Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
01-10-2023 19:13
Static task
static1
URLScan task
urlscan1
General
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
Processes:
resource yara_rule C:\Program Files\YamicSoft\Windows 11 Manager\PrivacyProtector.exe family_ploutus -
Downloads MZ/PE file
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
PACK.EXEdescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-3027552071-446050021-1254071215-1000\Control Panel\International\Geo\Nation PACK.EXE -
Executes dropped EXE 1 IoCs
Processes:
PACK.EXEpid process 2224 PACK.EXE -
Loads dropped DLL 64 IoCs
Processes:
Windows.11.Manager.v1.3.1.0.exepid process 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe 5820 Windows.11.Manager.v1.3.1.0.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Drops file in Program Files directory 64 IoCs
Processes:
Windows.11.Manager.v1.3.1.0.exeWindows.11.Manager.v1.3.1.0.exedescription ioc process File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Serbian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Turkish.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.TreeGX.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\DeviceManager.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\WiFiManager.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Croatian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\WindowsAppUninstaller.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\W11MImageRes.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\PrivacyProtector.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Slovenian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\1-ClickCleaner.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Dutch_Netherlands.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Czech.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Uninstall.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\OptimizationWizard.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\FileSplitter.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\FileUndelete.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\TaskDialog.dll Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Greek.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.DotNetBar2.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\NetworkTools.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Arabic.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.DotNetBar2.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Hungarian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\StartupManager.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\SuperCopy.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Hungarian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Ukrainian.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\SmartUninstaller.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\NetworkMonitor.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\RepairCenter.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Arabic.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Italian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Uninstall.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\SettingsSecurity.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\StartMenuManager.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.TreeGX.dll Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\HardwareMonitor.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Chinese_Traditional.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\ServiceControllerEx.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Portuguese_Portugal.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\BingImages.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\URLManager.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\ServiceManager.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Slovenian.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Vietnamese.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\1-ClickCleaner.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\DuplicateFilesFinder.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\LaunchTaskCommand.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Winapp.dll Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Dutch_Netherlands.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Help.chm Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Thailand.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\ThisPCManager.exe Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\Bulgarian.lang Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\FileSplitter.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\LiveUpdate.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\SuperCopy.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Polish.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\StartMenuManager.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\SystemInfo.exe Windows.11.Manager.v1.3.1.0.exe File opened for modification C:\Program Files\YamicSoft\Windows 11 Manager\Language\Hebrew.lang Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\Language\TranslationHelp.rtf Windows.11.Manager.v1.3.1.0.exe File created C:\Program Files\YamicSoft\Windows 11 Manager\SmartUninstaller.exe Windows.11.Manager.v1.3.1.0.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
Processes:
taskmgr.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe -
Enumerates system info in registry 2 TTPs 3 IoCs
Processes:
msedge.exedescription ioc process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Modifies registry class 1 IoCs
Processes:
msedge.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3027552071-446050021-1254071215-1000_Classes\Local Settings msedge.exe -
Suspicious behavior: EnumeratesProcesses 54 IoCs
Processes:
msedge.exemsedge.exeidentity_helper.exemsedge.exetaskmgr.exemsedge.exepowershell.exepid process 4072 msedge.exe 4072 msedge.exe 3232 msedge.exe 3232 msedge.exe 4876 identity_helper.exe 4876 identity_helper.exe 1128 msedge.exe 1128 msedge.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5520 msedge.exe 5520 msedge.exe 5520 msedge.exe 5520 msedge.exe 5884 powershell.exe 5884 powershell.exe 5836 taskmgr.exe 5884 powershell.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
Processes:
msedge.exepid process 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe -
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes:
taskmgr.exepowershell.exedescription pid process Token: SeDebugPrivilege 5836 taskmgr.exe Token: SeSystemProfilePrivilege 5836 taskmgr.exe Token: SeCreateGlobalPrivilege 5836 taskmgr.exe Token: SeDebugPrivilege 5884 powershell.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
Processes:
msedge.exetaskmgr.exepid process 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
Processes:
msedge.exetaskmgr.exepid process 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 3232 msedge.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe 5836 taskmgr.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Windows.11.Manager.v1.3.1.0.exePACK.EXEpid process 5780 Windows.11.Manager.v1.3.1.0.exe 2224 PACK.EXE -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
msedge.exedescription pid process target process PID 3232 wrote to memory of 764 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 764 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 772 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 4072 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 4072 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe PID 3232 wrote to memory of 3360 3232 msedge.exe msedge.exe
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/file/d/1UTTWcCC3zExEFvCV93bKLaql16-410_d/view?usp=drive_link1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd169b46f8,0x7ffd169b4708,0x7ffd169b47182⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:22⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4540 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3840 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5920 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,17296075511098863615,1130784205112693650,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3896 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\PORTABLE.cmd" "1⤵
-
C:\Windows\system32\mode.commode con:cols=100 lines=152⤵
-
C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe"C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe" /S /P2⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\INSTALL.cmd" "1⤵
-
C:\Windows\system32\mode.commode con:cols=100 lines=152⤵
-
C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe"C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe" /S /I2⤵
- Loads dropped DLL
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault5cab27a2hb8a1h4ec9ha935had016fb53c131⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffd169b46f8,0x7ffd169b4708,0x7ffd169b47182⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,17538496691749696206,15492689056074756713,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2000 /prefetch:22⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1984,17538496691749696206,15492689056074756713,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 /prefetch:32⤵
-
C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe"C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0\Windows.11.Manager.v1.3.1.0.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\cmd.execmd.exe /c "C:\Users\Admin\AppData\Local\Temp\PACK.EXE" -p1232⤵
-
C:\Users\Admin\AppData\Local\Temp\PACK.EXEC:\Users\Admin\AppData\Local\Temp\PACK.EXE -p1233⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -nologo -noninteractive -windowStyle hidden -noprofile -command "Add-MpPreference -ThreatIDDefaultAction_Ids 2147781989 -ThreatIDDefaultAction_Actions Allow -Force"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\YamicSoft\Windows 11 Manager\1-ClickCleaner.exeFilesize
779KB
MD5e9351e42f5bde45b9bb2cfde37915102
SHA16c66ef5ac5b66b757f573d088b311b6759bc860c
SHA256d7112ca82dcec993009ca1468be2bd67f5810bb46a95c7852e68a4623793954b
SHA512231070a62ad6706c9c0cf7ba2eafb0078907b8c5f97381835572c5f6f9b6f8de9688ea010efdd6f071494bd6876df3148bfc3f357b2a97c373764d60ba6240fb
-
C:\Program Files\YamicSoft\Windows 11 Manager\BingImages.exeFilesize
668KB
MD52973f9b4ae501c907794aa5ebde1322c
SHA15cb2bfedaca3957118315676a08ab28d6c8667c0
SHA256169842c94d31dcf20c179a79191a7f0273c29f3e5cd839d90f43cb95828d859b
SHA5125eb3eba9563f6e58065cfe459b18ed141baecf6a7bd36a627053f0ea7aca3f806802480462a3a4471b740acb3504ab6832a152a1bfcb7af7992c74f496d25abf
-
C:\Program Files\YamicSoft\Windows 11 Manager\CMMultipleFiles.exeFilesize
104KB
MD584a8763ec68fe9c3e21e2fda328f1bd3
SHA16f5614d306e3e9a2bd980396b059fe896ab407f2
SHA25670e21082846dced2c12df22eaf747115d946e6fad8824a9a3db99ecdc173d2f1
SHA512168db3ccf278f89300cc857653058fa38d8e6c08c7790d7558f6bd40fc8e653ae08d0b9472671679826e1bffcb1847cf3aa7e9ba2ec8e8fe899f9ff715f77ea5
-
C:\Program Files\YamicSoft\Windows 11 Manager\CheckBoxComboBox.dllFilesize
42KB
MD5f6ee7d64f7e8dadb0b9a9d00d0ff223b
SHA1056f8d36b4b98a80dd77267ccfcd1018d1583212
SHA2561548a1f06025153f4c416e12d7c0a2640d53ae5571ca1f6335d05c1d6f4f7960
SHA512be947b704240f29854f633387c109493cd726f29178615892c72d2b20589fe7ff361618791e513df829595109b4a684e3f3e13cbe25b6ed2d978bab418b6ea98
-
C:\Program Files\YamicSoft\Windows 11 Manager\ContextMenuManager.exeFilesize
796KB
MD5ec43f88a0fb640f51c2287fb3ee2beed
SHA121a953ae1efad89226216b31c505fbcc30458595
SHA2564ccb55bec5cb7fdb6cdd608688fd30ec54d10e5f1ce3fc59ca63ddebc6df86d2
SHA512bd6f6b04a22074ecb2e460be551fe81f77e9452d3e169d0315a681c2cee26ebec9947e1b656a5227533030d44e7cd380b62e90a368aead90bd1369c2cbaea23d
-
C:\Program Files\YamicSoft\Windows 11 Manager\DesktopCleaner.exeFilesize
660KB
MD5233ba4cca54cc2cb1a270cdb79f868f6
SHA1d3d4de6e5ef3ca752d9fe1f656763cd768977d47
SHA2569c5c7bb58821f93168677097f69b1d51fb840cad44c3244185775896e4861bc3
SHA5121aa5205afcb41664f1ce04b19baebce728345a039b7eea27559f3949db073d3a8bc08e422e80ac0b253151691070b110712d26b814ecfad9b2d4775ab425e200
-
C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.DotNetBar2.dllFilesize
5.5MB
MD572590d0708fd59767936008c2baf5a06
SHA1a09f365b53eb268a55737c1353fd86beca294a10
SHA256023142bb888fe4811cd428aaa4649ef2f83efd62b8231e6dda2273b4d66c98e9
SHA51216a3c3ff52dca00e2f11fc2f4d6270e175f402a9f74a3e6d3bdcf70c5d71b83f66b572ae49c06ba662b79a711bf2aa032f6a50128ee3040234e4337461effad2
-
C:\Program Files\YamicSoft\Windows 11 Manager\DevComponents.TreeGX.dllFilesize
432KB
MD5b082423ed7daa36174dc6edfb3d7d9fb
SHA15d144c68e8d3cc799041841200072c22ab9e69f5
SHA25601d1ec727f3810998e395c20823951bc3704ac917c1024e6116f839e220ac425
SHA5126a9cdba574d8982968c0daee6cb8ce8efd12b01197539c943db9f39662ce2929c9dd219e495f714cdee4f451d2bb5040442311698a1cfc39997105544c46a20f
-
C:\Program Files\YamicSoft\Windows 11 Manager\DeviceManager.exeFilesize
661KB
MD57ed85560d03c6e2737849ea95b878133
SHA1a2b85e787f76cc526f6e916c1fed13ae45f77e92
SHA2560b5c5e5b704cd55959078d06ee4022e0a95ca55f240b96ea309b85e1382613a7
SHA5125a3f859c25831ca988167ed0c62aa0e41b1ada07690339a9220aece8c360e6640f2124277566e6172d81d2017e5a71d595ca3339b8de7a612fb02ff3b522a993
-
C:\Program Files\YamicSoft\Windows 11 Manager\DiskAnalyzer.exeFilesize
1015KB
MD5dab115bd4ff5d44b737ec69b66455c09
SHA16af3cd2a30a4f0922e8066ecb3b48fd31228b751
SHA2560f4b28af83f6503e6a9b4a325dc9596d1dc61c19b5fdcf8b5683edf42ed677b1
SHA5123c9eea266a07dbfd83109cfc58a12b262f188ae0028480c48c9cdc00da4713bdfe7a94f0e1d34a86fc725fc881d95a841d148d2bbf166b9ab1e70e4e14b8f798
-
C:\Program Files\YamicSoft\Windows 11 Manager\DuplicateFilesFinder.exeFilesize
744KB
MD50d31b75bbe1dd42b6327f313efa05df0
SHA12835021e049a0980c9176a5fdad21ee982af2eaf
SHA256c868fc9436835ea24733c42880c257b14a591c8c912a7bc3c2b4f8756f4cdc2c
SHA51264ecd6d5267bd11943e840de3df4b5290af02efcd41a7b8fc81d6aeb9747e774605578754ef7fe9ef1e217eec6491a726f78f5f7cbc8320155133e60b9ab4914
-
C:\Program Files\YamicSoft\Windows 11 Manager\EventViewer.exeFilesize
281KB
MD5e8039d71b1c0fec5b2fb64875e751a3d
SHA1d335a463a18b23b0b5d96641a1e86c4cfd38aa7a
SHA2565ab6198db99c764980280b1a3f44063bedcd454634ae3f60b656ecb26a8144a8
SHA5128662ebb0fa6b5d53a94a929dee991a07b521ad10f4314a9163e884d6100a13694185c19f9f4312307b51343f9445c1a53e543a459693b75fa1532dd25c9afe6f
-
C:\Program Files\YamicSoft\Windows 11 Manager\FileSecurity.exeFilesize
1.1MB
MD5fda5284005beaa90bc36cde72b29b0ad
SHA1c838b319904aef83681a2c2dece270099d27fc33
SHA256d0bc7d0271e4bcd7f6e35b0c2c31451064459c7ebe3150ea8c52ccaea4e6ccf9
SHA5120dc54a84ee9ec696204c0a810cdec49b9b9673b28e28b75c6e61e57a9cdbb8850ad9a021cc42aac3a800007d64195a388debf0c2799c7784071e1dfec0665eac
-
C:\Program Files\YamicSoft\Windows 11 Manager\FileSplitter.exeFilesize
804KB
MD5ee54dca72c2f19a268b67df97ec58cde
SHA1b9e0ae85b447a3fa73ab93e6a2f240d9dd83fb90
SHA256abe5717ab28e3f26e12854f16208e3af715060038b4cc76c0f9af44978534e28
SHA51254388124f90af30eaf49f64587c3c357bfdf6011a24df3070f6ad591ed456a2934e8a206d13eb9a8d447a747b06feed52f827300995b90940e59e692a8142513
-
C:\Program Files\YamicSoft\Windows 11 Manager\FileUndelete.exeFilesize
917KB
MD5c96c1b78255b00c4d0088249fb12de76
SHA162f4713fa4fcc8839ab120602dfe3c2d356b20af
SHA2566251a05b708733926b674f23d8cb12161e131ae89bd1c6c60c656ecaae92927d
SHA51205015a78c7ee13385964452966aa90fcc1181a861460630074628e2fb3045d829cbdf7acf32611df996a9f21c24dd097b289cc4d7ae533c71b5cb230ad2d09b3
-
C:\Program Files\YamicSoft\Windows 11 Manager\HardwareMonitor.exeFilesize
1.4MB
MD5fcdcfc6a8115053acee5b5f87a63d53f
SHA1d83623cc278ac3a2b7325585778c11bc8a575be7
SHA256b677a20dbd355fe9f6a8fae40d7351149fa9d06954b37de391066695dbef1f0a
SHA5125712df6b46b933e342f7e34f2b226efd8acadc00892bf3961ced219499546f01a48d4ef02a2b9013ef655fdbe68f1fece33a2e067317b47f2b5dd3308e8af402
-
C:\Program Files\YamicSoft\Windows 11 Manager\Help.chmFilesize
108KB
MD59ff1febb555990e0c52264b39383d1ef
SHA11ba316c4f372687e416e346cf7a3bc89d285e835
SHA256a2c3fdbc76a17625a100d6a944d00bc9a919c83e82ea49dee552d60c35b1ab88
SHA5125825dbae2d7504d0fc536a7ece3243425c707d9341f71958aad2ab194033434aeeed9ca0cc7272236e0a64677857f404bb7019c67d7726e927248930820e4f43
-
C:\Program Files\YamicSoft\Windows 11 Manager\HotkeyManager.exeFilesize
304KB
MD581398cfbc838b5f2e6b6c7c706f682d7
SHA170c848b544ad057374c5b67bd519e4e8cc8626e9
SHA256f6004fece1caf7718f89f3bd177c7f708b8333933b8d9cf232124a019fab2437
SHA512d20f871afd80517a8d1caf5e2c34f18bdc21626898d37123fe3f3d8d24717647945e25ce56cd2386ff6be5f02cd715247c97bdb64f82d1ee00b648755023f861
-
C:\Program Files\YamicSoft\Windows 11 Manager\IPSwitcher.exeFilesize
663KB
MD5080f991496d86070c8e90a0caaf0b278
SHA13f5dce1d12dc31c893d77ca7b914222cf4a11cad
SHA256b409fc1220f405e3c2f2167c364e122b61a4ac15fa9f20d3eac9715679174970
SHA51288fd5e1dfe86c309d89c0e7e99d5a37434022409ea35b22fbb1685886594a40c3a1501e24a3ae0305108c5ae465c74390334e02f68a74671c761213b312f8c3b
-
C:\Program Files\YamicSoft\Windows 11 Manager\JumpListQuickLauncher.exeFilesize
916KB
MD56b015a0ae9298ed11adc76f090771df8
SHA1fa27aea204d39a7eb223b194437e1a466beff3cb
SHA2563c63cfeafa0c893cb153f2c6fb9971c8e51cd19f23e936f67d532a7251042b64
SHA512c80a0f7fb7ed54b48a60b5290662b2075e6b74cffa74c02e2e38c8971bc633091fb7560f9878e6368461e07310791269c7b5a4c566d25740db90179346b21c82
-
C:\Program Files\YamicSoft\Windows 11 Manager\JunkFileCleaner.exeFilesize
918KB
MD5ed9e66f617e40c536c816d8a81b4c5ec
SHA1fb9b04e94756ca4d2c8d0b8b82419708cce142a2
SHA2563315cdce9e643d18905546f3abe11dc3a24a60fe305c94fb3a8608a25ebc2c5f
SHA512d1442ee9867e8d40b1a0d915d90ca95dab8ee703d5ac33d4b361896aa079951a5503447040a50b4277b062ac7ec63a3dbd59f47fefeb0f4c132e9ea03177372c
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Arabic.langFilesize
306KB
MD59fd711c00f6696a5269ec8b1cedfac01
SHA1253b0a3cfc404adae09ed80b9018b8b7a707fd51
SHA2563ae01e95e44f1b8963f22229ed41b6e3801dc6592df71cd261150e2bd223ea65
SHA51203a5f3dd0af68f20348344bd73770f245805a8b6d73561259c5b359b15add1baef0b79953a9ed8715cbebf01920e62964671f09218b21b85630d81222efcc4ff
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Bulgarian.langFilesize
364KB
MD514e24e62277d5dbcef79edb1897df68d
SHA1bb54d20ebb3e6365b34524c33bf87d1f4bdc5d64
SHA25685c9793a8cdaa7661c762643f06bffee56672085d8b65876d7339b239df4eb8a
SHA512af90e781151bb43f0594c0c172a36459297054e8a649c61ea5eb1f0c9397e3f3b51469d8c687dcf20abfa904c270aa0abe0715340e8998b101b7f6e19adf1409
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Chinese_Simplified.langFilesize
136KB
MD53f311f7556d19ce784cb17cdbc0d0a71
SHA121e0418bc54386bbe0aa01fe30d894e3bff38e2c
SHA25688ba55ecda3f3cb3b1715009553a69bf8ff9585beb12b156515bf7a4a4e487eb
SHA5121f00c0154ed8bb5b403bd2f1eee4a84c428db05b68738a57cd7c2c2bca2ea79d5d33a84eac20b9107f0d7b205d79eec22472e4418f2f4615205f491bdaaea107
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Chinese_Traditional.langFilesize
136KB
MD58565f2215a0a2ba691d7404dfd28d231
SHA15a279542496f5a076865b4b563b4122935f66e2d
SHA2567a8473ad1a66166cbf1ac9c333f978e9efaa521e9acf5d27a64a8e5a707e97d7
SHA51285619af0b80d829f4651a66c78e7ec6dcdb7fbe14a6e9a0af05d81e2920e42bd74fa7818896cd53274fa7c777830ba964dfbe73e5d381cded1e6acef3d7057bf
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Croatian.langFilesize
359KB
MD583fdf641bb2bfd78225b8d6dfd2d76b7
SHA1b29cfdb356ca1c7f6ca18e801c0d1cc937e9958a
SHA2565a885efaacd76bcd11b0b6a27bf7e5663ca78ceac5df38950165e941f33beb65
SHA512fdae58a2cc75fb71b78300df1ec11c28f666ba6fd35a6b1c69db79d3cd82759e929931068d53e8bf776a0bfed485b3b0ab93aecc6fa6716137e3e5fc38528420
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Czech.langFilesize
346KB
MD5861fb74919be9ed30aa6952e85de20f3
SHA17ab9411fc0c60e5e20f7886c08b04b6414c8acc1
SHA256817f8344bab1227561efed5b10d84aaa238e05b56879f11f18068b74196948f2
SHA5129a5831bee03a6cc96ee96b00973f15a1330befc270272f368b6f41b8a237706bffcb6e5c86bfc783fdc3898b243bf4b987821cffed56629683dfa730a18717ea
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Dutch_Netherlands.langFilesize
373KB
MD5c5b8309a1371ed4306c6aaedc7185456
SHA1b3e004e482acb35684fbf8f299cb7fa213c6c652
SHA2563238244cb29b8c25c82e2766042750e56ef41663731ddb26707da65db1078bf2
SHA5124101e503478d3482a8b1513a22336a9e2f73777642f16a57b56b5cdb259ad2379dda0f5acc986a2e65fdee1c95d5990c0e9e44739ecf2758932020beb2c838f1
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\English.langFilesize
336KB
MD5f79e66e668c68e39233ccccd34d0808d
SHA199f66ce7ac73fe93027f2290047f18cdacdf82e1
SHA2563892c24c52123d698a4428ecc72939ab772e409358fa2dcbf19067031cf897ea
SHA512e9340aabd760dcf52f3fb0bf7741eaf9be44387a341f0d3c0059d2d93c8bcf059e41a72a6773d648263b686ce60c8edab5bf21e4e71bc1f4f248449fed73b709
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\French.langFilesize
419KB
MD59e2e7a2f41d2da5b575a0a389733c537
SHA144f302c1d5b1d42e604b302c821b8abb21c883ba
SHA25677be79633ae0ab63385aa9422bfa20ad76f8d34dbbe166ce0fb035d681c93d9b
SHA512ef4e34849811f4e7c8c3da5af6c0915aeda530d8e373ee7000d77811ed47fbc0035f49604b7f42ed50570142e751806018850a3c76906b1981141a24f3401e22
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\German.langFilesize
378KB
MD5a27564f78cea6145d9b38a889660924b
SHA16503aef31405498cd983e87775bf8672d7fc73bf
SHA256eb8e89560a448193d8a3e4632eeb54384733a52a129781d1fd66a7678c8ec56c
SHA51279310c70ae4e1a69d8105520f3eb912ab59c1f3a199e6eb8ba34efc8d520b001b78d780be6b248077564b8089bfa6dc6159c39c8dc616dcf1a4575d9c8a27a76
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Greek.langFilesize
415KB
MD595c1b73fb0cf571772402a70355d1f26
SHA11b11b06edc5b3244702646174d52a07ada63bb20
SHA256b48660a1d1ac05f15a98f4679742d187c19d2d8c74921d0363bed7a11c252b75
SHA5123b0c7a5f4bb3a529489e445a50a9ae15e8043775c172b008a4c8b14f9794452d152d2b9db939f9e55cf0c850d90ae8d1e5e2e8f569bb2c37b86d8a7542a74aa1
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Hebrew.langFilesize
285KB
MD5b0f16afbf22d3a327746fa1e74adccaa
SHA16a481068af4d4f034bb577abf43f11631accd37c
SHA2564af4d3b463dde369a44b8520e1f37f750ed9b64d4a22dd09e7fff06886619dcd
SHA51294a014916da5d3c1c93b6b2407c799790680c64514441aba6d40acce1928d1be72032086e1b37d7a2a9e141fd11db680e12e303008450d426f8b406e219a9168
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Hungarian.langFilesize
330KB
MD5b9895afe7cc6dd7ec96f4c4f99147c6e
SHA116778d99edcf4c4edece58ff4418188d63c13a68
SHA256f7fe0b631a1306872a40d17efa5d964c997bbbb3e0ba9626ca285f4bfb691f4d
SHA5126a3af2f170d6b0fff594d2263b629e26505a1cdff98d3a34f6a397ef814323a052b7cfeeb899d0d7af35262bf8b03a91f742a436428f61ec05792ab44f935fb2
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Indonesian.langFilesize
368KB
MD55e00c0f32c49eeef1e38c319ddba00f3
SHA1e1826ffb49c0740389d11c3c0338159bedfd8296
SHA2569de3a889462b86ad1564bc8f4144e3a643bedbb674edd0785c0a3d24e0e9f072
SHA512e6d79b2adec6ff0c6b9108fa87b3b551cdb2e2d223d0eb0df6fbce82abb289320a67e527bb61afdd574ae023d987a12dc160285f845fbafca81d1aa3044ec968
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Italian.langFilesize
381KB
MD59f997dedd63514b7843b1ee0047f2858
SHA1f8ca243f31e0e9be4a47e4ee6368518c4bf06dcd
SHA2560ab7de6d5eda7a85f2e32b97f86d529fc219419e404eb20e98a188707e5a8878
SHA5129cc8bdfa2c250ef0a91b1401fecbd29ba4f65afb33531907cd0069108c226e040f0e02ceb010b7724991650615c3f0c4e3594457d7a3b483fa2840f1d0698712
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Japanese.langFilesize
208KB
MD5da9799f448a3ffa47b911e18e3549807
SHA157a13e314fd41a2a5f4e0eeecbc6056486f785aa
SHA256405a174c0a36dd45195c62c6a150f6e07a8d5f5e949e3d5ddc3db7af1401dabe
SHA512fba1c6737febe50939466d4c450a8fd2b83c02f7f1001d017b3e295451b6ad9b7ba8f9a53c9dcee98f74c774f6996662c4493844278a536a731bf8875fa9de84
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Korean.langFilesize
195KB
MD5ab63599742ca245f01eaf424438fb879
SHA1a3c2358e3e23fc515f909529df2cfb52d197a6ab
SHA25672c70e2df7a15df33e75cb2332eb0affa108285816ab8065da5f7cc752eb5ad3
SHA51225ddbfc44c0ae4733dc7eb854c24e26d27b2db1c73965a53ae5595269ff4c0958b25e1e1054e30b84261dec8e6bb0bbd9b148c3c557844fcc44612606a1339ad
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Polish.langFilesize
372KB
MD5da7784bcf8587069ed7cd43e9cd61c1d
SHA1ce2b7288c278ef7c3c6b077558dd9bcaa887f36d
SHA2560a088665ea76ab4f895505c2f73a339b155685cba92ba8ed4877cba6dfb42bb8
SHA512c500920b83b5aa7e9fb76d12875bb78ebd53b7879383f4d35a0d0b04afc07b00b6bba11907b815054acfe41e17bd29706d341856c78c508fd9d5f1433cc3ab9b
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Portuguese_Brazil.langFilesize
387KB
MD50ad08d41f44d483814b9009185bbb892
SHA10e58941a86187c483e591491ffce198134e0e29f
SHA2566b8b01811f90a1e3568910ae164b8efab901d0ccb166cf4f2c729ce9ebe08cbc
SHA51266b4b1102f01a1e1ffc54600cbef776de00dd4bf0bf67002d58d81ec73ea671011207273c0a9f1a82bb22b08c0b554f876c311f766d5855a8711c10c559aa720
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Portuguese_Portugal.langFilesize
409KB
MD5466dfb3699b73d1ffbdada334eef94df
SHA1c8ee1291adba57e1f7da425250eb9d98c4eb9096
SHA256fc885b7fca0b1233404f31f7dca16ad9dda7ba153b6bf78c99742e818ecbf2e3
SHA512c92eb1928790f04e5ec40fc36b275bb5a1450a64cb8e7feb599dd9e42ffe791411a2e6fb04235f7e991103914b8bebb48b988b3277515ec63a020ba45c895549
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Russian.langFilesize
331KB
MD53ee7655835bd4ae55801b26c0dd405f5
SHA19a5015cdc03a85199782152dd0cef70b999830bb
SHA256313c0fe67d3491e9e3d3f75c961cb1c6fc8f6619daea7ce05a516d79cd21e114
SHA512d1119d3e9ee956fc9a766218f3767a398bc441e9cf601ed993915dcc3fbeefa96e718453ebedd546d6a7dfa8e8f02ba9e2abefdd27eaa7f32aa4665a950eaf37
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Serbian.langFilesize
360KB
MD52a47022b2a775ffccab781d6beffeb4c
SHA15274aabd58bafc7a4b10779d3658642ee5b323c4
SHA256b177cc79b435b5a6d0d442bb446466d74ed8553df729b0397a3229ed56c2fa26
SHA512a0805deef3a03d072cd6fb716ace7752b564532843b1944d2fe2939b3d3c76758e7e656e49d3a269ea28d7034b8230bd7b427e1899cb89966618fa9c78f005de
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Slovenian.langFilesize
362KB
MD553f3475319a22a54a186d66e748cd3cd
SHA1e78d6f44bb9ea1d5c35e20efc37cce3d4e2a40db
SHA2569470b41259d2c2d97c16e94b6e23fce85d03802f4c655f32d8efca3e690539d4
SHA512971b161a0748e830a1b8526ecc5512bb54958db8963e06c4ec39e6db2b362d8101e3ce60e81059d4cb81a489eff891622c3a479a30b371081f72400f5b35dd4f
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Spanish.langFilesize
411KB
MD53542bbc362ee16c2ba7739886d7b60c8
SHA11a4f7a03541fbb03cb0f8b9b294ee1b32f3e4afb
SHA2566824607c0916bf453747e6e403a61a365f8362cb2b2aedd9fb4e636043a11fb8
SHA5127e984a15f3b1a3da1317c51689a384e557b9b1a31651dca69524c17d67968ebd2ec589d6b84ec73e4e1a4408a8f355cf973419a08b1c9dec7c6d6241b1d5ea77
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Swedish.langFilesize
349KB
MD5f50eb65c88a8b0a7b25d57f80d5e663d
SHA15fe1cc1acedf0d8a1cb6195c644bba98f46f94b0
SHA25634b45978759ac3033fc5f65d6ccb087b841ce3f5d79f9bd911a38f47635cb872
SHA512d5284469c19cf6d86cff68fa540182280f2d579bf76a3d2324d63bf1fca0eaeb3b2f19924ad2708c10021b305f6f2d38b8f00df595b2d94c124bcfcadb70dd41
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Thailand.langFilesize
316KB
MD56142a6e203e71d30edb0fbff24e35dc0
SHA12cadb51dd3803e2fe7f357cd083e7f1c49f44444
SHA2565fc950e917244d5c08537850613d7b8054fccd98ed56eabf8474a26cd4b58f6a
SHA512d945e838197a1c3fbffcd7a9d98cfecb8ec364bacd75c0cb06af912f53f023f43e8f499b3adbc55174d1f29c282a2fb1a45465351d9dd51496e355400cdccb9f
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\TranslationHelp.rtfFilesize
2KB
MD56e5a97ab2bd2e91148c1be2698249399
SHA1a83f3b77ed450f75a9cb0a401de735f944df6484
SHA2562de14ed3671e331a50ba90937bd5ee02fbfab340892286dcbb69ad9720c09d2a
SHA5125847f47673555eb92701940e0855a3316f8166764b43326468fb352141fe6acd790a1840a250c7eea2d6a42cfaabc3b6df9e62b5b999dac0cf428103ba96628c
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Turkish.langFilesize
362KB
MD52298971cbf42f0b34f93953df26f04b2
SHA1de6da9b9ad36c4abb4534c6bf5e3d714593e538e
SHA256e0627c2541ef7c12c2529bafb64665a4b6ff392032cd6a17463985f97228ae23
SHA5129f256790182fc46a9edc1ed2da6345633bb3c08975f39a57001edd7e521d1e0ca8e8eb05686a9fe23ee1bbdfdbc2d5bef87bdc3b7b3a881c42df2538d99e0f7a
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Ukrainian.langFilesize
324KB
MD577eeeb4d98232157b52401fa2c8cad29
SHA1d1306a54db5ebe77d720937d890e2543e9c08f82
SHA256531826c791311037b98f807600f1dce05486fe8ceb7350b97c41865bb63a7a8f
SHA512eb90ee4c5ca2240cbe66effdd1da830b92f99ef926f8eb44c21ab983782a2eaf06aa2949c03fad96d26098283b3a75195b3fab27015cedc3468a061e708c311e
-
C:\Program Files\YamicSoft\Windows 11 Manager\Language\Vietnamese.langFilesize
352KB
MD51bca3860646e81dd5f8f8b93c19e5477
SHA199420e1454780c9b4c67c3069778b537cc222c1d
SHA256c327e43000133a9654666b3942c01ff58b28f57666dfcb0c2b793fe482294fc0
SHA5128267e5e75512c8e473725d81cc7df943ada6de83b53413ddc54c000bb23c8d366b9671783f9f506e808d6c0d7ac1aa8917d239d670c6b17bf39789761aa9ccf0
-
C:\Program Files\YamicSoft\Windows 11 Manager\LaunchTaskCommand.exeFilesize
67KB
MD5d8e151aeb9a16e70904768f653434161
SHA1e370a360312c252b4cdf9971f2407ba2cd494da2
SHA256ee19eb322aa22a2073ad118879ad41ebd4bd44c7d62a5af036ab77e199f01b17
SHA5123e78af7755146e6bd4c0f49e5151524870492637c451a62e8985da31853b7959469de6f3d34a32947c8b52c82b98f9ce9a785792efa00178d1d0599f5644c166
-
C:\Program Files\YamicSoft\Windows 11 Manager\LiveUpdate.exeFilesize
836KB
MD59b24affc25443178f7fec649581e071c
SHA1c2327567b209b609700c7dca7cb1f5d3fb7215cc
SHA2568ecb382fbae2577f3e6479706016d94b164cb0c15f5c520205dc512772f2e39a
SHA512360cc93deb1ef93ffaa11c214ac70e3e580714ef56753eb502663e3f84efff609f3447bb1aeba6fa50d4c9348b3640b54c2e8970808e4a62dfa10d1047035c62
-
C:\Program Files\YamicSoft\Windows 11 Manager\LiveUpdateCopy.exeFilesize
17KB
MD5faa1651cb9f672d06b95d6188b8880f0
SHA1694ea7f4c906d6a5473640e22c01982ea254e212
SHA25605b9de706b09b18df67ecf64f73edd739610c0da2797959a2b3ce6e0aada10b3
SHA512775ddc2650587b5879b901d9f9c8cef32bce6b2d06799cba464e3bea0474373e5490158da541d2d1c395dcf9e37634ea5a71e30e55bc4fb7b92d87a2cfb7aa25
-
C:\Program Files\YamicSoft\Windows 11 Manager\Microsoft.Win32.TaskScheduler.dllFilesize
323KB
MD54193b5280e81435f35a53db3a79358cf
SHA1f97a79ff869e5bdc109818dc764eaa7c805caddb
SHA2569972f00f4f9e1891570c5f704b2818bd0e93ff45815f5ee51d77f8c81ffb63a6
SHA5127062bc1f61f78b17cfda4f1284ec45024fe5e237e001df9639d467e1937cd0f55db4d884df190052fda6ed670df35404c9679d2025a2ecc20a30553e988ae368
-
C:\Program Files\YamicSoft\Windows 11 Manager\MyTask.exeFilesize
771KB
MD5f9bcdaf148d47b389bd67b121a37d0fb
SHA17f9821a1cd9f95e9af6d985c8041465c80910109
SHA2566afc0950fd980f45175e9d606270ca40104b7d87e7ed5eb1ea7c93ef18c4c9d1
SHA512a93e8b039c9363df0a0836f973d8735e8ebf5e93a31070d6b535f8e2e88fc1f223698283a515b71faef3043387a7e88f5f5fb5f45ba69d1349a17237c7a3d854
-
C:\Program Files\YamicSoft\Windows 11 Manager\NavigationPaneManager.exeFilesize
271KB
MD5cbea2d3e6336118112a74c2d82918c8b
SHA101cd5ee3d773bdb436b0dd2dbd5d76e3974a98d1
SHA25621149ba30c0d19f87837f43eac041c8f5105136ebb61e671cf9573d77f770466
SHA512bf15de0f17f59d22bdc2863f709daed08f087eadc63496b93758350242f6069811387f7e02cecfafae7b85451644086c0311e3747ca1b89836bb54196fc4b56f
-
C:\Program Files\YamicSoft\Windows 11 Manager\NetworkMonitor.exeFilesize
1.1MB
MD59a4cfe9b2b1a54e0f1f6e044ba0b9366
SHA1f8c80b6b62b48d35c8b09213ba99553574d44c84
SHA2563793ff12412b9bac815b0b636f234c65e1ad994492c1532b47f3d66ce15e6d18
SHA512d9ef72bd45757e5e37566987b7ce53197074d0b3c8eb6152f119e99be4666bf566b14245bac1d4a9af91e70f723afec5f7ea95543d962a72d86ec2ce2c976fbc
-
C:\Program Files\YamicSoft\Windows 11 Manager\NetworkTools.exeFilesize
412KB
MD5ab3cfb00c980b84890b7806de9e0a349
SHA17d3e9222c80e65c198504df016ed37641c9ebe49
SHA2569a8384742b349b51fa326167f316d9a9bfe8e636f7ab08ddab16138587bf9f2b
SHA512aa95452adc2099d8555addeceb14de7152d046629747e9b0e45178f1cd369c2c47d4de57b1f58697ba3f1944ae57afdf6bf252eea0d5d8cb2510851669785d9f
-
C:\Program Files\YamicSoft\Windows 11 Manager\OptimizationWizard.exeFilesize
704KB
MD5a64c4bd3fb24450c5a8a2898a0ff9ac8
SHA100a33ed56dcba15b005f2bddd184c8ef0b70315c
SHA2565598744476948e29635d37f16e2326e98e7564bee7beac7fa1a29df4abb35e86
SHA51267290b0d510c013b2e0ec6615c932c2a4f2e55a1a71d5a14141586d73dd5c25a95e5dae05725978d013ad74d6047f5c4caf9f3a65d93f2c6204fc6ee10537aec
-
C:\Program Files\YamicSoft\Windows 11 Manager\PrivacyProtector.exeFilesize
7.3MB
MD54df1c50b103b7e49e1653981f6baf36a
SHA184694fb5fc0ac475ac4afeea6802833b0d296b0b
SHA256f22f62342d3802c34eec4de2d23859ec0d649d34f04c391a65f964200ed44c06
SHA512e10e97f492785ba88ce1994b401cb52d8b9c1cea5781bacfd147199aac6cb8bad0bf0f1badab590a7d8539e9c3ee5bf2417879140ccb08dadb260c9e80c780f6
-
C:\Program Files\YamicSoft\Windows 11 Manager\ProcessManager.exeFilesize
1.0MB
MD56f5df0c1a7756f8114a27d17522f1828
SHA1873420b7b6eddb6b926bc7da369c18ad1d3293a3
SHA256587f7e4f1386135f277b5fd84d4dbbc184a05e22a330afbc03a23fd02bdbac08
SHA51226faf7ec30098c528e3127aa1e6c94daf008d801f285539098e5618b056bab73665fcd93c80036f61143798a102faaff88f5d8ee5af37996b791cc3c5fe0e947
-
C:\Program Files\YamicSoft\Windows 11 Manager\RegistryCleaner.exeFilesize
963KB
MD58302bb487fe45d92fdc792dc13fe7f64
SHA158d3b2957762e0c2939e80272096cc5c0d1db7b8
SHA256e179d7ae862d582a351c83a4d001bc95fbbc5626720799a548cbfda2c050a28e
SHA512670b4110695ba0cb816856e4e51a41856920d28927ec5e66b6cdddf4d1a88f33fbc8e5ab2b1e3c902e902d51afb91adaabc24535d6a5c0a08b912b564ce51569
-
C:\Program Files\YamicSoft\Windows 11 Manager\RegistryDefrag.exeFilesize
786KB
MD5aebf733963ef37b19b01080e7452b696
SHA10df282b794a0ba3dbdf0d799cf5395e756382c18
SHA256954ee52d59cc91d53b85eda3006d2bacf3802ed6617b29d444a0e286a15c3313
SHA5128613f267b0508a2b10a8d9c04b47c79634ef4e157613dd555e01634f8ba31fea35b5fd2978878219a2fc493734f0c8e9f00adfc7b9616b89d9ca1235efb6c9dc
-
C:\Program Files\YamicSoft\Windows 11 Manager\RegistryTools.exeFilesize
938KB
MD516c4d0b321d5754a16c40929ccc95c76
SHA191e4dda75a350427adc4ddbe8fde501eef713da5
SHA2564b3b3ee53d2b1b5abe44e84fa6531221b4df364c2c99b6f26cfecfc409b8e048
SHA512f3d5d965868e23ab6a56b9d2088245938329315ffd5d03f4fd7f0298dafa2d6e08992a78b9a4b4a54bfbfc93c1dec2d77a043b5ade9e7a8f1f75adafaac6ef58
-
C:\Program Files\YamicSoft\Windows 11 Manager\RepairCenter.exeFilesize
1.2MB
MD5b7ad132d6f9e61709d4268d3c411a3ec
SHA1bacb53fc8e529dd264903e9da7302140ff10f2a3
SHA25600e99063af9f4bf5d1fc3e57e699d045aa2d1918bd98a96b3e714a3ead882e16
SHA512dc305eec04aa06ceb8eaefca1251705146077ab54f26487d4c6c3e1690a2ebb7fdcde4859917bd683cfefc09a571213c760d1b11b9f22da9fa3af8d02e88bca7
-
C:\Program Files\YamicSoft\Windows 11 Manager\RunShortcutCreator.exeFilesize
659KB
MD56ef1322baec7e83057482d6e90607248
SHA1f440d539d5808872ebdc35877d668ad7c30e9aae
SHA256f81d070c87f2f8243935543da98eec5945b67c821b4bef52056a4389a4c9dc20
SHA5123ea1bbfaef9c9327e9979711ed13deb1254e77369dda3ddaeb79189db4de62ee0c74b49af58df29366b63f5e253e3e0ac0cfe4f29b5d1183b0e116fbd527cb92
-
C:\Program Files\YamicSoft\Windows 11 Manager\SecurityLock.exeFilesize
931KB
MD5f6a73dd0fbc7af5ad3b703ef86d7603e
SHA1b7cc3fe34940fad5c013ef01b6dcf51ec7a63110
SHA256b5a7ec2a891caa40d0058643d0ff6103fe18d3ed3ced63e003a09d311e7d522e
SHA5121adfc6b205c29eac4250100876791de90ed56fd492a8b5ed2c55c6a7b30715f6ddd26d132ffd02f0fd6aaff8bd0864f832e59e7788ea6bba2e6fec0d3f2090e6
-
C:\Program Files\YamicSoft\Windows 11 Manager\ServiceControllerEx.dllFilesize
12KB
MD56b047e553b81e3b44892030f72b9199c
SHA1217030e62ee0e42dee80ca660f45a74ef9166f91
SHA256843b3daabf958ae9b05ed914fa721174b42660870826296fa3160451e7905e8c
SHA51210e292906bd7739ac4eee9f14b6f0392ac4d616caf41da48f006c44a7045813a2bbecaab1ce8688878e426fee2ceeb208cee13bce2745101da853e2d60141166
-
C:\Program Files\YamicSoft\Windows 11 Manager\ServiceManager.exeFilesize
204KB
MD581a3ffd86d8d2280c195afa22d767a05
SHA17d0d232393663248e58a6406f283fc8dc9d7cb04
SHA2569ea8c6868ad0b4660022999c817de6af9dd91860f4a9bc28afc54c9e0efe6161
SHA512a49493827942de91e1a66c6b4afc3ddfcc0dc7fb811f42eaa3f0ead600894b22a427ee76d45efc00555f14207d5bf7118d3c950d6f47ad9ec43c6735da697c0d
-
C:\Program Files\YamicSoft\Windows 11 Manager\SettingsSecurity.exeFilesize
1.4MB
MD515c1159963be897a8d3223651d4d3d75
SHA16de10b816e2cc9a46a06b31b8c229584a2769b4d
SHA2560c29083946b31c5a5208a70b055d30b7409b731fb579fe8027d3f97b9f5cfeca
SHA512c36542fbcad6c94a76b9d451faea33d4dfa83010aa49a30df79a4e6a115aba3a2cab5ed4a08943380bdae20b1095c7e3e45c124d62585daee3d9fc27a1374ebe
-
C:\Program Files\YamicSoft\Windows 11 Manager\SmartUninstaller.exeFilesize
861KB
MD53b06c92dcf14d8ff4c7ae1acfc26c3e6
SHA12f174592ba3dec8a4ccc120878d249b43b11737e
SHA256b9b406ebc245999c250b90e6b71cd1a849d5a8a337af04883542dd4e46f72a44
SHA512952793f97362dac39c3de970748afd4402d164786eb798ba90eac4668c45f49aae68fe8daec41df792035313aa4ff368cddfba7c3fe9b614c19624773a89d390
-
C:\Program Files\YamicSoft\Windows 11 Manager\StartMenuManager.exeFilesize
127KB
MD550ca3119608bca4d74283403f5466669
SHA1fcc0a65f833cb51988a7662ed141815ea917734a
SHA256b7d4befd5d45fdd8b56cfc3530a31862634399dc441b817417c8d1bb6fda3f1a
SHA5121b8697c18960a4b18823336f4db24cb022e12881a06137ea2f3c60fab2356ac2ba1913cd65962eb6707ff8f830ecac9935097e2cd7dce150fdf998ede5bf167b
-
C:\Program Files\YamicSoft\Windows 11 Manager\StartupManager.exeFilesize
380KB
MD51e75811427446af9f2342fd24709b27b
SHA1e04b58af2025688c3024121a9c33b2384b1db5ee
SHA256a9a6353d5a6286672514c68ad2e4ca270c313d22864a739029c17da74c3a525d
SHA512b66e36a44585a77e739cac8b1e383e195ff29b0fbc75fba7f1bcadbac3cff774d00180807d62ca307049fbe0919df8a41f755787b07acc1876916179fd02e09a
-
C:\Program Files\YamicSoft\Windows 11 Manager\SuperCopy.exeFilesize
850KB
MD56cd57752211c30a35a2718be41e12680
SHA14ec4a456729e6821e415a74047afac8083324fb7
SHA2568773bba41c71cfa54811d307a4ddffb1eae8ba60a23274c04f5da839da9c7bb0
SHA51240fecc4eb2ff62f51d4f7ae8dc46ec9b127891fdcc26f1674790978e22a7b115bcd083a2613ffad932ec92cd1b3c2f30cab825ae8bb5cbd6b77d16966ca8575e
-
C:\Program Files\YamicSoft\Windows 11 Manager\SystemInfo.exeFilesize
999KB
MD5612b4b32140704a6f567f86cdacbaa15
SHA130a02f7358f91cf7f2dcbf7e65796096b5308ee7
SHA256abf395950fe0e43d9dea2f5877980af7e3395db20b97ae49512edf772ea0cac8
SHA5122bfd3bcf04995b59572cb70159c6fad08fcc0eadb1e0bfced9ec37f352c8f674cb47ffcca46fa17ca080bc69b20db5456b6ec549f36c9035e03f84058812daf6
-
C:\Program Files\YamicSoft\Windows 11 Manager\TaskDialog.dllFilesize
27KB
MD598959f94b51ca52ad794fdbe1231e83b
SHA19ddb0c0e105ddd8473a1ab8391ca9739da3306e4
SHA256c2ca119a1a1ba968385870535051be44223bf09ec552b30dfda2eee7dbcb3d14
SHA512986167566057e42e5400c800b744d31b1f16df24f7488b8316159d1ed10efbb93671763aee4dd5020d6fa1883c3baf4252fbb6f39585135eeb065134f6a25fba
-
C:\Program Files\YamicSoft\Windows 11 Manager\TaskSchedulerManager.exeFilesize
306KB
MD58ac441ee8e096f4a032cc53edbd17ec5
SHA1580b27616865a023a75ef66ca5bfef7aa028a18e
SHA2565bc14c23a4a869196deec79909df7cc4cb6482eb3015d3889a5ff1b66fc92c7b
SHA51292ee1f1b516704756bee421a12bc34741a944d0a3bb8e65cce5ce8aca8809b6c6bef47551c906e5d1877fb5312e6db4ffd93e07a43125a6a86f36c96b30f5713
-
C:\Program Files\YamicSoft\Windows 11 Manager\ThisPCManager.exeFilesize
659KB
MD5eda2e54cb083b973988987482c804ca3
SHA1cc3643a783f488ba7e9aca7e86e85b49d5fbbc28
SHA25671e720159913cb58ac41dc7f5d5b5b5a7f029f39980d065f0642b010b308a823
SHA512a8909dbd8d79e4b96f9f86429dd57b5b3b7e5642f55551f757a69a19108e070df1ff0eb4e30014e9f5c99bf878e145efe8df7324a1d0cf50337c5f8ab65afdc4
-
C:\Program Files\YamicSoft\Windows 11 Manager\URLManager.exeFilesize
668KB
MD5b3f739a66dfc58b2d52dda2376261ab6
SHA12596c6dd4c4a966f1fac525fd5ec400f7dfa18d1
SHA25696a17e83fbe11efac4e140654ba9a8c7dd2082c7e13cc422077bea84d5b9b83d
SHA51218db8a5914602765ff0d777968ad57ee5d13e8b7075389c3b814a009d19c25e8acc2e7c17c952e58c6662297a83a1116d9230e9e1b2094d1464071345d2446d9
-
C:\Program Files\YamicSoft\Windows 11 Manager\Uninstall.exeFilesize
192KB
MD53a5466075399220222529f2e0b925b75
SHA1ce614258921045e71cc29410a5e6e450eead1d57
SHA256aacc884d1dc43b9079e4f041f9b5eaee1b621d3f1363e1cea801d6e0712bb499
SHA512c14364acd4fca5fe820001aa5259306f61c35159662f5cd90058a3dab3d96fa95bf6d93a03c1431c39a7e98c3114bf2e2d480fae2bc65fd2cb482827a27e4249
-
C:\Program Files\YamicSoft\Windows 11 Manager\VisualCustomizer.exeFilesize
1.5MB
MD5a04a36cdd757c7963c894c4f1c837833
SHA12fb8f2bb534044aece0f82292bfe6759e4b9a6d6
SHA256104db75d838843f60b59b98aa740dfe77daf1bee891dae4500dc66f3b00d1fe8
SHA5129c2b84904664a8a10b01d70510ba6d0eb7a239ddb5dc93c22580dd46c8504916e67a6695b569943061d74c7fd11f68288b6843ca3a4ae58facfd0597ee221f5b
-
C:\Program Files\YamicSoft\Windows 11 Manager\W11MFolderRes.dllFilesize
1.6MB
MD59ce24ee1e4f9f3923c578bb699991496
SHA1e6e817cfe4ea312213addc82fb57c4e024748742
SHA256c0c726f21da55ed76a0e83963f08140431251f8e6e1a7a67001fa0038a2ba4ae
SHA512fd70f460110fa6df7b38b492aa0ed6100ee7ca5df4c74a2cf2e03f20db34903e5c64aadeb7470f570e64e670ccfd30bfa9a972cfecef23c37e974bde59bfebf1
-
C:\Program Files\YamicSoft\Windows 11 Manager\W11MImageRes.dllFilesize
13.1MB
MD5a93a9b063d7fc1fcd9ec7eb6ca19514c
SHA17d251aa241323ea29ddf7a33111d4d0f27bc3948
SHA256b7dabfc107c4f44a006dfff8392daf7acaf342aff015c88418992f2c94c75309
SHA51295515855a367fad0bb03196463cd98061a6625114db23b1012798611d563e054a422f291030fd722c0a9d05c73a518e4302126ac4fe1f4bb4dba2feb6aaf6b8d
-
C:\Program Files\YamicSoft\Windows 11 Manager\W11MPCL.dllFilesize
1.3MB
MD54cad9abb2f3b3f408c21699ad883322a
SHA1e34ee663e34b671077b65ccfa558f2983d1eaf6d
SHA2564205d0c13fa5e80df4d4d4dd4e77e937a55f3e27344f4a395b34702e07628fcd
SHA512a621717bcc8d22fda494d45a33df34407e63be8beeffe45f1acce7c047d12f175d735736576a71fcfb8f39c805afe7726fe5e9cd79f204744063c4cebebcac78
-
C:\Program Files\YamicSoft\Windows 11 Manager\WiFiManager.exeFilesize
684KB
MD50a2be477b2f9fbed65a18fdbc4ec4818
SHA186c22bcf41aa867e76559bb769668bb20ce5f13e
SHA256d828925f1be97183375e28838525fc28cc870fcbfe4784a6d293386f51441942
SHA51213806a9711ca4e43e0da94ffcc355466fb7b211affb3a2d5f7b33a5969c80ee7a4067d98e4272a222010dafed71a56fb4b76851e28c30ed62187d886391c4338
-
C:\Program Files\YamicSoft\Windows 11 Manager\Winapp.dllFilesize
26KB
MD5bd2e160549e7a8592fc636acaf2074ec
SHA1b046a1a38055cec079c50daf5338ef41b304dcce
SHA2561cae2a6538fd54bc9019ed823723add89d3d7502e6242df0d988102224ece3ca
SHA512aedf0ae12975e20b7242f4974b441d288ecf075bacca3db4fe47267c1a08713ba05765d4d202abb76e68c07d6793a26262a5a3dc9735c8efa0ef17f118eb0e42
-
C:\Program Files\YamicSoft\Windows 11 Manager\Windows11Manager.exeFilesize
1.3MB
MD5ac6960b1549bf2efa90c937086cb9ca5
SHA189826902270930bd3b93a33a69818554e0118b99
SHA2564f489defe5f08d676165a3d5958a99e424d74f4b595811d1fb73d75babc35e0d
SHA512023c13f9b8a6fe9967a336d58339047328583113f39f021e89bc0433ca93ad84b6610820a124705ce8795ba0a0b9c5b6bd5f406e72df96ed7ab22dcd0a832aff
-
C:\Program Files\YamicSoft\Windows 11 Manager\WindowsAppUninstaller.exeFilesize
662KB
MD5cb0b0fa342cadf07861aa979fde942a7
SHA1726e70dd4e4ebf82ba3716f99ed491ac12354812
SHA256002a957e84a2606d13a589df69198bdc75327cf9259379329acfaf4503f106d3
SHA512dbdf5e1ae97ea23ac41bc9a835a7cd0fdfa21663e029202f1af28496d7bcdb0ff18f47062ba5508bcd1af371e7fc43f7deb5c1f65211cd1d7f07e73331b1599c
-
C:\Program Files\YamicSoft\Windows 11 Manager\WindowsUtilities.exeFilesize
695KB
MD53be6dd67ed910cfc80e18bc57545dfbf
SHA12de505785b5ae07c4f81b52d4a061242609c6f77
SHA25618dd41c34a175af72d723e50873d8b89cc6aa60623b8a668d9078f6e46f2045f
SHA512cbaab4e1911dd3692f8ca01bfe2a6a191d7ce20d6d07f56021b86ad9caebed50ae4eab2dffed491e4777489ed8bdc3bbc25d5389e5ee23c618cae3da3a1110ef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5bf009481892dd0d1c49db97428428ede
SHA1aee4e7e213f6332c1629a701b42335eb1a035c66
SHA25618236c88bc4fe576f82223cca595133aa3b4e5fd24ebac9fd515b70e6f403ab4
SHA512d05515ff319b0b82030bc9d4a27f0432b613488f945d1dae8b8dfe73c64e651eb39f4141a5d2e157e2afb43dd1dd95b6611c1003ac4e2e80511e6c5cd7cfdf11
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5a51b2d14083d3036ce8a74898e4ac3e8
SHA1182bdd385bde996e006161e329b09499629a425f
SHA25659cb42412926608d86ea4746fa3bb07827ba9e9bed88cc40d033d04c80d3ea32
SHA512d92198f32861a0ee8ab00a80b7685a2d5ee110ab9a845b059d0ba5781c62f77d6afc5df82a33c45a4424edf268c9628844301235ad139d56d7015ed296d7daed
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
408B
MD5d869c86b723ef2930bc4a84a7c7e59b9
SHA120a3e0cc0fb4a40f1489806463400f05e5e989cc
SHA2568e913aadfa2de9add3f4917bde10e445d385f80e86aeba13d6f4d698bcb448e6
SHA512a5393364953bc04d8477bd9369f190616ab4acbb4bf235a3adbe314e64a03847a6107db247695adad52c63129cbbfd0d87a587b1029a27e3915174b0d0653d3d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD53a8e49bc7c58c7872ad6ae818266c5a7
SHA1d4dc5cdba985dc6507da7ac1aece0d19612d3139
SHA256c0ecb5a54a3000f8445411e34a2bc23ca620c0d90275e39b4ad04cc86856d954
SHA512689552eb8f5c106ef3eb6dc7092a1b044391c9fa26f4b256feb1c6a16fe05fc47649672ef6bfaf25eeca8e64faa9f4a541fa958d31821e89682c3af6e2053a30
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD53cef0f1491d47987750820ce60daab22
SHA131d2bea4538e150a2aebc96195d83851f8a9d397
SHA256b179c9a000e76e7208795daeaa56a1c30009877a99407194b4794b32d0bab911
SHA512bf9085aeea3b061c34f48b87469d0b833b29c1bfa89eeda812588139aacd426274bb8e83532635e2147a07750170bb947f4c5440259ac8f12e12c7e2447905a2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
5KB
MD549b559d88040f90ba53ab13c3f343ddb
SHA1e0cc5f66e531374f66d9c91a7448ba366a53f05e
SHA256ad8129d82f418e9a5b79443cd644fa20b08a72a5765a92d699aef2b9282260a1
SHA512c1b0ceb94300ad863d86ced89fbb6d8b20f4983a46cf7b350449518aabdf4e2b08ca560c4eceeadf2cb5537812cae8586bd55c9f5f4d45f91750fb6eaf79c8d9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
5KB
MD533242a7900c3d4f9f980b527163ee253
SHA18b5b7fe6767f66430bbb35ac7f9852886a692dac
SHA25605f1b375f5b4f730fe3eb14f45174f96f4e68b558e38e4bf9b1dfd57e967d1e9
SHA512f65fd9970d9681f5b61b87a20d382424de1e56495831306731ab9239a4388f967a8b275666a54ce7c296eab454ffc3e67619ae0c935a562aceb0e2040cb35983
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD5eec806d6e0971f88f0d64a6dcad42e31
SHA1d911984ea71b3cb6c1bbdce7b27b582099396468
SHA2568cf896281fa881aad34243b585d58798b30884101e37281bfaa5fd86b2d3433f
SHA512c56d002b7ee28d6e8f31c0b754a4328e0e8abf6b6972dea93128e271cc8e053dabdb74319518d88bc670306afd8413114157e99475453e2246e0c267b68cca2a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure PreferencesFilesize
24KB
MD525ac77f8c7c7b76b93c8346e41b89a95
SHA15a8f769162bab0a75b1014fb8b94f9bb1fb7970a
SHA2568ad26364375358eac8238a730ef826749677c62d709003d84e758f0e7478cc4b
SHA512df64a3593882972f3b10c997b118087c97a7fa684cd722624d7f5fb41d645c605d59a89eccf7518570ff9e73b4310432c4bb5864ee58e78c0743c0c1606853a7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
874B
MD5f783f5bbf132fe316f65db102f7f1836
SHA177090509a43a4da3a1961c0a75bc0db91a6a4a20
SHA2567b8870ef0b846bbc8d4157ec17a44c1d6643d2240c1e60f4091a354231af6fcb
SHA5124589cce512a4f84a31569a4e04bb4c3bb84a45a9a9fa6d018c025368c028ac35fcf5004b1ecb889176446b93ab89f62c5625a87a6a1ba0612040721754024eae
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57dc95.TMPFilesize
874B
MD5e3fd0b682ac45c6aea50d16cb655daf1
SHA1660fe65dd665bf7042a2325c44e016f24fa61b7a
SHA2566fc048b18455d699b1dd0016cc31fcfd4e0003af5d0df4ef30db004ca2cc6345
SHA512eacc818385d41652d1a3588a624e320658ae5a37926f514b652aa8d1719afb3dcab4c4ebfaec6597955d282e38499338a93c97581f869e0fc5d2e04fe5896e6e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
10KB
MD5730aa2369dbb81242b78e5662418690d
SHA1ba9a54e87d12c044c87d07f82736dcc0446eb140
SHA256a15257852133cb17b47602b44f46933229f753481cd7b37867d12679a743044e
SHA512d5fecf7c6062bca54b0d506e48f83ab6ac0ada0df971f8e539992f299d5fad5d1251224fcad123fc2311630094c4ccf7ae37ebb047ba1efdb294824be6858c1f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
10KB
MD5760cd91c8e6482cc408cabbbe59dfcf5
SHA121f630578444f73337ca2f14142cdd43bac61fdc
SHA2565c46d690a4c8235fb43ff2f7527dce4e5903e26fabe38a8baf052947d86814b7
SHA5127fe1118695408a379a77d4843d74264b1f85bd8c149b3dc292dc9ff3dc6ee2363ffd7a684ec31071b96eb7b4ea2ce2889db11f44e45a7a377d7fb69771e1c0b9
-
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ftghxury.swo.ps1Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nso4E9A.tmp\System.dllFilesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
C:\Users\Admin\AppData\Local\Temp\nsxD687.tmp\INetC.dllFilesize
238KB
MD538f2b22967573a872426d05bdc1a1a70
SHA1ecae471eb4e515e1006fce645a82b70c8acda451
SHA25683005624a3c515e8e4454a416693ba0fbf384ff5ea0e1471f520dfae790d4ab7
SHA51231bc78bb4efc7c178c2c489b77d890b8806073180fbdd58156907c187cb73b0860701a9a2648da1da4930a8934c9a86b60ea5550315afebe833a681bcb4368e0
-
C:\Users\Admin\Downloads\Windows.11.Manager.v1.3.1.0.zipFilesize
14.5MB
MD55c2b19a59b541f6fb9854ca4631e365b
SHA1169e876b28af11c6daf2fac2c698f5b253db76e8
SHA25666239518f4fd070618f85d198cdba9b1684367608610535f313f39bb4c7c0cab
SHA512ed4a32c28bcd4a2da1cb30245116259883a74502e8bb488277622029e7a18f77ce50e3343f4c5f44f2f5a23fc6310c3cdbd7208b7ce06e9cb67c008da8234179
-
\??\pipe\LOCAL\crashpad_3232_YQELARPMCQBNMYRYMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
memory/5836-996-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-991-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-997-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-999-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-1002-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-1001-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-1000-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-992-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-990-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5836-998-0x00000234AA490000-0x00000234AA491000-memory.dmpFilesize
4KB
-
memory/5884-1054-0x00000000068E0000-0x000000000692C000-memory.dmpFilesize
304KB
-
memory/5884-1069-0x00000000081D0000-0x000000000884A000-memory.dmpFilesize
6.5MB
-
memory/5884-1037-0x0000000005B70000-0x0000000006198000-memory.dmpFilesize
6.2MB
-
memory/5884-1040-0x00000000059F0000-0x0000000005A12000-memory.dmpFilesize
136KB
-
memory/5884-1041-0x0000000006210000-0x0000000006276000-memory.dmpFilesize
408KB
-
memory/5884-1047-0x0000000006280000-0x00000000062E6000-memory.dmpFilesize
408KB
-
memory/5884-1035-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB
-
memory/5884-1052-0x00000000063F0000-0x0000000006744000-memory.dmpFilesize
3.3MB
-
memory/5884-1053-0x0000000006890000-0x00000000068AE000-memory.dmpFilesize
120KB
-
memory/5884-1033-0x00000000054D0000-0x0000000005506000-memory.dmpFilesize
216KB
-
memory/5884-1055-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB
-
memory/5884-1056-0x0000000006E50000-0x0000000006E82000-memory.dmpFilesize
200KB
-
memory/5884-1057-0x000000006F3C0000-0x000000006F40C000-memory.dmpFilesize
304KB
-
memory/5884-1067-0x0000000006E30000-0x0000000006E4E000-memory.dmpFilesize
120KB
-
memory/5884-1068-0x0000000007A60000-0x0000000007B03000-memory.dmpFilesize
652KB
-
memory/5884-1036-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB
-
memory/5884-1070-0x0000000007B90000-0x0000000007BAA000-memory.dmpFilesize
104KB
-
memory/5884-1071-0x0000000072AC0000-0x0000000073270000-memory.dmpFilesize
7.7MB
-
memory/5884-1072-0x0000000007C00000-0x0000000007C0A000-memory.dmpFilesize
40KB
-
memory/5884-1073-0x0000000007E10000-0x0000000007EA6000-memory.dmpFilesize
600KB
-
memory/5884-1074-0x0000000007D90000-0x0000000007DA1000-memory.dmpFilesize
68KB
-
memory/5884-1075-0x0000000007DC0000-0x0000000007DCE000-memory.dmpFilesize
56KB
-
memory/5884-1076-0x0000000007DD0000-0x0000000007DE4000-memory.dmpFilesize
80KB
-
memory/5884-1077-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB
-
memory/5884-1078-0x0000000007ED0000-0x0000000007EEA000-memory.dmpFilesize
104KB
-
memory/5884-1079-0x0000000007EB0000-0x0000000007EB8000-memory.dmpFilesize
32KB
-
memory/5884-1080-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB
-
memory/5884-1034-0x0000000072AC0000-0x0000000073270000-memory.dmpFilesize
7.7MB
-
memory/5884-1092-0x0000000005530000-0x0000000005540000-memory.dmpFilesize
64KB