Malware Analysis Report

2025-03-14 21:46

Sample ID 250128-23x1latpbv
Target chrome-net-export-log.json
SHA256 09919ecda8ce853fc3922a37ca776d8eec278da1e62c10a76d545b28c2a4bd64
Tags
google discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

09919ecda8ce853fc3922a37ca776d8eec278da1e62c10a76d545b28c2a4bd64

Threat Level: Known bad

The file chrome-net-export-log.json was found to be: Known bad.

Malicious Activity Summary

google discovery phishing

Detected google phishing page

A potential corporate email address has been identified in the URL: [email protected]

Legitimate hosting services abused for malware hosting/C2

Enumerates physical storage devices

Browser Information Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-01-28 23:07

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-01-28 23:07

Reported

2025-01-28 23:37

Platform

win11-20241007-en

Max time kernel

1770s

Max time network

1792s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\chrome-net-export-log.json

Signatures

Detected google phishing page

phishing google
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

A potential corporate email address has been identified in the URL: [email protected]

phishing

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A drive.google.com N/A N/A
N/A drive.google.com N/A N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\Local Settings C:\Windows\system32\cmd.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1692 wrote to memory of 576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 4632 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 3108 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 3108 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1692 wrote to memory of 660 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\chrome-net-export-log.json

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcc0313cb8,0x7ffcc0313cc8,0x7ffcc0313cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1884 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2540 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5640 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,1231240577541783183,992126828235296827,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6344 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 184.115.23.2.in-addr.arpa udp
GB 95.101.143.182:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
GB 95.101.143.201:443 www.bing.com tcp
GB 95.101.143.201:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
GB 88.221.135.33:443 www.bing.com tcp
IE 20.190.159.23:443 login.microsoftonline.com tcp
GB 142.250.187.229:80 mail.google.com tcp
GB 142.250.187.229:80 mail.google.com tcp
GB 142.250.187.229:443 mail.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 142.251.173.84:443 accounts.google.com tcp
US 142.251.173.84:443 accounts.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 172.217.16.228:443 www.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
BE 66.102.1.94:443 accounts.google.co.uk tcp
GB 216.58.201.99:443 ssl.gstatic.com tcp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.179.238:443 lh3.google.com tcp
GB 172.217.16.228:443 www.google.com udp
GB 172.217.169.33:443 lh3.googleusercontent.com tcp
GB 142.250.200.14:443 apis.google.com tcp
GB 142.250.179.234:443 waa-pa.clients6.google.com tcp
GB 172.217.16.234:443 ogads-pa.clients6.google.com tcp
GB 142.250.200.14:443 apis.google.com tcp
GB 142.250.179.234:443 waa-pa.clients6.google.com udp
GB 172.217.16.234:443 ogads-pa.clients6.google.com udp
GB 142.250.179.234:443 waa-pa.clients6.google.com udp
GB 142.250.200.14:443 apis.google.com udp
GB 142.250.200.10:443 appsgrowthpromo-pa.clients6.google.com tcp
GB 142.250.200.10:443 appsgrowthpromo-pa.clients6.google.com tcp
GB 142.250.200.10:443 appsgrowthpromo-pa.clients6.google.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com tcp
GB 142.250.200.37:443 mail-ads.google.com tcp
GB 142.250.178.10:443 peoplestackwebexperiments-pa.clients6.google.com tcp
GB 142.250.200.37:443 mail-ads.google.com tcp
GB 216.58.201.106:443 peoplestack-pa.clients6.google.com tcp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 142.250.178.10:443 peoplestackwebexperiments-pa.clients6.google.com udp
GB 216.58.201.106:443 peoplestack-pa.clients6.google.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.212.58.216.in-addr.arpa udp
GB 172.217.169.33:443 lh3.googleusercontent.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
US 8.8.8.8:53 drive.google.com udp
GB 142.250.180.14:443 drive.google.com tcp
GB 142.250.180.14:443 drive.google.com udp
BE 66.102.1.84:443 myaccount.google.com tcp
BE 66.102.1.84:443 myaccount.google.com tcp
US 8.8.8.8:53 84.1.102.66.in-addr.arpa udp
BE 66.102.1.84:443 myaccount.google.com udp
GB 142.250.179.238:443 lh3.google.com udp
GB 172.217.16.234:443 ogads-pa.clients6.google.com udp
US 8.8.8.8:53 181.129.81.91.in-addr.arpa udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 142.250.200.49:443 csp.withgoogle.com tcp
GB 2.18.190.212:443 aefd.nelreports.net tcp
GB 142.250.200.49:443 csp.withgoogle.com udp
US 142.251.173.84:443 accounts.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 2.18.190.212:443 aefd.nelreports.net udp
BE 66.102.1.84:443 myaccount.google.com udp
US 142.251.173.84:443 accounts.google.com udp
US 8.8.8.8:53 mail.google.com udp
BE 66.102.1.94:443 accounts.google.co.uk udp
GB 142.250.200.14:443 apis.google.com udp
GB 142.250.200.14:443 apis.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.179.238:443 lh3.google.com udp
GB 172.217.16.234:443 ogads-pa.clients6.google.com udp
GB 172.217.169.33:443 lh3.googleusercontent.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 2.19.252.146:443 aefd.nelreports.net udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 142.250.180.10:443 signaler-pa.clients6.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 waa-pa.clients6.google.com udp
GB 172.217.16.234:443 waa-pa.clients6.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 172.217.169.74:443 signaler-pa.clients6.google.com udp
GB 172.217.169.74:443 signaler-pa.clients6.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 2.18.190.212:443 aefd.nelreports.net udp
GB 172.217.169.74:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.187.206:443 play.google.com udp
GB 172.217.169.74:443 signaler-pa.clients6.google.com udp
GB 172.217.169.74:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.234:443 signaler-pa.clients6.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 142.251.173.84:443 accounts.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
US 8.8.8.8:53 signaler-pa.clients6.google.com udp
GB 142.250.200.10:443 signaler-pa.clients6.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.200.10:443 signaler-pa.clients6.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.200.10:443 signaler-pa.clients6.google.com udp
GB 142.250.200.10:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.200.10:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 waa-pa.clients6.google.com udp
GB 142.250.187.202:443 waa-pa.clients6.google.com udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
GB 2.18.190.212:443 aefd.nelreports.net udp
GB 142.250.187.202:443 signaler-pa.clients6.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
US 8.8.8.8:53 mail.google.com udp
GB 142.250.187.229:443 mail.google.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 waa-pa.clients6.google.com udp
US 142.251.173.84:443 accounts.google.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 216.58.201.99:443 ssl.gstatic.com udp
US 8.8.8.8:53 signaler-pa.clients6.google.com udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
GB 142.250.187.229:443 mail.google.com tcp
GB 216.58.201.99:443 ssl.gstatic.com udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.234:443 signaler-pa.clients6.google.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a28bb0d36049e72d00393056dce10a26
SHA1 c753387b64cc15c0efc80084da393acdb4fc01d0
SHA256 684d797e28b7fd86af84bfb217d190e4f5e03d92092d988a6091b2c7bbbd67c1
SHA512 20940fee33aa2194c36a3db92d4fd314ce7eacc2aa745abec62aa031c2a53ba4ff89f2568626e7bd2536090175f8d045c3bb52c5faa5ecc8da8410ab5fc519f7

\??\pipe\LOCAL\crashpad_1692_EAENJUOOLLKKABSW

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 554d6d27186fa7d6762d95dde7a17584
SHA1 93ea7b20b8fae384cf0be0d65e4295097112fdca
SHA256 2fa6145571e1f1ece9850a1ac94661213d3e0d82f1cef7ac1286ff6b2c2017cb
SHA512 57d9008ccabc315bd0e829b19fe91e24bab6ef20bcfab651b937b0f38eec840b58d0aed092a3bbedd2d6a95d5c150372a1e51087572de55672172adc1fc468a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 100904bb3a8b430f796c791cefae2751
SHA1 9fbc95f43a02f1bab6e2caac09ae30a926613e81
SHA256 cca2ddc457933f6741fa22f38becab2b35ab619c800a84f8ba481d4efc435e07
SHA512 78fa1a32e64ba768fe2d758c8f624e3ca07b9f31431f0c41ef6359afe238c566b56e0f7986a10857ef345752b2128c14b50383bd4d192dd3fc82bfb5e5078754

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 57ffc79de3a3adf9f10eefc979ba5e9f
SHA1 9a9a2635edc8d1c8ad12e9300444b95315c48bf1
SHA256 81624fc830fa5605ae0cbe803728d7cd7c7aca16023b2c2373d955dd0a25f85d
SHA512 6c404fa42e012401ac1d497358b70b0a26daeba97e163fa36b9a6e3b4ffc1d87dd93cf6c5f02a13d4c08da29e90b9186584ee1308b74e103bf814132fbcda11c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2baaf0febd68747abe0068da684688d2
SHA1 e193e8f721d289b12306cf2cb17661b6f207dddd
SHA256 d3ab1b0898e06cfadb216a96fe9d7f9ac9353075441691a4bfe48b8498ee1dfd
SHA512 52902a156a37d5ad7c71c77feaf473d9e7088b15d76f4a0ca791645dc332448e5b7735b9d2b4f49b11395a4b7b165b2c6bff8f35691c4a3d015d1775121c1358

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3ed4714f773eab7a163f379d7db1cc6
SHA1 73c0efd132175ff52cf7965f6d41db167858feca
SHA256 b011d6981ee0953262776e454cc30b7c716f322117d02a7fe3244960644eb8b6
SHA512 0a13cd91ef171fdcbc577d527389edb17d67c8aad9c45fbd3b48bba33465dfe61bea6d2c472ab944cf7e0e6599b2675a68c87feb4ffc7ae5975d8f92464c11cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5ae2ef.TMP

MD5 e30d6f928915aa265e4b4920b1892327
SHA1 70f2a9ae5c2611896f09c8c6ed2672d4eee2f8b8
SHA256 6bb1f0b432517f87ba0655aff704dc33c3376e532a1f9db6789bbe11fad1d611
SHA512 7fc42c19c516e8ef7f953bb07e2d19fa4fa807fdb55edcd6488592a2ce99c6cf4f5f52d65af90e667bce4cd62196def4844e4b1d030f156d9159b8663370526c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 91192b46fb1538b91226dd3f1c420823
SHA1 8e6a09fc3701c7858412c48554603f3df7e0ff9d
SHA256 add1f9cce8cd558549370dc471402fe7508570d4fdca5cfe72096dccbfdfc1f2
SHA512 d62920f1f6d16b7c72ca414505fe262ffad6862291b684859fd45e82ffcf17172423e44a017a53c2a36406fca1d1ba4b5a3b74cdeae7f60e3dec8656636a8900

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 aa8c4f89c8b63cb81b93a4c0bec794bb
SHA1 18df4dbac6f9612ccdd089b1012bfdabc2fc59f7
SHA256 6f1e818c1adc798b5f7950f2dbaae5be1121f5c51942a83eccd1c9628fabf5cf
SHA512 8814ac3d68c8b34a61f651b7156cada3ba80e50d9f7ddb6f0034f43d8c938e3fcbfc159218a7a6f2d3e80e5a8fad63d51ea2e60fca9521a113dea2beda590303

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1cc4f2da92e308449a6d52e1dca90cf1
SHA1 3f241a15c606984bc3f610d0dcc51b84beabe817
SHA256 2913829d399ffa5a06b3a678a9818034d18328e56e35d1bfb7ddb3af828f969e
SHA512 9ef20e59cb4c198cfde4d14051442045005315f454661d31faa54f645eaba3baf703080130785049e3fc6651b5074bac4555c471169d8fcf0b6993610fab3f8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 1cc8ad81e6b15b804052f8e98a7a42b8
SHA1 ee428f8de2567bb57218dc30a8175ca1add2559f
SHA256 24ea97bb63c53684d36c129413e98b588daac26bfeed94dcae8df220112bbb4d
SHA512 ee2848cb640ba26b1a2a8e6a8ffa47acb49b73efde758414da42337ad6a9a623641f78cf2f14dfa255645ae75f9d51782948bd34f5cac56c7994454d6ecf4e52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 abc8cf1a488398a3afa8dcc08ef7a8a9
SHA1 44ea43fdae99c0a7550a192d488a24f7eaf406bb
SHA256 3478523110477c448c11df55ce3ec9557075e7df326d2fe3694be11e4ea09aa4
SHA512 52e1c699a0e124bc3547a37a36b8c87c769df645acc678ffba5d4836c3d7217561a76f975c3efc443aeaacba5c28351a1869b6cee34dbdce1594b12501ec0edb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

MD5 61dc356e5c705e9f2d935db0d6434e05
SHA1 b931d421fdb6bc827d64446e77caddac3ff12634
SHA256 560335c18e31d43172d71164ca6e8b2eeb49fc7da3152b05c6133a15c3fee367
SHA512 64a215375d4bacf461a8be825504631e306d943ddf34f371e6a6d736b9319710903eead8ec752147e308ed706e3bfce39e53a6ce7c2b4dcfefc4a52081002a57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 e5b42fc0d9d53d75318fb6f2c99f7234
SHA1 b7bc281440070ad9b486463fcd1c950daf9482ea
SHA256 fedde54f795d67c859d28674d8ef7862d5227875b2c1197e29843fec275e0230
SHA512 6131583e1d6b54e28137a0113b379480f7b56c0ca7337fd4c355cca9e83a3a5041e6434c54009078f1ec4452fd99bb23e72bd5c8e7c6e578a4abb18c75d968b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ca97fbdd-8877-4cf6-8c95-e3547e52be4f\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 29cc10b6db1d1a06b6319064b40a1392
SHA1 238ddc41d3f2b45edc695727975305058e93db2e
SHA256 089d91e913523c83c337b95dd79b99e60b39d23ae25144caf6fe4b4ec63da829
SHA512 6346ef4d31a64f6c4fd46f4d4a066adcc2f3410beefc971ef6b89b3bcad379103a72cb22cb6ad0927cb6c4d6ccddc78db055e29293feae915b4a2383f18a763a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7549306bfcdd8a20a0fe02ade8604dce
SHA1 25cfce2ead82a730d2a96853623f626dd5dd67c8
SHA256 1191c5984dc0d186f4f25af9918c1f16229425c83f6b43c3bc0f496c46685bf9
SHA512 ea8fb08b58b1832f6d1ea7b0b90867feb27005c035d53e5e38670b8fda148c3737715b2f9784e87fe39063a8a6bb8063401508b35b648287f47afa5c31cb1740

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 f61f0d4d0f968d5bba39a84c76277e1a
SHA1 aa3693ea140eca418b4b2a30f6a68f6f43b4beb2
SHA256 57147f08949ababe7deef611435ae418475a693e3823769a25c2a39b6ead9ccc
SHA512 6c3bd90f709bcf9151c9ed9ffea55c4f6883e7fda2a4e26bf018c83fe1cfbe4f4aa0db080d6d024070d53b2257472c399c8ac44eefd38b9445640efa85d5c487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 6f9bcbd9790889389f52578f0c27177e
SHA1 941fcd07ce8c21efda837ce99c2c0c532a153115
SHA256 f83e87421cda34647dbbbd00cd215a7f86445af8b2e550fc88413a757b89caa6
SHA512 8e20dee4c862b915790779e05fbb8bcb61d686c6f11f9bf74f459ebb97979e590c5fa4aec6bd83d9eaa68b2cfd6629144b4123c2a9c6757f777593dad313a0bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5 aeb1acd61e1ebf26fb2f4ba66b643d84
SHA1 ec4e07e59ff0433a55906de6b8f775f6484a4d20
SHA256 43466acadd8ebd586d4992adeaed7c4430d80b149c1e679a2717739b7f2a2a24
SHA512 8d154717202685781d765275c89a38c9eca35c9b48524828eeb5fe7c16d8e8e06a5bec5a0398637e1d424410199a1c906672f6884b1087614c0271b3569274e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 d372d952a9399bc471ed19bd3afb4f23
SHA1 f7338af0df87b34279c4a7fb6a72ad5d831a6668
SHA256 afe0b2a5ef589fd17e5e8a3a85382ba0aea066b9a2c1bbb33fbdb674949470c6
SHA512 8475d88b5e9cfd0ae51a6102e554a2ef6b2258e7a340bae2c26119c397ea226ccf38a7ea813851fdab15cc25b94240d3223e5c5e81f91252014ae9377280d384

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b5a51.TMP

MD5 2450473b4b514f4a21a202282a56b706
SHA1 9fb04afc7fe2ba385ceb33d79abc1409d5ad7f93
SHA256 816f4511802c6256c7e50460640b86f4c14d9ae4eb6e0dec63a89351083dfe54
SHA512 2322778f3884e6f31e15bfed24c1c495533cc561a58d72624ef23317f54add8eb9934cc0a4cc12c8c39300578c29dfce99eefe6284dbd335eac376f382b397d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\abb504dc-d1d6-42e1-8a7a-c816dbf986a8\index-dir\the-real-index

MD5 99fc1e4f7635f0604b9edd234354e882
SHA1 908c3d12e77316422aefaa609bf8ff3c70488048
SHA256 53b5b09c9893696cef0e2d446abb54825144f1badcf6b9a1751d0085a166a1d3
SHA512 22efb32c326382a4dcca12f7432e7aff682276aa2f12a49bfa1cb4a20611879f7a5ce603502f5af538cb321175ed591a682ed1ceab141a954d74c4b6971d4666

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\abb504dc-d1d6-42e1-8a7a-c816dbf986a8\index-dir\the-real-index~RFe5b5d4f.TMP

MD5 fce7ead684d9b685c44ed898563a1e7b
SHA1 d0ad40266a70abe373b5dbbdffa615ad784d47e5
SHA256 fc91d793ea334680d82d21a71ad322fd91b4f517aa83b190af82415206d5c643
SHA512 7febf1cd6d824fed44a4d8b802ab0da57813d72ed23af24a2fb60a1283dc3944fdb49c3d4071747cccabbd51318e5a74ece6f87ca8905d048027ca1888f633aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 90c5c5360aeab9e54a6707b9f187fdeb
SHA1 0dd7bf03529e7f183f3cf174c90bf1a6ea098712
SHA256 27f9d8cfee8c45a3d78c903788a1eb2e73b0965c14eda2fa0a5dbd9897f8ef23
SHA512 34b57e240208a57720be2c5909ac7742ba7fa366c9e1c4cb3d7b73678636a60d2f090d36f26548162b5889b5739cb8a2449ecb3627aab7b22687272432947e65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ef748871-6c8e-44d6-8f71-1d1fd176e705\index-dir\the-real-index~RFe5b61e3.TMP

MD5 114036411108c173ad274b064ef1e918
SHA1 e72b0b7c97571ac167661f23b7040501a827317f
SHA256 f55d05518f9885c1fcd21a3c4c1370b60c0834d7b15fb5e4e0280f346358e0d1
SHA512 741bd3986953d206c4d7472a1c3f07b390a06474d904c4fce6b152cac06f16b3ed59e75d743942910b0698995c5333c788117aadb9ea29adc48ccf19a0c38121

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ef748871-6c8e-44d6-8f71-1d1fd176e705\index-dir\the-real-index

MD5 019798991bcbfb9e4e84639b9a4e1b3a
SHA1 f08256283d7b6e455d5932c923459a8685046406
SHA256 68dcbe2d920dde2ad494314f074f5237873934359b0c091fea3a14392a3e6911
SHA512 5087937e289e7dd5096101e83fea43ee8894368e2d3849ad00f56a1099cc7cd756ce7a0acb69d2ea94dfa4c9dd0a1538e1cc1aebb25dd735a27f465fe7d8e06f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ffe5df77-43fc-4afb-b643-6e944d160536\index-dir\the-real-index~RFe5b6202.TMP

MD5 4eab0f0b22872e1a12d00da96fd4f112
SHA1 dcd7c9a22d000a9c13e7550de256b2b09eeba6b5
SHA256 4d05ef47d1dfcb80e01a7a98405298f1fd67ad33a3d08576ad1635b7a25ba0ed
SHA512 714f83fa96f865e8f01d7a0ab3451eac4aa2b52513b1fa4e12c42e93be3c3287ee4b68876963680cc9bd4e974188f9d24387529b482ef834777c0e0d8dbbdbfc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ffe5df77-43fc-4afb-b643-6e944d160536\index-dir\the-real-index

MD5 53d44d2139d4b8653242ff07cc63c9ef
SHA1 0979e1dfd95e378044f343bdadd55e0b44dd4f6b
SHA256 3049fca60a8f7f2a51d06606f911480a06dcd10d6bd8fc1c28ee75776997f023
SHA512 02bd47867cac799af7bbaf2ac3b5444d717f81cce7003b03a3f981688d7478b5b12ed60ed5c1b1d8f19a9e3c223fa51f0618c8fa1bfb512aba3ae8acd878e990

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8938a54e3ecb3f19b26031fc17f67d7e
SHA1 3faab5b32bb5378c2dae74a5dea703f57a67dd02
SHA256 51863c1fbd6262819143b76c09f4c5deeead8db367ace14c492d9d4bc6ccb921
SHA512 20fc71a04aa02b97ac9d55c32e8e57747a02945e24acdf6f40cdd0169a60c094aa87652acce2b9ee10e0057a92b0a06c91516c25ade661f588ee561ff8d78dc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 6b2050872b3f506f6f1ecc68a40933ca
SHA1 562a7ed420264ba411c2a3f2a869a42954e60798
SHA256 32efa94175178d540606e23e239f82f3f8086eac7a571e553c7ae22bc6d46de8
SHA512 17e172cec26f37afa5b3e6bd3cfecdf692e4f4f99b05ef112ea101743123c125dc1d7aeafeefb7fa4639370f32cfa798de604f5c943f4c31b17ee3c477d833fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

MD5 06564399676668864e0b98b17a5f2992
SHA1 ab30c4cacaf4c6b746ceb4c1f71d438bee564192
SHA256 a25447e2ead55609c925b38b3c72b1290c58ed98cf9cc010ca21741a7f147ab5
SHA512 f0e671a03d9f4980ff6d19c77931384299e7ca76ef0c6317e583cfca70acec2740531192efc2210906cb6c188713b2b77ae30c39a188f0f4256d0d56efce5e3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4beb6b34f202037a845dbbe3fd3771e3
SHA1 623359097de7f3b074227a66d840858faf3fd39f
SHA256 491fcf7c8c20f48959a4d76fa39588fc5fd657084d3845c6d4c8868531076ad8
SHA512 eb23035d99ebf938454129a3140efffce390450efda713361e24487c10e752320da9ba7f8a1c98132d22f94128d83b5410e3078a2d2ee0085428948c3ae714e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fea217123d8a4b1f33ff52ede13c5e8d
SHA1 7d98db23974689a8f116e6d6305f89759fbf6c86
SHA256 f750d61d00298e4b85f2817d856caa535fc42d5342e3f963d43c29f8093b030a
SHA512 dddd44541d94719221b7b1245a8685a5c2ae965ef3c17e70d6bd097b8adcea3bd81d3ed5a5464362359e3be344b98a1149404ee6fdc4240bb47a40335ee4f81c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 850387ba49308d62e17bd23ee2da3249
SHA1 4765aee5a12564530c2d0de1172119ecb4835bc9
SHA256 a82ad5cdf9e1dafc7fb9ffcc00abb9ed38aca3e35aa16372863d5c0573d82aff
SHA512 206e150fdf8d6f45a6beb94961a223982ea2d5c3e2c3f110a2c7faa1fbdce89300923411b6cfb5eee2078e1bf8d78b794765556fbc38a237c84ab128850fc13b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 9501c1626b629289b2a1a5471d1059ad
SHA1 0622601d7d2536b46b35c4fc285e87b66d7d0751
SHA256 afb27588f2d53dc358d3ecb504596318b26dc26cffeffe075d6dcf6ff3026a7b
SHA512 c1cfdb9af87dfa3bf7369241aaaba36b68b3851863733201bb8956847fdd5c5a46672127c4816284398aa49f4e781bf9e6a92d29d0ec251a56d75b8886d83306

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 9696aaf73100531840610135866fda7f
SHA1 78ce9775ea98e0dd60d46f68fe62f8b214d6bec1
SHA256 caa8602c3e11727f71ac718ae6c5c34150193fb0d52aeb6207643f5c5601bd92
SHA512 2a5ee0d42f773639c8ef5ac33a00d57f02cbac4263d969258826d6a969bef3f4c8f4523a56de7c16eade46ac3917ab71f85853debdea45df2772161c199c85bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 eb11bfb369775ff0739dabb3a5f379cc
SHA1 2eebaea2f7080c0b256fbfc70ab91473243af0f8
SHA256 2e0bdc192134bb3950a1ba4c1148901e39ebd8d2d01f64ef23106e90a9f771b0
SHA512 59e89752e932aade54d5b2b940e09f3c8b12a836f1c5eb515e82036a97492f42e12a4fb3dc156cb8d969d6cb4e8fd8f18b358715f972e12d4596ad390430cb21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ca97fbdd-8877-4cf6-8c95-e3547e52be4f\index-dir\the-real-index~RFe5bb5a0.TMP

MD5 fcd0114661eeb9bdaba62b7731d21c3e
SHA1 f2c512a0d8ef03265aa017a24cab49f69e511c64
SHA256 08f64dc55dab2d416b8715464a88a87a3dd4a6c47b7645139166cb38ba95b175
SHA512 096117e08a8ff7c1a542b57117cc23e1866b3b5d0e28b4f84353808481a13c1b3e26e4b31ed0aafdbab238d40e3ddb76da7d1e535655b4824cf9881cfd5fdbbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ca97fbdd-8877-4cf6-8c95-e3547e52be4f\index-dir\the-real-index

MD5 ee1b5ed7758f13dc9fe395197bbabecc
SHA1 610c4f9462082b734285b1742c2208185be64aef
SHA256 46756924a03496ac67e7fc1facf8723defd8ddb8d05d4b151feca1c9a325bbe4
SHA512 89a26bb0690a6352fe49f8e4e24c4e154b97532601370a49ad089b21fe3de4bee6c84bf8e027f956cbab7c3af5ff1b9dcf56731b254594bf84db02531921e6ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 b670e7da9c91b31d26734b97f96e40ef
SHA1 69986147407386f96531f7b8369c6f9c71425475
SHA256 dbaf031eba0a8f1a085f0f0e97c98eda82d9720cddb71e96f3de244ec7e81509
SHA512 1c19e63aad8bd2822a627f8c386446ad1f9369d5a64fd4a00fc2e808ce0ab987376ef053f14f57d7389bfad24296a683859d690c1d5d2ac318698e1880a0da01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 978f476233e46ad985498efa6718fdb3
SHA1 74a950600678b0e020bad9e32a84e67b1b0723b1
SHA256 b18ff9974660379c73aaefe09ce99d178717bd7e249fcf808511094c4ad530cf
SHA512 7f9f48f8c73793439d0446194c453e658af6f6bcc44ec09ef4f96a28917f48726e844f8f1408d271645ab055e03ea736ea80a7f3d30e94b11471120703add7dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b68afd0abe7ab7dfcd9c63d7d1799c3e
SHA1 311f663388484ed454b7f81e3fa03dd8b3fdc34b
SHA256 942e3c35fb2468839c5fe96618acb99c6db829090bb43072f02450472af37c0f
SHA512 6ed73b7d9487644a87e4647d2454974372b92ffefa855797990cc6ed81abc4c0b065cd08cd46f8f115b15857033096d5569e99d3ff7b8ec24c99cf8ec751dee6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d9e0dc176e457e77e7679cc6600e8949
SHA1 0344668ba391dcdf032594dc23ba5ee9edddb74f
SHA256 5864253a4ac30e848b0c65de6117606ba9aca2761038b27427a3c2e49be5e1e9
SHA512 da62323551ccf07331ea8a1032385800b5a239756dcd12d69778d386732b187669d6cbd69fb6f7073f561aa13879b4677bbbb10155cf356e128b96e623a80d91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bae63e73ff6b397561965a75945a97a0
SHA1 12b8fede87b7f43f1898331c50eb7c67cb827a92
SHA256 633edbb61bcdcb05deeb7f04adaf7fb393c0c72a06807d467ce63b04d51c5a59
SHA512 5fa273dd083e1b32e6247d06c3e78f12613931c450801483d76a33398085103f729f8d9185c78244c9f378c43033be7e9bb24898acdb61a068d67c4f3e2229c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a05b69754464756e2d25a0909711eb1a
SHA1 5b7f738be16d7f54b91b8b2819f87295d1da86df
SHA256 d61d922be3525c9957f94eb62215d197ec915a6b578876a90ddba77887bf03b4
SHA512 c7183b45adbb61c4b17be71f4007d778f5affc4fde260732c9357f5404069395018dfc3adfeb83d3aab49aadb6919bb547d9069fcd921d3f7b971e2215095691

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0180ac626f140a7eb909dc497771c5b7
SHA1 9ad60d5246742a43e8c85364750ebceec852614e
SHA256 ea2d6756ccdc979a6e0faeef1ab62f5cc802b529b158f37980944bbe5eb0e4de
SHA512 9fe0e9daea1decceb771019eba483f139ad01276d2573e0a7014727265f2e90e8d3c27b80785578bbd32abf4a9500d29b99f889178236674e133970f0ef2e99b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 23728a9961c64342b14f2899b93f74f0
SHA1 da2c931ca868d7204557fb2c1b1817f7a972067d
SHA256 e97f5a5b5edf63cdb5e974a39fe29a8b53e79dd8b975fb00f302e6c5467d70fe
SHA512 64ea9438eab51aca766fcf61ec7db643e69d64e059e786a654b47d5cbf33ae8e407516ae58d18eb072aef70dc148d0b803d0bac4a239165dfbcba6ffdd2d13d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3ca35735ada8833b9afb0730c5af265
SHA1 ec7c8f9c9bd454bf93a45296fe9794023757d3ef
SHA256 f3b47e2b6f38a022aa45c320288e20efc0dd0d91de74718fd8dae8e945bf521f
SHA512 fd5aa0190be7ffb04bb6bc8c0dd61b866d72feb9f3e280a496ab2d81e5196a6f9ccc9a3862406c9e2f96524a98ff4f6861c6510a43f3dac8a82a6a17eb3c0059

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 de0ffbf355c87280a8bd7d0f285982cf
SHA1 ec976633d5e1c7009d5b6788524083b47069d830
SHA256 f8a6941afd5688d363d0c4142f552b4a30846a8ffd3626d0414066d5fa7db9fa
SHA512 e00380dd0c844f97dfaf2ac05d5fcb8f309168057f7c123d6f336dc3e65564d1089ab48c01101cda244eb2ac873e25be01d2768419a2827ba6f68f505c37d571

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

MD5 a07b5b2cf09dfb67a877bcce35d3768c
SHA1 4113f1cf27fa851fd1270ff1c09d3785dd1274b8
SHA256 66b550b92de16f95dd99dccbf1adf9ccb71e8fc38c753a08f03af39592e2dfab
SHA512 76fce90fac4d4190d6875630f3304791034eaa849d902d6849b675c48b2a0b1a1d0e76e2a4b5ce51c938a3f52371ad9507cbd0453eae20eae53aac8655a3c7ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5 556e41cf8fe1683b4ec947ff6b56a2cb
SHA1 f2c78e2544a0e596a4383122d3e7da8f7789f3a1
SHA256 f2e5b590954fa505cff317eef8fff2a92e712703a1d80f10d7dd37ebefbed640
SHA512 d5beae4f01bdce205fb7d337d4a6623c95a55eaf7bdba6f00def59ff88f2b71d072e1257617b3610a540365179097e768e3ef72744c1756313d7e786ce88378c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b5e760a8bb7753c4_0

MD5 4e5a1cc7c3d9575d3df506a4c74b9b97
SHA1 407940959dae3dc90c1a70699ae045e651e95b34
SHA256 947d9227b75dd4ffa4da176bbf1cc2db17cd662f33683bae2b8f660e63bc4cfc
SHA512 bc0460325b2d29e2b335f0a0e160053dbe2836f6bc51dc55828f5a1343a7233fac3b039efe76674d5ba4e6abdda5eb589a927884a58bdf70b47a436ba78b702f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bbf4a1bb305122cb_0

MD5 2b7a09fc92d94a79862bac2be52b0127
SHA1 96ecd014368243f2d6df4f9203e4dffc2d3bc2a8
SHA256 37d08a67d4f76746accf742fd3e0d24061198ff1882eec451c39c08436d77129
SHA512 e5f016a3f7f5ed4d06b78ab125dc01bd35d8da2eb8b71c1c234dcc1d3ccc00f3ce57df5e407e99a516ab42b3134f7c9a7eed82a306a3ccd092fcab100b511cbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d5bcd9f363ddb8e_0

MD5 9f27a6ae7bad11253754181fdee226d6
SHA1 c46ad4f1d8fb5dc622714ab1b151ea21e36eb7b2
SHA256 c11adef4960a00911338f48e0b054243317d1878657661ebe26d5b3962485a76
SHA512 f811a2719bf48ff207acfc9d8aea6ad4e67bc5fe2ccfc7ac3ab66a1ce92bff755892eb302a76278097b9e769fd6d0c3f7474925b8e2b9165ba3f8145f28d2fd3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\157ac5dc69855318_0

MD5 ba7e44ff1b41ba8904c2233e513a3595
SHA1 2db812b5b5435588b03a23e800bae47c03411578
SHA256 8d29393e5c614b228fb9a055842b03e64918f251e68cc016f8b48598190f0651
SHA512 27f8cb22a34f323fbe880173584c658fd47767cb59740a58dc00d92156f0ae0e7751b43d242ebb3803a42ccc100221f9fedc67145eb70bdf93808b36197fcf00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

MD5 c540881f0cd870245ac9e98aed8cd481
SHA1 7af55dc840cc58bb6e70684ec0a80d5c1ae56e65
SHA256 d4a52d140e8bbc22b2b2df20199778900135fc8a822ad071363cb958514d334f
SHA512 1aa06ead6d95b8056ec88414c4a36a5956db1559e69debf469bb0d8dd12c8da2d7b9cf888baa43c557f50c32ae334be3d364635f963d0840d6595558209ddc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048

MD5 b3c8a0a4a0e103492bf9ef772e8bd7fa
SHA1 3d82f90fa72865d992c2044042eaa6bce0d1809c
SHA256 fcf6d54c05cc66b16ee066af92a3836ee68f81c8777af101ff3b2f69b44902c7
SHA512 ab83b7cd82ede55ffc4101dae4cbebdc9ff8c67e3bc718295d9740c731a5292a84c06d960aac7aefaa153f24efdcbc2e6acc85b4ad872057a13348fc0ee52379

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a1c5100ec0710314_0

MD5 3c01f2e40f4224bfe022c198b093f0d0
SHA1 687da5747809e6a1a8b871aa64cd4db68c9cb405
SHA256 658f6fea4d8fdeee9841a084a10aeed41e55ca6a230156474dcf9958b3626046
SHA512 3dc2eb1d734be247bb28759345b6b6299775932fec5908514cefc022d72af40a965f2542c06d1e13e2dd74e3af074ef15816c82cfed7acb6f532a68d6d6792df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6df0d884ae54e519_0

MD5 cef810da908b925208e6e184e2dcafe9
SHA1 004a57ddaacfaf942fd2374c8c9e228effc5da72
SHA256 e686ec5448323f17f78464dd96fb3711d5744b781b4bc0295c5eeeb8248061c1
SHA512 acc97328d605154bf7efc949e28c2a884e03b9fcbaee9782225cab2176fa16bd7c7dec2d60d94ffbbca952991df583e3ef04d15c93cc76f9a031a16256e763c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1136209fa7d94f07_0

MD5 9b38bffd6f0d5776be62e588cdef20e8
SHA1 9be5d938413bedbfec04ba84b044b4339f5adfda
SHA256 5bb58b9c5926d0169cc4172a5a839d0b10eccc596e7f2f1a174a3031201a440e
SHA512 ab254313646e2e846db9d640cb23a605f62fa5ae754620e9e5594dc4c106a814ebd8d259f62cb8abb171b515baabfdeb58495e75040185d4b9bd68646db2bd57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6ba2ab351ba4ee11_0

MD5 a32ab4c525c791f2fb197327ba66e875
SHA1 49082c2f52531016b5d917232d6f207e315b6a34
SHA256 2a1742a59df490a748972adccbfd812606ca991233e3bb590a652b98995bcdc5
SHA512 fe47e2a44d14a1e826b3edccc84965789637d8ade181160e660cd3c9f99c19d4231f213ff9add36ed6b2cd33c7d3b5d761c309c1a77be9213f3bdac8516165e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ed7a17e30e95d6b_0

MD5 e65e123459e4806f8daae7a02645d25a
SHA1 ab9ae14a301db5ca1a0eb57dd8878149cbcc616e
SHA256 466b348f2eac4d724f134c226fadffd036a2fc0a8afb0ef7fc135b04f6f133ad
SHA512 efc213d486ef59655d1b0568cff61537ae4e82e793dd617428c3ae9b1992db54583b817f4c010f05bab28ee85bedc6aa93d9d22f77cf5b09eb25a922cdbbfea0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2dba23c0278774e5_0

MD5 7229be53a54abade3655f482e01b17ab
SHA1 bf5788e81d033babb8e328216688d2be770cb143
SHA256 28c58b4aa10e85452cd2e067c874e051b26dec1b438951a0cfac8a9f61ad6098
SHA512 fe4be29a53115c54878041f53a1cc4f9667636d8be132cd79c8272a1cae0ccc059bb285ceffe5c4b57371d490872582d7012a45e6ea7c42e0a45eebce939106c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d295231aa9c581b_0

MD5 a9f795f6fc9edd0a696d0683643a3f7a
SHA1 2b03182b5576dadf820b5af5ac85beb85a922aa8
SHA256 cd7de47816c26215628406ef6106c65f065337ba63e6449a89ceb1496c310043
SHA512 3814fd694ef987690cb089aee7e1f8fee729ba3123ea82df3423e4780ffeea46142833b5773eecf217c517c176e1009b640394e534407079ee741c416de3b09d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e7a6108bcedc43f550961160b58aec05
SHA1 0ef7bfe9cc9ce85678634b26b7db21ce885d5f68
SHA256 4bdbc86b92e6385a005f773c5350613dac28cbec96db3ee4104cca98cd41eaa1
SHA512 c8a92a0fd0df4e10eaeeb57fcc09cdb52dd3b86abcea9156d8aacf7de4ac4f2f1d80b59b0b27e346aab1c92048c104b9167e7bf92b33834afdbe7543e1444d39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1f029cc77c73f753a17766d6bd62dd80
SHA1 8adabe3a1b1e1fb6f6abbe53cdb54c9d902c7c72
SHA256 4d5aa28eabe7a7674b8a1d40485e339a7ff858c14e82feaeb18cfad87f02e74e
SHA512 c2485c8967bec391d2ad99b3fede8a89dfcb4d986bf4a6462fc873dab5be67bf35fdd38eae02e3129ac9065bc4813ca85a5b7edcb5f89ec2f4cbe4d48ab5a4be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 999e6d8b5753144bd30790535e2b9701
SHA1 7d9d6cee5929f99d36a13ba7155c514683571213
SHA256 5bd63fa09deb18dbaee7e556fccc9cbecaffb84e0ce8dc1ab80ca6231dc2056b
SHA512 1a69a5b7262ab6dcbf46626b6faa6b6b28893601175b3d4e0484d1f45f828e6d654e352a937df5b320f3efced02240fe9ad3cf39ba6b78bbc0e3f5ff22afeee0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0aa02115f9fb281876b4104bc8b23298
SHA1 be05bf99bbbad277588939c3d6a664870a16fe01
SHA256 6c340ee21891bc0b5438bd0fe4e809ce22a1c090ebe03e658a2a1032de17e0e3
SHA512 8a409993809cb6f229bf889143402304f733addf5a026941f4066d359d7324a6372c43c0a0c959483eba5802bbde8d67676d00ccd9213676ef60dad6410401a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1e0f2a3bd71f0b631b996dc73a07b33a
SHA1 c7cbf13d531b56385c023ce033517d6563bf458c
SHA256 0e8a6023feca5a5e4eb8d37592d0c1308833a09fde5550e64340b340a4ba9148
SHA512 a4c2f5f50ebe14244642e582dfc8db3957098e157bcd8680cf1c7b630736e068c34a3b338e31d82e44267fe0c66b2690c931e1210539fc1ac5ea609f928c8945

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bf3f7cae67d46dc79d7ca00fa59bfe85
SHA1 5d6426d4f028bf7a17434d72895218f6589a7024
SHA256 133dc17b0610b611285df80d4f3fe43f3b2d67fe6e105cc7ee3811f83a15ea81
SHA512 64abe21015acae8550234a042675dc5b10366c39faff36e2af4596931dc01930f02c0019a39130336e4c36ff1350b5c6b9ede950dce49b491d6d5e7b3fd18023

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1335748a6597c6027cc69cfef5cbfc53
SHA1 bfc3fd936a949da7b2bbd0c2805f39805cc55e2b
SHA256 228cf95440c1665e8ec7a23da7174f8b2e9b0ef70d5b3abf7488740a62fff0a1
SHA512 1d42e990cdfcc04a2bcbf2c1f7ff45586223e0133c2759f3d1213308c8232fd74b9ab292e09c7f5dd5ad8112098ccb2f2a24d104cdb72e85a53798b28eb65450

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ee534f26e664f7ff343343168338ced6
SHA1 fb3fb54b0fe4fc761f092981d088c7f24e98df71
SHA256 0a6860c43050bf57d8a5b2259493a90976a76eb9ff731e1af4c6ec623ed497d2
SHA512 7c6d8ef2b0a0d5d28eecc7a9451ca4357f201699ec3380dcd40fe6033c42c6012ebae4c74a9015d67f50c591ea0fdbbc3852ad74556b038a02d5a6088c04e5d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4e1c0aff2134ee0861022860afc37a8e
SHA1 08622632913256be0ee66b328216a3ad3486baa0
SHA256 e9f68a0799a1c2d8a70daae4f775e119d4fa36d8557a90410e171fada535aaf1
SHA512 b3de9cb207efb0f21ef775f6c12380d3218a3ca04e8d24b4f4f39ba165b9bb132b78ec158ace6740cd4fe5775b1c7843580f6ef0a3bdde826e69b8253fe8a53a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 67e7abb4a4ba4d01e78e40651fa4ebb5
SHA1 39f9c18935acfdade493e2643bfe0029b2ac1efe
SHA256 93a5fb0531a8eb0ad81a69b78a4e353295a20d99e9a1a3a35cdf3196b13a7cb7
SHA512 685028c3551ed5b8b7099a29ec71dc2a5acc6ec76adbfd9814f7df2a549eccbf154692d4a830aa2bc68c7c8b04dbfcc185124f2d19626e05ce7a33caa1ccbb4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c6387f5fedcc8c59f326a792dc9269f9
SHA1 7bf21bf7be58b4c77515ef96f97d6084ca0fd359
SHA256 329cdb040c86d34b33b2eeb8306a96e06290a7f175de0a93dc94e4025c33fd77
SHA512 83201ff275ffaf5a8091f0654c99120c2fb7c644dce7f449d2861d8769086e980b2075fdaf6b924115fcbd49058f74f4320be26b99f4b60a19b1022fecedc7cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6096fdc1dc8f1de181b4bfaaabe5ac1e
SHA1 1c00463d0f1e2b808731894d77b6264f6af4d108
SHA256 6e3396dfc30294d02a57c6ee7d15c684f75bfc82f5de5a9ae179f98f76ee6e84
SHA512 c628d189ff7fe9e459c0a2c0e06802b2261b38b5f5ac6a73fb15774e1ed27ccb3aad52d139e60ea62401951eb12f17fc265414d27ee0e9e95d8eafb89eee3732

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d5cc55793fa6216468bc2dfc01667919
SHA1 318697168fa6dd2540f7db46e97db95eb1ec1110
SHA256 3d6c8bff4af7e883215a443eee127c17db13db6bda16137cbe2c940d5757fba4
SHA512 ac2435b68f000b4faabc8a1c157be178607271efdc6e144d1026444fb613aafad644294b61b9281ae26c546a947cae40145ee7cd556f140ded9f648dc022ed6d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9d8397f3712c35c488bd9492bd0179d2
SHA1 b68f99ce142798b3f1fef31e2953a26e3d1bc387
SHA256 95d2a751b5c261fc791d48ba34bf39892ffb1971b39efc8545cc7d8fae294527
SHA512 edd6fc10475ca1b3de54046600ddcd852556c842527042b852e5822c3be5ce860e593de6708e5518bedd7a8aaa2091bdf0f681af2465875047c93423171e9376

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 58634400cccf63d737c91b2488585696
SHA1 af31f0204aa6255e26480e99a85812c2c8d3bb71
SHA256 598852268c334791a151347d92eeed0dc53786e57beda3172c58289f3ec4d94c
SHA512 9d81eb397936d264d3b4b9ac1eeb0ad812595d2f43a5c60fc2ec73b6c865ede09116c7d551c079558e730925e70d4b3e7e8e7cc15440ca689ba39cd6817895b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fcdb324b7041e35b9f34c4f04352d959
SHA1 a73c972f8d9708c1a56521630f41e9b3dee3f0da
SHA256 6a1e36d29caf0d513d333556450dd99c619787c96f982a007fdc1959bd174e5f
SHA512 a73560c5faeb728fcc66f5f78864022b813fef69f301fbe9f0b0e861ba165406da38a998e030466cde29cb6e455174551b543f075e0b54f3e1aebe88618e45b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69d0e3d3186bd68a35f5877ae27bc220
SHA1 3241929347ae086500ce2b12b613b1e12ae638df
SHA256 7612e5f6ace971862213ee4bfd06d75b6556fa4507cf2a8142b0361b8e74f48c
SHA512 79bada0753078e5af6de19bf4d57c3c7e935aea10f0582b5b0048d8861cef202affde15a9d24282d4f38000e70a1afb900d9454ed6363ea4d52b9051524cf3b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ce00705c2242e1774b9b26f07bf3d18e
SHA1 259aa3cc3c8f69709a6799b7a88aa936e721b382
SHA256 b8ead2269116823aaee0f765d9056185f827ce7ee412e2a2e5f1c79917fc6a8d
SHA512 732551d75edd18362666670d7200d5b6ed5669f854424ae4994ba7b7f9dd4c34ec3af726c04ab3e10c76c8586a15a742aac848b9f6ca1c08c1e31def5eff501b