Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1800s
  • max time network
    1798s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2023, 16:15

General

  • Target

    Device/HarddiskVolume3/Users/jlleclair/Downloads/Setup.exe

  • Size

    107KB

  • MD5

    4a60fcd5e830a9df28c41f7c922a0b98

  • SHA1

    b6dbd6d45425acdcfdeea9be491732e0fd06ee00

  • SHA256

    a09e7b42dc212c4b22900edeaa3b9bfdc27f197b59bcc7821f0821ee16141063

  • SHA512

    f3752b7c66366d676faaaf580ac10f278d16ea7f6cb380671ab4fad529ccf7933ea9deadb061369cf26080a95f5b1cfc3482abf491100eb881d3c01435b705d9

  • SSDEEP

    1536:P/T2X/jN2vxZz0DTHUpou4J7CkbuxE+1zyYCDtpXOr9m5+HMVKNL8WijBSeiQH:PbG7N2kDTHUpouOedPzy5n+7byjBBrH

Malware Config

Signatures

  • Downloads MZ/PE file
  • Adds Run key to start application 2 TTPs 4 IoCs
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 2 IoCs
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 53 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 2 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 54 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 24 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\jlleclair\Downloads\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\jlleclair\Downloads\Setup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2940
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pcapp.store/installing.php?guid=D07DEA32-FEF2-4FCD-9F26-7FB5E257E15FX&winver=19041&version=fa.2000m&nocache=20230628161739.96
      2⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2176
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xf8,0x108,0x7ffcba0846f8,0x7ffcba084708,0x7ffcba084718
        3⤵
          PID:4432
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
          3⤵
            PID:3800
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 /prefetch:3
            3⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:652
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
            3⤵
              PID:4720
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
              3⤵
                PID:1484
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
                3⤵
                  PID:4156
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5204 /prefetch:8
                  3⤵
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  PID:3084
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3376 /prefetch:8
                  3⤵
                    PID:2900
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
                    3⤵
                      PID:4280
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
                      3⤵
                        PID:5028
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3740 /prefetch:8
                        3⤵
                          PID:4464
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
                          3⤵
                          • Drops file in Program Files directory
                          PID:2624
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff6e2d65460,0x7ff6e2d65470,0x7ff6e2d65480
                            4⤵
                              PID:4080
                          • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3740 /prefetch:8
                            3⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:3912
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
                            3⤵
                              PID:4044
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
                              3⤵
                                PID:3688
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2864 /prefetch:8
                                3⤵
                                  PID:1088
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,9047937237812056952,532875401659295384,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5792 /prefetch:2
                                  3⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2684
                              • C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp
                                "C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp" /verify
                                2⤵
                                • Executes dropped EXE
                                PID:2860
                              • C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp
                                "C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp" /internal /force
                                2⤵
                                • Adds Run key to start application
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Suspicious behavior: EnumeratesProcesses
                                PID:1908
                                • C:\Users\Admin\PCAppStore\PcAppStore.exe
                                  "C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default
                                  3⤵
                                  • Adds Run key to start application
                                  • Checks computer location settings
                                  • Executes dropped EXE
                                  • Suspicious behavior: EnumeratesProcesses
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SendNotifyMessage
                                  PID:2548
                                  • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                    "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" .\ui\.
                                    4⤵
                                    • Checks computer location settings
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    • Modifies data under HKEY_USERS
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of AdjustPrivilegeToken
                                    • Suspicious use of FindShellTrayWindow
                                    PID:4648
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ffcb9c19b48,0x7ffcb9c19b58,0x7ffcb9c19b68
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      PID:3860
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --start-stack-profiler --mojo-platform-channel-handle=1948 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Modifies system certificate store
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2904
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --mojo-platform-channel-handle=2004 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:3812
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:2
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:4444
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --first-renderer-process --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2900 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:1184
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --mojo-platform-channel-handle=3784 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:4228
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --mojo-platform-channel-handle=3872 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:628
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --mojo-platform-channel-handle=3860 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2472
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --mojo-platform-channel-handle=3580 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:8
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:3896
                                    • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe
                                      "C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --start-stack-profiler --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3660 --field-trial-handle=2228,i,15550777592143931573,4321927558169229982,131072 /prefetch:2
                                      5⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:5204
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:4632
                              • C:\Windows\system32\msiexec.exe
                                C:\Windows\system32\msiexec.exe /V
                                1⤵
                                • Suspicious use of AdjustPrivilegeToken
                                PID:944

                              Network

                              MITRE ATT&CK Enterprise v6

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\14561BF7422BB6F70A9CB14F5AA8A7DA_D6E78B0AEA84104DBBC037A2B5332C92

                                Filesize

                                727B

                                MD5

                                b858369cc4a90702aa5294f952a6e883

                                SHA1

                                b13f951d1da30bf3c5ed83e675364de294750c79

                                SHA256

                                5b5960dd4eb46ac26b3204d0637d96a817d6828ae9e00acd4d3d5be4ead86981

                                SHA512

                                5c4a73650ada68eebb4584dee2e3913af9c2fd5cf9dd4aa2086ec77690d1f8994147313673ee059a782c1998cb0015712502b22714a70d98e94504f712113ca8

                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_23FFFDCAABB8E63694AD1202ED02BF57

                                Filesize

                                471B

                                MD5

                                1bf93ca06b252807617a1e44472a226f

                                SHA1

                                82fe7c32f092488283c14600fd3aa17d2fc743e3

                                SHA256

                                5a6886407f622a44aa66e21b2374688c5a8512ec46289a76aab6668cde97f063

                                SHA512

                                abf34a7e24a6f07b8e15cba87b52d3f8ca4df88558d1efe0ed7fc7d05e6fea972b76a336563a52c80faa8ab8ae09b10d897e59a24ec46fc49e6108a145d92504

                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\14561BF7422BB6F70A9CB14F5AA8A7DA_D6E78B0AEA84104DBBC037A2B5332C92

                                Filesize

                                408B

                                MD5

                                f1337344f36253c942af0fbcc14e6fef

                                SHA1

                                72317f02047cf2b514259abd5c2d84b66758a6bf

                                SHA256

                                fe88a4fc310cdd32f08868502799a00b4445b7c530578d99e9ec0da1be93eb26

                                SHA512

                                20aae939e8cf60fe417c8ef033f3cfc7d53d46cf1b5558dadbccf29bee15ed1e39ce552ced513aa7e66086d931ddf59b30db7e503a14beff0dae69895fe01464

                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_23FFFDCAABB8E63694AD1202ED02BF57

                                Filesize

                                400B

                                MD5

                                d15a81fd22ca1bd5615000ed469d020b

                                SHA1

                                ca51983c1e6cb39e7f3180813f78c21e74c80718

                                SHA256

                                8ad323821912f66ce8b79888fceb0e4fa6beb84d2a5da63afe0e193c30c28239

                                SHA512

                                a3f49d8eab72381164af429a0396eaa4ccd073b89076de9d457602bae9d859694f716abd2e20fd4f7139fa7d7cd68daccd556bfacc507a7dbbf4ef97971f96e6

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                cb62f344ad026c624f757eeb452e2ee2

                                SHA1

                                69d135731ecd414f7f7b1ed5a6d4a6e4414dce92

                                SHA256

                                61cf4c2a79753705e6ecd28867b548115e83cbdb76a5a124849cd094635d2d6a

                                SHA512

                                50318f97a2fae97f9483d1eb87b4cb8ec3f22f22f21749f375ee3210ad8ad1c3929f8afc60fcaf19d5fc2c4a8420fb0da5787744c589b25f70ff763c6abfcb6d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                ab6c60116611221845298123c757197c

                                SHA1

                                f90ee239579b1c40697c32ea688390ff9d777362

                                SHA256

                                6f72e30896b7ac428f722bf30ef27bf005dff5c9df0a210c05d3077a86a67b2f

                                SHA512

                                481b8743f7835acdc7463638b584be281e4f99d6b457a50d4276b19ccf151373a7fd2287c51efea2c1335a4263694aed330b5c41313f76a9b149171364e28a3f

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                144B

                                MD5

                                8ee6397a3a156d8ed0b2963d3f5d7bb4

                                SHA1

                                b58670355b85c95ec462d228a3abe29ff2d22b7e

                                SHA256

                                527b7977e2ad8be6a895220510bc896a5dc2c2d13dc7970a0e8b9ad80ecc6244

                                SHA512

                                2e8be9a0b21fd9983a1e7530b772f6a203e214089e22d2002e3fdd0a9544708765165da88f10c544f35e9b241b3e543226eb64f22dca9098563ace9112be63e1

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                48B

                                MD5

                                46280313dc33df127b7092db0726492a

                                SHA1

                                a4cfe6e6c6412b1ea8d23ce696a8e0d7cf4de36f

                                SHA256

                                5c1b472f117c3be67be16bf0d81480c2842777d090006fa3d3c4ebfe4349839b

                                SHA512

                                347f52726620012e80319776873bd1bf1e9afcde4a3f350f7c6195f80048faff4893a47e46b7cbe348d65ca5313242d705e00fa49d80aa5e58e97708d87e2451

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

                                Filesize

                                70KB

                                MD5

                                e5e3377341056643b0494b6842c0b544

                                SHA1

                                d53fd8e256ec9d5cef8ef5387872e544a2df9108

                                SHA256

                                e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

                                SHA512

                                83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

                                Filesize

                                2KB

                                MD5

                                3f06694e8a759794ba6d22ad52de82fd

                                SHA1

                                290e1e9660887f9db95e1aac75b24b84104a8243

                                SHA256

                                74f5bae7e18f867b3a11d0375e008d1dcf3ed096aa209f6d9141cca1a5aeaa5c

                                SHA512

                                f5444fca0662108c52f9584425a5fbe3856872e5a3e76d012cc6f0b5dd2ebecae4d99018c8e5aa1bf106eafb2e8e3aa01a4a06d285ad3ac5c6ce9ca69096d95b

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                111B

                                MD5

                                285252a2f6327d41eab203dc2f402c67

                                SHA1

                                acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                SHA256

                                5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                SHA512

                                11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                Filesize

                                1KB

                                MD5

                                eb861209dcdacd2111001ca83b5b2320

                                SHA1

                                e46510d4ea5143d864ae9ae64eb11d353073c5e2

                                SHA256

                                1e54bc4a737bee05062b9ca715c2c74d05b9d4566aba3c7990c9097bff909048

                                SHA512

                                d32bdcf900dd85f0b6623e3dd554d4bbdaa4b1f5b1e26ef69a7ae00c16f26ef75132b5f895be5e61abf08f122d4c7f128dd11990ff8c36bc97783e3f8c9be6ee

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                5KB

                                MD5

                                2fe3a4d0ca13ceead3a263f3794967f7

                                SHA1

                                36a004951476ea483410f8d58317cdcd56688aaf

                                SHA256

                                f056dee752b8b4ecad76eeff18e1ae04aa64a257bc6a6a9e5f82fe1c16b077cc

                                SHA512

                                161ea0144f2a1f3043b1ede2e88ae4b30cac1aed55b766c8daf65096158139aed83063f494819997ec0ad865ec14379829aab97308815ac7380d83bb82664859

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                a6d0dfdcc5bdc41ec27e1075af0d20d3

                                SHA1

                                fd50d6589c3721e3d29dab7d3858645facc07f14

                                SHA256

                                6bee4c928bb086d6946f2b8bf10360790c46adee5d1ec5d370d1ca2ae4263532

                                SHA512

                                99ba25c45f14e3402f5bdd85a95f6fc65b4df2b9cbcd3448ed3d4bac762705af711985a3389502569276c61ee69a106b3638c0383235af1d9507e0a75da2726f

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                8cff87d19a17e0f45def4b93b3cdf8cc

                                SHA1

                                c0f67fbdc47f136e131284442c270911c39d30cb

                                SHA256

                                37e2f58b8f5bfddc8e5cbe9234f25d784745f2f954d779d1028e45343daf3929

                                SHA512

                                ac589cdbeeabf42cf1c6a9674da65893596aeff20b67931087ab6983feda8aa49806e2bb89fc10e6544a2ecd4c32d6cb7ccbce36fb83aa437c50985886af73e6

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                6KB

                                MD5

                                f53c1b4b4b61ebfe1243a47f3014318d

                                SHA1

                                4e4a8da7b35b91b2977478c6116e4a6ee692152b

                                SHA256

                                f75cc7e3b82c351c2ed6adbf4ad0d5d012ade6d2e7d0e6ed13cda1c9ce711bc8

                                SHA512

                                a5dd3e13fb7195bba6ece02dc82be2352c884ecbd8b4c2234fc39b9d083340dcf3511665a57539fd8d25799e3269ecb4831a7afeda4bce48c61b013637cdaff0

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                Filesize

                                24KB

                                MD5

                                2babd6c48369403ceb0e62762ef724be

                                SHA1

                                2e656183c7dee0ae8ae9b5eb361cd5884f694829

                                SHA256

                                6e45b5ab488834284f859c30331156076d2429fbbb1c7c6bb8a8f47cec0fd372

                                SHA512

                                f4bd88b94e4dc547811448df8edbd2851026b33916fc80c8b1558511aa381fe5663c371c8c41e03e2b3171cd5c96c3fa0324f8cf732dcb352cd697cc22864b87

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                Filesize

                                24KB

                                MD5

                                4350790c5ce221003810409ebaf1ab5e

                                SHA1

                                5b6be3ea1e79b347d2d307ef6e74369cd224fcf2

                                SHA256

                                718d087bd1fdd3695ecbf02fbf119cd2f281a0e7ab03706b3fc5961d5250779b

                                SHA512

                                aa8011ac7260c485b7d170d5ee48251eb82e592fdeeff9fef4c90643a48c15a6a8caf7f2dd9c5b39e91bc730e1ab206538a94ec06a06dd87de6b96b6ce0a1ce7

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                13754abf80f14b9593500b370c36ab98

                                SHA1

                                6b65e75d2a6c2551e98707b2de432d4d09fe300c

                                SHA256

                                6eb84a68f1fcc0f0f7bee58c49099ef8cfd3822b7587a0afd6b7410f41bc68b1

                                SHA512

                                4c4962a4b5ad7ba72c08ce2cb1e479f296277a9121a1cabc101370fd00ca06462ccf8833b0082819cf9f5d646aa2d964460f866e1cdfe8a6a7ebec91acce7e34

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                6e6326621f46e95d8ca31d25d45d5dda

                                SHA1

                                e4629d0110b3199d12dd77143beaeceff35c39b4

                                SHA256

                                7fe425321a01fbb119fad49608c9c3f91d742ba764d69eaadeabf927ceed59e5

                                SHA512

                                8c6368840425e1d37a996660e19fa85b62527652c352a9b1ad43651ed9bafc85933e50d51e0e04eeb0bee8d2873038669fcc0901f550ed4e36ee3759fc8b79a6

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                aa08f5268d567697287c99c254c2c7ca

                                SHA1

                                8d2baeb0951ea46942c96240b91eea636b578b31

                                SHA256

                                3f1c93217737b0783a456fd1efa0c2ff4dd2c7e2f5db70e64f0d4f5103da8c22

                                SHA512

                                bdd97d00d6fbed8f7257a18e07f92ab0f6b5adb631e43a7207e8a8c5f30aa9c3bbc508e9781bb94a552ceb8e83fa5dac7135237224d1afa16755b2977533456b

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                e9d1600c2b10b4a55969f55ce49c8ac0

                                SHA1

                                58bded0762be6a879632789815778c31c83f5127

                                SHA256

                                7b5022ae7fef5ce62a4699634cc4e325a6ec6d23bdb6a7f109d5f4ab7aa4da69

                                SHA512

                                bd5af050beea0bf5b2d1dfaa5cda3212068bd0c54399b81866de8a313ead24440e628658b316f26115385467b515b0a25eef600f38aba5639fe7347383b3ff8c

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                485bc026afb87140ae5a7f624753df00

                                SHA1

                                194346c85fbd133921d989caf8e1f3bd9721ae2a

                                SHA256

                                5946998e93a3b9920301e84464962e5230d2c7e1ace7b1c30c1c6b460fa01559

                                SHA512

                                0d44e749c61175879f6dd4cfd63039a2f0ac8e8a75e7772c1d6d53814677ab028071d0d707c5f593592869bfa09a77b18a107e255d7db9982d1620f4b3038219

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                1083fa0e210fec64801ccec85b1f7ead

                                SHA1

                                7156d086be1863398dfe852f44f09921bc16e54b

                                SHA256

                                e01200f91e1af90a14a1d1b858893d72a177acd50b202064033a052ca3f6c350

                                SHA512

                                5ce38fc1436e1d2820477d5223705ff2eb08d54f00968ef6fc3ffc58767ebabda1ef7d4440d417cc603e60ab329c325640408c1f182631ded7debed2932a7116

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                4d6a488be7b41c7469512f1f5fd28170

                                SHA1

                                67b17138de874d7a027b8ed824ea4a8f6fba5321

                                SHA256

                                77c630ca0be5b2c733e9d42949733cf02b9dfa90f235269bfd8c960cf88d8fc2

                                SHA512

                                b9e0c8baa6dd75b0794677da9b49e8edc7406eb9558c438de7e212713c8f068be299b2c96da076035003f99e03d87c186b9e6bfc0698892ac7717fa5fe342368

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                e37740cb0500ae695fe9c9a8ffe98b47

                                SHA1

                                cd1a216c679a47650439fb041259061efd4bc84f

                                SHA256

                                592b9fa89fb34b88aae68c58768526d0cb274893ddc3dc4f3540707067f5580d

                                SHA512

                                100323207e3958af21dbb2598b205ae13281e0f97531a71cebaf92de0af6e82f69db9b977ce20169607efa88bc34323a94435eb7cce58bba83b21daf3290978d

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                Filesize

                                538B

                                MD5

                                89969f6461ca3048340515b33fc0da48

                                SHA1

                                39e77afddac075bd8d316f6b7cf474faf1e5f098

                                SHA256

                                0c19d452f6da3dd5f0d4daba883b6b0018a20744ad899571914b90ca28afde43

                                SHA512

                                0040b549215845d0d9da5a6142f29d4899451164a77273f1cc1e7572c375dcf5852c05bf1bea1a715da7a58353974cd5685528fe153cf94a65d9a68d6b695838

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58cb2b.TMP

                                Filesize

                                538B

                                MD5

                                ef3913e1440a371998a8ed218bbeb517

                                SHA1

                                4524e496956902dd3254e49da7fd10617d2f89de

                                SHA256

                                9fac973d1c0eb535b380b746ad81a6bab47ccb82668917344707d6b6ad513edb

                                SHA512

                                874cae69cf18e827b2ba2060e596131db334b3e03bd985d915157442c8d409cea3488e1f925b7eaf95255eb1219015a73804238ea57230afd0db827f41dd8f02

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                Filesize

                                16B

                                MD5

                                206702161f94c5cd39fadd03f4014d98

                                SHA1

                                bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                SHA256

                                1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                SHA512

                                0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT

                                Filesize

                                16B

                                MD5

                                46295cac801e5d4857d09837238a6394

                                SHA1

                                44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                SHA256

                                0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                SHA512

                                8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

                                Filesize

                                41B

                                MD5

                                5af87dfd673ba2115e2fcf5cfdb727ab

                                SHA1

                                d5b5bbf396dc291274584ef71f444f420b6056f1

                                SHA256

                                f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                SHA512

                                de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                9KB

                                MD5

                                bdf64403e5a3e85fa4c28606a49617d5

                                SHA1

                                634f108b0140695d0f88131b3265e527cdc5aef4

                                SHA256

                                c95c4186f7f53359d526ae35e5b1596cdc39216b011cdb4422b9c100691d4512

                                SHA512

                                0236b8e89e537db0ce4b5c6e232a7bc61e2dfb84d769298beda87b295d3b1be92900a2d5af4269d4ec9582a16885bf5d2c7e4bfc7b6e4855a68ea8ff871b1578

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                12KB

                                MD5

                                52fb66a1d8929e3f3cfccd73bae7e522

                                SHA1

                                afc1eecb24b5f7388067732df8bab9bbfc92a7c7

                                SHA256

                                120c44088ef4fdf1ec38ad1e7d153c60ad11ef30be9252cfa27e1964b6c6d964

                                SHA512

                                d3e9c8fd9531d1db06d3f0e4adccc80476b55abb974359c46e8b07363c583c6abed5a65fa912504b09a984f40118d8ad3ebf3cae97b955b12d862553bc9d66b1

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                13KB

                                MD5

                                d3618eb2d3ac6c9a8c4deb4024f2df95

                                SHA1

                                3d4ca715533f4fd9f2bf44079a88bff718d1d242

                                SHA256

                                503dba173187894ccdaa02c531262cfae4854da536e1d2709af8fa172161dbd2

                                SHA512

                                e49c431dc6ed6a3607a51c197af49e1d0ce1941e5bfc14778ee04b1cf317799eb5d5860a853fe67b31506aaecd1451768595bc91f45c33ff245144961ea099e3

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\System.dll

                                Filesize

                                12KB

                                MD5

                                cff85c549d536f651d4fb8387f1976f2

                                SHA1

                                d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

                                SHA256

                                8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

                                SHA512

                                531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nse8CF6.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\System.dll

                                Filesize

                                12KB

                                MD5

                                cff85c549d536f651d4fb8387f1976f2

                                SHA1

                                d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

                                SHA256

                                8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

                                SHA512

                                531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\System.dll

                                Filesize

                                12KB

                                MD5

                                cff85c549d536f651d4fb8387f1976f2

                                SHA1

                                d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

                                SHA256

                                8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

                                SHA512

                                531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\image.gif

                                Filesize

                                997B

                                MD5

                                1636218c14c357455b5c872982e2a047

                                SHA1

                                21fbd1308af7ad25352667583a8dc340b0847dbc

                                SHA256

                                9b8b6285bf65f086e08701eee04e57f2586e973a49c5a38660c9c6502a807045

                                SHA512

                                837fa6bcbe69a3728f5cb4c25c35c1d13e84b11232fc5279a91f21341892ad0e36003d86962c8ab1a056d3beeb2652c754d51d6ec7eee0e0ebfe19cd93fb5cb0

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\inetc.dll

                                Filesize

                                38KB

                                MD5

                                a35cdc9cf1d17216c0ab8c5282488ead

                                SHA1

                                ed8e8091a924343ad8791d85e2733c14839f0d36

                                SHA256

                                a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df

                                SHA512

                                0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                6c3f8c94d0727894d706940a8a980543

                                SHA1

                                0d1bcad901be377f38d579aafc0c41c0ef8dcefd

                                SHA256

                                56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

                                SHA512

                                2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

                              • C:\Users\Admin\AppData\Local\Temp\nsf7082.tmp\nsDialogs.dll

                                Filesize

                                9KB

                                MD5

                                6c3f8c94d0727894d706940a8a980543

                                SHA1

                                0d1bcad901be377f38d579aafc0c41c0ef8dcefd

                                SHA256

                                56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

                                SHA512

                                2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

                              • C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp

                                Filesize

                                84.5MB

                                MD5

                                15bf00a71bae681c81bc1b378bd294b3

                                SHA1

                                20cf053881fe350e2cc2cb384d48fb1db788637a

                                SHA256

                                fdd6e6691030496565f77d328d4538d67d37e1b43504a83c4786adae472e09b4

                                SHA512

                                a3a3109d3cf927e0b565def52b72ec02e6f420c1f508e4dac43e2d34effe94eac669d0bfa7e44501b7698d1b61b5061e940b50b4e5b3a460bee74088e3272f07

                              • C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp

                                Filesize

                                84.5MB

                                MD5

                                15bf00a71bae681c81bc1b378bd294b3

                                SHA1

                                20cf053881fe350e2cc2cb384d48fb1db788637a

                                SHA256

                                fdd6e6691030496565f77d328d4538d67d37e1b43504a83c4786adae472e09b4

                                SHA512

                                a3a3109d3cf927e0b565def52b72ec02e6f420c1f508e4dac43e2d34effe94eac669d0bfa7e44501b7698d1b61b5061e940b50b4e5b3a460bee74088e3272f07

                              • C:\Users\Admin\AppData\Local\Temp\nsl6CC1.tmp

                                Filesize

                                84.5MB

                                MD5

                                15bf00a71bae681c81bc1b378bd294b3

                                SHA1

                                20cf053881fe350e2cc2cb384d48fb1db788637a

                                SHA256

                                fdd6e6691030496565f77d328d4538d67d37e1b43504a83c4786adae472e09b4

                                SHA512

                                a3a3109d3cf927e0b565def52b72ec02e6f420c1f508e4dac43e2d34effe94eac669d0bfa7e44501b7698d1b61b5061e940b50b4e5b3a460bee74088e3272f07

                              • C:\Users\Admin\AppData\Local\Temp\temp

                                Filesize

                                42B

                                MD5

                                d89746888da2d9510b64a9f031eaecd5

                                SHA1

                                d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                SHA256

                                ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                SHA512

                                d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                168B

                                MD5

                                eedf22933cc0740af2f179f3b46248e0

                                SHA1

                                78b41e13063ea3bb81bee0b2c30cd77973308d4a

                                SHA256

                                3bfba3f8cf7df6a5155042704b4e14678ae06ea15394f804b1aef855bae1ddb6

                                SHA512

                                c0c686b310fa48e1dcdb3bf63a0f6f49c3ed50d64d3e868837e68215ac5c9f9752a2420857613bc326c0b5c7419cd2967928eb4e24a1606339847899d3927aa1

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b6260.TMP

                                Filesize

                                48B

                                MD5

                                0b55bff0ef2ceccb9181d02ffb0720c0

                                SHA1

                                70bbe5f901363964316335ed6fd3f77aaa93238e

                                SHA256

                                faa7c4806459076a41f9b3140476786d302d8d239479a041d8c399c49b298429

                                SHA512

                                529305eca3a7a87f7fb7e79cde1dba2481b69ac35818a69edce61984bae5ff965bf1216c53b453f1999146766c20f969e15c5e928ec371dbac97ffc011a1e88a

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\DawnCache\data_0

                                Filesize

                                8KB

                                MD5

                                cf89d16bb9107c631daabf0c0ee58efb

                                SHA1

                                3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                SHA256

                                d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                SHA512

                                8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\DawnCache\data_1

                                Filesize

                                264KB

                                MD5

                                d0d388f3865d0523e451d6ba0be34cc4

                                SHA1

                                8571c6a52aacc2747c048e3419e5657b74612995

                                SHA256

                                902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

                                SHA512

                                376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\DawnCache\data_2

                                Filesize

                                8KB

                                MD5

                                0962291d6d367570bee5454721c17e11

                                SHA1

                                59d10a893ef321a706a9255176761366115bedcb

                                SHA256

                                ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                SHA512

                                f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\DawnCache\data_3

                                Filesize

                                8KB

                                MD5

                                41876349cb12d6db992f1309f22df3f0

                                SHA1

                                5cf26b3420fc0302cd0a71e8d029739b8765be27

                                SHA256

                                e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                SHA512

                                e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\0b99ce2a-5ce4-4514-b25b-6859851c9f81.tmp

                                Filesize

                                59B

                                MD5

                                2800881c775077e1c4b6e06bf4676de4

                                SHA1

                                2873631068c8b3b9495638c865915be822442c8b

                                SHA256

                                226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                SHA512

                                e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                2KB

                                MD5

                                8caa6f2569434b7c5eb75a4bc3ecac99

                                SHA1

                                647003c3cec5ea2d3b9fed6ccaaf844e9976b3a7

                                SHA256

                                f20c2f41c86089592690b9c5611ff39b21ae189511e6086bf38e8c14da275220

                                SHA512

                                ba5fb595badb13463cfd02d1d6a36870021a24c64f4bb93658d3badd9bb48f39f76ebe418e860ae662406fa25aad38f823841a228dc2a18cb703711dcbe59014

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                2KB

                                MD5

                                4cc8140dd86358b26eb36f3100884f71

                                SHA1

                                008c7ba60e89545ae65d27850be966ec09d4a6d8

                                SHA256

                                8abe853ea10b903ccfc04813530bc60d87d541e41a00f80537c9471cef764830

                                SHA512

                                6488f1ef176ff06eb05852294f2e162ed51cdb839dfb48011c0c887b377b3c89cd63da991d66ae633911a2aa08a00d2ec9e9a17c1bd2b1dbda4f66fc745e1e41

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                3KB

                                MD5

                                84e8c80688bd681508c6e76c109d511e

                                SHA1

                                80816fad18627bc2e9bc63d2ab3e4539b5983eea

                                SHA256

                                657e9203a5878836f1a3fe9a65f778ee9579ba52373fa9e6978d9d455ff1a1a7

                                SHA512

                                09fd20306ec826fd2ce8ad4e8b19b8679c391e26349d20b228943dff733fef3275936884f22d11362e3e9723f65d0ea227c0a25c813eae4ad6a4ac005584919e

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                59B

                                MD5

                                78bfcecb05ed1904edce3b60cb5c7e62

                                SHA1

                                bf77a7461de9d41d12aa88fba056ba758793d9ce

                                SHA256

                                c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572

                                SHA512

                                2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                3KB

                                MD5

                                d248380d22131e5953aeefe846eb8d40

                                SHA1

                                02e51db233b3efa82a6cfe1cb873d5ecb0f658f8

                                SHA256

                                a976d892ff124afee9ca0d97976f49c915d4cd895bd341739d8eef5730767e0f

                                SHA512

                                3198f664d29311449b55a7ace5b74586e871226592aecc234e291a2448ab198d76ab9133b4f3ef3ec13eec5b6d92c3e6b6b14109ef142fd8dd2cb3a072954c80

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

                                Filesize

                                2KB

                                MD5

                                0f5740810314b9b98a642ba71ef203a3

                                SHA1

                                1041c62dd544d57ac43ad208b749848122b2b3a9

                                SHA256

                                87de15883b8ac43eceea4543310c30c92fdf347be7f55c30745cfd24d8cb3a1e

                                SHA512

                                177c4f6afbf223622c4574e9293e87c944c0f0168dd1a40f8fe32709e85248f74b211f0acaf62f2e4d68a251a4c3b5c8aaa2c802a0fc41dd7d522b9604796dd5

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                849B

                                MD5

                                56a5119f2363966caf912a0f1282b86e

                                SHA1

                                4c5fed5ef3a014736e2b3a9dd8406f07f7e365b4

                                SHA256

                                e51cd5ac9ea9dfa00442273d96b8a9ed100dd7ab6d4fba94ee35c1ab3915740c

                                SHA512

                                664897a9f74ee18a023fca5f32a8a31cd36c12fb2e178b980e04597c4e9eb2e9bc2f22e55ee0abd7f76d72aecac2694989ca0f55a5934be4a7fbc5e9f212c263

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                849B

                                MD5

                                e8b5849525c9c33257c6f214f7a79f51

                                SHA1

                                8a32351f6a0655bed63f8828001e52123fef61b6

                                SHA256

                                b13b28b4ee94a1370863cc43d0c5138fd330484b092c9ebe99e5d4c46a2bf8f6

                                SHA512

                                fb0cee401be08d7e68de582b5f9959e668005852f94a7ef18dc7ac02a2f55ed931cfbe0b09f7b353ce8893e2838ad2dcecfef04fc6048bc0e61240276e1cd54b

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                845B

                                MD5

                                763dfe8e0e547de1f70052bf8b4e6df3

                                SHA1

                                8815ac08ef4dc7e3b019d494efd906531b3db045

                                SHA256

                                b8a934bc70dbb984fddf9764bf331653ccedf44554b94708f6c886a71cdc6a90

                                SHA512

                                c6e46339387a9c6b22eb290658a3ecd4220af6dccf86171e46f1d370a412e377a39d13b992a0aefa87a56a2efbce0a3e55ea35b7f809bb81bd19b732bc470f12

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                847B

                                MD5

                                507258c634a2eb2acab98bf108a3501c

                                SHA1

                                2e21d0cf60c52b2c8381dad574ebe82f7d70910f

                                SHA256

                                eda1ad30dac9e10c4ca5982a6ea018f12185aa83a4d3f56ddfb17b61094567ca

                                SHA512

                                625012b61c7a5581619443d808f5cab7863d144ea9d4cfe83434531d96c8d152c39a8dbd5bc9c87d924b156c5116262615e3acfca75ebebca7758673a221a809

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                849B

                                MD5

                                8d6cc7a83d5733d393021f0b539f5464

                                SHA1

                                4e75eceddb10374d521788d05af64b47e1354176

                                SHA256

                                719d131ae50ccd30277cd86f8557ae7fe5a55eaafb52f82d02f088c6f6c4797d

                                SHA512

                                8849ef69457be1de4104591942462bffdd2fcb752fd8f6662f9adc2bd820be1e393b8a40faf395ed23e6748c6742e3454c8b999d6758f8e53347891995968412

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                517B

                                MD5

                                0c07a65c3be87f331e8ee65d54a58df4

                                SHA1

                                20d6c4fee26969599b36a21011cb99e70ebac124

                                SHA256

                                60c9a187607b64113bcea0822713f8f8779f8f3ded42a25894a33eafb1555a6b

                                SHA512

                                93b71eb4343f3d42485b7ef625e547a7cc6cd9aeadcf4eafc58d3d80361f35263466b44e44495d3ba9b523d52c9b999c29ec1a0e417822a16901738c1f4ad9e4

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

                                Filesize

                                847B

                                MD5

                                d76e4a6e6b6537687a6037ec53dbb8a7

                                SHA1

                                50c143d893cca056ed347d99cd7effa4ef18b5f5

                                SHA256

                                626a55967ae142167d6dcf73e809222a03f8593d9e8ed7e577ec93a0830ac0a7

                                SHA512

                                583b445a7ba7a1e1723aa3dac95cb4c550cd9d0bfa978ff6f956ac538abd72e6c70fa721d4c6d5f25b52af81debd725c13c28d14ca7cdbcc31fba83e0539a35b

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity~RFe5afc14.TMP

                                Filesize

                                517B

                                MD5

                                100ba49d8290e2106d7882d1aab9c1f2

                                SHA1

                                b1963b87df5742cebcb12bf785370a712271cce6

                                SHA256

                                a0e1f62ca8722b687328d5e21b005dd39a7f857a57ca903e3956d32943431928

                                SHA512

                                6c0a4a4b8b29ae7806ca8997f96d7cb430fd06f8b43d3d17b7255422f1f146782933074c132f98a1a5aeb0f764e9d1279077eb3ef0e87b40f6f6f6eefc87faec

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

                                Filesize

                                3KB

                                MD5

                                0c98c0cb3d53f15d7c59f440a3ec3d08

                                SHA1

                                daae6d27f1ceeb6571d090f31e297c6a9e3984af

                                SHA256

                                5a0b20640f5fe46245cc51f710216c9f3177097b4bb71cc44faff5c8e95b96a8

                                SHA512

                                79a4037cf03bee6e028c45a32c40b5d5a61bfc264eb894da5298d50b3188a34edb06a6ee3066a3b53eadf833432d532f77c965153a535007d29daaaaa929e082

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

                                Filesize

                                4KB

                                MD5

                                12265af8aa3c27e018c646758db55d9b

                                SHA1

                                e82ddde1b2aef541dc2c1837bcbdd1a0b10edbc9

                                SHA256

                                718bf3e764fc90651b71c13e0add0410c446dbdf94f209f2d2a6b9ca4f1f3a0b

                                SHA512

                                52433f1a2eaf20be733714ad9347101c0e567032dbe7bd914b59bb4cc29255a601d70d33954cfc155499e06ddc3ba8b9fe7a6b5a07c943cf87c4b34e9c11013d

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

                                Filesize

                                3KB

                                MD5

                                13cec018af0237816cef0507513c270f

                                SHA1

                                3772983dd972ca677bddcb41ebb2d77c5a67d0c4

                                SHA256

                                0e06ed0be3e19e61a8fc923c000bf6d25834fa479eca522023ffc9223c0605b9

                                SHA512

                                c5e31687712f823ce8b5859c53302a2183608c6c2bbdcd296736263f31c981cf0201bc9526363b8366d09822726623f36d4bfb2aeb592bff6a6d84ece59cfbc3

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

                                Filesize

                                4KB

                                MD5

                                0d09fccf02128c7b0bb0f401a6c00173

                                SHA1

                                8354ae713af89cc40711a1f6a98cef3038c00a68

                                SHA256

                                06c6d8d33b827650a0be1c2d1493a3188e54a1743d955a95d6bc8f36d59ea8e6

                                SHA512

                                799b742930f60efae4ea1b7a495980a16f43e74c2d1d00572d079d03c312f9942d7e1870dc5831605dbf57f0d1f7d67e9550b748ed9dfbbfe8ebf0a8974f7dd4

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences~RFe5acde0.TMP

                                Filesize

                                3KB

                                MD5

                                d65c1ddb02a8b42ef4e004786db11c4e

                                SHA1

                                beee2c05c07025588710dc93492ccf86362e946d

                                SHA256

                                f4d8c9cff28486f2c08c24f5517694aae3b3b4171f68c418d3430b6f50a6d14b

                                SHA512

                                c2e73160923b99e24d14c346723830a9927aaee739401677bf66b6209c78b59b538835e35dc6565e958d8ced77ee10b34535bf36ac3c81e2d1498b868b2a07c2

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Secure Preferences

                                Filesize

                                4KB

                                MD5

                                457ce5712708c78aacd7bb1d9d0fdbd0

                                SHA1

                                3dce545b4a8cf7b3f1bd5b08816aa6040e55b44d

                                SHA256

                                4cc10b6a9e985a5c5d731c948c2ab2a0c37f7ba304c1c7335ac176cadf43c126

                                SHA512

                                979e3a97f75baf8affa5a46741f1246abebbc8ac1623eebc4eacf135783ece3e5e2751d7a6fbea9dd9e16b193ea2ba5c1f08820ffd174284dc74b8d03eff4221

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Secure Preferences~RFe5ace5d.TMP

                                Filesize

                                4KB

                                MD5

                                f80f30f08bd408b7fb4a24c6050219a4

                                SHA1

                                225d13178e0b5a60f4db644be61e439d2a0121b6

                                SHA256

                                e2367eda40c638b4d612e1093735c1ca0c8edb4e0c8a6e7c88ba0220d9566e10

                                SHA512

                                b9d178da881b175c3e5af7a00806b5d37a1534510f5b94b1f0f0c87a0be9693d65b4f42f17e39b34fd92bf6d58db11c286240ff0637a10bffdf548fd49723805

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Web Applications\_nwjs_pcapp.store\pc_app_store.ico.md5

                                Filesize

                                16B

                                MD5

                                d5e6121f86812cc7ae58efc4f9ceacbb

                                SHA1

                                3dfb06418220ed62ab46b473bc4ab269ff4f7e33

                                SHA256

                                05f173bbb3d564e2da3d496c4298b69c3506771a30238eb5285f1cd9df00e3c0

                                SHA512

                                88c5c1b06ddcac46d53e1cad013fec4fb789f97589f294a076be3cc7ac1c10ed9ea0a1c3a11f9f9499efe01420917ca14348be74dc2cd1c8cdb4313783123740

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\f32edb50-fd5c-4f30-a2d5-dbc66425781e.tmp

                                Filesize

                                148KB

                                MD5

                                728fe78292f104659fea5fc90570cc75

                                SHA1

                                11b623f76f31ec773b79cdb74869acb08c4052cb

                                SHA256

                                d98e226bea7a9c56bfdfab3c484a8e6a0fb173519c43216d3a1115415b166d20

                                SHA512

                                91e81b91b29d613fdde24b010b1724be74f3bae1d2fb4faa2c015178248ed6a0405e2b222f4a557a6b895663c159f0bf0dc6d64d21259299e36f53d95d7067aa

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

                                Filesize

                                3KB

                                MD5

                                fb2e85e1342526beb51621f450488c77

                                SHA1

                                0505f1ee5a4f089a5f9d8a1026828bdf6ba01945

                                SHA256

                                2cf34c4d602837a7a02a05dbaafa6c93baade17fc39e7956d8b9d8b5f5dbec14

                                SHA512

                                63733625d8d67796386a75efb34a5487dcf005b50d93aeba449db72e15977b5ce6524e4fd40f7a4b4d33aba315683b3f852b356f5278557b4f87ccc5806c7fbb

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

                                Filesize

                                2KB

                                MD5

                                657974aa39e6346c14088cd31580435f

                                SHA1

                                103776d443e8c87a04b4e613c2257adb8e3e220a

                                SHA256

                                dfda03e95317cca0befe6efae5e44b7ca41db4d3bfc4608445fa182773158908

                                SHA512

                                d32d340e63353f12faa4a3b9291d9b4aae6c5d955e1fc586631d7a265c21e1b9998d9437639bf83f31476d326e76e35d3015f56569c9a8cea26350e6fa3cc87f

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

                                Filesize

                                3KB

                                MD5

                                f7113f9657f3cd7a8e3964e49e937b76

                                SHA1

                                30aa630832f5e790e2e01283c5cec5e1b6f98775

                                SHA256

                                439222c2a7d8456d5ca6e8b49b80c50134ab3cf244741414b91aabe09a640a19

                                SHA512

                                4c087312b20e9f071df1b8131161b987cc8bbaef6cf199eafccfa5a03fa8fbcc80be4e817b3ab3acbdf7b2f67a20dab8e716f5fd2b122625510c18d7bf6bdb93

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

                                Filesize

                                3KB

                                MD5

                                85278f19fb344234faeacef82f98483d

                                SHA1

                                cce098779258dab51719ca5c11825aaba815b6e6

                                SHA256

                                564daacc2f825881fcffcd28017fd257f692f31432dac2fef1899d46cefc996b

                                SHA512

                                15a0fd218997fe4ae2551850f7f460e7255abc62c882dd7548bf241ea2585106817098a1bc6af8c4fdbcb0df5b707fa3c1ada1310e8d0c02b52f2e6f8427b11b

                              • C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State~RFe5a595c.TMP

                                Filesize

                                916B

                                MD5

                                8282d27b588e8a21046770a6d3c8df03

                                SHA1

                                53d213a137da523f1c1f199a8dd8c89912330541

                                SHA256

                                1ac66e382f6353c6cb063650069bf57ecfe579957e906f2dab5557d4432f719e

                                SHA512

                                70fa64b299934736e9512a68393ff36caceba707c21d22871d603f92c0d47846d9d1be7a8089b6a1a2d71809373b5c6e507df0ae5d9cc4b1e2976b02806183f1

                              • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                Filesize

                                3KB

                                MD5

                                6b2560001ad42bed901765b58349b6f2

                                SHA1

                                2538387e9d2149ba6b749b346113f2b50e18ae97

                                SHA256

                                9c87cf651ea945c89b2447912df96668c2ad04b10c04a518c03316b3778fc57c

                                SHA512

                                cab543489148b42b33baca42ac7be6259d20c711d661bc0a490ba6e7d64e375dcd766f13ca5f9e91607d53a6f83a3fa05af5ab29c66f69dcf6202917b20d5c85

                              • C:\Users\Admin\AppData\Roaming\PCAppStore\Data\fa.xml

                                Filesize

                                12B

                                MD5

                                d52aff67c0cfe5e86e8f053386c8cef4

                                SHA1

                                8b5c7eec3a6ec72706cc9c21d1f3b16f826d158e

                                SHA256

                                3310d0ca116f51924d558692827fee0d0e14e98112c4f2c4c1816fbac0f6a148

                                SHA512

                                c7b129a3359bcc3d6c865d54c0e7a1a77d41f21ca6229656c38e8d66c8ac5d1df820eebe606d01cb274e650bd714ce7c5cbe4dd485b7f4ae7ac693f415fc367c

                              • C:\Users\Admin\PCAppStore\PcAppStore.exe

                                Filesize

                                1.8MB

                                MD5

                                3f63e0fc114c3cca1a2b091cbd65ab34

                                SHA1

                                72a790248fe16b6bbf20d026c960641d9190d239

                                SHA256

                                41efaf44522d2cee68b162c942e256667f1e0a8db4eebc0a07277b2f0ac1f89c

                                SHA512

                                985a4dd39e08782e1cc9c7c9ac942573ffd1f08913e26c62bfe1a7460c94ef03ead2c017d94ca1db77ab4f2d01e31288c02a2ff9079c0f6a57874e0109a06269

                              • C:\Users\Admin\PCAppStore\PcAppStore.exe

                                Filesize

                                1.8MB

                                MD5

                                3f63e0fc114c3cca1a2b091cbd65ab34

                                SHA1

                                72a790248fe16b6bbf20d026c960641d9190d239

                                SHA256

                                41efaf44522d2cee68b162c942e256667f1e0a8db4eebc0a07277b2f0ac1f89c

                                SHA512

                                985a4dd39e08782e1cc9c7c9ac942573ffd1f08913e26c62bfe1a7460c94ef03ead2c017d94ca1db77ab4f2d01e31288c02a2ff9079c0f6a57874e0109a06269

                              • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

                                Filesize

                                2.4MB

                                MD5

                                aad2814325b2f176b0d03b827245bf92

                                SHA1

                                fcdf98ecd1964401eb1fa3431cd27c597bd6bff7

                                SHA256

                                3609c797b49acecc223e6243bf8d96f9adba54d07b0057cd4cc12b1f789953c2

                                SHA512

                                9ccf868b7acf13deee8cc8210ff1a339ddfe70dfc2d75c6ec67ce8a032d82e3565f9449a746e8f15c064499b46dfafc81641e663291bb276f9e22297ef01866f

                              • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

                                Filesize

                                2.4MB

                                MD5

                                aad2814325b2f176b0d03b827245bf92

                                SHA1

                                fcdf98ecd1964401eb1fa3431cd27c597bd6bff7

                                SHA256

                                3609c797b49acecc223e6243bf8d96f9adba54d07b0057cd4cc12b1f789953c2

                                SHA512

                                9ccf868b7acf13deee8cc8210ff1a339ddfe70dfc2d75c6ec67ce8a032d82e3565f9449a746e8f15c064499b46dfafc81641e663291bb276f9e22297ef01866f

                              • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

                                Filesize

                                2.4MB

                                MD5

                                aad2814325b2f176b0d03b827245bf92

                                SHA1

                                fcdf98ecd1964401eb1fa3431cd27c597bd6bff7

                                SHA256

                                3609c797b49acecc223e6243bf8d96f9adba54d07b0057cd4cc12b1f789953c2

                                SHA512

                                9ccf868b7acf13deee8cc8210ff1a339ddfe70dfc2d75c6ec67ce8a032d82e3565f9449a746e8f15c064499b46dfafc81641e663291bb276f9e22297ef01866f

                              • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

                                Filesize

                                2.4MB

                                MD5

                                aad2814325b2f176b0d03b827245bf92

                                SHA1

                                fcdf98ecd1964401eb1fa3431cd27c597bd6bff7

                                SHA256

                                3609c797b49acecc223e6243bf8d96f9adba54d07b0057cd4cc12b1f789953c2

                                SHA512

                                9ccf868b7acf13deee8cc8210ff1a339ddfe70dfc2d75c6ec67ce8a032d82e3565f9449a746e8f15c064499b46dfafc81641e663291bb276f9e22297ef01866f

                              • C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

                                Filesize

                                2.4MB

                                MD5

                                aad2814325b2f176b0d03b827245bf92

                                SHA1

                                fcdf98ecd1964401eb1fa3431cd27c597bd6bff7

                                SHA256

                                3609c797b49acecc223e6243bf8d96f9adba54d07b0057cd4cc12b1f789953c2

                                SHA512

                                9ccf868b7acf13deee8cc8210ff1a339ddfe70dfc2d75c6ec67ce8a032d82e3565f9449a746e8f15c064499b46dfafc81641e663291bb276f9e22297ef01866f

                              • C:\Users\Admin\PCAppStore\nwjs\ffmpeg.dll

                                Filesize

                                1.9MB

                                MD5

                                9518fcf62a52cf17f987b6beb1935a0d

                                SHA1

                                e4c55a1083b8fcbc2e1812b7a7a62ca75b1c66b6

                                SHA256

                                31132704944d3ae5101093f27cb523119ea3acfbba6e3c87216bf95ea2a0f40b

                                SHA512

                                418b169934a9e1d80743b8a7268ebb514055811c13b71d05aeb2f1b64f97e3156256b882a95677f693acf139b52373c512ad559fe17e79836d5fe796273e8fbc

                              • C:\Users\Admin\PCAppStore\nwjs\ffmpeg.dll

                                Filesize

                                1.9MB

                                MD5

                                9518fcf62a52cf17f987b6beb1935a0d

                                SHA1

                                e4c55a1083b8fcbc2e1812b7a7a62ca75b1c66b6

                                SHA256

                                31132704944d3ae5101093f27cb523119ea3acfbba6e3c87216bf95ea2a0f40b

                                SHA512

                                418b169934a9e1d80743b8a7268ebb514055811c13b71d05aeb2f1b64f97e3156256b882a95677f693acf139b52373c512ad559fe17e79836d5fe796273e8fbc

                              • C:\Users\Admin\PCAppStore\nwjs\ffmpeg.dll

                                Filesize

                                1.9MB

                                MD5

                                9518fcf62a52cf17f987b6beb1935a0d

                                SHA1

                                e4c55a1083b8fcbc2e1812b7a7a62ca75b1c66b6

                                SHA256

                                31132704944d3ae5101093f27cb523119ea3acfbba6e3c87216bf95ea2a0f40b

                                SHA512

                                418b169934a9e1d80743b8a7268ebb514055811c13b71d05aeb2f1b64f97e3156256b882a95677f693acf139b52373c512ad559fe17e79836d5fe796273e8fbc

                              • C:\Users\Admin\PCAppStore\nwjs\ffmpeg.dll

                                Filesize

                                1.9MB

                                MD5

                                9518fcf62a52cf17f987b6beb1935a0d

                                SHA1

                                e4c55a1083b8fcbc2e1812b7a7a62ca75b1c66b6

                                SHA256

                                31132704944d3ae5101093f27cb523119ea3acfbba6e3c87216bf95ea2a0f40b

                                SHA512

                                418b169934a9e1d80743b8a7268ebb514055811c13b71d05aeb2f1b64f97e3156256b882a95677f693acf139b52373c512ad559fe17e79836d5fe796273e8fbc

                              • C:\Users\Admin\PCAppStore\nwjs\icudtl.dat

                                Filesize

                                10.1MB

                                MD5

                                2c367970ac87a9275eeec5629bb6fc3d

                                SHA1

                                399324d1aeee5e74747a6873501a1ee5aac005ee

                                SHA256

                                17d57b17d12dc5cfbf06413d68a06f45ccf245f4abdf5429f30256977c4ed6de

                                SHA512

                                f788a0d35f9e4bebe641ee67fff14968b62891f52d05bf638cd2c845df87f2e107c42a32bbe62f389f05e5673fe55cbdb85258571e698325400705cd7b16db01

                              • C:\Users\Admin\PCAppStore\nwjs\locales\bg.pak.info

                                Filesize

                                831KB

                                MD5

                                f2a134d21e79420e0e025b2f5d0e0564

                                SHA1

                                e4f6ead92945b87c3b980878c707467dc84cd616

                                SHA256

                                4c125a498bd06dd1cbbe3e4f05dca6fa47ce19297ad9f92df3af65eaf0a05d67

                                SHA512

                                032e8c44c1edbf6ba3effce1d67e5355e926b5509c8aa3dcf15677efe9fe3a2bf27d81d7d7ffae3a5caae1755830ad016a11f1417dddbf49977bd52083aaee1b

                              • C:\Users\Admin\PCAppStore\nwjs\locales\en-US.pak

                                Filesize

                                364KB

                                MD5

                                a93a5c83e482a4bc56736bb1451a88da

                                SHA1

                                afa0c1f46b6245ed9301bc9c2aa46402b6d10c37

                                SHA256

                                446764ecf3939c35e90f61c928ec55d445d83a483a19fafd38af378a70fd06c7

                                SHA512

                                550278670b857b15a8af557bc7d127695155ac16a0b61947f891040421c08bfed0aea26eccf0c45303b82b801801f6c2caf7fd0561dae97632b0ec2eb1bb2212

                              • C:\Users\Admin\PCAppStore\nwjs\nw.dll

                                Filesize

                                181.4MB

                                MD5

                                19050d8c461aa314242b5a8d5cc0af71

                                SHA1

                                a8624e765c1495b7779f61baded17ca08ef546e6

                                SHA256

                                ba0118d44c3068266becfea0b387472f1699f8ccb437bdeba1590bb0daa2edf1

                                SHA512

                                9bdd0c24ea847ccc58934bc5cde2ef0e3d00687b08a22d98cbe8b8a705a94bcf9648da35bbf1db2967419a9f67d01213cde4ae04c3026ae4da4444a28b27be84

                              • C:\Users\Admin\PCAppStore\nwjs\nw.dll

                                Filesize

                                181.4MB

                                MD5

                                19050d8c461aa314242b5a8d5cc0af71

                                SHA1

                                a8624e765c1495b7779f61baded17ca08ef546e6

                                SHA256

                                ba0118d44c3068266becfea0b387472f1699f8ccb437bdeba1590bb0daa2edf1

                                SHA512

                                9bdd0c24ea847ccc58934bc5cde2ef0e3d00687b08a22d98cbe8b8a705a94bcf9648da35bbf1db2967419a9f67d01213cde4ae04c3026ae4da4444a28b27be84

                              • C:\Users\Admin\PCAppStore\nwjs\nw.dll

                                Filesize

                                181.4MB

                                MD5

                                19050d8c461aa314242b5a8d5cc0af71

                                SHA1

                                a8624e765c1495b7779f61baded17ca08ef546e6

                                SHA256

                                ba0118d44c3068266becfea0b387472f1699f8ccb437bdeba1590bb0daa2edf1

                                SHA512

                                9bdd0c24ea847ccc58934bc5cde2ef0e3d00687b08a22d98cbe8b8a705a94bcf9648da35bbf1db2967419a9f67d01213cde4ae04c3026ae4da4444a28b27be84

                              • C:\Users\Admin\PCAppStore\nwjs\nw.dll

                                Filesize

                                181.4MB

                                MD5

                                19050d8c461aa314242b5a8d5cc0af71

                                SHA1

                                a8624e765c1495b7779f61baded17ca08ef546e6

                                SHA256

                                ba0118d44c3068266becfea0b387472f1699f8ccb437bdeba1590bb0daa2edf1

                                SHA512

                                9bdd0c24ea847ccc58934bc5cde2ef0e3d00687b08a22d98cbe8b8a705a94bcf9648da35bbf1db2967419a9f67d01213cde4ae04c3026ae4da4444a28b27be84

                              • C:\Users\Admin\PCAppStore\nwjs\nw_100_percent.pak

                                Filesize

                                595KB

                                MD5

                                979a087011c664b56b619bafa2122534

                                SHA1

                                186724cebbb0047e88640aa0ff3498340cdd5703

                                SHA256

                                db914fa3e593a30e4037ea26d482c9f6788a155d8b992b2778021766aa7be49d

                                SHA512

                                ecfb1ecb3a16f9e777f5e01440118ac7263d138f6945ca7a746f7e5bda2287332ce0ed228ceb050ce24fb25c1169c952a17c497f33147dfe1ccae36f0f1d47ae

                              • C:\Users\Admin\PCAppStore\nwjs\nw_200_percent.pak

                                Filesize

                                891KB

                                MD5

                                7587d9a73cadc14f70174d95618f86d3

                                SHA1

                                dc4261b0fc4ac28825811beae0496122fe06704d

                                SHA256

                                00da64185f149bf0060f555a78bda17570cd2b45be0cad1a9570f9816ece5936

                                SHA512

                                435cccbbcea41a599af7a9c8fee9f0434c0464b4d1e8d5a2ed1d1307508ece7d49b61cb6a7c7858976a8281ef58de01107294eaf6e7fc8b56331ed2b981297ac

                              • C:\Users\Admin\PCAppStore\nwjs\nw_elf.dll

                                Filesize

                                1.0MB

                                MD5

                                b58238a4c19e14ab64846be1c57be70a

                                SHA1

                                47f6d9ab46f579481b8f01b54f9e23f34f2c129e

                                SHA256

                                7a879b77ba31f4ead57c6efa19ab468c1ca72d0271fbb553fb7c02d00a250273

                                SHA512

                                9dc2d7b22ec0af9bb982fc6e1d46de1d30c408e6abac714ed8731cf5b8c95060564aa85b93989d68b4cad6cc358e47087f14790bbeb3f5609a035a5f35a61600

                              • C:\Users\Admin\PCAppStore\nwjs\nw_elf.dll

                                Filesize

                                1.0MB

                                MD5

                                b58238a4c19e14ab64846be1c57be70a

                                SHA1

                                47f6d9ab46f579481b8f01b54f9e23f34f2c129e

                                SHA256

                                7a879b77ba31f4ead57c6efa19ab468c1ca72d0271fbb553fb7c02d00a250273

                                SHA512

                                9dc2d7b22ec0af9bb982fc6e1d46de1d30c408e6abac714ed8731cf5b8c95060564aa85b93989d68b4cad6cc358e47087f14790bbeb3f5609a035a5f35a61600

                              • C:\Users\Admin\PCAppStore\nwjs\nw_elf.dll

                                Filesize

                                1.0MB

                                MD5

                                b58238a4c19e14ab64846be1c57be70a

                                SHA1

                                47f6d9ab46f579481b8f01b54f9e23f34f2c129e

                                SHA256

                                7a879b77ba31f4ead57c6efa19ab468c1ca72d0271fbb553fb7c02d00a250273

                                SHA512

                                9dc2d7b22ec0af9bb982fc6e1d46de1d30c408e6abac714ed8731cf5b8c95060564aa85b93989d68b4cad6cc358e47087f14790bbeb3f5609a035a5f35a61600

                              • C:\Users\Admin\PCAppStore\nwjs\nw_elf.dll

                                Filesize

                                1.0MB

                                MD5

                                b58238a4c19e14ab64846be1c57be70a

                                SHA1

                                47f6d9ab46f579481b8f01b54f9e23f34f2c129e

                                SHA256

                                7a879b77ba31f4ead57c6efa19ab468c1ca72d0271fbb553fb7c02d00a250273

                                SHA512

                                9dc2d7b22ec0af9bb982fc6e1d46de1d30c408e6abac714ed8731cf5b8c95060564aa85b93989d68b4cad6cc358e47087f14790bbeb3f5609a035a5f35a61600

                              • C:\Users\Admin\PCAppStore\nwjs\nw_elf.dll

                                Filesize

                                1.0MB

                                MD5

                                b58238a4c19e14ab64846be1c57be70a

                                SHA1

                                47f6d9ab46f579481b8f01b54f9e23f34f2c129e

                                SHA256

                                7a879b77ba31f4ead57c6efa19ab468c1ca72d0271fbb553fb7c02d00a250273

                                SHA512

                                9dc2d7b22ec0af9bb982fc6e1d46de1d30c408e6abac714ed8731cf5b8c95060564aa85b93989d68b4cad6cc358e47087f14790bbeb3f5609a035a5f35a61600

                              • C:\Users\Admin\PCAppStore\nwjs\resources.pak

                                Filesize

                                4.2MB

                                MD5

                                a5322a11e67811c10c4756fdff7dff68

                                SHA1

                                1c411726268dfc94f3d97286949e253e3acf57d6

                                SHA256

                                b3aee308664663a2e3f523d1bc192e0e5d8bb0c01d7f9142930bb9a28cccc635

                                SHA512

                                717e64a15c20906d2d3fdc09c09ffda7967489b4f24a7201873d67464fce979777e66c679bfb3069cc09e758eff1f07b030514dd032e07d119dc12c23dfaec06

                              • C:\Users\Admin\PCAppStore\nwjs\v8_context_snapshot.bin

                                Filesize

                                455KB

                                MD5

                                0313894f6ddaa2b25681ba90b68a2a93

                                SHA1

                                d6534b9444a97fc642fd9c6b489ca2fe3a8e7fca

                                SHA256

                                31c068f791be9b7e39a791570e446b37d655b41dfca90335557c44a622fde880

                                SHA512

                                57a9e9e7c06ccb5ecdcd2783573e59b3b4e2911d278ec875f5545518caefaeb7f46fb128159a6fe35c83e7d03de21266c7b68b81114189059975f9a75bcee69c

                              • C:\Users\Admin\PCAppStore\ui\package.json

                                Filesize

                                2KB

                                MD5

                                34fd02368a4717326f0e4c9776c4b3da

                                SHA1

                                24cf4907d4d9a9e1243a108c3e6232f4bd767d93

                                SHA256

                                c465dfaaabad312164b43c25ae04ae3ccd9ed687116afa5f93c2e006e3d5157b

                                SHA512

                                58681b3ee95d9ffa5cb7e35b2fce06f45e4e1d2be51a2c4c6cc1caefb80d854d74853eac852f3e5b27d6b4c98fe28db60104199726d93e75f10c4e22ed1d88eb

                              • memory/5204-1186-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1190-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1179-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1191-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1188-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1189-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1180-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1187-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1185-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB

                              • memory/5204-1181-0x0000022719E60000-0x0000022719E61000-memory.dmp

                                Filesize

                                4KB