hxxps://translate[.]google[.]com/hxxps://translate[.]google[.]com/

Analysis

max time kernel
375s
max time network
379s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-03-2024 10:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://translate.google.com/https://translate.google.com/

Score

9^/10

discovery ransomware

Malware Config

Signatures

Renames multiple (138) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Downloads MZ/PE file

Checks computer location settings 2 TTPs 9 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

bitdefender_online.exebitdefender_online.exeagent_launcher.exeagent_launcher.execwvAFDF.tmpbitdefender_online.exeagent_launcher.exeagent_launcher.exebitdefender_online.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	bitdefender_online.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	bitdefender_online.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	agent_launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	agent_launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	cwvAFDF.tmp
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	bitdefender_online.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	agent_launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	agent_launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\Control Panel\International\Geo\Nation	bitdefender_online.exe

Executes dropped EXE 46 IoCs

Processes:

bitdefender_online.exebitdefender_online.exebitdefender_online.exebitdefender_online.exebitdefender_online.exeagent_launcher.exeagent_launcher.exeagent_launcher.exeagent_launcher.exebddeploy.exebddeploy.exebddeploy.exebddeploy.exesetuppackage.exesetuppackage.exesetuppackage.exesetuppackage.exeinstaller.exeinstaller.exeinstaller.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeDiscoverySrv.exeDiscoverySrv.exeProductAgentService.exeProductAgentUI.exeWatchDog.exeinstaller.exeproductagentservice.execwvAFDF.tmpProductAgentService.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeDiscoverySrv.exeDiscoverySrv.exeProductAgentService.exeBPInstaller.exeBPInstaller.exeagentctrl.exeagentctrl.exeagentctrl.exeagentctrl.exeagentctrl.exe

pid	process
3612	bitdefender_online.exe
4032	bitdefender_online.exe
1376	bitdefender_online.exe
1140	bitdefender_online.exe
3076	bitdefender_online.exe
3632	agent_launcher.exe
1564	agent_launcher.exe
4512	agent_launcher.exe
3064	agent_launcher.exe
4244	bddeploy.exe
2940	bddeploy.exe
3280	bddeploy.exe
3040	bddeploy.exe
4040	setuppackage.exe
4404	setuppackage.exe
5124	setuppackage.exe
5160	setuppackage.exe
5252	installer.exe
5328	installer.exe
5412	installer.exe
5664	ProductAgentService.exe
5708	ProductAgentService.exe
5728	ProductAgentService.exe
5844	ProductAgentService.exe
5876	DiscoverySrv.exe
6032	DiscoverySrv.exe
1840	ProductAgentService.exe
2004	ProductAgentUI.exe
5948	WatchDog.exe
4516	installer.exe
1840	productagentservice.exe
5456	cwvAFDF.tmp
4228	ProductAgentService.exe
2752	ProductAgentService.exe
3880	ProductAgentService.exe
2992	ProductAgentService.exe
1212	DiscoverySrv.exe
2956	DiscoverySrv.exe
3688	ProductAgentService.exe
1536	BPInstaller.exe
4640	BPInstaller.exe
6012	agentctrl.exe
4600	agentctrl.exe
6136	agentctrl.exe
768	agentctrl.exe
5568	agentctrl.exe

Loads dropped DLL 64 IoCs

Processes:

installer.exeinstaller.exeinstaller.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeDiscoverySrv.exeregsvr32.exeDiscoverySrv.exeProductAgentService.exeProductAgentUI.exeWatchDog.exeinstaller.exeproductagentservice.exeProductAgentService.exeProductAgentService.exeProductAgentService.exeProductAgentService.exe

pid	process
5328	installer.exe
5328	installer.exe
5252	installer.exe
5328	installer.exe
5328	installer.exe
5252	installer.exe
5252	installer.exe
5252	installer.exe
5412	installer.exe
5412	installer.exe
5412	installer.exe
5412	installer.exe
5328	installer.exe
5252	installer.exe
5412	installer.exe
5412	installer.exe
5412	installer.exe
5664	ProductAgentService.exe
5708	ProductAgentService.exe
5728	ProductAgentService.exe
5728	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5876	DiscoverySrv.exe
5876	DiscoverySrv.exe
5968	regsvr32.exe
5968	regsvr32.exe
6032	DiscoverySrv.exe
6032	DiscoverySrv.exe
6032	DiscoverySrv.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
1840	ProductAgentService.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
2004	ProductAgentUI.exe
5948	WatchDog.exe
5948	WatchDog.exe
4516	installer.exe
4516	installer.exe
4516	installer.exe
4516	installer.exe
4516	installer.exe
4516	installer.exe
4516	installer.exe
1840	productagentservice.exe
4228	ProductAgentService.exe
2752	ProductAgentService.exe
3880	ProductAgentService.exe
3880	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 10 IoCs

Processes:

DiscoverySrv.exeProductAgentService.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_2D95862FBF9F4D39565F4C6134C2CFB4	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA4458E7366E94A3C3A9C1FE548B6D21_2D95862FBF9F4D39565F4C6134C2CFB4	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_6F10577732640C329D7BADD5F344FE3D	ProductAgentService.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA4458E7366E94A3C3A9C1FE548B6D21_6F10577732640C329D7BADD5F344FE3D	ProductAgentService.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9	DiscoverySrv.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9	DiscoverySrv.exe

Drops file in Program Files directory 64 IoCs

Processes:

BPInstaller.exeinstaller.exeinstaller.exeProductAgentService.exe

description	ioc	process
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\msvcp140_1.dll	BPInstaller.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\skin\images\close.svg	installer.exe
File created	C:\Program Files\Bitdefender Agent\bdreinit.exe	installer.exe
File created	C:\Program Files\Bitdefender Agent\lang\sv-SE\bdsubwiz.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images\logo-w.svg.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Agent\lang\th-TH\ProductAgentUI.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\settings\UPNPDescr.xml	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\tr-TR\ProductAgentUI.txtui.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\bdch_bdec.ini	installer.exe
File created	C:\Program Files\Bitdefender Agent\bdnc.uuid.tmp.5844	ProductAgentService.exe
File created	C:\Program Files\Bitdefender Agent\update_package\lang\pt-PT\bdsubwiz.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\installer\additional.dll	installer.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\gui\popup.html	BPInstaller.exe
File created	C:\Program Files\Bitdefender Agent\lang\tr-TR\ProductAgentUI.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\css\main.ui.css	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\WatchDog.exe	installer.exe
File created	C:\Program Files\Bitdefender Agent\skin\html\Agent\progress.html	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\ja-JP\bdsubwiz.txtui.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images\minimize.svg.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\lang\cs-CZ	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\lang\fr-FR\ProductAgentUI.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\lang\pl-PL\bdsubwiz.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\update_package\skin\img\btn-close.svg	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\skin\images\loader.png	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images\show-pass-checked.svg.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\iservconfig.dll	installer.exe
File created	C:\Program Files\Bitdefender Agent\lang\ar-SA\bdsubwiz.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\ko-KR\ProductAgentUI.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\vi-VN\ProductAgentUI.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images_2\common\icon_quest.svg.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\html\Agent\login2_error.html	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\lang\en-US	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\skin\css	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\skin\images\show-pass-checked.svg	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\bdec.ini	ProductAgentService.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\gui\images\installer\avatar-uninstall.png	BPInstaller.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images_2	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\ui	installer.exe
File created	C:\Program Files\Bitdefender Agent\bdnc.ini	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images\pattern2.png.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\AgentCtrl.exe	BPInstaller.exe
File created	C:\Program Files\Bitdefender Agent\update_package\lang\es-ES\ProductAgentUI.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\installer\sciter.dll.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Agent\BDSubWiz.exe	installer.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\competitive.json	BPInstaller.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\nl-NL	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\update_package\bdnc.dll	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\bdicon.ico.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\settings\SettingsAdaptor_hypervisor.xml.conf.tpl	BPInstaller.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images\check-round-progress.svg.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Agent\\update_package\lang\pt-BR\bdsubwiz.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\lang\nl-NL\bdsubwiz.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\ui\ltr\bdsubwiz.ui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\BDSubWiz.exe.renamed-ucyyv	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\sciter.dll	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\lang\nl-NL\bdsubwiz.txtui	installer.exe
File created	C:\Program Files\Bitdefender Agent\skin\images_2\common\status_red.svg	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\images_2\common\status_red.svg	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\bdreinit.exe.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Agent\update_package\lang\es-ES\bdsubwiz.txtui	installer.exe
File opened for modification	C:\Program Files\Bitdefender Agent\skin\img\icons\icon-warn.svg.renamed-ucyyv	installer.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\archives\antiphishing_bddci.exe	BPInstaller.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\archives\selfpr.exe	BPInstaller.exe
File created	C:\Program Files\Bitdefender Antivirus Free\kitinstaller\gui\scripts\install_notifications.tis	BPInstaller.exe

Drops file in Windows directory 2 IoCs

Processes:

svchost.exe

description	ioc	process
File created	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll	svchost.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll	svchost.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

ProductAgentService.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ProductAgentService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	ProductAgentService.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 64 IoCs

Processes:

ProductAgentService.exeDiscoverySrv.exeDiscoverySrv.exeProductAgentService.exeDiscoverySrv.exeWatchDog.exeDiscoverySrv.exe

description	ioc	process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\ROOT	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DiscoverySrv.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	WatchDog.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	ProductAgentService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DiscoverySrv.exe

Modifies registry class 64 IoCs

Processes:

regsvr32.exeregsvr32.exe

description	ioc	process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\PROGRAMMABLE	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice\ = "UPNPDevice Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice\CurVer\ = "ProductAgent.UPNPDevice.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\TypeLib\ = "{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ = "IUPnPService_SCPD"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\FLAGS\ = "0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\HELPDIR	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\TYPELIB	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\ = "ProductAgent UPNP Service Type Library"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32\ = "C:\\Program Files\\Bitdefender Agent\\DiscoveryComp.dll"	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\VersionIndependentProgID\ = "ProductAgent.UPNPDevice"	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\VERSIONINDEPENDENTPROGID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ = "IUPnPService_SCPD"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\TypeLib\ = "{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\0\win32\ = "C:\\Program Files\\Bitdefender Agent\\DiscoveryComp.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32\ = "C:\\Program Files\\Bitdefender Agent\\DiscoveryComp.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice\CurVer	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ProgID\ = "ProductAgent.UPNPDevice.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\VersionIndependentProgID\ = "ProductAgent.UPNPDevice"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\TypeLib\ = "{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\0\win32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\PROGID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice.1\CLSID\ = "{CB23A858-ED47-425B-AAD2-D809C11E1DA6}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice.1\ = "UPNPDevice Class"	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice.1	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32\ThreadingModel = "Free"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice\CurVer\ = "ProductAgent.UPNPDevice.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ = "UPNPDevice Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ProgID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ProgID\ = "ProductAgent.UPNPDevice.1"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\FLAGS	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice\ = "UPNPDevice Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ProductAgent.UPNPDevice.1\CLSID\ = "{CB23A858-ED47-425B-AAD2-D809C11E1DA6}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ = "UPNPDevice Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\ProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\InprocServer32\ThreadingModel = "Free"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CB23A858-ED47-425B-AAD2-D809C11E1DA6}\TypeLib\ = "{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D19631EE-4E47-4BA9-BA2E-C5FF909E2C61}\1.0\HELPDIR\ = "C:\\Program Files\\Bitdefender Agent"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{753FDF26-44A2-47B5-B65E-2E207BD5BC0C}	regsvr32.exe

NTFS ADS 1 IoCs

Processes:

msedge.exe

description ioc process

File opened for modification C:\Users\Admin\Downloads\Unconfirmed 689056.crdownload:SmartScreen msedge.exe

description	ioc	process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 689056.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 40 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exemsedge.exeProductAgentService.exeinstaller.exeProductAgentService.exe

pid	process
4612	msedge.exe
4612	msedge.exe
1148	msedge.exe
1148	msedge.exe
4640	identity_helper.exe
4640	identity_helper.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
1548	msedge.exe
1548	msedge.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
4516	installer.exe
4516	installer.exe
5844	ProductAgentService.exe
5844	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe
2992	ProductAgentService.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs

Processes:

msedge.exe

pid	process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

Processes:

AUDIODG.EXEinstaller.exeProductAgentService.exeinstaller.exeProductAgentService.exe

description	pid	process
Token: 33	2348	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2348	AUDIODG.EXE
Token: SeRestorePrivilege	5412	installer.exe
Token: SeDebugPrivilege	5844	ProductAgentService.exe
Token: SeDebugPrivilege	5844	ProductAgentService.exe
Token: SeDebugPrivilege	5844	ProductAgentService.exe
Token: SeDebugPrivilege	5844	ProductAgentService.exe
Token: SeDebugPrivilege	4516	installer.exe
Token: SeDebugPrivilege	5844	ProductAgentService.exe
Token: SeRestorePrivilege	4516	installer.exe
Token: SeDebugPrivilege	2992	ProductAgentService.exe

Suspicious use of FindShellTrayWindow 38 IoCs

Processes:

msedge.exe

pid	process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

BPInstaller.exeBPInstaller.exe

pid process

1536 BPInstaller.exe
4640 BPInstaller.exe

pid	process
1536	BPInstaller.exe
4640	BPInstaller.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 1148 wrote to memory of 4392	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4392	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4172	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4612	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4612	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe
PID 1148 wrote to memory of 4664	1148	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://translate.google.com/https://translate.google.com/
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff974b346f8,0x7ff974b34708,0x7ff974b34718
2⤵
PID:4392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
2⤵
PID:4172

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
2⤵
PID:4664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:1
2⤵
PID:4512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
2⤵
PID:5084

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
2⤵
PID:2672

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
2⤵
PID:2920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
2⤵
PID:2008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
2⤵
PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
2⤵
PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
2⤵
PID:2304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
2⤵
PID:1016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1
2⤵
PID:996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
2⤵
PID:4288

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
2⤵
PID:316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1936 /prefetch:1
2⤵
PID:3800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2848 /prefetch:1
2⤵
PID:1536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
2⤵
PID:4556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6716 /prefetch:1
2⤵
PID:4208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
2⤵
PID:3396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7008 /prefetch:1
2⤵
PID:3492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6748 /prefetch:8
2⤵
PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
2⤵
PID:1484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1
2⤵
PID:1352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6156 /prefetch:1
2⤵
PID:3328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1
2⤵
PID:676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7112 /prefetch:8
2⤵
PID:936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1
2⤵
PID:4052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1
2⤵
PID:1284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3636 /prefetch:8
2⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7500 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6580 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1548

C:\Users\Admin\Downloads\bitdefender_online.exe
"C:\Users\Admin\Downloads\bitdefender_online.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:3612

C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe"
3⤵
- Checks computer location settings
- Executes dropped EXE
PID:3064

C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe"
4⤵
- Executes dropped EXE
PID:2940

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe"
5⤵
- Executes dropped EXE
PID:4404

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5328

C:\Users\Admin\Downloads\bitdefender_online.exe
"C:\Users\Admin\Downloads\bitdefender_online.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:4032

C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe"
3⤵
- Checks computer location settings
- Executes dropped EXE
PID:1564

C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe"
4⤵
- Executes dropped EXE
PID:3280

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe"
5⤵
- Executes dropped EXE
PID:5160

C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\installer.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4516

C:\Program Files\Bitdefender Agent\productagentservice.exe
"C:\Program Files\Bitdefender Agent\productagentservice.exe" stop
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1840

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" install
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4228

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" enable
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2752

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" start "C:\Users\Admin\Downloads\bitdefender_online.exe"
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3880

C:\Users\Admin\Downloads\bitdefender_online.exe
"C:\Users\Admin\Downloads\bitdefender_online.exe"
2⤵
- Executes dropped EXE
PID:1376

C:\Users\Admin\Downloads\bitdefender_online.exe
"C:\Users\Admin\Downloads\bitdefender_online.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:3076

C:\Users\Admin\AppData\Local\Temp\RarSFX1\agent_launcher.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX1\agent_launcher.exe"
3⤵
- Checks computer location settings
- Executes dropped EXE
PID:4512

C:\Users\Admin\AppData\Local\Temp\RarSFX1\bddeploy.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX1\bddeploy.exe"
4⤵
- Executes dropped EXE
PID:4244

C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\setuppackage.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\setuppackage.exe"
5⤵
- Executes dropped EXE
PID:4040

C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\installer.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\installer.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5252

C:\Users\Admin\Downloads\bitdefender_online.exe
"C:\Users\Admin\Downloads\bitdefender_online.exe"
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:1140

C:\Users\Admin\AppData\Local\Temp\RarSFX2\agent_launcher.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX2\agent_launcher.exe"
3⤵
- Checks computer location settings
- Executes dropped EXE
PID:3632

C:\Users\Admin\AppData\Local\Temp\RarSFX2\bddeploy.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX2\bddeploy.exe"
4⤵
- Executes dropped EXE
PID:3040

C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\setuppackage.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\setuppackage.exe"
5⤵
- Executes dropped EXE
PID:5124

C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\installer.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\installer.exe"
5⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:5412

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" install
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5664

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" enable
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5708

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe" start "C:\Users\Admin\Downloads\bitdefender_online.exe"
6⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6724 /prefetch:1
2⤵
PID:4788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
2⤵
PID:1836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3724 /prefetch:1
2⤵
PID:3980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
2⤵
PID:4380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3133429957997843358,14553338797775296034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
2⤵
PID:5900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1932

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x500 0x50c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2348

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5844

C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
"C:\Program Files\Bitdefender Agent\DiscoverySrv.exe" install
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Modifies data under HKEY_USERS
PID:5876

C:\Windows\SysWOW64\regsvr32.exe
regsvr32 /s "C:\Program Files\Bitdefender Agent\DiscoveryComp.dll"
3⤵
- Loads dropped DLL
- Modifies registry class
PID:5968

C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
"C:\Program Files\Bitdefender Agent\DiscoverySrv.exe"
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:6032

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"ProductAgentService.exe" login_silent
2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1840

C:\Program Files\Bitdefender Agent\ProductAgentUI.exe
ProductAgentUI.exe show=progress event_retry=Global\7295237F-E98C-4C46-A4A4-07F0D66278C2
2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2004

C:\Program Files\Bitdefender Agent\WatchDog.exe
"C:\Program Files\Bitdefender Agent\WatchDog.exe" install
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:5948

C:\Windows\TEMP\bd_AFDE.tmp\cwvAFDF.tmp
"C:\Windows\TEMP\bd_AFDE.tmp\cwvAFDF.tmp" /source:web
2⤵
- Checks computer location settings
- Executes dropped EXE
PID:5456

C:\Users\Admin\AppData\Local\Temp\RarSFX2\BPInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\RarSFX2\BPInstaller.exe" -install -kitpath="C:\Windows\TEMP\bd_AFDE.tmp\cwvAFDF.tmp" /source:web
3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:1536

C:\Program Files\Bitdefender Antivirus Free\kitinstaller\BPInstaller.exe
"C:\Program Files\Bitdefender Antivirus Free\kitinstaller\BPInstaller.exe" -install -kitpath="C:\Windows\TEMP\bd_AFDE.tmp\cwvAFDF.tmp" /source:web
4⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4640

\??\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe
"\\?\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe" avf_get_agent_field --key="globalex" --field_name="lang"
5⤵
- Executes dropped EXE
PID:6012

C:\Program Files\Bitdefender Antivirus Free\kitinstaller\agentctrl.exe
"C:\Program Files\Bitdefender Antivirus Free\kitinstaller\agentctrl.exe" avf_get_agent_field --key="globalex" --field_name="lang"
5⤵
- Executes dropped EXE
PID:4600

C:\Program Files\Bitdefender Antivirus Free\kitinstaller\agentctrl.exe
"C:\Program Files\Bitdefender Antivirus Free\kitinstaller\agentctrl.exe" avf_get_agent_field --key="globalex" --field_name="lang"
5⤵
- Executes dropped EXE
PID:6136

\??\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe
"\\?\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe" avf_get_agent_field --key="globalex" --field_name="anon_id"
5⤵
- Executes dropped EXE
PID:768

\??\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe
"\\?\c:\program files\bitdefender antivirus free\kitinstaller\agentctrl.exe" avf_add_app --appid="com.bitdefender.avfree" --name="Bitdefender Antivirus Free" --status="disabled" --version="1.0.0.3"
5⤵
- Executes dropped EXE
PID:5568

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
1⤵
- Drops file in Windows directory
PID:5224

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"C:\Program Files\Bitdefender Agent\ProductAgentService.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2992

C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
"C:\Program Files\Bitdefender Agent\DiscoverySrv.exe" install
2⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
PID:1212

C:\Windows\SysWOW64\regsvr32.exe
regsvr32 /s "C:\Program Files\Bitdefender Agent\DiscoveryComp.dll"
3⤵
- Modifies registry class
PID:2384

C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
"C:\Program Files\Bitdefender Agent\DiscoverySrv.exe"
2⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
PID:2956

C:\Program Files\Bitdefender Agent\ProductAgentService.exe
"ProductAgentService.exe" login_silent
2⤵
- Executes dropped EXE
PID:3688

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
0699680dd6089a60110490d6832b04d1

SHA1
5665eb5edfae3f2eb88ebc913f674ea72afbd687

SHA256
ae8da1f1147f467e170c33c3ebd6db89c9cff06fe9d8762d86a8a24424f1685b

SHA512
a11aad46c295bb52dace30781fdea110f4bbb22c20d590521d3c56b01a88f58df5daf653f3b3ff50d1a5d5d74e3eec7df51b505e580bd8dc4d779ea4b361a2ee

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
d30faae14dac56618482bff12202449f

SHA1
6f25f7344239b002b5728bb290094942493cd754

SHA256
8e7f1ce5e2d92639183164809e65b7c91853150d82a6e2cbc963c4391d6ca17e

SHA512
53e61c40e0dd69771fd25f1e47ec160a1a76e8bfe73b10004a5748b77c08f71a510bc8c17649006f8d3be8dc7ac6a848887b276512e240a16bb4b3ed11ab092e

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
da4bc1a4ede7b8e604e2a487d848883c

SHA1
102677c04799680c0c3d4af69149577b438ec350

SHA256
685c936b4155abe6e00967d0224d4dce468e0a012744010cfadd486cdf4de33f

SHA512
4f28ba8b5a674cabd71fdf148abf1285c7bf175999f42373ff7a85d5fa3ef6ee72515aa7b4d8dd1280a1dcc0cbf217cda20e01938c083b1224afff8161656adf

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
6a395fced0e505cb88a22046cba31e2d

SHA1
a6499253703999750a8c3f61e9d05419c5f77199

SHA256
de469b7acb768ea13f35ea1aadb340cdbebafde06e73c239504ced70a49a8fd7

SHA512
cf1625e9708252b9408ea96855f3e5702d69fe02b05dd9f63704951b4e0468054e9053941fa9b162a91bcf1ea0eb645f6ce46e0fa29577d1bf73176228b156ea

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
207380dc6a291d1bcac2a3585fd9fe12

SHA1
645c944af9ce1e7e8010177ea42265f803086473

SHA256
46d7592e6e26bcaeba7a4ba445868b23c2e4a6b84fbdbb91b8f6239f9f68133d

SHA512
8bc621949074d188c9e4991dbd9aaa743e600737a11d3d23a4a3e6492f7d3d65f653b9224724d9b363e21a78fff9b48e31b989bdb40489758d104608a7b6459a

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
25da6cb665fcb7d5965d50815ac6376a

SHA1
23713f3689fd46d26932b920d3ad2df7e5b56932

SHA256
4793ad21aad82bd7fc7769cc26657cceebb26a859b16fedda6f517ef790dc867

SHA512
e4a3934b5c7930f7e3fb0bf4a1974973122fee9830e1966766babb0e4f9104238347178adb7450484c5d0c3d930ef2e18be67574fa2bc5f7a1a633cf0b145358

Download Submit
C:\Program Files\Bitdefender Agent\bdch.xml
Filesize
1KB

MD5
fadd6d47b85c41f8c4a0d8a921c941c1

SHA1
1b633c4e12347ee3ae5dd11575479fb2648dc2ce

SHA256
7f1c29f1586cd8ea23210f40e73bbd4aa0e25e75f4041b41289d45ebb6cad838

SHA512
ddf638fd787714192538d95f7529b9486a8fde9f7932fd0b070d89446dc68a805da6173f16ff51e25bb4b63474d100535ab57d571880dadc305f46a93e4c77cf

Download Submit
C:\Program Files\Bitdefender Agent\bdec.ini
Filesize
98B

MD5
99a5fbf968e89b9b81f416091b92834c

SHA1
18e5ca7fbb5403341bbf2915efec405c7c142a2b

SHA256
dc24ff885963efbcb9b3b77174d007efe3ada5616ff2611a339094b88f885ee5

SHA512
2cff2e78eb8bc9f9b03760de855cdcb3ef06227fd89fb6be0dd97853b7b09aed69a721aee688c8d85c530b3d986db9606ec5ccfebfdcf000e62df29393bdc4db

Download Submit
C:\Program Files\Bitdefender Agent\update_package\BDSubWiz.exe
Filesize
928KB

MD5
28cb7b261f4eb97e8a4b3b0d32f8def1

SHA1
21a942273c14e4b9d3faa58e4de1fd4d5014a1ed

SHA256
2da00de67720f5f13b17e9d985fe70f10f153da60c9ab1086fe58f069a156924

SHA512
2e986a09ec5668fbf062f2865f1e187b24b4bbe6a86893e583e4da6b6e83632b41d31cabc3aa8c2e44167633d3f0f48b411af8d41829f3609757714f1a01383c

Download Submit
C:\Program Files\Bitdefender Agent\update_package\DiscoveryComp.dll
Filesize
570KB

MD5
ff7085c13ed41156908d4eea51e91132

SHA1
6017dcd5024b1d38375a1356b642d3d74f953c1b

SHA256
ddc643cb1f9a74457788d5e34868015a90865433b16b15d35e6a6a3d322b69c0

SHA512
9f8bd7a175a28a59800e80ec4961567a0d22cb55381a02b7a23c02aaf6ac146c141c18e0eb5959902834c748803781dc6ed75ce050c76b6d992ceece87b37711

Download Submit
C:\Program Files\Bitdefender Agent\update_package\DiscoverySrv.exe
Filesize
298KB

MD5
4437cea8f5cb622ede6f38942755109d

SHA1
cf367eeb2c1073d96af10cf22e364c90c03c8485

SHA256
4013076ddbd5e67facef4e217946016e8debe4099a4c225f8f784afd8ea5d115

SHA512
98966493847ce900784b9b099aeda4554d4e24425c8412e12dd79e5e7ade6db2eb2b6d44152af975171118c343f1edf4ea3a9ee26ae9d89991ccce5514e7d6cb

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ProductAgentDP.dll
Filesize
420KB

MD5
947ca54968c57397aa6e98963b613c37

SHA1
8e9d768f77497e2c26c5381c00fefd035ed5269a

SHA256
011412acdfb809a87f764137e943911a2bd8c153f93c304824967c492beb384f

SHA512
ced703c72ca4442e1ad50bba130230a046fb9bc0c9e57ed168ed53c775f7893f82801b0b6991f64a4d75eba91fcd5851097b0811b6fdd6435c700b8791348c94

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ProductAgentService.exe
Filesize
1.2MB

MD5
eedafb8c59a2c91ec1fd7b4b653f4945

SHA1
f7959b5452d2b08be5721b95dc07db42a41d53f2

SHA256
7fce237a13bbb1ed90f1f77293877e236746f530170c9c8c835749ee74689cf3

SHA512
794a17a04ac114838a2d5a69bb5516d5a0fcf3911f07049438e255bcddf243cbaa15f50554fe269e425f5634a1451fb193be7cf0438edb77467cee8865906c35

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ProductAgentService.logger.xml
Filesize
629B

MD5
5e61e8ef5fa77eed1ff12af813866604

SHA1
4793fd8b8ea4127286e3b11b8a9f3c9ef002254c

SHA256
fa7593c19196a9c66c32224f58aab45ad1bcdba326c42e223c30d1965fc1d9ec

SHA512
7659591cd22ba7690a931635816f38139a0aea00c281b2ca92f2593b92dbb75c2063eb2dd30bdee4214062f01848c9d7379ac17891c02739cd4af9befde54049

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ProductAgentUI.exe
Filesize
1.3MB

MD5
476a0d0351f352020c81994565f894a6

SHA1
297e5e1d8cf9c66ae83be69ed97d4d5d18a4a3e0

SHA256
d33c1e4017eee8368c92fb01009e380563da7747d24318b999fe2ec011a57b1c

SHA512
bd8e60dd7931d14a33e7471fcc7865fb85afdbc8251d20c435af0c770948f8d5c937843b75dceb71d5371f63b11ba8719abdb3794f46cf970acf33d8b0bebc60

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ProductAgentUI.logger.xml
Filesize
624B

MD5
920ffb7ababdded04065bcd7471c03f6

SHA1
ee40255442eeb2f95edb8c3f74781955ce35198d

SHA256
ce170bcd1cf58e8b033a6fc98090160858ca4f721bb9738cb690540aad5fb8b1

SHA512
7c45b26d505fd0dd61f9159b921506d058c1c7b43dcda96c614c55f0ce071cf3ebf3af311a43c7e15c08e789ba68aec066ff2fb15a2b573f755881a57b42ba94

Download Submit
C:\Program Files\Bitdefender Agent\update_package\WatchDog.exe
Filesize
243KB

MD5
eecf3791ccfe0185f1d02df9b3706698

SHA1
9281c986973cf51d448e3d7ead53c163a3f0984f

SHA256
ed41163108108e27d0c90558c7787839764d326c6dca76a433c58c26c4b3d408

SHA512
74f8a3f030936a1b7292c25b204428e9a868a708a05202956697f22bbc831f1da17bdc36d52bc96e5aed55a2c5796e4b3bf972b5c7e21348885d8eb91f30e540

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdch.dll
Filesize
1.1MB

MD5
9bc44ec3d492d1b0424d46cde40eac0a

SHA1
63506a18d680fbc651c46d36822118d8efd0c289

SHA256
912e0b774e7a5caa82212affa00e676d1eeef9f19098abaae90ba969968d5cb0

SHA512
e144e87c6f3a50928c34b845337dba50bb6fb585f4e57810f5e287079013250ccdb6d3c4045141b1e0a5949080c398ededdff915fe9a822211a7a2142d6988d5

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdch_bdec.ini
Filesize
129B

MD5
96d15c4f3db04429631866751a1d2890

SHA1
61066ffead2b6859e4d3fd497a78b05343ccf25e

SHA256
e8d31c1de790f738ef75daa0402584560a0672402d0d3ded0899d2dbc95fb911

SHA512
2e5c94e2d92eadd28f604ed1f04d6e2dc9d9a4ffb3c2270e9d19792ad41c0c536260616a17b433f4f2bc57b31b116ffa06eefb61955b98029f15593db4122189

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdec.dll
Filesize
344KB

MD5
54b46a40e6528784b7e8fc1eaa18f9a3

SHA1
44cf214d618ec398950076689093fd126566f202

SHA256
b461c2276864e914f800ffab552d07b74a4dbc63ce1d65dea543091fe47f6a07

SHA512
992822401f2d1e0965528f14fabd87bf9efb1facf7e567512498e03bb155d5ae3c800657e0cb845c99d71df8f7d0f6d91dbe207e7434c719a5a8a39f975169ef

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdicon.ico
Filesize
310KB

MD5
b0074747b69fbcb62c6861dcd71a0b9d

SHA1
a5bb500adad4557dd690a447b4abc55baeeb9d05

SHA256
d4ad680b92451ed53e4dbc6a978f8eb3f33a0a11adf9e0f1a1d816271dd83935

SHA512
960cca765cdf5a364c30f228aa071b1d53f951162f33a1eabd5497fff60ee19db9cd7f311dd6e104b1bfb719bc001fe14bc4341b4f30b148afdf9258828c758a

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdnc.client_id
Filesize
8B

MD5
2fed17ce3e49c68ab8e591b7d755a6bf

SHA1
f5cedd49413b549bc0a0bce4e47bcedb07199e50

SHA256
e1e50fbcd6c4759342f2400aadb4e22ea5b44ce4061f5127bf935615ff588b07

SHA512
1b8c8510e13070530a74fa02a454b06d165ef29cd920bbc470cba1f68631b5d4a7e82e35208a477dc38d7f8e218ac37c6d35634afef7d8afe08fea016bbe778b

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdnc.dll
Filesize
1.4MB

MD5
6b826a719ebecb0e353329e0fe6bddba

SHA1
570eb181f522b1d691de6f34cc7a27c7c5d3bb13

SHA256
a008edaa7cc279543a459b984267ea50869bfafee23a889b8ed133ab1d594cfd

SHA512
a9f314d2321a36648c29391192ed9641fa6ce94c5f76c162ce9c444b993e65002563261a5c876cd279054b87e9f94caab247cee4dffb701c89c73c9d3f1cf41d

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdnc.ini
Filesize
164B

MD5
96b5e37e6494da2a8f09e98df5c58004

SHA1
dbbdd9d6dd0a685e6841efea364b547ac2172443

SHA256
dd5c7a764b9fea6f8c458d9b669b5764c46284dea68ce52b43136c4812d27fd7

SHA512
c35518b34e91dba5424e790398d9d1970bfa8baa99b164fad41b0f52b14b633e5846730a320d31f8b95d5fba9519e6a256915a71db412cc07411f6337f50610c

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdnc.ini.md5
Filesize
34B

MD5
b0305e5ee72ba268d281996038a6ee57

SHA1
80b974606576ac0c79cc5ba4364ca883e3644728

SHA256
5ace615a54dc4c1b094e7678b4793f15ca7f413b05985c433135e132e0137e96

SHA512
a09c61e5df2b9df0512dcc1227e3d9bd5b28e029eff6fe9da5029ffbff39548e3e5df67ca2a6b9aee05d4d073ecacadee3f6bf8b6488c72f44f66322610d83e9

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bdreinit.exe
Filesize
350KB

MD5
099d772bbeb622e833e23f848e329ae9

SHA1
264a8651906d77429fd6ec93343d50de50b3975a

SHA256
8f83fa1b99836012b6331066b77feea59aebfbce11bcd093517eda9071a49ce5

SHA512
91466fcd15943d0cca37b6dfe780f088085f535867a59cb5634123205822bbeda0219a551e1ebafe996dd89955b634a8f04679bff4eb6930ffef872a35265695

Download Submit
C:\Program Files\Bitdefender Agent\update_package\bootstrap_token.conf
Filesize
59B

MD5
b8fb319b2e657184cf76718e3f428412

SHA1
a8ad15039752ea9b4dd1164d67a1e227ca54404e

SHA256
ce28d8724306c7687048a782cf557b470ca5219b5fa8cf5bf63165672429f7c7

SHA512
ec3fda1e83847793ad51213f69b4b6003e1256d227e685267ca9e1169779a554395bbf9d10c79c7865b66bea15c10f5fc7f51631eb7d985729c30d616cc51408

Download Submit
C:\Program Files\Bitdefender Agent\update_package\iservconfig.dll
Filesize
831KB

MD5
2352c5f965d18c4e687aaa80acffea1a

SHA1
15ca0b0c9ad64291aa57e6f688534bc348fa2a3b

SHA256
5201bb34ccb493ea8f52be2ec981296c2d6c7f63eb45e196b9f845c2eea448de

SHA512
951d48b34e21f6ace1701b4ede8e453ce1f0abdfeb63d62e47043c4bfdf14ede5cda0efad858acdc01da4d7e60ea54c524819f50f2e8c7667f18a117cdd213fc

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ar-SA\ProductAgentUI.txtui
Filesize
26KB

MD5
67aad72620e4237ec33527257f6e67a9

SHA1
1523d2180123056d99c8ca940dfb3cd76e2e6dac

SHA256
02d6ac24a6c8b0ffcaf69727302e338e515295812b7a477aa07d8d7f9cff09f1

SHA512
cfb0523ad43a22352d53e3bb77fa34b565c3961e97afa184f384aba2916361ae9978067f2ccd10ebf718ea23ba433d1ef0a7cd71b195fa7ca07b2b071457a2de

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ar-SA\bdsubwiz.txtui
Filesize
23KB

MD5
5fcfc6fa904f966d23e692858ef52682

SHA1
8046835382680601c1adf067225f76e4b8bb1a87

SHA256
776b1d4dc651af23c4df4c1dd71c6f033ee7b65f2b79184185d7bc5123a2a804

SHA512
0f0f9e2e7c8056e438101ae1c2b51f1cb5b60419bf226ddd19f59969f3c62be171bf2acc77be6425e40ca8b8e1cba83d32a4717663ba1539581d6b8bc747aaa4

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\cs-CZ\ProductAgentUI.txtui
Filesize
26KB

MD5
3cdd542328034f366daa6b5c9ea1b4fb

SHA1
6379a1c028b1974f3952e51df0b5fd2ba16823b3

SHA256
c39940427d9380a35ff1f593d208c56efe21c868c05bbe503ef4f8b5e8606f17

SHA512
5a74ffaa42a8af567527e23fbdee7c6a3d7c05c13bbbcd30ec5c7a8608a610180645cdb06b54ae2ceaf915b6b840e013160279d8a290d40df1228897b6cdd6de

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\cs-CZ\bdsubwiz.txtui
Filesize
21KB

MD5
5b3e2c14e53c1446e7e529660187ffab

SHA1
7ba7fe87638b5c1453798a271140d85e5afb0ebb

SHA256
7308b2a03391d1cc94b4a1477e4e42b2807c799d9e4cfb0ae34f1272d969621f

SHA512
f3d875a0bcf0fdb95ca95398b37d22e936ee7a60fc91d18a635f27458ef18bf4857173debb9f1bd2555812a74dca323e967cb0995b40113c981c99a69f0cb118

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\de-DE\ProductAgentUI.txtui
Filesize
28KB

MD5
b6d6d1bf1dcf6785886490d67b87c7b0

SHA1
21b380036111aa293214f2d02a3b2fe96b125aba

SHA256
6a48637fb11a6d0badc3475d07cf485ae5173c1fadfee56220c96b432ba3b734

SHA512
ef7108d773e75776fa07ce14c91550e4951796ab09fd728ebe31421099a498280d2caee09e8d2ca70059ddc0242d97ea09933327ddd5902608b7cbc78ec7091f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\de-DE\bdsubwiz.txtui
Filesize
21KB

MD5
e48fe0adfce80ad78238425660171b0c

SHA1
782769b6644d97bf3a63fc1362a17a156a88d011

SHA256
e83b3377e5deea36f1bd1e46ce8d16e322f0b797cd0cf710d10792ddbfdba6a8

SHA512
8be5431b486bc3f7c334c10f421d8b294987fd585c78f254e93749ed792bdfab30d4a98afe4a5f2eafddbb517a5a6baf66422c64e27d4532522bdad0cdfba168

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\el-GR\ProductAgentUI.txtui
Filesize
27KB

MD5
645d794aebc4d14968ad321b506301c5

SHA1
d54720a452d3b1284eb21674db36e10be7e94091

SHA256
d2ff31a164b97d05356312f72bd68dc33637bf8bb8526f13d4a92c241866ae07

SHA512
c6affbf0f0e9fda43cd8c6122de526c02b1436b0181b6c5b0582dbafd077ba8fa93e7e0159ff261212155c390d17046fdc6b181b3368eaea6d6a36750fc4d048

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\el-GR\bdsubwiz.txtui
Filesize
21KB

MD5
054ed9afed9f46d74cca0d6a65b6f908

SHA1
d3bb0004876e4f3940bbae9166c870fee00ab019

SHA256
24c0863adc98a9d64546209d805dddbd11540c7850bf7da49ca7c7cb211ab875

SHA512
ee4a167982da7c79d29908ca39a89e7c4d5eed3d3fcda8023b551929f1fc64b3172ec53de6768223f0933230da25f7abbc6174d38874d62b00e0a33abf70f1bb

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\en-US\ProductAgentUI.txtui
Filesize
26KB

MD5
65ac142272ccb2cf2eb88683c0e37688

SHA1
332bb994a1e043804e69a5df86b84778bde1db5a

SHA256
27e9d2847ad202283e81be4162ab19ea524e8af16946e9475da9b1bcbffefc16

SHA512
c07b93f65bd8dec1206e2346828525a0be576cc3440e9d759ce41aa0e639078d8f57d1fb39fab70d0a06e76d97df656f272e0b021b93e9e3e510e0487875112e

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\en-US\bdsubwiz.txtui
Filesize
21KB

MD5
8b277f2510e38f567cf27f4328b83df3

SHA1
c59b98e737a8a84a9879bb3cc345ecbcb5b3852e

SHA256
0a7600afa1a868e2fafe22246e8de041b2c9d87025a51ef8c4e1f1553c1b9615

SHA512
8222f6b3d51fd83257ebb7b9e0bc9947d5b1f8fbcde85ba8436b7502d9f6a7616d809816b6c4403ceb537f629d82603fde99e432bf52c79bbdd5115bf1a9b499

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\es-ES\ProductAgentUI.txtui
Filesize
27KB

MD5
a0541c9ba431ad2065668e22c90d4dae

SHA1
4d3a8628ee8c9fd60490e78f1bab82165ed76ba5

SHA256
bad0de6780e830e711b463a346346beaabbaed1a2f06e923a5e739957318672a

SHA512
a406d5cf16b0fe414ed070bc8a8b09b45976396f805591925e0dd3835c1e9068a7cec4861569ecc7c7d2260a7d87d1944ac344a183667b4b92c35ed191cfd351

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\es-ES\bdsubwiz.txtui
Filesize
21KB

MD5
39b14e9cd4098a1d076bb1ac85e5d7f6

SHA1
822da33ebbdce865693f71d108f88f6539562b79

SHA256
16449830d1988ed30e0b4ca6e3ce7b8724215d805ba6298bd38ec09f1ed0f675

SHA512
818b5b63ee51a025917433ff3fc13eebee588b906be78b24517232cacafa285d3ebc304544a3ad8f28d7ca3b876318e76fdfe448be75991dc7922321c9142e58

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\fr-FR\ProductAgentUI.txtui
Filesize
27KB

MD5
b5aec81ff050b965b1576d4649461544

SHA1
a8791bb16c6093be11adcffd21962fc47db360a7

SHA256
b8335d7fb34fc9240f3030840a5f35e2b5d48ffc60f36d10d289939e7071131c

SHA512
9bf7cd52a86081cb27eb5ae4dabdff0126f59a994dd6cdd317238fd6a6f6321a52a6c937d464af68c300bb29aa36dfda9721db63345e7767a344e55b63ab5afb

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\fr-FR\bdsubwiz.txtui
Filesize
21KB

MD5
10abd4a81d07cca48866feef5c1369d5

SHA1
035dd7442ac4d6b6e2dcf3771e8ec8305a01395c

SHA256
b5549a78810cd61467af4d45d80f045cc9224f252c402fbbd2cec69b2e595127

SHA512
3458b53ab97ef1a0b14287974554cf998cace1a2f05de558484025c409abf283c8399a9e7c457ab814986be7adf584a15d290ff60511022823c2a3328e1e0a95

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\hu-HU\ProductAgentUI.txtui
Filesize
26KB

MD5
bf2806edc1561bea35da74a7bb72e88c

SHA1
13533540be17eefa833d4e4e7441bbe1f84bbda5

SHA256
1387fdba6a906c4b7441623c7464802c158cd3bea6c5470ce8ffe0c5e9d58a54

SHA512
3e998cb0a04420b0233eb38e12e6ff3f66d4cdfb408dffc91a43926f2370d7d077520157ba1eca41d7884826d556b9edc6ad544a7a7b86daf3da05bbaa5f4ec9

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\hu-HU\bdsubwiz.txtui
Filesize
21KB

MD5
888e6970c28646c6a084f296221c5d44

SHA1
c7d232fc2d5317c5af821afe3aa640f6b89e0702

SHA256
64cb8b5160fbbdc792251eb267dee8ec56507dda829de834ccc11cd27bfec6b7

SHA512
26794cfb207b0aaa061abc0c28d7af0497e08e99188c6e1fb5706bd0874aea1ae55730494cfc3ddcef261dbae354fdf1a648d59851e39db128e8ae3dff5043e6

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\it-IT\ProductAgentUI.txtui
Filesize
26KB

MD5
44cf5ef37073bd2fd9acbe762399261d

SHA1
2f1585efb10b4d09b2c616b5ca1f31ec28c2d770

SHA256
fc55e72fc102f6f2eae1dc2ca40be3350e2ce6f4022c9b5c4427dcd07d1d25d8

SHA512
480d6979e01a205e9220ac89e8ad3d11914b90ff125ad79caae55fada93faf257ec05e2afcbff7cb7c6e9346aebbdcf83133a25b9873f3d0da56c28d43cdbb89

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\it-IT\bdsubwiz.txtui
Filesize
21KB

MD5
4f0423105f87ff6801dd2bb0ccf9bfb4

SHA1
00c2bb77d0794d5ab9ecd651e2e4e300f1ef575a

SHA256
9e2352b42909803546bd72df8ac041b55e7b06a2009b844f277aaa1853d6d66f

SHA512
5fe44201e5553d66f0e84445ba032d282cd920589ca835c50d2e7fe04f9868360c55b4f502d51c5e6899d0d7053f6c77f954795cd27797f0eb975da988ae7a4e

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ja-JP\ProductAgentUI.txtui
Filesize
23KB

MD5
44de3547f9088acc09a6dabe5fe3bea9

SHA1
57bd3b68c512b67b5f84ba930d288b3de0e2bae7

SHA256
41603e6210c78599e90d8a8abab60e3ccda2308768f4ec7a8ddbb75e36911fbc

SHA512
91692a66842141f3df6931ad2e4f67aa2e1f905fd93f442dce22f6ebce7482704680e8697145c8a22f4774eef7edaff03012caedf29f60b2224f6a0f53d21a5f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ja-JP\bdsubwiz.txtui
Filesize
21KB

MD5
434e5a981985d756eb2cf574073c67dc

SHA1
cfe931a5a4c258f41a8dc452f4f9d667e9e0de50

SHA256
8200453faf6d9dac6712c278445ef152313c0ca8b682525e8b7dcb34ab8f6e79

SHA512
4063bac191c8434a8a61f4bcb163e75548955de72ef1d1afd22498c41e3ab4f37070d1885bccee52f617d34966f901becdbf0b795cb23b016cdb0b2ac60a2398

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ko-KR\ProductAgentUI.txtui
Filesize
23KB

MD5
bf211652efbe312f2cc5b1d413f5b096

SHA1
7380d4b8193210dbb040c8844e17537309b24132

SHA256
ee516fb963a613a26150f62cc5ea56f2e6edc693b3301131ee550700af2cf886

SHA512
6314ad2e6b2a688d99887f0e8878312750ecaaaa26c508405bcc4eb9f5548815dee22cb2d6bcb45c377586cfc2b518e889072a177d5ce3044981990e6a8a4de5

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ko-KR\bdsubwiz.txtui
Filesize
21KB

MD5
fe387c4a00e39aa75b62808db9e986cd

SHA1
85c9c25dba6ca9204d02a3c685b4e97956b310ac

SHA256
1f8fd375a7b77aeba9ddad21357fa7a0a4db800f4462bfbd761d94234ec1a7c6

SHA512
2d12d6c52ea8a14633c92b061ce1afe09a79b553dc9a3596a8a07cfa4d1a35f05b4f20729d38117b426d542ef5ce5fadff6535df2d655818fd21c053a016e9d8

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\nl-NL\ProductAgentUI.txtui
Filesize
27KB

MD5
79c71f297ba959bcecc414ce98f93a89

SHA1
987a340190fd638ba659b2c66f8c032aa9f19c4c

SHA256
c65798646e8a86bb90efe1f8339ca07fb49b44aef510084cf9583d70ed96727c

SHA512
62422181c1d7c0584cecf7887adf56b9820ab009463c8be338920388d40e1c7a40c44d79b65df522b788dabe2d58a6891752462df65182485dd37a505759573a

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\nl-NL\bdsubwiz.txtui
Filesize
21KB

MD5
ff1b0ad434ed25aa91a02ed8a6323fb0

SHA1
578fc71377837080c7add21c4363b4773f702d61

SHA256
c36fa629d7f0a1c61f57f5c257824307ab5db249f3e6fc1e471ed7a335d79dc7

SHA512
5804cd49881077a7d737d286314ea65c9fa81378cef0599474c5cf8e041a9f76b052a7c4ecde914a1288c0c2dc63eaf378f780207f9b3560166ddc1456e973d1

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pl-PL\ProductAgentUI.txtui
Filesize
26KB

MD5
09a37af8d61a9d726ff08568ddcb1bd2

SHA1
c251f4098edea87af701421599040c9a2cc4c272

SHA256
275ab1bc6915adf0fb7bfdcf941b3f34c7763fe603c94b54db3230443e6320c8

SHA512
bd88e0191ac546a90dcaf7394ee44c0243f5eea983fe5d716570a613bd2952ef6a0ca69bf3a4484df4fb70805bf702c23bb02c7e1fcb49ee1a1d36cff2f7dee6

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pl-PL\bdsubwiz.txtui
Filesize
21KB

MD5
3b4f2227cb8db0a28a3ca48017c4720b

SHA1
199dd31e7dc4e67c971ea9dc74b6c97ddf506137

SHA256
8bec11aef7f874cada8c1502fa26d767e6ff4d81190546bcb66d11e88ffec317

SHA512
fb6dcf988ba6e0d1f905f08086440cdee551fd251631564df2042f30dd737019fe56b8b0b7732345bc22ea64b240792159f2f9eee1cbcb83a776ff83903cef39

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pt-BR\ProductAgentUI.txtui
Filesize
26KB

MD5
2a58c9860d0ade9c2f633e3ebe8bc424

SHA1
af173fa320c2032655fcab107df952ffdf875a8d

SHA256
003a5b7afbcaff693579d790733fa1c546f38f72f3583cdd0f082db4daae7b4f

SHA512
3e025606af65f85b61c39474533bbe25481a5fae2303f245457864352b857b7187dc2de3b77d35065a31d721569f3a251e8dee2a6f687cc70b1f4d4707ed75b2

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pt-BR\bdsubwiz.txtui
Filesize
21KB

MD5
129ce372ecfe1ed25e694f84ec5a1fd7

SHA1
2575dd359433f6d98ca5f76c563351b2c68a9dbb

SHA256
66317dbaf57bb2eae757cb15fbed922144f5af982ef1dd65aeb7c7a56a0ed405

SHA512
73a62a8a19e46fb5e0adcffdaab055ea9e3b60f80faab926ce07fea9ec8902f48172c512b0cd4e4516214e75d366379d367fc2d8ed3f38dcb6d83f4ca58ff2c5

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pt-PT\ProductAgentUI.txtui
Filesize
27KB

MD5
6ed9a8e7aa116df9d23904aebfba3f0a

SHA1
7499658398466b0c9327a014d75ffc50ee30fb3a

SHA256
b037d769768332aa9e46dc12b49e368682f6a9f8c73d6c55a8c73863a1a7870e

SHA512
3d59a0c6d001fa6ba048594fd771dd2c9720543e385323ce469649f0d2c8254af85e5a71c5bf4f3ce1f44f1e36855597790bdaf0424e33b3d3664cae385e529b

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\pt-PT\bdsubwiz.txtui
Filesize
21KB

MD5
109c7613a42b8813fc482309cd944f74

SHA1
4de164725cfc8761eb7798fb8be1209b37c7b81a

SHA256
0d42dfcdea2708f88d77849f7324b34bc96f38415141a4f5af8e74f28aa0c240

SHA512
62e8affd60547035f3be4032dcdcd064e7e48b6a212fb72802f3453238d70b59e6b087b63f4abf6b48f455b9bd3a511b44db3c9ca3d508e96c1d0dbf534b6425

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ro-RO\ProductAgentUI.txtui
Filesize
27KB

MD5
ef8aac6f474b589b07da5a80b7837f13

SHA1
ed22bf57cd25bae641eef3e94927f9e83bf0e266

SHA256
185abb1efdede1376ff793050ac5ffe517fba9cd7f05640a2cf50f2105d8f0ff

SHA512
08f12292f1f52f4d703c7f29b1883db255b607fa4c2a8aeeece7c0ecf2f7085615195434fe905ed561c4c8ce4cf4383c7b114a0f9b369960232d5752f3ce2c82

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ro-RO\bdsubwiz.txtui
Filesize
21KB

MD5
5458a36567073c932c8675b410085b4f

SHA1
55c590fa926d76117aa117c07217e6f88058a30d

SHA256
c7625caf0a9891257abf9963d79cf7915d3a79d01cc7f11ea65c34cf0f357bae

SHA512
94532667ad3b3ba8edfe2872d7a74dbe3f145cea2fbf40f424c80187e9dc6584b1209e96a23c1439db4613686d14c0e31965db83b789ef98a3e6875147489faf

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ru-RU\ProductAgentUI.txtui
Filesize
27KB

MD5
02365c3b76e786a1d7055b45c27cb3f8

SHA1
6ef9c466dd8ae56da81f3f0bdef15248bbb6c049

SHA256
f35d52760acb1103efe9b451b3b43f594b1aa7d364d18bfb3d2c14acaf8cca51

SHA512
409009a3ba565c2bac8a92ea9def807ba7b02f98f29c7f10fbf642a251d8319a43291f109f2676f6faf14e7785510352ca7bf3a45dd5e6dee2cfdadc7a64c62d

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\ru-RU\bdsubwiz.txtui
Filesize
21KB

MD5
05d68763753998c70d4b0a53db098472

SHA1
738b9e13230b5244a1635e25787be136abeb1a9d

SHA256
f248a95702823e3c36919a2c3923f670099170424bca63ec8810d0dab38d6bef

SHA512
686bb14fcb3ed92c6159bb4e58575f4ddebe396ce14f52dd08f96f059cbe9315ac0e6fba8360990d7fc802437c9aa147176baf2e0d86bef9933c9ae11a0158ed

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\sv-SE\ProductAgentUI.txtui
Filesize
26KB

MD5
54ce5fe37e175978bfaee00f9c82b71d

SHA1
76bffe17fc304aec21e6e9fcb5ddf92c108809f5

SHA256
2bce9070eb9cbe8262047cabc503c8c1fb387c4c8720cbfe30321ffc19aaf068

SHA512
c26524bdd50c4fbb915afd8154d409115bb086ddba3a8fc43beaf63c1defe7a7e189182121e6dfaf0cc24ea73ed2c716543e01dc978b769e3935fc605ff20b16

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\sv-SE\bdsubwiz.txtui
Filesize
21KB

MD5
3c965e5b4291ff94a08307bc87e0df5b

SHA1
f6c15a91e540b0c891e51f25297f61d86984f91e

SHA256
fabc1689baa44f8d3c902eb78e47a93a41e2ef14a5fe62ff2c237c407f0e311e

SHA512
403923d462aaf426affc220c76da7b6f4e039c1cf793b6e085654f8998ac179c1410029d7a1166d7d1c9e4625b1facb6d9d5cb820645c11ad20bf2843eba5a06

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\th-TH\ProductAgentUI.txtui
Filesize
26KB

MD5
0899ed15d68cfa96c9d148423543c9f7

SHA1
be0a39b92cd26c8f61d317416203c7d1c6803c44

SHA256
79ce1a7e84a7790cc3519ae6b3536c62ac89bd01b2047d1c80b91298792ff765

SHA512
f632220d7423fcbb7bb6640e9d9a91fd1e2a25f358d4c453f9a4d371d402f3edee4548e4ff2cdc687658905f3bef7ad8de01713b9a9d90c2cf93a585362f8dc3

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\th-TH\bdsubwiz.txtui
Filesize
21KB

MD5
e0104f228522a6853cb345d19d37b554

SHA1
263b510a9e43232d89f04d448489cd7dacc175c1

SHA256
496d6832f8eca5e3265a800abdce639a0cfd9361e496c8e4075ae017e1715213

SHA512
2ed1b5fe91ae257c4d1b03d83668da83bef0081d203c2bf09c29e8fde7aff9add95cb9cdb82c3bfe3c6eeade31c3908bb133dbaf32beac5382a4e4abc3aa4a53

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\tr-TR\ProductAgentUI.txtui
Filesize
26KB

MD5
b8f32b1e734d1bb09d58553df8005a59

SHA1
df00f18352ae2763de68eb339e58d2a90ee796e1

SHA256
2b1ff602888723146f15014b2c99929870560e245cc08842bdf63ab69be65556

SHA512
d42fee7f45e047ec8a245f0a37a5756dd498591ab23c1ba3116097a95dd86561259a61fd572b60713e8ed9e62b35e5f8fbed4051fc57b267336bdb2aae55ef3d

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\tr-TR\bdsubwiz.txtui
Filesize
21KB

MD5
e5f95ff88b46295f193900c97ebce016

SHA1
039702309058d28f3087676407e8efdd8e9e0871

SHA256
783238a129fc7623486c26e926b01a9821d4b124728d900fa18cd99060271d45

SHA512
807414a9262ee199befaae086c4c5e9706b53d79ff7f7d3c583a70fb35854fb17187bae8f8ad64f00eb70bd0568ed996b84a80945eab1849e492755d2791cad7

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\vi-VN\ProductAgentUI.txtui
Filesize
26KB

MD5
787897bb3ba417f843faaa175cf17e45

SHA1
28b69113e20069db51f635a4ca19961f7a307398

SHA256
7dd13e73dfb749bb910ad816e8b77ede19ce526aad77d580dca6a8b979a660ab

SHA512
c9afab95c0108e3a7862af2d7ca8c79525f9630ac4cb858a650e67fdfb0107b54c4521fd343d08de577b0deb31a56eeec1bd5a66f067c8555a34a5c3d3717ff8

Download Submit
C:\Program Files\Bitdefender Agent\update_package\lang\vi-VN\bdsubwiz.txtui
Filesize
21KB

MD5
299065aa8b3aaf1b1471c84c692200b0

SHA1
ff58607beccfd34bcd3da737c52d6f40c44a7fe4

SHA256
bfb5d7aa08d473abd231ff0eaa2c45ec5f72638a345cc0e95fcb398b167dab32

SHA512
59519b08478c0cf53cc4ecfaa30ab2820dca5e4e4d8910183b18255f84c2a0b6d88ecf121bfe75b451988f047154c55411bb70cf01a6d846427ab81addc59f42

Download Submit
C:\Program Files\Bitdefender Agent\update_package\log.dll
Filesize
274KB

MD5
97a11d4f1b7daec1b1cfa3c4df876c8a

SHA1
e44c53c885702af1868e5cc5cec82751b68df0fd

SHA256
7299c748f6af8295d745ce4d5fa6fb7b5e066e291e84362fd72a3f14cac140bd

SHA512
0ddd41796709d529325b41fb5f28ddbe5794ce44efd1189f508a2c6a88ba93773c950f62b424fcdd740fde8629b3780547dc9346a699b51c1453745acd995149

Download Submit
C:\Program Files\Bitdefender Agent\update_package\push.dll
Filesize
193KB

MD5
a29073bffa72c1d60d49a5571ab58f37

SHA1
adf29822de6b53cf0eaf0815fd6f8438de0a4b8d

SHA256
0b86f7428c6a1ec7b2a6017085ceda5c987a604d24b8870c36f0e1e4d3a4dd9e

SHA512
db3a49effd7cc2ac37acf48f2ecacafdf9b15a50986ca110ef97f30be803e6c06e58117387a870897c7087aae4d6fcb84b0520c60970fa76f644d6dd005a4dc5

Download Submit
C:\Program Files\Bitdefender Agent\update_package\sciter.dll
Filesize
4.6MB

MD5
b8cf898df43694a1776b4025485ecad9

SHA1
ee99e71cfafb24e41067c4e0b250ff3d3ab4fe69

SHA256
0d073ab1c77b997ee1e1bab60817aeddb9ed97f4b446febeeaae6fb581419377

SHA512
71cac879875f7a63cc266f57de6119105c512bc3324e1aea1370b083fa3d6fe1df0cbcc680fab47ad3996228dc327d10b5d5be3079535500285f14c900e6d749

Download Submit
C:\Program Files\Bitdefender Agent\update_package\settings\ProductAgent.json
Filesize
996B

MD5
0896c067896bfcd59349d9ee43e6eb1b

SHA1
7dc0bcbe902eaee0e78f1bf3e37bfd8353bdc217

SHA256
261ca77a514714360390baf7961d9f45eec903068ad332a5579499c4924e270e

SHA512
60435cbc8d90e309fc73d759623cf059e697b7d6c8f94daab1da669e91af8a73601910148dbb34d87a371d93f50d8bfaa0a4ddf83bdae2955cfa9c3d4538ee9e

Download Submit
C:\Program Files\Bitdefender Agent\update_package\settings\ProductAgent.json.md5
Filesize
34B

MD5
aa29a8c4e02d3d81b6ee4944494fcf15

SHA1
159ebd632aa5860bd3bb0c611c2c6b06abde6f94

SHA256
bfc51a64ab2adf31442ccae5a4abbcfd065e675e278e5ac4a7f75fae50c4ac1d

SHA512
ae59d296580a9a2b29beadea508b0f74661fe7e333af98e45b094c372006c42ec94febdee62f695e39946dce6b246b98a9f4ba5f9e33fd7a99051f384e55dcec

Download Submit
C:\Program Files\Bitdefender Agent\update_package\settings\ProductAgentCommands.dll
Filesize
20KB

MD5
e0804892ba20742a26fb286db62c4059

SHA1
4f1848c0f2df835bddaf894d619010b538e146ab

SHA256
9ae9bbbc438c33df878e1b8f607d986a1fb42d433cfb22e392c8431b94a37cc0

SHA512
0e580626332435666d62ab8bbebf4cb7a8728faac7c29386490bc0f8e09edc79508cbc71c69771a4fda18f5a42d4ddc9f4fee97babdec3a7f1760b1d440822e7

Download Submit
C:\Program Files\Bitdefender Agent\update_package\settings\UPNPDescr.xml
Filesize
1KB

MD5
ec0bde4dc9b5abfeb5b6bcff2eeda05f

SHA1
8c9371101cc3f186b07d41b59ac08d7ff71ff209

SHA256
e3456ac48b24b714ba60807f486abbe6be53f83697c3b1263aae10579f4a2e20

SHA512
60c162c13ef2976b76970d4f7c054e41acfc4284dea55890c0124b6f9c5c6bd534aa634b70dd2bb7529ec8919c41b620f319870bcf865d2d5db09a955d0f7daa

Download Submit
C:\Program Files\Bitdefender Agent\update_package\settings\UPNPService.xml
Filesize
654B

MD5
0ae0e8f4360d7acd77de30c7a2c627b8

SHA1
f9cae19d0c5e2368df4c096c5991d84d0c11454c

SHA256
ba756c7da0a0838d0b90343b37f8702e3e7201495de595d2a620627c6c4cabe7

SHA512
522434f1473a2c8cd0191f9860fd0f1678b8e781f5e85f43c04002646dd245e6cc3c7f23366d4f444fded82865e1bb2cc553844b8d44b785f3ef9a1c86539daa

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\css\main.ui.css
Filesize
93KB

MD5
3aa8efcdde36b9af01c586ffb92db488

SHA1
ae0efbdad9ec24780306a04afbefc2308393cd84

SHA256
4e0511e6f4e73a9a5d13bd05017d8f086b2dddc48f6eadc05d74fffbec3c6570

SHA512
6abf2de6803ca95513adca935c44febb5bb01cd48bc7a735dfe1b155b3fdd5fd12799690453ec075398f583c5d8fd885d1322585eb7046d4abcdf18b8e9379db

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\html\Agent\login2_error.html
Filesize
386B

MD5
29e9b73f0cc977e5e5d3db6183ba93b8

SHA1
00558ff5b70214fc7d8d82aa56ec3243667308a1

SHA256
be89fd747a592be9049d8fab6e96d1e5da9c96e63d85ee66c12fba76a7d239bd

SHA512
fc63c3a091080b06b8d65a5b83b1f181fc1336111118095eca302b5a2c50a1376b05469d0422e7a106b9d018ada70b5f97a01bbb01b0577a1099bc438c6b8230

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\html\Agent\login2_loading.html
Filesize
379B

MD5
aa3de981b37b3a0b97ef7004fbb7e667

SHA1
a86a2b22d6cc90e629dd4bfb21741beae807b569

SHA256
5f28b2e4c8100716b1406477e0693449535adc096a8982e421e6ebfe3320d380

SHA512
972df3d701554556917035438f968fc14f91a7c96e418824072937bca3000b42f7713bf5ede016f2fc17975a0eb5121116447c5f8ff533b4aa65eb6a2e4d69d2

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\html\Agent\login2_no_net.html
Filesize
476B

MD5
a50351d88b41773805e25c5c680f4038

SHA1
ffc6f20af073b9e49e949fc8c95367cbe5c4793d

SHA256
eb222e8d7f6fa14f091eeaa4a4293765dffdd1780de898ea71277422e3bfab0d

SHA512
3215bf61787aa01bfdf65e342876f67413ec1b0cdcd637d4e0a4131653b012766cc54f24f32bac7eb072df2f04ada47c66997034334fead521bf8d1fba4fed6e

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\html\Agent\progress.html
Filesize
13KB

MD5
1b2b292490abac725c4c31d6d07c971a

SHA1
c587ebcbfaa7f4ed73c9f0d8f916cafc26950dcb

SHA256
c6fc71e6bcb0a9e73a58e3825f2440d3c2cd12b8be29f8dff3cf51a406e5e116

SHA512
6677307a76a1960ef0b524035b0cc1f2a19220e8d4d43812fa2fc0001c3f9a324f9ce140d54c613894d5676bde963dab4a4189ec72c15ebb54f8c61b641871f0

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\html\Others\generic_message_window.html
Filesize
9KB

MD5
de41b8de6015e0e2b3b2ce7d62c38080

SHA1
136f824a5bb59fbf566129015d2fb828c9e27bf5

SHA256
4a66e2c817789714d7d3464403fb690c0a077c39b5459461552552195498ea68

SHA512
5a0f41571e1db48c8374d06d1433c53eb8fd597a94151099416baa1cad0db22d92f84fa5c248a6d867720a81185d22b36abc9a6f286e8b12550c6a340ce7d1ae

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\b-icon-popup.svg
Filesize
1009B

MD5
9bd759c39caf2f589e7ccf0708d331c9

SHA1
b417d66d8a3a7bef59be1db13142818981d8cb62

SHA256
ede9532bcc25f9e80b9f1796484a17c016ed22f90ff7be1679416361a035beee

SHA512
d5cb7a864b02b193f1e16137a356c30f4d86433b730cca9cf0667f58f8f6735f80ab116ec4ac8c520031a04dc0504a068b9137f8fc58ab0047e168b1dab90c01

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\b-icon.svg
Filesize
1007B

MD5
4bff52ea5afdadb54921fddeeb11dc3a

SHA1
4b4d1d70564f32166e45dd6319b3409ea7def0f9

SHA256
ac29377e2ddfc14599de794efc07ffd92c5cb3058ec6ab35264376b7b6548057

SHA512
47ec0b2183b5c2051f88b4b12532598cd3de74f0f5f1b4a44c5ec20058b32f0ed5c18e21c50ea29c85fe443ed9974cfad0d4603347cfae5927c8b06bac435f65

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\bitdefender-logo.svg
Filesize
3KB

MD5
dcad56b500c0f5c6e936222156c83dd8

SHA1
355481bc50d9adf4579a5dccb8aeba2bc159810a

SHA256
e9022044a73b0332e686decd07ea3847127597d385b1adef86a8685acabf8cf6

SHA512
7922e021be868c2991d8aeae606bc5f4823e7f4701d7cbeaca7f500089933e36ff5380b00b8c9ee3302d2b4053b90f0245b259aa4e1a31879f77c6d0172b02c0

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\btn-close-w.svg
Filesize
715B

MD5
9f7aa5c135b7a1c293cb6c986d9a8c99

SHA1
949d019ade03ae5cfccf569b580dc53cce6eeff4

SHA256
984f4cd9e9228191bfa739d70644c8c20e3e6badc6d4fee876d566072266c0cb

SHA512
dff87c5da57af7c908a35d22c57da5da637567b2d8ddc52cdec26616efd9e2f05f6b01386b15c9bcd2d7d1a14e4b51bce788c37d0f31aed579fa8ddeb84f3bab

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\btn-close.svg
Filesize
674B

MD5
c0f2575fa52241bb925daac347262a10

SHA1
2213d0aacf03bdd5f6d162d6d1ed0724281673b6

SHA256
c73154240e114c0d39178a521133bb04d190310220b67bfd1220c509779d963f

SHA512
f29960985bd963fa1732503c1b36f87e873bddfef2c0b5061f82e03d71a3b4dbed04e2883475875953690ddd20f2b4909c093824ebb1eedbd67b20c5a23dfdbd

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\btn-minimize-w.svg
Filesize
501B

MD5
d1ba043d378bbec7e780fc64ae6aa5dc

SHA1
e543348cef8522653b1e78c5d35a990a28cdfa7d

SHA256
9684031cd43a14bcf04c60e873ed15a79cff0e5af338bfde3fc808a601816e44

SHA512
15dc0ce6d8b4356467249ee061a6f0b7328b355e270685794a3b357214d2355f99311c07c2fd49001d97829d9550665f96da8e8aa7eb7bd9ec7fadb41bb4a507

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\check-round-progress.svg
Filesize
554B

MD5
6dcd2611e88841dbbe6cf22ee38daba0

SHA1
9fa527e1eb9fb361379c35a9cd993ce9f8c4c3a2

SHA256
23799ece67a54eb08fe6491754c1ab341290447a1d17afed7bceec3a6e643f84

SHA512
64ac1a434c73a46118a33c394c504567613b284cd95949a44d9360bf1dcecaa126c40094043a48b83d01240e11a488485c115ab32347c39f14f0a1e2c12416b6

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\close.svg
Filesize
591B

MD5
0e92e546d9c210d657b370a4f53bd374

SHA1
111dfd57d90125b98a7ca882d7bf1441bc20bf2d

SHA256
c4d7f500f753bdf8d140b18f7289bb11fe5c46891190d4c3c45dc047bcb59934

SHA512
ae768151b3fd72a1f15dee803d73a225f785be96f919b173c6825b7a74c4be3329a21740a0bf9c252d6a70fb419b69b8c5ea340b56f7569a7e2cc14dd182d89f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\close_hover.svg
Filesize
557B

MD5
cff977a66f7d2ed1e24db0ad7495d696

SHA1
042c8e321d94d3c95e0d2141f4a971bc64936c59

SHA256
875880ec72cd8645b6c21bb479250c6e1244e6d950cce959ed8e449cfe03ebd5

SHA512
0073869625283c29a937b72b7d00eec343c86d1924f3bceb32b52188aab38ae8d611ce05c34b592ee8fab5853722eb929dbb5ca4a6b1f8fd65df21a073ee6a01

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\dialog_confirm.svg
Filesize
1KB

MD5
08f70def9aacc8592e169e465a259412

SHA1
2f4ae0b4bb3014cd63b7f9e4d379ba695c98b9a1

SHA256
fa5c4ad31e11f6c2401c4dd6e42e5cb146f933fe63167666a756a5f8718f485e

SHA512
2ff5ab3c81bc076b67c39dd79fa173f4779ffb82290044bd6b2da4ec344a4ee8c24c8ed16b72c4553f540fab8504f2caffa28655ed9a960b8ea0c5cad521841f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\down-arrow.svg
Filesize
539B

MD5
1a793c4549a7b23659aed51e9c3424ed

SHA1
622854357d7c39d46fa046fef2cc87f5a5fc5405

SHA256
9398d4e05017c1773db05778f3a893f179b6fb09c9fd2bb52b885815a00f0792

SHA512
c4cbbf627e45270f61143cd9770e2f3381c8e9647f98b8ff98f2dc22f3aa45e6353f25f95843ed017f650960dd293d9154eb05913df0176bea172b51e436dd4a

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\field-error.svg
Filesize
893B

MD5
96c8e7f3facec8e7efa468dcb94ce61d

SHA1
07307f4f2896273262238f1fb055f50e596aa8e9

SHA256
7d9ce071009ac965167be4d5d5728c2b107c47aecbdd4c3f8461ab0f27bcd5f5

SHA512
f43ca4f2517ef08d42992d5ba030242d1ceea26e0a8b41ac0cab91355647b2e654a043274ae3972d222cb18ca3450f16d482b51a3cf1fab531f42801f83b438d

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\ico_red.png
Filesize
4KB

MD5
79f2aff39c00949d095114dbf24db7ff

SHA1
caacf3c761654a187dd52321694b2f88a5dff505

SHA256
da1a9b0dde9041a5861b3bf1b0ff924b919db023a62411643594dc9d98a58cbc

SHA512
f9413f3d02d9a283c123e6bf7385031f8116a1df41f7472f4db9eb7c01dcb29dd563c5dd227e5b3d6ad7054a2d79105e99a0b89660b590bc689cc7123cdf4233

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\icon-fb.svg
Filesize
651B

MD5
00625c95ba395081da997ba4cf676058

SHA1
6578b6f621c882d4f8d8349a5f0580d701c7160d

SHA256
6ca4bdbc833cddc12d512fb503f31112cca5154b5ca537f1799114240b9dc2f6

SHA512
faa76b35cd0c7165288b2152f883ec15b65bfb994e65a792fda3b82b3b5d42ba93c547b1931f94568729d58d1549e52755a4e6bf25efa25c8bf72ca898007172

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\icon-gg.svg
Filesize
2KB

MD5
c724268d2bf797db10124ae34b631fec

SHA1
4a5455414d8975d12aaaaf767ff0bade75b47dd0

SHA256
c76ce81f783843ad3ad3dd0f16dda473188eea5e74585efafeda471e212c2170

SHA512
db05be2f5f979a31fc705f4b81e60b27fca388c6d893449177031e7b7c97ca7b1f8fd977dec9694e6bb48865f2036d5b9ca192738402610521b75dbffe691de0

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\icon-warning.svg
Filesize
1KB

MD5
ca045b9da9ff5dfafeeb48bfcd05337d

SHA1
ab1bc1889e1cea78ab7ae985367b28ce345309e3

SHA256
03aa1a638a108c56e346fdc6c657c3d0df67aaaa2e7421ace8d213fcc69bb962

SHA512
67c171abdd817a24d2ac239dbaebe961cf94f498aa4208bb11339aa4578c3a00504c9fac2d9023ee8d750378b2937af723b793c265f30e98d8d982b395831c4b

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\icon-win.svg
Filesize
720B

MD5
e232acd509be8b25cbe28b0334121482

SHA1
eecafbc1d7068fff034b4b7eda2c2bf15ed209de

SHA256
421269c3898211e5a333c46ce1b0ac4e88bdef274f381dc89d327ae969861e89

SHA512
c435703d0d7dacc3233bd11fef169b6569d6a63273064b6862fbd372767fbf72dfa08024420ac98e1f08764a2b22cf34c4601c7d8aa9dda5617b2f9bb2218757

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\icon_warning_slow_connection.svg
Filesize
627B

MD5
dfe5192a47e7a03500b356325da9068b

SHA1
c2eb9d744b578f8eab15f7b4744eca66d23bcd2d

SHA256
b937fd0f948e5d7dd3c4f4aa28ed4c4a5e5a5449fb256cfefee50cff4efd546e

SHA512
5cdca2db6dbbb3b242751771ac9333f25d6b5521af38c5e259e6b4c74bb72629a9842b0c7b3bbe125c9e086bba2685ae8c9ee8651ed3fc7ec445a81b037b7f99

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\ie-icon.png
Filesize
6KB

MD5
cbfd19ec5f72b8ac5a862ef513ee13e8

SHA1
73251532384d71ea4fe6b11b6d63b320ed72e938

SHA256
02107aa8e4b29da10d955af370db0110df379ccd821fbc4d0db4c20680f55896

SHA512
310f51ee88fd28a03cec8bcfe26f1e9bebbd90d88d90caf8cee2e898d75431610b603dfbaf9fc5c44708fd4e72f35c1571eecce2855d32bf872d915cf4f8583c

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\ieloader.gif
Filesize
12KB

MD5
38c267db075adb3c9993fe59de76e287

SHA1
d19ebaaa77b3d583aed35e0e725626adf21a3f3f

SHA256
68f9529c944f6d816422dace295b62d89f058cc078ee14964b8886f8e7d8a0c9

SHA512
976de6402ab51516730138c7b85466b87ade622f123098c28d278b26978b8f2eb2e800016a8b7368dfba6887d29cb7954a32bcd065e5a3633b5fc78f2a59a5da

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\load-medium.png
Filesize
49KB

MD5
a0ffa8e52e57a866a6711ca07decd8a3

SHA1
f68ba8934d496305263184f8c5a8d453db00d4db

SHA256
58f92552f323d24233ff477b7788069699de9746c0efe702f71816d9cbac09eb

SHA512
12abad66b6d9e32204e847ec9a2345000edc7936a3a3f6b50e916f1ff607b3dcba7f38cb3fc1cd7b06a1caa671f423d12d14bef819f7649b1e7a62e26416276f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\load_big.png
Filesize
25KB

MD5
0f40c90b714ff9e56105127b2aaa7bdb

SHA1
6360e34771f10b05853634827502ba6a86c08b5d

SHA256
47cef459dd18584666665ce25fa2ce14a1cabe6a03a03a64f57169005e10540f

SHA512
154565a6f51f2f71517bcf0de35de2d1ccb750ccf6969ced5f016931324c58ca378cd9f64aa776620466a832c25d8ea122bf9733fff9c4ad5de146652e9e8c7a

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\loader.png
Filesize
37KB

MD5
f574a1511cd509ebc0e2131248cdb05e

SHA1
770f8cdb82193207ac55e58c1e1fb6fb250897c3

SHA256
8cd655672bf3d3485f7a67e065eb7784848eb1b0f3ac6316c65a8f4f7959cb1c

SHA512
d66b0cf68579dbe77e4932d51fd75e1e8422f81d964a819deedf37001b543d1d3bd38afa19e9cf894c2d7307a2844d9c3ba25e4b142875d9251c6ab6334ce38b

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\logo-shadow.png
Filesize
3KB

MD5
0c5b2ec71e6a90b6219eed6b6f1c6d3a

SHA1
9d40ad0e9fddde9f2a9afbbbc24bf1883ff15d93

SHA256
dbc8a686bb4a1c07626c8652e05dd98d0c556f0a7918bb92c173361a88792580

SHA512
8aa13f3b1612c5b9bfc317e2cbc9687593ec97b2ceee6ef1750547ff3646c0172754eb1c1a2282cb5fa206e581b56f931074c8130e07baad8a4326f8606135ae

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\logo-w.svg
Filesize
4KB

MD5
98abc6b54dac46b8e177abbcb1824970

SHA1
cbdaffb52d10f3abcfe19e1ecf00664571bc537f

SHA256
4caead41ac57b9c3aaf2c7529af74598e3b71203f19e55e6452040570cf5e395

SHA512
8a6771fcbb29ee3e6b59472c4f3d5d502918685d4692e99ffe8730510c18d29f3a8c29cd43371669528974ae69f030809df065cb58817ddfc23fa81f3ea07baf

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\minimize.svg
Filesize
485B

MD5
64fd792a7c3b23458eb26ee2e77db7bc

SHA1
b6cabc84593b4707778d32092dd34a4fb1a96466

SHA256
ca123168777e4480d825b927591fc0ba86181133e3ba9bab99bbe1bcf43db771

SHA512
8851992b9d0582f2afae294f94fdf726598504bbb543c0865eb343556ecd8bdf62449f520a08f6ea4a4759e5be50418ec498f5abb1021a5d8d154b7b357588fa

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\minimize_hover.svg
Filesize
486B

MD5
629ba02e6f5c7a3d8407993f15fca9cc

SHA1
43ca08900ee744eb5aa834e3e6b561b893872612

SHA256
c569ab8d023b87bae27d330b5d54ecbac5543b1bd8b81f6335d8619f87638fa1

SHA512
37f945d4b068660e1e3325034c914f81dd1faf13b8dd8e9900c26a6a26b7bba1b7d243d50ed4fe80dda5c90aba73406edabbb81784a3d10e301b31661e0aba80

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\network-error.svg
Filesize
608B

MD5
823a1d29d4e00eb63f6f957292ef6ae6

SHA1
0902bc8026d9aae2c6adb6260f8462a573debde9

SHA256
ba822fba43968332c75496a454960b46ee18d5b30d7bfd0c66ae578df05497fb

SHA512
4c99ae5696d0e28fd0b48a9a9998d2e9a0c0142937790290f95326d61be95180b6981a4dec9e72fa18eb558feeb8495670c545cea32b1819c5a5406b6c4c6ec8

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\pattern.png
Filesize
37KB

MD5
619629e084706b0a46484504745d9f74

SHA1
cfbb9840b0359717fab13d9b6d83cf9f227a766d

SHA256
5b313f2d412b6fbcde5ffdc392af44aa4b55097628417711264cf162f13e2704

SHA512
a3ed5698f3328397fb04725a73688fd1e54e10e8bb8c2f8e8301d7d6d5366b3eda97fed770e1f3256df3eb59cfe27dc4847928b927a17c217f2430b61e85ebaa

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\pattern2.png
Filesize
64KB

MD5
694ddd5da5052b457a1fcd0554b144c4

SHA1
cd4ac7a8b108cc5c93c7339269d3501f3112a372

SHA256
516ea8b16377e12be553445c00cf3bc797ed4d275cbc5577c30dae50f0c288c4

SHA512
09790a52c641665df59882a88e9323c3695472af772935fe37980f6b177daf5082cd7f4d86fd12fc3f3f68837bc39d2d7c2f19d07c94a9ee02ff6dca94ef7686

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\show-pass-checked.svg
Filesize
837B

MD5
84527a842064464608eb668c45fb6b70

SHA1
22920701e30e118d3206e9e98b76f73a7dea7e72

SHA256
25edfd2852427e8ad56654cd6ee883d19b8f6b3f1fb7c83b85480354a58e9b0c

SHA512
d98ca467bfb05dc7643508ca03f049dc0daeda5738325b781f66a05f9dd171fa1c1505a399eed0c13a91a2f28994d38ba3782e28b83612cf309b19bdb02f2ecb

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\show-pass.svg
Filesize
837B

MD5
4fdc9dc8d1f55fb3f745389f067866f8

SHA1
e5420cc21d6ca9e17881a4a2b0442eb406aecac9

SHA256
3f3ebd6624bca0f45e52281dea942f8642fe0545d440eb90342b60106e1f298e

SHA512
d3711c9be6446eef78d8cde688f2282e4afaedd436f522954126675f761f62dac0f59e1289dd2224f51e3c9767341c5a2cef607ecc5f7fa87dc97492a7c45c90

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\slider.png
Filesize
1KB

MD5
a39d4c922fcf22577d0d12b7973ffc9f

SHA1
483059bdfcc2e5e8ff712c76171c9af10a6722b3

SHA256
7b3d0be3bae659f7c12922e8023890a015b43bb6419a97a78329a683033cbe04

SHA512
ba67a93728ecea1099db71081fd95d314770036616319bbb1b9b03a911132e02a4a6ce8daf6269155ef29fd423d370d1db261663c68850cf731a5a58f2d21752

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\status_green.svg
Filesize
728B

MD5
934392ce6b9f06fdddfe3dc8ea57f471

SHA1
ab951f1e7a3ea3f505280e43acaa8c421f0e4ebd

SHA256
d38396e7d1ccba5b7a4a3ff878c42fbf20d87028ce973eddea5762d1e579304c

SHA512
2c93cc4cd5a40fc93c59fa0e545239b5404469db81b0615b17bcc9871c27c619c444f8cc3eed904b6e0adec003404fc4fe196e48ae95d0c0ededd1314804c165

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images\window-shadow.png
Filesize
1KB

MD5
d5a85f51dddb67df3e7e09c6b460c325

SHA1
c580324c191a4ce1c9f3daa04620cac4ad024c5d

SHA256
f1b96d642304756133c9fdca2d7c7d4ddc39c64ccdfa06ab22ba9e46eba3154a

SHA512
65c400717472f46bb08c66421ed1f75783d69c23efe167860c20f724d881b9c5cf6d70761cd28921656c4f28cf9d0b5effdca0f5e46132bee1755f324f026e7f

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\bdui_progress_bgr_black.png
Filesize
2KB

MD5
408108ebe7d3b3e9b0e62935db88b20f

SHA1
e3ce81bf9678ca7a416b27258e501eb11c7ea6f4

SHA256
3544a92552efe85ab5b583afa810aa6bf516045f9b65e26d70df0b557aceae59

SHA512
1c74fc59344a85bc6f088d73eae3acdf08410956ecad387ba3cabeec4848e3b918da12c39732dc639f9cd98dbec3c0ef27c35009774dd5d7c17e08388b5bd012

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\bdui_progress_fgr.png
Filesize
2KB

MD5
cb8aa5a3d3c08ab9e935fedb75544506

SHA1
f75c94863d14fea0bcfdfea845fa033cc8f8f29c

SHA256
abda931a062b588d886e034294cc45d29cdbe4addc43a2349785ad9608394d5d

SHA512
8b93496d0f66a14765c9190a20a1704d79d1b7bd7b6aa321b16eb71a63e399221bb301290c2d1296536766dad0602d25b5295a327265c91a1c9759d74f1ef3e0

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\close.svg
Filesize
558B

MD5
b6290f0bdf5f3cbbff0cd5b340305912

SHA1
c6fb51286c16cabb2dc59a986f71a08d228805bf

SHA256
99b6cc6b085ae1204188f7b0ed6e8cc34f28b898c2c14ebffd73de9fc6e7ce00

SHA512
9a7f4aaea6549eec11f06f3aaafe7defa2683c369db378a8e8b8f9222a6945717cfe3c991335ec1c8a8bfde987fdf40c3d31d59d1e492d3f3fb680dd9076cfdc

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\icon_informative.svg
Filesize
837B

MD5
3b43de0b14b13fdff6749904853c253b

SHA1
7b951108623d24c519b2924f8e8801c91d585494

SHA256
d6ffd290c20f2ac15a6bf147e9aaf41861fc560030640e1dafd3435aa979bfb8

SHA512
2e19775ea10218c8ae6cdcdc4d240767b1018ec676c1c1e2d13d447f3e6c2d34c9fc9983d4975774e75330285ef2ca3dcf906eca931ed944a9935665d77c00b0

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\icon_quest.svg
Filesize
1KB

MD5
b16ebe6eaf133c467ff8303f74a58b6e

SHA1
0148005859126f76783c2fa2eaccbbff1de1cda8

SHA256
22f27208a0f7509f86ca02ed2679db99a4f046edafad333a740fcb48851ac679

SHA512
8f17ca7e437c88ed144c35f7958bce9420e4bcaee7ad12ee9e079f19a991efa2e2e1a8bdfa8ff2bc3dccdb15721dd7a7cdd353f2113274235db26e106bff6835

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\images_2\common\status_red.svg
Filesize
805B

MD5
39bbbe82e61b6c3368a9e11c997655a6

SHA1
2b99a0f6fd8afa016d0723d958e8aabe7f34100d

SHA256
1bb65b21b3a3a7f1c4d3a5c1b324b788c6522023f5fdbbc5ec35d7d31cb3d84b

SHA512
be235daaa4f2ea818e83ba5aee382cd16e675a30b5b0266b0b0e67cd52a4d1dd56e39a157d0d4a9b7ddc117d82308a0587feaa27a6ce76c68b78f8e065be72cf

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\img\btn-close.svg
Filesize
659B

MD5
de736a04e478f3a736c5e0a293ae1c24

SHA1
7529065e4e5ef671eb3e4fc6c7f2e742e6c4b590

SHA256
823e31c06f63b050d59c652bb2b0933c013cce340ce375dfe94303575d86d8a5

SHA512
e1d51a43f2a528bbed3e4f0e3f0e5993046c9182c35c7e32e8c4f980450edbe8d84a9d43b1b542ea7e8ebbf886907d20be08d6fb9120dfb579064ccd57c332ea

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\img\icon-warn.svg
Filesize
1KB

MD5
ec9de313fa09cab906cf11d3c137b43a

SHA1
d29800dde53e43e3ee94fa303d80db73766faaf7

SHA256
ca401acc7e0a98b7f28fc648f97cca10539433c8e3c59574d4a90903615da58f

SHA512
71ed70fe089d00f636e14ec7b0543f176cb01483f7110331c6d6a68b4c8c56ae01f85075b9c54a4b1edbfbd61cc1aaa3d69eaf69c38b81d58302a502903c3989

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\img\icons\b-icon-popup.svg
Filesize
929B

MD5
9e9507046df5d049dad7274c5ad6f73e

SHA1
d471147ebbbc9a93a7182e89998dbddc0c3e138d

SHA256
9127bb1dd80801963f38892e07402fafb3e2c56fb3f8bfc3f362b415455790f6

SHA512
ebf44cc9a34bcd074d60923a25960743c3e8edf5ccd2688d70c5f704c9aec9070b9c5aedd842184b0df4db00424cc67a06200a2b1d59a50d7cffa6ff582c5d2b

Download Submit
C:\Program Files\Bitdefender Agent\update_package\skin\img\icons\feedback.svg
Filesize
1KB

MD5
09976d2253955dd625c0c2c5e1560aaf

SHA1
270ecb4f2815e7b0715e88e230d41ad7f7568caf

SHA256
964ea1aa639eb3508deb399771c173dc252b77dbba1a39f9499eaaa2b313272a

SHA512
5729772a8206d372dd1cc67e1320102ed2da16b6c71c1a07124e79dc1fc984aaa292909575c63ff5c5a31ad5e852919e06ff30d0cefc6ca087455fe8afe7c060

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ui\ltr\ProductAgentUI.ui
Filesize
158KB

MD5
1b55f09c3df863fe4afd78efe856eed0

SHA1
453fabfadd0b9c0b6aae23cd2fea63e6d3c9ef94

SHA256
2d6711a45796bac7a1f3795919aadbc03afd7e9bdbd8f12de777facda130c5a2

SHA512
319584577566f33b0891417b0c17e407335d3d175a7c1fee309ff60d8da85db86e54373b9571fe64326a183929029ca0b89a6abf8bc2c39a2d78070569f17164

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ui\ltr\bdsubwiz.ui
Filesize
143KB

MD5
bb1e633a955ce6fac23f4cf78371ff51

SHA1
38c0f3c27a5160251269d75e3ac36e8e27a97a73

SHA256
c6f319f3e5021b10a90ff799e61c521cbbaa452ccc04258dbe1fa059ce1c2011

SHA512
e6ad473aff737cb711dee9092bbe77e75c7c7d0d68ee36ec8b0331a0efa3c926cc13d7d07a18341fd3d2aa090ae93886f2369385915cae4b772bb8cdf6e3cf85

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ui\rtl\ProductAgentUI.ui
Filesize
164KB

MD5
226c2f644f0cf61eba562072c21acdd8

SHA1
df2c8131ddd4d0eee68b43047b9dfe1c4a25178f

SHA256
a6cd8fc85c1d252ff759290e4100e4c053e5c7e3fb00ba13bb17c879fa3871f4

SHA512
57155e492ca30ef988b460ada5668501c84a6e902c132940a225793c714dd967830874bff60dba948552aa41dac1ab8392a10bdca75e01d9aa48e4b352439794

Download Submit
C:\Program Files\Bitdefender Agent\update_package\ui\rtl\bdsubwiz.ui
Filesize
143KB

MD5
68956de14fea9b88ea8aaa79a4d86737

SHA1
119dce0ff47836de4089d68713b3aa2408dee58d

SHA256
05584ee0695908f70d2568bd66bd7c2f7a26606c4c1a91f57a942107d9544d14

SHA512
3da30b55cb25954216672c4ec6f8ba1e9e2ab691ae25f63d0abe107b0c00e893f7779d1762918e3a2afcaf72a9641e31048493923be58c709ac9b6dbafbc04ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
fd7944a4ff1be37517983ffaf5700b11

SHA1
c4287796d78e00969af85b7e16a2d04230961240

SHA256
b54b41e7ce5600bc653aa7c88abb666976872b2d5e2d657bfc1147a0b49e9d74

SHA512
28c58a2ccf39963a8d9f67ea5b93dbccf70b0109b2c8a396a58389cdec9db1205523a95730485bcbc9d533867cbf0e7167ad370fd45740e23656d01d96ee543b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
a774512b00820b61a51258335097b2c9

SHA1
38c28d1ea3907a1af6c0443255ab610dd9285095

SHA256
01946a2d65e59b66ebc256470ff4861f32edee90a44e31bf67529add95cafef4

SHA512
ce109be65060a5e7a872707c6c2ccce3aacd577e59c59d6e23e78d03e3d502f2707713fda40a546ed332e41a56ef90297af99590a5ab02f686a58bcbf3a82da1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Filesize
69KB

MD5
40ff7042d9d45a480937dc9ba340270b

SHA1
ca3adc734d4132d805ff25ff76350a25a9038f2d

SHA256
d3ec8061c878ccee7034fdf7b1b8d16bc479be08941899bedce1d3fc0ac345ba

SHA512
7798414fe9cc718038098aa8459b1281013d7ff31e5eb99dcf812870d4f22508c8ad7c26fae86b2052c37be77a1379dd089a18a5def2cf65089ec61e16c1dd67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Filesize
28KB

MD5
f49230feca781b5fbdea5f9904f36a1a

SHA1
02d335a4903d68004fc42d7f97aa0b57e85c7404

SHA256
a0aba710e7a57b22f5e49525afd0c22315b4281df853e8bc471e9cb88d3506e0

SHA512
5f1eae63f1cb5ba89cad093cdbffbb761f08cefd066cd3b6f188c0902a89f4a642b1120f323ea5be353b0b7a7f87f71f9739c5e955c35525da443194bc4dc30b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Filesize
31KB

MD5
e179979e936b2ea232ab9f0c2acb7d5c

SHA1
7fb6f22b580dbd6509d56e1a0bf5b8202fca8a68

SHA256
0a2c6d0a93f2ab3f0151b247b67575f8e212540d3b7d591d4a5c104982ed4e2f

SHA512
dae78e19d1006e332a3ca67cedc8782f9b3ac9f2040ac9249b237e457b82c364979eea23c8fe8e03a58d67961fb5c37b481d54a8221e4a27b1603f847ccaf7d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Filesize
206KB

MD5
f4f6049850480d968cf17797bd098d45

SHA1
c5e8057032345104059333776c3d0dac5c3fc343

SHA256
ab922dc57f90f4434bb7c4a34b6a86d9874387a6bea11c3d4f075f2187f60b9f

SHA512
e3b5fd4a1bf004ff01e09263a517208d194ef91544e2f853d8ea872810e10289e30e0fda6d629ecff5cb65e2df8e09b046397810918d7c52bb5a7e1217b0aeb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Filesize
137KB

MD5
9b1032cd18a640caa8adcfbad4cac106

SHA1
3d5300fe06b20a0943785a4bb3fd30eb20c6c09d

SHA256
1e76fb686fa48847906d6d4fc19e619f9e615707ab9b148a2da1cfc201a9a10c

SHA512
6836d543ab8b4753e52a6634d03fe9f072e37d12769fc6c2ed5e007bbb2b2b0a661efd91f91d06354db66c983d68d0d12c07062951c9842ac78c4793072ce71e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Filesize
99KB

MD5
0674014a4277ae3a0f094ae84ba2fd8e

SHA1
adbcd96c8fd910b128597c9e6ec657650aab96b0

SHA256
095a051bba77ea7a989f6ca4c3029439b0490bbe674945645446dfd6a3e5b5c1

SHA512
0353c6ab44ba2b49984afc76112fde340d7b90ca37a3a1d7e386dbaabdcd0292c956c250786fe3328b5af12c5ee5b93b0d736495e470f4e07d566672cd52f295

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Filesize
266KB

MD5
81352d6e89a9f1d0dfbc9b7a9762b646

SHA1
b117c42e76934165a15d671b4aa8055730d3d1ab

SHA256
069c620573f559dddf24f5358f88136c20204500645af729c807a3458cf733ff

SHA512
999689fb3519d46c83ad85df724835d8f17511e996e50ef2868463e249ff25ef5963ad1a7c4deaf448daaf95da87dc671f057356361fdbf964ca7611d40ab3f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Filesize
64KB

MD5
659bc3108da0b32e56ffb7961c9af19c

SHA1
7e51dc0c6eaa74ca6a5895d3bd7af87c1f04a93a

SHA256
d9081fdad5a867a469612d5e1666deedf27d26d94cbee41d4d8d34556cf87346

SHA512
0a0fda23f334b4b0112d89e6e53a11920ae22fcf861f541d58cecfc072b3c7c4da0d5bc1e994768553c981788140410e8a29fb0fad46e034e8f41bc0e5573c71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Filesize
104KB

MD5
e66dd2567f726904a546a2ef9738eb06

SHA1
4aa632531c1e35964568ebfa776c38f7eeede689

SHA256
e9485c8e4b4a255e582e3cec7d1fd174c435c61f06ce87d2326780aa0ea24760

SHA512
ade2f98380d6cc46f51f8c120befb142db22cb78ace34ccb38506796c233ebb45a5be6a2f568a0bfa4acd79daa12f857b7d563668f63bdd259ea723604cc1d8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Filesize
29KB

MD5
7d732043116c6f66aaff21527339201b

SHA1
153c2794f4e81733cfa6963c13d92a3dbe169b7b

SHA256
7be3ec565607a3100e4f9e4cc6eb7c05998cb532af883daa0d642bba33549b8b

SHA512
8895bd2c1f2d88c474e3bf73a788d6494736806fcdf21abd062da2eb9f2b33b69b8873316972dcad9e32045253e9e521b12aa58d8cd88df92e8272c6cfa39756

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Filesize
305KB

MD5
c578cf381299d403c69f07b80a32b17d

SHA1
ec7e5fc6b46eb151a0f2dd136e507ff43b334d9d

SHA256
54df392c684c490264d5668300e9c963965d049ff2f77724e8417a0d3a092136

SHA512
9e871318b0a37285b8799263d28f9a96cd1b952ee3b59cb0b55639ff904ac9435eecfbcc7934e92f36efa74279af701d9f23ca56cfbd16369f4fbdbfffe84449

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Filesize
41KB

MD5
db875a5d8eae6b4f9cc1e0d5667a7b27

SHA1
96a3e872a944278cac3b6d728fcb87b986a2bb95

SHA256
7373327aa97895dad84cc64a70ab21d3920363e38285f6ca52b33c69c2a72253

SHA512
fbf5935f166e0fc103d55de740c584951e6071e7daf336a5ecc117bb39762f64a97413fe06eca6907efd06f1f5526e34e113bcabbfc373003760a48e7d957f87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Filesize
85KB

MD5
54bdab8f5942c1d312276a2459636c90

SHA1
ab35a78fdecc614588242e260ea4064f879a9e7a

SHA256
c4f54cdda9259a50a0b141a3889081c55201dddcde5d68533343ce94a312927c

SHA512
3e22516f56bac8b3803d59cb9567f3657655a5c8e5b45e72ad81671f8278ad5b6e05bf38e6bb63c86090a68f71d1436cf99ae6798b308d614099a670eec7cf17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Filesize
37KB

MD5
20160eca4fc612bd5f477dee7128448b

SHA1
b5db5abd1073c319fc78e2761d6a332a94559c6f

SHA256
0a27e1a0688cc65ddd7af25763fd94fbc632e8ae7f6c83b2ae712f48473aacf3

SHA512
06fd4faf8e2f708e9bd0b7dc6879e5077e90ce8f90139b1670959bce3ffb2385288859e3df0b60d2c61768025ed0ca4761b954227e170264b3cc72c47abeb64f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
Filesize
16KB

MD5
d09e37a8223fbf01dc1f1d7195973d4f

SHA1
f372edd9de7e9456fa9a5f37cbd3b5ad27320f12

SHA256
0ac09c3463f8133d9b2bbc8b1539cc15bdbdc7fe9f8cd7195fc21e3a256deaf3

SHA512
797426e6ad63e7f2b180d8c32d73ef3e1709b5848afccd698d3dc53444dfd2c59764dc3f88419e7e10bf8147a70bb9c5c842365e30aee5ff3fd8e9fd9975fccc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015
Filesize
64KB

MD5
bdce43c2c61bac6079e2a0f97e41dac3

SHA1
39a113dedb521c9fe1c4df70e27215342f606f1a

SHA256
8929d8f16eb7b5c5b834010012b540eec83eaac1381804ae7a796ef44ec3f7c9

SHA512
0e518ad0a7a9086530d5dfb53dbe9ef537d38cc0143b6608bdb512a4ce48b63efd4f0681e80f1ab4c098fefba3c027e10446b753fbb1d472705e22928c13f08d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016
Filesize
77KB

MD5
e787b41c63166b1f972c93be8a62c098

SHA1
9cdf8c1850f8e930987294d6ad33f22f62d7a6c1

SHA256
7a18f6ff4b58e0707ded79257e3cdcd0f9ebf83bd63d7aeb2f63b726307fc1cb

SHA512
54737307c2e47161dd9347ecf7c90d57528533c98dd8ceb9d297be215b2490df3af4aa024890d511aa68e210345685948730e10dfbb6b4f1585ad77b68775cf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
Filesize
97KB

MD5
15e26d1b421135bcb43b7d6d6845a0b7

SHA1
a2df276a20aca488491933cb60bd83b422c16e3b

SHA256
600a90bd6fe39e01b3a4baea1f614c959820bb5fb4907c0e9885e4fc021089f9

SHA512
3e494fd610caacc8b11cb11987b7d42c3772fa4e03db188a32590d8c10f138227ceda655628e1a7e5aa1ccf2043fe1044cd9a7927b316221ae1f864821f575bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Filesize
72KB

MD5
41ecd7c3e4dab72baf67ccd67084d543

SHA1
0e984d390ccd450b1c6e886c606425690019dc0a

SHA256
f0bc026e497bcdd26e50ae1fe68eb6cb9873582ad05a44d90904b761745c110b

SHA512
4d9ae8940592d3ecd239b42d6f92b5397a15bf4cf373078c567c9e839a657768541c7f3fa1812351fe2526348f9028e357bb4ca61af209e527ba4a37e7df20a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
Filesize
47KB

MD5
bf79628d182fa7fe1a086b79f37db29c

SHA1
60f5595d3334c5907369ea1422878eb9ce718d07

SHA256
785a91e108f7eddaa0b75c16080d8ebdf678b4047515025c1e9582584117c13d

SHA512
e6461ec35dae6ecda80045ddd6ae05b1dd5c7d7b24c679bec44620f6c835e7d41d72569e34c4087ccadb39f963914f45a240996a660b231dabcf275ce8b6be23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
Filesize
73KB

MD5
e9336b1366c60477a94605a8715bdf89

SHA1
d6342a982e558d7506171041d5e325fbd00cdbe3

SHA256
dd888ef958a52dde1d2861c3f95fb8c45fb012b3227787f8fd165f9a61df6c7d

SHA512
41dadd41396a59ca5f5dbaa12f66d735636a1b33c6c539073b34df18f52a12d74325e9930a531783199a685be84f6048f29a16acb8b531f36b6178a1a9b086ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
Filesize
50KB

MD5
74ad965a9474323c03c666f8d98a796e

SHA1
156f0d750c5c069affdb1b525ad97f0fa815855e

SHA256
11063a932cc0ad98bc921dff48ac726e69de5935ed2c201e6421a6e242a3eddf

SHA512
efc91b9a63a0bc435ee042dafb1201055c28f41af973ad900be66d93711f1a4927687c3e44729e7dd841ae4e685650c508596c487c9c7feac66813f5c5c1d467

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
Filesize
26KB

MD5
968d5820e7217263e87c7c25dd857524

SHA1
c3bd07dbde83fb68dabcf99d830d91d5cc56039e

SHA256
8223e36063316d3d39c1369e8580403f36046b9da644ae1b720df95c12c9a12e

SHA512
849e7fdd08b8b2fc2b5214bfb64d2773a20ff01ee864462288de1615d10ebbc54b9d4baa82e06a4327f102f0f411b7d350da8f6132290f72ed0b811a2894ddad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b
Filesize
62KB

MD5
cfa020ca66c38d717fe9da70815165d8

SHA1
127b15a0d8d5dc35996f9892bdd34b9c118b146b

SHA256
d840f4248e17d6c34e790cfe150d81bf6d6db3fc0fa8d82c36029e63db0df303

SHA512
d77a02f6e92ae56f7c17426d507bd61493b4ad11b3d664aac5fd08b9d91b3b06813aca72ced00030731ca39d602e670501713657f3d6cda21dcd7fc9721726de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c
Filesize
31KB

MD5
c58b2cdc4b2aca6d0b2c5b3cab3f8bbd

SHA1
3d22bb3caa7a2f4e4c58f496671c87f038641dd7

SHA256
453190c377780c54c85af5ed4ead80ac2d1dc805c7e5bd5e0c2a836f938e214d

SHA512
09277e9da5da3c0230c037977762d6a60668279cacf98cc28d40b1376b4c26209dc03ebe8a402f5242351e23c4d054098ce25b3f97f8d78853a0c02ebd848418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
Filesize
16KB

MD5
12333931f0289d5ac57cec1a7a6dfb92

SHA1
6feb8e92b578021bac7f3599d6477fc5d2429d36

SHA256
b1c58f389410faee89ffe7a353e468c34fd61818886f42cdb4f2e1c62d0165b1

SHA512
a32a4f470fec239b2c9e891f0cb558c1d414d8e0cbddb5f5afa1c332f09db7ce3f0018e90cbe0067e9b3e97b45268372355cf5d5529329a1de815fdefc445f16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032
Filesize
231KB

MD5
1588f67cea178925de056020c72cc78d

SHA1
f971a255aae988f899796102845693e5931f3f81

SHA256
355d223e37f87e3cafa08b1725a5c53c2fc02b3e0f0042e030c6cd900867844e

SHA512
6532cfbabc01ef8bae0412cf7d2fcdcf97629f68bcbae4bc7ae19a924542ea29b7af80079336a6461bb70181a2d401604f50c056deedbe1f544be431a48f3985

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034
Filesize
134KB

MD5
33c3c5540b1ffdb273fa38d95c93f6bb

SHA1
e6b411b5a3276c6b483a6058b40f2f9f66eefc7d

SHA256
00dabee38833f18a2441d66a948ffe1f7ccb235e1627df88997861daf0adc842

SHA512
8bf6b090f82c16966c88108d30589e625c4e7746335c75623555bd1a129d53883e8a979484a86c0a1555d9e19dab0ef0d4bb09d1ca8bcda532c912778e1314dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036
Filesize
74KB

MD5
99419ffc264360c0aba3ba223c29fcd3

SHA1
9a47c783b0cc78a684204b0caac1942e2ce05e6e

SHA256
d84407005f8be6253de84d06aba3b98adf802ac9dc7e75169423298a4c772f26

SHA512
72aa8ccddd6507ff4468011d51c446f81d2db0c6656f8766bb97c91a39cfe20e9c78126edcbeddf2fd94a41028f2c1bb4e9f834beefee0a51002160ec833dc76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d
Filesize
31KB

MD5
6877718d0da75d6b6200706ca13e4409

SHA1
841bfe6dc2333180d2e967876b877a60aa2aba10

SHA256
9cdf7065d736f8258abadd2ef91870f4bfcd55dffa206d7317a79fdf57e180b3

SHA512
e7e48eea44bd4c9a957bc269a070ca2adf1b6199c1d8937f600a9c7e343c23d4d8700fc647febb5502ba5a887362aeda2152a60c19144d2f81968c05fe915c16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046
Filesize
139KB

MD5
810cb11a54c123777d095fc0fcd24a04

SHA1
f54c2247eb828c46eab637bf05b5c581b1038dd2

SHA256
d812c786685193ff9fba609ee064cdc7df07cdd46df994521e5a51d37cd5a25b

SHA512
5febc44d16bc10511378d5b798f1e37a90b1e62c3955aeb377a7b9ae62926723f49a05ed8bde81e605cec333dcbab87143e8e2b6aba9ec199879f73d631242c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c
Filesize
401KB

MD5
ec6fcd56a22e4115b865b790971b656b

SHA1
40178f3a55b8e3ed72eb96e57bf16baf1eee106b

SHA256
00a0251d6c735cd2326172a7df2dc676a98cc2312afb5b6bfffce74482f59ee7

SHA512
63cb743e626b9fd685fd77ad48ba0eedd1bdc4c30aa416b630ae6624497c990f14a4dac839ae56c5bea729c24d7373be1da516e38b37ac395b77b57db33637eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0196446ad0b8f1cb_0
Filesize
33KB

MD5
42be5cea618291fe196081d3b0025094

SHA1
e3f9d0b8e3d9b77939d1c657a4ba1f5d99e454c5

SHA256
850cf6f684a377e755f4a8c446210a4a62a40f2893ebfb310fb2bfa4b66d8009

SHA512
3e862924b79572ea073fed15ffa8920b3a26d0c30298589f757fed1d404cdc6f041d88ea442e325db71dea7ec69931248efb4b860cd81435340981db3c5d4bc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0573a25aee5fe4ec_0
Filesize
3KB

MD5
2daf64d442533505c5d5fa9c48958508

SHA1
9bf370fd2610c5ea56d62ca7ca8454672075c3a0

SHA256
64b732c3561c8f2e0644051ae046db6a363bc93a2d6e53146897a8eef6008c2a

SHA512
f44d58790e32f52aa1225cb79311f163f9c6c035162e9c672441fb87e93c8698b5ce9e9699b7b8d0003d8f7c0b22bfa8c6c3ac8d7125ec1280707e64c0752554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
7827e7e5c77bec44dc67906637502d5a

SHA1
85a0b88920fb6acd7423b225df96c1e6d37ae5fb

SHA256
cdbaaa79aa05e3ca7c6b6ae644bd99bcc02e6e9163f73b3d2fe5e0fcb8baa5e0

SHA512
dc2389c05854410294ef34464f3ee7cf2616785b36fa34b88d8667af1fb0434da169585fcbab05196bd8fb8acb292e67adbe983f667bb20183a91e20b7755ab1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
02c69f5a3b53222965c4dcff1b49feea

SHA1
c5fd1ce68bed332e724dd01bd080088697136eec

SHA256
81c905f3f8a73e1fb58fb0f6233c582deb8bc50bf5bcfa0af612f388f0df1d92

SHA512
cc9745e0e5dbfd938926fad5f90f7a177c0bc903471a1b1db4182d148044f3732932a17cb9071858574d0072d08ae5c1e3dcce7d8795b02f7c4333b700dfc4b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
b4b5790705a8451570375e989b3a0ef9

SHA1
d10101c0cd3449acc143fd9a9ba0be6a3d6c33a7

SHA256
669d3ca20b4fb60139a771374e4d9a01cec9eb5ae579a3bfb7cd6c95218e8dcb

SHA512
a4fb364d44c88c63e7ff4ffe58d24a31013fbfad753579a1d75ba4fff9ebb5110dee2e5a435ac96745a09922d21fa6cd0475558931097be5863b7e75cfdc6c80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
d7bdcfe205f5b1f03efc86331ba89977

SHA1
d4ee50388bc7c04469ca4827421964e7422c9440

SHA256
a2ec2ef8906738d0415ab9f2408fbe9e10ad6c151b21ec4b4ab833cefb6a8907

SHA512
e825d85f13dcdc9749781268ba01d9916442e493ad21e8926bdb47cc01eaacbd1f22cae7dcc7e65605fe5247f0d70ed40fcc7bc824611303a5fc264a72aec2d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
593B

MD5
94c1600cb4341d106eb98d40a3e70f1a

SHA1
d4eac3d40c747b184f7e1b3f88a754586bd02129

SHA256
f44573f3f3fd5f12ae396727371769624eaade2a68fedf4b59247b978e4a67e4

SHA512
629207a6873201795a47ab5af35962afa9f4de3b9d2ab020cd3d9d618380cff2e65a91895db1b18a5b5662401ec84118f5c38203fb56f958ee2cbb4b7f738a0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
5KB

MD5
c05e44f59704e8fcca151424a25dcfb5

SHA1
19677c4451029ad08701679761f4117fec7d799e

SHA256
7081824b9e3447c3f036dd52fec51d41b35bb889fa260ab000dd07a8d27a1203

SHA512
c365c96edd783f3bb808113bd45daabfb1abb5c88039c54367215c3f086e9f2cd22329a1cc7f7935cdedb2e8fd8c664df6b0115941dbf829510e3a8037e59eee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
6KB

MD5
7998831cdd9271d3ad437cb9f384c660

SHA1
3f9a8aea86e34e69cc14a34e56896f30fea9b0b8

SHA256
8406f5e21ff35d1b183cf4214148d832a6223207e7f95f8b1e9bdd0a18f41cea

SHA512
a18826453c558ee950eb83d9586655f8600562a2b4b5c924a4444d52dd440ba8a2b8f0465fe0e63eefa5e8563be53b3629fde2fce7e333ca25098fb13e85f75b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
6KB

MD5
5f6780d21184ad1a850d1997bec5e2de

SHA1
6b911d3b6dc09311a6c703404b09d4cf96a7d125

SHA256
dc1024d677183e419e0c53ba20aadd78798ef2cd347bf4e97d66a1a28649ce52

SHA512
3905ac0f86db35905dedff59c3c33855394c13bfee3d86a10dd1dabd02f2748f6ac528289f97f840219b43359bed602c8579e1f0da430fa18fdc585675692380

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
6290b3e439d394fe3bd4ba3badf94f3e

SHA1
1ba271feed7a3ee1fc9703a8c2f559ac6fe1bf94

SHA256
f0f5d91bfe9d0f412aa216742ee1842faecab4bc20fff2140b8776c0e2f97374

SHA512
79048680e733d20e652a6bc253f2f5bffebcce00731c9f79ad3566df9111a5401d08d71699f7e5473c2efc4f0b198c1a44c178a30893ee5baf14bacc60f553d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
8KB

MD5
fe41e72262c630437feb908c206a3ad7

SHA1
36c5ec8d07c27e8ae9271aac5fa56726ec710553

SHA256
dc43aa261a170636ac09c89bac7c529c6b00c07449fb6cbf2f71f6ad635e1595

SHA512
f782e2f6d5ecf6b25f87779507fb47088107584ff939c98eb3206d0d9102ce6b0121011a9b5d74edb8a4d927bfca0812bdae8aaf8d64517cd400de795544becd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
8KB

MD5
04d9fbbe226cb2960dc89e8f38181247

SHA1
f401510ebe282c8df586b0b431034de1b4e26bd3

SHA256
dd0b821c820ef1b3350221c7d0f9926686a955b501f782b8a4d48b60919bf9ef

SHA512
8b72739565c635340131319e2554184c2003319fac6c66f6b1af6b84ab2dcac6f51568fdbf705b3a61d69b864bda045147d724df4477402b3244e49494841d98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
9KB

MD5
3f9e4b61ee39c2c37aaaee8508678cd8

SHA1
aafe037a7eb1e23b240a33c7ef7a7486bbabab76

SHA256
6d6fe4a4e77d31f3fea17c2f15533e5ab59aa07c4ea6bbb5a44ff62c6913111e

SHA512
c6b2272e3dab7b55dede59545f7d6ba55bc74827463ca87defbf79f735f048736ebf2f751847cf623f7f349842ec9725b2a98d506b4ac75daee39c7b7499de44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
14775ea84b4ea223848acc8a9fcb5f67

SHA1
10f1f6493fcadbcaa4a0155c361c5f56a6159017

SHA256
64bed7355430ce70b1d5f330882e734138d6cd98dcf8bf82d09a3a3bfaf2208c

SHA512
587b08f41985bd594fc8db44da71fbd02bef1edba6714d8c49df0c78a707e12c6b12cef95cf069152c68c63b543e4f45cf79fbdd3aead8b5c5875ff8419ee27e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
9KB

MD5
bc709e71acc49ccb365369db62d5f866

SHA1
1201b19eb5901d9076f2ffa8b91af210c49c9e8d

SHA256
2190e51e338fcb41451cdc090b7cfc271dd6b721fc16430ef8490823706b2121

SHA512
63616a34e08d6900866a4768ad17bdfb630816e2173282e03653d57e3a98accd9b377cb57753b8bb72fc87a3d2fd76b646a68b902614aa0e5201cef08f2be1b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
57cf875eb3e98a5cb868aa2609e3c33f

SHA1
b5885b5599231dbb27c1122d17b3aac29c34ee76

SHA256
863df3fd1224d4607b362fce97d1dce7551b3b4f7c508145fad9073e19c6e4ab

SHA512
f5b4af8e86d1e30706fbc23ca207eb7610bb6c65d1b5c91f7a9169752566d7aa176dd58bc71c2ddab98ebd0b4e10d235b3d7d41b82ec0aeb4c6cd2441d2ee950

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
7ea218d05c74d4e63f6df7b12bb85ad7

SHA1
081a4447472e7c3cd95d8ce61daebf118aa29d00

SHA256
f4809756bf30f70abebc8087095b0124e20e9f3e66683a942988d02f8988f5ad

SHA512
edae1ea68f12f9754827ae3d524d90917bd44368bb85da99f1753f37dc72c492ca8c326b9750e7595acff262beedbc57071f0279ea966227bb9584fc5e9eac96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
eeb10bfcfcfefecbfa51cbf3e7d385fe

SHA1
e28e6532913e9c2eede317c01889263d4cdaf64f

SHA256
47fb5e619ceacc00b8edf0767d50d7b4bbf6561218b40d998c0f95493c9f3660

SHA512
37f5b4fc2c61a38a39678bfdfd1c2c66675ca7de089d3be837a2fca08652e502783614c8f390fd463587918e1dfe15488165182c0961853975c83bcc97615e21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
44b1bb68a914565d36a1debf90646817

SHA1
41b5efde818eb6142dba70401bee7012e230418d

SHA256
0138fe44baa280c656081b9a486dc1f3f1db841ce74d106226d8e6b3d34d616a

SHA512
1ac3143699d511295a72864896d7603108709998802463b570dd8e1ef8572be8077de61932001a2b42c2921c3c4cc916aefd269d793f9b61d67ebdfebf3d62ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
1KB

MD5
5fdd75bb3c821e848d935c468903eebf

SHA1
b76487b1974b8478b806b8a9e2e20067fc8fdb58

SHA256
b43caf77891945ca0ef22f0e3fabe70cd2f8761c61df2a7f3f57d6cb9abde282

SHA512
58938c2e0a16c4a34bd50c68ab51ef4acc34231360516fedef418fa1a366ce1b750f620b2105bc7bb2ceee7ba5c15fc64fe1c63f1d54e50e0fe7b67e0bdf7135

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
1KB

MD5
776a522975b0f856622abf74e529b400

SHA1
b6d68553a9e8dbaded4f4863d460ffdaab2ebbb6

SHA256
3371cb5635cc84a0c4fc0f4ac414b7f23e01579f1d36e0a3ec5129f99080ce70

SHA512
e077d7010d7c22abdd54884cf7c928d69fb41779520136877074f122d81933c391c2918f6bafa64b3773bb9e84efbba16b10fcf02b0153e3a3bfea681e58e5f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
2KB

MD5
96c78b7ab142482cc8b34aa7dfd95e43

SHA1
3085c0faf143570e2d296c0238941ae1ecfc4249

SHA256
1bd74bb52f29fceb5e0bd296fedcd4c088c9cab97678e440f2f6614a9c4c819b

SHA512
8c50f431ad40d92006c8dd7bac566715169d60529ca58115896b8b0af6e02587eb711c05a16b7dfd2e4b67985dd9e8097ed676c14bcd29390fa636ccf113dc85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe59195a.TMP
Filesize
1KB

MD5
2a659d2d29371173aa14fc2921e0389e

SHA1
3ffc5f718e9c29e549ad73a10bd42f9e8942b3de

SHA256
70f3288b108351829f51c59fa8c09099f4e21a556da7a7e043fc18dca029570e

SHA512
abfee2207aca2f7c761efc37ffe994b1812d5863257f64232ecefef66245e21d420270307c975c73e4ec840aa57cbb5b9447f2435e299c74e27df9d18bcb4578

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
d1f38db5ecbfc7d78b0c7a780660991a

SHA1
6071af649850b352220f731df106e7ac3d99e2a9

SHA256
857552b2de788d6e145f3b135fb6bd6f86691291f2df829964e77f50041a292a

SHA512
7559bc1d4754a6493264570b9d23d5218a8b3cac1db376cb43c4a2c82d6a111c3e6f5a2c5006c97e7de226f896e215f9425e20e4bf3f7d45fa17d5a934443907

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
f90efa1e416b1c05094a1e2aae4fa3bb

SHA1
fa6e3d1dafc03fe3479b8a5416ee7faf71bc448c

SHA256
34da2be14aea27797eb5b4f6aba7418909d837dfae5c7a310f0681caf608a1e4

SHA512
6ecd67cd156135abb7bc20dc71b5ea8006cf89cc9e6fe85f5b24d8e16c54357ed7ca1331e82a21932b003857d99dbf6c2151b3dbcaaa2892a7c0f3323704e4a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
9a64308678fb17ac46306fd975148fe8

SHA1
f8043cdda152615461566cd51ebc386efc874b47

SHA256
aa36300c8fd2bb23b01895c9132b8950bda35f747cc62bdb7e428b65fc95b802

SHA512
4c84eae45b7b80aded93b035eac3305a9e3e203091e56a58dd0c9efaeb41d05182f9b92c329104f41dadcb5e5a69d0e267496d7db275f6baddebdf0e30a9aa87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
3da3ed85bfa32e67c98dc57dc1ae4f36

SHA1
65f23909756666e8535109d1ae0cea0d5af3bf32

SHA256
88505858413cb4b1eef45c601a53afe86921f2e21d42a62520343c03de68e54d

SHA512
97e6fa8431c9582e2ee66cbda9edca2397c91adb5b5d05b969267ca152a1c8fd5c6d73b824483de5e1332bc0364457e99c81f6292b8745f5979534826982b091

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
12KB

MD5
fd5f8b85465c4b1e31b1c2f11450a75c

SHA1
2cb277ba4465a620bd6625c28121d597775a8c3e

SHA256
42faf8bf03305c38c30ba77cc9e3718cde430b34fe397ae64d20fc80a0c954b3

SHA512
c7fe656b3e1263fef9e8c45e5ce290c83fdb75e873d6dc618c9f26a27dcc9e47dc1c0cf83385855f1161e51667787d02c1dca6c5ef82f035e2cc83b4413e8b8c

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
Filesize
254KB

MD5
5a11b7eae029d6c701f4ed8f44fdcfaa

SHA1
7268f2d9cbeb891e215eaba0254b5ad5761fb2e7

SHA256
15f3a3eb489c40165059968a25e650024ea27664ea60827b1176c48bb263e0f8

SHA512
ac7ef6965fb7c4472a1e308e6e52352dbe3bd0c262d4915069db6d94b8524786794e4282ccb4835b65311f638ba9d342640c9f80f24d21be58bc92f0d71b04cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
Filesize
246KB

MD5
04b4c9b7b3bb9834b873522c4182028c

SHA1
1e754db334b79a1cdf1f7b92022954efc32aa8c2

SHA256
fc0c4c0a9192c4c811417c6a12efce0ff54ee9bf4f54e5f191627d9661bc572f

SHA512
823666e0b245af507ff2c6b66af97e56e88d06bceb39965ea86f4136d99d2afadc8540665436126b17689fba57cbe19d117e68c3b530ae43210375c88549783d

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe.md5
Filesize
32B

MD5
415cf0da06c4987935a5c15beded8ceb

SHA1
2dd3e96c6d7887d16c1ca8d6db2dacf42a46a710

SHA256
d330a4fc27617cdf0a9af8a95d96ed15764d1a562bdf9e818540c77a679b1fa1

SHA512
936ac4c2d55c38fb5b0080e8d6857a94819408ac6178fa3616b26bc60f4985b072a43eafe41783f92e2b36956c88c3c032cc4b9fbf97689b4787b5f1314f09c2

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe
Filesize
677KB

MD5
b89fbdb5b792eb26b07b80840bd00394

SHA1
9100ec2809769807f1ddce72c74cd1eb740c6157

SHA256
74d7c23e9c73b87b1efc5eca7ae59ec55c1d434f26a1eb21a1e867abe6bbfd28

SHA512
dd7a89813f95a46c4c2dad31e7e21da50af780a04e6baeab741c3dea1c6b0109dc47856a882a58236ed5da9647afb28394718a53b7fcb9e32c5384f61d3b1b4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe.md5
Filesize
32B

MD5
f8e011c50ef26229ea6ced4cbad39627

SHA1
0dcfc3c0b99d53124aec04480e921e86059483f8

SHA256
e98387f3cabc3e36cb58f692d893c7fc78375f3341d11ffa911dba6d40c64758

SHA512
bbd2d27524b8ef3609839840497d21f137679c51fe068aa50dd692275b4180e680808d919fbeca23d59168a1bb22b221e9863e5c48078f50602a6627be6a1cd0

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\deploy.dll
Filesize
88KB

MD5
58058549d959ffcc93a2e91fa482be34

SHA1
b1299a4707c04646868dd969b975142e105eebd0

SHA256
c6ad0689638c27accac9f74e1dbadcdbfb35ecafdce40347e9c3a9e5f095a691

SHA512
e762b80b2a35da370169db34d14fd77f98ec30ea9c63670e6c13cddde1ccf7c2d0c80343818a51aeb9a87e12cc71521430693f615aa918b10b3e43e768c4288e

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\deploy.dll.md5
Filesize
32B

MD5
29940520ff7ef383652947b5db8447dd

SHA1
56dc5f699e1e6ca55225ab6fbf0570c306c0900d

SHA256
2c35c51fd87b3d8be12a73438ae66efd10a59f0df52a95f773198d9a5bae84d6

SHA512
3d0ad946fd9324ea658df06faf6798177d2ad741f29f80be757bb4178a7b63f0bf0761515fb27805e64daf9ee36893bacab861ed181db5f107602d3b167aa1fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\agentpackage.exe
Filesize
6.7MB

MD5
ca79d4bcd9baa62457a4e285f98afd7f

SHA1
e24147d5daf053974f14cbeab48c9ecc17ee9b6d

SHA256
8d21325676e12a2d4d5a0251603b8da383ab041b167c0eb7191be964ef9cdfb0

SHA512
fa378575997ccc37e688d9456247d54f36b4fbe5121c60c706ae72a04e74eeefab163ab2fc653ddd90a1a4960af3f9659881dc56fb0a443a00ab28826cb90075

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\agentpackage.exe.md5
Filesize
32B

MD5
f0be92764543be6c8d2fc02702a9881d

SHA1
348a9fc0e086e228bb865773c4f97e956e734cef

SHA256
625ec79467509f4046513703afe5fe40f586072b61e6c4f7d549e5e903613b61

SHA512
af7081306990c4893184620402805ee42907c5c481039c5e515996d67b00b606b38f8b8478a4044c68c1ece7daa5083bd8b645a2de9ef02920d9a8a6176e7ec0

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
Filesize
3.1MB

MD5
4cf95a755bd0ac913bdbf8cb08b4a035

SHA1
bda68d7f283947d7c6e0f2342ba5c072b0b97259

SHA256
20db4e6b37ae6f896febaa16de1ac1d5ad102880329d970c6b2120b26d0a338f

SHA512
4a4b3c2e1c0b7ff1cc1d1d46f4bbc0c4efd720f7c77e3b830b09e304ca85add628ce697c34fece7e8b8f3d78185fd2424513aa52e72c1e476be9a0c8bbf3b86a

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe.md5
Filesize
32B

MD5
558b23d6f38e6b2aad7dbd8d2d0d1a9b

SHA1
40845c6c4bc99409848989e9c3f8e3503fbf4ff6

SHA256
3557c192c8a4d5c14dd49d1500427a63e767c3f19cbebadbe552baf3cc75afab

SHA512
ea7646c926138b370ad089c4196840aa25d36dc7097b7f156f8576a04dc14b950ea0269c71515049d9ec31adc58fb9f4741ab5cf537b5f407166d416590a12c0

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\agent_launcher.exe
Filesize
254KB

MD5
8741a42add90ef894367407c976f6914

SHA1
a77db699167c1934bd2f4562ea9dede6dd3bfa27

SHA256
f449c982eaa0c272086848f1cca254cc4e0b6e3b252de487120a0918cd70c3f8

SHA512
203c1493052a6764f9403867a35d01dab53574df03f80b486b5842c9f019bb8b5399a579942994286fb7c8ac691d398d1adc3f20b707a579efb7f8100b0021ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\agent_launcher.exe
Filesize
192KB

MD5
a1927f6deb3fe6327c5b50683d4d4665

SHA1
4d5e455e067be5831fc833e8be60e26318802915

SHA256
58931887ab397eb976b6f19b29f60aa016be351d85a148a00a1897ce950ae09d

SHA512
0eb74ddefb36a958bdf561e01a30b3bfe77e6c7231aaa5c62dc92c63c08c141ec59df968f6bfd87d3187dd7f456c4fd771d4e24b630333dd964cfa438cea8e52

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\bddeploy.exe
Filesize
677KB

MD5
d3492e5511c9ab8300fbbf20055b26eb

SHA1
244f277ba2a7853082335862a37b83022ab68a1f

SHA256
3a4545019b48162b390faea2103a2f06308bf34f7c40a7969f633a1fc2f9b724

SHA512
71387e2bcddf8a0548f2754c80052c0d1d3658cebdb66134b82d3a8bc9f74867582bf60ffe24c694071becf5ed3d21d4f6292ec7888d8b4f223c5cb0f2eecfe2

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\installer.exe
Filesize
826KB

MD5
6dc8eac8a3e330a9692279b85ebeeb79

SHA1
7fe2060c01625ad717261ffc273252bf34844069

SHA256
09d5f7c05352c9d20a09de6a50f2785ca4913bdc368610527d144306d6770ce7

SHA512
6a585d4b9450a2700779a3b80cf88b02c295a1bb412c0f684739e8af1b7f7c650ef96082f89152b1d616c3ecffaaf9cb5eff31dcaf65ebfa0687c88e18ddfd30

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\setuppackage.exe
Filesize
512KB

MD5
cb510dd481851f9895036ad66bdbedc8

SHA1
ef89fbd4e346c998eb4fd43c52f541df979026cb

SHA256
53eb41ec3fb90ac845a61132760aba08c1c942d22f45d342f6bb8df14d83fd21

SHA512
f1a2593e090aa1166e475d59288c2ce1678d50c30f0be14e2bbfa858d638328c2a817511f5230b9427c6295e80134463c625541829ba8edf4b47ecb568516a56

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX1\packages\setuppackage.exe
Filesize
2.4MB

MD5
c60167c67893b5f128f049f2596f977b

SHA1
7371af46401f0b3d664bcc6d348fd5082c676520

SHA256
55be9b4e9f92b11a8f39309bdb5805ba2d4d9d64813d82b94daf817387ddba36

SHA512
8d208aa9966345938693e9abd14656a3623e90b0398883e2f5bfa451676b393a27b2f3dc803631cb9a22e93f3823f491462b5cbdf00d7afffd58cc723943f413

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\BPInstaller.exe
Filesize
1.7MB

MD5
455f9a4fbd1554bb10446671200b40a3

SHA1
06b590a8150394b53394f2dc278cc028a9586933

SHA256
143c7371da8eb05e058354b01d25cdf40723f1a546e155a9132cd97890d28b76

SHA512
5a5e66651c00ecb31ff2c1689a0c885eb75ab9410a4917d33a9c49cc0e23d5cb00c240e6686422664015da0b244ff4048e16eeee8b164f4bfe8f58fba5b99d1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\additional.dll
Filesize
1.3MB

MD5
789f26972ebd8428285be7b694afb02b

SHA1
d6178ff3638c7c8081cc2521f68667d1d01cdc18

SHA256
2db04eb8d6081afa873ac72bbeafae7f82516db107d8c04084ef0b4f3c5c4323

SHA512
691cbe94af531b9eeeb441ac9ae460361b1d9e7b888c952a4ab2a932b683ddadc21a07fa2e9e442573064e94a0e6ebe7316d05bb0650e26ceae052bb12d9ee9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\agentpackage.exe
Filesize
2.5MB

MD5
22030eb5b61c2b930bd492c97e8e8c87

SHA1
fbc039964323aa540073dbc9102ca4ea79b80dab

SHA256
a4ed2784424a5d7638b6a76c862833dfccb0d4f5e9150851cbf26925629c4df3

SHA512
729641d6603c0d40a07f082207131cee3e7d0aa0a52184877306d7b8ce861ddeef9a25f034fb93655950be72bf30430be6cb85fc6cf9fc8ef081408924dd2516

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\lang\en-US.dll
Filesize
21KB

MD5
077d9fc55585b1a9fa870663baec9209

SHA1
422262f82772ed3b7f5ba80ee277674447c50bcd

SHA256
8c0ce3a5ff75babdeb3ea25f743010b61e94c5ddb4cbc9a8c7d53ee26797faab

SHA512
5aa747c492522a95d1f0ae1be9c2954e5597543bbc08f1d7b1bfa4b0c976b6cd93b0fca67c34e0478f380cac9632b54e15719574fa13a58ff841efb7fa6c2c70

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\lang\ltr\resources.dll
Filesize
103KB

MD5
414399caf9eff714933fdf3c97ef01c5

SHA1
4641e0f3f68376f173aefe5433a4f9f468bf4233

SHA256
9f1db17214e45c8b2e344d64c9a409f9d8338f181c261a6cd6cede7fc9cbaaef

SHA512
9f379b3c1be42368b5aaad324c9937f27dd6080dfe00c944df4742382dad672e90750e5ffda5e13b3349f49ab367a2d87e38bdcedb27a1ab0fb6d2ff0858b325

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\sciter.dll
Filesize
1.1MB

MD5
6c76101f5a8192efe3afbfe3ea314b1a

SHA1
9bbf2a701bd49342d2f0ae661f5efc4ff22af0c8

SHA256
aa0d118b5b7dcf51ec29329e25c08bbcbd872c696c502cd976d6e77492818634

SHA512
aa41aeebe0f802d35f148c33aa05aa7af203b010fb61f7e8815772f98b6928775392c1871959ccb115bab9e9be5d1d921d721d355716adeaa56e6df8a75267b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX2\packages\unrar.dll
Filesize
262KB

MD5
ae9c5338d8495eea829e79799cea0357

SHA1
3491d6c2ce04f49b92b3eb424148432fb179bcdb

SHA256
799232852e8813bcbf846e3d78abfbddf62eb59a639f0a74350a738204e5ab91

SHA512
452c39a89023e840a095d2ef754712d61e1c02e5f7f1ab52958e2ee4359f06f9f3055901ddf9318c0fe771e31a62c354f6bbcd8065c61ff4563f71afc3660d46

Download Submit
C:\Users\Admin\AppData\Local\Temp\bdinst.1536.31097082705796642.info
Filesize
1KB

MD5
12b7698ebf0f10a95a2ebce65e34e817

SHA1
234300caf681262242408ec4000cec1ba8eabcb5

SHA256
0d3e644330ce2e1b38f1cd100a4e3c01b4e4e39d8db066998065722b2f14bf9f

SHA512
bee25a7668a3b1faf84533468df4b5307c9ce08aa4d1733fcd0a9d0080e0be97d096fce05b80caa007a5539a029c4fb1676fab62e2786824412caf042ab23681

Download Submit
C:\Users\Admin\AppData\Local\Temp\bdinst.4640.31097082747165777.info
Filesize
1KB

MD5
53eb540010146f94d4e7f9d187c18e83

SHA1
bcee7798e72c9a99f2f9046440438fbe83dca49d

SHA256
bf31edf4c50b46d49e1cc354584ab1875d0f0972ccb9d85c383fca87f1deea2d

SHA512
3f2a6c519172c0ea09888dc00607962b43a0194d1f266facc6da7c86b8306b71ed93593bfa149c3faac27cf100f79dba6fe5f695c34f49e34c6d6492d561f837

Download Submit
C:\Users\Admin\AppData\Local\Temp\bdinst.4640.31097082747165777.info
Filesize
1KB

MD5
75e40488aaa455011790c890b333ed49

SHA1
10219b6733a127cc4c174e084e7a49b5fc7e9771

SHA256
0d17ea4bb3c9fd8a30b806aa8d28b1a6b2eac0e8890e092dc7f29ebcea799e5c

SHA512
68d594d82f07dd6301a14cfe3f27687235625d55084b0834f6fe2b4099038139b167ac1ed1b58a827d56bdd6379ea2f7e1f9653b02c34ac68bb5ae4a9b6f54a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\bdinst.4640.31097082747165777.info
Filesize
7KB

MD5
57ce87abb0bb39ae4e538de64d0d29f1

SHA1
495c651a3586cf79232a86d8e737c7d3ac135b37

SHA256
ff953840d45d7228522e3861023f4938f6048471f87cde0e9e576651cdb1654d

SHA512
0010ad93ad1b6d84dbb1eadf10bc65896b4f60ff5ab073c9963b708c89157769cc6f24fa62c4f9e4ffa7299dc0f09ecb470624aa2ff28553cce3b281f5d85000

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 689056.crdownload
Filesize
4.3MB

MD5
c5b4e2a70ca25cdb90bf964587a9064f

SHA1
0816240fbed5624e199b4ffaef3bfe91362cbad3

SHA256
608927f36d39e8254058a0c557cf03da52d0b949853591a4849c881d7d45c784

SHA512
1bf33242fefa144ab2ef35cc2fdb6786d5a2d94b032ac4872edfcd91e975b825c414c8f20f7368f3f808b84d94130b359aa2ca1f66d149f6cb6e59466341faf9

Download Submit
C:\Users\Admin\Downloads\bitdefender_online.exe
Filesize
10.0MB

MD5
8a9690b972368f4b037caabc85d2118f

SHA1
d209481d5629089db3ba95662110ec3efbfcdf7b

SHA256
ff6748bc6bd07327090bfbcab16deef8aba5dffe1a48923dc8aea96d15297aae

SHA512
1f3a5875ff3ab5041b1f9b0c565402fb70f4272eac4163dda8bc291fdb7463e5999bfc4ad0b44126721e69ce6f1ca93eb919fb9c8071466d83e40d0a376c3484

Download Submit
C:\Users\Admin\Downloads\bitdefender_online.exe
Filesize
5.0MB

MD5
3c29ec8a7e88093260656c3365381dbb

SHA1
7ca88875ce0e769d042417904a484222eee8f94f

SHA256
a579871b70473c9947b4781cb5fa823c10467d06ba77013b4f1a448fe35fe048

SHA512
350510bd47ccaf8b4faa754387de67e1b862c7da593fe019086db8c662a46a1c5808332a40eee206a38579f57ca856af5afd7569292480cdc415d9afa4e98035

Download Submit
C:\Users\Admin\Downloads\bitdefender_online.exe
Filesize
5.8MB

MD5
b0f89f98b61a7dfec2369b3ed392859b

SHA1
ceaba2f425968c970a2fbf31142486e2ecf95246

SHA256
30dda16037e0814ade21eca79902852eabb538c6793748ad598ccfe733b372e7

SHA512
7e65a096979dd38c04391501b5ff6925d8cad6935e2ac0a19b6bee0e08b0c5596e6d43b5e883a6ea19b3e2aa6614ecdf60f30bbb953f5859ad52878cff8460c0

Download Submit
C:\Users\Admin\Downloads\bitdefender_online.exe
Filesize
2.1MB

MD5
690b4e65062b928e02ed9ca550f0b540

SHA1
6fba2fca27a5e820b2d4db39e6aa0e1b518dd55d

SHA256
813d9af2a999bcca8383d4808a7d952db931cb608601a7956f0a105fdd974fac

SHA512
92b0b0bf1f97fc6a62d72889a1102f197f8de83723e3426f9b24683096365cd8fc12a70ee7fbb13f91e09c750d39bca74710e96b4582c670cb67de26744bf6df

Download Submit
C:\Users\Admin\Downloads\bitdefender_online.exe
Filesize
1.7MB

MD5
9fdedbe649339031f0fb1e5ba04ea1df

SHA1
c68b1d41e4d43f3897abc85bbf81e28c2f12bb62

SHA256
7d906ed0906cf61e02a2d6de10bfb2b5ed13391c4507cadbda11bbdf3fefe031

SHA512
5e098402f9281727e00c3c0aff52bd41257347107b58bb2809ae529441d0c10d1d35d57aa02acb6589aa513ef18ec43f7ac82b53f2efbfedd5315d7c1e60918d

Download Submit
C:\Windows\Temp\bd_AFDE.tmp\cwvAFDF.tmp
Filesize
6.7MB

MD5
9d2638036f5bd7daa150d3d7f5b4f37b

SHA1
8a3a44b54990fea4fc0b6426592505ce53c640b0

SHA256
533ade5d5e20e0443245ba3a6a2ab97afacaddec4a7311e69f99df37198f69e9

SHA512
802787ca2926193f48b774cc1294dae3edf5c6c5c1dd4d1fb417adf728fa6a5f6f5aba495470d53a5eeec098c0d3a8ecae1254d45cba76db5b7982c52aaeced4

Download Submit
memory/1536-2795-0x00007FF951A40000-0x00007FF951A50000-memory.dmp

Filesize
64KB

Download
memory/1536-2796-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download
memory/1536-3162-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download
memory/1536-2798-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download
memory/4640-3302-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download
memory/4640-3011-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download
memory/4640-3010-0x00007FF951A40000-0x00007FF951A50000-memory.dmp

Filesize
64KB

Download
memory/4640-3014-0x00007FF991A40000-0x00007FF991AFE000-memory.dmp

Filesize
760KB

Download