Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-04-2023 16:10

General

  • Target

    magicmic_setup-com_filme.exe

  • Size

    4.4MB

  • MD5

    52c70ce717a8ae88da8f9f5774b6ca27

  • SHA1

    8ddeff940fd572a24b088aa99ba7d35ce0d34468

  • SHA256

    0f836f11ce6f1e59df517a404072051640591ed9cd07251ba097dd68e604c6a0

  • SHA512

    7f11af5d6bbd86ba30ae9d6c1734a1cbf17badf2e85a20c741d984149d7ad8b06b79372ad2ae9bf6e2220b667344eefe39f9b02bf52b4f92e26a64ccd96c1253

  • SSDEEP

    98304:fAiCWc5+gW4oEpKpRmAPgq3aUeffMP5zaH4IqNjSsKCpqX:Yixc5doE8pRmegq3cHWaYIqNJ1

Malware Config

Signatures

  • Downloads MZ/PE file
  • Drops file in Drivers directory 5 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 41 IoCs
  • Registers COM server for autorun 1 TTPs 36 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 17 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 7 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 13 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\magicmic_setup-com_filme.exe
    "C:\Users\Admin\AppData\Local\Temp\magicmic_setup-com_filme.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4920
    • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\imyfone-download.exe
      /verysilent /imyfone_down /wait_run /path="C:\Program Files (x86)\"
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:2548
      • C:\Users\Admin\AppData\Local\Temp\is-NMAUI.tmp\imyfone-download.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-NMAUI.tmp\imyfone-download.tmp" /SL5="$601C2,74882862,173056,C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\imyfone-download.exe" /verysilent /imyfone_down /wait_run /path="C:\Program Files (x86)\"
        3⤵
        • Executes dropped EXE
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3908
        • C:\Windows\SYSTEM32\cmd.exe
          "cmd.exe" /c tasklist | find /i "MagicMic.exe" > "C:\rd43774972_55310560_tmp.tmp"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:1848
          • C:\Windows\system32\tasklist.exe
            tasklist
            5⤵
            • Enumerates processes with tasklist
            • Suspicious use of AdjustPrivilegeToken
            PID:2424
          • C:\Windows\system32\find.exe
            find /i "MagicMic.exe"
            5⤵
              PID:3504
          • C:\Users\Admin\AppData\Local\Temp\is-4ME51.tmp\_isetup\_setup64.tmp
            helper 105 0x4AC
            4⤵
            • Executes dropped EXE
            PID:5004
          • C:\Program Files (x86)\iMyFone MagicMic\AutoDriver.exe
            "C:\Program Files (x86)\iMyFone MagicMic\AutoDriver.exe"
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4184
            • C:\Program Files (x86)\iMyFone MagicMic\devcon.exe
              "C:\Program Files (x86)\iMyFone MagicMic\devcon.exe" find *SodaDriver
              5⤵
              • Executes dropped EXE
              • Checks SCSI registry key(s)
              PID:4124
            • C:\Program Files (x86)\iMyFone MagicMic\devcon.exe
              "C:\Program Files (x86)\iMyFone MagicMic\devcon.exe" install MFDriver.inf *SodaDriver
              5⤵
              • Executes dropped EXE
              • Drops file in System32 directory
              • Drops file in Windows directory
              • Checks SCSI registry key(s)
              • Suspicious use of AdjustPrivilegeToken
              PID:4780
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s /u LAVAudio.ax
            4⤵
            • Loads dropped DLL
            PID:4152
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s /u LAVVideo.ax
            4⤵
            • Loads dropped DLL
            PID:3660
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s /u LAVSplitter.ax
            4⤵
            • Loads dropped DLL
            PID:1900
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s LAVAudio.ax
            4⤵
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:1612
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s LAVVideo.ax
            4⤵
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:3912
          • C:\Windows\system32\regsvr32.exe
            "regsvr32" /s LAVSplitter.ax
            4⤵
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:2404
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apipdm.imyfone.club/producturl?key=installed&lang=English&pid=96&custom=com_filme
        2⤵
        • Enumerates system info in registry
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:924
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffff22846f8,0x7ffff2284708,0x7ffff2284718
          3⤵
            PID:4488
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
            3⤵
              PID:1892
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 /prefetch:3
              3⤵
              • Suspicious behavior: EnumeratesProcesses
              PID:4640
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
              3⤵
                PID:428
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3656 /prefetch:1
                3⤵
                  PID:3516
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3616 /prefetch:1
                  3⤵
                    PID:2256
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
                    3⤵
                      PID:4628
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3836 /prefetch:1
                      3⤵
                        PID:3816
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
                        3⤵
                          PID:4328
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
                          3⤵
                            PID:2404
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
                            3⤵
                              PID:5008
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
                              3⤵
                                PID:2772
                              • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6496 /prefetch:8
                                3⤵
                                  PID:1020
                                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
                                  3⤵
                                    PID:2180
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff788175460,0x7ff788175470,0x7ff788175480
                                      4⤵
                                        PID:4044
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6496 /prefetch:8
                                      3⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:4968
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3896 /prefetch:1
                                      3⤵
                                        PID:4980
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,4284860515314625777,13993922207756411025,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3076 /prefetch:1
                                        3⤵
                                          PID:1324
                                    • C:\Windows\system32\svchost.exe
                                      C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                      1⤵
                                      • Drops file in Windows directory
                                      • Checks SCSI registry key(s)
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of WriteProcessMemory
                                      PID:2344
                                      • C:\Windows\system32\DrvInst.exe
                                        DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{f4d9a10e-ae8a-b44d-a79b-c7a0dc36c6b6}\mfdriver.inf" "9" "40daa02cf" "0000000000000134" "WinSta0\Default" "0000000000000160" "208" "c:\program files (x86)\imyfone magicmic"
                                        2⤵
                                        • Drops file in System32 directory
                                        • Drops file in Windows directory
                                        • Checks SCSI registry key(s)
                                        • Modifies data under HKEY_USERS
                                        PID:2080
                                      • C:\Windows\system32\DrvInst.exe
                                        DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:ed86ca1176bd31d1:MFDriver_Driver:1.0.0.1:*sodadriver," "40daa02cf" "0000000000000134"
                                        2⤵
                                        • Drops file in Drivers directory
                                        • Drops file in Windows directory
                                        • Checks SCSI registry key(s)
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:1188
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:3404

                                      Network

                                      MITRE ATT&CK Enterprise v6

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Program Files (x86)\iMyFone MagicMic\AutoDriver.exe

                                        Filesize

                                        1.1MB

                                        MD5

                                        01582344398a89c91b0b41b703ecc4e8

                                        SHA1

                                        7684f91a8006421eaa5acbf83b2de6527d5e122e

                                        SHA256

                                        767f794cd4b1b304ea49a851d3811d90d0117db541db96f250f7f4a3eaa6cadc

                                        SHA512

                                        a31624127738743ae56db8975f90954cdd1e334d596b0f6a05d17ee4f5dc0cd244e07068ba8223ed73880c4b95f4120f451db82d10aa4c42288de5138a87c8cb

                                      • C:\Program Files (x86)\iMyFone MagicMic\AutoDriver.exe

                                        Filesize

                                        1.1MB

                                        MD5

                                        01582344398a89c91b0b41b703ecc4e8

                                        SHA1

                                        7684f91a8006421eaa5acbf83b2de6527d5e122e

                                        SHA256

                                        767f794cd4b1b304ea49a851d3811d90d0117db541db96f250f7f4a3eaa6cadc

                                        SHA512

                                        a31624127738743ae56db8975f90954cdd1e334d596b0f6a05d17ee4f5dc0cd244e07068ba8223ed73880c4b95f4120f451db82d10aa4c42288de5138a87c8cb

                                      • C:\Program Files (x86)\iMyFone MagicMic\FeedbackRes\skin\checkbox\is-E78E9.tmp

                                        Filesize

                                        109B

                                        MD5

                                        92748ddd943219584734e6abe41b4c05

                                        SHA1

                                        cb60a1751342d0f0110689d1f123205f384bced5

                                        SHA256

                                        ca4203aaba52b974f48d2d26d9296b1de3d9e30c8eff1497e2fc7cb16ca1efd5

                                        SHA512

                                        6aa1fe4a154a802bb170d73088b52d84d22213f703044ca1ac112b648c9167467eb232799b061c97caac5c356927055061d3a4934161c11dfc3b317f3a59e96e

                                      • C:\Program Files (x86)\iMyFone MagicMic\FeedbackRes\skin\checkbox\is-IVGVL.tmp

                                        Filesize

                                        270B

                                        MD5

                                        49f8763e56e8e743be0e3577afee71e4

                                        SHA1

                                        a9b4861cbd280144d441114baec9e6d5191218b6

                                        SHA256

                                        2f7e0362a2c05ddb349f2cca46fab0bde09834983b6fd8cf8662155d9c3ac5d2

                                        SHA512

                                        13d11d8dd198c14ef62437b3c32ddfdea85e10860fa160d0294da7aad8e47dc606015d0f9d71951375e027483781836e1b3963eee7c319c858f50be7bfb6deae

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVAudio.ax

                                        Filesize

                                        303KB

                                        MD5

                                        ba8906131ddad480ea9d383bfca24bfb

                                        SHA1

                                        4c5d0a11faffd8b6f342618be61888705076695a

                                        SHA256

                                        ff5bd7e85218882056be6401a911632f0a0e11def389c24899c934df0d396eb7

                                        SHA512

                                        95e99451cea6cd2f52b032230071daf3926c391304d8d70bc6f155b1ba252e376385e2ea0829a9c29112cfb3ba116f443563e7d07fee259d911beb4c117c8166

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVAudio.ax

                                        Filesize

                                        303KB

                                        MD5

                                        ba8906131ddad480ea9d383bfca24bfb

                                        SHA1

                                        4c5d0a11faffd8b6f342618be61888705076695a

                                        SHA256

                                        ff5bd7e85218882056be6401a911632f0a0e11def389c24899c934df0d396eb7

                                        SHA512

                                        95e99451cea6cd2f52b032230071daf3926c391304d8d70bc6f155b1ba252e376385e2ea0829a9c29112cfb3ba116f443563e7d07fee259d911beb4c117c8166

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVAudio.ax

                                        Filesize

                                        303KB

                                        MD5

                                        ba8906131ddad480ea9d383bfca24bfb

                                        SHA1

                                        4c5d0a11faffd8b6f342618be61888705076695a

                                        SHA256

                                        ff5bd7e85218882056be6401a911632f0a0e11def389c24899c934df0d396eb7

                                        SHA512

                                        95e99451cea6cd2f52b032230071daf3926c391304d8d70bc6f155b1ba252e376385e2ea0829a9c29112cfb3ba116f443563e7d07fee259d911beb4c117c8166

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVSplitter.ax

                                        Filesize

                                        655KB

                                        MD5

                                        34b41442db89aeb42c84e27d078d1d1b

                                        SHA1

                                        4e4cd12680d68f6a8ac2d9869bf8ea99465cfd9f

                                        SHA256

                                        4a1ba548733f139e0d976d3a89c98e31b382f6ef34fddc85bbd9e545fbc9d51f

                                        SHA512

                                        126c533ce4f1fc54691bfb6e0fb9e0d289bf208cf9ef43e6f78be8ee471dc7aeb0443a858b768149b946589df33e6f213fe04fb1e2225796a6a69f72e2725a81

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVSplitter.ax

                                        Filesize

                                        655KB

                                        MD5

                                        34b41442db89aeb42c84e27d078d1d1b

                                        SHA1

                                        4e4cd12680d68f6a8ac2d9869bf8ea99465cfd9f

                                        SHA256

                                        4a1ba548733f139e0d976d3a89c98e31b382f6ef34fddc85bbd9e545fbc9d51f

                                        SHA512

                                        126c533ce4f1fc54691bfb6e0fb9e0d289bf208cf9ef43e6f78be8ee471dc7aeb0443a858b768149b946589df33e6f213fe04fb1e2225796a6a69f72e2725a81

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVVideo.ax

                                        Filesize

                                        1.2MB

                                        MD5

                                        059068f49ca4315f5925cfed0f143ae2

                                        SHA1

                                        59889ef151d571faa2d03bd30b6aecc4608c5b6a

                                        SHA256

                                        835be332cd3c4d617ddf33a573814792f8cac240717782653686e3c8a98a5993

                                        SHA512

                                        e979ed4c7e0c8f796839f3bbb30ea6305f1694566a7d97861cacab6b714dead9838239c3bbf0e886614f077351b7af10c726a33afc0783bbb274cb842d6c624b

                                      • C:\Program Files (x86)\iMyFone MagicMic\LAVVideo.ax

                                        Filesize

                                        1.2MB

                                        MD5

                                        059068f49ca4315f5925cfed0f143ae2

                                        SHA1

                                        59889ef151d571faa2d03bd30b6aecc4608c5b6a

                                        SHA256

                                        835be332cd3c4d617ddf33a573814792f8cac240717782653686e3c8a98a5993

                                        SHA512

                                        e979ed4c7e0c8f796839f3bbb30ea6305f1694566a7d97861cacab6b714dead9838239c3bbf0e886614f077351b7af10c726a33afc0783bbb274cb842d6c624b

                                      • C:\Program Files (x86)\iMyFone MagicMic\MFDriver.inf

                                        Filesize

                                        4KB

                                        MD5

                                        1542d93be42615382bd29da2dc241bf9

                                        SHA1

                                        b391fd5ccc4eb8411d240020f1e3bac6109a9c35

                                        SHA256

                                        63de9d9babb23a85c751fba32f9c0501e00f6d60f71e6aac024aaf3bb8136b5e

                                        SHA512

                                        91cb382f7fc07102e974bd5fc834cc0cd929bba70338f08fcf481d6bf4982608d210ecc869b06d95699f97adc0f0d951f03efbdc38cda275a6e1a6e43f245a67

                                      • C:\Program Files (x86)\iMyFone MagicMic\MSVCP120.dll

                                        Filesize

                                        637KB

                                        MD5

                                        de6a2d8f9f80b08887e992a65cf93ba4

                                        SHA1

                                        51d1962269cc80bfdcb04fd4e1f1966d4b4edb48

                                        SHA256

                                        c3cee22c7e8907559428c6a886469829d7acd001d48b239f2170167280943b4f

                                        SHA512

                                        2a2981b9152a8fa5cc5c0e0b0e651972deeab05c2ff164c183ca4d76390ddaa2a84dd76e8cc1c6af257222f6571e7c1013646ed2b3dd8e22bdf2a6b071a7e69a

                                      • C:\Program Files (x86)\iMyFone MagicMic\MSVCR120.dll

                                        Filesize

                                        933KB

                                        MD5

                                        efd940fb82b30181f789e92ea3b17f82

                                        SHA1

                                        ec5831b8a138e513876d8ea9c5d93642cdefbb13

                                        SHA256

                                        f8553e9eace3ddfdfc587c17d38aa1154fd4be53f46c2f0f78fd16cb56399008

                                        SHA512

                                        8b2269665fe74c7ad622d7c4db733e1bfcdf31b03e00fc83a38c91ad423af4a2d3dce9cd7bfb77dad791c44d9b85183d94bff9404f05c30ebaa5e6673e9322a2

                                      • C:\Program Files (x86)\iMyFone MagicMic\MagicMic.exe

                                        Filesize

                                        15.5MB

                                        MD5

                                        7d9d7538b286651cdb7be19ab5013768

                                        SHA1

                                        33037b435bc9d602ef98c4b7d2f30399decd5923

                                        SHA256

                                        eaad94e3b918c84906ebec36c7ce5a05e883ead71a82b46eff45d0a22d4d9e8f

                                        SHA512

                                        7f46795e1b22e4bd7301aff492e43da37b6bdf8d76af854d1d83c3401228a2323a06464ebe4a950627ce6f520b9d202b95b38e0137dc816966ebb8db289bd2da

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Core.dll

                                        Filesize

                                        5.3MB

                                        MD5

                                        8d58ca6cdcaab10228da9ad4f74f2274

                                        SHA1

                                        fdea99bb6d814715fbd3a39bcdce928874d8a712

                                        SHA256

                                        279107c0dccb733e68cf39f59236e01709d395887626715bc27b69d864dba4a7

                                        SHA512

                                        2fb035245945b601f5851dc152a5b240c98044d85790cff1766eba3bc9b64b8895bac3504a1b2b5f86beca8f5e209b22b95632a14b138c16331695135b364242

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Core.dll

                                        Filesize

                                        5.3MB

                                        MD5

                                        8d58ca6cdcaab10228da9ad4f74f2274

                                        SHA1

                                        fdea99bb6d814715fbd3a39bcdce928874d8a712

                                        SHA256

                                        279107c0dccb733e68cf39f59236e01709d395887626715bc27b69d864dba4a7

                                        SHA512

                                        2fb035245945b601f5851dc152a5b240c98044d85790cff1766eba3bc9b64b8895bac3504a1b2b5f86beca8f5e209b22b95632a14b138c16331695135b364242

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Gui.dll

                                        Filesize

                                        5.7MB

                                        MD5

                                        02021252028e70098b27a4853c28466a

                                        SHA1

                                        a07554baa14e00e6fecec2b1dbb4cbeed4ed51bb

                                        SHA256

                                        7b91c826c001e9969100c5cdcf9292c2d71b774d11e5e951c896361d4f759f8a

                                        SHA512

                                        ea581735b7cb76cfca164c6be2927b82d003a2cac4779c195440d7bd1199f64fc624c29d261198c7abe9e9028e0277cf0f2ae1bac999600c1bd11a96ded722a3

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Gui.dll

                                        Filesize

                                        5.7MB

                                        MD5

                                        02021252028e70098b27a4853c28466a

                                        SHA1

                                        a07554baa14e00e6fecec2b1dbb4cbeed4ed51bb

                                        SHA256

                                        7b91c826c001e9969100c5cdcf9292c2d71b774d11e5e951c896361d4f759f8a

                                        SHA512

                                        ea581735b7cb76cfca164c6be2927b82d003a2cac4779c195440d7bd1199f64fc624c29d261198c7abe9e9028e0277cf0f2ae1bac999600c1bd11a96ded722a3

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Widgets.dll

                                        Filesize

                                        5.3MB

                                        MD5

                                        bfc1a3e3c77ec5f83af110aab34ff49f

                                        SHA1

                                        6b84a0f2707a4dcb9d4fd9d3480eba214f6d8feb

                                        SHA256

                                        764901ce8027ad647b25a8b34d1aa4475ca4dac7911e294c3be7d0ba598f38b1

                                        SHA512

                                        36f2959ec968047eb7488e42dbb0207411239ece6a8cf93036dfdb64a360c3714a53fdb968187f8993d3c1532c2a74b996dd46a3c6c4a5e05edfaf2cc0a28143

                                      • C:\Program Files (x86)\iMyFone MagicMic\Qt5Widgets.dll

                                        Filesize

                                        5.3MB

                                        MD5

                                        bfc1a3e3c77ec5f83af110aab34ff49f

                                        SHA1

                                        6b84a0f2707a4dcb9d4fd9d3480eba214f6d8feb

                                        SHA256

                                        764901ce8027ad647b25a8b34d1aa4475ca4dac7911e294c3be7d0ba598f38b1

                                        SHA512

                                        36f2959ec968047eb7488e42dbb0207411239ece6a8cf93036dfdb64a360c3714a53fdb968187f8993d3c1532c2a74b996dd46a3c6c4a5e05edfaf2cc0a28143

                                      • C:\Program Files (x86)\iMyFone MagicMic\Resources\is-BQ8AO.tmp

                                        Filesize

                                        76B

                                        MD5

                                        8f06f3f847ff26d6cbd6cba0c358c48f

                                        SHA1

                                        bf77699748a04e1ed277d18c95b4a9fcc20cd661

                                        SHA256

                                        0ee8aef3d5ef13b98c50eff348cd80addb1ba28bf158a987150204ec720a7e6d

                                        SHA512

                                        b2f27ba783a9d5e09de42c62a6639541b1fa9c0b8889da8ae1ae0a639ee3c0f4d1940c1a0cad79d9bc0f3035ff46ca3137158da3e05a39c9f4d13e71317f6087

                                      • C:\Program Files (x86)\iMyFone MagicMic\Uninstaller\MFUninstall.dll

                                        Filesize

                                        134KB

                                        MD5

                                        6df3772f94b2215e48fa988e5b7f8fce

                                        SHA1

                                        7fe1f57ac9963f84afc556593aeff548b995f60e

                                        SHA256

                                        07391791836cd3ecb20724f6e4818527696d847387fc78811b47614629f34548

                                        SHA512

                                        23ff9c679fb3d39d751dd43e179b742673d3da983cd78992589aacc916f6a8ce8f54d32a57e95d440a5fc245a144a21b14a6ffa8980bf4fe3dcdf282b944cb6d

                                      • C:\Program Files (x86)\iMyFone MagicMic\avcodec-lav-58.dll

                                        Filesize

                                        12.5MB

                                        MD5

                                        6ce00409f919d8c44d4f379b18c7343b

                                        SHA1

                                        2312131f6a7c3cefb94f61bb23104ffce29e26f4

                                        SHA256

                                        5c409a3d6301ee42c3f5e02eef67f21b5017f2a1abdf8c1d5f58c5ff202c4fe6

                                        SHA512

                                        dfa34f6a31c7013484be8af446dbd5892e689db09c0e012c96de45679d862a75710f4b0f5ccc5f29f7b5e330689c2db6503d42b71434088611ecac24152af2b6

                                      • C:\Program Files (x86)\iMyFone MagicMic\avcodec-lav-58.dll

                                        Filesize

                                        12.5MB

                                        MD5

                                        6ce00409f919d8c44d4f379b18c7343b

                                        SHA1

                                        2312131f6a7c3cefb94f61bb23104ffce29e26f4

                                        SHA256

                                        5c409a3d6301ee42c3f5e02eef67f21b5017f2a1abdf8c1d5f58c5ff202c4fe6

                                        SHA512

                                        dfa34f6a31c7013484be8af446dbd5892e689db09c0e012c96de45679d862a75710f4b0f5ccc5f29f7b5e330689c2db6503d42b71434088611ecac24152af2b6

                                      • C:\Program Files (x86)\iMyFone MagicMic\avcodec-lav-58.dll

                                        Filesize

                                        12.5MB

                                        MD5

                                        6ce00409f919d8c44d4f379b18c7343b

                                        SHA1

                                        2312131f6a7c3cefb94f61bb23104ffce29e26f4

                                        SHA256

                                        5c409a3d6301ee42c3f5e02eef67f21b5017f2a1abdf8c1d5f58c5ff202c4fe6

                                        SHA512

                                        dfa34f6a31c7013484be8af446dbd5892e689db09c0e012c96de45679d862a75710f4b0f5ccc5f29f7b5e330689c2db6503d42b71434088611ecac24152af2b6

                                      • C:\Program Files (x86)\iMyFone MagicMic\avcodec-lav-58.dll

                                        Filesize

                                        12.5MB

                                        MD5

                                        6ce00409f919d8c44d4f379b18c7343b

                                        SHA1

                                        2312131f6a7c3cefb94f61bb23104ffce29e26f4

                                        SHA256

                                        5c409a3d6301ee42c3f5e02eef67f21b5017f2a1abdf8c1d5f58c5ff202c4fe6

                                        SHA512

                                        dfa34f6a31c7013484be8af446dbd5892e689db09c0e012c96de45679d862a75710f4b0f5ccc5f29f7b5e330689c2db6503d42b71434088611ecac24152af2b6

                                      • C:\Program Files (x86)\iMyFone MagicMic\avfilter-lav-7.dll

                                        Filesize

                                        197KB

                                        MD5

                                        a5455d61ea37f17cebb04344cc20eacf

                                        SHA1

                                        30ce26106bd5d7c07a50351be8bb9456cdbd0613

                                        SHA256

                                        dc371d0637f0584369ead17d70d744a4d6efae1e32b3f89e88561d549220f148

                                        SHA512

                                        8ebb5b5491500ab6b4aa8715746ce0a8fb0626b5885a5e41010f3c469cedfccc68422c815cfb9e830f37863b1f479f9249f8a879cc828de349ee20894b408596

                                      • C:\Program Files (x86)\iMyFone MagicMic\avfilter-lav-7.dll

                                        Filesize

                                        197KB

                                        MD5

                                        a5455d61ea37f17cebb04344cc20eacf

                                        SHA1

                                        30ce26106bd5d7c07a50351be8bb9456cdbd0613

                                        SHA256

                                        dc371d0637f0584369ead17d70d744a4d6efae1e32b3f89e88561d549220f148

                                        SHA512

                                        8ebb5b5491500ab6b4aa8715746ce0a8fb0626b5885a5e41010f3c469cedfccc68422c815cfb9e830f37863b1f479f9249f8a879cc828de349ee20894b408596

                                      • C:\Program Files (x86)\iMyFone MagicMic\avformat-lav-58.dll

                                        Filesize

                                        3.4MB

                                        MD5

                                        3b02518c32afa8cad17c3507979a18fd

                                        SHA1

                                        dc5016fb5f572715cc50f539f275bffc4ffc9a38

                                        SHA256

                                        0af82d650a82dd99378c50c6ae8728c6492b3bd58ecfa8f5ce2e9f413026a781

                                        SHA512

                                        755d2b8daa7bb1095c1f2c2c4378efc4d3606ee452c2a25068bc54e837e3388ffb8d34f83109dbccd443b447a273bdb69ed864451cd102c014febd794f059121

                                      • C:\Program Files (x86)\iMyFone MagicMic\avformat-lav-58.dll

                                        Filesize

                                        3.4MB

                                        MD5

                                        3b02518c32afa8cad17c3507979a18fd

                                        SHA1

                                        dc5016fb5f572715cc50f539f275bffc4ffc9a38

                                        SHA256

                                        0af82d650a82dd99378c50c6ae8728c6492b3bd58ecfa8f5ce2e9f413026a781

                                        SHA512

                                        755d2b8daa7bb1095c1f2c2c4378efc4d3606ee452c2a25068bc54e837e3388ffb8d34f83109dbccd443b447a273bdb69ed864451cd102c014febd794f059121

                                      • C:\Program Files (x86)\iMyFone MagicMic\avformat-lav-58.dll

                                        Filesize

                                        3.4MB

                                        MD5

                                        3b02518c32afa8cad17c3507979a18fd

                                        SHA1

                                        dc5016fb5f572715cc50f539f275bffc4ffc9a38

                                        SHA256

                                        0af82d650a82dd99378c50c6ae8728c6492b3bd58ecfa8f5ce2e9f413026a781

                                        SHA512

                                        755d2b8daa7bb1095c1f2c2c4378efc4d3606ee452c2a25068bc54e837e3388ffb8d34f83109dbccd443b447a273bdb69ed864451cd102c014febd794f059121

                                      • C:\Program Files (x86)\iMyFone MagicMic\avformat-lav-58.dll

                                        Filesize

                                        3.4MB

                                        MD5

                                        3b02518c32afa8cad17c3507979a18fd

                                        SHA1

                                        dc5016fb5f572715cc50f539f275bffc4ffc9a38

                                        SHA256

                                        0af82d650a82dd99378c50c6ae8728c6492b3bd58ecfa8f5ce2e9f413026a781

                                        SHA512

                                        755d2b8daa7bb1095c1f2c2c4378efc4d3606ee452c2a25068bc54e837e3388ffb8d34f83109dbccd443b447a273bdb69ed864451cd102c014febd794f059121

                                      • C:\Program Files (x86)\iMyFone MagicMic\avresample-lav-4.dll

                                        Filesize

                                        162KB

                                        MD5

                                        ce0779c06b209de9bb3ec03d3f95fda7

                                        SHA1

                                        defe29adcb0f80e3f3ffc02a77fa18803cb79467

                                        SHA256

                                        907da7e1a7dbd07e2d0a2716c95729a5c9fd8ceaee02859b2418621e4916e505

                                        SHA512

                                        bbcb07c7b726c29ab9d8fd812bdb1ac20089bb808cc02988c9bc5738c41ba2f35536d7937f4be1f3efbe8d72e928fd36653b04c86aa662881105be7e1181c66e

                                      • C:\Program Files (x86)\iMyFone MagicMic\avresample-lav-4.dll

                                        Filesize

                                        162KB

                                        MD5

                                        ce0779c06b209de9bb3ec03d3f95fda7

                                        SHA1

                                        defe29adcb0f80e3f3ffc02a77fa18803cb79467

                                        SHA256

                                        907da7e1a7dbd07e2d0a2716c95729a5c9fd8ceaee02859b2418621e4916e505

                                        SHA512

                                        bbcb07c7b726c29ab9d8fd812bdb1ac20089bb808cc02988c9bc5738c41ba2f35536d7937f4be1f3efbe8d72e928fd36653b04c86aa662881105be7e1181c66e

                                      • C:\Program Files (x86)\iMyFone MagicMic\avresample-lav-4.dll

                                        Filesize

                                        162KB

                                        MD5

                                        ce0779c06b209de9bb3ec03d3f95fda7

                                        SHA1

                                        defe29adcb0f80e3f3ffc02a77fa18803cb79467

                                        SHA256

                                        907da7e1a7dbd07e2d0a2716c95729a5c9fd8ceaee02859b2418621e4916e505

                                        SHA512

                                        bbcb07c7b726c29ab9d8fd812bdb1ac20089bb808cc02988c9bc5738c41ba2f35536d7937f4be1f3efbe8d72e928fd36653b04c86aa662881105be7e1181c66e

                                      • C:\Program Files (x86)\iMyFone MagicMic\avresample-lav-4.dll

                                        Filesize

                                        162KB

                                        MD5

                                        ce0779c06b209de9bb3ec03d3f95fda7

                                        SHA1

                                        defe29adcb0f80e3f3ffc02a77fa18803cb79467

                                        SHA256

                                        907da7e1a7dbd07e2d0a2716c95729a5c9fd8ceaee02859b2418621e4916e505

                                        SHA512

                                        bbcb07c7b726c29ab9d8fd812bdb1ac20089bb808cc02988c9bc5738c41ba2f35536d7937f4be1f3efbe8d72e928fd36653b04c86aa662881105be7e1181c66e

                                      • C:\Program Files (x86)\iMyFone MagicMic\avutil-lav-56.dll

                                        Filesize

                                        507KB

                                        MD5

                                        1637ae5c830a34519a693759a9708084

                                        SHA1

                                        097e5b9e5e9015ad6b3743adc54ed75745b6db8d

                                        SHA256

                                        e34125a10a02d47637a5cda8a19949c6cff0f38bdf1692542ad71bfff711b744

                                        SHA512

                                        db04bf203ef9fc5d7dc04f7a71fba967127974cc3c82474e7110c79d3cdc24c00e637aceb0bdac30a4fe0e5b7de2d2fe4c6da2fb27de7fa218696a92939da02f

                                      • C:\Program Files (x86)\iMyFone MagicMic\avutil-lav-56.dll

                                        Filesize

                                        507KB

                                        MD5

                                        1637ae5c830a34519a693759a9708084

                                        SHA1

                                        097e5b9e5e9015ad6b3743adc54ed75745b6db8d

                                        SHA256

                                        e34125a10a02d47637a5cda8a19949c6cff0f38bdf1692542ad71bfff711b744

                                        SHA512

                                        db04bf203ef9fc5d7dc04f7a71fba967127974cc3c82474e7110c79d3cdc24c00e637aceb0bdac30a4fe0e5b7de2d2fe4c6da2fb27de7fa218696a92939da02f

                                      • C:\Program Files (x86)\iMyFone MagicMic\avutil-lav-56.dll

                                        Filesize

                                        507KB

                                        MD5

                                        1637ae5c830a34519a693759a9708084

                                        SHA1

                                        097e5b9e5e9015ad6b3743adc54ed75745b6db8d

                                        SHA256

                                        e34125a10a02d47637a5cda8a19949c6cff0f38bdf1692542ad71bfff711b744

                                        SHA512

                                        db04bf203ef9fc5d7dc04f7a71fba967127974cc3c82474e7110c79d3cdc24c00e637aceb0bdac30a4fe0e5b7de2d2fe4c6da2fb27de7fa218696a92939da02f

                                      • C:\Program Files (x86)\iMyFone MagicMic\avutil-lav-56.dll

                                        Filesize

                                        507KB

                                        MD5

                                        1637ae5c830a34519a693759a9708084

                                        SHA1

                                        097e5b9e5e9015ad6b3743adc54ed75745b6db8d

                                        SHA256

                                        e34125a10a02d47637a5cda8a19949c6cff0f38bdf1692542ad71bfff711b744

                                        SHA512

                                        db04bf203ef9fc5d7dc04f7a71fba967127974cc3c82474e7110c79d3cdc24c00e637aceb0bdac30a4fe0e5b7de2d2fe4c6da2fb27de7fa218696a92939da02f

                                      • C:\Program Files (x86)\iMyFone MagicMic\avutil-lav-56.dll

                                        Filesize

                                        507KB

                                        MD5

                                        1637ae5c830a34519a693759a9708084

                                        SHA1

                                        097e5b9e5e9015ad6b3743adc54ed75745b6db8d

                                        SHA256

                                        e34125a10a02d47637a5cda8a19949c6cff0f38bdf1692542ad71bfff711b744

                                        SHA512

                                        db04bf203ef9fc5d7dc04f7a71fba967127974cc3c82474e7110c79d3cdc24c00e637aceb0bdac30a4fe0e5b7de2d2fe4c6da2fb27de7fa218696a92939da02f

                                      • C:\Program Files (x86)\iMyFone MagicMic\code.txt

                                        Filesize

                                        20KB

                                        MD5

                                        343b8b6b68a46e17c91c73d0b6e7b694

                                        SHA1

                                        616d5f3bc2aabd78878b8241e341717c7d31e462

                                        SHA256

                                        d2fa3c3c395848bb59036dcf2232a804e46a5ccd4e55a340a0f28615c6e7b949

                                        SHA512

                                        290856c9f4feb3aa60372f60e59285644cbcc4120ac5a11e57ee8fd4fdb361f8070c7d21c797fe75c944b8299854aa57bfe7b975482cbe17b5a66a0e95318074

                                      • C:\Program Files (x86)\iMyFone MagicMic\devcon.exe

                                        Filesize

                                        80KB

                                        MD5

                                        3904d0698962e09da946046020cbcb17

                                        SHA1

                                        edae098e7e8452ca6c125cf6362dda3f4d78f0ae

                                        SHA256

                                        a51e25acc489948b31b1384e1dc29518d19b421d6bc0ced90587128899275289

                                        SHA512

                                        c24ab680981d8d6db042b52b7b5c5e92078df83650cad798874fc09ce8c8a25462e1b69340083f4bcad20d67068668abcfa8097e549cfa5ad4f1ee6a235d6eea

                                      • C:\Program Files (x86)\iMyFone MagicMic\devcon.exe

                                        Filesize

                                        80KB

                                        MD5

                                        3904d0698962e09da946046020cbcb17

                                        SHA1

                                        edae098e7e8452ca6c125cf6362dda3f4d78f0ae

                                        SHA256

                                        a51e25acc489948b31b1384e1dc29518d19b421d6bc0ced90587128899275289

                                        SHA512

                                        c24ab680981d8d6db042b52b7b5c5e92078df83650cad798874fc09ce8c8a25462e1b69340083f4bcad20d67068668abcfa8097e549cfa5ad4f1ee6a235d6eea

                                      • C:\Program Files (x86)\iMyFone MagicMic\devcon.exe

                                        Filesize

                                        80KB

                                        MD5

                                        3904d0698962e09da946046020cbcb17

                                        SHA1

                                        edae098e7e8452ca6c125cf6362dda3f4d78f0ae

                                        SHA256

                                        a51e25acc489948b31b1384e1dc29518d19b421d6bc0ced90587128899275289

                                        SHA512

                                        c24ab680981d8d6db042b52b7b5c5e92078df83650cad798874fc09ce8c8a25462e1b69340083f4bcad20d67068668abcfa8097e549cfa5ad4f1ee6a235d6eea

                                      • C:\Program Files (x86)\iMyFone MagicMic\domain

                                        Filesize

                                        9B

                                        MD5

                                        9d6d76179f1a63fb861a800e2bcbe37e

                                        SHA1

                                        280070b623923879703ba87328cda22f0ce122a0

                                        SHA256

                                        7ba9c483d856cc2e851f9122492bbb68b0ccd926acf8755419b4abd6ffc4ed56

                                        SHA512

                                        1ebf9f966a4d4ae9a152ef5d7a69c16311154a278d703e96be5b1f8f7f9c268d7c5c818dcceff278c2af14ef04266d892a960b1989f2dc9d31ce9573eabca232

                                      • C:\Program Files (x86)\iMyFone MagicMic\libbluray.dll

                                        Filesize

                                        334KB

                                        MD5

                                        eee514d376b35d25a0884f9e0403e00d

                                        SHA1

                                        0f63de66d2ea98ca2538186ccaa994644e282a68

                                        SHA256

                                        48555f1e4a34e826167a326b079997a14b2b30359101653a103d75d91da3227f

                                        SHA512

                                        651dbc7b99b8f73084b38a1484b449eb5fb655b882394363491dc37423e0af3e605890f60034dc3d04ed644a213711589d13764b987076ca552858399adc79a9

                                      • C:\Program Files (x86)\iMyFone MagicMic\libbluray.dll

                                        Filesize

                                        334KB

                                        MD5

                                        eee514d376b35d25a0884f9e0403e00d

                                        SHA1

                                        0f63de66d2ea98ca2538186ccaa994644e282a68

                                        SHA256

                                        48555f1e4a34e826167a326b079997a14b2b30359101653a103d75d91da3227f

                                        SHA512

                                        651dbc7b99b8f73084b38a1484b449eb5fb655b882394363491dc37423e0af3e605890f60034dc3d04ed644a213711589d13764b987076ca552858399adc79a9

                                      • C:\Program Files (x86)\iMyFone MagicMic\msvcp120.dll

                                        Filesize

                                        637KB

                                        MD5

                                        de6a2d8f9f80b08887e992a65cf93ba4

                                        SHA1

                                        51d1962269cc80bfdcb04fd4e1f1966d4b4edb48

                                        SHA256

                                        c3cee22c7e8907559428c6a886469829d7acd001d48b239f2170167280943b4f

                                        SHA512

                                        2a2981b9152a8fa5cc5c0e0b0e651972deeab05c2ff164c183ca4d76390ddaa2a84dd76e8cc1c6af257222f6571e7c1013646ed2b3dd8e22bdf2a6b071a7e69a

                                      • C:\Program Files (x86)\iMyFone MagicMic\msvcr120.dll

                                        Filesize

                                        933KB

                                        MD5

                                        efd940fb82b30181f789e92ea3b17f82

                                        SHA1

                                        ec5831b8a138e513876d8ea9c5d93642cdefbb13

                                        SHA256

                                        f8553e9eace3ddfdfc587c17d38aa1154fd4be53f46c2f0f78fd16cb56399008

                                        SHA512

                                        8b2269665fe74c7ad622d7c4db733e1bfcdf31b03e00fc83a38c91ad423af4a2d3dce9cd7bfb77dad791c44d9b85183d94bff9404f05c30ebaa5e6673e9322a2

                                      • C:\Program Files (x86)\iMyFone MagicMic\platforms\qminimal.dll

                                        Filesize

                                        32KB

                                        MD5

                                        563a865d7191f4b77c7152f161dcb328

                                        SHA1

                                        b9d5dc25e5e68ad7f28eac130e5d25d73f2a1083

                                        SHA256

                                        2036fbde7643f06831d796cfd630fee6103f632e7e0664f26dab10e30f0af9ad

                                        SHA512

                                        c2a0c9480a4676fac25924880d0c50c6d34a81592aec52b190e3594167a421f1c2dc884947a7d3f155acf216a5968a4e26c2795131ebba423aa6fad98510c5c5

                                      • C:\Program Files (x86)\iMyFone MagicMic\platforms\qoffscreen.dll

                                        Filesize

                                        632KB

                                        MD5

                                        9faf7aff3206e7430427405d14bbe2f6

                                        SHA1

                                        45e519e4b219d4ee8fb94ba6ea7c72147f7b363c

                                        SHA256

                                        abc069c8b7d93ac02b477288e18a4a3ae74503bcd40022e04e1d62dd7bc66739

                                        SHA512

                                        207f987b26eaeef103a5ac2f111d9d1d7866d3409cfc8a7e615fa768aa4e701af4ea5f893672eac91fb52d41edc4f4e78187de62187bb02b087548fdd9afce42

                                      • C:\Program Files (x86)\iMyFone MagicMic\platforms\qwindows.dll

                                        Filesize

                                        1.2MB

                                        MD5

                                        f5a5baf57bd27498d12c65737f07bfc7

                                        SHA1

                                        9b4b01d6cb9959bfd82bb6a7e4ca46929b06898e

                                        SHA256

                                        61f46233a985ee3b94f3a6fd2402eadf7c9bdea28c0b9b022119299389c1f2e8

                                        SHA512

                                        bccdffb9a6203eb6ab5fb6d3035310b9b5fc0ce2ab12b33124f618b7141f714f7097ce624021a68e65f7b7ee890aaba5f8ff83838099a58693d4f7977cd8f3e0

                                      • C:\Program Files (x86)\iMyFone MagicMic\platforms\qwindows.dll

                                        Filesize

                                        1.2MB

                                        MD5

                                        f5a5baf57bd27498d12c65737f07bfc7

                                        SHA1

                                        9b4b01d6cb9959bfd82bb6a7e4ca46929b06898e

                                        SHA256

                                        61f46233a985ee3b94f3a6fd2402eadf7c9bdea28c0b9b022119299389c1f2e8

                                        SHA512

                                        bccdffb9a6203eb6ab5fb6d3035310b9b5fc0ce2ab12b33124f618b7141f714f7097ce624021a68e65f7b7ee890aaba5f8ff83838099a58693d4f7977cd8f3e0

                                      • C:\Program Files (x86)\iMyFone MagicMic\skin\PictureNormal\MFVoiceChanger\SetView\is-1FOUM.tmp

                                        Filesize

                                        515B

                                        MD5

                                        53652fbac2fdefeafa80578953d7e59d

                                        SHA1

                                        b814c92fbe579e19795eed67177e80b9efcd65ae

                                        SHA256

                                        921482e9539d5aa4f0b9dac9cca393e68172ceece387a84fe0d8a57d5f6ed7c4

                                        SHA512

                                        5bb75dc03b4ddc9db09b75a0b7f03b4b3a1da1a266a303c6174e0f8d738153031ee5a376ae6c71028dceea92fea0313335c659e5b51ffd0b86cb8da0a189df37

                                      • C:\Program Files (x86)\iMyFone MagicMic\skin\PictureNormal\MFVoiceChanger\button\is-4FHMN.tmp

                                        Filesize

                                        918B

                                        MD5

                                        b3589fecb19d694e77ca288204ed2a2a

                                        SHA1

                                        af0232084fe781dbc3799ee8c2b6eec6356b5a87

                                        SHA256

                                        301b6a7c67bbf31db3aa02c6ae484ab032cf9625efeaf8e3c59b18070f062e37

                                        SHA512

                                        625e4276dbbc17d1f75aaf7e73bd2673259066c8eea19190591797d5f4334caee79adf235b56bc9b352630ad16e2689d6efb8168033eb4093735b78d3b74293f

                                      • C:\Program Files (x86)\iMyFone MagicMic\swscale-lav-5.dll

                                        Filesize

                                        534KB

                                        MD5

                                        5d7b9e16dfe9a6a7c91e20714e4bf15c

                                        SHA1

                                        604249be4b3343fe7297d5fd973751c833f40dcf

                                        SHA256

                                        40c20c2c96ac849ceaadd1bd76718b50ecc309ded8f32d4b54e25df088c359df

                                        SHA512

                                        e505e25d1b19fc6341963f619c44b4716c18ec6ff4fe1098ed1cabf1f7251aedb0f7bc2a839e5e5aa3fac7a431f1610aa7a46d41b74b3465d4a4093ae6fd1ae0

                                      • C:\Program Files (x86)\iMyFone MagicMic\swscale-lav-5.dll

                                        Filesize

                                        534KB

                                        MD5

                                        5d7b9e16dfe9a6a7c91e20714e4bf15c

                                        SHA1

                                        604249be4b3343fe7297d5fd973751c833f40dcf

                                        SHA256

                                        40c20c2c96ac849ceaadd1bd76718b50ecc309ded8f32d4b54e25df088c359df

                                        SHA512

                                        e505e25d1b19fc6341963f619c44b4716c18ec6ff4fe1098ed1cabf1f7251aedb0f7bc2a839e5e5aa3fac7a431f1610aa7a46d41b74b3465d4a4093ae6fd1ae0

                                      • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\imyfone-download.exe

                                        Filesize

                                        72.0MB

                                        MD5

                                        cbfad1fea052374db865b71ec9d3076b

                                        SHA1

                                        232f1a311f95227302bce36054ace536eec7a1b1

                                        SHA256

                                        5615e7edbceb23cc41566c77634e5881105e50aef5065725f8cbf837753a370b

                                        SHA512

                                        bc392c1d514a35fd8664fd718ece134a3aff3551fb83464d4a7f4ccc5a0bf1406a7c49e6aa42a86911481e6a761adabf6a148ce6a41e1976299d2eeba4a650b7

                                      • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\imyfone-download.exe

                                        Filesize

                                        72.0MB

                                        MD5

                                        cbfad1fea052374db865b71ec9d3076b

                                        SHA1

                                        232f1a311f95227302bce36054ace536eec7a1b1

                                        SHA256

                                        5615e7edbceb23cc41566c77634e5881105e50aef5065725f8cbf837753a370b

                                        SHA512

                                        bc392c1d514a35fd8664fd718ece134a3aff3551fb83464d4a7f4ccc5a0bf1406a7c49e6aa42a86911481e6a761adabf6a148ce6a41e1976299d2eeba4a650b7

                                      • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\language\English\pr_1.png

                                        Filesize

                                        110KB

                                        MD5

                                        a636635610303bf4b8b2cdaae7b6d82f

                                        SHA1

                                        dbf4265ec30f97c7f9bd62ead609e73db4e2a592

                                        SHA256

                                        6b57c19cd10de01840989f8fae7169af3021e9e948c06426c008db0495f4ab50

                                        SHA512

                                        37132ebab1f6c9591c9fe35f9692f730b28f286d73f2c451ac9913770d4da580a49ac513a33b792be78c72052119161381c247bb1c453887f746dc540536d29f

                                      • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\language\English\pr_2.png

                                        Filesize

                                        85KB

                                        MD5

                                        8df6762b0cdd311d1fc0950d13c7b01c

                                        SHA1

                                        6a686ab8f59d08edcbbbb0aaf74647f3977f0368

                                        SHA256

                                        0f33a393ed3f5de7441e23cb203abe38d7f589fa1777cdd3c46116dd5628110e

                                        SHA512

                                        fe2e3aed1efc965a1009d5cab64760d1d58e21081882e8447b082ad8a8395a25cbed269db86279e49bc30631deb2047b1c5f35b1749eaf521580e416ec350e7a

                                      • C:\Program Files (x86)\imyfone_down\magicmic_setup-com_filme\language\English\pr_3.png

                                        Filesize

                                        141KB

                                        MD5

                                        37398ff4b0c275ee6cb9226d53783f0d

                                        SHA1

                                        cdcf622a155947bebc58f5baf6a1a152cf9fdbb0

                                        SHA256

                                        d430c5e31f1cfecd63639bcfbf496cc977472894b2bb9314a5113ab24ec11d0c

                                        SHA512

                                        cfc037d97ceb462aaba8f47778df14b9485f2463e3c1e99d454904b3d6b87c1860d3af140669af703621fcc4aac78fadd6246774c9fa6130940745853f53d1f7

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        78c7656527762ed2977adf983a6f4766

                                        SHA1

                                        21a66d2eefcb059371f4972694057e4b1f827ce6

                                        SHA256

                                        e1000099751602ae1adcec6f1c74e1d65f472936817b45239dfed4b043984296

                                        SHA512

                                        0a8e58ae95163b3cdf8e81b5085887761e73cb7c836a1a6a972e837fb3df69b2ac70cfd6311d06d40656344ec35eb48e512f007561480f0345486ac2b329be0b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5128029e-7d01-4016-a454-82380c3d1f4c.tmp

                                        Filesize

                                        4KB

                                        MD5

                                        8f3e4429ea2e669b0c7f3341e50d2079

                                        SHA1

                                        c1324c6c2afc95372b7e73bb5550062bf261f0a7

                                        SHA256

                                        cbbe6a55ea0a2844440ab4f48146b5cb21a3f0de550e9457c5adf3f70aeadbf1

                                        SHA512

                                        917ee57e08da5216ae18d14d3a2bd111984d6bf0e972928a47cd2fa7d25cfdcb28ce325fc3cf2ea418086e521c1559c63c8ce80c6489972aed6ce88d8f18ac9a

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        864B

                                        MD5

                                        d653ece38be6c12531797a76d312cc2f

                                        SHA1

                                        04784ce4ce0f468f0c28e42c9f286c8ea9fb40eb

                                        SHA256

                                        e86ed0dd540eea18292e6c37b9162682c5f1a320721ae58c27fd61cebf48cd9b

                                        SHA512

                                        d748d02766a70a0e5744f17668205c5ea1545a9a52d3cdee18ee7c30f465b85660246080e5a87b78dfb4e29c07dd005ad59c3d55d5c5a8387c35eebb15d45223

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58217d.TMP

                                        Filesize

                                        48B

                                        MD5

                                        de9fce93c5c645e8fcc8c45262b59631

                                        SHA1

                                        4acfe5c730c9d4c0975382bef3888564672a3764

                                        SHA256

                                        219842c50f3a70cb574d01cc6b8b9f53d9e60a77fc09e693f6a8e316308a1a60

                                        SHA512

                                        94ffb0d240dc062846afae775b643a606ac81f7fbd5424c3df72b50cf0677ed24adaec381ef4f89828056c5b29f728679fb2c3742943763a0f4529056ccef5f5

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

                                        Filesize

                                        70KB

                                        MD5

                                        e5e3377341056643b0494b6842c0b544

                                        SHA1

                                        d53fd8e256ec9d5cef8ef5387872e544a2df9108

                                        SHA256

                                        e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

                                        SHA512

                                        83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

                                        Filesize

                                        2KB

                                        MD5

                                        0ab41e55b95f7de61f7a071e8feaa1d2

                                        SHA1

                                        72862e11c21419d9e5fe6beaef7e556fda949488

                                        SHA256

                                        67d4882745525af9e2cd86614095867463df6eeb19f2333e897999c9577daaa9

                                        SHA512

                                        8c33be12bdcba364747069b109f44641836ca08c214d6dce14e1274cacc3bd0f72f781ad0bd8e75aa6da14931f85be7b62c3bb970956d1665bcd4a783d6be185

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        111B

                                        MD5

                                        285252a2f6327d41eab203dc2f402c67

                                        SHA1

                                        acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                        SHA256

                                        5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                        SHA512

                                        11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        2KB

                                        MD5

                                        41316eb2a93aaedfc8b03000dfe4c36c

                                        SHA1

                                        e42dfb8bdb81ba215ff9642ff8b325899b763402

                                        SHA256

                                        305cd523a123f1a7f28cd7dd48479d542c8409bb4c7cfd76642cc531f45cdab7

                                        SHA512

                                        9171c397b749ff58afb3424d1a982d7fce11721f0456b44c1f04fcd9f2fcfa0a2b2273acf5e46c9c4427b36009194911f987161eb887b7a35010e44cf5ce9f0e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        7KB

                                        MD5

                                        062694087d29992a553603e91b264d46

                                        SHA1

                                        12d242febeda572d60854acf293f71b1a69c12e8

                                        SHA256

                                        867ee395bb0ae69cb89230146041b4311126d6d750162303e5456c94ff7cea3d

                                        SHA512

                                        69e5c8a79d54623f82220c9c55d39244f43689ae07bf86d8ad8dde7b6cf572b609b0b1189ab5f93e359b633304535811b72d32afee437035a446cbf4c99a86ad

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        7KB

                                        MD5

                                        fd5c09a56cec2b8411d57ba2d5b0a35a

                                        SHA1

                                        dd9c41c637d7458000243e522a5d1074d12feaa9

                                        SHA256

                                        a4a9c9f57edffc6943cd5cc6a85f694e60b083747c01cc0b091a254944c765fc

                                        SHA512

                                        722a33311e652c48f7949735358c276f544cbb149d3a663af457f672b45baeee3984ff7b76df89a5e44cf966d95cf46b954d0701a0dc475398a94f922b784779

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                        Filesize

                                        24KB

                                        MD5

                                        02ee7addc9e8a2d07af55556ebf0ff5c

                                        SHA1

                                        020161bb64ecb7c6e6886ccc055908984dc651d8

                                        SHA256

                                        552d3ed359b7a52278ce621674d16428d8a7969f6cd5663df18e240cce66aadc

                                        SHA512

                                        567989543c3848a0c3276d96b96ca761f750e4b71fb74f36d809f590ffe16a72fd5ece251737a8b1ffe65f0051e211bd7ad19d2b8b0b7ca1b7ffc86dd2a52883

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f7ad436d24c466071c8acfc79e56e4c10d534c7f\index.txt

                                        Filesize

                                        85B

                                        MD5

                                        f27a15b23afb862765012b9734d25c70

                                        SHA1

                                        291f595b77887356896b8dd803b04ddd604a87dc

                                        SHA256

                                        1416229612e39c71293c549276341fff92a222f544fdb2c632eeb295999331fe

                                        SHA512

                                        dd32fc7696988e2b61c2a40b1deead6c5d2cc2c6cae15c89b21030e81e441025cf3bdc856b16a57551b21d915834e7eb0656ff02c086ebd47ed75811547db4bc

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\f7ad436d24c466071c8acfc79e56e4c10d534c7f\index.txt~RFe580f8b.TMP

                                        Filesize

                                        92B

                                        MD5

                                        aa03a83cb6554c1c4ed12c0125848bc4

                                        SHA1

                                        97f252424e98155fd9c7f9a321b2a008218b373c

                                        SHA256

                                        8c282dfe7bd975b08086f9f46deef7027d824977f52555fe3cb02a6b350cacfe

                                        SHA512

                                        95b9b54bfd230f1be567ea07b0ffeb732e8f6bf973846fd45ae4dfd0ab1561c42df9f321fd4a498a987076410897d0753eca58660fbb10bfa138413f6b6df85a

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                        Filesize

                                        72B

                                        MD5

                                        ad84e0af5b1106a5f0dd744c4dc11512

                                        SHA1

                                        078c4e7a4ee54ecdf072c7af0e98e4df92c9d40b

                                        SHA256

                                        47e1c28717e5c03edcc93f27b613c08e4626a6b3223ad9de05621eeeafb4233f

                                        SHA512

                                        f09b2cb69f582c0601472af1269cedde23a0ce8b529d561f5302cd9e3327f25731e2106733332818a3692c1d6be3dd4dcfdd65a9163def0169a09b22295cc333

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe580c8e.TMP

                                        Filesize

                                        48B

                                        MD5

                                        130497e129e0728abc9068818f66ac0c

                                        SHA1

                                        a433d0373aa97b3bbf9e4fa38a0b6d2d44b5dab7

                                        SHA256

                                        58ba7c00c61a2f9cc8f6e8978ed34cbbd77981efa5cdf06dab7a0f124918f12a

                                        SHA512

                                        e8e59e5617a265878274745750d40198ee75dc43e6c1a6dcbb8737e59bae1add44d92a85615d5e73a266934ab7b7f1bbf9288bbae701907ccaa89c0ab6560be7

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        206702161f94c5cd39fadd03f4014d98

                                        SHA1

                                        bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                        SHA256

                                        1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                        SHA512

                                        0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

                                        Filesize

                                        41B

                                        MD5

                                        5af87dfd673ba2115e2fcf5cfdb727ab

                                        SHA1

                                        d5b5bbf396dc291274584ef71f444f420b6056f1

                                        SHA256

                                        f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                        SHA512

                                        de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        46295cac801e5d4857d09837238a6394

                                        SHA1

                                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                        SHA256

                                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                        SHA512

                                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        12KB

                                        MD5

                                        d0e0bd87a1fb090cec60f84e1d75a981

                                        SHA1

                                        ef6a9a74a759e48b83c45e14fcdfc353fd77ea05

                                        SHA256

                                        371b04714b8a782023ba712f229a80308fdd8870dafce95ebad4352f3467c411

                                        SHA512

                                        da190175ea81122b654134215afc0c19b0221c3638561df18ebd856d91480526916fd3f7c0e02f4122f67e8efe3898d36b2184989035fd79adec94724a1021f6

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        9KB

                                        MD5

                                        1a5a93f9f0c7fc3c53d986a2d29d6e41

                                        SHA1

                                        cef9ea3826f8fce84af7aeadb627941f366070cb

                                        SHA256

                                        4e9e16aa3409aaa626a9111d046f576a4cb39cd24fa926bf7af49a1b60e9660b

                                        SHA512

                                        9d70970b4dd5eb72acd339a9e077f43fc81a11d2c71686e36a0abbd1a9b4f87911b4981b4f575c7af7cfa06ca8487b38b7c8f70caf16c9bbd2dc3f0d2a256fd9

                                      • C:\Users\Admin\AppData\Local\Temp\is-4ME51.tmp\_isetup\_setup64.tmp

                                        Filesize

                                        6KB

                                        MD5

                                        e4211d6d009757c078a9fac7ff4f03d4

                                        SHA1

                                        019cd56ba687d39d12d4b13991c9a42ea6ba03da

                                        SHA256

                                        388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95

                                        SHA512

                                        17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e

                                      • C:\Users\Admin\AppData\Local\Temp\is-NMAUI.tmp\imyfone-download.tmp

                                        Filesize

                                        1.2MB

                                        MD5

                                        dec02867f1463d4458bb2483c76d1cd8

                                        SHA1

                                        663d02a666fafd946b60ce54b0fd8c2212b44cd4

                                        SHA256

                                        8343b0628d8aae5af279349b80ce9afb8c241b8b2dcade63dd6e4a5b6b66551b

                                        SHA512

                                        4b1b39025567f9de09bfb121ea00367d95af07ba74bfad740545cf2faabb790050ae20e7168eda47bb9490d3fd982f2aeaf0e9076d0aadd89d4848ec8eb982af

                                      • C:\Users\Admin\AppData\Local\Temp\is-NMAUI.tmp\imyfone-download.tmp

                                        Filesize

                                        1.2MB

                                        MD5

                                        dec02867f1463d4458bb2483c76d1cd8

                                        SHA1

                                        663d02a666fafd946b60ce54b0fd8c2212b44cd4

                                        SHA256

                                        8343b0628d8aae5af279349b80ce9afb8c241b8b2dcade63dd6e4a5b6b66551b

                                        SHA512

                                        4b1b39025567f9de09bfb121ea00367d95af07ba74bfad740545cf2faabb790050ae20e7168eda47bb9490d3fd982f2aeaf0e9076d0aadd89d4848ec8eb982af

                                      • C:\Users\Admin\AppData\Local\Temp\{F4D9A~1\MFDriver.sys

                                        Filesize

                                        31KB

                                        MD5

                                        886d29da29b15a50d806d03b6e0a9943

                                        SHA1

                                        8f518d36b1157d3b1fb114f04af012df2e540ba0

                                        SHA256

                                        75906265407dfb6cbee83857ad5a33de3d2f85426e1fe58d115cb06df4453e64

                                        SHA512

                                        07427171449d165a3a58f933d3dcb196690f9b7654901426247ee7a2b9063d8ec0ab34db51923647d2a08202e5de8d80c45ece2f98a99c9de49f301adbd70188

                                      • C:\Users\Admin\AppData\Local\Temp\{F4D9A~1\MFdriver.cat

                                        Filesize

                                        9KB

                                        MD5

                                        8a44de3c5d5119b9a48177db0a62cd0f

                                        SHA1

                                        639525218ca83c1a9e64c2741862d085589fc07f

                                        SHA256

                                        fcc7df59eaafc3aff7b9392bcc7e7ca3092d3a620c0074d8a689124849ca06c8

                                        SHA512

                                        7b62bac42149a85b2290ed3342493a05c00df47067362c1632c4c0b43481fb33a847b1eea1012b454c2d4a238de1bc9e63b8bbeb52cda7c323350d58fe69cb56

                                      • C:\Users\Admin\AppData\Local\Temp\{f4d9a10e-ae8a-b44d-a79b-c7a0dc36c6b6}\MFDriver.sys

                                        Filesize

                                        31KB

                                        MD5

                                        886d29da29b15a50d806d03b6e0a9943

                                        SHA1

                                        8f518d36b1157d3b1fb114f04af012df2e540ba0

                                        SHA256

                                        75906265407dfb6cbee83857ad5a33de3d2f85426e1fe58d115cb06df4453e64

                                        SHA512

                                        07427171449d165a3a58f933d3dcb196690f9b7654901426247ee7a2b9063d8ec0ab34db51923647d2a08202e5de8d80c45ece2f98a99c9de49f301adbd70188

                                      • C:\Users\Admin\AppData\Local\Temp\{f4d9a10e-ae8a-b44d-a79b-c7a0dc36c6b6}\MFdriver.cat

                                        Filesize

                                        9KB

                                        MD5

                                        8a44de3c5d5119b9a48177db0a62cd0f

                                        SHA1

                                        639525218ca83c1a9e64c2741862d085589fc07f

                                        SHA256

                                        fcc7df59eaafc3aff7b9392bcc7e7ca3092d3a620c0074d8a689124849ca06c8

                                        SHA512

                                        7b62bac42149a85b2290ed3342493a05c00df47067362c1632c4c0b43481fb33a847b1eea1012b454c2d4a238de1bc9e63b8bbeb52cda7c323350d58fe69cb56

                                      • C:\Users\Admin\AppData\Local\Temp\{f4d9a10e-ae8a-b44d-a79b-c7a0dc36c6b6}\mfdriver.inf

                                        Filesize

                                        4KB

                                        MD5

                                        1542d93be42615382bd29da2dc241bf9

                                        SHA1

                                        b391fd5ccc4eb8411d240020f1e3bac6109a9c35

                                        SHA256

                                        63de9d9babb23a85c751fba32f9c0501e00f6d60f71e6aac024aaf3bb8136b5e

                                        SHA512

                                        91cb382f7fc07102e974bd5fc834cc0cd929bba70338f08fcf481d6bf4982608d210ecc869b06d95699f97adc0f0d951f03efbdc38cda275a6e1a6e43f245a67

                                      • C:\Users\Admin\AppData\Local\Temp\{f4d9a10e-ae8a-b44d-a79b-c7a0dc36c6b6}\mfdriver.inf

                                        Filesize

                                        4KB

                                        MD5

                                        1542d93be42615382bd29da2dc241bf9

                                        SHA1

                                        b391fd5ccc4eb8411d240020f1e3bac6109a9c35

                                        SHA256

                                        63de9d9babb23a85c751fba32f9c0501e00f6d60f71e6aac024aaf3bb8136b5e

                                        SHA512

                                        91cb382f7fc07102e974bd5fc834cc0cd929bba70338f08fcf481d6bf4982608d210ecc869b06d95699f97adc0f0d951f03efbdc38cda275a6e1a6e43f245a67

                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                        Filesize

                                        3KB

                                        MD5

                                        0a0f4b7d9304d314b2cc7a1a5c2103d8

                                        SHA1

                                        26d1ead51e4cf56b6d054b632890ffa48d7c5dc7

                                        SHA256

                                        0c3b24cee4fd6af35a3896f0c75c9d0a0784bdb77c6ebe506220375bf599ac8c

                                        SHA512

                                        c6ebe84b8118392d7602c3bfe3b6eafd90ab18baf8db3b85c80694f12ca8861f82802396f29d9aba12bd948a3817b96e8ba5bc1176affa06b48797529ece5d8d

                                      • C:\Windows\INF\oem3.inf

                                        Filesize

                                        4KB

                                        MD5

                                        1542d93be42615382bd29da2dc241bf9

                                        SHA1

                                        b391fd5ccc4eb8411d240020f1e3bac6109a9c35

                                        SHA256

                                        63de9d9babb23a85c751fba32f9c0501e00f6d60f71e6aac024aaf3bb8136b5e

                                        SHA512

                                        91cb382f7fc07102e974bd5fc834cc0cd929bba70338f08fcf481d6bf4982608d210ecc869b06d95699f97adc0f0d951f03efbdc38cda275a6e1a6e43f245a67

                                      • C:\Windows\System32\DriverStore\FileRepository\MFDRIV~1.INF\MFDriver.sys

                                        Filesize

                                        31KB

                                        MD5

                                        886d29da29b15a50d806d03b6e0a9943

                                        SHA1

                                        8f518d36b1157d3b1fb114f04af012df2e540ba0

                                        SHA256

                                        75906265407dfb6cbee83857ad5a33de3d2f85426e1fe58d115cb06df4453e64

                                        SHA512

                                        07427171449d165a3a58f933d3dcb196690f9b7654901426247ee7a2b9063d8ec0ab34db51923647d2a08202e5de8d80c45ece2f98a99c9de49f301adbd70188

                                      • C:\Windows\System32\DriverStore\FileRepository\mfdriver.inf_amd64_0e3f176af7e160c0\mfdriver.inf

                                        Filesize

                                        4KB

                                        MD5

                                        1542d93be42615382bd29da2dc241bf9

                                        SHA1

                                        b391fd5ccc4eb8411d240020f1e3bac6109a9c35

                                        SHA256

                                        63de9d9babb23a85c751fba32f9c0501e00f6d60f71e6aac024aaf3bb8136b5e

                                        SHA512

                                        91cb382f7fc07102e974bd5fc834cc0cd929bba70338f08fcf481d6bf4982608d210ecc869b06d95699f97adc0f0d951f03efbdc38cda275a6e1a6e43f245a67

                                      • \??\c:\PROGRA~2\IMYFON~2\MFDriver.sys

                                        Filesize

                                        31KB

                                        MD5

                                        886d29da29b15a50d806d03b6e0a9943

                                        SHA1

                                        8f518d36b1157d3b1fb114f04af012df2e540ba0

                                        SHA256

                                        75906265407dfb6cbee83857ad5a33de3d2f85426e1fe58d115cb06df4453e64

                                        SHA512

                                        07427171449d165a3a58f933d3dcb196690f9b7654901426247ee7a2b9063d8ec0ab34db51923647d2a08202e5de8d80c45ece2f98a99c9de49f301adbd70188

                                      • \??\c:\program files (x86)\imyfone magicmic\MFdriver.cat

                                        Filesize

                                        9KB

                                        MD5

                                        8a44de3c5d5119b9a48177db0a62cd0f

                                        SHA1

                                        639525218ca83c1a9e64c2741862d085589fc07f

                                        SHA256

                                        fcc7df59eaafc3aff7b9392bcc7e7ca3092d3a620c0074d8a689124849ca06c8

                                        SHA512

                                        7b62bac42149a85b2290ed3342493a05c00df47067362c1632c4c0b43481fb33a847b1eea1012b454c2d4a238de1bc9e63b8bbeb52cda7c323350d58fe69cb56

                                      • memory/2548-196-0x0000000000400000-0x0000000000434000-memory.dmp

                                        Filesize

                                        208KB

                                      • memory/2548-212-0x0000000000400000-0x0000000000434000-memory.dmp

                                        Filesize

                                        208KB

                                      • memory/2548-2127-0x0000000000400000-0x0000000000434000-memory.dmp

                                        Filesize

                                        208KB

                                      • memory/3908-203-0x0000000002190000-0x0000000002191000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3908-2126-0x0000000000400000-0x0000000000539000-memory.dmp

                                        Filesize

                                        1.2MB

                                      • memory/3908-903-0x0000000000400000-0x0000000000539000-memory.dmp

                                        Filesize

                                        1.2MB

                                      • memory/3908-891-0x0000000000400000-0x0000000000539000-memory.dmp

                                        Filesize

                                        1.2MB

                                      • memory/3908-312-0x0000000002190000-0x0000000002191000-memory.dmp

                                        Filesize

                                        4KB

                                      • memory/3908-2011-0x0000000000400000-0x0000000000539000-memory.dmp

                                        Filesize

                                        1.2MB

                                      • memory/3908-282-0x0000000000400000-0x0000000000539000-memory.dmp

                                        Filesize

                                        1.2MB

                                      • memory/4184-2005-0x000000006F200000-0x000000006F74A000-memory.dmp

                                        Filesize

                                        5.3MB