Malware Analysis Report

2024-11-30 13:19

Sample ID 240620-vcnkxaxfna
Target mitmproxy-10.3.1-windows-x86_64-installer.exe
SHA256 af3bff80b0258e0f77593306882f12e0b16327f450880c5b060d91206d0f9126
Tags
discovery evasion execution pyinstaller trojan
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

af3bff80b0258e0f77593306882f12e0b16327f450880c5b060d91206d0f9126

Threat Level: Shows suspicious behavior

The file mitmproxy-10.3.1-windows-x86_64-installer.exe was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery evasion execution pyinstaller trojan

Loads dropped DLL

Checks whether UAC is enabled

Checks installed software on the system

Drops file in Program Files directory

Detects Pyinstaller

Unsigned PE

Command and Scripting Interpreter: PowerShell

Enumerates physical storage devices

Embeds OpenSSL

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Checks processor information in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-20 16:50

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-20 16:50

Reported

2024-06-20 16:52

Platform

win10v2004-20240508-en

Max time kernel

71s

Max time network

75s

Command Line

"C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe"

Signatures

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\mitmproxy\bin\_internal\flask-3.0.3.dist-info\WHEEL C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\python312.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\LICENSE C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-synch-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\templates\index.html C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\LICENSE C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\_bz2.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-handle-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceNotModifiedIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourceDocumentIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\_uuid.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\certifi\py.typed C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\METADATA C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\python312.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\zstandard\_cffi.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\run.ps1 C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\INSTALLER C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\WHEEL C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\apple-brands.svg C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\_cffi_backend.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-processthreads-l1-1-1.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceImageIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceRedirectIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\certificate-solid.svg C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\vendor.js C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\werkzeug-3.0.3.dist-info\RECORD C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\libssl-3.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\images\mitmproxy-long.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WinDivert64.sys C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WinDivert.lib C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\service_identity-24.1.0.dist-info\INSTALLER C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\msgpack\_cmsgpack.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-file-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-convert-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\INSTALLER C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\RECORD C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\certificate-solid.svg C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\base_library.zip C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.svg C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.woff C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-interlocked-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-stdio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\pydivert\windivert_dll\WinDivert64.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\certifi\cacert.pem C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.svg C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\bootstrap.min.css C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\app.css C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourcePlainIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\charset_normalizer\md.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\tornado\speedups.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\favicon.ico C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\windows-redirector.exe C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\index.html C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceTcpIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\mitmproxy_rs\__init__.pyi C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\charset_normalizer\md__mypyc.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-debug-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\top_level.txt C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceTcpIcon.png C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File created C:\Program Files\mitmproxy\bin\_internal\werkzeug-3.0.3.dist-info\LICENSE.txt C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\libcrypto-3.dll C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
File opened for modification C:\Program Files\mitmproxy\bin\_internal\_ruamel_yaml.cp312-win_amd64.pyd C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A

Detects Pyinstaller

pyinstaller
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Embeds OpenSSL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633759259906757" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2736 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe C:\Windows\system32\cmd.exe
PID 2736 wrote to memory of 2504 N/A C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe C:\Windows\system32\cmd.exe
PID 2504 wrote to memory of 4352 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
PID 2504 wrote to memory of 4352 N/A C:\Windows\system32\cmd.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
PID 1564 wrote to memory of 1872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1872 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 4204 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 376 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1564 wrote to memory of 1652 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe

"C:\Users\Admin\AppData\Local\Temp\mitmproxy-10.3.1-windows-x86_64-installer.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4240,i,13544508926340531097,6671217806016090640,262144 --variations-seed-version --mojo-platform-channel-handle=1272 /prefetch:8

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /s /c " powershell -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmproxy"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmproxy

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmweb

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmproxy

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmproxy

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fffab27ab58,0x7fffab27ab68,0x7fffab27ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1668 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2288 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3124 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3136 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3104 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4492 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4628 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4580 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4508 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4988 --field-trial-handle=2016,i,3715438394466876296,301244173318096809,131072 /prefetch:8

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmdump

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -File "C:\Program Files\mitmproxy\bin\run.ps1" mitmweb

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 82.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
GB 142.250.187.206:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp

Files

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE687.tmp

MD5 f2f31d07b6e81f8ae4b80c9c6a60a325
SHA1 69f7bf5d3ae27a922ab2174bc7e7485b9c66c19c
SHA256 385d894797bad7ff9ef8180cbdb100a9a432df2c99563647458d6c32f10ae02f
SHA512 a4898a660e874b699dc3dc8d378c75a08603c884b06424f01bea4aeaab427fcc04e14bff3bd95a4296befbde153cc63036aebc01b5de718efe52d48dbb28f1d1

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE6D7.tmp

MD5 c3c4f3fe90e3b3b02bea0e8da3447ed2
SHA1 7ac0f54119d2273a2cd261f1fe6c5667e9c486df
SHA256 3524ec77985e390acf9d07d81b1b44305165d711bbca770f7458ea0a78751f82
SHA512 0e24c9394c635a3f1671a297f97b613e6936cd8f862a214125d3456324a18668ae138d5c4fde036f55e2b13b158e4cebc53f78153862a008b1ae747eab228a60

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE716.tmp

MD5 f62dd6ce51e19349ec1d1f2e88c4ef4d
SHA1 60bd29538b4fecaf527ba8b7d92b7f32d2e72ddb
SHA256 be88244da9faaa6636a9d2f4c4249c08066a0b48359690b9b27a2b9ed47e093d
SHA512 ba68a59427ec252b895e1c3d6879e0c7a010893d23b5a8687ce86d738faaec1367f73abbcf63fb8ce8b95d32afa3049cd59f22f0bc5a2ff2a3b123a54fe02012

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE736.tmp

MD5 412c88f7f758f0f1e9e47671474f7a51
SHA1 2b92ab2b01f58302a04664c3fc1327acf4b86a84
SHA256 9857719f6d0dab7eb1c4080c0eb1ae19f15d9e5d547be91f12201071fae1808d
SHA512 95cb311323dc40f252612592a3e642beaec50c5c0a76d06ad474ffd195c1d8465149dd882701522906ce99eea6873495ce357cc9aed385b9777f071829138eac

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE747.tmp

MD5 5fbc6bd806a8a6c460faceeea73bd7f7
SHA1 4d1586a9631a72c3e1d75fb3c385dbd278804665
SHA256 8033d1b3af84d47d275e022608da35baac16cf40d9607ca026a47b6cd65e6a97
SHA512 4c51f9f331ac15206942e13504334b4c3549888519388607c44b617a68a9095114b0e6127e82b84170445df06260cc62308bc197b90cfb95af18d7cb6d413195

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE767.tmp

MD5 51c675fc1ef0a62322052d3e86567c06
SHA1 e295d0b668105d81f9180ef1056d0528e4b2116a
SHA256 aaa3d7e589e9be1911eee5974afa68c64af1bbd5e039ff6a82a15c2b54c0f9f0
SHA512 a352e82db5c930c73165a48337ae51acda7ebd393b8b0b57d03d2e1b5057c41c26b1f321759b7bc521166890853ecdad7b37531212243ad86e181e2252a3b78d

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE778.tmp

MD5 6d2c718c3059ceaa7b90919e6725a09a
SHA1 489967f8fe2b9021a891112754b840fe7dc71d13
SHA256 2ca70bc6394ee1b299a8cf1fe28e95c7d68b765e1828db1b651a7a62acae5356
SHA512 37547e9c6080d0dcb3ea23d9c856ce689997275b40d72bf9fd7c7c165e8cee4afe2ebe52e052c5f8bfc3e618391425219e9681191ee6f650444ebd643cb5a50d

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE805.tmp

MD5 a56543b9cd3aa403311b49189d25851e
SHA1 bd2609d35d4a967fe23ef4092b1daa6f74a858ad
SHA256 034756f772399552cd33605a189ee0e45d7947860e0d83ec12aa6da1a5a42054
SHA512 2237f493d70799675ae0e395f551b6cd46ff4789e46e2453c48fede07b7623b4b8111904d6fa139c204eea4405b5fd5812b0a91f27374219b721339149c25edf

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE93F.tmp

MD5 9b299884420745d80c70bba6b8a7f05a
SHA1 195423185a7776e072a65fbabae868c15f7b2f56
SHA256 9426e96a97f41645fab524385a852687792f99b505554b6b9809ed99451b2399
SHA512 ed839dc1b6ef53f3663b6055fb2869a522600b2af8d8a800958ddb531154f4e9a3f1733f32dff5511a22fe01525191c8683519cbdcedec138b1bcf3425f2155b

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE950.tmp

MD5 7a13a1552fa6a5d983df7ca4df4d2b8e
SHA1 fb56bf8473730c0c155a41c4326d0086a36fc9c3
SHA256 7c7d2ad193cd3b96c402b4da2d138ad8e7fd56a8aaa867871c5122f7674395db
SHA512 56ac3d1e5e07b6b9b6e4b1b3c2d38cad4d7616b81855fcaab6856283f866edcdcd3ac43669fc0699d274447b5c8f19fcbd06b7bbd7da68b8787225b708584f3b

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE97F.tmp

MD5 2c8f6a964ca7761122f7da22042462f4
SHA1 290e48bf0f83b3f3832f69bb1ea0637ed4d8ccca
SHA256 9d6f2629aa5978dd6b87fe9bce77a5cf0135b8da2980a050579eb4e23a92f8fa
SHA512 88c49dbc5a5cce28fc61689b953e091dc5114196a9ce5977de1bc1ea916333d73a13d06abb56b7afd88f6c4f80953a2b9b720cd79e773a1246d44b37eae4cbf8

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE980.tmp

MD5 4640fd47f64bb72cb34dbafee65dbdde
SHA1 508c8713e06ba55588d41918c5a99308cb4b37a0
SHA256 f02c4352ea80e1b476eb4754455ae684efb4289d95edf925e38bd3789f6ead49
SHA512 de2d05ea66ab37b7120cde8f4aeb79c6365430bd94f56b07019451e1329f8f3a2674af9ed6677b8ade59fa2185c6a48eaead47091edc8284e686260c69544a4c

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE981.tmp

MD5 7190ecf05ec3b297d6ded3e204399e95
SHA1 5c085cbbbcc8686266acfb318e75a38794625e88
SHA256 49e2c502923de5f89958de86f1cc6f91e7ddafe46d0f81bfb51a669627650e6e
SHA512 4e12adcaaebdc08e06270437dd4ebf33c4aecd5b6cce7245bf12b0303c809465d75d5b319fb262a807cf9a5cb99d808e466fc30b19d88ddcf2b3f0b9c9f74881

C:\Users\Admin\AppData\Local\Temp\BRL00000ab0\BRE992.tmp

MD5 053a60f34c75ca0a4a821b46eae86d31
SHA1 ebcf9f84a393969655969c248c2d572d7a05541c
SHA256 683f19a461948f4cca2fbece26949b34d6347dff279efece983b9f64a868422c
SHA512 346c989ef320079b5978678264059ad9e545081dded233d10dca73a72906fa01df30a3c96f6d319efcea64c198ef409748e511dab8a4d43e1fa7af50ed3f0256

C:\Program Files\mitmproxy\logo.ico

MD5 0f8a699781bb4a5a204a467db88dd555
SHA1 c9c490ef62dcea49193aeaab23f15807e4327085
SHA256 ed040187e112545848bb115eb5fd16a85c2a0c89864bea5d930481518d05614d
SHA512 c2e23aaf4747ba011230527a4dce354c2326856d7288a9aff1f3796012e21f638757f6522be39604da0b73e583ab99aa3f0823a4d6b4159ab575203a5066ba22

C:\Program Files\mitmproxy\bin\_internal\VCRUNTIME140.dll

MD5 be8dbe2dc77ebe7f88f910c61aec691a
SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

C:\Program Files\mitmproxy\bin\_internal\python3.dll

MD5 79b02450d6ca4852165036c8d4eaed1f
SHA1 ce9ff1b302426d4c94a2d3ea81531d3cb9e583e4
SHA256 d2e348e615a5d3b08b0bac29b91f79b32f0c1d0be48976450042462466b51123
SHA512 47044d18db3a4dd58a93b43034f4fafa66821d157dcfefb85fca2122795f4591dc69a82eb2e0ebd9183075184368850e4caf9c9fea0cfe6f766c73a60ffdf416

C:\Program Files\mitmproxy\bin\_internal\pyexpat.pyd

MD5 5e911ca0010d5c9dce50c58b703e0d80
SHA1 89be290bebab337417c41bab06f43effb4799671
SHA256 4779e19ee0f4f0be953805efa1174e127f6e91ad023bd33ac7127fef35e9087b
SHA512 e3f1db80748333f08f79f735a457246e015c10b353e1a52abe91ed9a69f7de5efa5f78a2ed209e97b16813cb74a87f8f0c63a5f44c8b59583851922f54a48cf5

C:\Program Files\mitmproxy\bin\_internal\libffi-8.dll

MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

C:\Program Files\mitmproxy\bin\_internal\VCRUNTIME140_1.dll

MD5 f8dfa78045620cf8a732e67d1b1eb53d
SHA1 ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
SHA512 ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371

C:\Program Files\mitmproxy\bin\_internal\_asyncio.pyd

MD5 28d2a0405be6de3d168f28109030130c
SHA1 7151eccbd204b7503f34088a279d654cfe2260c9
SHA256 2dfcaec25de17be21f91456256219578eae9a7aec5d21385dec53d0840cf0b8d
SHA512 b87f406f2556fac713967e5ae24729e827f2112c318e73fe8ba28946fd6161802de629780fad7a3303cf3dbab7999b15b535f174c85b3cbb7bb3c67915f3b8d0

C:\Program Files\mitmproxy\bin\_internal\_bz2.pyd

MD5 223fd6748cae86e8c2d5618085c768ac
SHA1 dcb589f2265728fe97156814cbe6ff3303cd05d3
SHA256 f81dc49eac5ecc528e628175add2ff6bda695a93ea76671d7187155aa6326abb
SHA512 9c22c178417b82e68f71e5b7fe7c0c0a77184ee12bd0dc049373eace7fa66c89458164d124a9167ae760ff9d384b78ca91001e5c151a51ad80c824066b8ecce6

C:\Program Files\mitmproxy\bin\_internal\_cffi_backend.cp312-win_amd64.pyd

MD5 0572b13646141d0b1a5718e35549577c
SHA1 eeb40363c1f456c1c612d3c7e4923210eae4cdf7
SHA256 d8a76d1e31bbd62a482dea9115fc1a109cb39af4cf6d1323409175f3c93113a7
SHA512 67c28432ca8b389acc26e47eb8c4977fddd4af9214819f89df07fecbc8ed750d5f35807a1b195508dd1d77e2a7a9d7265049dcfbfe7665a7fd1ba45da1e4e842

C:\Program Files\mitmproxy\bin\_internal\_ctypes.pyd

MD5 bbd5533fc875a4a075097a7c6aba865e
SHA1 ab91e62c6d02d211a1c0683cb6c5b0bdd17cbf00
SHA256 be9828a877e412b48d75addc4553d2d2a60ae762a3551f9731b50cae7d65b570
SHA512 23ef351941f459dee7ed2cebbae21969e97b61c0d877cfe15e401c36369d2a2491ca886be789b1a0c5066d6a8835fd06db28b5b28fb6e9df84c2d0b0d8e9850e

C:\Program Files\mitmproxy\bin\_internal\_lzma.pyd

MD5 05e8b2c429aff98b3ae6adc842fb56a3
SHA1 834ddbced68db4fe17c283ab63b2faa2e4163824
SHA256 a6e2a5bb7a33ad9054f178786a031a46ea560faeef1fb96259331500aae9154c
SHA512 badeb99795b89bc7c1f0c36becc7a0b2ce99ecfd6f6bb493bda24b8e57e6712e23f4c509c96a28bc05200910beddc9f1536416bbc922331cae698e813cbb50b3

C:\Program Files\mitmproxy\bin\_internal\_hashlib.pyd

MD5 eedb6d834d96a3dffffb1f65b5f7e5be
SHA1 ed6735cfdd0d1ec21c7568a9923eb377e54b308d
SHA256 79c4cde23397b9a35b54a3c2298b3c7a844454f4387cb0693f15e4facd227dd2
SHA512 527bd7bb2f4031416762595f4ce24cbc6254a50eaf2cc160b930950c4f2b3f5e245a486972148c535f8cd80c78ec6fa8c9a062085d60db8f23d4b21e8ae4c0ad

C:\Program Files\mitmproxy\bin\_internal\_decimal.pyd

MD5 3055edf761508190b576e9bf904003aa
SHA1 f0dc8d882b5cd7955cc6dfc8f9834f70a83c7890
SHA256 e4104e47399d3f635a14d649f61250e9fd37f7e65c81ffe11f099923f8532577
SHA512 87538fe20bd2c1150a8fefd0478ffd32e2a9c59d22290464bf5dfb917f6ac7ec874f8b1c70d643a4dc3dd32cbe17e7ea40c0be3ea9dd07039d94ab316f752248

C:\Program Files\mitmproxy\bin\_internal\_overlapped.pyd

MD5 ba368245d104b1e016d45e96a54dd9ce
SHA1 b79ef0eb9557a0c7fa78b11997de0bb057ab0c52
SHA256 67e6ca6f1645c6928ade6718db28aff1c49a192e8811732b5e99364991102615
SHA512 429d7a1f829be98c28e3dca5991edcadff17e91f050d50b608a52ef39f6f1c6b36ab71bfa8e3884167371a4e40348a8cda1a9492b125fb19d1a97c0ccb8f2c7b

C:\Program Files\mitmproxy\bin\_internal\_multiprocessing.pyd

MD5 a4281e383ef82c482c8bda50504be04a
SHA1 4945a2998f9c9f8ce1c078395ffbedb29c715d5d
SHA256 467b0fef42d70b55abf41d817dff7631faeef84dce64f8aadb5690a22808d40c
SHA512 661e38b74f8bfdd14e48e65ee060da8ecdf67c0e3ca1b41b6b835339ab8259f55949c1f8685102fd950bf5de11a1b7c263da8a3a4b411f1f316376b8aa4a5683

C:\Program Files\mitmproxy\bin\_internal\_ssl.pyd

MD5 5b9b3f978d07e5a9d701f832463fc29d
SHA1 0fcd7342772ad0797c9cb891bf17e6a10c2b155b
SHA256 d568b3c99bf0fc35a1f3c5f66b4a9d3b67e23a1d3cf0a4d30499d924d805f5aa
SHA512 e4db56c8e0e9ba0db7004463bf30364a4e4ab0b545fb09f40d2dba67b79b6b1c1db07df1f017501e074abd454d1e37a4167f29e7bbb0d4f8958fa0a2e9f4e405

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\images\mitmproxy-long.png

MD5 fb7fa4c8ff56b5f9a805479aa506ac2e
SHA1 a44ec0102851d33ea173d884686a16807f813cd5
SHA256 2e69ebe0dca5914b03e9b2eb4026c753c70f5d4c25f41d9fffd332b2715d4144
SHA512 1fcaea54ed1dd47763e4db49237bab390734f95c2f7f9d020d52dabcc3c8a0b93f0e64e29b9505bf9378ec7dae275581a6e8c13389958f07f3ee1d2c19ebe1f1

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\bootstrap.min.css

MD5 0ce488f03456d3adeab0a84faf7bd70f
SHA1 65fc59d59ca41c44aa659f30dae94dc2ccefdc33
SHA256 87bddb2af465b6e831f93d85f749179318f5cdf71d0981843a1020c7db588936
SHA512 e6c35ac56172997df2556ea719d8d6d80ef4db4e0c39d4ec48ab2b170c196d530069df6367237e0f548fa3e5f33e3d072615e9eb7d6420de00a9fe51b5a0558a

C:\Program Files\mitmproxy\bin\_internal\charset_normalizer\md__mypyc.cp312-win_amd64.pyd

MD5 bf9a9da1cf3c98346002648c3eae6dcf
SHA1 db16c09fdc1722631a7a9c465bfe173d94eb5d8b
SHA256 4107b1d6f11d842074a9f21323290bbe97e8eed4aa778fbc348ee09cc4fa4637
SHA512 7371407d12e632fc8fb031393838d36e6a1fe1e978ced36ff750d84e183cde6dd20f75074f4597742c9f8d6f87af12794c589d596a81b920c6c62ee2ba2e5654

C:\Program Files\mitmproxy\bin\_internal\_wmi.pyd

MD5 7ec3fc12c75268972078b1c50c133e9b
SHA1 73f9cf237fe773178a997ad8ec6cd3ac0757c71e
SHA256 1a105311a5ed88a31472b141b4b6daa388a1cd359fe705d9a7a4aba793c5749f
SHA512 441f18e8ce07498bc65575e1ae86c1636e1ceb126af937e2547710131376be7b4cb0792403409a81b5c6d897b239f26ec9f36388069e324249778a052746795e

C:\Program Files\mitmproxy\bin\_internal\_socket.pyd

MD5 dc06f8d5508be059eae9e29d5ba7e9ec
SHA1 d666c88979075d3b0c6fd3be7c595e83e0cb4e82
SHA256 7daff6aa3851a913ed97995702a5dfb8a27cb7cf00fb496597be777228d7564a
SHA512 57eb36bc1e9be20c85c34b0a535b2349cb13405d60e752016e23603c4648939f1150e4dbebc01ec7b43eb1a6947c182ccb8a806e7e72167ad2e9d98d1fd94ab3

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\vendor.css

MD5 77dc87aedbed6d72ba515875eba03367
SHA1 035594b69e346e4a4faebb16421d016846088bc0
SHA256 55acea3ff86c36dc5d3ed0dbc8caa5f8032822aaed6fced31851a6de3bd17f61
SHA512 1a18b664c543bb513eebfddc7d529838e1931ca094e7f32728319e67e56362e4dee50b9bf3418d340636436e3e0bf44c94b19661debb9c21770e94f2afc711e5

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.eot

MD5 674f50d287a8c48dc19ba404d20fe713
SHA1 d980c2ce873dc43af460d4d572d441304499f400
SHA256 7bfcab6db99d5cfbf1705ca0536ddc78585432cc5fa41bbd7ad0f009033b2979
SHA512 c160d3d77e67eff986043461693b2a831e1175f579490d7f0b411005ea81bd4f5850ff534f6721b727c002973f3f9027ea960fac4317d37db1d4cb53ec9d343a

C:\Program Files\mitmproxy\bin\_internal\msgpack\_cmsgpack.cp312-win_amd64.pyd

MD5 ca61906da0bfc8dc0cc4bcac02134cff
SHA1 c90dd9f802675d96de4385e71592d087789f3364
SHA256 9b9a5408001dec5e7cfce8846d8467b199679e4a1ad77e8a8dda0cf11dff3d8a
SHA512 b035882d639ed75a8ba3d5ce504ab426b66e0a19b01a67f13ef8161f1b7c4d621c376890a40108ecc0352cb3dada0c669ca5c7583f68553c94003da3daeb8b12

C:\Program Files\mitmproxy\bin\_internal\pydivert\windivert_dll\WinDivert64.sys

MD5 d6f42128c81965e12578feca7dac500f
SHA1 5c4576bd6409d797334ec17188efe696c9cc97fc
SHA256 9026147943bd44a1eb5e2f0c89cc8f441c7d1f13c1571aba54e262d2e7354798
SHA512 6fd544f2dc11fbae6492157dbdf07effc5a3080a14350d909542bdef974dfa8f7f4d346506086ba0ee90ecbd2f6b107dad84df17e4825962ef51a135c7b4ce93

C:\Program Files\mitmproxy\bin\_internal\pydivert\windivert_dll\WinDivert32.sys

MD5 ecab976e5b0434685524ba6d534301a5
SHA1 cbd9072d35b14dc67c88f40721508758c8d53dee
SHA256 bd27499533e42d64bcab52a018add1e361de02f04c4b1d16852cb643bf4c5755
SHA512 f6ad9b69dadbd634770667057d454f946c46e15c57a888bd25f11e5166532814b68c2e12ed67cb5a93006ebf58ea859a5b8e9b5a12a2d1cba954223c8bc15efd

C:\Program Files\mitmproxy\bin\_internal\publicsuffix2\public_suffix_list.dat

MD5 4c33ed83b42bff6d38403cf8a845efb9
SHA1 2068b5b35f18517dd2c4dc95fae25ac9ae146219
SHA256 76e4a8d1e76dae8db6da3829024108c02203c4e4b5a4301b5717564b05c7966d
SHA512 2d9a2514166fdf675efd4a03b3a96bb42bd206a0987bf87085fd58c74d0e475d2a549e119b160a00577f463f701713c6dfc389d0ecfe16aae44db155cf241f44

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WinDivert64.sys

MD5 89ed5be7ea83c01d0de33d3519944aa5
SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WinDivert.dll

MD5 b2014d33ee645112d5dc16fe9d9fcbff
SHA1 aa69498562d350f2de06954b133e59fac1e57002
SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\LICENSE

MD5 97c3dcfda1b5348ef0bb8bac94f2919b
SHA1 7ee34ff15d940862ce7a6874c2b12904f2b75b0a
SHA256 542e02ca56c33aea103ce84a8b874b0b15e25b9f559d9bf578a10652f824815d
SHA512 601b96ca085e2cca44ce8b491e9b6dd4411ce49790fa749272ec961270f3d3c0cac361509d91beee7eb3cd1c0e08dd40928f79eb498a8ee8c575e0622f991e4b

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.woff2

MD5 af7ae505a9eed503f8b8e6982036873e
SHA1 d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
SHA512 838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.woff

MD5 fee66e712a8a08eef5805a46892932ad
SHA1 28b782240b3e76db824e12c02754a9731a167527
SHA256 ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
SHA512 9c776dea55a01fd854ea23b3463d9ac716077d406ecbe8ed0c9b6120ff7e60357f0521ab3e3bf9d4e17ca2c44a5d63ee58a4e7a37a3d3f26415a98d11c99e04f

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.ttf

MD5 b06871f281fee6b241d60582ae9369b9
SHA1 13b1eab65a983c7a73bc7997c479d66943f7c6cb
SHA256 aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
SHA512 9ffb91e68c975172848b4bba25284678cc2c6eb4fb2d42000aa871c36656c4cebc28bf83c94df9afdfbf2407c01fe6b554c660b9b5c11af27c35acadfe6136ac

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-console-l1-1-0.dll

MD5 feb41d426bf3cdfcc7d21464c26aed53
SHA1 97a56392ec04e202d59978dc6670d5e76a2be6c1
SHA256 299bf8705f61598548975e0b122debedf5dc928fc874801d8988d64b7d623da1
SHA512 2b962112bad1a754e2cbd3f3f29538dcf1132fa59e298bfa18d1b706d967735e02c524c3a993a2040a9ae94e387ede394c7f67d348e50e0ef40815ce67630866

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-heap-l1-1-0.dll

MD5 df603cd6cb0fe53fd77c065f2766b5e8
SHA1 0698b7b97a6f5174cdca0849bec001127f9f0b16
SHA256 e488e688b75b9f95451ad9c65586783e37c32b9952cb48286572c90b150ebbdd
SHA512 929f4868015306e5b84a1e2f341c12a792fe98d82cbcfabbbe79f932f80d81b98f1b6543da7d23e9153a68b00a3768fa9cd112382092104bd4810e3071723933

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-profile-l1-1-0.dll

MD5 d3291c9be1092f7d29018e7e45eb41c8
SHA1 8140fa723f59675ea8292b273edbc8892cb4b5bb
SHA256 edf1d0a1c9175c0392be3f15a6ed0be753b6df2b303876117becf47563db6f7f
SHA512 bc4626df89df4aad7e2524bf515934ab3b8bd7bba50853b8c6faec65967222feadce56a2f333758cea1b7b3a93eddde2865feab453c5f3bb9bdcc5a0cd3105f5

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-processthreads-l1-1-1.dll

MD5 81a255549e9b3467276810f94a67512d
SHA1 c3bf694f5d030d5a29ebb9ae70010be4571cec17
SHA256 8447c3c56f83e5a9407bf446cfc037d149b945611f03798f731e49145fca81c2
SHA512 05e6d83baa20b38d8710ed06c62ef8603c37d70fd0f6036f54a50ad041575d52f23c56bcebb12df8bf7cd9327c46522e59bcda47e2fcabfb0e5c11247708afa4

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-processthreads-l1-1-0.dll

MD5 4039d2c04c32fa423cc6ce766f0532d9
SHA1 a8d0cac1bcfdc94289b2073c2a14422d929df62f
SHA256 979c28aab88b3a45eed546e2a857e1e9eb41cb035d78446ee668feb918227238
SHA512 c1a0f9920ce28d4a15e5543458f68cc64125dd1b24e7c9caad3eed2b13b8c903ca9f76c0ab82f5a688843626150d321c4353fab81697eae604acbfb920b464e5

C:\Program Files\mitmproxy\bin\_internal\publicsuffix2\public_suffix_list.ABOUT

MD5 ab4864f31b8227d308af8a0cf9567641
SHA1 be7b30c71e43b6bcd7def2d82ae20b035ad9f9eb
SHA256 a43bb92893ae8f9470993550571b9e2005b7a66bc73d0d381b529bd027c2e131
SHA512 aeb87426901b8f1374c4eb9b9af9b1de149260a7a8dd5f993814e1e4421ce085989a2540f302369d0a5d42a66efdece573a62da1505decd422fd0d773afe88c0

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\app.css

MD5 04fa4b37485d7315bd04ab35334904b8
SHA1 b24691f0f22a0917938eb08eb7d8f6904e24a151
SHA256 268224f98dca7367ac5110f170a46fa67c8622163618adc73e232f5eb3d16f74
SHA512 72f4577d175d54b424ebfec48fc316beaaf84960aef32c2114c6dfa41247b25f3f089c40e7466ca5692a5ea49e78c448b3ae65b0416f96e7fdf9c5715e135fcd

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\mitmproxy.css

MD5 abb67b7305f18085899fea569bdd376b
SHA1 08381d3e5628643b51541435884fa53f75fddade
SHA256 4f34c3b612bfd761f684b4c6917178e7c1bfdb84d3ae1435ae2ed9471720008b
SHA512 256a269c57fa6ae0ec41f54ffbcbd3ee9527bde42114826d996e5f4794fe1dad1845e310dcef8822668022063c9a41898748d00878d4d6124e88e5ab3845d54b

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-handle-l1-1-0.dll

MD5 7141a2a1640ac67e686778130ad8dd7d
SHA1 8f4ba743bc5df04b3075535507983cede7ed249d
SHA256 4a2265e71cd5c9b85f5c705755c23323c1c33aecd9ff72b6ba1b425b8170cf08
SHA512 6906bcdf8474e1fc9f69457cbae6635b18ddda69e3e42ac3b2eaa26aadd717e11b4fcd14e6ed6b5c4e318705c203498d77af8717becf94fd159075093f431440

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\LICENSE.BSD

MD5 5ae30ba4123bc4f2fa49aa0b0dce887b
SHA1 ea5b412c09f3b29ba1d81a61b878c5c16ffe69d8
SHA256 602c4c7482de6479dd2e9793cda275e5e63d773dacd1eca689232ab7008fb4fb
SHA512 ddbb20c80adbc8f4118c10d3e116a5cd6536f72077c5916d87258e155be561b89eb45c6341a1e856ec308b49a4cb4dba1408eabd6a781fbe18d6c71c32b72c41

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\LICENSE.APACHE

MD5 4e168cce331e5c827d4c2b68a6200e1b
SHA1 de33ead2bee64352544ce0aa9e410c0c44fdf7d9
SHA256 aac73b3148f6d1d7111dbca32099f68d26c644c6813ae1e4f05f6579aa2663fe
SHA512 f451048e81a49fbfa11b49de16ff46c52a8e3042d1bcc3a50aaf7712b097bed9ae9aed9149c21476c2a1e12f1583d4810a6d36569e993fe1ad3879942e5b0d52

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 cb39b789091823bbe8ea7c9a84343dcb
SHA1 4d0f56a3833abb4a52e9af6d8631ea443a407b3e
SHA256 3f5a60c6772417f286c89cc45fe97eeae69d1705fa65445230b71b53a0a1eee8
SHA512 23d393de9f9d7092f7eb79dd4aa45bca386b454caa9e91d1f09699a79b3382adc0a7b7d972fb9dc41e1e082adde8640edcef7cf444f50e4f14df93b89c823ecf

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 83d560d0c8844cd047ea818414ee43ab
SHA1 11fd30a76f3e0a0af294a4da15890a55a0de3528
SHA256 93d08d10dc60968fe6df4257ad79911045aabce0d6babd9d0714abb104ac1309
SHA512 06a293264dca9bf12309fbc56c3d5a0f62c3bc7a04986e55c8553b778c491d78f27f9bfbd22ad2ee6317bc985b41066db6e9cbc25b93d5137ae5da012afb55c2

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-memory-l1-1-0.dll

MD5 a241d82577b25ed4aa54ab02da7d82c9
SHA1 6cbc888c22a104109af2f084678b15576edbe465
SHA256 1b72a9b95e7d62c923f6b791c4251b63e6331660caf0f44385e6eb1901a9933e
SHA512 e51c246b80b56ea3912e849e18dbe7ff40a4a3e189475c96c570e71e05acdf89e97ffc533810a65172fc05f742b39ee9ef90e3fa0e4c9488f839c4c82fbc8560

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-localization-l1-2-0.dll

MD5 2395f675152f25bdc501c1b698b3f70a
SHA1 829eb4dee9604330072c124b9bddf4a4e96a7c98
SHA256 4173e50962540ec0708930d7c456164d4e0fa96d49efb034621eb06e67ac0563
SHA512 7c0125e248387d268a337fa2a0090e6b8713e6205d22fb23a4ce9635fb0f5b79a0e3d28aab3050cc0445ef065632052c23341b1ac22dbd947ac4262fd63a1b51

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 06ec6d562b0609529e615e795f093512
SHA1 db7c78e4b3f8a0eb4b392c9eef5774a571719f15
SHA256 b120d94a585170f84230d2a6826e3f02d0eb7bde37f965c1fdaf2ba52c5d82bc
SHA512 10773d831d4096130305ee10d611fb28caec213dfe5dd109115c86f7c26df34d7daaea0e6b2eb9eac8f4d59421485e90d6e722c78a55132c25d7b3c7c7222ef5

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-interlocked-l1-1-0.dll

MD5 f438ac3307c0de580adf6fb3d4ef57f8
SHA1 5d10ea60e004e583940a082b9157e801aa3c4674
SHA256 03ccd250ed3ef09013114094068dd08c96f0763778e94523e020241f7b16312b
SHA512 c323aae5bb8ce58f92fb8beceb5c60f1bec12f5aaac0c1a435e38de9a10226bdb92808bb2f4e7bf069aec435cb4aade6182d541de2174b8007f8a69a8aa0d264

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-file-l2-1-0.dll

MD5 621a34a36c202e4c4e59a6077c22cb5e
SHA1 ec696fd4e8e5935a722e88a551593593a12e882e
SHA256 746cde47f460ab4ef45a3158cbc038b166c86b03114c259ea5c759001692c079
SHA512 04e94784a70a576235d5bec58c57b8b3cfc01d7b292287f299deaf52523cef51c2790874116e666e5bc672453beafe173cf1afbe49a5f3076b83344298643ae0

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-file-l1-2-0.dll

MD5 fa6953700659b11c2d82fb521d2e8664
SHA1 07c7d14fdfd1686a424820f77733d1d4f3c75e31
SHA256 4dcc72554ffaa121decaf6e5bd3081198f017d735a07cc6d23d8a56b1383a61e
SHA512 1300c6ab6377e717dfac9e2f78c1218dee91e8fde25454f65ab32095a949c1be5b67aa3ed1c1d9f78d0c8bc9830f5c1dc0e6e01e91effec20ead6cdd9a3f639f

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-file-l1-1-0.dll

MD5 8b03d7c248a3b8d5a3ad1029af37c889
SHA1 868a0dde330fdcbf6d0d23900f2c65720ddf9a90
SHA256 4358b538205e9637e8ded05e8490dc0b673e0f756803da451e933411b0e0cb9e
SHA512 76d7e1ea0762a51cd5597e06e98dbd6af17124af57d1729e71ac994ffe7bbbf8be02e57dde31f76a5ea5e7194cceb24185d14fe378780dd1f1afd228fc012d9a

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 da9189023a6b7872de881052f3b990f9
SHA1 55bcebcfd6805ee5bdad78a425ac5e123ab7e807
SHA256 f38193429c05622df65bfa1428895197b851d981875737c55f1cfe04a88664ef
SHA512 b9d60a5588d835fd7eea7b9bec6564377505b53169db281bf80fc994657e5a3dc506d58fdcdec5b6f79346fd7c172546b59315d276fa691d2b7b495ecc23c2e2

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-debug-l1-1-0.dll

MD5 9936abac26b97057e61a5a8346bc26c9
SHA1 16f37a510ecc2a9119e99797e99c4d2468eb39f6
SHA256 d4de4b05b001028456087425ff66044b62bfda3076bff084f9be7843f517c584
SHA512 7404c4a2f884c952a9d0bca9dde757d05db9a74892823d239e70afa40360220896e22853dad19f6d3e8a130ef6a936ded1d53af99d0afd7fd23babd2e0b0842a

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-datetime-l1-1-0.dll

MD5 faecbfdacc6dc01b0455ea7b4576de99
SHA1 62fe4962a5900ffb94a05e6577dc5d63d90b3000
SHA256 2b2ed0fe1be4713b33d150828ec0813fd4ecdcac8021a39e37fd8fe64bd21157
SHA512 68dca96b1cf711e5fa283c355183a3f8f2db84081f07fd534d36dc68b4ea6e32e58b9be38fd51d743212d2d698ae656474b30c85a86321d58d1c0947911602e6

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 d3167bbc7d02d30bf9e5d60abd7bb05f
SHA1 33a5e59103d2049140f35945b377e6ee07e06b64
SHA256 2c2851d20158b0023eda056c477a57853b6d648053d4d57cad49e5ed574843b4
SHA512 243c55b57eab36bb468a187a973e1cbbc430ad29f5ed627d3f127817885704df57a3e9865b5e28c3811bada14e1942e5293b4ff8b382ea2ba242aec82c6c51c4

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-string-l1-1-0.dll

MD5 d5cc0ab1fe05976d71ae09911cef5a67
SHA1 16c7af053e6b6d128a5d9c14479b398537e1e1b0
SHA256 689c682fc9030ce9e228c8dea5fc981956bf78229ee8f30c5f63b2b9df813766
SHA512 843634364539a861eb38c5516c8c18ee00173cff5f24ad567a17430b1b53132db06a4ccd18f041972b11956a85dbdefc18ad11c9a9b3a2954e2c93113099877b

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-synch-l1-1-0.dll

MD5 de86a7505497ecf1be8c7aa6e8b1cb8d
SHA1 66220266ccf36a03b36f57b1f63f2e446349fbbd
SHA256 493072a7a15b11c5382394e98fa0007004f90aa533373e64f109273808d5251c
SHA512 07e323ad892304e4052fc46f2384c94dab4bb462ac9a5a2a7b6f8a411d98639324bd06146338d66cb295e4afd30942b5bd138bcb225496774b920d51572117dc

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 c7368f2e472ca3e428ce9793d69fa3cd
SHA1 8064438a9d36f6b4bae2931ffaacb512c9e52e82
SHA256 c5a070567d238a43818fcabe6f0a99c470f03ec54042b3c95e91a548be20bf38
SHA512 0303c632b61b2b51950a45df7c0de6c215e950f7845dde6b58cb0f6a9af2b74cc77d49bcf79615e9a4a15ee2b2a4fa43a4a3a0adb2005b89ab16ab00e3717e72

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-timezone-l1-1-0.dll

MD5 59f3aeb2eda80ffc000b99f27ec99d14
SHA1 2961c514b480424b3512d424dcd7d295477b243a
SHA256 e1c41c6525ed510aa75ec671f86d22a005ffd9a856a74dcf09bf3256e301a8ab
SHA512 ff1980c859c7a23ded484a51e596fd591df855e0266961c4620373d42190152f92df83683779a79561d46bd5d238d7d178cfa2952dee316a742a72835be44992

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-synch-l1-2-0.dll

MD5 c64289ca3db488fd15f25a8762221633
SHA1 b61c550bbe975b3841d8f201a967c8c227512ce4
SHA256 726155c1d1e1f1778bca4d3952f54ab50035b65750d69e3bdf73cf9c52213c22
SHA512 81f7866185b3a7971ef4cf7c98dc6326c17191c36df753b57174c6766fe0b4a49d7ab7954f08d472d0bc9dcbb3329b6309475ec092cf4a174f0b8958847aaf3c

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-environment-l1-1-0.dll

MD5 0ed33abfad3cedf07f538e2152443683
SHA1 78eed147eb33efd14f03d8e2fbe0ec0f41ae4056
SHA256 f76d2547bfc429e14b49d030679fdefa12383c1f3a8e09fa69b760a89f469e9a
SHA512 42b9417b464f6ddd45294e85b3f9143e5c76f512ca70214d1fc302f0cd28c8b7c29d9e213c78861d10ef4316aa02c14ecec2d9bc5a8021880f4186798eb4e317

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 442a686b00c22cc9affcecb15a569267
SHA1 10f02b15493737d30aacebad19ecadb8bab81817
SHA256 cb0be4a28ff15650353aa3ea778e7b4076f77d394b6c406b2d288a8ccdf88a05
SHA512 3d1da7ce726a435629d492ee2191e9818ddc975fc686835d61f1259fbb123de522f419a4571fb24c2c5227a2d12a83db2815aca6b7360a75a4b0671ea212acbd

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-convert-l1-1-0.dll

MD5 d360a829d5376ff0961f62bbe5ac9e06
SHA1 7965077b47bf9949570656df5160f55d27eed1a4
SHA256 6db47157030960e7106cec7825601ce7a33ea58ece603c90ecd9532ece1d1afe
SHA512 aaeed59b187bb277239a07e539e34520e8bc321e4f398e44ee396751e76c189c0180171202380974f12c1c302e77b533b7a93898dd8ddfd5c524143a22b3b748

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-core-util-l1-1-0.dll

MD5 fa11fa74380735a5b8d4b309de4854be
SHA1 328959db39043cf7591cb18faec351957695f788
SHA256 167e6e08e570e1ce34854781463c218bf14124a4112216b5f93d38d3c204e62a
SHA512 a82f457868374c92322f7508f2ed98504e62b670621ba17ad636044a8198f5be56be46b25426bec1b85dd79b3de7c2a00bec33bd9246bc136a208a6d6e5f335f

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-conio-l1-1-0.dll

MD5 218334da1ed369d2b694d3dff42da6ce
SHA1 afcb936ebfc7a2d6cd3b0c7f25a3fb125bcb8a8a
SHA256 b6ff4feabbe5f1fdc56f2e4e440dd8258702c3fc2a314440100319a62304baff
SHA512 9f2d009935b0847f89639b80c79dbe0fdfd08aa0c958ff67665a90971d3b304edf0e87b99112ca3ce988c2065147a41b63f47cd107d3a02e1a164ceb9bc4c13d

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-heap-l1-1-0.dll

MD5 dd79fe03815d8d96a70955257b85d025
SHA1 d98f5a2d2d52fc361064427fdecffbe1620b1d68
SHA256 505b61565d51d0c95d9bc77337d063cd18c97a575f5e318cc5a0458d10ef4638
SHA512 3fa3d9a9cddb493786c557f0738c6fad181a862749447c8172093709c4e931708cce12c9d177dbc4f9a0de0f950ebeaf02271e7cbc2b1f177e9c7f838b9ad7d0

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-locale-l1-1-0.dll

MD5 ed7e63157d241abb713998265b3987d1
SHA1 00d80cfe269434a4bbc7b2266e0e3d7f7ff72f2f
SHA256 3afe87a1dd2463fc3a9b5ba0bfc97fb3689764ac10d2c408f5a7b7d6caf06657
SHA512 3e89d1c1c3fca451a3d693873ebf58cceb73720c4c56d7449a96192fd240ac285a3da4e200ec289bfd5cfcfbdac4d83671059ed672739ca83deef9c891d84165

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-math-l1-1-0.dll

MD5 0d517e23b98b6e465214a25b0e73a49b
SHA1 8900d523d919a42ef4750eee7ce87cfb835fa455
SHA256 90d5f4615e9aadf8f38f98a8443ca3cdcee6f082d07ee2abd1a74204dbefe73a
SHA512 d850881bd7b042051fecee9e2fb4be105184e678c82d25095f88dc3c4e6ca9eb4ef818eee36443a62a1f54225a5213363b5a058d3a70baa29dd83f44dc9a1eb4

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-string-l1-1-0.dll

MD5 017cd4317c9ff229fe723b4cef459e06
SHA1 d4355b4257d2efd5b1fc1a8b1ec8fbcde2260c75
SHA256 9800d19f55385efdb4bb215d7de0773fb9574fd5ce2773f0217973c780bb8ccf
SHA512 513e20936e54e179772669a5c097e61369e6b9e62b7a8c246e4bb518a190078968b6aa8c434418eae739b2081421faec4e396ae21803d383e853c77c8b914dc7

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-process-l1-1-0.dll

MD5 e9208bf204cc2f705533328fa24f3a8b
SHA1 d2d6549d7a85dfb4d5877c59f3ba110985a202c9
SHA256 c679988b7dac986ec8d92b994d92b9979e565f6adbfd356b66a920f20e9caa86
SHA512 fb648540545c25d15a19cb9605fd78cbb5a214ff4d91d925400632aca85b59611493db71c65182cc189529fe767bcee114ac7e6c7980afa64875ca622ff1b038

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-stdio-l1-1-0.dll

MD5 7f21f2ae857b6ed53ba086feca60e4d9
SHA1 abf957cf28b85c48a86ae255c36a978b4f1e0744
SHA256 479e452662de08c4f65572d78ad553d8a9ce0612e39e3b2aa274b77b40b398f2
SHA512 1a2d46806b48cf91beb7dcc9219af80f02d622b1aa9af7785e6b92dca138781a04a3c1bcc15f166fff96ee6bf3be19ae63e32b74a57d0f281acc1685fbca8148

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-runtime-l1-1-0.dll

MD5 9206d6bb749266ac31da559029003fbb
SHA1 496d3051b66d93951253686b73023b64350b521b
SHA256 19da9d0027faed99ef3685a706da4256a24bc705e1f3c0dfcb89df0508620814
SHA512 cd316a52b289e223f607a88033efe1de085a1fba3228a55900ef5908bd90c6342930bdfb73a1ae995c5e496977336186bb3c4e1a0f4f3de52a6465014ee917bf

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-time-l1-1-0.dll

MD5 7e767ac571d63bcaeb64e243b2600b8d
SHA1 995ce687f655ff937fdf80c1ac7bae043e23e45a
SHA256 c7643c68c3a33a2f67edca02d713749cafeb200daf1f3db7bd2eb168809132ab
SHA512 10b0f0c4844b4beef38d9bd51bbde19ff83caa8e9ac2673528056535872b07e48515c973c50dea9da0ac335cf1a98374d31f52cb04bb0e95eb0e5e6337eee95e

C:\Program Files\mitmproxy\bin\_internal\api-ms-win-crt-utility-l1-1-0.dll

MD5 3138b144c99759b77dbd488dc91134ae
SHA1 664718852f84ad49623ffd401fac7959eda57704
SHA256 3f78ca473da2335c8f26e32ac5a12ab6a76e4c415d923a930abbc0ef5630c835
SHA512 4e5c519facb1580eca906821d0956b750c63f8882acd5dd0be1531ee2ee45e8b0fb10de6db0f1cd254844131680e19206942d7be24e976bd34cf1ebfa434b16b

C:\Program Files\mitmproxy\bin\_internal\aioquic\_buffer.pyd

MD5 0390296cc4d20aa3f9cb9ea0744232a8
SHA1 998147b550b2ad92aa0c66c5a58c8b3f0c4965e8
SHA256 cc1871e4c455bf8d4636c29faedb4d88d78ae1d56886741e106033181526a9bf
SHA512 ae85f426028cbea83e3ded51ecea39f465fd850473355b3a232738e01edb8224e1c769c58f2b977444d31a24011f91055c691621773c679859c1126c39f807c2

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\static\images\favicon.ico

MD5 eb3f64f6eec8153286e7ae52a535eb8c
SHA1 e8da1bfb5ff4b20f4a723aba25ca2c1d6e4ac0d7
SHA256 7a7408486f94d0dca411207e739adc71277227cbe5cbdc5aed70cdc4c4d4f76c
SHA512 95f1d00d6e9f8bcb9219cc994c7a067f4a5837d7e20acab13a6de14537c31d6c0238b8e5b8ea717543e5210eb52e42d1834a025fb9b0c52690f0f74bb16ea4b1

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\index.html

MD5 a4e5212fb321294c93e20adb7fb895f6
SHA1 d8e72c7b6b3c83dbfd5842e28a1b601b428a7cc5
SHA256 17a0ce1e74b5e8fdd569049fb0ad10742eb69920d4a251110ac7f787a1c10432
SHA512 19f283110618842e424e678bd69a9e74503025b12dd08fe916cc34b0223e8bab2da865617a08a1a406786c5e8f1744b285ddfeb998064782960194f25679edc8

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\static.js

MD5 b3324ccfbbc24903c0d1a52f75e45357
SHA1 6370812946d28e94eb3271944994921d2549ca90
SHA256 ab95bf033b063b83f38803aec45bc85461a1c118c3c89f47295ce4f418848645
SHA512 affa7dac3659e192e86c55a9396d0d899eea25c4f1811d77a1a69b8f9e9b43bf7f1e2358c76568a19b5a4e8a876fd5971b950248ebeb3b78ebcc38f1a28f4aa7

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\layout.html

MD5 a4f1067d53cc01ef95144a1c279e59d6
SHA1 e140695cd1f93857a5687f8f15bbd95f55d4e429
SHA256 a47031bcc5982c103c96c7a4caecc076df4b8ba805e137c92e9f92a6b95cad91
SHA512 f8a802ca585ae6590f001cbb568cb4e715a626b155dd20c754b57b4f0755ff1b59ec905eda0fa8d2fbb6ac9ed631a66466d3b88a788fabfce3ca2f5ceb6d3faf

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceDnsIcon.png

MD5 d49915cd20b6e21399394082fbda2d10
SHA1 91393f11d3daf7b862742f792eb170d7dc1dcb46
SHA256 b50fb89cd134c13b74fd1f47c99194b24b1efc42ad63f012d8beed6f4b3605ec
SHA512 c00f11ad612b521f7cb307d409f6580cfb99073b93912a40f0fa372339f3cfcd74cff5fe1c1104646cd01377d6db962e69fc1a405f1db9cff5075e503f73e130

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceExecutableIcon.png

MD5 dec2fe44a945f837ab107d2a87ddcb9e
SHA1 c21c5e6400e3787b65196aa51108134511edfce1
SHA256 d516001a460fe8771812c04247faacd322d909414074b6244bdb4b64305c5fe5
SHA512 c4309105ad8a4a07c1c136eb3f29c898092c793b7080310f82f5081e01090b1653b40f6f9041d6aa63a7a62f2797a4a6b43b9f88940723064109629b41a6bd54

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceJavaIcon.png

MD5 9e4914182914335b72be754f4408ff36
SHA1 4e828e4cf747397e9d0244710f9692b876d637ec
SHA256 7666167417a27e159846b0aef18215d47815446f1ad38a293bd3dd6ba455f645
SHA512 8d8816bd8eafbb34f4de3f1b89c934892372498d093f46880e8ceca49e7bc4298abbb6c17133ba6ff3ce92f41c630593ffb0c591232775e7460a89e5869ce775

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceImageIcon.png

MD5 b554ca92e0939dba7531259e61b17019
SHA1 9a990ce4d4681dea103e136c18ad542a1779a850
SHA256 3ee5a1c84e5b3510a2a44a429bac7c11d4cb285894a7b3fdf23d1f6f83c1eea9
SHA512 858bea9de80d515d8f9604aae20fbaac5efc96edad1e9cb79f2443ddc80ff3c331fe27fa5388855b4d33ff0588ffb5e14cf0492fef8713e789a2b7a985db3823

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceFlashIcon.png

MD5 55053466cebc73e5165790b3d346c15f
SHA1 4dae44d630a75d86b218690afaa6d361e0830111
SHA256 fee2767577c137b2ecb25fc14158d03038f0581dc82c7a7c51dddd4e708d8256
SHA512 16120a1b4b3641ebd12f78663c45b8189a47bd58ee3b7bb39c3e20e61f302fe96235f9a02bd240d77df611a3b81b5c81189374831b87828b8cae4f493237a9dd

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceRedirectIcon.png

MD5 54bd25f833ffe30d752f1d9accb48dfe
SHA1 83217788cbe81c7f8c20ff808393bf2bc712fb06
SHA256 2ea48cc666fd979a9418a82f716a673951351b3a4c6b0e5a92c5ec17f2041b50
SHA512 658a546460985d0a6ef8e9e60617345a2f1d34e63c9701f3fac0442f6378803e4f4540170fefc4f06c483d228b2892549e7a7a477bc4620f184c9d3fedb6e0dc

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceQuicIcon.png

MD5 edcfc0c1fbd07e825fb78d5d37f8ae61
SHA1 08a6c1f88e29de6f2e99fa224dfdc4c525be9751
SHA256 b4b02a0a6ab3a613b15580bfae4d9fac7da9756a889db967080fa49f9e6da193
SHA512 377b07e654b37121b0a5fa8f5bb4fd261cc405a139114b2ae7562cd5c431005e7d0009736469558cc8d67b39c81aeb266d2f144e4810b11e9338620567ccc5dd

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceNotModifiedIcon.png

MD5 09067ba313fc3bdbe3ec572093f943f4
SHA1 85464e31414f4c62bebd4f270b227cda3cf7ae10
SHA256 49ca38f8721e3d61da9bef34c7d4403c30d620d9c3365b150ca9132dda6bec0d
SHA512 9958e8a1cd5a2991945c928a50bb53d7543e004b8a87c3a1fe5e102d9e11aaa142cf154aa8ebbb60cbe91d36f0355521501f6fed0dfea08c753fc2c13827e553

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceTcpIcon.png

MD5 135f11a22111f968a227644ac788bc4a
SHA1 87e39f1a2eba9fd986bfdce33b4895cf9169d450
SHA256 055da7085329063e300fa70e34f648c459a4566dbc7261956f239240f9bdc055
SHA512 01d887cf281e650dd8a6b36426ce6d4aac671a305903a878043634ac9c7a3a15d1832047c8fb8ae098de942dbaa4c04c0827d9b25f80682b406de82e3b3b89ef

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceUdpIcon.png

MD5 3d27855fa593a121a3c13c6a2ea02f36
SHA1 f4c793dc315f7995281816f141830ddd7b0871fd
SHA256 5ee48e868f3a73807340b5e545c81fc31124b494226e6588f3c57366d938df9a
SHA512 d9b674b8769b22a205b05155068e5c84059132ca67cf7085a68b010238cf6ecffd51b41a057e22f916e2827aacdfa57339047a832054e954bbbd14722047cd29

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\resourceWebSocketIcon.png

MD5 3d8af5d5fa971584382487cd4a976f09
SHA1 5a458996a7ffe6cb7f328fecc48f842781380fba
SHA256 979bf7e796517ef7c8df8706124b7554ebaff3b9e8e45182161bfa636908ad15
SHA512 bd112102167e877b34e862d8745783de45785b9032879aebe906b800cf4e682ee8da64a5de4ae90da7947e8b57d064961f545fca067dc5b0b341f925bb363534

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourceCSSIcon.png

MD5 8a008c9e67ea51271f7b6e007f37b9e5
SHA1 ee67e99087b3d70c759a439d5f8f0da78c0b2043
SHA256 cfc1ee164016049aad1e14cb4008be8f8db76701c44f4174aab39d7448a8cce5
SHA512 be3371d25cbf4d538b7e649d5a67a4e35aca9ed754824e3502ef1e2e7fa6a5f1fac91975781ba560b7311c87d533a7537587c5eaf889735116f999ac5d971da0

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourceDocumentIcon.png

MD5 813a444c36cfb1aeaa653f5a50a8379f
SHA1 a813d3770da6e987bc670687f3c5efff41df8e7d
SHA256 02688c952499b6630d7c2d2cc069f35dd9a7d3bdc6efd36e19c757a700f7df26
SHA512 b5c93a192bbeb3917f0fdd56f76cba315db5f856a0ad9b7886ae0b24d1f5bfafba35ba3cd666407ccd7bbeafaaf71416a46ae5736d1e963a1ed295041a2ee861

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourceJSIcon.png

MD5 a734267cee5e83d1ddb53a1c07d058bd
SHA1 bf54186128a824d126180bc204f2cd519dc7a469
SHA256 26de56a93f29249d0ab05f4ca756e4460bd90745f6ede601d49f4ff889f34f18
SHA512 e8310694103336ea3e2e9e139fff926608cc04c6b4edb1d37eb05bcd14ae1ec469e30a891cad0a96b59006a0322a59dfb6a5257a4a0a43f6cd4b860fe8a4e61e

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\resourcePlainIcon.png

MD5 85c0f518ef6d67c164e8c1ca273fb82e
SHA1 5661be05982e04c11cae4280d451065a709b0bf9
SHA256 1d62b9974fbb05378b909ff7cb825496c0cccd5498b8ddd3df9a52ca45364eb1
SHA512 17ee7be3bb61cb4ed1ed51f9b952fe1d63659eacdd47d6590563dd8e198ad9770a950e297e011e2ded4138416c5f4ec5deee34044f37257b26053ca40c7ec44f

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\templates\index.html

MD5 eab06a04b9da6a8fc50e6b8b5e87cfc1
SHA1 0367ba62438c6f07e19504c23ea3a33611e785be
SHA256 953de03104a64d0f986f7f2ee982a7ba4a7bd8f6dc94621cd961099ff1588495
SHA512 e8b6683bca5ac9cc19357f98b3b5355c80f2b5314520259e54d74db5a52a89dcdabc62a2d995ceba1d54c65dd5fea1b047c8868cc9904749d05d19b27d8d0dbf

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WinDivert.lib

MD5 5fe307f87206e2f05c5bde29e418badb
SHA1 3599adf3d798f5e6ef1b6ff854f4d44fd318d60c
SHA256 c5678d544eb0121a189d1139f54e0c67854dc64d1c897111a27ef2e52cb38eb3
SHA512 b77db43787fc9bf1ab3b0eaa169e747197bbbafaa0e8be8d56950361921144f8e27d443e728cf3f058282c72172f7d50d0f435c9584d0517ac3b535ed6344cc9

C:\Program Files\mitmproxy\bin\_internal\publicsuffix2\mpl-2.0.LICENSE

MD5 00e957bb368cb8b34bcbc6f2bfd7aab8
SHA1 934a8416b04aa41e1df376def14fe7e94b51eb55
SHA256 b2462e602b8aba362f2feb5e523e5b3eb58d3a66b9f92b73eba528827773fbf0
SHA512 c6200bc01e4f57e217d98c7b5868ca299e85179517e2f9848e8d419cef92c3dd534938d46d13262c315f84e57eeaf7353cacba50b42da48e293eaf5d4821654a

C:\Program Files\mitmproxy\bin\run.ps1

MD5 fbc70af550d89ed7732b10d8a458b9ec
SHA1 bd452d8fb7742f4f49647c878431aac73e85f8f6
SHA256 718be30345992bfe55250007a6554b3265dfb9c354e35469b545a45a2a688c08
SHA512 110472ee6e3329ae13ed9cc09a884140ff5e0a973413940702d67d411087f1a9eecbc766d23bd21de04a85d5b67fca61a6d7755cbaf734730b909789db42cf22

C:\Program Files\mitmproxy\bin\_internal\pydivert\windivert_dll\WinDivert64.dll

MD5 ee42f18f56e8ab20103d0eacc6cb3056
SHA1 8f75e1e7d1d1982d8bd57026d76fade124fe51f9
SHA256 d0d8e5806952ce8f321d106551c680afe5a074cb9366a54282ff83397c64c27f
SHA512 7823620af8ec86b4dc4f4e5c77c7adf6bbf44405f6074629261c2067691dc72521fca44066f998033f40b8ef79b2361a7d5ada1e16c48943fab8e1a7c5f508e7

C:\Program Files\mitmproxy\bin\_internal\pydivert\windivert_dll\WinDivert32.dll

MD5 ac68537d316919a78b57ea6f90be7cf2
SHA1 3e3bd7e5c24c584248388abcea1b811e8201eda4
SHA256 d8700874a27ff3ec11b726313bf3a69448991784bfc0ef5adae3625b636a1b38
SHA512 5ea0ebd973c052806aac97ae5d7e5fd2c9e8eb8874b9b5ce051100074240b5563b8d3b6d869242d385fc14370b928d6ce900ffd5eb49a10f71a8678aaade02a1

C:\Program Files\mitmproxy\bin\_internal\_uuid.pyd

MD5 353e11301ea38261e6b1cb261a81e0fe
SHA1 607c5ebe67e29eabc61978fb52e4ec23b9a3348e
SHA256 d132f754471bd8a6f6d7816453c2e542f250a4d8089b657392fe61a500ae7899
SHA512 fa990b3e9619d59ae3ad0aeffca7a3513ab143bfd0ac9277e711519010f7c453258a4b041be86a275f3c365e980fc857c23563f3b393d1e3a223973a673e88c5

C:\Program Files\mitmproxy\bin\_internal\_queue.pyd

MD5 6e0cb85dc94e351474d7625f63e49b22
SHA1 66737402f76862eb2278e822b94e0d12dcb063c5
SHA256 3f57f29abd86d4dc8f4ca6c3f190ebb57d429143d98f0636ff5117e08ed81f9b
SHA512 1984b2fc7f9bbdf5ba66716fc60dcfd237f38e2680f2fc61f141ff7e865c0dbdd7cdc47b3bc490b426c6cfe9f3f9e340963abf428ea79eb794b0be7d13001f6a

C:\Program Files\mitmproxy\bin\_internal\select.pyd

MD5 92b440ca45447ec33e884752e4c65b07
SHA1 5477e21bb511cc33c988140521a4f8c11a427bcc
SHA256 680df34fb908c49410ac5f68a8c05d92858acd111e62d1194d15bdce520bd6c3
SHA512 40e60e1d1445592c5e8eb352a4052db28b1739a29e16b884b0ba15917b058e66196988214ce473ba158704837b101a13195d5e48cb1dc2f07262dfecfe8d8191

C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\RECORD

MD5 8829cd6bcf32a2b07fc3bca9942a0f19
SHA1 76ff04de50eb13c6b875a292dc68c80f7031d8f8
SHA256 8d2ee3b85635dc1c0367f021196cf128f22d08a3afb8209b638e1c109ecc0398
SHA512 39052963d68872b26072a2c70aff6ad5ca805d341207e8b7f5d5449238bf2ca6cb36bf5080b4cdfcea441c44bc5b8074f264dc7c122e1a515efd957780ea540d

C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\METADATA

MD5 e32d387a89f0114b8f9b9a809905299d
SHA1 a055c9fbf5416c83d5150d49ca16c58762b8b84a
SHA256 5b0bc6ece1f22a310fa72154642098b759f413f09ca9d45bedb96218475c9be0
SHA512 6eee3e19af46a79e2110678f8d3d15ea4b2eb1355d0fc9581da2c8e91d28926a2771394ea447e15cbc311a9dd9de2a20e2ac0e0abf9db6d4d51982199a12e881

C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\INSTALLER

MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\WHEEL

MD5 c58f7d318baa542f6bfd220f837ab63f
SHA1 f655fc3c0eb1bf12629c5750b2892bd896c3e7d9
SHA256 99161210bdc887a8396bf095308730885fffd007b8fe02d8874d5814dc22ab59
SHA512 3da6980a39c368ab7f7527fcd5fcdaa9d321060174baae163bf73f8052a2ac1a73f476c3882855965dfc2cb13c7c3ec1a012882201389dac887f9be59540c80f

C:\Program Files\mitmproxy\bin\_internal\attrs-23.2.0.dist-info\licenses\LICENSE

MD5 5e55731824cf9205cfabeab9a0600887
SHA1 243e9dd038d3d68c67d42c0c4ba80622c2a56246
SHA256 882115c95dfc2af1eeb6714f8ec6d5cbcabf667caff8729f42420da63f714e9f
SHA512 21b242bf6dcbafa16336d77a40e69685d7e64a43cc30e13e484c72a93cd4496a7276e18137dc601b6a8c3c193cb775db89853ecc6d6eb2956deee36826d5ebfe

C:\Program Files\mitmproxy\bin\_internal\blinker-1.8.2.dist-info\WHEEL

MD5 24019423ea7c0c2df41c8272a3791e7b
SHA1 aae9ecfb44813b68ca525ba7fa0d988615399c86
SHA256 1196c6921ec87b83e865f450f08d19b8ff5592537f4ef719e83484e546abe33e
SHA512 09ab8e4daa9193cfdee6cf98ccae9db0601f3dcd4944d07bf3ae6fa5bcb9dc0dcafd369de9a650a38d1b46c758db0721eba884446a8a5ad82bb745fd5db5f9b1

C:\Program Files\mitmproxy\bin\_internal\blinker-1.8.2.dist-info\RECORD

MD5 c8be6ae9e349fcb71e78e2b7bc52bb7b
SHA1 9a257519cfd21863e46235dfa02d0847afd70724
SHA256 f68e8aa4fcda9201216fa18d5171b0464187aea2f1dee411a44ed48394a01713
SHA512 c579e7bb428d6a12d710237d4bcb7a914c69e392a34c3a7bca1f607dc5f197785e491498cda7dd8561b56dcbca415ce62d8dfe7aa92462b0a4e1726bbd1de3b3

C:\Program Files\mitmproxy\bin\_internal\blinker-1.8.2.dist-info\METADATA

MD5 d020232204886fc7d20a831ee312f3ea
SHA1 ef06b1bd4ef5d6d7106f9d7779a7837bc624df1b
SHA256 ded131e34866f481287f216a0cf26c0cf13d30020486d89f6a9a12a7b16acee0
SHA512 c9b506069c2f553c13a968037fd11292785e02672b1fa965262a1f9b70a7cc2def9da305557f394611d8960a686012d7c0b0c4833c8d9f1223066929e2ed8092

C:\Program Files\mitmproxy\bin\_internal\blinker-1.8.2.dist-info\LICENSE.txt

MD5 42cd19c88fc13d1307a4efd64ee90e4e
SHA1 7e4783e856880d78ca235fc350e7269950aa22da
SHA256 9eb73a1f38597a4aa17025d2ae1be3839624c795e985d4f0e9769ce29faca467
SHA512 ce3e3aa997a39c568cf6a20793932f17507df6b6ecee1db6eaf26c9e3d2d93489f87582aa36730f0340a1538d9b0f108fbf850e541177851da8650659a063650

C:\Program Files\mitmproxy\bin\_internal\charset_normalizer\md.cp312-win_amd64.pyd

MD5 d9e0217a89d9b9d1d778f7e197e0c191
SHA1 ec692661fcc0b89e0c3bde1773a6168d285b4f0d
SHA256 ecf12e2c0a00c0ed4e2343ea956d78eed55e5a36ba49773633b2dfe7b04335c0
SHA512 3b788ac88c1f2d682c1721c61d223a529697c7e43280686b914467b3b39e7d6debaff4c0e2f42e9dddb28b522f37cb5a3011e91c66d911609c63509f9228133d

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\WHEEL

MD5 c48772ff6f9f408d7160fe9537e150e0
SHA1 79d4978b413f7051c3721164812885381de2fdf5
SHA256 67325f22d7654f051b7a1d92bd644f6ebaa00df5bf7638a48219f07d19aa1484
SHA512 a817107d9f70177ea9ca6a370a2a0cb795346c9025388808402797f33144c1baf7e3de6406ff9e3d8a3486bdfaa630b90b63935925a36302ab19e4c78179674f

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\LICENSE

MD5 8c3617db4fb6fae01f1d253ab91511e4
SHA1 e442040c26cd76d1b946822caf29011a51f75d6d
SHA256 3e0c7c091a948b82533ba98fd7cbb40432d6f1a9acbf85f5922d2f99a93ae6bb
SHA512 77a1919e380730bcce5b55d76fbffba2f95874254fad955bd2fe1de7fc0e4e25b5fdaab0feffd6f230fa5dc895f593cf8bfedf8fdc113efbd8e22fadab0b8998

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\top_level.txt

MD5 e7274bd06ff93210298e7117d11ea631
SHA1 7132c9ec1fd99924d658cc672f3afe98afefab8a
SHA256 28d693f929f62b8bb135a11b7ba9987439f7a960cc969e32f8cb567c1ef79c97
SHA512 aa6021c4e60a6382630bebc1e16944f9b312359d645fc61219e9a3f19d876fd600e07dca6932dcd7a1e15bfdeac7dbdceb9fffcd5ca0e5377b82268ed19de225

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\RECORD

MD5 38ebb9f8a9a063653efd1e91080a8f55
SHA1 9f2d5a66dba4703887e2d7b9b5690ce4623304c0
SHA256 9665e12aa4c56a3cd60d6b57917105e996c0aa08557667076a44c481eecf33c7
SHA512 11e8672e31f39d7c8d09c680da4b4c07f1f57c4e686609819ecac2e1bf7989faeccb7bf04382079b1723de44e7bb77f7c837c368410564907d93c7ffa3a30836

C:\Program Files\mitmproxy\bin\_internal\flask-3.0.3.dist-info\entry_points.txt

MD5 8feddca68819b423f57dfb59ce8ee3bd
SHA1 27e3e9826bf26dc90d10d5d2710091ad9c9a7a06
SHA256 6c13fb853392e5fcfdccbb42eec3e87c164094c904bc1c6eecaa92ea5e65bdce
SHA512 4ac00f7cc4100eee89074fd9a4eb6910e46654dd2475bcd1a560456cbf0d2b6cfbf7f88420b1ffc7b0ed9589f1e553d77604d742793bccc172f1795826928459

C:\Program Files\mitmproxy\bin\_internal\cryptography-42.0.8.dist-info\METADATA

MD5 07e3eea441a0e6f99247d353bd664ea1
SHA1 99c8f9c2dd2d02be18d50551ed4488325906c769
SHA256 04fe672bf2aa70ff8e6b959defe7d676dcdfd34ee9062030ba352a40db5e2d37
SHA512 24f458c831f7a459d12e0217f4bd57f82a034fec9ea154cac303200e241a52838a1962612c5aaff5cd837f668fdc810606624dca901f4274973f84a9adba8d66

C:\Program Files\mitmproxy\bin\_internal\flask-3.0.3.dist-info\LICENSE.txt

MD5 ffeffa59c90c9c4a033c7574f8f3fb75
SHA1 e32a549b135c4b2b268107adc12d13cca2ca1e8c
SHA256 489a8e1108509ed98a37bb983e11e0f7e1d31f0bd8f99a79c8448e7ff37d07ea
SHA512 d1dce9e97ae504bcaa6bd3f0d8b78e28cc80a5abcc9133b2aafac2a0e89e28170057cf7fab948638f24cafcd23e302e5175e75ef5fa50affde725ed6f0961dd3

C:\Program Files\mitmproxy\bin\_internal\flask-3.0.3.dist-info\RECORD

MD5 4b34cdf5bb2a52ecf15e5222d137a089
SHA1 ecdc200f7ef03865e2a13b8969ac2d962ee41d35
SHA256 388c95e9058ae20847dfe0d765cebfa3422271e5a77ba56f73ea089aba368ba9
SHA512 bd97e83fff7a7b07ae6e30b815acc1365d84eb3ad460a768274c4d4432a27703f7cc3ac3bb77564ff436dec02984455e11ed29859abe1549878e561218765ddf

C:\Program Files\mitmproxy\bin\_internal\flask-3.0.3.dist-info\METADATA

MD5 1b328490ccb1fa83337c669d00c9d9f2
SHA1 135517b0fb425294e53b2762dccd8f6bccdc1eaa
SHA256 7b13da872e1a6a18d5fa662a77da9be4734ff21681fc8c53b9aa2da12bc2b5a8
SHA512 d599e6ee3a7713fb98408376ae44b21eac08abaaf34446c7ddfecbfc5c96d9223d066f8713ae60aa1b52539f4f46480f7ca4faa90861cd30f9a2fa8cd85abfea

C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\RECORD

MD5 a0bfaff880a5baaec9fabe4d25f7a353
SHA1 6f5831d8145a4fe6d259e8f53f9196c21473993f
SHA256 b303bcd128d85b48cefd16f82f5c7c48a95e8dd186422c220a4c79bf176cb1aa
SHA512 49814e7ec70dcb19c33caa4e758cb96daff0fc16d0483259da8287af6c090e7e3a416197b1e4f85fb31c5e7a8812408233fcb2f33dc03442071b0deab6f8dffe

C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\METADATA

MD5 efe68e07ab85dba520899092c41d09cb
SHA1 2721517496b1b39ca959c37af2bd94a16d2d968e
SHA256 d2b934fb56708a1b94e439f0255c0f5a8108e3258ec827b18a1dc9c991db9611
SHA512 44faa8eccb252475cfc9b95229c0755e49ff699adec46e0bd7616f077e0421163532a65ceddbe8901d4d83231ba51aa73b313da58e7873a90b8593c595a12ccc

C:\Program Files\mitmproxy\bin\_internal\itsdangerous-2.2.0.dist-info\LICENSE.txt

MD5 4cda9a0ebd516714f360b0e9418cfb37
SHA1 a814758bca3dc0a25555dabbf2576cdc43cd8423
SHA256 63af09891b6be8ad1a4252ed43af0f4efba7fc948e228367bed7f3c5ae0b09d7
SHA512 7e046f889413534ad51d7f6dfbb404d4585fbbdc3b97777bb5142d9a35a51a7017c35b5390c680787f9dfcf65bc1014013f1ba1841aa0da9a2e2964d10167644

C:\Program Files\mitmproxy\bin\_internal\markupsafe\_speedups.cp312-win_amd64.pyd

MD5 06399d9b7b75206a86a9de42d71d4bce
SHA1 40d36ded4b40f125d5885a7288cbd0e02b43bd1b
SHA256 08bcfc9349a9bccf9d80b3f47921e91981e6f2c8651b15e80a29c0d76ce01ec6
SHA512 337f93f3f16445540d0986a8149ecc27f51ff170621c8a4ccafd030fe642a4c78aa08ee09682e83c8fcf30b38701db391bc9dd9facb130f5e9ecf5b2c04477c9

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\android-brands.svg

MD5 21873a9ecf611efcb8c18ce88b191090
SHA1 c3a4a3a80601a9db180efdf98080e2d893e895ac
SHA256 26cc15d54a692ec6f5038d955c49b3c768b5b1b2cb80aa9270db183bad5f60d7
SHA512 64cb91300c33096f0ae7ec417a8d15a7fa625c895c65f7af02a75d70239c5d655ba7df61ddfce54c1fb21770b8f2ad481a03ca6cca910aea8cb9cca240b2527f

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\apple-brands.svg

MD5 c66b5c1c8dcae38e9620ada4669d740c
SHA1 f504e5e9c6e3fcece06b28f926c4efbc32f0fb43
SHA256 f3b22c7417dd2feaebb1d805fcc3e7e474758effa2a4fa398395de9b9256ad3a
SHA512 fbfada5d98e613beeffa4ccac34988ddc2317227c7d76279bd4de49f66cda58482087ea618ace3dff547f919a2849b3d2c29db1d04e33ea0abb5bc8055c89fc0

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\linux-brands.svg

MD5 ab61ec459cdee111f43848e0fcbcd069
SHA1 474bc9f399a7e77b808d93c934adf12ac60fa2be
SHA256 0fae278aed3ac8eba446d183ae42c8343ec47e468e9a11b7db871ed51fddcb98
SHA512 fd92a8259d6c212c701177e6e8e53d126ea9dadf313ff56be5427ca5bea31a96652cf01af47ac947e97f84381dd43f7df68386656bafa7c390f70868b304cfc7

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\firefox-browser-brands.svg

MD5 613cacf25a4803aa78d613022f75768f
SHA1 30132e34bd6f541d4dba5520e807edc2661fd637
SHA256 692ce31aeab7848eb621c407fcc2f88f82867043487edef282ae51e17ce646dd
SHA512 859a12781e89f31084bde3045b680311490d6459a563e4c2de8134a559afe13d6b8c51514f63694911143f9bbb554a00e4b6ad987904e314697faae8986e2dfd

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\certificate-solid.svg

MD5 34d1a6c5214443044c82bde483a28cb3
SHA1 db1db4d99d697d34101eb669cd8a15a9e3a9fc44
SHA256 6e2f2e5b88bd4aea63535dee069222f9668f77e56ec7b34eb8812a21b2dcf436
SHA512 c90fe35fee1c191a68874baa125e55c6d5400f39c9ee6030c05dcd9ebfd48c36904492492179629915127edd6de19322cbf7b7660d0e3500aad8ba5560426da7

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\addons\onboardingapp\templates\icons\windows-brands.svg

MD5 191a33375f233eb437ba07e95a0a27ee
SHA1 01ba204e174218f01f9eb90159677a60c25032bf
SHA256 23a8161f7c27a7d4d9552f13ee0f4301a753f79d9e29a090d72139118ef96379
SHA512 94d9010ae907ae2b4bc4241021591c011068833fe75aa3ec3ca1f0ed2cd1e2718266766fab2a90a3776212ca591448a8c38ca91bd0f513ababfec8ec2289c7a4

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\chrome-devtools\LICENSE

MD5 1f754b62eadbb75b6ceb355e84e6b1eb
SHA1 0fbd8a8be6204a84d7b065cad809f780285b46be
SHA256 df0d584505db4ad688f12577bac88e1936c0245df4a0cdcc317415d76a2722e1
SHA512 67d5d5d6da349ea3ed77a6084dbb2c90cdb908d8a343c7aab2ccb3388f4af9b653bb5d98c968d9a4a1593aed92e297efc0b108f961f2ceedf57637b465a437b8

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\WINDIVERT_VERSION

MD5 980c11d5647d82e4a3ddbc17acd92dde
SHA1 7ec86b0d528f50bb45cbea607b73d85e74858ed3
SHA256 5591e65777244bb111f80b7e802164e59931d196beece41fc7ee17542e8b696d
SHA512 70e287775ea892950355acb75b527a0c569de40a098a6158658db7d051de0762c2eab5d462848ad990d2963f145e284f3ae7a65decd025abd5f9cf42a027a97b

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_rs\__init__.pyi

MD5 a91a90c1ffc3783dc31c662849e2e8fd
SHA1 e79c27f79bb7c91adc71cbf7678201fa7d0b078a
SHA256 cbc8dd0b8e373ac3697143f27866cc8534f48f9f84e77e52a3c56d922da1fe50
SHA512 c4816898efbfc4794e7babca9fe1f2fce7f8bb45c63d94a371bb6755a96c37d17691fe4e83ebb70f978a8922ec26872665d5a79d92092defa6ba6c548632e3b3

C:\Program Files\mitmproxy\bin\_internal\service_identity-24.1.0.dist-info\RECORD

MD5 c0056f3d7df494c36c5dafc0089a5b6a
SHA1 db9c91b1c17a889bdd0315c1ae2c0cf04cc959d3
SHA256 0964fd442b6e2db5dbcc2a2dbe61b8107eb30a9be54df99aea20978cb8f17bf8
SHA512 646b5108f714d67b60375f71e90f2c521c2f02a890a3514f61b6588258005a5abf594f8e88932513cfac6d8835866fc627a04856a81aa27c745dcb694ce375d9

C:\Program Files\mitmproxy\bin\_internal\service_identity-24.1.0.dist-info\METADATA

MD5 696db03e1585cd6eb5ad099b09554f06
SHA1 4091e83cb5fd9f38b34874115dd941a2bc39d9cd
SHA256 c721ddf5b75007b1b0bb9218c6b23add131fd3e92311efa06b3da93122813d48
SHA512 16112f0543a5259324ac7a0f6c3e53a178772d73302c4df1b7c8d4829574e44253c64162aff6fa483fd4c0d96fff25f661f117a01cab4c6c2a295e79cf525732

C:\Program Files\mitmproxy\bin\_internal\service_identity-24.1.0.dist-info\licenses\LICENSE

MD5 76edce6a3fa1b82b0bf2b6ce174c19e2
SHA1 eac86a80b06f8e205c0fd8fd85f3abbae4d0fd64
SHA256 24bd0a9ba7d0eae08a3a6e32a1b09f8e6871fa0325520a2fcb00e1539eaa602a
SHA512 baecb43d3122247fc134a5c30a0af8bac0fb6d728711cec6792a88668e909bbc0d3d2ae1c7cba235314343eeb0426163329e270f8f4b6d32bc073f6208fd4ff8

C:\Program Files\mitmproxy\bin\_internal\tornado\speedups.pyd

MD5 4651bc0f6783edb123cd625ffdde59dd
SHA1 46738c97dd942c10c3d0d068132e2afeb5052fab
SHA256 958617a783d5b199e407b497e69a2a768938d6a80ea793e5b97144976b258b68
SHA512 044630ac860fae62a1555e5a07187a52d6965fdb2676cb365c04c3d8cc20e691d10bf59f60455cb0385eacc61331d2eea1b35cf0e555a1a37b21429f4bab911d

C:\Program Files\mitmproxy\bin\_internal\werkzeug-3.0.3.dist-info\METADATA

MD5 1b3faf9df18e01e2990196729358c857
SHA1 29b012e9d6796da81560a1a0533d55fb6a4d6c4d
SHA256 aba77009f5167f8fb4145724f6653c61f732d831b6f535ca1b7bb4612b28acb5
SHA512 7edf35ace5f1fda17e85a34daffa9bcc83c381242639d92c45774b0bbcdc0785e3d828c3a56d12d16997ad4e2dcabe8d413ca4b59e624eb0e1ee6ea637ab16fb

C:\Program Files\mitmproxy\bin\_internal\werkzeug-3.0.3.dist-info\LICENSE.txt

MD5 5dc88300786f1c214c1e9827a5229462
SHA1 c4dbdbc12926d4d52c9156e690640f372615c234
SHA256 3b49dcee4105eb37bac10faf1be260408fe85d252b8e9df2e0979fc1e094437b
SHA512 b4194f6fd9b424f15b2c08b18373cd605515d6d4f26238ab039e5ca7bd7c0a528975118fb9e5c3271526ff3092c9c5dc65dac4b65a2fe08a33999329703618db

C:\Program Files\mitmproxy\bin\_internal\werkzeug-3.0.3.dist-info\RECORD

MD5 e3dec2859acc4b24edf12a6abe10f38b
SHA1 6c4aedbae073bdfb95815ab5045042468a62e2e2
SHA256 4405cf4836dedcc2ef63cbec6030d851a7505200e640e5006c3e2a0ce1d7a54f
SHA512 69a01fb2a5e03d6438764005f3e58c480392cc37c2f04343f62e8db7c14ae5f4300520c5e491c5fa33523e63337c0aea9572b56b9d781d09d3fe2e0d7b593fb1

C:\Program Files\mitmproxy\bin\mitmdump.exe

MD5 a7a5f5dfefa2d988a7ab92fe0a49ac9a
SHA1 dbbfd5f51f11786d1d96f2a04cd162079e8ade1a
SHA256 d109611e6a2f077ad908dc7b2ce7570dc810dc168690fc1226bf514ba1807a06
SHA512 629c2031552b048cb66a72e49ec27e646b1da8b412454e580ff24e6b770ee8bf00f0ad98e990fe0ad85ba485806129bd0f9267a1c674ff9396e9fc983929a92c

C:\Program Files\mitmproxy\bin\mitmproxy.exe

MD5 2d0625b1a0ff0084aee7b2387878df6e
SHA1 4c6bc43d679874f3a3653a621215cbad4756dd2f
SHA256 bf46b03f229109aad779be25a607de147874d85385c8be18d42eda1bde4af6f7
SHA512 a37cee379dcd8067be8fa7e74e7cc41be16cc7bb3d6423d206d8a17340bef02b5dc1a02eaf82f60f920a3284c2acf3578e7c30c7d7be79edfc06231bff4808c0

C:\Program Files\mitmproxy\bin\mitmweb.exe

MD5 0e9255c98ea23689ba6b6a5dfa700bbd
SHA1 4a52972f456dc801d8e448afcfe7f9ec5e32dccd
SHA256 740a9c285c4e8f37eaeb13d84d8bb643715dfc04fada44965e56c28cfa7540da
SHA512 1e69e84eee3dfffe96d87fd6f17b68881f1f62a37dcee3575399ab13304e38bfd6692da9ddb896abed2f215a9ba84bd5cdb1f35a945c0c4cf58853ff60366116

C:\Program Files\mitmproxy\bin\_internal\base_library.zip

MD5 8dad91add129dca41dd17a332a64d593
SHA1 70a4ec5a17ed63caf2407bd76dc116aca7765c0d
SHA256 8de4f013bfecb9431aabaa97bb084fb7de127b365b9478d6f7610959bf0d2783
SHA512 2163414bc01fc30d47d1de763a8332afe96ea7b296665b1a0840d5197b7e56f4963938e69de35cd2bf89158e5e2240a1650d00d86634ac2a5e2ad825455a2d50

C:\Program Files\mitmproxy\bin\_internal\libcrypto-3.dll

MD5 e547cf6d296a88f5b1c352c116df7c0c
SHA1 cafa14e0367f7c13ad140fd556f10f320a039783
SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
SHA512 9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

C:\Program Files\mitmproxy\bin\_internal\libssl-3.dll

MD5 19a2aba25456181d5fb572d88ac0e73e
SHA1 656ca8cdfc9c3a6379536e2027e93408851483db
SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
SHA512 df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

C:\Program Files\mitmproxy\bin\_internal\python312.dll

MD5 3c388ce47c0d9117d2a50b3fa5ac981d
SHA1 038484ff7460d03d1d36c23f0de4874cbaea2c48
SHA256 c98ba3354a7d1f69bdca42560feec933ccba93afcc707391049a065e1079cddb
SHA512 e529c5c1c028be01e44a156cd0e7cad0a24b5f91e5d34697fafc395b63e37780dc0fac8f4c5d075ad8fe4bd15d62a250b818ff3d4ead1e281530a4c7e3ce6d35

C:\Program Files\mitmproxy\bin\_internal\unicodedata.pyd

MD5 16be9a6f941f1a2cb6b5fca766309b2c
SHA1 17b23ae0e6a11d5b8159c748073e36a936f3316a
SHA256 10ffd5207eeff5a836b330b237d766365d746c30e01abf0fd01f78548d1f1b04
SHA512 64b7ecc58ae7cf128f03a0d5d5428aaa0d4ad4ae7e7d19be0ea819bbbf99503836bfe4946df8ee3ab8a92331fdd002ab9a9de5146af3e86fef789ce46810796b

C:\Program Files\mitmproxy\bin\_internal\_brotli.cp312-win_amd64.pyd

MD5 9ad5bb6f92ee2cfd29dde8dd4da99eb7
SHA1 30a8309938c501b336fd3947de46c03f1bb19dc8
SHA256 788acbfd0edd6ca3ef3e97a9487eeaea86515642c71cb11bbcf25721e6573ec8
SHA512 a166abcb834d6c9d6b25807adddd25775d81e2951e1bc3e9849d8ae868dedf2e1ee1b6b4b288ddfbd88a63a6fa624e2d6090aa71ded9b90c2d8cbf2d9524fdbf

C:\Program Files\mitmproxy\bin\_internal\_ruamel_yaml.cp312-win_amd64.pyd

MD5 fd98e0335fe6901d021829a3dadaef92
SHA1 9053792352355a22ecfd0021ee35bad08e3e6cbb
SHA256 181cffb64b44fb26f6e42e642a7f37bc5e268cab30407eb60d71f8a7a5443017
SHA512 95565254f9befc224b48d0383345089ed8bac74d0372daa9f339072d3b25ae5ba00006587b664145f89f3b61e765f6207ee6cf0bdd92d9437318171a9a1ec55c

C:\Program Files\mitmproxy\bin\_internal\ucrtbase.dll

MD5 637c17ad8bccc838b0cf83ffb8e2c7fd
SHA1 b2dd2890668e589badb2ba61a27c1da503d73c39
SHA256 be7368df484688493fb49fb0c4ad641485070190db62a2c071c9c50612e43fed
SHA512 f6b727c319ca2e85a9b5c5e0b9d8b9023f0cf4193fab983cfa26060923374c6abd6d11db1da2e524a8b04622a4e13beb4c48dc23f98886d4abb33eb09f3a0776

C:\Program Files\mitmproxy\bin\_internal\aioquic\_crypto.pyd

MD5 4778793412e02d0ba9c723c2c36b938a
SHA1 3881c8219a944da5d81a723e9a6a1c3e7f4e53f4
SHA256 d35cbbfe8cf6bb1708ac9c2619043bc2227b23774abdeb7b6f6666a14e17c290
SHA512 b66014dad27c95b3ecbded234af89b11a90e08479ddef320b21a4cc10c27ce49befa3022c9734e94c0af9df8ec426681c7289744aa597254d0d706b2d553a532

C:\Program Files\mitmproxy\bin\_internal\certifi\cacert.pem

MD5 2a6bef11d1f4672f86d3321b38f81220
SHA1 b4146c66e7e24312882d33b16b2ee140cb764b0e
SHA256 1605d0d39c5e25d67e7838da6a17dcf2e8c6cfa79030e8fb0318e35f5495493c
SHA512 500dfff929d803b0121796e8c1a30bdfcb149318a4a4de460451e093e4cbd568cd12ab20d0294e0bfa7efbd001de968cca4c61072218441d4fa7fd9edf7236d9

C:\Program Files\mitmproxy\bin\_internal\cryptography\hazmat\bindings\_rust.pyd

MD5 f918173fbdc6e75c93f64784f2c17050
SHA1 163ef51d4338b01c3bc03d6729f8e90ae39d8f04
SHA256 2c7a31dec06df4eec6b068a0b4b009c8f52ef34ace785c8b584408cb29ce28fd
SHA512 5405d5995e97805e68e91e1f191dc5e7910a7f2ba31619eb64aff54877cbd1b3fa08b7a24b411d095edb21877956976777409d3db58d29da32219bf578ce4ef2

memory/2736-1594-0x0000000063100000-0x0000000063114000-memory.dmp

memory/2736-1593-0x0000000063980000-0x0000000063994000-memory.dmp

memory/2736-1592-0x0000000055FA0000-0x0000000055FD2000-memory.dmp

memory/2736-1591-0x0000000066C00000-0x0000000066C1B000-memory.dmp

memory/2736-1590-0x000000006CA00000-0x000000006CA0E000-memory.dmp

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\vendor.js

MD5 122a138da24505f49be05fce1a5cdb6f
SHA1 5005b4431e79d7a6ff8b6052a01d8a7b130372c4
SHA256 9acc49a970f16b844fc2817b8fd62ae9682f1fdf3781934cddbd6732cf80d451
SHA512 042f3c415237bbc8c146a1cfe8445db3e6ab0a1fa518e388d648e09e1ea825a757e6b23d1e52a7d6af17e2c8cb098e04198e33e43ea7d8749dac9599ab308971

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\app.js

MD5 3df13c7d773522a6a839b36170db8d07
SHA1 33c2b389d4c9fcc7ed40ca7adbdcf7c759384264
SHA256 b2f4aac01d7a6df37d17f1a90ea47f98568e0011bdfd076a2710b2843c7459c7
SHA512 b42b664eae197b77ab56a6cb27581142bfc274780aaf6d321a145572eb196364c2d94140d5e6d0143553df80ddaeeb749b7fed0ae91d043ba970cfb92018b30f

C:\Program Files\mitmproxy\bin\_internal\zstandard\_cffi.cp312-win_amd64.pyd

MD5 6da2cb32dc8b529e9592e0fd02a86728
SHA1 c37f6adebc455a971d647ebb945a539cf122d1ec
SHA256 c0bf1ba65337954bdb71982333901f7118242cc064a945956fe8439704158498
SHA512 855ed0196fbb77bc86591346a36bef661f61ea4404c882d3965222b845628d09650431edc5ecfc50718a7a5a6c4d3e317254ba735dae9dd821a9524a4bc287a6

C:\Program Files\mitmproxy\bin\_internal\zstandard\backend_c.cp312-win_amd64.pyd

MD5 478583eb2f71fa1793829fbde4246bab
SHA1 d67331acf14354cfa4cf9ab3a3e0bc2e1288bcf9
SHA256 8c7c7929d3a2742f0407619da235d5b298882cc4c7ede3666ac21e9db22f8347
SHA512 f4e01565632756036eb38d9663295836b2379b8c4b57de7704a6ee7a24dbcb5a12506ac51d2540991f8fff53ffac1f6fa56814b3a009db6b0cc9f18ab3578fc5

C:\Program Files\mitmproxy\bin\_internal\pylsqpack\_binding.pyd

MD5 480d8f69b981e162bb2cef52b9b02c3e
SHA1 0317e310170757083674a1d57462eedc066efad6
SHA256 9bed53d6e80c6023ce38bae57df9b2a799a9d33e064d7bc7c448714b5679ebc4
SHA512 ee263d04445dec719b3ad1579331adeaee2b697fb9d95bcb97ceacab033c1d963840d29f31dfa242ef3359903f0d00b87a0b0ed8c45bc35c541fadbb7ed754fc

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_windows\windows-redirector.exe

MD5 3edd3dfe0aba5d0af17bffd2f0d1daa4
SHA1 131c9ee51c4925fc5839dc6b59be5be75e5e33cc
SHA256 1542becf8a4bd008bba479d5ece4adf11469d3a71c2c48b65bf9d7c6ade4eb57
SHA512 97f57be7c0849cbb2aad4cab9f210cb9d9640de46bd5583080f7e903e8cf0cb00b27f061e9b697f9549dbff26676448f5aa70eae9ea552ebdb99324e92626cab

C:\Program Files\mitmproxy\bin\_internal\mitmproxy_rs\mitmproxy_rs.pyd

MD5 0dfeb0b08f5e98823b7cc1362241b125
SHA1 494e3c72dde2636a641b2dae81d6b5f569074689
SHA256 6eb0fbf08e27673d57383ac486618ee06a14a10161c894e2eac1b15a6f9d69e8
SHA512 2e91448bec212c4c3314859afa249fd0ae220bef83b9fcf5d620800d7c42a119ef6077c223bc5ea2b3f5283a2eec68b5d661ecc9eea3ce56a32c2fc705ae5f34

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\images\favicon.ico

MD5 e4ce127909d4697b97bf404a42e7c428
SHA1 dcf1ad41b43788e6d863e529605a27c2c9906c75
SHA256 93f546d6bee5a1ce7d5fb5adb4926c6e698be6746c2a699342d22f62c3107568
SHA512 1c41259ea122bb8df4632bd7549a7e33f75f45a6578d9754b6bf2f8546145aff164589ce6f45408caeb3f9e23b7279b586d7d6f852b3dafe398faf3b6d3a535f

C:\Program Files\mitmproxy\bin\_internal\mitmproxy\tools\web\static\fonts\fontawesome-webfont.svg

MD5 acf3dcb7ff752b5296ca23ba2c7c2606
SHA1 b5483b11f8ba213e733b5b8af9927a04fec996f6
SHA256 fc378232f9dad500890aa9e0bdd030a53d2f317d517393a3b91400b4ddce4c7c
SHA512 ec518fb51a29732a7294430841c7acacf1be42652ddd23fd277f3fff110eb84f5a54fa88ff82b1bd461a8c44145847f9c6bfc98a022106661e26237e18048d87

memory/2736-1589-0x0000000055FE0000-0x0000000055FEE000-memory.dmp

memory/2736-1588-0x000000006C580000-0x000000006C599000-memory.dmp

memory/2736-1587-0x0000000067C80000-0x0000000067D09000-memory.dmp

memory/2736-1586-0x00000000710C0000-0x00000000710F4000-memory.dmp

memory/2736-1585-0x0000000066680000-0x0000000066695000-memory.dmp

memory/2736-1584-0x0000000055FF0000-0x0000000056016000-memory.dmp

memory/2736-1583-0x0000000000800000-0x0000000000ADD000-memory.dmp

C:\Program Files\mitmproxy\uninstbr.000

MD5 51be3ceb98b18ddb97e034f904fc7532
SHA1 94c4304d3343620e46191926ef775461919d9135
SHA256 cc135650242342e1bfea2e506ce22831d9c71696e319e24575f30b4b77b824ac
SHA512 c754e43856843c159790647ae28d373bbc7d1b5c93939021647bcc2e1c447946a907fde388124ced8f7f86e96ece2fb5bea6a6de31c5d9d26dca61c6409d8a65

memory/4352-1729-0x00007FFFAB2C3000-0x00007FFFAB2C5000-memory.dmp

memory/2736-1741-0x0000000063100000-0x0000000063114000-memory.dmp

memory/2736-1740-0x0000000063980000-0x0000000063994000-memory.dmp

memory/2736-1733-0x00000000710C0000-0x00000000710F4000-memory.dmp

memory/2736-1731-0x0000000055FF0000-0x0000000056016000-memory.dmp

memory/2736-1739-0x0000000055FA0000-0x0000000055FD2000-memory.dmp

memory/4352-1742-0x00007FFFAB2C0000-0x00007FFFABD81000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3fl5xrn4.0te.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/4352-1752-0x000001ECFBF50000-0x000001ECFBF72000-memory.dmp

memory/2736-1738-0x0000000066C00000-0x0000000066C1B000-memory.dmp

memory/4352-1753-0x00007FFFAB2C0000-0x00007FFFABD81000-memory.dmp

memory/2736-1737-0x000000006CA00000-0x000000006CA0E000-memory.dmp

memory/2736-1736-0x0000000055FE0000-0x0000000055FEE000-memory.dmp

memory/2736-1735-0x000000006C580000-0x000000006C599000-memory.dmp

memory/2736-1734-0x0000000067C80000-0x0000000067D09000-memory.dmp

memory/2736-1730-0x0000000000800000-0x0000000000ADD000-memory.dmp

memory/2736-1732-0x0000000066680000-0x0000000066695000-memory.dmp

memory/4352-1757-0x00007FFFAB2C0000-0x00007FFFABD81000-memory.dmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mitmproxy\mitmweb.lnk

MD5 0d8740ee07a7d61569c0128f75e188ca
SHA1 cd416d303a23535f082eb6dbce311fa33530e747
SHA256 f79b0a496aa657fe5867162d66c688eb252beb61b9dd4fcfd98599a209d819ce
SHA512 bd312f6cbc233a98df1e048e27020b20370ecdb09324daed0c3c5e81cf14199fa865e8f92fb3d200ce307b8f01f348100ee0c189a24307d3ad75efed62ed95f1

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

MD5 d85ba6ff808d9e5444a4b369f5bc2730
SHA1 31aa9d96590fff6981b315e0b391b575e4c0804a
SHA256 84739c608a73509419748e4e20e6cc4e1846056c3fe1929a8300d5a1a488202f
SHA512 8c414eb55b45212af385accc16d9d562adba2123583ce70d22b91161fe878683845512a78f04dedd4ea98ed9b174dbfa98cf696370598ad8e6fbd1e714f1f249

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 90b00424e6de0ca7eb4686c96a0f3265
SHA1 f7552ce23fa550304f21e85a448c93e3a285a3ae
SHA256 177bd48d3ff386e32314c4ef29834352cb63b83554159fbe821a78cb14759759
SHA512 2a85199a37184ff8f8414acb97ac278ddacfe1185db65d631c47afb63c079e8952cc3e3ee44591625bb70755fde7a3513f65aafa5112ad1e2d6c9fd5b1298919

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mitmproxy\mitmproxy.lnk

MD5 1be9333bc37cffd2692f9d4253d7bf12
SHA1 c843abf08159b3a1d0111cf245a4b865e196cafe
SHA256 88aea3fa653bb5952cf3ff12d8d52e815e32fc8efc36458d9f204ae34d1cc93d
SHA512 03b2cd8c5cb79c1d683f804fd64f72fcb20ce983ea41e1b1baa9649dc48236347cff2d38ccd27ff752b3ab0370d4e4959d275b9063a6be05610db48574eb3fdc

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 6d42b6da621e8df5674e26b799c8e2aa
SHA1 ab3ce1327ea1eeedb987ec823d5e0cb146bafa48
SHA256 5ab6a1726f425c6d0158f55eb8d81754ddedd51e651aa0a899a29b7a58619c4c
SHA512 53faffbda8a835bc1143e894c118c15901a5fd09cfc2224dd2f754c06dc794897315049a579b9a8382d4564f071576045aaaf824019b7139d939152dca38ce29

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\c6d509045a17bbeb.customDestinations-ms

MD5 acbc87766d9f2e6ee268934b6b046f0f
SHA1 a09a74e7a1d93591fcc165c63a410f7dfd23f594
SHA256 a17766f68f734fdd7430e4c1390d4c1759ee13f143460313b90b844e0d3dc379
SHA512 204df0c6f8e4216339f14a9f73710b55184e883accc5479690765bd0d63056e037233a10083bc8d0f439421e5755670725084d5bd27f8675f5a1d4351447a4ca

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\c6d509045a17bbeb.customDestinations-ms

MD5 2c00a8db52dc417f5c26f847722e6029
SHA1 9ee28e9b8cf1921dd7c59a5413b9c26eb5faa3a5
SHA256 cd9b2e8f4837464bd69b6fda21e7220fe08babfe4dc16270e3407b641deffbf4
SHA512 884e406e353600b0f1fd75577ed7332a5c68fb26cec36ef723a95c0790936fb1bfba6c28856e6dff1df97449684ae026331b3815f3cd505b658acde66aad0b1b

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 ef647504cf229a16d02de14a16241b90
SHA1 81480caca469857eb93c75d494828b81e124fda0
SHA256 47002672443e80410e55a0b6d683573ac27d70d803b57ee3c2818d1008669710
SHA512 a6d8c08c708eee6f7e700880ce79d2ba7cd0acbe8529d96e18f3e90ea1f3cf33fd801dd6eba6017cdd02769e968c48278c090c1deeac710124f79423cd862ee1

\??\pipe\crashpad_1564_VUDKZKZZCCLUBTOV

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mitmproxy\mitmdump.lnk

MD5 57884ded9fdf36065bca483929e20954
SHA1 306540b278821858354151f46676b89e3bc27ff7
SHA256 5f2d9a08c5354593eda8809d669764150459d17b3fa8a7f914343441d0c05349
SHA512 650d0c932b5512e6e15b85148e79c6383c4e82131e8e5e79ba5cfbe7d0a801f49095db95ab30c530d6433d5caea8bd62d1dec71d91707067092228fd082e5233

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 cae60f0ddddac635da71bba775a2c5b4
SHA1 386f1a036af61345a7d303d45f5230e2df817477
SHA256 b2dd636b7b0d3bfe44cef5e1175828b1fa7bd84d5563f54342944156ba996c16
SHA512 28ed8a8bc132ef56971cfd7b517b17cdb74a7f8c247ef6bff232996210075e06aa58a415825a1e038cfb547ad3dc6882bf1ca1b68c5b360ef0512a1440850253

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 12a4711438f7b11c5043b61819ddf932
SHA1 d1b6a66c370908f72e5d372db751b4a2aa40e242
SHA256 c4ba1accc2eb2a27c86b718e9573d06b48bb716c2ab377323077cd3aa1861425
SHA512 9b23b7614bc60e51464e890819375202fdabb3cea1fe5107d9f660c955264d5b84dee176bff46433874221b5e10aad07160a8744938c7dcda052029f05bb0875

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 db4fef55d5fea60b9a2bf16bd92c1684
SHA1 150a807e5fe8a5e3a33c1f4c460d07ab6c6ff776
SHA256 1070005103e0fe94d5d453cd81ca01f5c47b5bdefa1b749c073d84129b7b36dd
SHA512 8192858728417bf1941418b3cdff1e247427fff940cbf15b0901b768042121ade1aeea9261f42136669a53fb4d8d77be5458b68e6cd555ead4762ea7e8d527c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 96003ed4013a64a24157b16ebdcfb72a
SHA1 0bea5c7ad155ccda11a8d4b363755b0e724302f0
SHA256 2afe0e23ca06ca23439a8976b91e0ee5b73023c5febfe6ee560c0e1326992acd
SHA512 3ce47f8b6c190d724be21aa14e440caf654ae5feed3d269473296240479af3550cf9d1c894847184add1cecd236e8200efcb5e2873970b6a95eb464dd6c7d8f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 3a4d698822ab9c32f863b8e5845ecdf0
SHA1 4a631331667fc2e58e41d5de7ac18095f98a437a
SHA256 c4d80be8c7fa35be95b9dd5636f606251350dc1c919950359afd338060558c39
SHA512 af0549d7b4cddfe4bfa1f827ebccfa07122513ba8b2f788ab8a532e6f46aee7cc2cfe04207018ac2ea38c0a4d2644c08ce270e52da585f57ddef258f012662cf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\72da9a031dd938ba.customDestinations-ms

MD5 8e89c3ca04060efd418d00cfbe697088
SHA1 a55f4fecaca30065567c55cca6332bba361ec03f
SHA256 41fc2060f77056040634b941081fab1f9638be18550daebb13915322e5a3042e
SHA512 5eba9313775ce7c80e5526bf62c2738d0864b00c21dfd5fd369de0596ef3ed96646dbbe82c2f183371ee4b1e73e898aacaaa8ece40c068e0a49aa78f7e6f1f16

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\72da9a031dd938ba.customDestinations-ms

MD5 3c9dbcbf1588ac4cae60d477f70b5bc7
SHA1 d55cfdd690757ea3fc07c927bfdddd3014d3e622
SHA256 f19d6be3dcbeb2c492f0426c8a2f0b7009d343e57fc03cea6002b21249aba2a3
SHA512 3fbd8b18b60fa3983e0b22a4bd1ea22e49c5cbc8738d89f055a627e54602a1c9545dd5b18c3aab4982315cff9bdb8e7577f0cba1bf588779a6914c50e235824e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0129a57ab0c293031e3ad57839834f7d
SHA1 6b0ee001890c51a8812b30ba6a13e332d3c1ea0d
SHA256 abc9f8cb17efcb4cb54dcbdf29e4cd146d3c4b3bdf3652c7ed09770b0bd0e169
SHA512 4b530c7baf31b16c505135c58ba746cd9e9f8e9364cfe6e5862b16c5b94ed34ab12c1c15d8aaac4b5b7ecaf26abbc622343b91a323782c39d6bda69082733cfb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 904286c61c3bc502cacc2377e2e0177d
SHA1 7d0d455afaf0ce4de1d03f8087f29dfee9015b4a
SHA256 86b6ee1798d0404436d01b71b56bd9c1841d5164222408b8b0cbebdae3eb2f7b
SHA512 720fc5a34d982f38c5b90c6dccb96225739045b0c465107df9239db20da3c1abf8634ff24545cf62712ffeb50b6b5fa15b7a4cef128a22236ac967205bcb79ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 4aa744fff00c85fa3e22bba4b80b2b49
SHA1 e7375d90cee3a55c21525adc5fdf46b48f33104f
SHA256 560c94f7035058ceb585d2d700e9b667fd4de70fbb200100eb95fe18de9aa51b
SHA512 14177448ac845627fd2394bb082d7d51ea96a37dcb9b5264d94c172cbe7d37ea9432b815dbc27e341140d5e4b23ab6f72315619b71ad86de2cd8783af4a7dfd0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58