Malware Analysis Report

2025-03-14 21:47

Sample ID 250128-smckaavrgl
Target https://edpuzzle.com/assignments/679126b8bd236c410fda1636/watch
Tags
google discovery phishing
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://edpuzzle.com/assignments/679126b8bd236c410fda1636/watch was found to be: Known bad.

Malicious Activity Summary

google discovery phishing

Detected google phishing page

A potential corporate email address has been identified in the URL: [email protected]

Legitimate hosting services abused for malware hosting/C2

Browser Information Discovery

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-01-28 15:14

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-01-28 15:14

Reported

2025-01-28 15:16

Platform

win10v2004-20241007-en

Max time kernel

118s

Max time network

120s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://edpuzzle.com/assignments/679126b8bd236c410fda1636/watch

Signatures

Detected google phishing page

phishing google
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

A potential corporate email address has been identified in the URL: [email protected]

phishing

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3776 wrote to memory of 4932 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4932 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4828 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 4200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3776 wrote to memory of 3768 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://edpuzzle.com/assignments/679126b8bd236c410fda1636/watch

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffff0e946f8,0x7ffff0e94708,0x7ffff0e94718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5612 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,10508267157414469231,5364854075476747678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 edpuzzle.com udp
NL 18.239.50.67:443 edpuzzle.com tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
NL 18.239.83.86:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 67.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 167.173.78.104.in-addr.arpa udp
US 8.8.8.8:53 86.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 libs.edpuzzle.com udp
US 8.8.8.8:53 assets.edpuzzle.com udp
NL 18.239.18.43:443 libs.edpuzzle.com tcp
NL 18.239.18.43:443 libs.edpuzzle.com tcp
NL 18.239.18.43:443 libs.edpuzzle.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
US 8.8.8.8:53 113.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 43.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 6.219.227.13.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 f14ab24c7503.us-east-1.sdk.awswaf.com udp
NL 18.239.83.113:443 f14ab24c7503.us-east-1.sdk.awswaf.com tcp
NL 18.239.83.113:443 f14ab24c7503.us-east-1.sdk.awswaf.com tcp
US 8.8.8.8:53 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com udp
NL 18.239.69.96:443 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com tcp
US 8.8.8.8:53 113.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 96.69.239.18.in-addr.arpa udp
GB 95.101.143.211:443 www.bing.com tcp
US 8.8.8.8:53 211.143.101.95.in-addr.arpa udp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.143.184:443 th.bing.com tcp
GB 88.221.135.32:443 r.bing.com tcp
GB 88.221.135.32:443 r.bing.com tcp
GB 95.101.143.184:443 th.bing.com tcp
NL 13.227.219.6:443 assets.edpuzzle.com tcp
US 8.8.8.8:53 184.143.101.95.in-addr.arpa udp
US 8.8.8.8:53 32.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 88.221.134.139:443 aefd.nelreports.net tcp
US 8.8.8.8:53 login.microsoftonline.com udp
NL 20.190.160.17:443 login.microsoftonline.com tcp
US 8.8.8.8:53 139.134.221.88.in-addr.arpa udp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 mail.google.com udp
GB 142.250.187.197:80 mail.google.com tcp
GB 142.250.187.197:80 mail.google.com tcp
GB 142.250.187.197:443 mail.google.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 142.251.173.84:443 accounts.google.com tcp
US 142.251.173.84:443 accounts.google.com udp
US 8.8.8.8:53 197.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 84.173.251.142.in-addr.arpa udp
NL 18.239.69.96:443 f14ab24c7503.3b8c98f4.us-east-1.token.awswaf.com tcp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 service.mtcaptcha.com udp
US 8.8.8.8:53 service2.mtcaptcha.com udp
NL 18.239.83.31:443 service.mtcaptcha.com tcp
IE 52.214.217.96:443 service2.mtcaptcha.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 edpuzzle.imgix.net udp
US 8.8.8.8:53 31.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 96.217.214.52.in-addr.arpa udp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 151.101.66.208:443 edpuzzle.imgix.net tcp
US 8.8.8.8:53 208.66.101.151.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.co.uk udp
BE 66.102.1.94:443 accounts.google.co.uk tcp
US 8.8.8.8:53 94.1.102.66.in-addr.arpa udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 142.250.200.3:443 ssl.gstatic.com tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
GB 142.250.200.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 lh3.google.com udp
GB 172.217.169.46:443 lh3.google.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 ogads-pa.clients6.google.com udp
US 8.8.8.8:53 waa-pa.clients6.google.com udp
GB 142.250.179.234:443 waa-pa.clients6.google.com tcp
GB 142.250.179.234:443 waa-pa.clients6.google.com tcp
GB 142.250.179.234:443 waa-pa.clients6.google.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
GB 142.250.179.234:443 waa-pa.clients6.google.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.178.14:443 apis.google.com tcp
GB 142.250.178.14:443 apis.google.com udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 appsgrowthpromo-pa.clients6.google.com udp
US 8.8.8.8:53 addons-pa.clients6.google.com udp
GB 172.217.16.234:443 addons-pa.clients6.google.com tcp
GB 172.217.16.234:443 addons-pa.clients6.google.com udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 signaler-pa.clients6.google.com udp
GB 142.250.200.42:443 signaler-pa.clients6.google.com tcp
GB 142.250.200.42:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 peoplestackwebexperiments-pa.clients6.google.com udp
US 8.8.8.8:53 peoplestack-pa.clients6.google.com udp
GB 142.250.200.10:443 peoplestackwebexperiments-pa.clients6.google.com tcp
GB 142.250.178.10:443 peoplestack-pa.clients6.google.com tcp
US 8.8.8.8:53 contacts.google.com udp
GB 142.250.178.14:443 contacts.google.com tcp
GB 142.250.200.10:443 peoplestackwebexperiments-pa.clients6.google.com udp
GB 142.250.178.10:443 peoplestack-pa.clients6.google.com udp
GB 142.250.200.42:443 signaler-pa.clients6.google.com udp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 mail-ads.google.com udp
GB 172.217.16.229:443 mail-ads.google.com tcp
GB 172.217.16.229:443 mail-ads.google.com tcp
US 8.8.8.8:53 ogs.google.com udp
GB 142.250.200.33:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 229.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 clients6.google.com udp
GB 142.250.187.238:443 clients6.google.com tcp
GB 142.250.187.238:443 clients6.google.com udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
BE 66.102.1.94:443 accounts.google.co.uk udp
GB 142.250.200.3:443 ssl.gstatic.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 8.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 www.youtubeeducation.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com tcp
US 8.8.8.8:53 22.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.187.196:443 www.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 172.217.169.46:443 www.youtube.com udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 172.217.16.241:443 csp.withgoogle.com tcp
GB 172.217.16.241:443 csp.withgoogle.com udp
US 8.8.8.8:53 241.16.217.172.in-addr.arpa udp
GB 142.250.200.3:443 ssl.gstatic.com udp
GB 142.250.200.42:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
GB 142.250.178.22:443 i.ytimg.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 edpuzzle.com udp
NL 18.239.50.86:443 edpuzzle.com tcp
US 8.8.8.8:53 d28xzasi0ukh2h.cloudfront.net udp
NL 65.9.86.78:443 d28xzasi0ukh2h.cloudfront.net tcp
NL 65.9.86.78:443 d28xzasi0ukh2h.cloudfront.net tcp
NL 65.9.86.78:443 d28xzasi0ukh2h.cloudfront.net tcp
US 8.8.8.8:53 229.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 86.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 78.86.9.65.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 172.217.169.78:443 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e443ee4336fcf13c698b8ab5f3c173d0
SHA1 9bf70b16f03820cbe3158e1f1396b07b8ac9d75a
SHA256 79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b
SHA512 cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

\??\pipe\LOCAL\crashpad_3776_BCZQQGKWYWMHQQOK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 56a4f78e21616a6e19da57228569489b
SHA1 21bfabbfc294d5f2aa1da825c5590d760483bc76
SHA256 d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb
SHA512 c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2cedd2c509c980e002de45b214b8ca1b
SHA1 91d7bc701a590f41391ad6c44e4d9660ae40053a
SHA256 ab783836428212ba9d77f5e505dccee76c0a6ecd3d8cda5bcdfb39a4a2c81a28
SHA512 43a509f8cf4eb1dfff0d7cd08ee49faba8594fcd0aa93c2df7947706caa4f883aa8a657de05e2e431238029ca191669527e1c89e9ead38d00ce668e5f4b048d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 1555922e7b239a61065280ad9e4cfefd
SHA1 1bb84bbc6471fcc816141fde2b529ecdf5531825
SHA256 e039ddcbc73ebef56f8a5605b5930f547dd3ead3a5e5223f2cf6fb77667cf7b7
SHA512 ccb841d7b1434d0e7c0527fd2ecbe76c3566f0f119711eaa0fdb0e3b88bb3ce2c52c24aca6f68e8cb0ec67e35d8601faaab2f14d0aaa956dfab42398f6906dbc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\939b7589-0f4b-40fb-b0fe-f6ee49269734.tmp

MD5 acba64432c5dce1b2dc70dc93c7526ba
SHA1 f59b9f20594420ec3da2283a050c081e27570e26
SHA256 84577cf135bb01b633e375856a4037237873a078efda673653d48d9d60f5145d
SHA512 153eae89ea439ee6fdb9c3a9fad94e62f71e7751d91225b929c9aa833b460bc860ffc89945fde559ba4f4d6599d0c82a07a3ca0d75fae84e524b2f67b0bbd0ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b108a4fdc00ee94ed01a99805a1e70b8
SHA1 d24dc2675912195fd4f8108ea2daf0ae415d1fc2
SHA256 de46aee08ab4e3fc8c0b9656687a3577a30d469ab53ceed68f954abd6a9aebb5
SHA512 63050cf703b2d0f482b236ab9ea7880714a42cffcd32c19f5118a2790b7a6d3192947f250f2f1ea51ba4595301b834b71fead4e9f3c24c351e90cfb9b3df4af1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581383.TMP

MD5 12a0e9afe989c494d9978b2f6dae45b2
SHA1 bcbfc75521544871322f5d5951a50b0885769980
SHA256 4acb9fa9d66ace334381254ef09ed196b035e81fa7f5bfd3b3551df9e42810da
SHA512 1f076ee422aa7fb14900bda8bc1498e3c0308735240e95498dfe50d04dd83feaf79d64de6370d614275ce9ac58b7a0df514c6b972883253b1f0a00782385e765

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 843f63ba34117fbaf671c6f96533d49b
SHA1 a2f096ac28af47035aba8c81502da72d91a1d9d2
SHA256 93905b28e19971116cb71488648cdc954cc5f5eacabf9f62437dcab055b0eed1
SHA512 1a11620a4e393195bc4ef614f02b233c983db5890705f28fa150ffd4d4d6602b58b1bf1d5efb0e444f8cae2ff51db5ec4cfa2109282476281d198ff74e2e88a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ca87f79aa2b1dc7d92e1e3c5d8f8c72c
SHA1 dbeac3fcfeeee9f1c0781044baf84924bda64ddd
SHA256 2948730dd4ad7f89c2824e12368e808e7c947db593af8ae02f3ef614c5cd0b7d
SHA512 0cd76dba1d915b6ca6848caa007e186674fcd4a544dfea096e4b69587140d09c215d35c547440bc76e6f8b8285bbd04d0e16f69328ffea97ff122732140a4c89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 28f5903af19b368a5bebc23494ca1abe
SHA1 1ea490fbb6a9242371e36f220bdb0525241a31f7
SHA256 5eb651045b6f8b6b0437d46f9c1324345d93ca64af03f1d0cb876ba1da9d3d04
SHA512 836cd1399ce5c4bf87bc1edf2ec6bcde9eb7061a6a881fe85083d78062a7a109b7555aeb6c452498b0eaaaf359271565fe2b1b2090c9c0d1c32a4fcedc44bf74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mail.google.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 35e525c301cd890327e6ff152cfaf4ba
SHA1 2c2df9d89bef9f6302a07d666912150014a12d02
SHA256 9e446f1ff9fd45ce74fdd2ccd43c5887726d53bac067e616d8ce49fe050322cb
SHA512 8c55d992645badd5f7f82d2b4fc93a09b30a564920e2a0a7a59512a0fb6e6bb55bbbd8b610c92794603d8862804f075a51fa6aacb81c0ba6479650871f35ac30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 153de50ef1c02f4522c80989fb9598b3
SHA1 bbf7e0099fd9082f8f63ca0e65a59c6427ff830b
SHA256 17b445a79321ed9abf7606237b3c9325e053fb6c0ee73a72a9ea8a2755e76193
SHA512 6cdb16f562292af953dabad90f6e2dfc0ea09d6dcc451d189ccad7f114751e8df0ac932ca42b91b8d165355735ad74992d8cc1ac2a05c7c8403e2857c688075d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

MD5 b2634adb96be3e50e87dbbee1e2881e8
SHA1 8fa7912399fbdb13121b8a87a2a4cb77d1330d63
SHA256 1a903546cb324c353b5fd55f1eb147a5a8acacd977246cf910e6fc98aa170088
SHA512 b3d3db29c05069772f8fc1b3bca9fc525cc6d53988b3383c7a64e25aa0bdfaf79d332e6c1b68ab5a0350bdfe28d9e13ebb56386728189608b6502799edc176a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 e246e296b2d159ad99c10b783e76cedc
SHA1 3aec849caa22030cd5d0ec139c797dd4a724a2b2
SHA256 72cd9a8051ec07ef2da1107d9d2b451cdabefa64b60e795f2736895d209c5bb2
SHA512 9fa420bef387ec36dd60307e3f4bbc4aef28a79243b4fc1da6da461ae4be8e4929ce9826c13f19acef4b8e4acc24a7b914260029223ef2faa2d47d1546942495

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\bbfe8bb8-36dc-48e2-b2fb-0885300d6547\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 823da6de36bd97d4ba8373bf3aa8ceae
SHA1 2a00978b8f77fe5c571d0936f73eefdbaa26e813
SHA256 49f22fa2aeb0a073fb7f59e7f24fe6a58cd61cc604b1f9ff1be32acc4af8369a
SHA512 d97f273db62a89f7ee3b932fd1d457676fc15146391f5b9ba2f9b56208078d0fd601f423599f39ec68806553467283bd0a4bd645e64ce47f2396b96c13a28dbd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 4e075fef575216a5be604ff489007bc4
SHA1 07be26bf727b123395be443a9245bd10da60ab12
SHA256 f2065536beaee87b9034834258cecb9b53a30f0c61efa4749583ff59c5e79b64
SHA512 7cf1df56abc2e10d8785f387a0df7cce9688c6c829c467d8a07e2edcf64d2ce38ad3bddae50cdfa4c81bdf009501ff4dda0dec9096c057ab5a452a0b2391c292

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt~RFe586c32.TMP

MD5 7737f7bd52b2d310429e4853f9d59674
SHA1 bd8fbb63499573d2afe184cd9eeea13097fd5368
SHA256 85379421346fb530cd52088f5e22f5d08de2078c56dab26a1a39b92a2ac4d17e
SHA512 0733a4b83d5532e31f14186459780faac1039dd786a256706d361064439cc7cf075147b0c72235d7357fbba68efd1b0b584b2b953ad2760464898d0dba8940c5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7b74085fc9e35420406d92a8d8788ac5
SHA1 c6e7ba2977ec93aed0f990a4443ac05037877bf5
SHA256 11c1a0a38c8ea3b01fe18bf3fefcd1454f50a861b0ee77e119311fa65b818aa7
SHA512 b951dd5eb85d34b903110ce60d089f7db18ac69199218cc3d08d3aaa72afa152258955a5b2bb0b155ca0bc516d4ef91ceb85d2a3ccd4f57935c8eed5acd96bce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6c690577b178cf90e2726366204261ae
SHA1 b656d3f84d26d936c86e90ebbaae0e84305d7d2d
SHA256 8a7a4aba04f4ab0316b56c01d4ad95a05e0571ebd5306036524d6c16e4408a00
SHA512 f6341e8cf0256de6afc7d4a2915b0c609b9bf00b6c9542265cb7accdfd51acc3a17f80329805d524089d6f84d69450a0c79ff4709b7eeb0bbd7996da7d5f6887

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a12d.TMP

MD5 4ab0330bed7706087bc249e2a7e6c0f3
SHA1 1ccb5381b274910b777c0ba1a5631287bdb7b067
SHA256 4d91deae99d661c16fba4f50ec844a7d67a160fe49eddaa2ef441b5b66f6173e
SHA512 4cb03b14d30608ca98ef83bd78d0c696d44b9d590c700c281a65b661f57f39c044bb47736ad1e6c32118ec02003e84d5ac7b3e9e771f996ad0fcfc8ef0eb7e47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 ea39cbd8944d510d34d71baf99fe57df
SHA1 1c622b734b851c9002436832b97a166328717350
SHA256 394c97c862345ae9821a73604270d047101682e2b633a6af685baa9e3fdc12c8
SHA512 9bba316c61fccdaa949d38b63c61d01e700515f50a5a3d56a7157dde7cce8e6d182b3db80a5a48434d6bfcbfe942317cc692f151861154821fecfe7137eb2a79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\37e74148-4344-4d8c-86bc-b491c1d69adc\index-dir\the-real-index

MD5 894871838536ee45ac60992bb917fee7
SHA1 d49af6f476b36cc9837daf4a7f153644274d1f42
SHA256 c712d81d8c616ba8203251280e75be61204f86ff06bd3b747fae940a77ade859
SHA512 d9343a884648901d80cb5969141e662a02e9a41841f9727978b1a30130fc1949d22e7c19295efcce41b3f787d42e8372a6f452c6703c683f83fd26e908929f59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\37e74148-4344-4d8c-86bc-b491c1d69adc\index-dir\the-real-index~RFe58a3fb.TMP

MD5 32c2e57075dfccadc872c70f359b4058
SHA1 195b8fbb1281dfe1794f57f29d606dc71585deb7
SHA256 7b64f26b31160005a7e1a1b4a8c51a8d7a9896f6281ed0b2eb3eecc0e8969b0d
SHA512 e3bb544e4365cbc9ac1ec43ad126d508954e8c8bcf45e69ff9e5b4c7428424a54b3d0b93d7b5bffbffe99e0819accdf8b2cbb0185bdd3308f1c1cbb5184852bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\46f515ea-7438-469c-9b44-dbdc6e1a04cd\index-dir\the-real-index~RFe58a61e.TMP

MD5 98ba72611a22527438c8e722b0dc5192
SHA1 6c9ec5ba5b15dd7cd9c82c87235d3edaf4ca3d9e
SHA256 5db1a8ffe6962624972eb0d7a98027c026c28fd07c68408ff1757bf17c2c3088
SHA512 55f978fc4fcb9262476c2cec211782b9057b6b1b3289606a9c2848b24c665af2c11f2cd02d3c27cf870b8679fb6e5a8c9af878c82711670eed068b08b962bd8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\46f515ea-7438-469c-9b44-dbdc6e1a04cd\index-dir\the-real-index

MD5 153974e44ba1e60a143f9c017be1f480
SHA1 4fa43be9cb9ce8da5071f73b9992537051e1cae9
SHA256 78673e5a4abb847960ef1d63656e2e5c0193e0b3ec5f2c36c9f95dca779d2d25
SHA512 d68a6e5746ab88d1b036963721bb66fe122f014d3d1376d32632d4623453cb1fa546d092d091c47c13d1cfdff9e99fa899c6ccaab9df8c164ca1b207a9dfc5fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\12aa1b54-f88b-4a63-9aab-24463eb53d00\index-dir\the-real-index

MD5 48948863ff81c5d108036a1380ff29b7
SHA1 f02364838c5e6778b46c79f5c3c188208ab962b0
SHA256 6178ee14dab8df045017446bce4f5e571f57628fe828d5d0ec4ba3c2904e9d82
SHA512 591745ac5f78131ae5aa8b8b22b3890acdadaaa32cc04bf1275a32a57a30305138b12a6eea40958cf711a361da6a2b0aa01db1ee09593208072bf7bd3cd56a8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\12aa1b54-f88b-4a63-9aab-24463eb53d00\index-dir\the-real-index~RFe58a738.TMP

MD5 442083e18de1f13743bc0fe421289f56
SHA1 9535bed12e72bb0e4b611c771c7cd38900c1e46f
SHA256 bcd16791fbed0a468f96b12abcb0a37286365a73ee64d70ee000c51e54fdb596
SHA512 3de65b80064534f802f8ac0a7aa696eada537f75843744ed634a45d0e67328b8de97ec86df0c35a03bd686a044fa312b98ef1eb45870d9bb4daa146318b4a912

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d889e2f78f17c194fc3688fd164ca165
SHA1 32cfa29b2022b4325c8f36bb1b9e7b68bb64e182
SHA256 8bef0515fa178b40b18faa084a7023947c86cd852a39ec147e8fe5aaf8a60c78
SHA512 08295530921533076efceac346cbcb1146ec12052363d61d6b36f3a19465a945f3df7b999d65b57e93a5fa9d475458e8b9e5a744c7c38acb37c0aeceeab0ec2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 aab6a59c7034a56eab654b5daca597fc
SHA1 371901df1cfad4d6717ff7709162b01f82cd68a5
SHA256 7b3df561e4c6641dc381435c0a2e4b37e43b84ac1637c79f345d43cc682145d5
SHA512 574779fdc2ffbe176428bf5e8c693976712adf9e753a814976ce8c3ea398263719988adc280474e7b0e31dc990c9d0c585b0264e85038df5ef3bc5c8ac0a48af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ec3392421440edf0425c53957487d804
SHA1 4ce990638ee38a7c33fc929ac66f4910f2692e7c
SHA256 f7daacd4ed0f074f85e1897163e369a47ab3db106d2380b5cfde97419c6c149e
SHA512 09f8835847eca06fcbd56c0629cd75940cde8a97bf0bdcca37cd87efa6ebd83e6030037bd01ca030512249885015cfcab1456d0b25f70f0ab927ffe97ad090b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 416d4529f1f70276c0cc41ed814f8f0a
SHA1 d5cad94b9a8014e15918b6a3f03bff2ac2a52eec
SHA256 ba966dee5e9f80ecdb5a8dc9d131b47df8800cb205deaab860ee371f9af12b3e
SHA512 645c91a8c5b83a523ae2daf25b4bfc60f4b118572b5946343662b8f123e35b61aeae9f0d2d1db9d76f248500d812b55f4f0b0f9ec6ca3562036ed95e15697406

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 228fb5f4d1b3df656ad036216f9aa45e
SHA1 e599b1a02397064dbf7c0631185c1ffe16f471e9
SHA256 0b157cb4bc90f01dd9faa77802dc983c3afd9973156b91170ea8598888ef669e
SHA512 4a2cec719d5b273efb120d2b4ad2706ba2f5d66abea02ac330b9e91ab60241a263a43a527e4c9e5a1d08d67579a925903deb97970034390e4d4f9a7494fb079d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks~RFe58f4bb.TMP

MD5 1e783651f81c106f2fb224824f906b2d
SHA1 817c50115c14e98f065f6b9ba5a4536c431f5aab
SHA256 bbc19dd1e95d1b701c82307c2cf776d5b438f0c92c8f34443cbcd54b79878397
SHA512 e54ab3f0cd46835fca5b07795b44960ff760a937ebd91426c5baa0637867706bf2d15e0044181f29597723239ad6b8dc02055e36017d16bbc9f1733f3d60acf9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

MD5 e28254c6b59d7cd941aa9d4f01ab623f
SHA1 77262567f39db8a831743584527662cc8b8a7895
SHA256 28dc868825a480d558996d0f43a2afa6d31f9523025795e0125f1c9f66755acf
SHA512 0ee30f952974400111f7b85671455fff05f8282627db85d8bc3d8d470a18c259170eaa9bf260baa0c8b0c29c26f28490f83cbba2d38770858528d905d91fac90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\bbfe8bb8-36dc-48e2-b2fb-0885300d6547\index-dir\the-real-index~RFe58f8a3.TMP

MD5 257b784f62323492042be08853687cf1
SHA1 4c4edc0532d52800e33a279a64345cf1f3004365
SHA256 938daabd30e6ae7a8f15584117cf0ea3ff1dcf2a4004d911d9709098581fffb7
SHA512 c98e97dc227303695ab04bcada2cb369d9d840e8fdd957d4d6a560512f532cb8f843480f23a19060c148f9386ced37c5c8f5ee95646cf8e86f1a52e280c3ab4b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\bbfe8bb8-36dc-48e2-b2fb-0885300d6547\index-dir\the-real-index

MD5 1daa49e47a8575237e73d23b83c6822d
SHA1 07cc62fbba2d6ea56406c067de8a3d67a71cbce9
SHA256 0fd065a486c3fdfd6d7782daa514f4e4d15d483cd749e2db77abef80080b33cd
SHA512 94e47493400bf1d80b2c09819e3023bdbaca47d4c7eef72a1edbc7c742605f707da0859234e1b99801c08a497e2b66eb9d9a7fc7616b30129383f4327bbb8520

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt

MD5 510272e90f53651fd6f57f100f563720
SHA1 e22822633f957da8175fac30f917a869e40dec77
SHA256 041e0c94c97f74ae26b8e1e472371c044a72cc331fc33ebbb5922f1fffca06eb
SHA512 c1e1f77ec4fb7862ea30c5862d568b0865597b2a59e0da1aae68eebe00aec7e13a16637651da35d584fe123a4c7d261196ef204aaef7c3ed0d786424ab8a12c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

MD5 a3d2cb635805853eadd1d09ea20207cb
SHA1 98c6163705ae8f8a8d823cdb2569155cfedb7e28
SHA256 2a35b9a7c07afcad1dc21c0b07afef24f7f6b61929407f7705251292a247c82b
SHA512 05adef2617ff53142fc5d0f311013938cc29119bc1a43e0588d4d3d7c410ae045580622f91bbccfb9ade54c3e717322c76bf075ddd420dca2bf13f070b9f1247

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7c354ee5ee3f0bce5d2369b1b5413b3
SHA1 07220bc365d00341e52449b97d922ac2368919ce
SHA256 bb2f2d4fb1b8d833ad4a48f87991878ae1cdf9254a0d5a494bdb8fd697bef082
SHA512 56e5defdb5d87576a6840ab9196740c5d268e2a6d32136ae2b764726b2cc315b877f783e43cc0d3b68642fbb5dca5e1486673de8868c6d0f26d330282a6803e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 421f66fcff49c90dfbd6bf2ca9b01876
SHA1 4352003fa4bc419bda30d6203fd765b25c755290
SHA256 ba870b0d7c359dfe0591564f8b3a1121ade97e96666a73705d32f957fcddd9c4
SHA512 3e4fe98b9cb8e5c1145f24624a02cdefa4394a15fe75a805733e47c8488e4b678abb8832470b05c632507def1c1c7f55cb714e69fbe5fe62f608b1cf37268fa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3d4ed83535ae873bb80b6e217b356dfe
SHA1 875a58b0102b6e765b280d2bc18694eb9bf4bbbc
SHA256 47d616f3387ec0db66797848f6f45af9ec78ce170dbef7777b03c8e955cc3fff
SHA512 515149eb64d7a5c7bd1c77a51e7770c86335dbd4d13724f41cc76561bb3ba6d7b9c67697cdc8e7d63532685ac4f373f91233f764092d3b0a2277fcdd7724a296

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 07795e1e9dbc9fe12fb6d5b59185dee7
SHA1 8600db91bc2429bd7fca905c7db5cc7a7bb834f7
SHA256 c5197a09751363f97ace83aa5b7975a53e533e90972875c58513c24acc0b1e88
SHA512 3f362807a49503dcce631c6e0206c97221d78dbffba0fb79f4db066ccfc52fc692718d187dbc61fe36e7d66ca0b476ad4949f82e69f9ab676c6beb07f00387fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtubeeducation.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\b83df0e93fd18ff75bc71615a01bcd30dabd5704\index.txt

MD5 9f9063b09dff63abedcc025180485f3a
SHA1 49175d26685cd032b6cab3c71048d9c8929f2f45
SHA256 636e0c15f708439004ba1948b79142e876472ef25df2fd5d1ee59e8b2c316545
SHA512 7546aada6766d69519ba8fec1b9b2d538aef1d4f2f54a0e880ae26d6b82e5348992da60dd591a3b83c430ce6745a106269dba784c3ea19819dbfba76e51c0519

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3089f1cdd131a462a4335c964c85e8b3
SHA1 294142f19ed8779249000cdb60b424e4b038c682
SHA256 51bad4970ee249679f30cea043443dda3846a511d2c1eafead80842f921237da
SHA512 082a5228341c71de31a3b887ae72996ce0e662263447fc76130fa1204ee7d658c909bcd9a86b69fb5204a9ed1827fe581760390080dae88666a222ee2e393894