Overview

overview

8

Static

static

1

krnl_beta.exe

windows10-1703-x64

8

Resubmissions

22-04-2023 06:31

230422-g974xsfa7v 10

22-04-2023 06:25

230422-g6x5jsfa51 8

Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    22-04-2023 06:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    krnl_beta.exe

  • Size

    1.8MB

  • MD5

    3701dc535fb395d6a1fb557a3aeec5e9

  • SHA1

    ef517659229ddc6ecfc02481c3953ac9322dae35

  • SHA256

    ec6df713446a8dd5efb376fbb7b444ed7e09f5cdd98c0494999b64af2e2d5537

  • SHA512

    20dc14387138f913034bd2c265156dca1f36c128c040a99d6904fe6f1830d2f98afb3dcf0553817adb66e480be7d0fb0d7df58f0feb9b007a5a6bab648b081a2

  • SSDEEP

    49152:+P1uB0SVp4+KSxyrRUzS65+x+rnxYr9PC:+Pk0ST4+RgRUzS65+x1ZPC

Score
8/10
microsoftphishing

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 6 IoCs
  • Detected potential entity reuse from brand microsoft.
    phishingmicrosoft
  • Drops file in Windows directory 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: MapViewOfSection 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 20 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 47 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\krnl_beta.exe
    "C:\Users\Admin\AppData\Local\Temp\krnl_beta.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:368
    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe" x "C:\Users\Admin\AppData\Roaming\Krnl\krnl.7z" -o"C:\Users\Admin\AppData\Roaming\Krnl" -aoa -bsp1
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:4568
    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe" x "C:\Users\Admin\AppData\Roaming\Krnl\Data\Community.7z" -o"C:\Users\Admin\AppData\Roaming\Krnl\Community" -aoa -bsp1
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:4692
    • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      PID:1476
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4260
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
      1⤵
      • Drops file in Windows directory
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:2932
    • C:\Windows\system32\browser_broker.exe
      C:\Windows\system32\browser_broker.exe -Embedding
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • NTFS ADS
      • Suspicious use of WriteProcessMemory
      PID:4956
      • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\ndp481-web.exe
        "C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\ndp481-web.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2096
        • C:\cda1b7519747573a79e2cee713b1\Setup.exe
          C:\cda1b7519747573a79e2cee713b1\\Setup.exe /x86 /x64 /web
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks processor information in registry
          • Suspicious behavior: EnumeratesProcesses
          PID:5032
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Suspicious behavior: MapViewOfSection
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2776
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      PID:2772
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      PID:3044
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1016
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      PID:772
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Modifies registry class
      PID:1376

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6CI3IN3W\edgecompatviewlist[1].xml
      Filesize

      74KB

      MD5

      d4fc49dc14f63895d997fa4940f24378

      SHA1

      3efb1437a7c5e46034147cbbc8db017c69d02c31

      SHA256

      853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1

      SHA512

      cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\ndp481-web[1].exe
      Filesize

      1.4MB

      MD5

      0f774e364b59d81f9396b075da92c10e

      SHA1

      8b5c78682e0fcc358dc37a24a8ad8e46847db1fd

      SHA256

      c46aa513b122786e133064af1b8d59293bcdedead298c6087f17d03a2ed096c5

      SHA512

      ab60a1f72a66d7cea5c85650d5b6fa182a88a5014549c1b94114b445b91e22af51e9fbf2693c967c7a7bca1a93f75a8b7673e371ec9037344bf095752b9bc214

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\open-sans-v34-latin-600[1].woff2
      Filesize

      16KB

      MD5

      603c99275486a11982874425a0bc0dd1

      SHA1

      ffeb62d105d2893d323574407b459fbae8cc90a6

      SHA256

      4ffc35ac4d5e3f1546a4c1a879f425f090ff3336e0fce31a39ae4973b5e8c127

      SHA512

      662dc53798ccda65ee972a1bb52959ca5f4c45066c1d500c2476c50ec537cb90a42d474d7dde2bec1ea8c312cc4a46e1d91ffb610130c2dc7914b65aef8a2615

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\open-sans-v34-latin-regular[1].woff2
      Filesize

      16KB

      MD5

      e43b535855a4ae53bd5b07a6eeb3bf67

      SHA1

      6507312d9491156036316484bf8dc41e8b52ddd9

      SHA256

      b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

      SHA512

      955a4c3ea5df9d2255defc2c40555ac62eeafcc81f6fa688ba5e11a252b3ed59b4275e3e9a72c3f58e66be3a4d0e9952638932fa29eb9075463537910a8e0ce6

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q0HL6JEP\open-sans-v34-latin-700[1].woff2
      Filesize

      15KB

      MD5

      e45478d4d6f15dafda1f25d9e0fb5fa1

      SHA1

      52cb490cd0ee4442ede034085cda9652b206f91c

      SHA256

      d1a17abb1a999842fe425e1a4ace9d90f9c18f3595c21a63d89f0611b90cfd72

      SHA512

      2ac423249ec837efa35b29705f55a326dee83f727e867269b86005cce144ca8d435f7412bb0bc9babdb9ae17419e4a0314b2923bee6a5acc96c9909e9eb48645

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      768B

      MD5

      6abebffae1f151d8addc8c93fb235b3c

      SHA1

      98f0fb8049c57cd0ff6ac91da151bb103aeaad9a

      SHA256

      34d6e8c50da1283762b969e44d22479d8e578325b44a0155e7b0b82f0c482b2a

      SHA512

      e73ec156a37ab8be05e98859888573c15647a974bf7d20150225e8f7fa7aadb05b315b7fabac6fd35b9878a924fbed26b61867fd468c8fc1e2655e01e9c82f30

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      13B

      MD5

      c1ddea3ef6bbef3e7060a1a9ad89e4c5

      SHA1

      35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

      SHA256

      b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

      SHA512

      6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      694B

      MD5

      0ee5770652d8348cab9361730c18d40f

      SHA1

      e459076350e01065efa6a60297c151065e4064ac

      SHA256

      80cd407a6af3950fd0ec9dff60f8615aeda06a6d844ceaf090c882c124f87f4b

      SHA512

      428177d13e4228b7fa5f2c71f24dfed34dbf870b72487122d5bfde1616ff7d6f209ac55dad0a34ac6d0d1583b943b8d86f351df91dff91ca9b4da2aa185feb9f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      1KB

      MD5

      688fbcccb772393590319efaaee9ba59

      SHA1

      1519c124e4a1ebb5fc8cd4137c87c0d91a030f76

      SHA256

      18b208f5153dac2d5a2a54956ec4ee35ecf110dd2e500d8c840069ea9def3a91

      SHA512

      f33f4b72045ef29359e589f2929951964ea9f1ec0441c5383f29898ffccd6ea0eb02e63c5a19d7aaabbcb5ded17b3eca835a0e6283423f2eec2695bb771018b0

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\D8V7F2WF\favicon[1].ico
      Filesize

      16KB

      MD5

      12e3dac858061d088023b2bd48e2fa96

      SHA1

      e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

      SHA256

      90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

      SHA512

      c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\XRDGJRRD\suggestions[1].en-US
      Filesize

      17KB

      MD5

      5a34cb996293fde2cb7a4ac89587393a

      SHA1

      3c96c993500690d1a77873cd62bc639b3a10653f

      SHA256

      c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

      SHA512

      e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\ImageStore\9p5uwh2\imagestore.dat
      Filesize

      17KB

      MD5

      d19d04872481ea63c68fefbf53142e53

      SHA1

      c9b3825f6492ab4638cd1866d96f73a74d3a34a0

      SHA256

      53eb76102db6ef3f0d9100ce26b863a23acd8da3259c38f4c715d8803ee9ab65

      SHA512

      49c9b3015fefb9123dcd5a0fd3fb42c824b2755dd761cc09588b359894704b57036da01e17d41c6847fa3c283313c15f9542a364c4b8d08984c3c21c00fe86d7

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Microsoft\Windows\3720402701\2219095117.pri
      Filesize

      207KB

      MD5

      e2b88765ee31470114e866d939a8f2c6

      SHA1

      e0a53b8511186ff308a0507b6304fb16cabd4e1f

      SHA256

      523e419d2fa2e780239812d36caa37e92f8c3e6a5cd9f18f0d807c593effa45e

      SHA512

      462e8e6b4e63fc6781b6a9935b332a1dc77bfb88e1de49134f86fd46bd1598d2e842902dd9415a328e325bd7cdee766bd9473f2695acdfa769ffe7ba9ae1953d

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\RE1Mu3b[1].png
      Filesize

      3KB

      MD5

      9f14c20150a003d7ce4de57c298f0fba

      SHA1

      daa53cf17cc45878a1b153f3c3bf47dc9669d78f

      SHA256

      112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960

      SHA512

      d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\alert-info[1].svg
      Filesize

      726B

      MD5

      c7db49644f6bf1f50b3190ffba0516ed

      SHA1

      5bb312a0b6357ccb7e93158ac0f97b4e249e4696

      SHA256

      2d891fb5984d5f421055da7f5d7e4be525df4c973fdc4366057bc9dfd82ce281

      SHA512

      9b7f127443d517223a2a2cf6131a777f56aae3cd21dbcc1e87d847a0ad42e8c05a7f13347fec6d4df0582d486a57a9dc0d8121e6ca38371549f53e396cf6463a

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\alert-promo[1].svg
      Filesize

      1KB

      MD5

      b119b49f7f799d680e0ade981c8c36e1

      SHA1

      b2134ee3d8a4669c4b93225c0b987be0c78b6e6e

      SHA256

      2dc041b9b132cef3af67e03ba98fa1b72a9e877699e7a1f4277e00556c78ada4

      SHA512

      c68439e082f0979de042cb8e6ca5fcf08f1debf62133272a8580334867b9a3309a023441ca315b604ab6867ea3b9efa8e8185067e288fd2c46e65a8eaafe2a86

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\cda-tracker.min[1].js
      Filesize

      798B

      MD5

      a3827d5909344f41d270fc8475f7733c

      SHA1

      bb6cb83e4d2080ee02ea366699f487c7362d4934

      SHA256

      bcb1104af4aea1ba4be65f0e9669e2f5382df316635226ade340f6dc15f2866a

      SHA512

      5cbb021d1f0bf0b13583b966ed5bba971b770d3331f062beb2fd75b0d2d380c10bf62db64167f3e3b94f6f5bc05cb160e7d5dae8a5d85d99ed75181040764d18

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\ms.analytics-web-3.min[1].js
      Filesize

      136KB

      MD5

      6a5b990f8696eb7a67ecfe6b5b3cab0b

      SHA1

      108bbd600f0237e62112db3969c6f02be0a1c7cb

      SHA256

      8a13eda4650628c3b24edd6b407cfedf1821188701430545bc17ccf7fe0083ac

      SHA512

      ceabc9380d2e4166dca101fa8e7ad7fa7b176182a04294b41584c7c3a93c28510c2fa7633e40c0959c7f39382a6b0706f10c6ff87068c96e2f5b15f1353f6856

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\59RQ2FFO\space-grotesk-v12-latin-700[1].woff2
      Filesize

      11KB

      MD5

      514360ed1b78e71aabe58ecd08f36706

      SHA1

      1062c179ea2f74b5db67f9d7822c556ed25637dd

      SHA256

      751851e72654508ca07678c61bdacd91b772d725f531dd8a6f62e6f941e11ecc

      SHA512

      1827c1a0189570e775bdcd07657e720e0bb27c2157ff46307cba551eaa16822645e388321081eb13cae7f4d024038b5279cff897a4c86c0ecd4428e60a5dac5e

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\at[1].js
      Filesize

      102KB

      MD5

      6b56d2bd5139bc5c00f412cd917a3bac

      SHA1

      7ebb960a86d15ba09b075265c6c098b9cdafc624

      SHA256

      cd976ec1ad0e64056080f75bd5bb81cc61b544c8f535ca2ca630a7f4aa5fda5b

      SHA512

      e716effb9d5b6bd49394e972d7307da7068bb03d536b975e03781c3ac9425117cc27e6a24a7aaf71e56f59341dce179184c88c3d4533fae99379a1c1a9e9f222

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\bootstrap-custom.min[1].css
      Filesize

      231KB

      MD5

      1b7d32f433b2aea297ddae3c6f2891f4

      SHA1

      d466b77c34b46d64b73bf37f42434ffdc9fdedbc

      SHA256

      44d1bc3c3c915f77fc52953ca6440a3b7741dc05bc15ec313d7d3768ef047e35

      SHA512

      c97adb623557d09072179be1f8ac043bf6b456f854349cb05551fda8e86fe2df738ddf22d77b2128896376373293455a74017a36cdf4c3603ad0c9737ea91dd8

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\dotnet-framework-runtime[1].svg
      Filesize

      42KB

      MD5

      5aaa8c37cd59979b920cd21c4a50a38d

      SHA1

      0ee61e3b2d58513b92cf4c6b5114c1beb55539e7

      SHA256

      db6c6f42e1d56092fb2c3d317968077cb29435139274faefbf4ab7681955bec6

      SHA512

      0fb4c45db9f29963fce195e79b4e9963e57a50ef0fcab74466d6034834e0099f1f344a8569973d4c1ece05d9b70b5938b42ead4fabaa08de7d24c911df28c235

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\general.min[1].js
      Filesize

      174KB

      MD5

      0a51551c9a5fe36e372fc39eb9bf0b3a

      SHA1

      6c76d69df786828afad990a0144b5d27d56e7863

      SHA256

      124fceae66250916650ffa507fc9c2773714f98580b7110f98d20103cd983794

      SHA512

      7c1e3542d04731f54ccb0888fd3b30c39e97e01e0980508bee856cf4725aad04e987a629ef23d95b8c264216f1b825c1c58920e34b79800bdcc22e761b85e388

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\main.min[1].js
      Filesize

      31KB

      MD5

      b9b13a437cdee66d01ab9cb18d85d3e0

      SHA1

      6614ec983dc34b78eda8a8e3ada837a503541a92

      SHA256

      0d56c5660f9a5afc4b544798551201d14c6d222b658bb1bb0e3f40ca04cb7bb9

      SHA512

      987cc6da7ac9e739b70572464917b464c0f90b3ba795133d852d7eddea3de89db8e880a3fc05745f1f964e5770d7ab9736f50d241e3577705c80ecf088fc888d

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\HWIMU41X\wcp-consent[1].js
      Filesize

      51KB

      MD5

      413fcc759cc19821b61b6941808b29b5

      SHA1

      1ad23b8a202043539c20681b1b3e9f3bc5d55133

      SHA256

      daf7759fedd9af6c4d7e374b0d056547ae7cb245ec24a1c4acf02932f30dc536

      SHA512

      e9bf8a74fef494990aafd15a0f21e0398dc28b4939c8f9f8aa1f3ffbd18056c8d1ab282b081f5c56f0928c48e30e768f7e347929304b55547f9ca8c1aabd80b8

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\ai.2.min[1].js
      Filesize

      118KB

      MD5

      cd66343575a38db62e92e381d0316440

      SHA1

      822b959f7d87d16e294faffcff1619d1ca99bc38

      SHA256

      679a89792c6667a5ef5606e009328640dc1ba78b04f8c876378748967221fa48

      SHA512

      6c0f8d352f7d41c5a65a0ea169ad283ba9db5e2bc1de0d8a92e37458f938ebaca7e373a41c87aafa53a71cc41041e63ebcdefd505951034e8b3d27ed8d966d03

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\cookie-consent.min[1].js
      Filesize

      986B

      MD5

      276fadd25103db9ea780c1ab25dd42c8

      SHA1

      54483dc13e60306f87a0e4a4b16b47ffac51e097

      SHA256

      c9cb2eed50644985e9f73a6897d05d94b80b8c317ea3bb5524c28a16683a63f5

      SHA512

      174919bc2b37c379531819d3b2fea5097181b600b68b746afb8c52131db2bc05ac6d6c97821fe35f1c4018fb2b2982dcc1d542c568ed3bf0cff71e32b9408eca

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\culture-selector.min[1].js
      Filesize

      308B

      MD5

      4147b3bfb0a145eec758f0cb7292cefb

      SHA1

      8e02467706ce768bc9e68fea2a8d01b49513d631

      SHA256

      8f6f064a7a80641e434afc35b14fd8a01acda68f2ac01097e7dbbf0623edeb20

      SHA512

      49a661a2009c172df348aa83b2342f5cfdeea58026710bf139f847c1d9e6728b20a865bb81a980492186b7dd210ed1202c01a38757edfe77a4efa4945cd82477

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\mwfmdl2-v3.54[1].woff
      Filesize

      25KB

      MD5

      d0263dc03be4c393a90bda733c57d6db

      SHA1

      8a032b6deab53a33234c735133b48518f8643b92

      SHA256

      22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12

      SHA512

      9511bef269ae0797addf4cd6f2fec4ad0c4a4e06b3e5bf6138c7678a203022ac4818c7d446d154594504c947da3061030e82472d2708149c0709b1a070fdd0e3

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\open-sans-v34-latin-regular[1].woff2
      Filesize

      16KB

      MD5

      e43b535855a4ae53bd5b07a6eeb3bf67

      SHA1

      6507312d9491156036316484bf8dc41e8b52ddd9

      SHA256

      b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

      SHA512

      955a4c3ea5df9d2255defc2c40555ac62eeafcc81f6fa688ba5e11a252b3ed59b4275e3e9a72c3f58e66be3a4d0e9952638932fa29eb9075463537910a8e0ce6

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OW2061N6\override[1].css
      Filesize

      1KB

      MD5

      a570448f8e33150f5737b9a57b6d889a

      SHA1

      860949a95b7598b394aa255fe06f530c3da24e4e

      SHA256

      0bd288d5397a69ead391875b422bf2cbdcc4f795d64aa2f780aff45768d78248

      SHA512

      217f971a8012de8fe170b4a20821a52fa198447fa582b82cf221f4d73e902c7e3aa1022cb0b209b6679c2eae0f10469a149f510a6c2132c987f46214b1e2bbbc

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q0HL6JEP\74-888e54[1].css
      Filesize

      167KB

      MD5

      d094e9449e6ed3dac9facc510011602e

      SHA1

      8d05d69df299fc59b61ba20b2245ed3bd90571d5

      SHA256

      a9f24da628989ece81a468b5a98977c64c8d914e9d139aad578bccde73bcc2da

      SHA512

      de2dc17a3f755b7fc06a92b0b610b3b6e005abe94d38c6ff087fd6f0e50eb1800e42d47045aa54f84832e8b89e946f508877bb60cd6572ed3be814d22d924bd4

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q0HL6JEP\a2-598841[1].js
      Filesize

      134KB

      MD5

      391d31bcdc9733823bdda80ab094ddff

      SHA1

      11111b527ac86bed0748a026da7fec757b414c46

      SHA256

      f972ffc4af215a60ab0d70a63535cfcd23a951766c9903c6770bfc431e88852e

      SHA512

      7a838a824e728fd9a38ff532f19e0b8f965f486256e0c62924d5ac55cb3fee62d745dc1b2e32c5e1123f2541d70721eaaca552ecb67f3f4f335939fedfaf86c6

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q0HL6JEP\analytics.min[1].js
      Filesize

      892B

      MD5

      b4a1847f1be996c08716d3b97456d657

      SHA1

      49113ee2989496eb1858a45ffaa319863d8ccd69

      SHA256

      8a80172a7d4c7c65ad596f52ecc105d61c0b2b60368277fb4729767f54fec06a

      SHA512

      b0e4ab27c1db23cbcd13bda3bf488293985d76de6c4f51b2be140c7ca8562a0b8280360b2e628a097f7e5fe94508759aca5bec037a1b3d7a73d2d7d16fb63b93

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q0HL6JEP\at-config.1.4.1[1].js
      Filesize

      5KB

      MD5

      72dcd95e1872e4e7dd4debd9363a3f23

      SHA1

      73e8f9c4dd8812ebc9c54abed3e50b68f21ad7e3

      SHA256

      d83130d74d82a31e8a653378f0051d57ef560bd85406c85404c0f7bd9801b0bf

      SHA512

      12c49158f980c09b5cf39becea6506126c9077639991607c6066a9906d5be39eff6d8b4c844ab3dd398d17131f5e00638e52ad7e6a272ca38ea6f2e41efe00a3

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\09UXBCPJ.cookie
      Filesize

      407B

      MD5

      84b3df8c019a64979d547befe1da21b0

      SHA1

      88027e8bfc59fb00b42217ad395faa9e114996a8

      SHA256

      dee7660063de173008b305094354bd283254c991ba9dffb2f1f5be742b9181f5

      SHA512

      97fa02acbf99274ae02547b6847314dd4fbc9ba32f5d59ac2d6f9ff271628ebc33b725784d5bd0be2722a999d29ba9c374b46dfd1967ff4ee33129291fea2153

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\0R88I67T.cookie
      Filesize

      340B

      MD5

      1cd4722b66e40c56f67aa5ce079e335f

      SHA1

      5d1a6b30b076dbad18cc02a2f410008090ab6878

      SHA256

      bc59d7f7ddc0648b3254e5cb612eb839a23d9bf5b3178b8dd054390fee5f43d8

      SHA512

      ebebb779b8cee93e35a02027940e847d2ec7eb62938d660add07bf2d3798272deee7dc678a6aea44fe277d99eb1f7258cdaaf1bc7604c59f284496575edb2a38

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\1IBHDYHD.cookie
      Filesize

      392B

      MD5

      8bbbba130bc651791432584b58162e1e

      SHA1

      ae118a12a448198b16fca873592521efe5b9def6

      SHA256

      49846e5c9e719c8a96b8ec393cf907b6f51a6d01ca079bec929ea8c3e8270f4f

      SHA512

      3e0cdcde2abc4499d21993e5d4faecc339b57b860e262680664f963f6cf9c213f2aa1cecf9cb973cf055024fb9f99bd6ffd31668c8e8409efc76bf8baed6501f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6AB2WU0O.cookie
      Filesize

      563B

      MD5

      a048e7d798f4c39279ea1f2029cf4098

      SHA1

      bd18f6e8a4e318847d75836d065a1c602790b607

      SHA256

      2054a06bccc188e8da8ba80fe8c5e88334dafe35d5e9f77175ac54b489fc91c4

      SHA512

      622ba5cb5ca0c0cee4dc1b6fde622ef3805b282744f58163f8813fa214aa6a5fe670e92225d6ede1deb31ab15449deba94967c7a7b5b1a26932f9b253e803678

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\6L631IZG.cookie
      Filesize

      121B

      MD5

      d8ae8675fdf4cdd1b362930dc2f294c7

      SHA1

      69a62a0f795a0582a2d3f3f1497cd78d0e81ddcf

      SHA256

      4a5c5c6fb689f6917c9a6fc80ad063e1f81573cafa8459047c9904760c9c8b44

      SHA512

      a62b6d6b233a04db7db2c9916efd8becbdfc9a21a27112dadf2b4299944deb5af70d0c47766890d183a8b6f27c7504e795ac1b12e5039d7032581a5e40a0c6b7

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\7P9EEABH.cookie
      Filesize

      268B

      MD5

      60b20d5bc51f2d2c2a00c40decb5808a

      SHA1

      d74c241f54d0d8529ffb60851c229e2576596351

      SHA256

      db435a917d0dd9f63ffd797faad3d99ca47d2a04cdf028f3fcc2bd77bf455897

      SHA512

      c8687e61ba60ca2f7eb4380d011cc0e69682db29f3baeab5c406c40fe1e8d686a13aaf9293cf89acb6d8e5a0ae1555d86a2b60e798908a77759e525bcdd0b14c

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\93LBHEDF.cookie
      Filesize

      392B

      MD5

      b9a226b01207bdb3ac6b9d28a0d0c2bb

      SHA1

      de010b3b456f9c609a3f0eb90cff53507bb14964

      SHA256

      8d77ea5c7c34546a4299ab857b57af3a4cf582ebb5f15c586b5b792853591427

      SHA512

      a8906eee50b63a79b7fbc964073016d4945255e17cd41e4611c2f49f15cdab7cca383aea96c20a15fc73c045b42462cd1f2ed6fb885543d90e53a8aeb44e0c04

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\DANKFP34.cookie
      Filesize

      121B

      MD5

      dcc92125a0d7d64d592757f5a636d309

      SHA1

      590ef84797167c68909fab843df795f5c98edcae

      SHA256

      3aab651d6c8f5dce6e580a82b96c24cc23647640e43bd1366d35a7a64458e7f2

      SHA512

      1a51b6630f45201b40d5fed8842158934b2f3900f28262df36edf10c5366b7328b9f7190a1def01caa5fc899d1cc5b9a2344caab3da19f6ba3efcd59017a98dc

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\EEUA47HT.cookie
      Filesize

      563B

      MD5

      bdbdf4ca20473d631ba27f5b3c82a826

      SHA1

      d9d46d86c814eda6fc3c729d728701a31744ff7c

      SHA256

      7f62e67b51c538184c26e6d305d4a8d5fa0648403761a19560352382749ab2ea

      SHA512

      a47650608ea5631954317a3c32beec886a6bee84b086ee14900c50f9fbb66c73e9537bed9bf4850d99186df3264c91da203938cef031e9ec4d143786dac951af

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MLLTZNMA.cookie
      Filesize

      72B

      MD5

      8cc6241f76c4d4971e1dc589a7882591

      SHA1

      bc70e6bf313866243b77335436c09f6ea2499e37

      SHA256

      0c9ac70130783e86737345490551244742eb53bba997582c34f77180df7d2dc2

      SHA512

      a4871e31aa0e6ede74810578d38bf1d4db1d6cc9efc76c04af80b4249e3fe1cf970158062b45e681f869c44c4fa1b980bfa339ac98210865cfbc11d4bb4b1818

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\O0VSOMCW.cookie
      Filesize

      280B

      MD5

      ee5f564a150dc05beb3fad3a0e86380b

      SHA1

      909d0aa621698d5042f3cfa6efeb6752ed8541ef

      SHA256

      fbdc46bb1e17d50c95f04bf18c0551f9a01e89e4a583e037888eb501538ae1f5

      SHA512

      bbcd9303d2453bbd8c71e9f412a06238b781b6bffdeed6303888f94503bc8b53e1a31e99a0f5ff381c2e14d6bb411434f1b056d1e51893a81c5b357268ef823c

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RZFCW9ZA.cookie
      Filesize

      280B

      MD5

      db05eac2afe4c84962d3e4ab1d020c8d

      SHA1

      2c4525aefcee219de5f33094adf8bc9e1e45c8e8

      SHA256

      36db58be080c8779e546a4ce94c5f28250ddb52693a3ee4c690a9893b8a76f99

      SHA512

      6d968b15570da1aee4e9f40e37e813821700002c6840a66c7e15ce6d7d34014f2ee0d30fb9d7ea063dfd7c0449ecdaa7a9deb2821e883481b64aa1dab4a8cadd

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      1KB

      MD5

      688fbcccb772393590319efaaee9ba59

      SHA1

      1519c124e4a1ebb5fc8cd4137c87c0d91a030f76

      SHA256

      18b208f5153dac2d5a2a54956ec4ee35ecf110dd2e500d8c840069ea9def3a91

      SHA512

      f33f4b72045ef29359e589f2929951964ea9f1ec0441c5383f29898ffccd6ea0eb02e63c5a19d7aaabbcb5ded17b3eca835a0e6283423f2eec2695bb771018b0

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      13B

      MD5

      c1ddea3ef6bbef3e7060a1a9ad89e4c5

      SHA1

      35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

      SHA256

      b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

      SHA512

      6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      13B

      MD5

      c1ddea3ef6bbef3e7060a1a9ad89e4c5

      SHA1

      35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

      SHA256

      b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

      SHA512

      6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      13B

      MD5

      c1ddea3ef6bbef3e7060a1a9ad89e4c5

      SHA1

      35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

      SHA256

      b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

      SHA512

      6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      694B

      MD5

      0ee5770652d8348cab9361730c18d40f

      SHA1

      e459076350e01065efa6a60297c151065e4064ac

      SHA256

      80cd407a6af3950fd0ec9dff60f8615aeda06a6d844ceaf090c882c124f87f4b

      SHA512

      428177d13e4228b7fa5f2c71f24dfed34dbf870b72487122d5bfde1616ff7d6f209ac55dad0a34ac6d0d1583b943b8d86f351df91dff91ca9b4da2aa185feb9f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      694B

      MD5

      0ee5770652d8348cab9361730c18d40f

      SHA1

      e459076350e01065efa6a60297c151065e4064ac

      SHA256

      80cd407a6af3950fd0ec9dff60f8615aeda06a6d844ceaf090c882c124f87f4b

      SHA512

      428177d13e4228b7fa5f2c71f24dfed34dbf870b72487122d5bfde1616ff7d6f209ac55dad0a34ac6d0d1583b943b8d86f351df91dff91ca9b4da2aa185feb9f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\User\Default\DOMStore\DK20PNFO\dotnet.microsoft[1].xml
      Filesize

      1KB

      MD5

      688fbcccb772393590319efaaee9ba59

      SHA1

      1519c124e4a1ebb5fc8cd4137c87c0d91a030f76

      SHA256

      18b208f5153dac2d5a2a54956ec4ee35ecf110dd2e500d8c840069ea9def3a91

      SHA512

      f33f4b72045ef29359e589f2929951964ea9f1ec0441c5383f29898ffccd6ea0eb02e63c5a19d7aaabbcb5ded17b3eca835a0e6283423f2eec2695bb771018b0

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_AD319D6DA1A11BC83AC8B4E4D3638231
      Filesize

      1KB

      MD5

      8f951bf7c405abc98c9213fd0707ada7

      SHA1

      2939d75717471759c5da478e56f516c671446f24

      SHA256

      287a80030c13a7a2dca55e9842940ab22c4d59511f0152387cc020ca2f031285

      SHA512

      f59fdada17ea912f7189f6b1f81f028ad0e3f9e6f4a64624f3e76247e1fdce15011fde81cd93585b0728b2f1f1ddae144df6208358ab49875e42e5af9fd85eef

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177
      Filesize

      471B

      MD5

      1ac3f52491c5f0cc8786fff4c9f8e5dd

      SHA1

      6150764569eafd6bcf7a6754f874285b9f341771

      SHA256

      f4965d7904dc1e7770dd8e829a2fa7c6f658e2beb0b85e3749e92c32a337ab30

      SHA512

      73bc860661dccc4cbb83a1e7dd694424e0b7b4abed9ded3b11831511d9433a3fcab4c28f6cebf8cdb448516b3915e42f9cc3ab30c83d3b6c369041049a5e131f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868
      Filesize

      471B

      MD5

      7aaef62f3fc38a3c9de09e79d62eb96f

      SHA1

      e4e774d2b569d3a3ec0c8f03afbdd3a1a022477d

      SHA256

      579555daabbe68dd77c851cd5b5e2ac35ba8a908c47e8580a747482e5cf27d56

      SHA512

      fc612098f4ca6805222a5984fe163a615b59766b37825c4d695f0103d926e12fd4f157e34efb90758871f90bb3c2155c0fca226f92e0dc4316ccdf68fb5606ba

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_E503B048B745DFA14B81FCFC68D6DECE
      Filesize

      471B

      MD5

      e265b266efcc0e01388d97a2f3f482a0

      SHA1

      ca83dd46dd98de05f885f71aef9a0d4fd9e2e66e

      SHA256

      fd8ecb8fcc575b0d2ba7f701238ec0dbf4ee78d547eb09b8e894a5eca8d83e32

      SHA512

      de069cbe867ad064e2c3343646fb436629f90deb5917fe1e1dd7d0bf36ef200d06bb2865bfbec44a2df482b9edf8cd9b4ff07c636bd7e8bf43937dd6ac9f073f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
      Filesize

      471B

      MD5

      0b72cacdab2357cc86a7b42eb42af71b

      SHA1

      c3208230422fb292c945b835277f5648208ce8c5

      SHA256

      78900a7005d6b585d1a309e01a27e21b77b50221d69b4ccf7417cc7b5c90f200

      SHA512

      17377748927714a93e542222039d0f6bf1fca8150ce377bc2bce1dc290d2b5039987a324d8d3174ef13aea4073595717446baa411b98d125edbf06490428fb4b

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\E573CDF4C6D731D56A665145182FD759_EAB4AEE2EA70916CD4B93BC9BD3B283A
      Filesize

      471B

      MD5

      093ec91f4da66f7fcda6aba74b0564e3

      SHA1

      5eceec7e6da7e6f8d9fb9b1f4b0e8d49b601e46e

      SHA256

      43ea52aa132187773d6ca8ce2d3352bcd0a60a507565cb4ec1fc5053fd980a30

      SHA512

      81e5b24e5bf5ceef34406943960cf5992c8d26b27d2bf1a4341efec1fa657fc1c447edd359636462efbbe7450a702360756f050ec7f0bd6ddfc28bf655a4f13d

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_AD319D6DA1A11BC83AC8B4E4D3638231
      Filesize

      404B

      MD5

      cdae6b08c860fdc23c8e131050ae46bb

      SHA1

      5b21a1fcd9634294e0b53ae27d09df08438c8608

      SHA256

      a775c8b11bd72bb32c48feb6b156c2087940f838435bffc28054b96ecf198680

      SHA512

      5af405fee040f1a7e2d2c7ebda580b79f49bed1de42cd69789d0e823fee9d352ba1d85c4d847f52436762d1541b9ffecd146cdb1819d3a33e547adef132dae3c

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177
      Filesize

      412B

      MD5

      b36b2397aad76427689ceb6fd0b65b10

      SHA1

      5757083ef15f975f137026b4ecbe458f4b634f87

      SHA256

      ad0bb1f02bc2089d144162924388c4f36093cd219068036c94943fefdf82bad4

      SHA512

      56feb07c0d76b9f280d4172a0dc1383477c25d50f38d959dd3c2280862bf687e9c9e54dc976c05a91cb871602c050735c85fd3cafa99d644c7cb714d96bb7361

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C5130A0BDC8C859A2757D77746C10868
      Filesize

      412B

      MD5

      9bc47d1b68290be780d3501c8b7b7d15

      SHA1

      492985d304cbbfff97c127975d6c7009391d150c

      SHA256

      c85b719f4da23b6a0f91dcf4aa759fce6e0fa07b8cdb7d78aac0cd408e58e67c

      SHA512

      7571e38c97ffa02226b7286a71851fc871de321a38b243748baea82410acb0ee83a2b045cd2ab0b47b0e718c79a7372377d293c60f5ce4a584d560de37f0c16f

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_E503B048B745DFA14B81FCFC68D6DECE
      Filesize

      416B

      MD5

      9744ab857a958273b85c26e836d9e0cb

      SHA1

      5e38476f3889e24cf65dd8a223838191e3978f5f

      SHA256

      dca74db8ba69e672dffab3e2c4586eb387773e381699b13a51a656768fc087ff

      SHA512

      8df0374a37626f9f0aebd9915d783746392a745225b6eb5d43695d60a6bbb08595ce90aad9cec6224f5b7688effe07c8f866ef15a234ab10ca5cf945a56e8567

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
      Filesize

      400B

      MD5

      6f6e9e7869dd0c9758a27231b71cf14e

      SHA1

      b8e64b104319e408c71d97c1753754a3f67e97ef

      SHA256

      511c8c6da25d84af408fa174a9a6f38a3f37f1d2e897e5e7140c6d33c54bb9c3

      SHA512

      0362eb28f4f9d869787c07b416cab1fdaa3e207088d74b8913833d847195765c351ce4fae7bea8e87a097ad381e6da9c58edd5181cc1fdb9e7b5008f686f7745

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\E573CDF4C6D731D56A665145182FD759_EAB4AEE2EA70916CD4B93BC9BD3B283A
      Filesize

      426B

      MD5

      a92a9c69a609cedb692a1cc327562845

      SHA1

      42fe7376d37ebee2f3e312e4158460e32059ca5f

      SHA256

      85e0b24b15c46f7ca320c739cd7881f66a40393487c4c9277ada8a0569d448a2

      SHA512

      c5307d355641265264c94b40227edc5b8ebd11055dc4e20d4b316767e60d49bfa89ef2db40aee6dfde03ea7deeecac49ba66a8d99da0b1d4e6df87823dc0a006

      Download Submit

    • C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\Windows\3720402701\2219095117.pri
      Filesize

      207KB

      MD5

      e2b88765ee31470114e866d939a8f2c6

      SHA1

      e0a53b8511186ff308a0507b6304fb16cabd4e1f

      SHA256

      523e419d2fa2e780239812d36caa37e92f8c3e6a5cd9f18f0d807c593effa45e

      SHA512

      462e8e6b4e63fc6781b6a9935b332a1dc77bfb88e1de49134f86fd46bd1598d2e842902dd9415a328e325bd7cdee766bd9473f2695acdfa769ffe7ba9ae1953d

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\HFI412C.tmp.html
      Filesize

      16KB

      MD5

      b984f7f4c42e01497a8609b4e658f1ed

      SHA1

      6d339a9aadea86a7152044c7ae30e217ef347cd1

      SHA256

      ff10ca0b8d9821470a41868136985e46eee77772edf94e2b88dc91a4f0e793c4

      SHA512

      6113326fb4a2f6cacef47767a417b564c9fd36139c5ee3ab4522f37dcf84e379bc9d0b3bf12207ce26b6b10a483d83bfefff50636458a715436dfb7a44c7171d

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      Filesize

      628KB

      MD5

      ec79cabd55a14379e4d676bb17d9e3df

      SHA1

      15626d505da35bfdb33aea5c8f7831f616cabdba

      SHA256

      44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

      SHA512

      00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      Filesize

      628KB

      MD5

      ec79cabd55a14379e4d676bb17d9e3df

      SHA1

      15626d505da35bfdb33aea5c8f7831f616cabdba

      SHA256

      44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

      SHA512

      00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      Filesize

      628KB

      MD5

      ec79cabd55a14379e4d676bb17d9e3df

      SHA1

      15626d505da35bfdb33aea5c8f7831f616cabdba

      SHA256

      44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

      SHA512

      00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\Data\Community.7z
      Filesize

      2.2MB

      MD5

      e7e69e3bb82e50d10e17fceb8851f1e3

      SHA1

      ac38d2c834b5ef30feb0b23272ee289779caf14c

      SHA256

      1f70e675fd69fa7d0efe44a2a6cbade8350ebb1cb3a9a18ff824cfd680b35ddd

      SHA512

      ba44f453d75ac413f404b89c5dfd1acbdf95aae10beb65599e7e52ecec7eb3ea82b95a6947fcda38e2cb878eb197714be3f3e3d93d5fc09e83ebb952117ded44

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\Data\krnl.config
      Filesize

      48B

      MD5

      1705af08ed535cba6454e6c72069cc21

      SHA1

      a5fa2373c55b9c06934dd62918553cda63f71bdd

      SHA256

      a8f27919b3bb09a38e6dbd93f9c80518159454e2f4dc0e86f4f7d5d9951ad14f

      SHA512

      bd73d8c4fcad6d079fa5f1c3055956953762c678bb795f1b36a8c8d13e3e02174213875a3a94c6be315af52aa2f3a21a1c329f16601784cd6c1f3fdbf1da6c9f

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
      Filesize

      1.1MB

      MD5

      39ed86952a1e7926924a18802c0b75e4

      SHA1

      e7ad2a51e62fe68b1a82b17bcde347ab38c09ca3

      SHA256

      b84ceb86e9a8eba4d168f2cc6c9010c93779641e595f900aafe8cfef6165c126

      SHA512

      fe7b93af9bb2621148154389e6c7e1dca54c426df88fd09eab9b33763584a4eee837995d29f7dc1550acc4643c05f03a28b5a25e7019d7a4ceb70c238ae33bad

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
      Filesize

      1.1MB

      MD5

      39ed86952a1e7926924a18802c0b75e4

      SHA1

      e7ad2a51e62fe68b1a82b17bcde347ab38c09ca3

      SHA256

      b84ceb86e9a8eba4d168f2cc6c9010c93779641e595f900aafe8cfef6165c126

      SHA512

      fe7b93af9bb2621148154389e6c7e1dca54c426df88fd09eab9b33763584a4eee837995d29f7dc1550acc4643c05f03a28b5a25e7019d7a4ceb70c238ae33bad

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe.config
      Filesize

      438B

      MD5

      909df77c711b4133a8f8560483ec2bb3

      SHA1

      8df8505ec0a0dd670b4044c641e772f6ded485a1

      SHA256

      c49ed8da5765f33cc854cf13ee0c33ed65d4eba6843c24d05e321e3b40f4a68c

      SHA512

      0547bae72cd75ad753ddd95c12b7a42b8b3285a3384925cf738c4cc6835c6dd21d16a6206662c4a723fcf348da7e62db3585564782c7daad49b765b43accb28d

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Krnl\krnl.7z
      Filesize

      71.1MB

      MD5

      cb244bb2cbed782853d39042fd705b4b

      SHA1

      f9a69f8f2b87134579ca8c50b91a67bd596553fe

      SHA256

      d45f3cc6274717014136b6515c250a966f86cd3ecd3dc2c66b3c4c234831e015

      SHA512

      3d189aba28e8dd59e1e293ad8e962f38518ca11b8aa88b364e06f5ebcbc2626e9963594aa76a59971efbb5a34f6a99e23a1f090def1661abae95ebdd758bf73d

      Download Submit

    • \Users\Admin\AppData\Roaming\Krnl\Data\7z.NET.dll
      Filesize

      15KB

      MD5

      982475050787051658abd42e890a2469

      SHA1

      d955e35355e33a9837d00e78c824f6e5792b47f3

      SHA256

      4e193ccda4ef7ec7fc1bc12d7abba225a9af5b4612aa0b67a02324b9da8b268c

      SHA512

      c97b40c82499759e8a11b581004252be618f967153b5a9ce425f9a385746f3a1bdc467686023f36ed11212ea23e1c6b03b4df32cc5dd2a8c4b1d4ab23541c1f6

      Download Submit

    • \Users\Admin\AppData\Roaming\Krnl\Data\7z.NET.dll
      Filesize

      15KB

      MD5

      982475050787051658abd42e890a2469

      SHA1

      d955e35355e33a9837d00e78c824f6e5792b47f3

      SHA256

      4e193ccda4ef7ec7fc1bc12d7abba225a9af5b4612aa0b67a02324b9da8b268c

      SHA512

      c97b40c82499759e8a11b581004252be618f967153b5a9ce425f9a385746f3a1bdc467686023f36ed11212ea23e1c6b03b4df32cc5dd2a8c4b1d4ab23541c1f6

      Download Submit

    • memory/368-147-0x00000000096C0000-0x00000000096CA000-memory.dmp

      Filesize

      40KB

      Download

    • memory/368-139-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/368-126-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/368-125-0x0000000009540000-0x0000000009578000-memory.dmp

      Filesize

      224KB

      Download

    • memory/368-124-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/368-181-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/368-121-0x0000000000CC0000-0x0000000000E9A000-memory.dmp

      Filesize

      1.9MB

      Download

    • memory/368-123-0x00000000085E0000-0x00000000085E8000-memory.dmp

      Filesize

      32KB

      Download

    • memory/368-273-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/368-122-0x00000000031C0000-0x00000000031D0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2772-922-0x00000224A01D0000-0x00000224A02D0000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/2772-856-0x00000224A4370000-0x00000224A4372000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2772-724-0x000002249F3F0000-0x000002249F3F2000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2772-902-0x000002249FC00000-0x000002249FD00000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/2772-852-0x00000224A4360000-0x00000224A4362000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2932-574-0x000001DD64B60000-0x000001DD64B62000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2932-573-0x000001DD64B30000-0x000001DD64B32000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2932-571-0x000001DD601E0000-0x000001DD601E2000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2932-569-0x000001DD60190000-0x000001DD60191000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2932-550-0x000001DD60800000-0x000001DD60810000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2932-966-0x000001DD66790000-0x000001DD66791000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3044-629-0x000001D20A1B0000-0x000001D20A1B2000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-745-0x000001D220810000-0x000001D220812000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-639-0x000001D20A1E0000-0x000001D20A1E2000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-732-0x000001D220350000-0x000001D220352000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-823-0x000001D221110000-0x000001D221210000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/3044-815-0x000001D21C000000-0x000001D21C100000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/3044-807-0x000001D21DAD0000-0x000001D21DBD0000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/3044-963-0x000001D220680000-0x000001D2206A0000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3044-755-0x000001D220830000-0x000001D220832000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-759-0x000001D220840000-0x000001D220842000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-741-0x000001D2206F0000-0x000001D2206F2000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-765-0x000001D220850000-0x000001D220852000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-773-0x000001D220870000-0x000001D220872000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3044-643-0x000001D20A3A0000-0x000001D20A3A2000-memory.dmp

      Filesize

      8KB

      Download