Malware Analysis Report

2025-03-14 21:55

Sample ID 250117-3drmysxjbj
Target https://www.mediafire.com/file/8be3wwn94chihap/DonutDupe%25282%2529.jar/file
Tags
google discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://www.mediafire.com/file/8be3wwn94chihap/DonutDupe%25282%2529.jar/file was found to be: Known bad.

Malicious Activity Summary

google discovery phishing

Detected google phishing page

Drops file in Program Files directory

Browser Information Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Suspicious use of SendNotifyMessage

Uses Task Scheduler COM API

Uses Volume Shadow Copy WMI provider

Uses Volume Shadow Copy service COM API

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-01-17 23:24

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-01-17 23:24

Reported

2025-01-17 23:39

Platform

win10ltsc2021-20250113-en

Max time kernel

898s

Max time network

891s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.mediafire.com/file/8be3wwn94chihap/DonutDupe%25282%2529.jar/file

Signatures

Detected google phishing page

phishing google

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\1884cc6a-a30c-4c73-9dca-06b7c0dd8315.tmp C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20250117232428.pma C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe N/A

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2826969134-2088669430-2680400721-1000\{77954EE7-2311-4139-AD65-5119FCF992B4} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1780 wrote to memory of 2320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 2320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 236 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4368 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4368 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1780 wrote to memory of 4468 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.mediafire.com/file/8be3wwn94chihap/DonutDupe%25282%2529.jar/file

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x128,0x12c,0x40,0x130,0x7ffaf80946f8,0x7ffaf8094708,0x7ffaf8094718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff71dc35460,0x7ff71dc35470,0x7ff71dc35480

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6352 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6860 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x16c 0x414

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7172 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=7644 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7684 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1004 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7148 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7440 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,16813313173453580316,8706302590838816970,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7256 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.mediafire.com udp
US 104.17.151.117:443 www.mediafire.com tcp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
US 104.21.42.32:443 the.gatekeeperconsent.com tcp
GB 51.140.244.186:443 nav.smartscreen.microsoft.com tcp
GB 51.140.244.186:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 117.151.17.104.in-addr.arpa udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 static.mediafire.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
US 8.8.8.8:53 sandbox.mediafire.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com tcp
FR 13.249.9.41:443 cdn.amplitude.com tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 104.19.208.227:443 cdn.otnolatrnup.com tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
FR 3.164.163.87:80 crt.rootg2.amazontrust.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
GB 51.11.108.188:443 data-edge.smartscreen.microsoft.com tcp
GB 51.11.108.188:443 data-edge.smartscreen.microsoft.com tcp
GB 51.11.108.188:443 data-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 otnolatrnup.com udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 10.202.48.23.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 41.9.249.13.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.208.19.104.in-addr.arpa udp
US 8.8.8.8:53 87.163.164.3.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 51.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 188.108.11.51.in-addr.arpa udp
US 8.8.8.8:53 72.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 api.amplitude.com udp
US 8.8.8.8:53 www.mediafiredls.com udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
US 44.237.80.126:443 api.amplitude.com tcp
US 172.67.73.78:443 www.mediafiredls.com tcp
IE 54.171.80.177:443 ad.crwdcntrl.net tcp
FR 3.165.113.8:443 tags.crwdcntrl.net tcp
IE 54.228.182.39:443 ad.crwdcntrl.net tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 78.73.67.172.in-addr.arpa udp
US 8.8.8.8:53 8.113.165.3.in-addr.arpa udp
US 8.8.8.8:53 177.80.171.54.in-addr.arpa udp
US 8.8.8.8:53 39.182.228.54.in-addr.arpa udp
US 8.8.8.8:53 126.80.237.44.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 g.ezoic.net udp
US 8.8.8.8:53 www.google.co.uk udp
BE 64.233.184.154:443 stats.g.doubleclick.net tcp
FR 13.37.187.223:443 g.ezoic.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 172.217.169.3:443 www.google.co.uk tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 download2300.mediafire.com udp
US 8.8.8.8:53 154.184.233.64.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 223.187.37.13.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 199.91.155.41:443 download2300.mediafire.com tcp
US 199.91.155.41:443 download2300.mediafire.com tcp
US 8.8.8.8:53 41.155.91.199.in-addr.arpa udp
US 104.19.208.227:80 otnolatrnup.com tcp
US 104.19.208.227:80 otnolatrnup.com tcp
DE 88.221.221.178:443 www.bing.com tcp
DE 88.221.221.178:443 www.bing.com tcp
US 8.8.8.8:53 178.221.221.88.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 88.221.135.27:443 r.bing.com tcp
GB 88.221.135.27:443 r.bing.com tcp
GB 88.221.135.42:443 r.bing.com tcp
GB 88.221.135.42:443 r.bing.com tcp
US 8.8.8.8:53 bing.com udp
US 13.107.21.200:443 bing.com tcp
US 8.8.8.8:53 27.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 200.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 42.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 40.126.31.73:443 login.microsoftonline.com tcp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 chatgpt.com udp
US 172.64.155.209:80 chatgpt.com tcp
US 172.64.155.209:80 chatgpt.com tcp
US 172.64.155.209:443 chatgpt.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.18.95.41:443 challenges.cloudflare.com tcp
US 104.18.95.41:443 challenges.cloudflare.com tcp
US 8.8.8.8:53 209.155.64.172.in-addr.arpa udp
US 8.8.8.8:53 41.95.18.104.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 www.decompiler.com udp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.117:443 www.decompiler.com tcp
US 8.8.8.8:53 www.codicibancari.it udp
US 8.8.8.8:53 media.ethicalads.io udp
FI 95.217.197.84:443 www.codicibancari.it tcp
US 172.67.71.230:443 media.ethicalads.io tcp
US 8.8.8.8:53 117.197.217.95.in-addr.arpa udp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.117:443 www.decompiler.com tcp
US 8.8.8.8:53 server.ethicalads.io udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 230.71.67.172.in-addr.arpa udp
US 8.8.8.8:53 84.197.217.95.in-addr.arpa udp
US 8.8.8.8:53 fd.api.iris.microsoft.com udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
IE 20.223.36.55:443 fd.api.iris.microsoft.com tcp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 167.173.78.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.oaistatic.com udp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 172.64.146.98:443 cdn.oaistatic.com tcp
US 8.8.8.8:53 ab.chatgpt.com udp
US 104.18.32.47:443 ab.chatgpt.com tcp
US 104.18.32.47:443 ab.chatgpt.com tcp
US 104.18.32.47:443 ab.chatgpt.com tcp
US 8.8.8.8:53 98.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 47.32.18.104.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 s.click.aliexpress.com udp
DE 2.16.185.101:443 s.click.aliexpress.com tcp
DE 2.16.185.101:443 s.click.aliexpress.com tcp
US 8.8.8.8:53 sale.aliexpress.com udp
US 8.8.8.8:53 101.185.16.2.in-addr.arpa udp
GB 104.82.235.60:443 sale.aliexpress.com tcp
US 8.8.8.8:53 www.aliexpress.com udp
US 8.8.8.8:53 60.235.82.104.in-addr.arpa udp
US 8.8.8.8:53 best.aliexpress.com udp
GB 104.82.235.52:443 best.aliexpress.com tcp
US 8.8.8.8:53 o.alicdn.com udp
US 8.8.8.8:53 assets.alicdn.com udp
US 8.8.8.8:53 g.alicdn.com udp
US 8.8.8.8:53 52.235.82.104.in-addr.arpa udp
GB 104.82.235.52:443 assets.alicdn.com tcp
US 8.8.8.8:53 acs.aliexpress.com udp
US 8.8.8.8:53 assets.aliexpress-media.com udp
GB 104.82.235.52:443 assets.alicdn.com tcp
US 8.8.8.8:53 ae01.alicdn.com udp
US 8.8.8.8:53 ae-pic-a1.aliexpress-media.com udp
GB 79.133.176.234:443 g.alicdn.com tcp
US 8.8.8.8:53 acs.aliexpress.us udp
GB 79.133.176.243:443 g.alicdn.com tcp
US 8.8.8.8:53 ae.mmstat.com udp
GB 95.100.244.36:443 ae-pic-a1.aliexpress-media.com tcp
US 8.8.8.8:53 cdn.rawgit.com udp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
DE 88.221.221.89:443 assets.aliexpress-media.com tcp
GB 95.100.244.36:443 ae-pic-a1.aliexpress-media.com tcp
GB 95.100.244.36:443 ae-pic-a1.aliexpress-media.com tcp
GB 95.100.244.36:443 ae-pic-a1.aliexpress-media.com tcp
GB 95.100.244.36:443 ae-pic-a1.aliexpress-media.com tcp
US 8.8.8.8:53 ae04.alicdn.com udp
GB 79.127.237.132:443 cdn.rawgit.com tcp
US 8.8.8.8:53 aeis.alicdn.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 is.alicdn.com udp
US 8.8.8.8:53 time-ae.akamaized.net udp
US 8.8.8.8:53 video.aliexpress-media.com udp
GB 2.18.190.163:443 time-ae.akamaized.net tcp
SG 47.246.110.42:443 ae.mmstat.com tcp
DE 47.89.80.97:443 acs.aliexpress.us tcp
DE 47.89.80.233:443 acs.aliexpress.us tcp
DE 184.25.239.193:443 ae04.alicdn.com tcp
GB 104.82.235.52:443 is.alicdn.com tcp
GB 104.82.235.52:443 is.alicdn.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 8.8.8.8:53 234.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 243.176.133.79.in-addr.arpa udp
US 8.8.8.8:53 36.244.100.95.in-addr.arpa udp
US 8.8.8.8:53 89.221.221.88.in-addr.arpa udp
US 8.8.8.8:53 132.237.127.79.in-addr.arpa udp
US 8.8.8.8:53 229.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 163.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 233.80.89.47.in-addr.arpa udp
US 8.8.8.8:53 97.80.89.47.in-addr.arpa udp
US 8.8.8.8:53 193.239.25.184.in-addr.arpa udp
DE 47.246.146.201:443 video.aliexpress-media.com tcp
US 8.8.8.8:53 42.110.246.47.in-addr.arpa udp
US 8.8.8.8:53 201.146.246.47.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 134.130.81.91.in-addr.arpa udp
GB 79.133.176.234:443 g.alicdn.com tcp
US 8.8.8.8:53 fourier.taobao.com udp
US 8.8.8.8:53 login.aliexpress.ru udp
US 8.8.8.8:53 login.aliexpress.us udp
RU 47.246.133.89:443 login.aliexpress.ru tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.89:443 login.aliexpress.ru tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 log.mmstat.com udp
CN 59.82.33.224:443 log.mmstat.com tcp
US 8.8.8.8:53 fourier.alibaba.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
CN 59.82.33.224:443 log.mmstat.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
SG 47.246.165.225:443 fourier.alibaba.com tcp
SG 47.246.165.225:443 fourier.alibaba.com tcp
SG 47.246.165.225:443 fourier.alibaba.com tcp
DE 47.246.146.199:443 ase.aliexpress.com tcp
DE 47.246.146.199:443 ase.aliexpress.com tcp
US 8.8.8.8:53 225.165.246.47.in-addr.arpa udp
US 8.8.8.8:53 199.146.246.47.in-addr.arpa udp
DE 184.25.239.193:443 ae04.alicdn.com tcp
GB 2.18.190.163:443 time-ae.akamaized.net tcp
CN 59.82.33.224:443 log.mmstat.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.89:443 login.aliexpress.ru tcp
DE 47.246.146.199:443 ase.aliexpress.com tcp
CN 59.82.33.224:443 log.mmstat.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
RU 47.246.133.89:443 login.aliexpress.ru tcp
US 8.8.8.8:53 fourier.aliexpress.com udp
DE 47.246.146.232:443 fourier.aliexpress.com tcp
DE 47.246.146.232:443 fourier.aliexpress.com tcp
DE 47.246.146.232:443 fourier.aliexpress.com tcp
DE 47.246.146.232:443 fourier.aliexpress.com tcp
US 8.8.8.8:53 wp.aliexpress.com udp
US 8.8.8.8:53 232.146.246.47.in-addr.arpa udp
CN 59.82.33.224:443 log.mmstat.com tcp
GB 79.127.237.132:443 cdn.rawgit.com udp
US 8.8.8.8:53 20.49.80.91.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 r.bing.com udp
US 8.8.8.8:53 th.bing.com udp
GB 88.221.135.25:443 th.bing.com tcp
US 8.8.8.8:53 25.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 rewards.bing.com udp
US 13.107.21.237:443 rewards.bing.com tcp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 2.18.190.212:443 aefd.nelreports.net tcp
US 8.8.8.8:53 212.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 www.pentestgpt.ai udp
US 104.26.1.66:443 www.pentestgpt.ai tcp
US 104.26.1.66:443 www.pentestgpt.ai tcp
US 104.26.1.66:443 www.pentestgpt.ai tcp
US 8.8.8.8:53 66.1.26.104.in-addr.arpa udp
US 8.8.8.8:53 api.hackerai.co udp
US 104.18.38.10:443 api.hackerai.co tcp
US 104.18.38.10:443 api.hackerai.co tcp
US 8.8.8.8:53 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com tcp
NL 173.194.69.84:443 accounts.google.com udp
US 8.8.8.8:53 10.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 84.69.194.173.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
DE 88.221.221.99:443 r.bing.com tcp
US 8.8.8.8:53 99.221.221.88.in-addr.arpa udp
US 8.8.8.8:53 23.173.189.20.in-addr.arpa udp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.117:443 www.decompiler.com tcp
FI 95.217.197.84:443 www.codicibancari.it tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 cdn.rawgit.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 2.18.190.212:443 aefd.nelreports.net udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
NL 104.110.191.162:443 aefd.nelreports.net udp
US 8.8.8.8:53 162.191.110.104.in-addr.arpa udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 www.pentestgpt.ai udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 23.73.137.233:443 aefd.nelreports.net udp
US 8.8.8.8:53 233.137.73.23.in-addr.arpa udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 www.pentestgpt.ai udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c58ccb4da696442ae40d3db9e4b41c3f
SHA1 e27933a94d57f04c75b8bff25ad7012171917f87
SHA256 d0d75be801bf0c5f715665c73214bfa38fd714dd9ee846de410855d96dd75931
SHA512 82a7cd39758d67f1d177ce7f46a5ee560eb60207ca7ca1e39b9a08a269ed140532bf1ec85899a033a54d20a0d59592d1cd5f5d35f71da98f6b6e35cd904e1872

\??\pipe\LOCAL\crashpad_1780_JKOKYQXKHCNJDCDI

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

MD5 e5e3377341056643b0494b6842c0b544
SHA1 d53fd8e256ec9d5cef8ef5387872e544a2df9108
SHA256 e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25
SHA512 83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ef0e81b130f8dcf42e80097a75e5d04d
SHA1 d8694b7c5fba1ee2e73e69dd7790ca5b1cb882db
SHA256 fc53158d948d1742e3f960124f9fdb138eaa4aa711d0f43833fa893247de4918
SHA512 c85df1696537dfce601de46183b1b22d7f0007b0f695f1904bbd1a6e429d7787c3d6199bcecdb21936d811b35eeca57a9800bcd3a3b585569aabeb0b5b497efd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 62aee047a3c6cf2fec2a29a34157633b
SHA1 51b6eed704d65a62d8793ea18885d12aa39a5cf2
SHA256 342e67b65a4070bbd6e7c2fbf75c98e727d9db45fa071181cae0f5eade726ddf
SHA512 21ee4907a0dcf077f9233542462b8bfd01d976dc1fe4a7b7c4ad70d691e7b9101bddcc292e13fc83a22f56355aa5b93949ac124c84da1f43a80851bf313d895e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2d93dbc15bfcbded3b2e143a3a65c806
SHA1 d339a5b4e85ad1517c5c72dbce687efd75a154c8
SHA256 aced5235e1a709ebb62350a74f9021a42278778689d5e510b7029bf6a33acedf
SHA512 438b7e0c784e11365bde1459cb478db01e3f7faf14b225a3fad1191cd39f4f6d0dc556fa8fbc78249f8294093c5f0fdefa1d25b21270b5212b8ed5dc0329e9df

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d438071c16767451b6acd64062f5809d
SHA1 e7eae80f44ca6222fd8f3f0ab9724afe236e7c3b
SHA256 68b3fb230af488aae54b24b8672ce88eb7abfcfa2d567aa251ce4f6761a5c19c
SHA512 d083acd9e518f2fd6367375331768691ee13acb16d59a71f04ee2f930270e9d16dbdf44909a0ab3e52a2801e5d02999755a28168525de36076c5486738965dd2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 5b367179f17cd1a92f4e819fda7fcec7
SHA1 c1d853e66600b576f5098d0c81f1e8f2f4e31c0b
SHA256 79aa66e8430c186d439a0d5bb177b4b5db63e348d0f1899497b57ab2107b1be7
SHA512 dc583bcaab3f610495e2b0b075c555d2a6a2ec3776228260a12e684db34389f333f37b19f623d27eb35a59817e45aeab2de855544b79404fcd9547bef6186eb6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 60b4c78e9eb27ebcdb2fe29982c1d37e
SHA1 14f89b9642766a02945586205a79e9a2798f465f
SHA256 9ea7d5b79708bfeb3058f8a6a1e0463f22480f793c95ff4f88ec135fb38f1c6e
SHA512 caed905cff1db31fa95a30d9bbf43da085d7f4dc8273b7168faa92fd1bcf1fff39c1998c188443ee8e95a08476c70506156be891c29a84f179890a60cc27ce58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f551a5a66c7027daa54551e892686242
SHA1 68213ec72ee9fca1ed4f03d096ff1a758a226354
SHA256 b81efbe6911f2dea035470d6c8c421359962a26e7f541354e80aa2f326d44891
SHA512 f4e3bcea7b4c72c0f548cab890c7d5bdceaa1739568bd46f5a5643a62e603272e7cb1de0ba3a32bc0926c6e06501a4a3762ec9164003ed850ee0d304d835b0e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6f2283c83b9ac1e61bca6e0e0cf1f47b
SHA1 b2a517e84737d9c35792cf5f1c38b0ae073efcdf
SHA256 eae3f4587395887e8f908d1c7387c5eab9a3acaaa0643c4a8bd4c90850dd75b4
SHA512 1c983f3e549a5b8036b07715ab1ea443ff8cafbbd32c2281b417c364dca4486746b25658b1137e931fe982dc77982fe4f93d353d47975eef8fa1e814b2b2e2f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 a18e33a424007376b810134dde07fec6
SHA1 3acbb4070e7fab6fea0f6c618aeca0964e39f7f8
SHA256 12852fe3bc04c3a3f6cdb76d7fa37cf0d7f91ffe801c70caf5ee4f5bb34e2821
SHA512 3a08afee6762546ba967965d72b90a0e0ed2a45bee0e195696c92f511c4b92634acdb669e6320359cb436e809c9672c0371042990aaf26b90da06da523ce6b9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 69df804d05f8b29a88278b7d582dd279
SHA1 d9560905612cf656d5dd0e741172fb4cd9c60688
SHA256 b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608
SHA512 0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d5345b7a5e1a692f0ab4b0dbb991cff3
SHA1 2a4ba0609e6bc7340ce6a5cdf0f9d51fbb64cdbe
SHA256 c6670db1b19ecc085093ca45c7bd95015a1bd6cd79172dbf76d46cd031ba2cf0
SHA512 1c967d78f2b0ddb05e7c8fdecfde98076cc5b6d5b448f9bcd41b22f538a7fe1c01ec82e080c85895b0abc6c4005777f5ba280657b5a0a72b672554beeda0b07d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c6ffe28044f3a83ee66a58700492dfbb
SHA1 12f9be53539b3d3a49909f5749d4655a794c308f
SHA256 b37683abd506b876d4b027828bc7bd94ccf5f50f2db86743a0ed96fd6023957f
SHA512 1ce5913c0e5fcb2acaf7f740c9b2aea4153f53844c0c988bfdd1096c3350c7f92341d47116fe3acc034757785f22d449271faabbd635de1067513be3720df94e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fe07.TMP

MD5 28abc76ae7e4965092bd48e049109c8e
SHA1 2bbcc72f4e792eadbae51f552ec95534131dad6e
SHA256 f962fa211812b7b0b1f115a8ec00bfccd0535c1a4cb5ffca6a5c3147b5d6c396
SHA512 2e1d782374bf8bc19ef082a404f42aff6d270438707883c4e67f6368626f6d724df0374dbdbed5f8297cc264ba2a8075b5a475d1bef1e6fefc5739ac1585b9f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 688a095e6c798478bb7172f647affd1b
SHA1 25d2eb1b1b77362a4e96774507e894155aea8ff6
SHA256 2ef0785daffe2f6a14ca0397bb513de92945172bd72778703fc2c330b73b7d6e
SHA512 7e5583c7590122330348b7edb45ef39bc3716d71286e0112517c11009d76c5b8ee259b3b2c461dd6b6ab0c69e1082f529ec570029ff1a9e0be47d46a0b9d8748

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0737d3b554b6954b9da616c2d44f42fe
SHA1 d430995743fc84d0ea2c02767157c55ee52de5ea
SHA256 c4096c41b9aa7ef4c99714c4e24a8b5915ec1f4c347eced3f49cb941618d54be
SHA512 522fff449b339b003b33da07bd95bc674ea3bb0c8eee5b2cf086231c565e69f895229c005527f32d0e767ac8dd2310a2542312f54923864656d15d7956b03ec4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8acefcc3ede4904c1fe039c1f3e65779
SHA1 314497a6f4ea9eaee5da2e862eb1de57e9938d99
SHA256 efe2323030ce15b4058f4040753f20e5e7471698dc77d48399092f5f76000ff6
SHA512 8f0ed0f512823e624ec677ea905e92fa70e37ac9540fd728d10b70caa70f12842e88e0ebbbd2c1acf00adcdf182fd2a2f5449fbea221125244da59e6dfe33d63

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 8d1cf30e820e203bfab7ec661db8a9ec
SHA1 6fdec9857f4ee43235ee2489a671e6ceaa8dda45
SHA256 e527c28c53bf76f7060774316ddfc287732aaa4a4d532b068aa3c1d18382b93f
SHA512 31ae67c519ca751d6dfad206dedf7da08c348603a412613295e58bd7696d336208a9600a7250f1439a4d6f673e65decaa7ae65dbb2ea5e7d5703bf28089d24e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 484c6ff3b658c22e4c3b7c4a44c8c0ed
SHA1 34ec81c34533f93f6efd4d0a18fb4ae4b0d2a589
SHA256 047e62e4027b30c0d8752a279ac74bd39d229cd1b79f57cb63b5142d0005debd
SHA512 2a06a151e1f7173550ab71800f85186ec3e0c17deabed8005183cd8f19e26e2888166948fe4d918211ab6cce4d5d9ad5b95f370a9df049d2ef298d8f3ca14639

C:\Users\Admin\Downloads\DonutDupe(2).jar

MD5 cc8f8beaaea169b82c0eae36cf96cbd4
SHA1 a870dbad43f8e11733365f26610a27e3ac12cfc7
SHA256 03bb2506827798399ae834766844e5e094a35246a88352ad1281de046d3bbcb1
SHA512 323dc6f984c10629742bb06fed0f5e0e3aec93a5b2e859e38bf2a02f527ceee0f622c219425f5f4524da1015e1e436eec8b1659ef32d1a9262fd640a15a4906c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c4c9c8dcf2df66b27f8ebc49985f9850
SHA1 e1a5c93c1ef780a264b96b1397b53f03bdb79ba0
SHA256 b813f08b67fd23b48bbf6fa65567757403c8e7fc2d73d67ae2f6af848b4570d5
SHA512 fd520b5c38b83243f6420676c3c06196d4552db168ef4192af89d6592dc4832693091e1f001b8415c97ffdd3a76e3b8ed6d495056cff63d4618d4ffce8c35004

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1a4e179518a9d0488556c12aa69c6d8b
SHA1 280298ebe6b8363e9b7e1cd840dd67584c8d23cf
SHA256 99b5709e137ea6b80c0d09cb44023b2a89bac990c304696ebf6c12c05bc8c39b
SHA512 35cf32ecfe2682bcbdd7388ba4c110b1f39337ae59dfbd20948850c832cf0532108014af80d3a63dfaf5f471f8e1dca5702450b10cc52149dc705a8873f8bccc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 e8c6359d77c16c29c50f3b8ce87d8e6f
SHA1 9efdf27aff164b6a54b8e334c631db027b28ac8e
SHA256 df3afa433680a196ac1bb7709dc58ab220af7e7bc22186d452edf3eaa34d9f2d
SHA512 687dc637f5608ebf35ed7bec64e4c0d15ab3880ce14354f9343ce0b2f2bce71f0e3a0039f019a150061b93ecfe2c38498a4c29ca923af26acaf2f0f3a69fff0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 3227505bc1c5112080efdf2c399c5516
SHA1 b7a148c1af1c68f234ef22b4b3f66cb851647503
SHA256 2a4c303eeac2c6daf3d1652ee39c5ef01a40d286ae7995bc22ec051c01c777cf
SHA512 f3a4d8b7748346d1a40b443244ca90192eae234780414334f71cbd8a427b44e5920315f6925e8d036fc81a8975e8fc7c2ba453c0e40b2006b9a005b8c323b3f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fdbe4b284bafb43cabe17e071aba7668
SHA1 412902c0cb6a80d782f76614b20609b948de6472
SHA256 18de4d9235307474961f8bfacf1b3f985d099f18c8a0526059dd756fb43c6cf0
SHA512 f09d185eb3999415268f5cc6215f29be3c60402ddc5e0c7c6a8ee252391c8ff7e73b235e5b0e9de476ad0658c856f22362bcfe2f3030357879d183d1433886cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State~RFe58b3bb.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 13d503e5ffa127f12644bd7567248cd8
SHA1 e056ffd87c07f235c54858df94fadbe74b2030de
SHA256 ae9bda8a9c793092313517919df7daf8db1625daff498c0b519efc39a984f992
SHA512 f67340c5998dc95a898927bf8c003b64b2f260066e1051b1fee1bc4111d973d8c34f524ef63339e2512c84bcaa83cb1c1e3aea4c13a56acb24b8c6ef404e4cb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 68a23366ccce75d49d9de17ac786696e
SHA1 959d1226552c46c49a3c8acce4600b7a68d95aea
SHA256 584b98941239f6fc33bae32436b870d63f57748d2344b6aaf9896e1f41ac6f4a
SHA512 289d01f132b5cf738a57e21391c3e52c42d0443e1998a0c08da0905a6da21ecb8060e5c24392b4f047e7a2679d941a83176a78ab3cc26ca18a2e4f47cf66cc58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

MD5 491b84bb9f2c856cdcfb96d07d611c56
SHA1 2b13d087b39828d33e22d71a362a8dad3793be70
SHA256 99c6e53915ed0505ac6bb4d125c94cd5d276362a7878dbac7e5694e835c7d2ce
SHA512 80abf335daa999c4009c46e3edb19f46ef74347cb045307a520ee196127c00dc3047e0852f5f1151a29525baa5ca31a2505b0f86cad3b3896441038c5d621a05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 ac3c91a3e27254ca428172462d8e646e
SHA1 a35941df8e595ba25eb2f4232924e68c410bb6f4
SHA256 731587b2cd0c2a8898ac66eabd444064023d39d624535bc01f42cb8d435e1acf
SHA512 c903f8bd10ebabecb8331d5136247747deca3d1e15917e442c52a7c18df00b59159152e24afa6c9669ced7a6ac51684cd9d6f96aef659cdf8463e06ee8cc11f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 098402b6d80b91c28c0a4936108e21c4
SHA1 92a55712c8c27ec43686e9a325419124fd4ae6f5
SHA256 ed7326d8c9ba4409b6b272a8afaff48212e7ff95e688f098191dcbebe35f7302
SHA512 1cfaf0490d54ca6ba63a2cb20370ac543f2d39d7c9b97c2fbf48e1f42c3548ce7e14b6b7af5c902707f40855dbaf51be194a3bdeb33202b0ebc6b527823c11bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 5455932e54fd141f81b6a6fcd277441f
SHA1 13dc10f6bfdedb7b31b5222f01ed97ab39b79eb5
SHA256 e882ee9752476ea23d234787fa8adbe9e8e43129f219d1cfaed716800c10856f
SHA512 f928780138fe8fa31f0601192feaa5279a959db78c30fd07686539d028bc91f11d255569b4cb19c6322547fbe1f8bb798f682442b6a27493c0af4d56fc872c11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 d703f0f4c48bd312ea99267f5d853db4
SHA1 c21079251ac71ce53bcaddcbe925a6a1ede4dd70
SHA256 aabff828b8d624db4a95b7809a26f1244581228a3575cd687f5ddbf60e651c27
SHA512 149060ff8aa2ec7b04366b56e0b579ac798911428a815a7702953101b7065801aef63d9320d52150ed05c4ff90a38c08ee91163a3009d745aa7843c869d54385

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 06020cae2e044aa89a081b0b45758c50
SHA1 57ae0f7e723c1f0b7ed6984efb23a8802fdf3376
SHA256 9053c30235d4a8a71fadd856685505c61241cfce04b4e88b5acfd6794a35abe2
SHA512 273ace5969c67a729d09b50b401b4a5e4a43f0b890b2ad3f0a84c53c36d86c1597e98a6ca38602787f3f10f10f708837c078f6fbb7b54902dc278d082cd245cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 2503d62853e56ebcbdd7f046008e27d3
SHA1 eb46e9032780e738e303fbe1df259a7f9253887f
SHA256 027e6277b9611d6097206caf9cbfe8045f8b3ad37326c7bf349042334a15915e
SHA512 97cbe9071476019a688d52c805691e07f6f5ccfd49d43cdaec42a9d4ffe3827bcd3acff9390c893971e72043c2b7e561c24d192498f707c4a646454bca9297c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

MD5 6ed920e0f3a6447c3e5d86c552438db3
SHA1 4bd9cd1b552e1879e596c57e47b3813bd95dcafc
SHA256 e513c909d83dcbbbb9ba1b54f1cc8e6d6044ed212d04583d1629afef46eacad6
SHA512 ccd98e921f910e736fa59855a4aae6b170fed4fe359fc3790f92608b5f0ec03f2e92243fad55f51c8cb301003a4115d37c1ec4b7652e4109258b156744f3b1cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc7950337ff53cf6_0

MD5 0ef83a07911a4c2cb307d001ca390bd1
SHA1 bb35ff06aae43d5f3f50a97c96b3485b9f185e6b
SHA256 8c508a4feae4066b7f79ffef03f8b0784cc8f799ff97ec7375868910320d9279
SHA512 9a993d8ee73e253865f8ffd1b9baa5f49eff6624b6d1bfb3e1a2a4f6acb63d6e25999af94838f1e538a7b585656e002f3ac3bae2333a96cb994154a952976d3c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f31b09b6cd0997d8_0

MD5 935abb48715eb2c51e0c36780c592a75
SHA1 edd08cc6d55eec266f7b45ae7a01eb321f3b9ea5
SHA256 bd53f2f5b4667f9f9dc89530c6277762605360299f980afbc75ac019e3e8e39b
SHA512 6fca3249b137893e2b2ab3c925e99c4df5bd8f177e2de33663f92b8c64f0b3322c94a3ffc0c53d3adf31f5c273d9d371098519d3eff8028091f34438c3d99d09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\95d3a11a4b206df0_0

MD5 819055e819771afde9a8916d30b726fb
SHA1 252268b1fdb8464d909e88d6f7777f64a7812093
SHA256 4d7260318bef71c984171feecda4a4799b72476218569822521cb2a4fe12d8de
SHA512 fc1676ec108b9b4a7ef21d80a9cbfdfdf9ed9e4a26e1c9a5e9c46a6bbdf7b3fb8bb51ef03b9437b14250e8af59411e80f244abe3f0ec032edb665459026e93ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d4915ccddb291efe_0

MD5 80929f7cee66dc91319f7eeae4ccb5af
SHA1 823b263843cf7d32611ec99b872d721fbd423ed1
SHA256 dcaa76dae2a491ee93a0aa20e1379bf82a919e00b786c4e4aea7c5e7761db340
SHA512 7f3e6f81104913967149164e5a806751e6226fd367edad2816b6146b1048163287b3ceda77f422e031d3bca0a4a62ce08b8a7e5687c2d93876ba95420975e447

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1438557a34d673d8_0

MD5 f5a0fe9b002597ce2f5c321eb27ddea1
SHA1 e344338f6adf62cc5f6b028d6b8238753f23d39d
SHA256 150a32071d001d2ce6b2c1bdebe12e02767a029481479a560b963990fc4cd36b
SHA512 77517ccacdf8ec30cd2b5d749e5cf279d9c11e76c3f2f1fb3fef164524ce6f8cbbb57d58feb6f65e2b2e0225833259b9842b68541cb3bdac47c48aec8e6d0e2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\11021af79e5f5613_0

MD5 e8cc891dff57f528054ff2d53311e370
SHA1 022c9eec903f421a4e73c2600e28dc4216aedf15
SHA256 60adc83f0dcedd7396cb34ab42a31de3fbd642575ef1de2a366fe5b3764b41db
SHA512 a41d2d7c8ec18acebbe1703e86b3482f3d67e360c0a4b1b770de83ae06c4b911a96f746566b5e773e04728744f8b281e5ced83b292fdbce0c3369e51cde36e35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 df6c9c17818b777c368020c936c478cf
SHA1 2a82e1fa6592a2e8e789fde2e3c0543780b2f50b
SHA256 06b823db97183f0226c0fecc9cea71468980b736a2b2d59e38e60a5b4a6d940c
SHA512 7ee54bfdd7bd69316b37f753eeb35f08ed05238bada2b8781e431276ff39fa3c305520ccadddca4fac9774f2a66d0cd28605a3bdcfd064f629eea5f350a01186

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ef0e.TMP

MD5 d7c1262ac3a69e51ce8737f91a96de72
SHA1 715064e8fff4b33047b9cb6d06206f7421976641
SHA256 fe79156bae27c4c607883ae985769525ad7e62cb067c35bb62a42becaab059dd
SHA512 22f4a019461d11e1cb14a8076c6d415aa089141eba80d3205aff2222cb94c66539a437f054fb5a7d0946d59c576bd8e997aaf51514aac4f8d90cbeed3fc45d74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 93e4a02702b6b742ab06b7c2fb4c293b
SHA1 3953b481e2c2061def7e927f5e44c2690c04eccf
SHA256 6feaf62b5e77c19227e006b8fdd9dd6e99c7f3ca9d94b438f6d1b94f44078f29
SHA512 66c525f5cd6c91cf0f61141873faa101d7f09be08a3bd8136e5cfcdd93d0a0708bd655fa9618d606d3c1b0e49a4a84bee09804408577d33fd9218dc386ee12e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b3b713436dccb5c222d6d83d99227c62
SHA1 cb53e4c2f8a1823b112d762132590979c96f5eec
SHA256 df7786134d8f896b6d3638bdbfd360c23287cfb8155946b4fc6d17bbb955f1b2
SHA512 d24dbf1f8bb1c15734a361c18ddd698c8cafd962c08dfdbd06b3c64b040a477a9b8d081d66a2de4eba476ba70b8a4565073babc701a28e08be73cc6f522dcb6c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 0d89f546ebdd5c3eaa275ff1f898174a
SHA1 339ab928a1a5699b3b0c74087baa3ea08ecd59f5
SHA256 939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e
SHA512 26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 5dea626a3a08cc0f2676427e427eb467
SHA1 ad21ac31d0bbdee76eb909484277421630ea2dbd
SHA256 b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6
SHA512 118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9f9641481b13c5b6b3f97585b90532a3
SHA1 f85ba1dea4c9fc8a9f9ff4f934dcd9794ab1c9a7
SHA256 75df089042843328a2e33eda828ddd976ce810217f4826e8c89f328b0c4ae53e
SHA512 95d59dd3b54d89a06f3e5629cd31a1b7b04c3084f8f0fa9f34ec5fbf858b4203eade5d64f37dece37ebe2c3bc0c6dfd09be33b12dc943f2fe081f15acaad6a39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e4fcfeacb1f5677f5f28d5e5b00d81ec
SHA1 c1dbcf5f01c002ec299515b6807f86d4ee839292
SHA256 8bb721bed40ac33a5d1a9b94dace7e185bc2030e86439d5ace5d9d2c270ba457
SHA512 f1dc695c1f981f65f1af6b7a14aac22f66c7729c879fe8c906b1cb3e0a19025437ea49a526bea02b2f8a343aee3729ef06708e5d5a70b6cea297e7be420296a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 89a38eb3a22b99418db6f5e9bfc6ca48
SHA1 497b3ed8151789c815a9ab98429b30234c71a625
SHA256 030066b99311acce4c52b2129785ad390e620ee74cb3cb319e0a581e57c9756e
SHA512 78df4ebea6fb2685b04c37a880786913359dd182015f241bbb2d80a877b510dd6598fd355a2618b580f28b9435ac69315835cd5202a921543747fdb234eefc23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\96bc766215a93e35_0

MD5 11e758fce584d4b3ca49fc084df2748a
SHA1 afa62ae4ae63b6a215dc8bc1ba3a5a3340f21808
SHA256 8ea8680d5c085ad536a0a27b66e8d6a076ae109d45d4da1713715d8796ab7d98
SHA512 d6f3ba0904bfd2721f2c16a8ae446470c93cd440ab921d0b46b15aaa6420a9b6df0b7b552e93bfefc046e6e2c8b0a3bee8ec08be10830dbe6d1268cfdd019d9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1a914eb5fc51fb84_0

MD5 e43d971d6b2401a10eda8220c296d98e
SHA1 cc239cf71b4f22540e637c618dc7ebc0a839fe5f
SHA256 c5da238297a9bfad334bc5adb300e8e8801c97e233597a72ade565fbf3f3b47a
SHA512 2395c1c99f784f1b0d3750ab77cfa97cfe049db649a450d8a6362f568e6094bb395ec9376a4a00642e4a2221ee4d2f006e504efa665b60f91d72ce0db05e7084

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\61a0b4d20ae0e222_0

MD5 886c9cda96dce61862004fc4f10c1369
SHA1 0d244a8101319236c3dea7cdabc9893724deb0c4
SHA256 79bca38a3624178675b82cb4c3a58edc49e66c3614e921542850323e4669b304
SHA512 49d603da780832145281aba06e6843151dc645d015b2ccd1d31c3505e654b532c16f94db1c69e98bf8bf5eff390975c1ca03b994b7b4aade9d6655a9effe0ee2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 e97259a5cf121e3e202737c6f541d3fb
SHA1 690542618b48a4f229971ba6aea0dff4d5005269
SHA256 99439061014c36575d80f537e14a572eb42bc7e4c8e6e7a5ec8df06abb14a75c
SHA512 1ad32d10191e4f363af8a0579f720f3967b3e8debd6708bccf450e40b55292fdf9f1f8a1cec4f2b5dde9f7d13a86dd3973db2ecafb55d2a4ad9e617d77658388

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4259a0181983ba_0

MD5 f3f2e52cfc23b22ec8cae9ca36f56710
SHA1 2af186e0d6a902aaf0b25cf67dfd98e3ed2886d8
SHA256 79566bcd9b8adcb626db1c6e615870240a492014d17ccf7fe61fad00afc7b0f8
SHA512 eb0d0cf4093036121216550e4789e90add1631ecec6eb900acb3984d01709c3c3b721dcba4221fc9aec6394e70f225264f2131aa999da674ab7acf4188000a03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c59dbda9f49f26db_0

MD5 9f1667bc7ef5a38ad17f092dfde91aa1
SHA1 7c5685aa7bc1ca771ba51c928f494ff2f15c67be
SHA256 625607668b897a60b57cabc1cf57ae76f85b6d05c567ce6876d9bf55176ded56
SHA512 a6ea5f53dedf8eafc76383f7ba0457ccbd581e15151d80c37dbc4a2d876a782645909c3507f3c4f842410461aa4fd651c3a3c53b1a1fdbca8fb515ad4e3bf50b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d7d7591a1b39bb_0

MD5 55e863d576286b4c6e09294595993954
SHA1 5b0e628e647fbe4b35617884fb5794ed5caa5f33
SHA256 7b2139d1ef5e08f94774b708eb8fd9a7f3e7bf06c6995e19cbe96a47b44a8f7f
SHA512 31bbe6222b678b6c9f79e7351ee86f6f6ea6e9557fdb5995d8f06d762c8c37e29dc4df4c35c2806c9a343fe54393e6b38f63d44427cc5050deea45a84d09273d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37afe38eb817b647_0

MD5 ca9c7504d30f1dcb4d8703261ef91eea
SHA1 a38e1e1f0aeac6c98315a267c9ddece7289e339b
SHA256 65505cdc806c701be164bbf7621be5dfb98bebd23b0756d33f2bc2c3e0f980b7
SHA512 d798162f98686d1fbae2dd462ffd2584fe77441e0d3e5d6b98792e86565904abf10d0f2ad17dae76e50b1dc3062ca0a69ca95ced1d33eacd053856fa382e0479

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 dbe505f92ceebb7af01630ddddedcce7
SHA1 fcfe4a16d21c1d8d2c54e1dc8099ae66d62ab64a
SHA256 cbfed187f4e5b8905e5dec6580ab14831fcd3cc5ca7595dd06e33fec80bdbae7
SHA512 5fba1979a4be4c6a84e0a8315c3e97839038be1cb8c9f4afbdb7639161f077e42eb4f2f020b86f8f52403e308bbf73f6926302111d0b52ecfb46445cf3f176b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be6d12311ce2b399_0

MD5 c56d5bc6108ad00c6c2acc5b500f0039
SHA1 37dc03e00606be47775a187a4090f3f9ae277ca6
SHA256 e1a4c259f85879b322f32eadbaa99fdbfd831bbd7ca7e224b5814293c12b1369
SHA512 a1275e8dd5a78bdaca4eb8c0f1898a82c46e556752ff7c134c3ae7aef2c6734bb7452b8c13d7b78a2783312e861af837330f00532341a1e8447eb3f24eeece2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 7b8078dfebe20d336fef734f889a33d9
SHA1 04f8a0afd6d3cc00bc339e6062c096fae01d276e
SHA256 7baa5641b8fcc0acb8fda6ca144f03a86a523c368a5f2b9c86450142bb9ecfbe
SHA512 14f29271557890fb75a0ad6abc1f1421ac6c6d01cb8ef8080807e630b92687e4a464c61a8a23ac69dc2e9bfafb8d5391d5a7f0080e5297ff88ae3ad33bc56fb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2692617678c042d9_0

MD5 5df32b9fa33be6334182d6229fb69107
SHA1 d9d663e017b68ede5be6ffccf326d1c8a9ff915a
SHA256 11f2df3ef583418289f0010280cd906274146c07073279f1b70b8d986d484334
SHA512 64a7b309d222c6504204e511ea58c3aa24d696201177bf9ce5c5e5de71b59621f3641001f44084d662b7169e1bca8063b99ae32a355199ad8f4440b49f133abb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71d68e68ea4089fe_0

MD5 3cfb60b46340d1c0bcaed988fe4822ee
SHA1 4983afebf987c19135253358125d478de775617c
SHA256 4219597df0789ca753e60d314015f8db999f6563e4dab7e9f07e5f8fe567d2ac
SHA512 163ddb1ebe38d97873140f712b1b25ed90e213ff5c53d92edebf9832693c55dc9f0d26bdd87a70761fd0807cb97fd7895ddd41604623833b3c3e60875cb78b0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

MD5 29e365d31cd477d19032404d3e877d53
SHA1 0925e1a5f4e678c724473d941da03157a7c5fa83
SHA256 2b3ded863b7f765adafddd5c33de8fa3f752778a042b0f9ff05e043520ee29a9
SHA512 0cfff1333dd567a15c38a41750cd2c7ee3e149ee9437501289a989ae1c9a6a8058a7996eb6b2874892ee775b756465d60524e18529aea72bd1053e10c73cc1c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 0732d58ca30397569181d71f867d0ccc
SHA1 531eb865b1e815689ae34bc87c0b4cc690ef4ed4
SHA256 ed1848b3b21d94673938cda7944ec7899105777bdae5fd4098d25d8da97277af
SHA512 9f830a74015d7c2be26ade5c7a2f0ab101ecef3829f3dc5114aac19f296d3523dcbe307d8f8fe9c72a0335c75cce65d8a074e46e8ad46d6f0159818c1118a573

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\777fcce832eb621f_0

MD5 afe90bd87801530da5b4d145f9d2745f
SHA1 d4c96bc95bf4d2451f225d04a9af7489491d7b06
SHA256 11cc04843c5a404f233db23f8c4f595aa27b91cc86d699f8f64428b65653ca56
SHA512 51070f374d34105f369e1f05127f3a27e294b5d9e5b0cf3f7f2f4199d49c5ad17245c7ae2c1edc5d13678179d394088cb7714f7cc99fb6eb2c01c0305898c22a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d79e0a2891fc014a_0

MD5 497cbba7cf54a2a4d8d17053b9c0737a
SHA1 6a450f166e4a6575f954c29eaf12359cbeda0b05
SHA256 59c8895c2139649e62758edd20a02c0cfd36d1e1a9152a586173adaa24f8e1f9
SHA512 e81dce1b354def738737a4516319aa2d27a0f4d0cf27adfb6e836124e840e253b21d33c702e0a4ac2ede07cf2ec6624225aff71bbd9972707b2e052ba18fb545

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f4680e8f8f8a14f_0

MD5 79a51ae2910c552456a40edbd70f6c15
SHA1 0ce9ad56956452ba48088f0610a2793f42baf675
SHA256 93b9da409347c0e880969e19bde6b226ecd678422dcd473cc20c7b5e668743a0
SHA512 ebc839c50be81038556e7df696d8e3635eba2e61bd84d3a6f4a12b96cb5fd3cd375b0232b982f97df02b481ebbff9b5c8f1cb64b6cb39bd112b57a5382612213

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0

MD5 49ddb689019243c2625e56e8ff1b1cee
SHA1 9141508075415516ca97934307c50b3f5153acdb
SHA256 e9016718d7847c34a7f0e0aa0c77d2638c6c9524c651e273909ffbab46b9582a
SHA512 d60e08f1fcfcb221f870c3df1276c164ae876200f85d39462788d6f18969aad9ce18a65d8dc4a99550362040ba78e5936d6fa8e5f8f7598b13a25365514cfa6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\766094f4b47e839c_0

MD5 28f426e4315c6d786c1426f93cf1d1da
SHA1 b3f5fb8c757a1f2e29e2ebc090cbbdba313c283c
SHA256 74d6caa5f1e5fe3c940287c2f6e9f622d72e2f3f0614ba8fbe7355d94edb508a
SHA512 0d75e2a736e15f47a9879b73f0e49f78c8fb281db6e23a26405721245f7780b5f088731f2285d04b89a96bd3fc7b3a88fb2e66138389cf9eff85810ee125040e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 53479faf19a40e3c7e87094e4655d841
SHA1 260fbd1ee55058a631d24153bbc6f64e7fd16d3b
SHA256 b2357d165caf8baa189d11594151c60e8212f5284e00f843c7d7c40aca892220
SHA512 160d60041695bcce0cc71243b3a9dc5be7863c100c7c49a79bbf79ff9a16592ac32afe14ceb322ed8a25cd8e30eb5362c181d36d74d728aabf85d37352bad1a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 f7ed02ea6f9171bd22f68bf50e2c6281
SHA1 7624725e28e7a95d706d4427fa044b85ba1de880
SHA256 98cc7bd8a868639ce8a8cf7f2566d2fa7effeaebfc6ca316118d0aa6844c68f9
SHA512 dd75a92a5e27b3e14daa9a4bd2037478bddd7c2208f0eb8660a9cd875aff5fefc00099808eb97fbedbe1c3aa769340ca7c261d90e42a118e9ea19056111d81aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\86b9cbd77d05d034_0

MD5 bbb30fe96f5c71e457c5350392b2a6e2
SHA1 0398e0af6b7c656356af8c7f520231e64359e9eb
SHA256 f95edabeb762993a2717bbdde6691e04d29e93e1381f05c6b76ce3eacd662d96
SHA512 783dcdef8acd5766b4cca1e133ee4573f05c062ac5bb15dee657f9a166f48ec17f7ef5f26461772adee757303c3839ce51791330663a1814e9afe476a4ede370

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

MD5 9f825cd3a54f41153921a22232cf726e
SHA1 0ec946db182b2a11e647ed3571c1162800b0abba
SHA256 f9af001941b8f8f6b537cab38643683d3423ac6f924792c2909edb6ad4fb1eb2
SHA512 65c66d09bf5e7db534c164dfa6a307ad6622b0fda4d93f011b610346112e3a78887ab453e29af4e45175908c687cfdcab383b69edf4307aa5782ec07d8075eb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2076e2a98754e97_0

MD5 e1ba67e14bc7f08d8a720c2c848635d1
SHA1 dfd28b9739ec330276fb958c438a3338eb292ccf
SHA256 f84c56547e3fed125017802191e5e065cfdbf461e143a701a4185641f77f1901
SHA512 1b5ba25f3c74eef17848629f1cfafdebda0fdc962f74282e58ea7ee3bebbc7f6b0ea3b1afdbd645aaa40eff1f672a16560d83e28adf6dc896c1eb11d2d2c5b5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e9b18b0f66a7183_0

MD5 8ab4209406d25a96e3d3bf87b297e6d4
SHA1 18a0a292ffa596a2b43591109c97a9c0fed24bee
SHA256 b7e5ea175e2c1f8488941f37668c975e8b809296160e143fcc943bb2f13ad8a8
SHA512 fa306378e881832459b945f5bde513e3d9acf1710245057d5e50e2082bb668c72bc40f2e6b9b6c771c06a719f9f45886bce2d76b0d4f6129c2386534d3cf6e23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e849fb18-b849-4d05-98a6-eca823f4ad85.tmp

MD5 a97cea16b70dd2784d3e9f718248c663
SHA1 1a95f860f1769c13c2cd3b761615a289cb4b5d1c
SHA256 56d6ae672f65024834d38f751b84617191b7002b12e41d0a45665fee8feb334f
SHA512 430843536a77d43a2d309da71e0ed1794f05ffc106c0f923d150b8527dee6874ec2d81edf3223712192487742842eed14de165c7681c18cc604a98d03ef6e1eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 60619225a3dc6ffe2e9af18451b45442
SHA1 d1c9b7174e4deba8d8068190fc26032ef5034045
SHA256 9016da389ff6809d431e02dbac8c153d3f13a8983f33715e4586eabed494801d
SHA512 477f7e2c1b0f48c0d86d64c9ea56dc7efd3024e50941eee464220fe5b75e61c8d183f795a640bc833b0ff71002d37e39fb837aa900ba6b044b305aaae5a48dc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10bf0636e5eb573f_0

MD5 aa9d52d480eea0e1aa819ee3a36cdde2
SHA1 904297e7a606497be4a56b2eab5b8fded91a0218
SHA256 e635b29066d5fdb1801ece77e634c4a397ad1b2b1dbc62aad51abfda26fef719
SHA512 73fb948a1c46123d0a8c4f7331745a2d241293bbad38c24c5956f88ba43b74f3c1764f7c73421f163f88750d22d00bb77ae6e63410e220ea515ebe587c3e3314

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\218d387f94db6fff_0

MD5 5527e843484529fa93db778c0337a2e5
SHA1 e07466abbfdddf8bd29c9e162e904453f9bb05a8
SHA256 efc53494167271bcea23f2226d32339ca119a5c9ab6e1921397f318635b77398
SHA512 f6d065f3e9017e677ff380f8b92c9873623cc56e5f7a5bda019cb03e8c146e07341bc43047be8bd8d4698212596f2f0201fb8e1ab0765b6b6e4a47f910c43ad2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e146fd968644d345_0

MD5 d2e6645a48433e73d67471869d6b70a6
SHA1 c9d006ad73ef63c7bb2cec0b9ebee1adc91223a8
SHA256 c30f4dd361936bdc1e21caabcc55ffa5d036d24229b8fda7a97c6aea6c3e6850
SHA512 0899c727db254e2dcb279e6a86651747b96cf32b68b2cb67095050d2527e2808d7bd37de6a3d13c5ea1a817d3204d2552f42ebd11d7eb81254087d2b1af173b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\98e5ffc5fd90dd12_0

MD5 7ccaee2a815174faa0953b5024feb9b8
SHA1 fc765fae2c5fd073a67e7205c279eaf3effd9033
SHA256 d146900e3dd5a82127e617d7b821208a56b6fc12f6af5f90ff43c383e9dec226
SHA512 d49bb4519c67bc4f04f8660dee4cbe438fa228349c71f8c7cb732af17fbe547e9bed0c6bada802dee67a6de3179897d6b4e16eaf54ef2ef8eebba012bea95f58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06cdbb7047afc473_0

MD5 d85d60eaca22b05f49e12c53cc502d70
SHA1 554e1cb85733aae91cb5bc5ffdc1633d5dbbc771
SHA256 ae8ffe05f298d7a7ad6987045a9c8a5c604bdc4c3760a050c046cfec5bbc8f08
SHA512 f02947dd53831603db708f6d0226598d54e315eb11016137f546009ef6b79bb4984072b166926437933fcf8a1dbaeb2f1e45dda63de740da5bef6ec649f3633c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ed6a7879b600c52e_0

MD5 3fc386dbe8f02716e29d32b7d416f8cf
SHA1 e6e2e7aea74dc01af5f3635bf363b1de9708ccd2
SHA256 c768051b8906f08ecdd0ad8c36ff457c35a4fd4a0cb9f4ac1c98f390c2dfbfc1
SHA512 3894f0aebd00e441f3f8495fb262ab3449d9fcef5ade3402634080876ad6db4e5d56c3f196c193ad9fe165a05f6802cc2c06c134478d18601623083643679304

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9cb0af7cbb48cba7ae53b74f33f7db49
SHA1 56b25b5d1391b8b27347c8d23f5bed7b6c52c646
SHA256 05e56f6de1122dfc24975ad30947dd243a41942e798b27dbe821c7d6660dea72
SHA512 9377d90258e8a2f62d51406dee06e3dbcf5edd1dd139e6fee45a0937e2cca5422feef349a9c149746570307a9ae3034fbe628418f3984ec7c6bd04f011167f8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5 4ec9864683ca648d1ae38a48abe9a1f8
SHA1 f33b365e532d819f69f78003e8764a2bba21cb30
SHA256 2f0b260c467e2218c22d2ab1f8170d5f82de736c284744c9125db7991ec6c99e
SHA512 cd5794569f2beb6c237000ae0dc0f3b28304defbd29612c7ad4a21ac0a9b0134661ffc4e58064aad359f58d748a9b216f19479ea8ae7ed01f7b02ed628d74376

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5 5527f1ae5fe1a07a2b52a49f64ea3982
SHA1 66d261c4eae0d7ab99634aa08a4ac1fbad80c6f2
SHA256 522071d116393fb277a6ccd83b5f18d09869ab6e23ab38412ed31d5530cb8a44
SHA512 f21bf40e8b9494f6aec8f79ada0f1c1860890d7d5d39de2591a024124dd49dc567a3f37e9ca9843d479fe994d59b610fd0655e237e53d808bb3649a1a89f090e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

MD5 b912e8a3b38d977e68d172de13398ebf
SHA1 122b0b30562eccc6294f2aa7d502860087be0ce2
SHA256 9e7185ad986a8bd55777047de4f49a4fa8725df795de1d2ae14c09f70322554e
SHA512 a28e3a630babaf30280e5a720af9db24a65f4c5fae77ebe762eb2246b39b74aabda9b5030033f5975d634c900b91cf57b9e54f54155e21a41cab25a134e33d61

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

MD5 d4fe31e6a2aebc06b8d6e558c9141119
SHA1 bcdc4f0b431d4c8065a83bb736c56ff6494d0091
SHA256 c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec
SHA512 1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d1233e19f8503d3002e9dbb66aa30bdc
SHA1 cde0666fc2a87bcdc37edc77b36fd710b694ef2b
SHA256 a3381696a1fe2ee59dfdca607a265026f7595059411c24a152346d110fa76985
SHA512 ee383f05645a07164e612ebb5e8cc4b465c18f135943e4d3402888962cbdc2caa2f7e9b61d8a74428a316a0018ae0b2c2481f338759db545abc4572b43d53990

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 83385f46c54fb7dac37d55eb5e551d9f
SHA1 55975ce05d4ef342a7cce77c14b7d04a03ee3680
SHA256 e9dd6d0e02e04dfc3135cffdf4c02b839aa4bed15af0660936c5c75511af622b
SHA512 490d57cf82aade6da5b8c95a9a12f247b3b411dbeae271976a7cb8433b5885e5fdea7a3f904df0cd204c77beaadfd8129dacb5b42341525663c7c7dda407dd13

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 db517e92cea583a2ce29930551eb6a5c
SHA1 d8dd0e35216c3b452e1b9ac948c68e53c49009a7
SHA256 8e075f6c828f6bdbb88c91ce4de794c6d36b258da1e12d3c72594c6f685d0037
SHA512 bd9d2de1593177c552d255598c20c2b751498c6c17da0a6425702018fe406fa0ec4519470e955fa0b7c69d8654d07fddf81217a580b0f2c1e605537925c4832b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 05945b60f61a2c2907f7dd3d90122ba6
SHA1 1a29f3705ea89e99fc2307b1c00fb3ed7de9d941
SHA256 754d66bd09bdab687b6f23445ffb713deb1bf2cbd7e936083d74f38bea60ae37
SHA512 d485b6f06667b5e0f1e3b770f881c38c45daf164043537a3e800145a69f5e1aa492600f24d8e15f2d6089312c535616fdbf16decbb3e07b20c03d13118f68cc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6582ce0e95ca0872b7e1ad12780e2da9
SHA1 a517034b4b609daaa768dc9592704a0cd7833be5
SHA256 8c2d4a493ee5a16883e17884d19e75a12ffa4ce9ca2a766627bfdaea63669482
SHA512 f3f1b18fd221cee2c47f96c09c6fd6c5d55eb13de33c66296bbcd98507a2e23395f8f152725daa6279a3b2450bc4aaf2d8f5238f24d861d16843d1b4015fe95b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d3e2b856144d4fc2660367a1ad7e6e07
SHA1 2cf9b1e2620aa8ad619a6a2dbb7025d700124c13
SHA256 ff444d0ee59a0974380907684d29ba6aba8dfc18531f7e0ad863f17714e46bbc
SHA512 893db26c39292cb54c2d2597a708e249dbd88961fbebf22767f1788b41d4ea3c390f554fd057eb22ab5d6fdb9d4e0a6fa60b09b979c9af563f1e60602bb52c59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ca48a93ad44d634d0f22c16d8771e3de
SHA1 e4031f49ff06da570294f037f278e0126befb0f7
SHA256 8958ddabd896c823c703e21912d20e96f1c36dca5d97ea7465b05148d18328b2
SHA512 02a9aa1fe2db5bf0e4966a0e4d9c600ea5177208f00daddf8bfb3eec3d1b3a615177393c36f9f1d6019d2890ff6287db7faf9963abb87afcbde1adbeff59dfd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a3c940d44214869e14bef7418d4b74d7
SHA1 0a6132056637f0f6b3ef91b7ea447875a8e8cd5c
SHA256 f034bd51f6572fa87132a2ee85d88d1591888e996baf9a81ec981cce054cb84c
SHA512 3970681f549ca3d47002dc9e00bd9d4cfd90ed15c27ff54a10e07ba5964193736608e51808fadb5c42f0de91309c60db5a93e7465baba2aa0bbec7adfb2b9019

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 dd9d88e616a58767403392e4b554831f
SHA1 e08596b35a33ae70fefbf8c3e82d8f3a363b90d0
SHA256 cfc6d1687cb4091b15fd496aa3aada2cbc7a22f17b9439f2bccb7897633b4eb2
SHA512 8c9b42f693793a858017ef626bfdcc02058b76fd557ab80cf68ed05926938617cc88c3509a81843a2aa1ec3c52e7f291de4013e1bfb8430a3ecaa72afb9803d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 efdd6f510469cebc281bb4e3f6149f7a
SHA1 49f770a0c65416a452fbbff3a2cd9428daf9cf61
SHA256 72539d9297b12b9bd76db951f8ddeae7c82b101b97822ecf29c781ba8b5877cf
SHA512 ee05f23babe4aa986cb298501b08b4c42f4f97c06ea40deb992d0385b4acb6a3c3a719a912110d0ae91e7072f3ad16110d1b4cffd457918bf9f284563aeead7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 14c6dc2d03b01e29709b9984d69b4698
SHA1 a8d61608b9a888f39651dd1efd9c8ad94d625324
SHA256 a2a33178c32062e8cb3ac7b1c2c731d7f1a37f4a35edfaa28ac8712359cae15b
SHA512 d8431d967015537656eb472bbd8439799dee1a46540ffc92c877d6b251a7c22801294ed721ea80da8cfff570109e0b1d4a149546d6ac7b12334507d71aa04a30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 219d6c147d37f2c98a0bf53d6eb654e2
SHA1 24c363f2d40d1ea78aac8cb643ac55c0f0d1e14b
SHA256 4943936cf20e11c34b7c3dc313310da1537b5766e5bf28ba646fbb0ec1d45df1
SHA512 0656fe920e0997d6d55f67fe10807323d5edc583cd127f6b165577e7144983b8f42cc460b606e2b97723955366440662a0654623a9baeb11cae7e779f69bbaa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7b72aee91e2a8c4504eb5b32ac3c2eac
SHA1 f5faf94a906b110aaba9049bcfae87592c102ee4
SHA256 5553562c5ee522bb4c48b38d13927ad525306d4f070f91b792f38c2bd5363390
SHA512 365697b2ec6cb0f4c815aa2e7fce74c62142c9396228c81dfcb6ab1175e61897b9746beeed37df54445a56112f0fb30dccf83f681f20ab6e2322e535f23c7c1f