Overview

overview

8

Static

static

3

WaveInstaller.exe

windows7-x64

3

WaveInstaller.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    175s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-07-2024 22:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    WaveInstaller.exe

  • Size

    1.5MB

  • MD5

    c822ab5332b11c9185765b157d0b6e17

  • SHA1

    7fe909d73a24ddd87171896079cceb8b03663ad4

  • SHA256

    344700d3141170111a9b77db100f6961cc54a2988d964d34f7e1ca57aa42aa2a

  • SHA512

    a8612836fb4714b939d03f7fe08391bbc635ca83ab853fc677159e5db6b00f76b9b586bdae9c19d2406d9a2713d1caf614132cb6c14e1dddc6ac45e47f7e5a5d

  • SSDEEP

    24576:9viinbT3ipyqwPx4x3RyFoBkkAd04wJAAh/jV1gJcPNZI6fntX3HOt2pbs81ind2:EinbT3ipTD0anywJAaD/3U2pb7indT

Score
8/10
discoverypersistenceprivilege_escalation

Malware Config

Signatures

  • Downloads MZ/PE file
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 48 IoCs
  • Checks for any installed AV software in registry 1 TTPs 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs
  • Checks system information in the registry 2 TTPs 8 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of WriteProcessMemory 55 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WaveInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\WaveInstaller.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4708
    • C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
      "C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4056
      • C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
        "C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks for any installed AV software in registry
        • Drops file in Program Files directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2808
        • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe
          "C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe" --type=gpu-process --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\CefSharp\locales" --resources-dir-path="C:\Users\Admin\AppData\Local\CefSharp" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CefSharp" --cefsharpexitsub --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2100,i,14505837076813665648,11692786473428914635,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=2108 --mojo-platform-channel-handle=2092 /prefetch:2 --host-process-id=2808
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3436
        • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe
          "C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\CefSharp\locales" --resources-dir-path="C:\Users\Admin\AppData\Local\CefSharp" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CefSharp" --cefsharpexitsub --field-trial-handle=2776,i,14505837076813665648,11692786473428914635,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=2780 --mojo-platform-channel-handle=2388 /prefetch:3 --host-process-id=2808
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4124
        • C:\Users\Admin\AppData\Local\Luau Language Server\node.exe
          "C:\Users\Admin\AppData\Local\Luau Language Server\node.exe" server --process-id=2808
          4⤵
          • Executes dropped EXE
          PID:4420
        • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe
          "C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:2332
          • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
            "C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe" /silent /install
            5⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            • Suspicious use of WriteProcessMemory
            PID:6292
            • C:\Program Files (x86)\Microsoft\Temp\EU2169.tmp\MicrosoftEdgeUpdate.exe
              "C:\Program Files (x86)\Microsoft\Temp\EU2169.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
              6⤵
              • Event Triggered Execution: Image File Execution Options Injection
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks system information in the registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of WriteProcessMemory
              PID:6440
              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Modifies registry class
                PID:6796
              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Modifies registry class
                • Suspicious use of WriteProcessMemory
                PID:5216
                • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:7072
                • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:5180
                • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
                  "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:7028
              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NDlBRDlGOTUtN0VFNi00OTQ1LThCQzctM0VENzYwQzJCQTQ1fSIgdXNlcmlkPSJ7QjEyRDVBQkMtMTg3RS00NjUxLThDNzAtM0E2OTA2RjJFNDYzfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxMjIyOEQ4Qi0zRTYxLTRCMDktOUNCMC1GOTkwMUVCODUwMzZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7aFZmRGpNZEZHNkZnS3MwTno2ZW1yWUNTZzZUUXZEUG9tb2xSYXlRWEJLND0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4Ny40MSIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU3ODU1MTM5MTMiIGluc3RhbGxfdGltZV9tcz0iNTIzIi8-PC9hcHA-PC9yZXF1ZXN0Pg
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Checks system information in the registry
                PID:7124
              • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
                "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{49AD9F95-7EE6-4945-8BC7-3ED760C2BA45}" /silent
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3460
        • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe
          "C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --locales-dir-path="C:\Users\Admin\AppData\Local\CefSharp\locales" --resources-dir-path="C:\Users\Admin\AppData\Local\CefSharp" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CefSharp" --cefsharpexitsub --field-trial-handle=4052,i,14505837076813665648,11692786473428914635,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=4372 --mojo-platform-channel-handle=4340 /prefetch:8 --host-process-id=2808
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:5348
  • C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
    "C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4520
    • C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
      "C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1084
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 1076
        3⤵
        • Program crash
        PID:4392
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1084 -ip 1084
    1⤵
      PID:1692
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks system information in the registry
      • Modifies data under HKEY_USERS
      • Suspicious use of WriteProcessMemory
      PID:5244
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NDlBRDlGOTUtN0VFNi00OTQ1LThCQzctM0VENzYwQzJCQTQ1fSIgdXNlcmlkPSJ7QjEyRDVBQkMtMTg3RS00NjUxLThDNzAtM0E2OTA2RjJFNDYzfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxM0M3OTYxMS00Njk1LTQ2RDAtQTdEMC05QzFCNjNBNTQ0NzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7aFZmRGpNZEZHNkZnS3MwTno2ZW1yWUNTZzZUUXZEUG9tb2xSYXlRWEJLND0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU3ODkxNDQxODEiLz48L2FwcD48L3JlcXVlc3Q-
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks system information in the registry
        PID:4044
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\MicrosoftEdge_X64_126.0.2592.87.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\MicrosoftEdge_X64_126.0.2592.87.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
        2⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:5148
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\EDGEMITMP_BA3EF.tmp\setup.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\EDGEMITMP_BA3EF.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\MicrosoftEdge_X64_126.0.2592.87.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          • Suspicious use of WriteProcessMemory
          PID:456
          • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\EDGEMITMP_BA3EF.tmp\setup.exe
            "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\EDGEMITMP_BA3EF.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.127 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FA87FFAD-6711-4E71-B2AF-0104A18B2B77}\EDGEMITMP_BA3EF.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.87 --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff7e804aa40,0x7ff7e804aa4c,0x7ff7e804aa58
            4⤵
            • Executes dropped EXE
            • Drops file in Program Files directory
            PID:5240

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.87\Installer\setup.exe
      Filesize

      6.5MB

      MD5

      44bab1ba8bbc80a6f11a59a921ade1fe

      SHA1

      71292aa421fc9cefd9eeade06fc5af52f71e8dc2

      SHA256

      a03c11b73af7ccf83f2a4bc1995f9083f8415174d1e8f6d6465e9192aabb542a

      SHA512

      fcb6f75c3367b91da92b3d866ae6b85428d8c2ef13499344e80ddd3bb30f47d1243120aa41eba519756bcb6ff5f9708e7fe7281265c4c32766231765aa8104e2

      Download Submit

    • C:\Program Files (x86)\Microsoft\Temp\EU2169.tmp\MicrosoftEdgeUpdate.exe
      Filesize

      201KB

      MD5

      4dc57ab56e37cd05e81f0d8aaafc5179

      SHA1

      494a90728d7680f979b0ad87f09b5b58f16d1cd5

      SHA256

      87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718

      SHA512

      320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

      Download Submit

    • C:\Program Files (x86)\Microsoft\Temp\EU2169.tmp\msedgeupdate.dll
      Filesize

      2.0MB

      MD5

      965b3af7886e7bf6584488658c050ca2

      SHA1

      72daabdde7cd500c483d0eeecb1bd19708f8e4a5

      SHA256

      d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19

      SHA512

      1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

      Download Submit

    • C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping2808_311925132\LICENSE
      Filesize

      473B

      MD5

      f6719687bed7403612eaed0b191eb4a9

      SHA1

      dd03919750e45507743bd089a659e8efcefa7af1

      SHA256

      afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59

      SHA512

      dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

      Download Submit

    • C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping2808_311925132\manifest.json
      Filesize

      984B

      MD5

      0359d5b66d73a97ce5dc9f89ed84c458

      SHA1

      ce17e52eaac909dd63d16d93410de675d3e6ec0d

      SHA256

      beeab2f8d3833839399dde15ce9085c17b304445577d21333e883d6db6d0b755

      SHA512

      8fd94a098a4ab5c0fcd48c2cef2bb03328dd4d25c899bf5ed1ca561347d74a8aab8a214ba2d3180a86df72c52eb26987a44631d0ecd9edc84976c28d6c9dc16a

      Download Submit

    • C:\Program Files\MsEdgeCrashpad\settings.dat
      Filesize

      280B

      MD5

      e8462e52f77f572bdcc011ce30e35a7c

      SHA1

      d6d90b43406bb444161e7e29c191d1f47ea521ba

      SHA256

      5f3a8b5f4f1eb5858fafe3daf6ec0a15311bac85a022779ebe378f31931d703b

      SHA512

      ecce7f92f42d101e509a0a331d5774545df30f33db558fa3592843c4473518c4e824471931da28a28e5939518feef2ae5ebf69d8bcd0a0040b27aef2107a4864

      Download Submit

    • C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
      Filesize

      198KB

      MD5

      5e975eb4f6de4953e6da80d289269799

      SHA1

      bc17efd83da1da72ba0668dc808fe3c6eaa993ed

      SHA256

      0f38e366dc36c76826bc8301ddf093f7ba490dae937fba487d954cdece5857ad

      SHA512

      419b4df993bbc22af43ce1b1000c245eb627df3be2ea1ec24652fa0a8ac2ac9c067a29841084bfe195a04d8f6baa8702794f102d5cf192f2cc6e497d13ec061f

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.dll
      Filesize

      4.3MB

      MD5

      6546ceb273f079342df5e828a60f551b

      SHA1

      ede41c27df51c39cd731797c340fcb8feda51ea3

      SHA256

      e440da74de73212d80da3f27661fcb9436d03d9e8dbbb44c9c148aaf38071ca5

      SHA512

      f0ea83bf836e93ff7b58582329a05ba183a25c92705fab36f576ec0c20cf687ce16a68e483698bda4215d441dec5916ffbdfa1763fb357e14ab5e0f1ffcaf824

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe
      Filesize

      249KB

      MD5

      772c9fecbd0397f6cfb3d866cf3a5d7d

      SHA1

      6de3355d866d0627a756d0d4e29318e67650dacf

      SHA256

      2f88ea7e1183d320fb2b7483de2e860da13dc0c0caaf58f41a888528d78c809f

      SHA512

      82048bd6e50d38a863379a623b8cfda2d1553d8141923acf13f990c7245c833082523633eaa830362a12bfff300da61b3d8b3cccbe038ce2375fdfbd20dbca31

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.runtimeconfig.json
      Filesize

      372B

      MD5

      d94cf983fba9ab1bb8a6cb3ad4a48f50

      SHA1

      04855d8b7a76b7ec74633043ef9986d4500ca63c

      SHA256

      1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a

      SHA512

      09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png
      Filesize

      20KB

      MD5

      4f8f43c5d5c2895640ed4fdca39737d5

      SHA1

      fb46095bdfcab74d61e1171632c25f783ef495fa

      SHA256

      fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1

      SHA512

      7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaApp\graphic\[email protected]
      Filesize

      71KB

      MD5

      3fec0191b36b9d9448a73ff1a937a1f7

      SHA1

      bee7d28204245e3088689ac08da18b43eae531ba

      SHA256

      1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89

      SHA512

      a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\ExtraContent\textures\ui\LuaDiscussions\buttonFill.png
      Filesize

      247B

      MD5

      81ce54dfd6605840a1bd2f9b0b3f807d

      SHA1

      4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c

      SHA256

      0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386

      SHA512

      57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
      Filesize

      1.5MB

      MD5

      610b1b60dc8729bad759c92f82ee2804

      SHA1

      9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552

      SHA256

      921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08

      SHA512

      0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\configs\DateTimeLocaleConfigs\zh-hans.json
      Filesize

      2KB

      MD5

      fb6605abd624d1923aef5f2122b5ae58

      SHA1

      6e98c0a31fa39c781df33628b55568e095be7d71

      SHA256

      7b993133d329c46c0c437d985eead54432944d7b46db6ad6ea755505b8629d00

      SHA512

      97a14eda2010033265b379aa5553359293baf4988a4cdde8a40b0315e318a7b30feee7f5e14c68131e85610c00585d0c67e636999e3af9b5b2209e1a27a82223

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\configs\DateTimeLocaleConfigs\zh-tw.json
      Filesize

      2KB

      MD5

      702c9879f2289959ceaa91d3045f28aa

      SHA1

      775072f139acc8eafb219af355f60b2f57094276

      SHA256

      a92a6988175f9c1d073e4b54bf6a31f9b5d3652eebdf6a351fb5e12bda76cbd5

      SHA512

      815a6bef134c0db7a5926f0cf4b3f7702d71b0b2f13eca9539cd2fc5a61eea81b1884e4c4bc0b3398880589bff809ac8d5df833e7e4aeda4a1244e9a875d1e97

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\Cursors\KeyboardMouse\IBeamCursor.png
      Filesize

      292B

      MD5

      464c4983fa06ad6cf235ec6793de5f83

      SHA1

      8afeb666c8aee7290ab587a2bfb29fc3551669e8

      SHA256

      99fd7f104948c6ab002d1ec69ffd6c896c91f9accc499588df0980b4346ecbed

      SHA512

      f805f5f38535fe487b899486c8de6cf630114964e2c3ebc2af7152a82c6f6faef681b4d936a1867b5dff6566b688b5c01105074443cc2086b3fe71f7e6e404b1

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\StudioToolbox\Clear.png
      Filesize

      538B

      MD5

      fa8eaf9266c707e151bb20281b3c0988

      SHA1

      3ca097ad4cd097745d33d386cc2d626ece8cb969

      SHA256

      8cf08bf7e50fea7b38f59f162ed956346c55a714ed8a9a8b0a1ada7e18480bc2

      SHA512

      e29274300eab297c6de895bb39170f73f0a4ffa2a8c3732caeeeac16e2c25fb58bb401fdd5823cc62d9c413ec6c43d7c46861d7e14d52f8d9d8ff632e29f167c

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\StudioUIEditor\valueBoxRoundedRectangle.png
      Filesize

      130B

      MD5

      521fb651c83453bf42d7432896040e5e

      SHA1

      8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9

      SHA256

      630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70

      SHA512

      8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\TerrainTools\checkbox_square.png
      Filesize

      985B

      MD5

      2cb16991a26dc803f43963bdc7571e3f

      SHA1

      12ad66a51b60eeaed199bc521800f7c763a3bc7b

      SHA256

      c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646

      SHA512

      4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\Thumbstick1.png
      Filesize

      641B

      MD5

      2cbe38df9a03133ddf11a940c09b49cd

      SHA1

      6fb5c191ed8ce9495c66b90aaf53662bfe199846

      SHA256

      0835a661199a7d8df7249e8ae925987184efcc4fb85d9efac3cc2c1495020517

      SHA512

      dcef5baccef9fff632456fe7bc3c4f4a403363d9103a8047a55f4bd4c413d0c5f751a2e37385fe9eba7a420dbdb77ca2ff883d47fcdd35af222191cc5bd5c7a9

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\[email protected]
      Filesize

      1KB

      MD5

      e8c88cf5c5ef7ae5ddee2d0e8376b32f

      SHA1

      77f2a5b11436d247d1acc3bac8edffc99c496839

      SHA256

      9607af14604a8e8eb1dec45d3eeca01fed33140c0ccc3e6ef8ca4a1f6219b5dd

      SHA512

      32f5a1e907705346a56fbddfe0d8841d05415ff7abe28ae9281ba46fedf8270b982be0090b72e2e32de0ce36e21934f80eaf508fd010f7ab132d39f5305fb68f

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\[email protected]
      Filesize

      1KB

      MD5

      499333dae156bb4c9e9309a4842be4c8

      SHA1

      d18c4c36bdb297208589dc93715560acaf761c3a

      SHA256

      d35a74469f1436f114c27c730a5ec0793073bcf098db37f10158d562a3174591

      SHA512

      91c64173d2cdabc045c70e0538d45e1022cc74ec04989565b85f0f26fe3e788b700a0956a07a8c91d34c06fc1b7fad43bbdbb41b0c6f15b9881c3e46def8103e

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\Thumbstick2.png
      Filesize

      738B

      MD5

      a402aacac8be906bcc07d50669d32061

      SHA1

      9d75c1afbe9fc482983978cae4c553aa32625640

      SHA256

      62a313b6cc9ffe7dd86bc9c4fcd7b8e8d1f14a15cdf41a53fb69af4ae3416102

      SHA512

      d11567bcaad8bbd9e2b9f497c3215102c7e7546caf425e93791502d3d2b3f78dec13609796fcd6e1e7f5c7d794bac074d00a74001e7fe943d63463b483877546

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\[email protected]
      Filesize

      1KB

      MD5

      83e9b7823c0a5c4c67a603a734233dec

      SHA1

      2eaf04ad636bf71afdf73b004d17d366ac6d333e

      SHA256

      3b5e06eb1a89975def847101f700f0caa60fe0198f53e51974ef1608c6e1e067

      SHA512

      e8abb39a1ec340ac5c7d63137f607cd09eae0e885e4f73b84d8adad1b8f574155b92fbf2c9d3013f64ebbb6d55ead5419e7546b0f70dcde976d49e7440743b0f

      Download Submit

    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-1088f3c8e4a44cc7\content\textures\ui\Controls\XboxController\[email protected]
      Filesize

      1KB

      MD5

      55b64987636b9740ab1de7debd1f0b2f

      SHA1

      96f67222ce7d7748ec968e95a2f6495860f9d9c9

      SHA256

      f4a6bb3347ee3e603ea0b2f009bfa802103bc434ae3ff1db1f2043fa8cace8fc

      SHA512

      73a88a278747de3fefbaabb3ff90c1c0750c8d6c17746787f17061f4eff933620407336bf9b755f4222b0943b07d8c4d01de1815d42ea65e78e0daa7072591e9

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.Core.dll
      Filesize

      915KB

      MD5

      100c32f77e68a2ce962e1a28997567ea

      SHA1

      a80a1f4019b8d44df6b5833fb0c51b929fa79843

      SHA256

      c0b9e29b240d8328f2f9a29ca0298ca4d967a926f3174a3442c3730c00d5a926

      SHA512

      f95530ef439fa5c4e3bc02db249b6a76e9d56849816ead83c9cd9bcd49d3443ccb88651d829165c98a67af40b3ef02b922971114f29c5c735e662ca35c0fb6ed

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.BrowserSubprocess.exe
      Filesize

      7KB

      MD5

      516ff62b2e1f4642caa954c0968719e8

      SHA1

      e349d0ce82e2109dd0d18416d9cf46e8411b7f15

      SHA256

      19da58849cec5933860116e60a1e94b08e30d90e0f955768270b47998d612045

      SHA512

      7aa4a0c87b29c2a84f585a884d8208fc2352a43f2cdb549c100e3b121837ad5f8dadb1101f57d1d3fcb7ebec9d9f22e07dc14239b7d2e2d25793c999becf288b

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\CefSharp.dll
      Filesize

      272KB

      MD5

      9ca06a8f9e5f7239ca225ab810274023

      SHA1

      e1a219f567a7b7d3af9386df51b14c76e769c044

      SHA256

      5fd00ae3e83e6ca156647ff6df87b49ffc7cad47c23fe3ae07c067c5adf6f74a

      SHA512

      430c9bceed5439b987d5bd4840cfe32411ca61594f18597aca1948aa39a22c9d70beadf3bb9b1dd0373f81a94a25dcba17fa8e8c73abf06cba28d0971d5614c5

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\LocalPrefs.json
      Filesize

      643B

      MD5

      d65b70ff80656bd834242364a5bbe7f2

      SHA1

      91df2367d28d5625bb51cc8b49c06fe287ae0d77

      SHA256

      e313d718a5f34971a344b95467b266ecf1ca445368b07d25a5dd09586f7c378b

      SHA512

      0f327e1a4f08715a54e4b856ffa3933a862e7839ae1a1874d63c1d9596ecaa067a6c5f30a74b8bd8e262ecee43956dd3db8620dca551fb7535c78a6217a68e78

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\LocalPrefs.json
      Filesize

      755B

      MD5

      15c7ffc3ee4ba626328dd3e655ac9a29

      SHA1

      e7d0ff6a9aa491220b9e13133880db7f18c9add8

      SHA256

      45e1307f0b7ccfaf2184e8e96274b38ac4b1977db358b805250f26dea6f4ac15

      SHA512

      e400248a38df5ca035c6293a801d2f79154fdb1a00172211e6ab9bd8b42805954dd540838518021ffa169f4b7dc468ee609e5de5ac00d78566e5a07a2210b669

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\LocalPrefs.json~RFe59b721.TMP
      Filesize

      434B

      MD5

      b50fe445133393d2ee3e8c1f4306bb4d

      SHA1

      5577df2fe289cbaa9e8081b652b474416f4e5e44

      SHA256

      93af05611b5865b6b1e886f443bd5b6571cbe91191074deefe3f9b42bf329d6f

      SHA512

      2511abb71afc143e3507044cec2214d9978811158a59502d8f06e4faa68caedb5ef3d698098c59b03ed8aabc1dd42826ebcdf5a779a47e13ca21f48e8f80713d

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\chrome_100_percent.pak
      Filesize

      667KB

      MD5

      ae195e80859781a20414cf5faa52db06

      SHA1

      b18ecb5ec141415e3a210880e2b3d37470636485

      SHA256

      9957802c0792e621f76bbdb1c630fbad519922743b5d193294804164babda552

      SHA512

      c6fef84615fe20d1760ca496c98629feb4e533556724e9631d4282622748e7601225cf19dfb8351f4b540ae3f83785c1bcea6fe8c246cf70388e527654097c1c

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\chrome_200_percent.pak
      Filesize

      1.0MB

      MD5

      1abf6bad0c39d59e541f04162e744224

      SHA1

      db93c38253338a0b85e431bd4194d9e7bddb22c6

      SHA256

      01cb663a75f18bb2d0d800640a114f153a34bd8a5f2aa0ed7daa9b32967dc29e

      SHA512

      945d519221d626421094316f13b818766826b3bedddab0165c041540dddadc93136e32784c0562d26a420cb29479d04d2aa317b8d605cd242e5152bf05af197e

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\chrome_elf.dll
      Filesize

      1020KB

      MD5

      7191d97ce7886a1a93a013e90868db96

      SHA1

      52dd736cb589dd1def87130893d6b9449a6a36e3

      SHA256

      32f925f833aa59e3f05322549fc3c326ac6fc604358f4efbf94c59d5c08b8dc6

      SHA512

      38ebb62c34d466935eabb157197c7c364d4345f22aa3b2641b636196ca1aeaa2152ac75d613ff90817cb94825189612ddd12fb96df29469511a46a7d9620e724

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\icudtl.dat
      Filesize

      10.2MB

      MD5

      74bded81ce10a426df54da39cfa132ff

      SHA1

      eb26bcc7d24be42bd8cfbded53bd62d605989bbf

      SHA256

      7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9

      SHA512

      bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\libEGL.dll
      Filesize

      359KB

      MD5

      7dd6b0e4a31d35a0fae5ff425707073c

      SHA1

      fbd12e9f8e2252c52ce555c2ebbd7f07e62a0140

      SHA256

      8762d8001fc3ddd90e3129dfea172817e8d09b9936eaae391957de4326c8c906

      SHA512

      726968df6b83ab5f589276672250d92f532fe2dcea2176e42031a7f1dcecf578b0320cfe2a7d88bb9883ad99387d71c6ebf1e9968272bb5e62850ef09abd2648

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\libglesv2.dll
      Filesize

      6.6MB

      MD5

      8803db5b167fb5a5f8a8c595c4e4d7c6

      SHA1

      7fde861151f3bea66c65b6c2487a30728048811a

      SHA256

      52a58d25a41f4bd31cdb4a0d306217862e04ebf7c1925cc85330054a5523d719

      SHA512

      2fa9a0eda221982896e41eb387b5e156198615ac1a1fbac0acffd13008919368b41a240df416c1fce2e48c20a14cd7af7cca9fba476ada5e64a0cadde84a44b7

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\locales\en-US.pak
      Filesize

      456KB

      MD5

      4430b1833d56bc8eb1f7dc82bb7f4bc9

      SHA1

      dc15e6306625f155683326e859d83f846153c547

      SHA256

      b44ddcfac9df4934007e6c55a3c7f5e7f14c7e5e29f35c81de917fc3b22aabbc

      SHA512

      faf93bf371b2a88c1b874a5e2c54e4487fd152ad19c2a406a46f55ae75ecd421a779888c2e4c170857b16bfb5d8744bc1815a4732ed50b064b3cbd0c5ffad889

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\resources.pak
      Filesize

      8.0MB

      MD5

      4933d92c99afa246fc59eef010d5c858

      SHA1

      98d443654e93c73dd317f9f847f71fba3d5b3135

      SHA256

      62f4674daa15245ee081920b8ee191e72f36ca8fe24f6b986a832f45676915b2

      SHA512

      a3a69523c8e7310716daeebc06c2ba4fce673eccd1958e824ff179b82f4502d0ec095190179bbb387342e4150f952ea7533182fb6ba90377d17dafba8f4da623

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\v8_context_snapshot.bin
      Filesize

      643KB

      MD5

      28477a60b4fbd51dfef5237245817690

      SHA1

      b0afd5ea9f9d550124f23c65bc7851ddeffc662f

      SHA256

      169ea86f544e5cdf2a460675f876a9abb7f56bbe122782e94bb03d624931fc12

      SHA512

      3520658583bb498d5032a7f7ae77195fd2e5f8ed03c6531e56dee8320d8701102a723766e59f7766ab223f837e65a6d85cf862bb2bef6d2755ce45e672a47b22

      Download Submit

    • C:\Users\Admin\AppData\Local\CefSharp\vk_swiftshader.dll
      Filesize

      4.4MB

      MD5

      0ec149455727ace9acc09b3ba2c3a2b2

      SHA1

      6eeb990876cef6a34115b67f3190255db589f723

      SHA256

      e2d8ef53897e864b5b66bc73606681c99461798a9f4c1e13ca5cef7bc774d7fd

      SHA512

      c8eaa598c9439b1f2375fdac1f58896853510bddbd640707b9142c0d3793836120b28d7c2bd0407f0d5656dd19f14b312f37b7ac0165c9cc8b4c1a0f2af62531

      Download Submit

    • C:\Users\Admin\AppData\Local\Luau Language Server\server\index.js
      Filesize

      6.1MB

      MD5

      6b1cad741d0b6374435f7e1faa93b5e7

      SHA1

      7b1957e63c10f4422421245e4dc64074455fd62a

      SHA256

      6f17add2a8c8c2d9f592adb65d88e08558e25c15cedd82e3f013c8146b5d840f

      SHA512

      a662fc83536eff797b8d59e2fb4a2fb7cd903be8fc4137de8470b341312534326383bb3af58991628f15f93e3bdd57621622d9d9b634fb5e6e03d4aa06977253

      Download Submit

    • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\WaveBootstrapper.exe.log
      Filesize

      2KB

      MD5

      ebb67c89c3d4eb103fff16a4e76ea76e

      SHA1

      f9c7d4633305b971bd774e22c9b8885870c41b45

      SHA256

      4dea672914bb09196c2e33d23e412dfaf1411c9f699591950ce164e360ddd0e6

      SHA512

      822aa9517f78c240c118dd0381e0fe95c584317c5b3b06d093578c718e6436da41c3c47795bd513d1cfa90a7192e8c4e91b1b8a4dba0faf5d3b22e3f4b122bdd

      Download Submit

    • C:\Users\Admin\AppData\Local\Wave\CefSharp.Core.Runtime.dll
      Filesize

      1.3MB

      MD5

      09cba584aa0aae9fc600745567393ef6

      SHA1

      bbd1f93cb0db9cf9e01071b3bed1b4afd6e31279

      SHA256

      0babd84d4e7dc2713e7265d5ac25a3c28d412e705870cded6f5c7c550a5bf8d5

      SHA512

      5f914fa33a63a6d4b46f39c7279687f313728fd5f8437ec592369a2da3256ccff6f325f78ace0e6d3a2c37da1f681058556f7603da13c45b03f2808f779d2aa1

      Download Submit

    • C:\Users\Admin\AppData\Local\Wave\D3DCOMPILER_47.dll
      Filesize

      3.9MB

      MD5

      3b4647bcb9feb591c2c05d1a606ed988

      SHA1

      b42c59f96fb069fd49009dfd94550a7764e6c97c

      SHA256

      35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

      SHA512

      00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

      Download Submit

    • C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe
      Filesize

      949KB

      MD5

      8fb51b92d496c6765f7ba44e6d4a8990

      SHA1

      d3e5a8465622cd5adae05babeb7e34b2b5c777d7

      SHA256

      ab49d6166a285b747e5f279620ab9cea12f33f7656d732aa75900fcb981a5394

      SHA512

      20de93a52fff7b092cb9d77bd26944abed5f5cb67146e6d2d70be6a431283b6de52eb37a0e13dc8bc57dcf8be2d5a95b9c11b3b030a3e2f03dd6e4efc23527a6

      Download Submit

    • C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe
      Filesize

      7.5MB

      MD5

      521e21ad5cd0137689bbde63f2729873

      SHA1

      a2333d3c6ad72680b568b56d7061b0aee5aa3e3d

      SHA256

      a632148f833a0c6ba79160f401aa614ae3d6aafe096abbffdabe046d3d712355

      SHA512

      2f77c2820ad24489d76547ba1a709e83395639ff9e1864d141b26e19834c245691bfd92a92047673da15517799ea0e3f17396c6a79d571bb0eee3636bfd8ed60

      Download Submit

    • memory/1084-327-0x0000000005C60000-0x0000000005CD6000-memory.dmp

      Filesize

      472KB

      Download

    • memory/2808-329-0x000000000E050000-0x000000000E072000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2808-330-0x000000000F5E0000-0x000000000F934000-memory.dmp

      Filesize

      3.3MB

      Download

    • memory/2808-260-0x0000000006190000-0x00000000062EB000-memory.dmp

      Filesize

      1.4MB

      Download

    • memory/2808-321-0x000000000CEE0000-0x000000000CF92000-memory.dmp

      Filesize

      712KB

      Download

    • memory/2808-252-0x0000000005E10000-0x0000000005EF6000-memory.dmp

      Filesize

      920KB

      Download

    • memory/2808-250-0x00000000056D0000-0x000000000571A000-memory.dmp

      Filesize

      296KB

      Download

    • memory/2808-251-0x0000000005830000-0x0000000005854000-memory.dmp

      Filesize

      144KB

      Download

    • memory/2808-249-0x00000000006D0000-0x0000000000E5C000-memory.dmp

      Filesize

      7.5MB

      Download

    • memory/3436-286-0x00000000053B0000-0x00000000053FA000-memory.dmp

      Filesize

      296KB

      Download

    • memory/3436-275-0x0000000000A20000-0x0000000000A28000-memory.dmp

      Filesize

      32KB

      Download

    • memory/3436-279-0x0000000005220000-0x000000000530A000-memory.dmp

      Filesize

      936KB

      Download

    • memory/4056-242-0x0000000009860000-0x0000000009868000-memory.dmp

      Filesize

      32KB

      Download

    • memory/4056-235-0x00007FF83F110000-0x00007FF83F305000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4056-241-0x0000000009820000-0x000000000982A000-memory.dmp

      Filesize

      40KB

      Download

    • memory/4056-240-0x00000000097E0000-0x00000000097F6000-memory.dmp

      Filesize

      88KB

      Download

    • memory/4056-239-0x0000000008AB0000-0x0000000008BB4000-memory.dmp

      Filesize

      1.0MB

      Download

    • memory/4056-243-0x00000000098C0000-0x00000000098DE000-memory.dmp

      Filesize

      120KB

      Download

    • memory/4056-236-0x0000000000330000-0x0000000000422000-memory.dmp

      Filesize

      968KB

      Download

    • memory/4708-16-0x000000000C7F0000-0x000000000C862000-memory.dmp

      Filesize

      456KB

      Download

    • memory/4708-12-0x000000000C4F0000-0x000000000C586000-memory.dmp

      Filesize

      600KB

      Download

    • memory/4708-18-0x000000000B730000-0x000000000B73A000-memory.dmp

      Filesize

      40KB

      Download

    • memory/4708-17-0x000000000B720000-0x000000000B72A000-memory.dmp

      Filesize

      40KB

      Download

    • memory/4708-238-0x00007FF83F110000-0x00007FF83F305000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4708-14-0x000000000B670000-0x000000000B678000-memory.dmp

      Filesize

      32KB

      Download

    • memory/4708-1-0x0000000000DC0000-0x0000000000F52000-memory.dmp

      Filesize

      1.6MB

      Download

    • memory/4708-2-0x00007FF83F110000-0x00007FF83F305000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4708-3-0x00007FF83F110000-0x00007FF83F305000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4708-13-0x000000000B6E0000-0x000000000B706000-memory.dmp

      Filesize

      152KB

      Download

    • memory/4708-0-0x00007FF83F110000-0x00007FF83F305000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/4708-5-0x0000000009CD0000-0x0000000009CDE000-memory.dmp

      Filesize

      56KB

      Download

    • memory/4708-4-0x0000000009D00000-0x0000000009D38000-memory.dmp

      Filesize

      224KB

      Download

    • memory/6440-7394-0x000000005EC90000-0x000000005EEA0000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/6440-7383-0x000000005EC90000-0x000000005EEA0000-memory.dmp

      Filesize

      2.1MB

      Download

    • memory/6440-7382-0x00000000006C0000-0x00000000006F5000-memory.dmp

      Filesize

      212KB

      Download