6be5b0cd6dd700603d448d3
SHA256 c041da0b90a5343ede7364ccf0428852103832c4efa8065a0cd1e8ce1ff181cb
SHA512 60d9e87f8383fe3afa2c8935f0e5a842624bb24b03b2d8057e0da342b08df18cf70bf55e41fa3ae54f73bc40a274cf6393d79ae01f6a1784273a25fa2761728b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2819a0523cc9d065e2ba74bceb9c7010
SHA1 3af671176493eab17312bbdb95d4e296d2453e47
SHA256 7c967ee95bebd82e39acf706d29d20d59e9abc3c092255146fa08a3ff967d98b
SHA512 f0112a30e6a35851ecd4837f27c0347e5ed012801465a32408c05b6a295643894f81a2780cc1c48c902e1bce8a47f18f714cb832b6d9fb279c1e688bb30a4926

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b8cfc081e060037c5881ea30da6c5a6f
SHA1 3c2c7616e6f36b65a4988f415d647b96778356b0
SHA256 c42a7e37ed463e43b6812d66706fdc4c9d31daedb23eb4d0fd7d179dfb6116c8
SHA512 e057b3377122b03d551e1017d485129ce3f175f9b88d62966f773ad762259289bcf54b799d7d8325eb867987206c63bd0ad46ef3e0967b79a7b77453de42c988

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b4555d3aaa1594e13e74c3449818b08a
SHA1 b93a977d88177c7dfd1bc60c35255c6cd0238e95
SHA256 6c8ae9e18bf3a896800ebea4783fdcdd5bc731accc019ca88c111f62c1940496
SHA512 e5d15ac1ef89cae2fd08f5b6980f67e61a4deb48c243930363f62a4e31982a1eeb904b10d630162a00055a8f5af8c28c06638bb5f3bbf723c197c43a2497ab56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 f50b599722a962ee6f7bf6b2b0de6e32
SHA1 f7e2c8657a58994a8d28620f2a9d563d02569a02
SHA256 ecd75a642d702b90a883a683f6fafd507a5811fedcb627e1e4c2c2015c683e60
SHA512 d5163530f0c11558ebfadf64a82b0c67ee981ad3fabc65c9e6ff2eb430301f2aa2c7fb84f00124df38dcf475cd5831e63171d2b6f948f47a4645a052b4aaba7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 79d3b2be6dd9c91153fde9e65b285463
SHA1 8636909195162372945d6c4554d4a00c24d11c47
SHA256 44bacb1f1a4860588aa6ca1bfe39840f5b208cc04b15ee3b5c64658bbd7738d0
SHA512 83968a71e741c5debabb9a1bcf2e99be7c63bf2bfe8ed77bc10bdebda2b06e72ea8e94d016fc4c3876e0c4bbaf7d5b992082b8865c94c1c9fee7537bc9d9a823

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 814a06ad5209ea490fb1a426c375b159
SHA1 f440eab8072df6603439bd72635f3b4e6aa2d110
SHA256 e8a47935e86d56d77cb02182a759b66e429f249697789a29f71e034bd95a5575
SHA512 9efad3ef55e36361b10c4239cb675369765aa075baee681a437b23f7cfc75e70a350482041ace102070010a139a33d34a68ec1f36cec74b13e61e7b80ae36f9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 6f08d6a057833b01debbc9e1affbfde2
SHA1 01b9f1cbb192ec61fbe5e00b0515ca706c33e1d3
SHA256 74c02a46f7fcded157be7242299382a897300585130883b1871ad9a6183aa430
SHA512 6b49f136d93f4fb1f0ab7f7ae49f38c711b52057305eda9726b2d42474c0ea6da22d17b73bc8a8be23206437f4bbc2bcc6db742f8b97723274d815d9f4cce7bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 c74c7c7d8d7e75c8349c43f07abc220c
SHA1 90a9cfe479ae5a1eaf12942d0e56756e587920b5
SHA256 607d7849abe9069c906baf7684feb3774afc348a0e9253f9059c7d06ce40ec60
SHA512 6a252d814a06b7271e2470108948111eee47bb1a512ed9ab442ae2baa14652145a2de72396627b399e89b2834bdc2d42974b6bbb97bda917746363a2b2fbcf50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 e1b3b5908c9cf23dfb2b9c52b9a023ab
SHA1 fcd4136085f2a03481d9958cc6793a5ed98e714c
SHA256 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
SHA512 b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 716309aab2bca045f9627f63ad79d0bf
SHA1 38804233a29aaf975d557fe14e762c627bef76e0
SHA256 115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
SHA512 adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 de69cf9e514df447d1b0bb16f49d2457
SHA1 2ac78601179c3a63ba3f3f3081556b12ddcaf655
SHA256 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
SHA512 4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 8d1c44b2bf75a4e6f1bd141f9a965f4f
SHA1 1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434
SHA256 441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709
SHA512 ab0e1ac0f84c084b0a7af7eb0632c40464b8b4fa9255e1d7ee42c1d7eb759dfb700e8e2129728ce07e85ea262b0bb60fb9327a0163897bb2916a81764cd5f0bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 31a8297826cdcea344698ff952694a7f
SHA1 4fa1ee4c471d1c05e9141855eec5ee09b898d594
SHA256 7c7818c25a18e8a38553fcbcbc2ad0b5e964103a7d2e494f82815e3f70bf3fc5
SHA512 a303971f0e1ea4759679adf3be3dc26dffb13d9ab6b9d2b3c1cc34f57ea6b7870f18e4b7c8552b9225915a5e9e070faa37dc17f83b5cd66cdbc9149238692123

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 3953fb73af81ccc8f2386bdd8d64f666
SHA1 9a2ec9b9f634826f9f2a6f70930f5cdbf5f0e35f
SHA256 143c347cc75a769525a3e42848f43911999fa50fc3bc5b3955512c36765e3a87
SHA512 57b42867659bd87bff827fcc2f14a2cb0485b133a029ccb7fe5b060097d1059947433b8c0e96ffefed433753a2cea746af2b3697387b2c537ab5e293216c3b0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 548574d6b71a42d07621f7b1c8a9e648
SHA1 e1d6bcd0e67a2684237c6c85c756a148bae6e463
SHA256 27e1ffabd477f6c4bf02f42702e3422dede7a7bd57082e9d7c6231a4d03e23f5
SHA512 c801fcea3ec483cc51b25661085634a04b09241ea26aac04d6f07393a1bb0322bca7f78bdad7ea1ac37c3b4b7727b64a42fb58923a339d97265fc879ae7d445e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 b6260349ac0f42868eb7012dfe0e1880
SHA1 5ea2e2b103646006d88f46ba97881c560b99b8f8
SHA256 833610608411ff665e054e0b20a0b3e6c6f4f3d23ecfd80c3b75a2d2980be142
SHA512 eed43e44dc987c44e19564732fd37d94a2a9be6704bc1498a26fd329587996271b9291fd6d7ef29bccecd765058f51c06970110f504d012d0788937f47392730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 9a3a670a26cc0a3a17f6563045e94725
SHA1 5c3ba5d6003c6350c429aed60b4ced03aa05257a
SHA256 f93c9d5b9417e8af6bbda41adcd7c9abb3948072c31ff5d366e495d1ababd96c
SHA512 e434e19bb3789053b91ac69709d6fc1c443bfe2342e7efb051481825fc3b3f3d64eeacaa943817799cf0af52b517a55834f8eda9d1968c2da1dd7c72bd0fb1b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 db9dc9af2b78154625f3ea5f252be541
SHA1 0270585a2fc4c679636031e5bd62718788a6ebc0
SHA256 40110afd775852e28ce781094855821d48241309847b70063477d0380a1c0634
SHA512 8d84544767d208917f5861fb82a46fffeafbaf776fdc9a3c68304bc1256ba8f44087778afb47137f504d3c0f2413426cf5c12f2e12675389a19b7b28f1b833b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 3c7d3f81b2d430b5989e8a82309cbd97
SHA1 a2d2c3c6164aedc42fb286b08e1f4af64340d6bc
SHA256 6d58847dd14db9afb693c4581c2abcff13dec7fd40584c6ba617942b2a9ac751
SHA512 14d11b44b5068cae7e80b0bdf58f4ee43b02de16c99e6cf6f0370c4303b6da0e1bff0c221b18a2cf23109735c96707feb4f9c286ff94c77ecf5da1a16f683f18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 6c57cf7d480c2f5b8ab6d1bc24ca9b85
SHA1 84bef66784b2e6ea7bb87e44acee10716278d5bc
SHA256 dd2b29d8fd0b581a5a6833554ef9fffa0734e6fab8271034194fcf6f5cf80ca0
SHA512 19c6ad1c9383afe9573fd2c3418c70b07ca80da33e6c3260755e79c659ed9127f1e88a211bccd488fe4bd4a7a547633ae4b7ccc8a689da28be667b31a50082e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 bb7b49ed07db4f1724f9676865101464
SHA1 29a1670feffb3440185cc35f3a7b168be38d6a86
SHA256 fe6d66b56dc552448da543869179a9dc17d60f7c8b7c9b4b06316eed56d8e495
SHA512 387a9f22f1654b737df2380885832922727f69d84e7aa5f61a62aaa170c82ac2404afc063b845402e37011697df98b98ef58514daad64c5c408eaebad373f108

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

MD5 41dab464e7f5cae78d4ac8dd1a2080c2
SHA1 29e796cd651eacf3da20744a5a88ad1296b020f7
SHA256 35f4fb1943f98c5fe34729b716834405ae6f411ee75f7c900bee88359ecc339c
SHA512 f1f1c04afd1f967118a543ea6360597574b517009f0035dc84f103a0bd9d5381712f6354938462232356bb630e07ac05c7cb96b4af99a99983003e7032e047aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0207eaa84de067afa1a5f10a6063e999
SHA1 2398f7bb99183a4b195b902a7e600f7954e340af
SHA256 f0495d5adf0909a0565cffaafd034b055a77fddc0082589fffa404c89432e55f
SHA512 4f8072108283b13c9715573e2c4c054ed477fd843cd6a12046dd216af6fd94ff631918669b134bc680117b20bdb8831425041dfe5a624c976f403d8b2cbe0f1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f603.TMP

MD5 15659e37a6b614adc85b12c0dda95d9f
SHA1 8ca927d15e7e867237b937cae0e0f1098dfdf227
SHA256 1d67c42bb00b0f2cf8e96c9141fa253edcb9979af43da4c0783f87e629fe0f88
SHA512 4fb6c9019cfc3027febbe5ca13f0211deeb4d6caf37ed747f7840b81f456cb783769371468c125ba9a2199b26af7765e2a62c0395001e972dec11dc039664d6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 ef52aacfe3f3e28011ff30a5e0cde3dd
SHA1 4b6650cc2fb98e947a53ca1c5041d5bac9567ee4
SHA256 cc75130fcb176330bbd21f3bf20439794551840bd98c4bc07a1b10b800555db6
SHA512 1eff2d1dfa259da1963a54aded2dbbdeb75b2952b0e190203c5094f0015c683f22cf782ce4792befe7e936ca31f0e4b5991b62dec94f0c76a65e29ba26e9584f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8c8e184eda0035f69f79a69b49263067
SHA1 e8c574b0518e71774ba73cf46e85603fbc2a0413
SHA256 fe34bea5299bd804567640444acecfdc4c4a612fb2dc6a66e2d12fab6558146f
SHA512 c47a1567ec07f7f772ae660f0583c6f6c9777d0ebdc5dae3e686dd01057cd53802cd97cbe20e33682ef5e93f827d54eea65a44a8bf8e664e9961092cf4ccd381

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58f874.TMP

MD5 f233a2eeefe42cc2f50219425d76b954
SHA1 f0deb5131c81a81a4a21b282faf3fa1bceb85d7b
SHA256 8491a133e24a04a1f8e0657ee9fad6a5b8227dd46cf63db23c2eb7e118a6dc9a
SHA512 b75275571ddaac3d27b0d4f3c34765e58cdf0daeca788f9ca60d5a68e67d8a1a558751e9c84c1048f113ce23be4701f763aa09824e03428652a8e10f11920168

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

MD5 ca75ff1da6ffbb7010e04dbc442c9c35
SHA1 4361651e2b005016f931da8fb858809f343c1f93
SHA256 27407a9e9f4f15ce03b088a1bef6d64b39ee65e81f847d01181b20adb1d20519
SHA512 f985d9cf72b8494db02cca4acc05925b894d830e0c75f9bb404547b9de638d1348f28cbecae2f41c0fd8c0e5ad1578e038524e5ce439d35894a0446b4d8d0a6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c04e31f8ccf4f86_0

MD5 55ee7e4d58d63be4a9e8ad006d21f7f8
SHA1 95c9d5b7e9c5a9bc55708eb1ac8750ec6e6dca49
SHA256 d981a181f7acb73a984f79cf1f80a05604ad491a5e7f399b6decd68a737a366c
SHA512 8013888772bfa177308c026f23d8cdd57013dbe8df17ec7a2a77d6e0cf4390fee527ca5cad9e6227efffca6e224224ca7fe8db61014a20eb3ba9487de0969f40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81d49e82f7c4ddb6_0

MD5 4bb5a6d22d01e6dc6bd442741eca942f
SHA1 1b956237057904d5e9bdf03723a8b1d21b79a3de
SHA256 7472ccf71ce3ca4ed684e0551f1ff5c249daca09fe67d33d95858ed51a766be8
SHA512 2235c3ac953391567384aacaa1309373f4f2389d3be377a5cacc31a5b10077325d12227f0c876e844c27cc28e2e75172a807352742bb86ed5176608837b05bbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dcdb71bd90a48b6_0

MD5 7f12f38740e51fba0cfd2cbc0171c88c
SHA1 25e57bdff23beb76202f85ed90cd6f903a83aa5b
SHA256 f16334c0bd876b04399ae2c386ac2b42e510cc145060f1526ba3fe65b605e615
SHA512 1488e031172cded26c15b5b12af4f26531a4af97a825b155376b66c83daa9e6941155035e7e2f0875a05026505a681aa808ce60840bb30f296f46abe741a5ebb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4261e69dc27195fa_0

MD5 647e86f5301bf91bc6f8e8eed35a55b0
SHA1 18920a61db755ec2f972798f1175a2ce2e553851
SHA256 a519ebfa98715c7b303dc4e241660ba36650a41077661aba4fccfac77acc357e
SHA512 8cbce869613801f12442ca6d1daa958d2ee009ae594291a9c77287b447951a93d7a2ca0c1204a86fc35e36e64326a0f2b098e1e85e4337f7444be761a32bbe02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\95e808ae6c8dadae_0

MD5 1b6fa318e21b815c21799470ce704e9d
SHA1 c29e8e0a6ae90d1f4969509073f541bc06486d2c
SHA256 0de383e0cf60cc7110df2da5ce070b015224808f2ea76d040fa5b487844ee706
SHA512 4ae1efc528d6bff8dbc61472c6992f7e66f6bc1bb13ddcdefc32c2fa5803023841b475530569acaa66b8fa22ed0fcbc4de56c3f994e2b5ae10f5d53e8a25fec8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ad75df1b1bdca52f_0

MD5 4e2275d0af3b7205ebaeebadd3964e81
SHA1 32797b19f9e34469cd73895b450e7b6dbc59738f
SHA256 6e45590b33589473e11b45be0340239ee412c9efe173681c560301b19bc89caa
SHA512 0f70b2855cf1a640ac59098108167db78aac7092cb1214d50e75374ba5cdaafb02dcbc796433abc61553b94a7abd33cd2fb5dfa645b03abf37ebc7309a7aa251

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7d50a4265370e2f_0

MD5 be2472948940e3e7177c8a667cba66ae
SHA1 082b34d7eb5ea85ea8edffc84961968127916669
SHA256 694ce38ea66568c34961d46a71ef3093cce769cf36439cb5f112489b8cd29542
SHA512 1a5f1b6e585a09036c2e3364523f4ff1d80fac986e109eed89da282b97b859eae71020c1debffb66a7e1dd5f8b80ea2566d1abef3e81bd348f20d98f26ba43d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eaf1643a3fa3b11b_0

MD5 019e3bc057fa8d14fa04cf8dabdb6e0f
SHA1 7ad9c30d290b409e563065ef40b2f7f0cc0e9107
SHA256 f395bc8ade4fa3dc91fe14b9edff3701946188545ff89b3f03418b9e32258091
SHA512 00ab78d8cdd63855f6afaa8a31c422fb12e922b0ddbbfca62fd5238e4c35bf0d14f3b58a0019d89eb4396126f8448b00e7ad60f25ab28b3d4846e4905da33900

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1b9649a8409426d_0

MD5 743dbdaaf82b6034e4ec25e9cbec09dc
SHA1 95b15598c45cf50792d28fa5cb9a56785aca5eed
SHA256 fbe12e088dda18efd107d14a283e6f186a8d7c59fdd4a35a55fedc891000db94
SHA512 37e1849dad757be445e28acb110d81d4b86c1f50df76e27ca5e66259c550432706251534e0a5e696cb54dab52ddb9241c5766c75035951b793350ae9156ccda3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6092047d4fc8af8_0

MD5 7f3d54f042df89a9c983b206e3aaf0ad
SHA1 22e23d3f89a9cf9ed043cae9b3495380e02d67a5
SHA256 c4002373c17a5cae62730d8fa52f996f57b2cdf48bf43a41b6eacedf8a1afabb
SHA512 86d6c64f51a86da734238949283c7e1f82039c8c6b76a6073d3d028dbe67e2d6b8722f1aec16dc497bc994de680bcc62d5f60dbac663bd246d5bfd079be902b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\28870e01dbe75c78_0

MD5 6498ed40b25dcc3d3817539a942c246d
SHA1 20e61b9688430c6b5292861a6ae91929b7fdef80
SHA256 b991c3f66079995de58d6c365d318e40dad43645c0f2de1fb76263cc3717ca25
SHA512 16bd04c9340dd5f163de40d8724ed74e6843186f24117e4b8d9dcaac61705ca3277c4e314ba133dde2ce1c8ddeee93c98609a472192c773c590c519e086359f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ae516420fda1b3e6_0

MD5 8182ebe514752f49bf2f2ecc479f09c0
SHA1 0f9276fd37760cd1ad5569d7e1f44e5559632c27
SHA256 bbdd8ae6a77ff06f17844fbe7e1d35f7f3d0d5d86fefae0c714c7b0b8387208a
SHA512 f336d48e4509ff09363dc773476312fce0a21638930319f0e964d6ac7dbd10c7ab5b6ab0dd808a23fa5483e93f6fcd134b83a3834cb202073a81ec487bf700a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed0889f539a12079_0

MD5 b89363e165b1a19a6b6e66719b55d791
SHA1 7fb7b9cebcdc780eea3fd2d5f394bf8b51c00249
SHA256 b7cf5d282df33916df263c9850ca5b46c15222c928d98583931592e35e3e3596
SHA512 5f48d67325d7104d3e66cbafc134b505880786a444dc812339c2b6484547e1253b3e0fd6e3f168a8cfc0fe305dae39b88299aade79e90ee886405eb896e738ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c58fd553a5f8ff4_0

MD5 586738c4b21ef08dae3cd4fdb8ecc025
SHA1 b0ef8fca1ac712167ce231a4fc578ef4e50bf803
SHA256 ecd0d2fd33f3351824be83c40523eb42338e91aa9badb446eeab22ad0b9939e9
SHA512 3bb5fbc2ef1db4ffa9ef875198d6914befc820eccda637d34f413fb76cc425081c09fad0d0fb9b9be6373a008b162c79e13d18f5dcb7d24b14e273f7c2f73ed4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2fbda6f12a64966e_0

MD5 253593c0085d52278f92d1ee89e7fc4a
SHA1 14af3aa35e19c7f5e86facb6343d2858f7ab7e21
SHA256 e54d4b27b21b0e6fc30330a3813003d94febac6212c1acb0833a3f050a2e01c6
SHA512 2a97ffc885d86ba4631178d32d58ac14c23deba388fcc4366a433dc71af7a56dacdb7f560514943d8efbaecab95eb92253094cbffcfaa9ac8b405a73ce213b0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e6a1bc66abe33045_0

MD5 5fecec2e37cf13be23ffb8768fab4d7c
SHA1 f1a20ebd3d3108e48fd846e6f84d3387f8a302e8
SHA256 92794d97435f6b72be74ca07a238ac7a46c24bf033a0f193da7598bf5d962445
SHA512 616195ae6a90286f2461d4cac1109a936310e806d96b6d3b37532c035132929c3365e1e5aaa9522b2a6744dc990bc10f52fb6bc967ad6084f8aa9f06d13677ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e48c579dd16c1355_0

MD5 a487ebe9a3f7757aa277c7e8761235d0
SHA1 2529e508abe1871f255f23fb12fc6114f6365fc9
SHA256 8946efc3d2e3d4eb77ea5947abb4250e918e89958077e8da3d73e8de9f828135
SHA512 29773e1f2333829b9fe841446cd4e395fe5630efc6bdb3b106cbb6f89c8183f2d15cb30009b35e526c41f8a76675c61d343709d2df44d11d66a49396b9abe2cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 79dd287e3b661f390099310f2b5228b6
SHA1 23e7c35e818b4c30c2f1c9b62a4fa1da62d3864e
SHA256 761829b2e127b360299982c97cedf556baaf550df32a56b87b7071f5dabb22ae
SHA512 8e26c459e74cace196cf804e353097f10f60fd07f65f87e51cec956f7e643f3a03b7ec2c00a99e24b2ea071a9b2d98ebc9b328b0434598a63d6441cab417f32e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1827b38d87cf66c393b561eeaa9b414d
SHA1 be0deb4e7b1d2b0156a331f38eac41a44ed9c7f0
SHA256 30b2cfbbc520f6dc6347b2a6d1a57651f1bd17c689a04dc24378c189a38dea12
SHA512 5bd21e98b421d85f436f7bba8d7e58a5f2081d28361e13d2edf26e34b6832c4500ceb773d3780e4806d6213dc5b09554817a063fdce1a1cd9fabac99c8de26de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6838f584-00c5-42b9-a3cb-e285c176da96.tmp

MD5 99582bd53a82314617b0c7141397fe29
SHA1 9bb3cfb76c7a99f97c56ad3da5fcd485430837f0
SHA256 60a6731f9b5a8678e2fc7fea614236fa8ccda90a9ace126fd70c40e709b946e5
SHA512 800753f441ae7597a0e71a1186a253411cde6f1551df995d3c2dacc7154a2825b16bc7ad7bbd4b40a1bd95a71368be814926fbe27a3f542ab68d3acda506e120

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a58030468de4d1f125bce29ceb00cced
SHA1 70ba4326ed45bce8b63b98d255eae3fbd0bf9ac6
SHA256 9573c128cf37dc997e4bd8e1fa939cf38bbc81fd23c1d18efc425697cb1f2989
SHA512 47fb86177aa0f0928cc1d5ea29371736d1cedf5c4a34c4f944215abcc6792dfb4297b6892849705ecd8bc2343887f90547a3a7e0a3b279b8c15460c53da09394

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ce74e581d5881038703416892ee2c65a
SHA1 25eebeb45b882e20edc31c933328dc88c8c7d06f
SHA256 84d6678e0d6d6ca572362f8330e228dc21d4dc14f779313805aa7ece879a1b22
SHA512 e3449a4ae8371b2914fea806d7c578a6665eff5a29790fcb46d45cab48385cd669331b6cf16cb43bb5afe9315c7a95c6e0b3dcb576f1b794b7bd0b703483cb56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1c1021f073ba8852efeb8302d2182cb1
SHA1 ac664686e73936bf2a72d73ef197faa8283da6b1
SHA256 2e4b56b3cd6bb9d7f13cfb57c7dac03db100e58c91242aab4c8f48c08bad15d8
SHA512 2a7c8b92e0834a25bc25b831710295bf253386c691955c9471b6a7b84d3dc158d85982a8d8d8077a39616392f2c43fbb2ced62562dae7b1163450fa3472150a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 66360086a6c3ec0452a2de352ca7d793
SHA1 ccd43550e94f275cb4f9456a722a98c3745a638d
SHA256 82ea2146f294fa031277c737d0c54706510d9bd7b1fdef60db9c202cb93bf998
SHA512 6909a3e1dbfac72eff2df31295740dc976508c05dc615a6a3170c3b3d921e1bb0cee823ebf3b9d7452e6c24460463f3cdb16856f6c30538a58861be26e7ca1c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9a72326f0894b15c58dcdafd9b94aa33
SHA1 ce5d051fbd2eacae08b143e228d5b8885e8b3e38
SHA256 cdb53208b452d2102eebb4594f915078bea220ec428a2f5bfc010bd726ab8c49
SHA512 54e74cb39d01271e3e1b71f20357cb3073a7048e5ea8c98aef756b6341dfd3eaba45f91414e3e5197048206544b97ae2ef856232b36fe8bd96759b6705d30ccc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e783d8bb3fe5bd2b637d7ec6013efad
SHA1 a8e0e4fe9f8f11a72a3704535eea32ee1f3433d4
SHA256 bb83361c36de3d04aa342d6e3b5f5b412ff84c5ed32754653cac3ab6a90dc4b4
SHA512 1170aa209bb50d1a20bde0a4970ff3341a7133ea836579f03b118ebac7493f3f195ad4a938bc61d0d0460da157a582d08ffcf5be4bf1d9e27bfbbc089fedcb16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 79408cad03a3da0afd06d870c1ecb8f5
SHA1 a4f07bad36faf0d0ca32567b76b3cceca5738150
SHA256 7242e1bae3ff6a42a3e1eaef5bcb60ca4ebd032404c3d1a33f4a2f116a0bff43
SHA512 fdd26f357106eeb03e86ec2cbf685edc10a2ab702208a62b04b8a9b8d59351e61b7c78ef87816eb807be4822961758702c5594fe3fa951c01a102a9513862fa8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 08861b6efcda1d6456a2b01e7d1f0e61
SHA1 e45e5445bb8bae317cde5ddd5e0d26b6be18d75e
SHA256 50304c9c7f2da360e6cbcfe585683966e742747363fce9b8883f4b9163b3b11a
SHA512 2507da901d144dbbbcdbdf1c5a339a5a06ec5aea83fa17bd6ba95153a6a26b69c15f7004f4ce7e07d86ec98d57b60074b9c9ad2ac56b19abcc7e4d1b74d874d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 77b5a1a6c62504f55dd415c152781c27
SHA1 06bf4a2251c09e65bd6935b3b2e89af1cf2017e8
SHA256 5718c15f7fc40eaff36d2c516a90ce25f8787080231228c491be7671bffd5cfc
SHA512 13a761069b0392c7aa38f5c6c545f55230cd8e105418a30a62199caac7f3c6c749c321cd62786f114b2ff9dfbfd33d71d8b7f617a588143a701efd57e81e81a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ecb1e3becbf6d5873f3e90e2e56af74d
SHA1 f8a64dc48b22979825adbb09f3e0e5c53a66ce6c
SHA256 5acc511f4b9a87a1773c464b8f72f3f3b067c4e0864bfb430b56b9cd70d37c1c
SHA512 c6d6e6d19dce08c1a50b64515634e43c24a062ea9bfde0d853726b7d381de45706f2746c52e00f8067aa87826cdecad014143d20cd6724e040bb61b1e3649b83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 49bf13d7a4bcc891d2e1454117600548
SHA1 e1b386b0f94748e5b1013c361a1a733d6ffeb18d
SHA256 7a0ec67a7eeeda3d0d98ecde2ef3d4a3eab0e3c4212d22b907b9a7bdc687fccf
SHA512 a8b795fb14484a114b224939fde03d611f82d01e211254d4a2593614b8a3663589007292a911f03338129c3aa2b742455e3431523b79073990bdfa1803386ba4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 abcf9dcef89a52a80599d227ea487cfa
SHA1 02d19a337efec3dae2b34dbfe91395802700a89b
SHA256 3d7a250ee0da2cb9065d6547655a5d4b9ceed2936b9cce611c24b43f79c445fa
SHA512 1243443d7f10c7d1242cdac57bf7f7328b90def9a96450be204d7b7058b4e7e05e78239591d7c21c23e07184195f736e0076ce53c479e724c65df35896f82aab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 73c17d2775e2ccaecbae5f8b16a4373f
SHA1 2f247e9faf9f4291aafe3804514bb58c8d3d47b0
SHA256 460fd7ddb396c8f4a0fac9fee94ce85ca9012ca9fad8e255244c5bacdb0d7449
SHA512 0b9a6b64c96ea6af72d0de15ade2fbc2c4b9e7bd8914a224e25565b5c022f6d3b463e738d3f2f08989f0c6d370ced37037cb25946516946603dd56cef13db941