Malware Analysis Report

2025-03-14 21:54

Sample ID 250124-e5qyqszlgt
Target https://edpuzzle.com/assignments/678a8cbe1fec1c00423e28e1/watch
Tags
google discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://edpuzzle.com/assignments/678a8cbe1fec1c00423e28e1/watch was found to be: Known bad.

Malicious Activity Summary

google discovery phishing

Detected google phishing page

Legitimate hosting services abused for malware hosting/C2

Browser Information Discovery

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-01-24 04:31

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-01-24 04:31

Reported

2025-01-24 04:35

Platform

win10v2004-20241007-en

Max time kernel

211s

Max time network

213s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://edpuzzle.com/assignments/678a8cbe1fec1c00423e28e1/watch

Signatures

Detected google phishing page

phishing google

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1368 wrote to memory of 1456 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1456 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 5052 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 3936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 3936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1368 wrote to memory of 1460 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://edpuzzle.com/assignments/678a8cbe1fec1c00423e28e1/watch

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8236046f8,0x7ff823604708,0x7ff823604718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2740 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3628 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=1180 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6608 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2052,16575117421471016414,16991172507959926367,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4844 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x2fc 0x150

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 edpuzzle.com udp
GB 18.245.143.91:443 edpuzzle.com tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
US 3.166.49.74:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 91.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 74.49.166.3.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 222.74.101.95.in-addr.arpa udp
US 8.8.8.8:53 43.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 4.38.16.2.in-addr.arpa udp
US 8.8.8.8:53 libs.edpuzzle.com udp
US 8.8.8.8:53 assets.edpuzzle.com udp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.239.236.106:443 libs.edpuzzle.com tcp
GB 18.239.236.106:443 libs.edpuzzle.com tcp
GB 18.239.236.106:443 libs.edpuzzle.com tcp
US 8.8.8.8:53 14.242.165.18.in-addr.arpa udp
US 8.8.8.8:53 106.236.239.18.in-addr.arpa udp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 f14ab24c7503.us-east-1.sdk.awswaf.com udp
GB 108.138.233.101:443 f14ab24c7503.us-east-1.sdk.awswaf.com tcp
US 8.8.8.8:53 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com udp
GB 143.204.176.101:443 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com tcp
US 8.8.8.8:53 101.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 101.176.204.143.in-addr.arpa udp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
GB 18.165.242.14:443 assets.edpuzzle.com tcp
US 8.8.8.8:53 service.mtcaptcha.com udp
GB 18.165.227.94:443 service.mtcaptcha.com tcp
US 8.8.8.8:53 service2.mtcaptcha.com udp
IE 52.214.217.96:443 service2.mtcaptcha.com tcp
GB 143.204.176.101:443 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com tcp
US 8.8.8.8:53 96.217.214.52.in-addr.arpa udp
US 8.8.8.8:53 94.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 edpuzzle.imgix.net udp
US 151.101.130.208:443 edpuzzle.imgix.net tcp
US 151.101.130.208:443 edpuzzle.imgix.net tcp
US 8.8.8.8:53 accounts.google.com udp
BE 142.251.173.84:443 accounts.google.com tcp
BE 142.251.173.84:443 accounts.google.com udp
US 8.8.8.8:53 208.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 84.173.251.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.187.209:443 csp.withgoogle.com tcp
GB 142.250.187.209:443 csp.withgoogle.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 172.217.16.225:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 209.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 216.58.212.206:443 play.google.com tcp
GB 216.58.212.206:443 play.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 216.58.212.206:443 play.google.com udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 228.179.250.142.in-addr.arpa udp
GB 216.58.212.206:443 play.google.com udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.co.uk udp
BE 66.102.1.94:443 accounts.google.co.uk tcp
US 8.8.8.8:53 ssl.gstatic.com udp
US 8.8.8.8:53 94.1.102.66.in-addr.arpa udp
GB 142.250.178.3:443 ssl.gstatic.com tcp
GB 142.250.178.3:443 ssl.gstatic.com tcp
GB 142.250.178.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 8.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.youtubeeducation.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.201.110:443 www.youtube.com tcp
GB 216.58.212.238:443 www.youtube.com tcp
GB 216.58.212.238:443 www.youtube.com udp
GB 216.58.201.110:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 214.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.179.228:443 www.google.com udp
GB 142.250.178.10:443 jnn-pa.googleapis.com tcp
GB 142.250.178.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 browser-intake-datadoghq.com udp
US 3.233.158.25:443 browser-intake-datadoghq.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 25.158.233.3.in-addr.arpa udp
US 95.101.136.223:443 www.bing.com tcp
US 95.101.136.223:443 www.bing.com tcp
US 8.8.8.8:53 223.136.101.95.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
US 95.101.136.201:443 r.bing.com tcp
US 95.101.136.223:443 r.bing.com tcp
US 95.101.136.223:443 r.bing.com tcp
US 95.101.136.201:443 r.bing.com tcp
US 8.8.8.8:53 201.136.101.95.in-addr.arpa udp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 40.126.32.134:443 login.microsoftonline.com tcp
US 8.8.8.8:53 mail.google.com udp
GB 172.217.169.69:80 mail.google.com tcp
GB 172.217.169.69:80 mail.google.com tcp
GB 172.217.169.69:443 mail.google.com tcp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 69.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 73.31.126.40.in-addr.arpa udp
GB 142.250.179.228:443 www.google.com udp
US 8.8.8.8:53 lh3.google.com udp
GB 216.58.204.78:443 lh3.google.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
GB 172.217.16.225:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 ogads-pa.clients6.google.com udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 waa-pa.clients6.google.com udp
GB 142.250.180.10:443 ogads-pa.clients6.google.com tcp
GB 142.250.187.238:443 apis.google.com tcp
GB 142.250.178.10:443 waa-pa.clients6.google.com tcp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
GB 142.250.180.10:443 ogads-pa.clients6.google.com udp
GB 142.250.178.10:443 waa-pa.clients6.google.com udp
GB 142.250.187.238:443 apis.google.com udp
US 8.8.8.8:53 appsgrowthpromo-pa.clients6.google.com udp
US 8.8.8.8:53 addons-pa.clients6.google.com udp
GB 216.58.204.74:443 addons-pa.clients6.google.com tcp
GB 216.58.204.74:443 addons-pa.clients6.google.com udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 signaler-pa.clients6.google.com udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com tcp
US 8.8.8.8:53 peoplestackwebexperiments-pa.clients6.google.com udp
US 8.8.8.8:53 peoplestack-pa.clients6.google.com udp
GB 216.58.201.106:443 peoplestackwebexperiments-pa.clients6.google.com tcp
US 8.8.8.8:53 contacts.google.com udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
GB 142.250.187.238:443 contacts.google.com tcp
GB 216.58.201.106:443 peoplestackwebexperiments-pa.clients6.google.com udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 mail-ads.google.com udp
GB 142.250.187.197:443 mail-ads.google.com tcp
GB 142.250.187.197:443 mail-ads.google.com tcp
US 8.8.8.8:53 ogs.google.com udp
US 8.8.8.8:53 197.187.250.142.in-addr.arpa udp
GB 216.58.201.106:443 peoplestackwebexperiments-pa.clients6.google.com udp
GB 216.58.204.74:443 peoplestack-pa.clients6.google.com udp
GB 216.58.204.78:443 lh3.google.com udp
US 8.8.8.8:53 clients6.google.com udp
GB 142.250.180.14:443 clients6.google.com tcp
GB 142.250.180.14:443 clients6.google.com udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
GB 142.250.178.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
GB 142.250.187.209:443 csp.withgoogle.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.65.229:443 cdn.jsdelivr.net tcp
GB 142.250.187.214:443 i.ytimg.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 edpuzzle.com udp
GB 18.245.143.33:443 edpuzzle.com tcp
US 8.8.8.8:53 229.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 33.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 216.58.212.238:443 www.youtube.com udp
GB 142.250.178.10:443 addons-pa.clients6.google.com udp
GB 216.58.212.206:443 play.google.com udp
GB 142.250.178.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 thumbnails.edpuzzle.com udp
US 3.166.49.22:443 thumbnails.edpuzzle.com tcp
US 8.8.8.8:53 22.49.166.3.in-addr.arpa udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
GB 142.250.178.10:443 addons-pa.clients6.google.com udp
GB 216.58.212.206:443 play.google.com udp
US 8.8.8.8:53 libs.edpuzzle.com udp
US 8.8.8.8:53 assets.edpuzzle.com udp
GB 142.250.178.3:443 ssl.gstatic.com udp
GB 216.58.212.238:443 www.youtube.com udp
US 8.8.8.8:53 edpuzzle.com udp
GB 216.58.212.206:443 play.google.com udp
GB 142.250.178.3:443 ssl.gstatic.com udp
GB 142.250.178.10:443 addons-pa.clients6.google.com udp
US 8.8.8.8:53 video-streaming.edpuzzle.com udp
GB 54.192.137.109:443 video-streaming.edpuzzle.com tcp
US 8.8.8.8:53 thumbnails.edpuzzle.com udp
US 3.166.49.41:443 thumbnails.edpuzzle.com tcp
US 8.8.8.8:53 109.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 41.49.166.3.in-addr.arpa udp
US 8.8.8.8:53 libs.edpuzzle.com udp
US 8.8.8.8:53 assets.edpuzzle.com udp
GB 54.192.137.109:443 video-streaming.edpuzzle.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a0486d6f8406d852dd805b66ff467692
SHA1 77ba1f63142e86b21c951b808f4bc5d8ed89b571
SHA256 c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be
SHA512 065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

\??\pipe\LOCAL\crashpad_1368_DIRFCGGKJZQBUPMO

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 dc058ebc0f8181946a312f0be99ed79c
SHA1 0c6f376ed8f2d4c275336048c7c9ef9edf18bff0
SHA256 378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a
SHA512 36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 30333e2b86340444ecdf63b70fd58c46
SHA1 88d6a5c47c46ddd2401bca1a4d2b9fc4bf1a023e
SHA256 31e3a9641c968854a62f500f596a03f3be0c479f8a85c46471437fc3461486b4
SHA512 29d7c2b72e66687b212615990f28fcc7f33c72cd8141ba4f4963f53dca1763b0d6c6f9e91cdd57169b57780d54e27f070e618bed0ce4c90bc2f846e010a9b0cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2e601b880cdf1830af261d5d29cf94e6
SHA1 28a25966251925f98502e142daf1c8c3cabe8da5
SHA256 b20a506d80a611941b81e1991212a0acf879b1c3d49d57fbad6e77587e1d023b
SHA512 720cbaa098cf28c4a45ecd9c838279b9b86b01542fdc5023b6f10f0dbd11ac0d639fc080af89bf53d27d890838d163faa57faeef7fd52e3339c533bd74e84209

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 75fe7d8d584ed6257d06b6c34c7994e8
SHA1 5ce7a16dda49973cc717b181ea06bfb3dba03c33
SHA256 ccd84d4b822f1a5b18f5b08cca36930d31fac4c03a95499d11d631d8bd2cfb8b
SHA512 da871ebddb733ccf3daffb2809f0b59cb131768c378495fb15f7aaf1d24e2a67df2bdcde71f06e7f2819e9635d9582064a4e52640014a30f793f00251ca036d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f32a.TMP

MD5 95cb92d7e2a456785cc9c5d1e2935542
SHA1 589f57b4736c6842f84624d7772112cd3453c07c
SHA256 649a70ef4a286a9f28b29793297f457da223d2aadcca66c786df3a51fe42f1f8
SHA512 5cc9f11a4f3cb95a2fad0fbd5124885cf25139f0cfef4c170d4d08c0dd031212d9dbd81092d3bfd1d185d28085452b652e76ba6ebdb80f85faa9f8b9dcae137c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5ff709d932b4bf5cf908a5c891b6584d
SHA1 0548a0d9e50a72808397cee47165d50cb27750d0
SHA256 8c2306ab1d02a493d08c9247b597b965e85cecba494a8ba55c06d76e12c57c04
SHA512 e7c468ca196b746a7bfa7f0ac400170d26dfa763765a88a04c30bed046d19ec5721f7da05e55007d4d1d3727d6d18d31667dc81468f1ab65e26c9516ffb7625f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 075d3efee6a7bb8a93980840d71d4e52
SHA1 acb93a4ca06dcfeb361f66227fc698cec97c4186
SHA256 ffe005a898b604b5c5f0fb6b1a3fbf473594a2450d4b0d5ebaf1c68709004832
SHA512 d20988f9cf84ab5bc438aea7d0e4c4a7f1d4417cf3c7762243d57152fc206310168fcb22bc2cea379fd7b6ca93b55d3d8cfb14f733856ef3a5dcbde18ae59dec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 4e075fef575216a5be604ff489007bc4
SHA1 07be26bf727b123395be443a9245bd10da60ab12
SHA256 f2065536beaee87b9034834258cecb9b53a30f0c61efa4749583ff59c5e79b64
SHA512 7cf1df56abc2e10d8785f387a0df7cce9688c6c829c467d8a07e2edcf64d2ce38ad3bddae50cdfa4c81bdf009501ff4dda0dec9096c057ab5a452a0b2391c292

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9fef2fd8fc969c1168a56a8afc429c01
SHA1 2d2dbfb69d1ffd9a394d349733a9e9fc7776f7cf
SHA256 0b284f8d0df4a71bf5160e6a4abbf8a1cae83908911c4ec31ee90752e94f1eb6
SHA512 c2e96ef3bc2f39de1de5fe5ef1fe6cbecb4e73baa258a4f9cc281ef2822626968952efcef3afe03304e9c2665add96a1ab1c169b04fefc0d2822302ce6a12dbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 85f0f359fc9562c9dd2cc649bd8bdafd
SHA1 304588bfda58f896fb3f38391918905bcf22444d
SHA256 d6cfb081eeb2e88b41ba613acc383d0b4dec03d9f1cb98bfbdb939ee8139569b
SHA512 2df74814cacbebdbc667bc40f2753fa018d89af73c7210f19b55eeb9379660ef58a0be6b3ba5f09a6db7adf2d0073f521a720700833791c54f1cb6bcb9b8620c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d47a325f578ed7df8ccecb1d8600fcc6
SHA1 c04a0fb9fc58c709bdf066479cf9e9b4c8ecd421
SHA256 d61b97e4a801f5b6ddd39b3fff3d7ebda84b39541fb4e18bf8781388c7a17855
SHA512 d35b27505948f015af00a7299408c7921d295830e87a89f627e9dd6cca5918e6c71a36ce694856fae9edd0621d0cd883fd03227d53384e65329308b2968d134f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 38e6776cea7198de46c0115618764d54
SHA1 5f5d95a15b9d5899fc502b5e7002260524bc008f
SHA256 a6366f07b961c72bb2a7143bf0406723b58e74115d05fc533f422edd1869efc7
SHA512 01c0c8bc97c3cfc32b7d7822cf385e98ce1ec734036012eb45fe26968249bb794da7527a2830441a5f0fad1329204c4eafc83e2889167b150fdcb450cc6654c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 a521b1cb13da6d1d40f133104f53eb52
SHA1 f9a5dea92d6fb6ce2c713847b079067263dd2364
SHA256 901cc2f7882a813a90203142c4bcb1b98069a411a996cc142e261b9cde1ffbad
SHA512 8dc9818994b73e601e76fb9d7037d2c18659d99bc39e4202cc3fe26fa064431d003f0cde10d8cb3ee3828557169057f9cbe16e1e82656c5540aed17874ac31d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt.tmp

MD5 5b9922649ad05ce2b6d3e3971d10d311
SHA1 eb503071edcbe47293214b913d8e2c3555b0df2c
SHA256 bc5dbcad099e8c115dfde395b4c53309244b4488a900bb77638c2141d87bfd57
SHA512 579a0ea287c2b2f91b1d39b9da2f8c21658d82ee3ef1650901dd15a45505e52216cbf89d34759be8f9dd186de1196f87a50366d59ba3292d55e5b0f60cc3d5cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

MD5 7ed68b71f0bf5f0c141821875e5a3a42
SHA1 13e189e20f829644010271f1a48451c64ce39b0b
SHA256 1aee68c2ca3f9b6a48a85de53cb3c9e04491872f9d6bb31860917c66b2461ec9
SHA512 085eef9cdf50025a4c7ad4b3ac981f77bcd174b50e3ea76346f50edbca224175ce167acd83f592dfdcc8291b9f6a128dac9ffe57422fb4ff90e346301df4a207

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\3864d596-935b-4379-b4d0-36f598d9f2da\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 afddcaf1741f18bbebea2f3f5e07d19f
SHA1 7d75b2f50d939d6137bd298b2e94e31323799011
SHA256 056f26d3c7e8632058ba04f7c371600cec34fcc2c028b734cb6bba3db200a4e4
SHA512 13cf8018d744fe920ae01d8510e6e84722bc2e25eec8a67a95acf4834cf6aca2c6bbd7b7df106d94ead3d57d208defdcde291d89172ff030693bcfc896bfb5bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 fcf4aabfcabef7f413becf70ed74b071
SHA1 420ea0e8e86af0c4178b534500b3cf8abd3c3939
SHA256 0f0ce6072f71e6a7690d1a851f2eacdf4dd38b0e5b32e6d47c48b4089afc737c
SHA512 527ee6870563a7e3947bb9b460cc50e33c6a857c65fe77a2e9bda67af6aae7870234acee2be509d2fa386449d773889d23b64ef68db36f2ec240fb76805c6039

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 89759fa3b5fb7061d0485af2578d7873
SHA1 b3bfdd3b6152c063d96b9c559112ea8f151b9ab8
SHA256 bc31fcb89a9d15d9b1a9401903aec6104caba3e7dbdbfff6ff74a08bbaa747ad
SHA512 2bc4868ed4570861f0039422a45209336706d5be8be277e3e465eeab98d7d518f5fffa643e44ba57231a7505374f6501f7387eadca582e5e09989a1a47016c48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 768d832dac9357cd7d5a7d47828e0b60
SHA1 52eb2938020de9e18dd68d67f43b9d7dc3d15dd8
SHA256 a4902c517c612f61e135a7cc1660f09b5a60964ba247a47725d387b704b8e41a
SHA512 5f5bd4f74fb819ee04a23dfa305ec333d341b2af35ebaa0e5a8bcf3aac98e799fc89d41c3b8ef62a23bbf70883715967a47c1bdd94ed92a7b77f7ab3df82f1a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 995cd74225ac05ca1c6a4f36ca39bfe8
SHA1 e3858c507ce60fa50df6616d12e5b9248ddc5e5c
SHA256 c66c9fc525909d0354af61707c7a3e1eb4a14fc4cee12954383d01149a5e7421
SHA512 532399d14efa29ed6ccc5ccf6d5e5d71097b1a68f184fec5c2ede5ce265902965366f2c8bc2c3454e72dbe2eb15a10dac19cf99781d207386605d5f2adb28025

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

MD5 ec1b7fb6355e9f71dde6582c8980a9d3
SHA1 fdd6581fac750b8c1fba57fdf78a63a9611409c9
SHA256 75b37fcb1d84801dd2b561d00cfd28db777769c0ed6524a9f5a427c66b07f591
SHA512 ccaa63176bf95f159a1e8584dedf87962c96d2693d6798356032043a528bb6beb89fd2ad71fbc06414245b0783e0bd6001b592431d78203655c59720c6f398c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks~RFe58a9b8.TMP

MD5 129c10329bcc69f7760ede89476a21fa
SHA1 eb99e5bc1c0b449dfd60197159c5c0d446a9cc01
SHA256 f68d2053b3bf79fe4e4e6df44ea8a2ed0aca1e6edae647377919daab5f5da872
SHA512 77f60602b67560abf52b802a59292fb393af5d867b95a54934bd2e0bb2056d3e5c0598bb17f7c38c5c41c6157c476714239df31eee0937ea45053a1c2a7fc734

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c70ceac57dbf3797d33f801d2c73ee32
SHA1 577fcf0fccb3e18f2d59c1ef9a8f9d37fb716fb7
SHA256 bd99b7c1801d5f720191d047737c48488ba48c615da9c15c1e80cbc48215cd0b
SHA512 e39630c2dbfd76c402917fcd5214084abf54dad4a28271aa96afae4124c6e8d1ee2120572bfff85d341317bc54722b2136097700ab130444314aa27ff4614fc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f37209497dce68ec7a835e69ebfbdb78
SHA1 fccab7637db4dd2237e0d45b35a8bd71534af134
SHA256 cfdc4dc0d8b64586b0946b201c2250bf34fb08e0a0ec9e3073b98e82d21b0036
SHA512 0b7457a437483e3c45afdf7dfb0d68d34fe13478ab5a479c665866fbeeca7d26b1821c943b6e51641d5f767fcfe68d6b106d61bc26108664deb00e189395292c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 4261ce0bfb5ca7e2128cb6ff7f37f13b
SHA1 bf63901c4870339a1b8af1bc8bfff4ab6969e57d
SHA256 ec3ab4512ba7b8355882b532daa0b2b2767298a909e94487ce31e8e065fd4af5
SHA512 b4a3ec20b1dcbcdd14d0b0d25e2c01ec2e8651a31cfa22c03d06eeed4253db9caa76fdfa755a00b4ff82d1d21f1de6268d1c15b805682e113123a0c16029c6f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cabd.TMP

MD5 9d8e922cfbe3fb43312b0f50f79aaf2f
SHA1 6df7a63c13da4a966a3dedc18ec48d982952b18b
SHA256 da4c8e463f1fc2708d7c80a7bfc350838a4c690841bea546c7aa7acc685e2d45
SHA512 1b2982f0bb49f8be2f7d03684848cdcf388c6edebeb712aeef63419d9774771ce5f57ed4d3558c22010efc1fdc13ba95702bbb8d9350c8e927a4a2983e512208

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\137e819b-5b57-4949-ab82-01ced3b168cf\index-dir\the-real-index

MD5 4a185bf2be09fd58a93c4605e141eaba
SHA1 eb5fa982976243d7cdc50ef9b06852eda07b018a
SHA256 442dc87cb4a4129259f50ed425062179795c57b737d30148ff2fa35657836b7e
SHA512 06cfbfd19892795fa9642a0b0bb2657384aba0b1818342f406603f9589b111020409d5ad474b457060b0c1bda8dc673c4f5c7c9868335422d8c549d34d4a28d3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\137e819b-5b57-4949-ab82-01ced3b168cf\index-dir\the-real-index~RFe58cd3e.TMP

MD5 cde636f1c9137eaac73cfacbf50eb214
SHA1 c6020f26d6fdcd49edec8308603869bf72e46ae5
SHA256 dc3096ae7fe05d725394e0efedf280a9ed5da9fa5498e0b0d1dcf1c6603f7d02
SHA512 054f04cf0bf4f287872b79e947b8a9cbe1a141c392af797e772ec10e44a814c2d3f9ed0d2742875c914fb2c981da6b7eb0d5d83dd812add336e9745c1e86e731

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\1db69d38-d352-4c9e-a23a-4e3fc343f3ad\index-dir\the-real-index~RFe58cf32.TMP

MD5 54c9ad5df7fa6c267da8853cce51ec7d
SHA1 3ec20777d78b1a90edc67890d79cc3017d1aa99a
SHA256 8840d0f183475907751c386da31e6b0243aab809b3f9bd20438991693e0c9118
SHA512 c2e74c1ad084dc78b3e565b39a14b0eaec52642f5506a36ce6220e08b16ce93ecd43e6b93b0495f03dbc911dfe48e66a5084f40d282318727d330be7c3494f67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\1db69d38-d352-4c9e-a23a-4e3fc343f3ad\index-dir\the-real-index

MD5 e24b7ff1f27ac407eb3aa854b9f5e575
SHA1 d013864b161c11011b29beec06d3e4cb15638836
SHA256 dd37fe03dd261283210ec5541c35273350d80a73c8d6b4d3a7f6624091c6c258
SHA512 d86329df66f6f4f84fbe910e772c36193c1189f08a4628c992521c2cb85ec8e4bdb1b97101b8f42afd25a72118bab099c82fd793f31e48bff703f60ed3e73d27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\3864d596-935b-4379-b4d0-36f598d9f2da\index-dir\the-real-index

MD5 431fa032521623fb4431a9ec68237a29
SHA1 a32440f481a0f8a574c104ee1420358f27c8df0c
SHA256 b4d734ef0030d67281350231b73308bcd5eb166e0f140ebabc3fbe4694f0d2db
SHA512 6276fa78fe33fa5420c277485817288ac28d93ef31ef5c5ddbfe968e85e04370a8d0b91085c9a80b714bddfb06a17ce0940ee6cd63b276f55f8c88d60c8b04ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\3864d596-935b-4379-b4d0-36f598d9f2da\index-dir\the-real-index~RFe58cf42.TMP

MD5 c54de4a466cfed575adc8c81be486b70
SHA1 19f65d58cf7aa7c852cf03b322a14de47c0a5c0f
SHA256 7535c2df03e74e3f0cc1975034373bdb6eeb92068f7b5594fe2b7d7fdeb9aad0
SHA512 6cc0d882462caf0b9d241dab1684bb8029a44e830ed06861e6461f19d213f132d2cc4c30f97fde52080933b08ae3fc8fb89f21f02ddb65d016920e72fc6fb3d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 05adaa694d9512e10aa62453bb198564
SHA1 86177df9e237eb3526221b7d02098c3fa4b914c2
SHA256 017b1c23a4e0eb447e7057cf01ac52aafc93ac02a9567e5bd08ccd104266afe8
SHA512 59cf0dfff3081bc385b4964e49e7f2d2423600ef90b2750e290f1b833de3b4b3c4d827d71881cd660704b34b202c9ee87eed62243a2c74e352015f55d942927a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 42a51170561044c14e6d6535fee3a78d
SHA1 389eaba46a7634f1fd7a609891031d5463cc8976
SHA256 a22d07914edb715515001b539c35bf3c777672e002c4e7eaf6b4500e85a4ac69
SHA512 e4eb4260d348680b8c654a7c7878c797f25e69659d7a4b7a7071c3020f58952b335b93222c489dbdce4f2f596f1d4971a762486cf6d6b23a08c73efec0e32a53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 32a59168b272aeea3fd75fc259e9a738
SHA1 b199e8c5147d01e771d95fa3fc5127e941b865a6
SHA256 7858e9c7432bb08f6dd5c0acc6c27c386b7d645dab0d00124c9dce93b5f1dd15
SHA512 5f6cf191f098fc004a64e56214cefb08ccefdc64b8d1cccf79caed7fe43458a4cafb279f7eab220b77ca2bb750068a132bdad45f5ad14ae50c0dd022b1fdc5a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b969d2a2456657a0e3401eec93833890
SHA1 da4d4c91d90bd4e5078da3e6710102dd5152499d
SHA256 ea844e8853179cc54a023f9857099d3a304e92963dcde1f5c2e0313681cb53b0
SHA512 c7866268d27b187b82a0aaf1771651436a39464a10a77631d3ad9f73133789e723e1f5879dce6a68d24e209d1f2a1613215a7fe16605565ea9641643b28061f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 0b33ed68c1f7f49740ec6ad6a92916aa
SHA1 a90f902cacf1ddbeee5a1e68b9066fa033f3e179
SHA256 70d79bbd6e22f7efcb455d9206379495c4521542c3dcc0268f7257f6ed4f8f56
SHA512 72eaec3512c743567fd5636c015e0ba2634d05b6170fe6cda589a8f9aa49fadf9430cc0892f2f084f313df9f9ea34e05276d43881eb2c06a3a6405098722c3ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a21326caf6eb2d1218f6afe6d02807ac
SHA1 ac8546e149fac1fcfa441a679ce3b86be3555e4e
SHA256 9a896bb6caefcda7bffe2265cedf4e52b5d49d042528f82a9a2252833309a639
SHA512 7d855fb9886a292dd9a3292b320ae0e5187285e8848395758434107ec264b68e79500b573eb2baff2c5ba79bfe07accf0bb1a669beb3f80b71e1e45c60053beb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd682a9c-2d2d-4888-a4da-02b3b5b29450.tmp

MD5 a6844004e4780c0041b7723ec6f0eff2
SHA1 471ebc5d94040630c4570bda5c3c0a66c0c7298f
SHA256 fc92a0b736fdee18e238d24482955b81b104b03a56c782d16a6bbb247ebf7907
SHA512 e13ca92af8e8912aecf78a7ef315fb0dd702cf2113314df8763e1394696882fb997e84bda0ef4ed1c6ddb1babe653fe464c57dd7fa74fcb5cbab2fb1eda5ebe8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\b9354a23-1623-465d-9305-9f1a4f0a2acf\index-dir\the-real-index~RFe59458b.TMP

MD5 f732f1a6c320242ba24c551390d49907
SHA1 36c7d41829d1e26ea09805bef6f77b522b9cc77b
SHA256 7c3a89b63ed878d3f937f4202a442525b4f066e704518af03f1a59062f08335d
SHA512 adb887cfda7ffa2d95a0b1c4b79009c297f0d661d7322a997746e87ed14dd2a2116a241ce1a5344839352c184ba8bb85d976e5ebd04c44b65e8cf9997347c63e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\b9354a23-1623-465d-9305-9f1a4f0a2acf\index-dir\the-real-index

MD5 79f0cbfa383bbae80e6792f949abeabb
SHA1 ce4ed307ae228690e7ec3fe6173df42f86ead64a
SHA256 466324eb261c539d9d3a541d0c1be7bd0816fdf6f36f4e82d31b228c6fd38251
SHA512 577c3732a44066e1df40f5ed5c9e78b2ae6cf7915fd235781d19411b1508ff09a294530a93efba0aeac83bfa8ef95a6ed4825bb7dde7332101bf1a0034a3037d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 868bae9273bf86211646581cfed043be
SHA1 bb2eb72abee5f82382480b13d3e780e30c541813
SHA256 4f90c880d16e5996eaae6d4a93821bb01d974155c4765693c5add9a5189410d1
SHA512 a6810387b63291d7db275c708cb63c5d1dbc78b8ffd7c293aa144a1c00b4ea7124522221e51364bf39245e5165d230579dfda73d46d18ab45e93d2169856f6ae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9ce3e2532e0982ad17ebfe8969f5d37
SHA1 0b8c66f8d04e3fa3aaa7daa1792c26befab7646b
SHA256 8dbe0783e8eb5f8ec0c80acdea02f7985560605cc244fbd1428c6e975ef5c3f1
SHA512 a83d8880f90eed4fe2b99d87cc7a958ffab01f9ddc5bc7f71b524d1f9ca3857a1dea646b47d9aee4128f36ce6aa209dcccdca1af4df5cc5a3212e8c0d1ca861b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1868cdb8a4973138eb61d23d9942111d
SHA1 d2788b78a16e94c2d7c23cfc63fb6922bff474ce
SHA256 c615624fc07b1904333ee07aaa35908418d741cfd0a2ae6eb54c0afc93bb846d
SHA512 f87c184f2c6844482ddc1c1674a5af44a9f4d692b427c6a54275640e63e7a7ea298bb5be702d673dfb8a0c4fc20aeba676d3b8ad0cca51c72a8dbfec181afa22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 da6e34fae9b3ddef29ffcbbb0912d6fe
SHA1 2a5d74cae10d2a5ec12d5b6dbf042bfbaafd9336
SHA256 5c9383ba24395c1c8b5f9ae51d4290a98e4a6f3910d2c71d91399e7c4c5ae661
SHA512 1eed354367473e403f8ad55e8527b6ffe10646a436abd6b3c81cd1bd17107465bdddfb8a5507ba43904054f03678096780063f254619ac76f5a0c0839867ab4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 dd159d8b866a99aa27cb7974ecf588c1
SHA1 0a65c5b161fb9a5bb30afefce57a49434d9df055
SHA256 6053faf61bf2b7fd58affa317018b60da20ca96de48db88f390494a06f2fc0cf
SHA512 1da467a6646176531c1a573532ead23875c11a71eb4cfe74a2daacc400d6476ecf6307935de0eaf51b54dc6df534540ee571f3e5df4def7dfb68b651e7f9320c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 fbd295b721ad3d5804bdb2a278eea75b
SHA1 a3a9b097f14b9fdf4174d16c249764fc4a4778d0
SHA256 d6ec901270bc92b63f7e074e112541f2eac59e1e8e2fc05c7e8314281b621f7d
SHA512 73e54ed80d1867d318a5cbb6bd552b5ef58dd4cc8a45233796dbd9f5c44f02040761733b0968ffc6d322727f3f16001b943ae124e097904e1a22d5405ba70421

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 a746be238f799d92f7812803514b2bb2
SHA1 6ca3b4c9beb60f4fdfab55f722c075f172683c2c
SHA256 43c979a30ed098a804404f04b2a4dfbe542e8baeb8ffa65f740b4af4047e786c
SHA512 f0bcfc6553edf4ec80dd000578228d6171afdefba64f4d738bc21ce5c6eaff05f950a1e6510699f427cccc72d11c702e55a915a887e90b1738f5441aa3f3bf69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\LOG.old

MD5 0140578705a8daa8f77c54ab4e149571
SHA1 b092ee9e353207e459032c2ebf5065f5f75f1637
SHA256 1642d629f547eff1a2b9efbd97dd2721a90ca11e7e31a4629bb5ef8601e11467
SHA512 b7f0d28f48cf223ab8bbc32549dfae30435beb07f0137955ba5a11de3ebd7ab726fb7e614e5bff232b2601e493b888a41dc786a152738ea9b5eb7a0740d92776

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\LOG.old~RFe59939b.TMP

MD5 f93c695b00d5ad4f04379b49b9fec2af
SHA1 be7b3ae9ee666b83b37a07e8b3ca2b78e5d65937
SHA256 5f1b0390fdb6d7264f3514b076a8008df553c6adc09f94f356e9c11028bfed81
SHA512 c0ee1222991e0a60efb18896ff8637cd667f0a08d01d8e4516ab04149c6e3abeff471b2b567cbb75c34a5e37416aa3efd9be52a072b2593e111aad129d349649

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 7370365b7e016e55b5ddce73697b53e5
SHA1 a47e84f657f452226887625aecc6203319f2d3aa
SHA256 d925c2ebd0aa85b8927310c228106cd13a8e48cf18e80ce5e964c3014a314ff3
SHA512 95afca9e0054a5a1902a0cc4cf3adb68a39c62dbbe832dfe3bd5e8f62bf3e151d3eecbe5e5faac88bf8b8b8085a306437f45af2a381801efd271871b0e0000a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 003dc2fbdda5f941e79111b57f56069e
SHA1 59ae8ba8fc0f3f4435f8bd383cc2820f4a0db3f1
SHA256 556d16c64810be0285c4503aa0ea6f834292661d31965de62d16133bc6f9bb3f
SHA512 6c3eae2b981857a0d51dfb2a1b69be24db70124f2cf81e4afe24f230617ef0b60f134a58373141c72d59e350ee78d20f88c56d9734fe61a92a02094017e8e0c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 558712fda722612ec9b384e774c4b796
SHA1 686bd7d968eb2e5a2d14e61225d904a71cb142b8
SHA256 bb5c33bdb24cbd7f196d0ce8f3bd7ea8c30b46a54c56180c25ab92141d54bcba
SHA512 e1dc701c7d1a439be5f68df691303106900957d706b74a6d2691d4c0933b61c09f80d27e51645a39b5d945398d6eece352766cb6e795b7dc971d52a735b35ef9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 29e5c4ac7faa171f12af2b523c318952
SHA1 9c19c6203780564bf446622983911b9fc93868d8
SHA256 b67ea16766060efd30d7f0da14be0c894a17b8055c96bb4566cd77721dd307d3
SHA512 87b9e5fb1cfcc200e534ce0da8a10ce05d4d908452d7b33dfae270206c2ea3cbc6a88978061b8229dc6358420d9bec72ad48cd0a72b9742ae1334b23fb04c85f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 187793087cc5374b7ca407b4f7883596
SHA1 ac05448688560491060fb0e44fea7b91957d213d
SHA256 c43495fb89ef6731f2b5626a7b0bf79fe31189e3a4dfca787e5a87ca165262fb
SHA512 9851380922926f3a832b873f8ee5e3ceb48de33c27a79fcc2c1e5dad647a866c461f93da93713ee119c197e4c1f2f3f57a956edbacecaead096b4b1fa3b19214

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 661aa785e54cc0638e281690d8796304
SHA1 5e6e4701486869b29e4f922353b6e0fff8d79f5e
SHA256 0acbd3b180f4c70867c526e961ad386cac756bc7ab14dad11464c964b6daa845
SHA512 912ddfd61c3410d99fb7382ab027ee564f80e148ff414c0335a333c027b23fabf38238bf82ee10adda11d108e5f01baaad0a9c59b3e4ff95d1dc6bf8adaa47db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 ed839d6d933bff990da28bda7998fdb1
SHA1 b6af66e66582155ac2f5972b95c7f4c77d4c3ad3
SHA256 cb69b7d8d20d03caebe719fd03abd371565ad996a45fee357c3f7a8f92d4f35d
SHA512 335a2a255722a4af81a40a59fb818f4898efa2ea98f7103c862685c2b092b44de01247145d28feec18ddce6dd1bc897072f43d8b0a8a140a5bc7bd8429ed71c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 8ce25609d6b553073592ecd479730f55
SHA1 49dd3ad6377b4a58cb4ebfd22d71060cf4a992bf
SHA256 d9de178c5d60b75e60613150f05bb87f07e7ff11d4d3f806c31ad89ce28b2239
SHA512 8c7bdb37fcfa934e0e99c40c17dc20493e9f8a560fc0c9866b2969dfbb46a6d17a894afd0ab2966080123ee3825eff32d0a812c6eead738b5f57d2453963fa4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 12fa824b9c3403471e6d8c97b3be5a87
SHA1 f997c33a13ef5cb1522da33b5b130de892079305
SHA256 98fabf1c2cb968d5716fd790b6e9d730a0d46b6ffb5694e9334bc41e794b274c
SHA512 0e13a1a37bc81f3d16f64bfea15e04b6d9efdd60a6f999f043afa02a1a29014964e191c0e0c185a58bcb2b57788f142db34d33885b1ce9290df3e3206bf41b9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\000003.log

MD5 24b847421e71c27138b9035045d414ee
SHA1 09f3b5edc363de137a4186d3be59d260a8b8b937
SHA256 add8e5e09c5b91ced037ef8719f759e2f60d690fc0fa03702219d03d91e199b0
SHA512 261a66cfaa00a5e126253573333716306c90f4f0f6822583dc16e7f6739f8c31bc3d191d1df47e0d47947f6023303ddc8e88964fecabf56e0c997ad861fe6811

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a0931d04e23ba4546fa0690f20db7bb9
SHA1 c8356186e8c872a8ffc9ee50cecffb69d38b7b13
SHA256 e633f3216fdd0d1d6339f9ff68eb49aeb2fbf8b24c6c533283b7f98c78e283d6
SHA512 f3b216aa984e219085629768d531a2e5bb01d769999aec5c04dc067dd95d0ce00a7fda86ac5beedd54d5e4c9ee98326e76429f83af4063f8b8060566656dd8c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 f51b446a7efbe4d164b3e9ac687a2622
SHA1 182af318b62b78aa0d3c64a2da27819207b5ab1b
SHA256 60ce04e4f0e3ded1c9497ae4f0518e25794d2b5ce0fc0ab67617a89a0e30689a
SHA512 02ad684004a69ddd5445ea0f6e2a3fc8228b5b456816aa84a6884f5d8be28b8e5593da37695547d9fe41480709436d7c04111b9f3d538c4915050045c0c8e837

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\LOG.old

MD5 b604a0d124e70e7e8d757a84684efee2
SHA1 11bcfafd3cf2fe02c1d88a9ac7fd9a00a0c3adaa
SHA256 dd251060937a7a93afaeb05cd0a4f85af0fdddea6c8c3ee1a615c7ababd37674
SHA512 b52109629163b365e2db309d2b2eae992ba8e7e22f48421e1046ccbbad0b99d6a9701ea3e386f96a5bd5804e1c241ffdf86a24b5dbb71d087e045c370ee2eb96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 82c053b7746dd3fec664f0545a41f86d
SHA1 3cd23936c4f4a417c66b0067dc7260ad2931e1a9
SHA256 8904c805a22f142415954bb8513f1a564f343db3e143fca4076e300042ab881f
SHA512 2d8df224ccf4865211696e853a02ebb5d6b060754f7cb4a576f15648eb8b0532636ce788a34173432002d39e9b39f2d11a046e060fa47d64e0341bc4a01347a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 fcbbd69716af4caeff277fa835b775b5
SHA1 0f8787562ec96148a34f8c62ea7324c2e0fb1553
SHA256 7505b034abccdcb3eac3177bc1e07684e7c97feee722f67f2effdbe29d1158e1
SHA512 075b3aec20af5933a21b4cbd739fe9fec4c25347b48fcbd94a29907af72972a705d5b8d5da28bd06f5d09578093a86397e0f624cea375f2f097b0b11e9210055

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\LOG.old

MD5 9dcfd2f5981f8921772d791c965e8916
SHA1 87f0c8dbc46b2757cbd507e2eabe2137169b5538
SHA256 8b6091ee21b8220cbca0063d3e48d8652a320cf3f64c1e56f753583261303cb0
SHA512 8e688a61da2874f96e3594c184e78e0c41c8f3e7f6f38b688e05c62d9df16608baed04fd6b287ed0be1738d2751d83500bd782bbe1001f31e4d902d6ae1db559

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b5abf8d8cb67ae53e1dd826da479a17d
SHA1 acf52d02c4305936ae70be5602cd9fb6517df42d
SHA256 0f88344aee2ec596aeaf2a9562941c4bb386ca468262db4f2d7ab5f8a5a4fc75
SHA512 cb0ca9c634f8ca089e7656b238eee8d389143d66f87bae4fd4fd69e646b5403d46a329cac547c7b6de0e0d42783f450760f6479fce98efd391e56f18772801dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8e9327db162b6872ed702cea3334e5cd
SHA1 75263245d023c0965e3064873904b8743027e08d
SHA256 8778aebfce101f2e959cf97c99319006464f8f56bb2ff96d4337b30169d4fe20
SHA512 0cdaa5d74f5d405564b1e7593525d4c80791d0051f5303bc30cc2ac6fa5627a008cabfe00224b4f36c7f9c3f31569e732ef7fc6a358502ed3c596ba386eb79c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 22fda8ad279201b5ad22f8fefd2f4aaa
SHA1 d41bb00bcf2dac49efdb165f468a0416af9ff94c
SHA256 0d4c76458bf4aa226feffbbf3336a85e75c4d380e13f4b5fbba1b852d74f3031
SHA512 1d349cc8ca1663885a9ee69ee1207f0e69dae2b39c9deea872016acef617554a6a2f86ef231f8623c0d139145a014af2f19fec20075427ee3bf7f1c69663d301

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2bf40ad85d7e0a4_0

MD5 e1cc89e1a4f1e54eb0f957ad439c14b4
SHA1 fa7b05793baa7d2a7b8187e4da6af0a32c0021cb
SHA256 aa6e0afb409b0d4ca5e434915c34392c33a56f9f591be7d7c4f8d16d57fce12f
SHA512 79945561ccbc2c37880b1402d997fc6f70fef11a025637c499ca7cc9447cd9aa994a434aba4cac0dd640fd505ca7dab6ed9fbf668b7652b60b2edd1583e6934e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\389fab836314801e_0

MD5 baa7266ee653631a47a68f8dcc3f5c80
SHA1 5a2f0cb5f6cae9507e5e74a385657d8f87f5d29f
SHA256 bf68ac99839ecdb425a034a0e72048db7a5d24e6226add59720c5aacee65a283
SHA512 6b4f63a15b3be0c049c579a64b9476e6ca857c3e36efb5d0c6a2479607ad57c87749c2122b8bfc4026100e7dde6ef5852c6a71c582720ea5091a429b32578519

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c492468491845db_0

MD5 9bf1f79345675399541b4c432faac564
SHA1 ad634c1f577898c05ca32f2a2ce851b3b14dae92
SHA256 781f9486fccc824f1004e6fcd586d49a4d8b84cff6e65ae0af6e855bf7488b0a
SHA512 1ee9a24cf8d32d7046b357385b3e47db0641ceb153f465edbc5602e20310f76bd7593385b7eff751d927e345c0dda1fd5d5965916aee803454cd44392e6f0d63

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\efc14f21969760f9_0

MD5 6f69b59978ded6ec800257b8305e4a2c
SHA1 fdff6487164aa550a174e0c8aa610dda4c8159a0
SHA256 5718ae7c458c77752f2eedcddc4d0d7576786566593c14e027a8986ecf156324
SHA512 fd481b607cba79a33f1ae28c3666c2591b8cb6908c330f5ac2514bbb8f9f0059fb1ece21ab6a55f92b321139bca42005733ba87b365fb92adad3a160b4af551b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5249a7ddcca83b71_0

MD5 93af914c0de3802f9d2a37a82a3bdec0
SHA1 1376225efc2084c42a76a9b3537fbef048193e00
SHA256 74e0bbec351723f3f8ec12eddbe8f28782f1bb6f70e3007d461bcab515f546af
SHA512 437e08c90ff2ab457c5be2518dda5bbbd8e594d1f59d8e0415e6a9eb529b837f14ebb81fc8274fb90a6b9d39cdc9b8edcafa1fb625582652ba5cfd710a6017cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\LOG.old

MD5 49b2f48b576b5eb9200b632da33ae95a
SHA1 3417d77e1699924c36685e8f6d6d29a1da4c0266
SHA256 510b8b97e7afd52db29435ca2599ecdaee5ad2c3376b1de44d50927bde8507ea
SHA512 6b312d06ab4ebd356180e0da271a931c103eee6e616519b4d9211acd59aa0091d732dc8cb2e04abdab89a6afc11cf38aaf89629dbd5dd25ffc4c90626f01d0bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 3eed89b3be0026cc8ab5d6c2905e5b0c
SHA1 ed901fed27694481ba649820688c81cdec9be3f9
SHA256 aff395356719ff810ff8b265ffaa57ed4b884b6d34f2962b3dc58f45f820c482
SHA512 7db4d312dab6d5880285fc358e7b850ccff5ddd084e8fbc55a106f92bcd9d14a3fa4411ee66b55837689cfd2f1a4bcb8c74b26675f25fcd08cbcafe66fadc07d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8296f3925c9eada3_0

MD5 09ff01f9eea9ae6c026f4abdd3ec9e26
SHA1 b9afe707cf6cf7541bcf4c75dc90055eba377924
SHA256 b4427df877cd5b414e2bd3b9a2ef283e61b4ba001e62a6548c85a5768c364430
SHA512 c472238a2534d107c7d6d91abd67cc9eb0cca1fb109445e31a1faf26e19f83b9b1c9ad5a01db846a96d8f90e443c3f3e7bebf3bc5f3ae7ad1455dc05b14c422c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d560321230201244e6224ea7d2d36290
SHA1 37573d3263905c6909f62f8649f9895cda9aba89
SHA256 de42fd8d6f2d68d11c412dfb067bab31ff508900df8dc314444668ca945e2f3c
SHA512 4a720d9be5ed856a3e4121c9c15a5666e00e260a5dbce38058e4106453152b5aef2f2427bac8d309f66c14a9fdad867e5921181081da6ca5a05857b638c3a90d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6c12cde66b09520724a42d754dafef3a
SHA1 fd44a24f8f4cc7f15eb3ea91feee2f8be266f0e7
SHA256 d09a5abebd60f89b35b8294185f8f9b3489d3aef5ebdd41500eb52b9058fcffe
SHA512 bd3faa8ab828a43ca0a25f795553f955b0848abac1e369db7f0800b2f712ae995e071a2db4f9577b592bd26fceb017ea295f05dfc3052dc3e005cf7b9d6c08ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7f118cd5948ab305d52a1b172ccbaf25
SHA1 36752499ae4821308a46d1ea27ca15313bde6710
SHA256 1a677f1b4f6285c10268931b32b580eebe8fcf2e06763a90ac4dae462d915375
SHA512 0ddd4197e2be3a03917d10888216c011ff116d12d88701521114a397032e4cb9dd8a8b58abc5849aa5ef12fc3cd717541d2b27cc1b90620a408d8f287bdede01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4c51880b5507da09e595fc5c7bd7b330
SHA1 cd6e37f882396e957cad0e262104cff0b8c67f38
SHA256 f8486f559ac7a41346f531f968fb95a74e348a4fdc1f4574d4bd880f2ad9f308
SHA512 5c9b560837d8ec1400639e22bbe779ae459c759a35a0cb7fdf95baf8b7a7237cd8c4d0e5f53a4f745c6b442806191dcf5d9a9cecc60ad3ff615390a0d3710859

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 44995386b4f7a4a4d88e436ff6484046
SHA1 27848c4ce30a0f2484bc41ee3585cfaf1099b65e
SHA256 bd4ecaa7c324f48a3c81cdf21b2b05f055cab7ab6e87902e482e6dfb635544ea
SHA512 7205828f69e436fb03ed0e24a3dfc3843d53d9ffe1140941c8510d666eec13254bb7d257ec344a490237d1fcfb711ff0f1c008335f4f37abec9bab03b8724407

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a4555e9cb0d2bb02ad2243f52ef23455
SHA1 d6b6e240800de7801a8a3da7c763c5554b7f2e48
SHA256 2caa0d962fa5556ed818b372a420bfb5939ed806aaeb93ffb97d182278027371
SHA512 f58bf87b73610b205f3db22778488abcf72443834d81b099726c34e8f7d2cee1f4abf90c46b8b9c1d18fcddf1c4118d0d496d251dd51ab86ef88c772cf74cd55