hxxps://drive[.]google[.]com/file/d/1jfWM0LAeu2-rXKFRtv3N1OWO6iPAicNR/view?usp=drive_link

Analysis

max time kernel
313s
max time network
299s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20-08-2024 16:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1jfWM0LAeu2-rXKFRtv3N1OWO6iPAicNR/view?usp=drive_link

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5568	RedGiant.Universe.v2.2.2.CE.tmp
2216	fc-cache.exe

Loads dropped DLL 7 IoCs

pid	Process
2216	fc-cache.exe
2216	fc-cache.exe
2216	fc-cache.exe
2216	fc-cache.exe
2216	fc-cache.exe
2216	fc-cache.exe
2216	fc-cache.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
5	drive.google.com
9	drive.google.com

Drops file in System32 directory 6 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\Noesis.dll	RedGiant.Universe.v2.2.2.CE.tmp
File opened for modification	C:\Windows\system32\UniChooser.dll	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Windows\system32\is-G7UNN.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Windows\system32\is-72PFI.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Windows\system32\is-QE2J2.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File opened for modification	C:\Windows\system32\Gpu_Shader_Engine_x64.dll	RedGiant.Universe.v2.2.2.CE.tmp

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlightflicker\is-VBSOJ.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\KLF\Resources\elements\Sprites\is-HI092.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Carousel\Resources\carousel\is-GBART.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlight\is-70OCL.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlight\is-1N5PK.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\KLF\Resources\presets\Distant Flares\is-Q1U86.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Luster\Resources\Presets\is-U37S4.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\retrograde\debris\is-63B2K.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Motion_Graphics_Line\Resources\Presets\Line Styles\is-4BDM4.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Carousel\Resources\Presets\is-97JFT.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Channel_Surf\Resources\Presets\is-O5TF4.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Linear_Wipe\Resources\Presets\is-MJKUG.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashglow\is-J71LM.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Channel_Blur\Resources\Presets\is-B04LB.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\retrograde\debris\is-TQQQI.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\BadTracking\is-J50Q9.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Channel_Surf\Resources\is-0R0O7.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Common Files\OFX\Plugins\Red Giant Universe\Universe_Utilities_Unmult_Premium_OFX.ofx.bundle\Contents\Win64\is-DU0SD.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Motion_Graphics_HUD_Components\Resources\Presets\Targeting\is-4MTN1.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Utilities_Logo_Motion\Resources\Presets\Animation Presets\is-B3V7D.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlight\is-MQ1I7.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\BadTracking\is-2GD6M.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Motion_Graphics_HUD_Components\Resources\AnimationThumbs\is-08BF3.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlight\is-2A8IJ.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_RetroGrade\Resources\retrograde\grainimages\8mmstudent\is-8KI34.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\icons\is-NVFTG.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Luster\Resources\Presets\is-PVJBJ.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Glitch_Transition\Resources\Presets\Glitch Transition\Video\is-I20VI.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\Presets\is-9PQEN.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Holomatrix\Resources\Presets\Holomatrix\Glitches & Distortions\is-R3LT0.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Mixed Tracking\is-73DSS.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\crashsquare\is-90E5A.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\wipeangle\is-A0M93.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipesparkle\is-KL4CB.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Utilities_Logo_Motion\Resources\Presets\Animation Presets\is-2HL6A.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\AViD\AVX2_Plug-ins\is-RV2F3.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlightflicker\is-AER68.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip 2\is-PBMCB.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Holomatrix\Resources\Presets\Holomatrix\Glitches & Distortions\is-8SHM9.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Turbulence\Voronoi\Length2\is-MC06V.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Presets\is-V55T3.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\Presets\is-VD34C.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\BadTracking\is-0U33Q.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\TapeNoiseLoop\is-K6EUH.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Film_Transition\Resources\filmtransition\Countdown\is-THL5Q.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\KLF\Resources\presets\Natural Light\is-K5Q00.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Generators_Fractal_Background\Resources\Presets\Fractal Noise Presets\is-LPILV.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\VHS_LUTs\is-LOVAN.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Motion_Graphics_HUD_Components\Resources\AnimationThumbs\is-VUCPG.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\projector\is-4848P.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Noir_Moderne\Resources\noirmoderne\streetlight\is-82DCF.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Mixed Tracking\is-L7BQN.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\KLF\Resources\presets\Action & SciFi\is-ODB3L.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_RetroGrade\Resources\retrograde\dirt\is-AS553.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_Knoll_Light_Factory_EZ\Resources\Presets\Action\is-OUH1E.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\Motion Only\is-K14U7.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_RetroGrade\Resources\retrograde\grainimages\16mmdocumentary\is-F2JFJ.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Clock_Wipe\Resources\Presets\is-FU229.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipebeam\is-K9O4U.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\KLF\Resources\elements\Sprites\is-VBMGK.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\Motion Only\is-BVJ88.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Color_Mosaic\Resources\Presets\is-HJGMS.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Motion_Graphics_HUD_Components\Resources\AnimationThumbs\is-SI79Q.tmp	RedGiant.Universe.v2.2.2.CE.tmp
File created	C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_MisFire_Premium\Resources\Presets\is-8IQIN.tmp	RedGiant.Universe.v2.2.2.CE.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RedGiant.Universe.v2.2.2.CE.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RedGiant.Universe.v2.2.2.CE.tmp

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3880	msedge.exe
3880	msedge.exe
2924	identity_helper.exe
2924	identity_helper.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3184	msedge.exe
3644	msedge.exe
3644	msedge.exe
5568	RedGiant.Universe.v2.2.2.CE.tmp
5568	RedGiant.Universe.v2.2.2.CE.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe
3880	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3880 wrote to memory of 3248	3880	msedge.exe	84
PID 3880 wrote to memory of 3248	3880	msedge.exe	84
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 2148	3880	msedge.exe	86
PID 3880 wrote to memory of 3456	3880	msedge.exe	87
PID 3880 wrote to memory of 3456	3880	msedge.exe	87
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88
PID 3880 wrote to memory of 4244	3880	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://drive.google.com/file/d/1jfWM0LAeu2-rXKFRtv3N1OWO6iPAicNR/view?usp=drive_link
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe80f946f8,0x7ffe80f94708,0x7ffe80f94718
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6400 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,4623465863737291600,15167994033098843051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2816

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3132

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6028

C:\Users\Admin\AppData\Local\Temp\Temp1_Universe-Plugin.zip\RedGiant.Universe.v2.2.2.CE.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_Universe-Plugin.zip\RedGiant.Universe.v2.2.2.CE.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3992
- C:\Users\Admin\AppData\Local\Temp\is-27I3S.tmp\RedGiant.Universe.v2.2.2.CE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-27I3S.tmp\RedGiant.Universe.v2.2.2.CE.tmp" /SL5="$70290,1229863330,199680,C:\Users\Admin\AppData\Local\Temp\Temp1_Universe-Plugin.zip\RedGiant.Universe.v2.2.2.CE.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:5568
- - C:\ProgramData\Red Giant\Universe\Libraries\fc-cache.exe
    "C:\ProgramData\Red Giant\Universe\Libraries\fc-cache.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Red Giant\RGFX\Brushes\is-3MTGA.tmp

Filesize
640KB

MD5
d23b4f8728fbf700fedf5763363f92d2

SHA1
f9e21a4fbda34df637c1c87a184dcc2ea6e020cc

SHA256
3303febf7431952957618646cd4fadb25af14082264f9476a7635d1cce815f93

SHA512
07645ea40d4627110c93a60ac431950a042ad30b4391ceb03404807f07a752e1c566a5c1f4da0fda7fce46b97f4edb292cb5c9dbad0cfbae3063b04ace716179

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Mixed Tracking\is-TP90O.tmp

Filesize
10KB

MD5
0eb9b61520faeceb76deb6b007042ff6

SHA1
ec4df38b85315eaa055a9c59553154554b7c3a6d

SHA256
2c22cf3eb0bb1de5ae52a669bfd211128fd01b20e0f0657c51bc223f9bf5ed8b

SHA512
1ea2273dd309f66cc30234152bf816ced3ca5aa674d05dabb91561b101b3c5f813a06c640ae20241c58fc062e695d6215b1303ca68007d565e6dac2971212f48

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Presets\is-VM97N.tmp

Filesize
140B

MD5
2c8f56e32c46ac87db3983daff970ebd

SHA1
e9d660c58466816ac947635256bbe4a1a22fee26

SHA256
f14cf1a8984a604f9f63fb7e4408b5782ccd39edf02035fa326af859b1c7d713

SHA512
ee6b344dddcb6a44670a7e807c69711c5a1342b460f839951610aa20871677fed42930ac34965bdb94a1520a508314bf47bb59ec7167f55413f744b663d30057

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-0P7OT.tmp

Filesize
111KB

MD5
ac69789df73f2e2406585b887b7e011c

SHA1
f357bb3af296cde29cffac647a7f6c1d9c8d2214

SHA256
0bd1b836d9378d197d6d127db78e80566a80850dcff2e505c06c1ccbfb800256

SHA512
343d0ff2d763230befe6b47c7e1931356f70856491fd9082db4b45379a73419ec19ad9ad9431b32077610bbe122f7c02a08839822215fe8bf7b4fff579325516

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-AUEFD.tmp

Filesize
108KB

MD5
e9971855e189cf393994143137f2391b

SHA1
d78222e603799937c94c33f5aa752540dcab181c

SHA256
e9d29b6aabbc5fb2ebaedea702df9121a7ca857c8164dcd55afd2fe289eed324

SHA512
e83e95867884397fc622beef2b9c698365b72d8226d8131baf7acd09105db881db2fb4aae3b9e0906a7677fad4523ee7d59dd14ca990540f02cceaadda4d73ae

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-BON4G.tmp

Filesize
114KB

MD5
aa08bc67e266167d66b357e534f35279

SHA1
2db704330d31578a6b5ddccb63df9d7f12bddd35

SHA256
9dcb506c59dec3754830375bd5d1c1df30dfe3c1aefde33dd816a08db8865afb

SHA512
726c4b04255703f0735105ef5432fce9eb5c0353a8d0725baab4da6ff2b7babd866798b61fe6c69e269df62bbe3e239fbb992cd99c80f2f961d5618d5417c498

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-FSQ67.tmp

Filesize
116KB

MD5
e1aa45c591057095d2aaa7766e456c63

SHA1
37e9fb04a34d820418fe94a811c4bcd87445d715

SHA256
ee63c04c3dc6a0324e2148efffc9f0579c8568403baccd616eb9b5c82cb8c07d

SHA512
449429426a41a7b7a3afaf19dafe42e818fe7fde69309ab7de7d8d516b87816c52596dae3713ed8d08201c068289d405f4215bdcc56656f9ef94d5ad1f6e76e5

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-PL4T9.tmp

Filesize
113KB

MD5
7bf7a91b56095963dcce0d9ac5818656

SHA1
147210db420f18bd34f2cd81b753fe492b2cc4fe

SHA256
e19cee237837835b527d5acc1a0fccb6f3ffa026caf5b6d475814bc246438ed5

SHA512
b9083149812947526d9ee73b726717e1d9de3a5ce2c4772473bff5f213f4185baaf7fc6a35b0f6d23110d14ab6bd6baaefcf82a11af6e2b4385c45e0b106531c

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-SOM84.tmp

Filesize
114KB

MD5
a62b446fdfd9a88836e94dbe23b7c857

SHA1
032ca034f0cbf740d9697b252d8d7a61d654bcc2

SHA256
b73beeef62798eb986b4a3c5e41e327c63303061833002787d1efd8e67d81f01

SHA512
e6fbcd596d116df9b6c1cd9afc1af65af226b0f0e990c3ed6f4dded83f9f1dc73ef19e323fbc486aaa3cd612f9f4b5c5d3e05095b44a337f93dfb9bb77d976ac

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\Vertical Slip\is-VBUCT.tmp

Filesize
115KB

MD5
e107ca29ca57a3c35eca95aae65d818d

SHA1
d3fe317991a5c3d5598a9a51cf75de77befd2e10

SHA256
c0b41b8ab41e6ffce48c02d26d6783a8b1abf29fd04997c29819a122718493bf

SHA512
237db70bf58841d507e739a168f6bedce4c71bb8af1d7c073a21a102cbd0e9ccbaa79cebcff46c8cd2134e3f193f87853e1db8a5dae7782c2bd0f802b193a83d

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Stylize_VHS\Resources\VeryBadTracking\is-B34HF.tmp

Filesize
234KB

MD5
a84e4abb1a9c61b5546389e296610a06

SHA1
d1955b0e200ee730c6eba11b9462df7585cb10c0

SHA256
0b979a62f3d70c6462b79b8b1b298efa5c565b4e8e8232b112f2efc13ed8f702

SHA512
622b9d0f2b5d28c5a3d181445eb5a4f2f4d69771b79d32faa17064515069b46ec0a23cda09c7ccacbaccb4e9c88dbcebb9047811fb83ef2e642c54af779dd519

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Ecto\Resources\Color Presets\is-C21SH.tmp

Filesize
86B

MD5
83ab691bb9b964a8e758ff7df3d0062b

SHA1
e0c897e0551dc0a0bc8a9f952d5895dd3f13f65a

SHA256
a548fee16a0bce03d151e5b34b3327b158b0789a80b639137e87d207b1aa9c06

SHA512
82ff380bf924bf0be78621dcc8e50661e6e5f0a82fef72ad61e99ff6060eed5e3cece620aac71c182cfa6471a05a31b9db690ca22f6cd6ccfaae0db0263270af

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\Motion Only\is-5MSKD.tmp

Filesize
5KB

MD5
cf0719f2eb42fdb689f5a20382693e52

SHA1
57faff165f46b7d4e75cc63e81d49c3f25f60649

SHA256
bbceafe7c25dcf415bebbdf7774c59199936d02e9f053f5bdbb354a13850a12d

SHA512
dfb13a611106d58c4a456c2aa7a980e49828b1977745cd68009096729b05241317b18c0d336aea271aacd54f9146c4666ef24cca52a8401cfca0203f37777ca1

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\One Line\is-IGG9E.tmp

Filesize
3KB

MD5
313801c392cd56f2b68646b7f7c8fe0f

SHA1
9f79b3813f01306ee3188391f0a7d9c6029a190c

SHA256
56dcc59986ae7f2b5e468d26acdeaa5c79e75987284fdaad15abc022cf250f2c

SHA512
3674c4f230c8c90d52be6166bd7cfe885753c90dc6bf721cab1b56a369629f04a4780bde6f7aa504c1170a6f765e5a8df82ae633b71b4737d43068136e519678

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\Text Only\is-5JKBM.tmp

Filesize
3KB

MD5
eb241c3e852d4cef490eca1b5e833703

SHA1
d696427b4488cff740c7df3689ab5bd895165b9e

SHA256
757581c392d02dca158e7b85bc1e949aefb11edbee5f81a7dcd72251cf5ea54d

SHA512
4fca6152c793e711094a0af6ffd83137cde128940daf91657e5bbadb965ae52c09793963fa25dc5ab3c00ce3cfb899fbb54cafcd3befcdde065d0ac963d0d59b

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Text_Title_Motion\Resources\Presets\Two Line\is-BSG40.tmp

Filesize
5KB

MD5
26a65d3a4b34282ebd4790ae108f4340

SHA1
c5f5c22ddd43a0054345adbff603dc6303a4447a

SHA256
952f09472a8720dc9527c015f1cb2105debfe31b591afddddaea8becb0c5730b

SHA512
699cbc9cf119a16e9ac778abe3f8fd6d16d567e7485d4d19c8d334893f398ba61856801d83e041babe434d21325014244863a14dfe1695d8d9ba115e0446d020

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_Exposure_Blur\Resources\Presets\is-JRTM5.tmp

Filesize
202B

MD5
9a1489509aa44dd8cc9396d327dcc550

SHA1
838fff6fb1c2c395fc6d02863d87f4ea416b2a7d

SHA256
c1de612d1f772383e1afcfaaac58727d136e24e91ab1eae069208aab924a9116

SHA512
b021fde08eb9caca53561f5cf8fd066acaf0d227a3a2a4ac20372ac666c6123ee80c5859610d2c1c3a67744e2b6b2f31976019a6be0ecadf24e2527350869636

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\crashbeams\is-M3DAN.tmp

Filesize
35KB

MD5
82db91a6544de7fd962273162dfcacca

SHA1
2f6258399cc43c56ab5aa4485719edfa18d86331

SHA256
e8a211ed4e2961cddc7f4d76c6946211c1a0a05c167ef4b0d8a02668a37e0269

SHA512
5d8e06f1bb781b9af9a057c7cbc5de51d76b315b1ec03f3ce43f49c759cb3f835c51a1586a41dba9fa56f7d118496e23d8cded2d0f15eafa943e6d5c35808c3d

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\crashcircle\is-9TROM.tmp

Filesize
124KB

MD5
9139a3f07926e8ffb1afa9a9fe5b14df

SHA1
e4ad42959617fc36685b40ac5a157f5f41abd10f

SHA256
940f35987222cf6920d070052fcc7edc0b7b6fb123a31361990d9d5a62cd0b84

SHA512
7a7d946f2c2e5c9196595b485c97bc44c52694d253e29271df7db374cb0f7d021d7ae9cea2567209398f5b4fd4867d9f2879795f67022ad2c277410d72dc1f7d

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\crashsquare\is-S2RKP.tmp

Filesize
62KB

MD5
c109f355777a98009159f71f6438437c

SHA1
78c8650a7043c0ab5d426aff2741cd123c37d044

SHA256
e4374c6a188ffcddba4da2facddd8291b9f9daf631fea9812065876af695f1c8

SHA512
f4ee5931eb3041ce1ea633cc8381702c8aecec273b1c53eaf7c445e69a12d4693b2867a747a0c396337c1fd435227b93f5e5bd79cd5bfc95445cd1206ea0f6da

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\crashtriangle\is-B0179.tmp

Filesize
38KB

MD5
f07ab59a7aa3121bfd79c0f69bf9a545

SHA1
3e2a6cfb97bd0deed1153097c3ade4a235415fa8

SHA256
b8a8435f7c02e9b66c659caab33aeee69003f68cc514d29f0e6163b9b5b7dff5

SHA512
0ae689d3682cea5f5582b618198890aa4509b83d73e24c537a94b3de5a8dcfeb872ab7f126fcacd7562a6e923fc8e7d539eeb4d6db4303635b5bf4b81c4d4706

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_HalfLight\Resources\halflight\wipehorizontal\is-L4F04.tmp

Filesize
35KB

MD5
508cdd68efbd3c03b0c81bc0848bc8f7

SHA1
5078ad5e46126a59c11cae5a8f59020b745b5be8

SHA256
2dbf427aae820a716b3e289bc3c14e6ca35bb516f4a2a286ee09774e0f61da0c

SHA512
08ebd3835773bd19f5386219f047c231e73c25902c597c0979712c6d20a41f087d892c8a85b8fb8b6fc0408da5605305d6cd88d7b2cbf2e878808f2579e6e9fc

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-6R0TK.tmp

Filesize
200KB

MD5
d1b9e7eaa6426919593b3711f6292296

SHA1
9160cfd8f67d6668ab7b4e4207ced83bdb41ad5d

SHA256
2410044f1b989d3e225c1982828fc4cf6e3b03ca8e6d1077868b638d04c5300f

SHA512
4628c7c38fc224547ea9ed68027d1acfe8e5b2f91b85d14ec73a34cdc582334658c462aeb81c76243ab70c3238a60705957e06b113a046c5c75c808bdea11754

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-COLRB.tmp

Filesize
158KB

MD5
f04567b37a10e955e428453e3e492e52

SHA1
70f93949af854e7ab3642091f329db288008ab57

SHA256
4f028a15b4f40077b35eb1eff8f8c81bfcc0e6c6eeb4944bfd49d2001b16f91c

SHA512
69e0e93ee1ab6a9cf4e5c01ec10fd802f8df99947af78e117a474cece6a5f36efb5e5774df9b3825068e8aebd70affe32173ab20c8658a306f6c6e0cf13f341b

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-D9EGH.tmp

Filesize
167KB

MD5
4ae90028a903d13a7f323c5de83eae19

SHA1
69358d0fc8d9470f54bd6bf4567fe21c1c7db9a8

SHA256
fd5e411c6fce41811235c14b4d18b6fe1657535ce02e9229bc094d5b54ed1488

SHA512
a0f89d938a81dcf9832514df6ec9eab84d0b8dfa3285917886a89d18fa89ca3107b0874507b5cb2c6648011c99406b79e35f9a46ebee3f0636c9b5d6ff96ebcc

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-EN5H4.tmp

Filesize
187KB

MD5
148ca2b219f30ad2b0adfabc47ae870f

SHA1
66ad7706d33f1787e7e48e3bef0bc3ce051212d9

SHA256
c42d721c692c8134acfa1f27feda01da13c1afd54e6069b9ed00aabda85461f6

SHA512
2620c24ef5e71ab578223dced681728f3e404439011103c62423712999f774d8bbb76d0dce1fc5dd775dab57a20ae88ee68d00d94cda9ccde85f1250511554b2

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-MBBSM.tmp

Filesize
157KB

MD5
5d296cb57fdc496a069d03f8de092f4e

SHA1
a547ef680b2ec5d843489eef0dbfaf98f518d88e

SHA256
f4335325eb776a7ecaf55853a6497efbee8d47267c8d35e79475bd89198f2440

SHA512
24d101ff76c3cf58538756649cd44fd97a05c6c1f82518fdd604f8c5c51d1bdbdd2fc28bac709b3d8b81456002540eb143f09c7044c6b9aeb727d256965e7778

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crash\is-N14EQ.tmp

Filesize
179KB

MD5
9484d77dc1d2fa41372d4941cafa43a5

SHA1
283ff6186874b3c04c25e48dbea1d02e2fa97229

SHA256
801d688422d65d6716ffac014e49b78b49cbf74a822a19c9cfd145070a79d246

SHA512
83b494108d64aaab4850959e76939628519634922be9f2409786f67b1ddc390de9a83a8a956a9d51aff2f4f38453b861be42ac953baa28425fe0f597d60b21e1

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-5HTDS.tmp

Filesize
288KB

MD5
6dc2e082ea280c8e51d2a1b1b3c323ab

SHA1
1bc952642599fc18cfcbcc9551075e3b7167b985

SHA256
3a78fd0b0c3faac2830b80cbfc9e2d9d9f8714a4a0ec4db10e69295282fa1e3e

SHA512
fda1daf1be5509a1e111172e347e1d3e2621dcda6a9502d2718003ad1d9a0332f6b64cf677d3c9e80976ea8e08afc6b2d3827696532d1311b854e40b678bfc9c

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-8I1FN.tmp

Filesize
256KB

MD5
e190d0324cb389eb83bd36ea1fadc9b3

SHA1
765383b3412d850ba63394f925f64ae7fc269869

SHA256
dfff12151c82779a4f4fb861e105f5bb44bcf31e831e5f0558bde3bb2b2b7889

SHA512
8e93710e911720df220fc8e9257e4b65956ee5708efbc61d6a68abe69a29d7b1cbb5f49df1da48ca33ee15cd86b6e2e00b87089dc1b93a30e9f44c3e83c87d3a

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-9JJU2.tmp

Filesize
296KB

MD5
fb836a667cdb8ec568e96c11d2073bba

SHA1
db3a8c1c1471ba6fc97a248c856dfe97eb030e3d

SHA256
4997e5f04a6a27c18fdb2eee2ba0abc050db23975f27fabcc5b34f814a8a4f0b

SHA512
c561edc6c6740d499370af764744076a231a9c33eef52c831ab8675d31919946f55e391ccec9f2a691bef5e898c30c80574dcb4a9e4276884e53dcd3ab35367f

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-9VS6J.tmp

Filesize
291KB

MD5
56caa500391d0930cbcf4c0155f55902

SHA1
ffaf960061bbab8027f823bc3c828db9f8e54eee

SHA256
c8f5c0ac95bd0643fbb5f6dbd0246013689833d39e4365392e0d4ed7b6b9eb26

SHA512
4bef310c460f5297aa7a23f5c600b25d78ed0a63129f4116b820019ae77ab1dc5200f7d38cf2688a2e36dcf12c79a6fec2d673a11a0fe5846dbc21b159f2092f

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-EGSJR.tmp

Filesize
238KB

MD5
149d9a56789edff53d8ad523782ec909

SHA1
a8895285e2b6d0422fb6eb82b27449529b6a7f48

SHA256
53c344d57c7934e56269fa19130d71c1b1c140638b814f40b97f1976426fd841

SHA512
84fd8c4238fb6363bfd4672362093add384496f8c37ec9c59cd4b633fc181bf6cdae0de1f950d01ebbc6d24a8913ab04687a82855317f18eb61082dbbf74423b

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-J01IA.tmp

Filesize
284KB

MD5
ffb8c1a1fed830129e07c894886bcf64

SHA1
e144f7e1fca921dc7d4da97ab0b05df09851b9bd

SHA256
6b2af442969990c2f329c305044ce9fca2ef56edc4700d50a09f9df44dc92d12

SHA512
c7087de8d87d07a40adc2a1b81f1332c25051cdd25c5b8be7cc26c4daf3f522154824f71164afb49b37409569829ac552fa264e36d6d310f6adef294228e718e

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-L6D2S.tmp

Filesize
232KB

MD5
798c11f55805c3a86c6b42093c2b0910

SHA1
2e22be2153f5b3c5d2e4959bf24e9cd5e3ffc756

SHA256
277fa67091d97dc8755b1cb222fb0f0f673ffefee94fd1520b11d49f6fbb89d4

SHA512
0b4adc288d82308d2c22eca550e6d6b66f2f6a87ef9181a85e0791bfb5a85b083590ac388ca39402bb3b9f9a98d79279ae6ccf17a339e0386bf854e0576f1b25

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-O86FF.tmp

Filesize
300KB

MD5
3109e54490eaf6dcc9a2a6b35b2ffda2

SHA1
ab0d4dd47a25f2ed1b1e64eedca9289d40521aa2

SHA256
1cc230004c8f48e8921daa5b632dc1ecf2158e9e6d319f26c6ea7f368dd4b8c4

SHA512
f95eab30e1b5e3855635e975c0a99c94ac9fbce475e1e718cfc7e0a498a4ed9952c3335a38b324f76296b35248d1b787d536f787cba68364531fd506304e39be

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-TGPQ3.tmp

Filesize
250KB

MD5
085477cddae52cc856071a55d851a254

SHA1
d8484cf69401c301be5ae66507d0384db74332d5

SHA256
27aac8dc4a8cecb61059b18d26a598bf5f1df2ad14c884b661557c4e552f316f

SHA512
d94a49a478cd0d9223bd0588620074fbbddca1d4dd4d47d29ec1a690202bce5a878b88b81799f3ee126b0f310b475c2c4a1864fe7457fe176ff201cd716e195d

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\crashtriangle\is-VLEL0.tmp

Filesize
292KB

MD5
b9f2a8ebd237e6ee687b4396cb0def86

SHA1
4bf42c7ea41b23955afab7c0d60881a8d1f74221

SHA256
94d3a0de170ef687aff55e78ac96a8c3f067312177f04461983415ea76c6ba18

SHA512
bc6593624d9e92ce30600b46ff847c7ec34f351361c441edd10e0d19381d5f2587c3c8daee30941c07a374606d2b7d1e8446c019c715da37919892f650126756

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipebeam\is-9U2EG.tmp

Filesize
149KB

MD5
e6798931804e7ac6e1ccf56272487ee3

SHA1
29dd9e3c09a75cc49666886f6e150b10aaead013

SHA256
1810d652331db736810d68cfba05c1c80c0f6af7c0c5f64c1f6a234c110425cc

SHA512
73ff3370b5e4eac700718c3a44869e8a8b2006512116c239f525e1828f0ea5c5dcc79bcb8e94cc388835c6c80055203e75a4823b4fd21698c74dd94479acbffd

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipebeam\is-FJLH7.tmp

Filesize
140KB

MD5
cb595c3dbcf012d0ff7273a27b86df8e

SHA1
9c6f60a5cc945669d0ffeba2816ef5b4d1ec2b54

SHA256
234655bf87bf9b93fa8287c80f1d2798814015e76e0f77ca00b3e2886bcb6d8c

SHA512
ed536febb0eea69ff07416cac158f34555fdab35fe33a91ae4e0a4f49f6192ad7d77d08945c4c1fa33bf3dd1ada97deba208a92322d864b2de06a6ee1d0073c5

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipebeam\is-IAMDO.tmp

Filesize
146KB

MD5
a0973617719844d20572381b37214f64

SHA1
fb8ac0f63651e57e3b2eb425b11b9535eaa5204d

SHA256
35a130d947ae94d076a59f6d3cca23d69fc9de057d8d5f8fd95b733c8fdd5464

SHA512
2dfd7bdce5c60e658a2d1ccb5455c4b295f69ab6548a203f364ac513d88646369efcdbad0abdf4eeb6e4c9c235b0655023b3013f45f4b87ccdc04a890cc0d9fb

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-00967.tmp

Filesize
147KB

MD5
150d95cc3a0d63aa4c3e585949627d8f

SHA1
41f1ccb6af67ae188973058bdbd41a3e4ad4e996

SHA256
92b929dcfe0a2f6e5de2be05d9e3bac6193d7684ce175c79357bab1c5ed0e333

SHA512
6b140f6e12d8dd8f07f18674941453075b82679c7cce7a94492f2e21961f2bb3ed269c7e793d2ebb3ca021407643b1e939b8009f6ca4e0c7c839f05bdf483f81

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-5HLFI.tmp

Filesize
124KB

MD5
8c9b366dacf8c3efb88c809e1087bea1

SHA1
d9f3c1ba19d11a0225b8a9a477668edc9afafddb

SHA256
3f567eb3c710d6833e7dd389026505cee0ccdb3f339bb3c51e607e7b9fede278

SHA512
aac4870c3bf196ca9486fa54575664f7ea7a80210629e0f599bbc5df8d4d83ffa854f623d60ad1847a47ac52d9d3dee9dda09489bd75cd4551de377baea1e3d9

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-7OTSA.tmp

Filesize
155KB

MD5
2d3fbebb7b90ea9ac6add898bdd419d2

SHA1
fd1cf94ebaf559b86264a1f104cf3467b387324e

SHA256
582445d049a1ac02cae1e2efaa44b765e7c42ea26c384b543965113a0a2f308f

SHA512
ceba82dc87cb786b5b6701d3787033321b377d5c5799139ba133ac92e119614f3f2af399c1104af0678820718950960d084b0aae148d93fcc6ee061a709ac624

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-CINRG.tmp

Filesize
158KB

MD5
33eaf53a89d47d191dfddd01ae7fb0e1

SHA1
20c8c1a4157089b3a3924f7cfeaf9b576cc31ec1

SHA256
761825c2d2c9a92122a5212fb321124d1b3748f27c16902e47bb61149714d691

SHA512
fdbc8191f67dfa5dc8d176d9efd140ea63a9faba6bfcbbbf7ee5097c36c0f6d0dbc6500d78158064a7aea5bc3b6da74e1f64c6fa2fc599d512994d4c07135cab

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-J26D2.tmp

Filesize
106KB

MD5
f9aceeb7cc9546e719237220d1c42b7e

SHA1
24d44a7089e4fb41d4857e3e7cee3d720af93974

SHA256
cd8f994acbe2edf8c002af48420bfe59325c459373baa3d7daf7b07834b8a4e4

SHA512
fa35091684b5b9dfcadf577eba78d40cf635b47176451b2d401707706c8e1ccf16de3eb3c8e568a87fcedb1590ecfb8c5ce9a65138fb902aba954d54711f85f6

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipeshutter\is-VBAAL.tmp

Filesize
141KB

MD5
c03f4e665f77625aa90907c8e66d13b9

SHA1
e8ee77b90561a1c45cc4d8fbd715284408046406

SHA256
b628cef9e4da597683e8c1ebf8df576b9a4d8f9ad351f44231118fa5446916b5

SHA512
fb4d30ef05f54ceb1c1f4070f3f2bbb4216f3bfead822ce6d1c2deca3cf56ada08ccb05952ec42915cb4864e6e51638bceb7ff9ae32b469d90db10424542e649

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\light leaks\wipesparkle\is-LCA0U.tmp

Filesize
199KB

MD5
229d4f1b40f7686dd3ff927f19cf5994

SHA1
a11663109d82e13cb07a4d5d5cae2f199e02f6e5

SHA256
7ac82cae7c77372ed471f21398e69ae0e34bb43f0eebb07fa5974c00063f8968

SHA512
111b0f834cf6950c497e376a908d732645d5d56ed049868dc6978533753d37e0c2c89c45afd4180fdf1ee9f1500c7fac73af5e43c19067999dd040505a370362

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_RetroGrade_Transition\Resources\vignettes\is-BDP1N.tmp

Filesize
1.4MB

MD5
d606353bba183b79ccff990baaabd1a1

SHA1
314b94cde0923194898407c42c389953a7b42b90

SHA256
f4fd91369498efbc07fac155f5db83412221c8f30e42a208b380113dd1824439

SHA512
4b7b3a87dbd32262631fb0cc699caf3fdc1979308cba15c54315f4bcce511f268821a215709b4c927a79fd888f3b9c36a95f2ec13e2da480232ff17d93d1e205

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-04E7V.tmp

Filesize
220KB

MD5
0b721a33c2e4f90676398a62f1d8d947

SHA1
f1893c7edf4da1e4d4c591030670b659139207f0

SHA256
ae722177d679c383b7e13472f0e7d9ec2bed79c7a0e20f29a5d331bdd9f79ece

SHA512
768fa3b818045d15898af4f5f2707ef1138cd2fa263c0f4fbf50864e6f8258984b8884cfef89c88ff9a27cfb96ffa81bcc555a6eefed11e95622a8d5dfa7476c

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-23BSV.tmp

Filesize
223KB

MD5
2cc09dd9ad26d24dde591a6423ab6618

SHA1
8597cfa4f3d2a6de80558908a34e8f6aaa2167ee

SHA256
1ef6d2ed43277691ca866a9f0fe477dd1a46035964a8a66a39aac165ce76d2bc

SHA512
8eabf54bf50373b2877f3127a6caf7ad802a410352b06fdb14eea69f95c24be0149571b1f1a960c974f0d0afcc2a5561b0516b35828789f9f95ac58014ddd930

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-2H6MF.tmp

Filesize
222KB

MD5
b6caa41ef1da0d091767a8e47f6d2ee5

SHA1
9289671e7a82e6d8c0083dcbf0c76dc61d7ac889

SHA256
82aa9e144333ee4efc93a99b1d80c194c8af6c4a0becfabd9fff8e457d61ef53

SHA512
edf7902c5baeb556531ba75432be83330b533b7953241d5923e19d0d6875cfb2410c9e86617f7b4a49a38818a3fa2a5c11b682bd3a17f2190ac0a406f760dfff

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-2LM5D.tmp

Filesize
235KB

MD5
cbd422769748a3a496dfd1a50735509f

SHA1
357824d7f8fefd3c4d56120449ec72d6ce22ef53

SHA256
d5d480a007434a7375d47b2770b4c86622bf05025c704190303db460a0bc5aec

SHA512
ff9dc6439dd08abf3311258e5b77e2aaeb851fabbb9a9314fb9ddb7878b9b5fb56d901c1adc0432ba840a8b17e3b5d2f665497639414562060a51c5d0dcc3f96

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-4IPL4.tmp

Filesize
263KB

MD5
d1a7c4f554cc2969b171e575f31bbbc7

SHA1
b7a98515757bf052cf21ecc474573076d961d137

SHA256
670852786d1a9a27b639552b01e2f3d7d67ce0bc6571bb3235280a91e667d047

SHA512
cc0df9a30564fc9aefa91be66f6e5b681db4fc26f141d234e318fc8294fabee72e66f3e092a0178f47535fba081d1d3eb23574dec55c2c7f9f5b55776289b05a

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-7THDV.tmp

Filesize
224KB

MD5
e8ca2c5eeec1b7f8a6b59f5337ec589a

SHA1
71e9bc49ca093ab0794a06e0e9e37c739cddd1f3

SHA256
8b020a277c2a773179c932ea68b14acca2dc011ead096f3c12033db1906d4514

SHA512
4bc760b8799f856e157661e0422bbde6ee2bc615ac1e1e157980dd084a89c601233c803ddec9af3d1525980b80be54d4eb2ebe713aa649fd05da983dd495acb6

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-840J1.tmp

Filesize
237KB

MD5
5d437e6021f4d8f392cf3018eefc8922

SHA1
e91cb594de0c7bdf9f33784beea4fe644a228636

SHA256
cfa97da1ec0239e44fad03a36e317ca462f911862b653314da25dc5cfe1fd852

SHA512
893075471197099d635efb76ad26856600424206d7a755119adc139dffe333805110c62c41a0863b628487abcb2c1a37014338ea9b47a7fa9c50605a30cbe7f7

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-BC6M1.tmp

Filesize
191KB

MD5
c12e0543753fe0ab2f32117752ea9dae

SHA1
4f17d93af6df97a5e7bc2fb6515d12417275befc

SHA256
b83c4917bc0bdfcb739d8f1a227ec1e9f834bfb242128ceeeaffecf18009c184

SHA512
704a7542879f33205fa6ffce6da463664857f3f65781b107a9d1694a8b90627c7e253f6ab1145b8ca5fc2d2cd33a1de514d971779c25a6fd7fb04c02dd0eaf50

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-FQ9K3.tmp

Filesize
231KB

MD5
e75e0a3b56afa2c800595e395f6e34e4

SHA1
257ff1d43d9c5066a780cb43d6e762741dbec75b

SHA256
a6f933caba33de01e512430eed83c023cb04b4a6c4b0ec0e21ec9eb8cc055888

SHA512
f4e1dc4fabbdff4772c62de3a9a9e9838e9d9b6ea7ca117d53c51c48f468284156c21f8820ba2a51e0ea4875bedc8668a30d79b9bf101c75ed67a3344aebf699

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-FU2SS.tmp

Filesize
241KB

MD5
3ee7630291b2ef2268e86292e9e2eac9

SHA1
0f0b593422ee85b631cbc2a5f109a0f53c7463d3

SHA256
7e75fa2036b75590b32c7f353a84756ed5bc541a910fd118abe28c4126a53412

SHA512
f84f13370096630fa437b1a0b13483da849d4978fbc6e55dbfed8c21ebec0b5325cf4338c78804c7fde14a1217312ba2d923eee9c735b6b138c2ad276141a017

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-GDLVQ.tmp

Filesize
199KB

MD5
ec410f4e7ec95dfccc6817bde653e92b

SHA1
7bba51808341fefdc517d2af6f9f96df749f73bf

SHA256
126017183938c668a3703b411a7a9e9c473321e3faff8dac202306797ac25a50

SHA512
60cbea682a121bd3c71b8e1ef6dc2b7bf45bc6354ec8490e265945cd731cd8e98783c64729f88e6c70d76bc1de999da9aba77151b420e16f30eb74acb9af7240

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-GRTLA.tmp

Filesize
212KB

MD5
1295887ac789316ad78e06856b5cba77

SHA1
8514b632231be6554762c03ca254db023f8f3377

SHA256
b6215b00835fc2ddbe498a589c672f1bf85912b73b28edf57cbb61ecb99e4207

SHA512
6c2e985ae8b82bb726139d889e0697b4db0721e33fd329d0d64353214527ab7d238e33178571c353de00e00260401bab13ed076962f5a352b3883319a72ffcbd

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-KIVLL.tmp

Filesize
233KB

MD5
fd85d503412b16984a42e8f3437bb11c

SHA1
87cc0a184b75f7c03cd40a04df86a2702e27e078

SHA256
439aef5032dd289891b970bd5702fc538fa766abc32fca31d9e61521f22c28eb

SHA512
175fce521f178078955a4d136df853e8660ce80350dbf82d8fa9249e5000ffa203a206411d25633cf7404df152111a9347de43b235798190aefd11899967e974

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-LD1VJ.tmp

Filesize
229KB

MD5
51bdd22ed91516730ff4356bcb90d8cd

SHA1
fe8ebc2e10d0864c93a18c8eb049c6db81971006

SHA256
08d8c343583bc1c21c748b811dbbe7b66ce73eafcf898bf0d29151d7058cbdec

SHA512
0164946a4d23e651e3263e4fda1e9a41b217755cab49ab921f32f6edc8469ad92a2b1293d96a9f40e0f023ea91c2a37ae6bef0189d300f7d96bbe70ea293a7c0

Download Submit
C:\Program Files\Red Giant\RGFX\Plugins\Universe_Transitions_VHS_Transition\Resources\VeryBadTracking\is-NLFCG.tmp

Filesize
237KB

MD5
26df0c493d3a1dda626a2ccad2f71256

SHA1
8517feb73e6deea0b4f816d300bab9a2594448ed

SHA256
d50b3cc9fb530cf8c4c7dbc758f95ebbda4407c209653f757b5d2d8421937082

SHA512
9bbc8f7cbe99bfc70625b0631696797f9d1a6c2992d3ba6b262149ba245b438043fac6c16c817e316f6d5a29a1f227b59b0076fa3db3855ab2b8e1cdb3a73753

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\10-scale-bitmap-fonts.conf

Filesize
1KB

MD5
19fed10414ba0bcea055f4703d175fbc

SHA1
def927c2cd6e8cabfe3078c5357cfa618654df4f

SHA256
74b56fe3817fb2d6e5bd4b63b78458f09c26f49a0633b555b940580e70feae96

SHA512
4824275c7f64af9024f0a587a4636dea22de7909ed44fa721d0619fa36eabee02464c0a02dbc2dccbcc3e57b03ec74c1178b52deaad44e4771226685a27b6eb4

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\20-unhint-small-vera.conf

Filesize
1KB

MD5
465e4aa85401614e7dd258af9634fb73

SHA1
418baa7660657c15af1921ed1a9d2e041a2f1924

SHA256
a35f1f81bb4747eafc08b8132ec876cf044684b42cfee144673152c10454ef1d

SHA512
27287b9e2701c7bf4f694f71b4084963d57ad4415f92e64d3c408a8e1df3be676372d91c1fc5baf891cffa3dead4e9ce5a600af645bafa4ccbf5563ea0782b68

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\30-metric-aliases.conf

Filesize
11KB

MD5
7a3c6299063d5e951613ec39eabf8443

SHA1
a2f7b9dbc5a633bc1c1ba2da0db39b9eea85b6ca

SHA256
de44690d08097a518ac31cffa85655dc8e408fa88bf999e6f79bf52f16b71b94

SHA512
f13749ab5b5c1cbf0670295f404993dffa0cdd403b9cc9578cdebac5f15772fbaafab36c18b04b34518d557268eb9406fa0712a4930e26a04d2f3a31ce760873

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\30-urw-aliases.conf

Filesize
725B

MD5
20f657cc167bd69303e791ef73c834d4

SHA1
0019b039ffb28c6f8f9cabcd729a9b8a35065b6c

SHA256
b9acf05c86ed84ff8c15042f4ae594d3e9f517ac3156e84a281f28eba9842ced

SHA512
2c8c93e32770f1e4bbb67de5a5aa3709d6670d7ba8f0a90c346b5e7a46e283089ca29901f55e6ba9e50d23028b02dafa2ad65a501f19e090b68adeb8dab0b751

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\40-nonlatin.conf

Filesize
5KB

MD5
cdfd5a784eb7a05a9535e03c6cbc624e

SHA1
6b3565c5063e48043bcb494dcd80b84461fa7c6f

SHA256
757608f1d02f4b2542229dd2bad2f85019b8010c2cea8e3b51c687ecdbae4597

SHA512
4a7a49802dcfa686a06e5c1f3008f1febe635ffdc29c6b9ff9db0c95f35228c9bbce9f086b98e3a6e6e3d0012be59136141b74b1c348f5620f615785f01ebb7e

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\45-latin.conf

Filesize
4KB

MD5
a3d061c9ab2eb8aceb0f2790af215744

SHA1
04ea14084fcc3f63c0d47465132f287f63ce9083

SHA256
e19fc20123cd3533761c87726ad00a3113a997093d692e04d451ae8dcb433244

SHA512
0d8ce66135cc5406e258b8f346247d8a796ed3789f23360fe6f0a8efa6212ca50cf86881457fb724abd1cf579983353353b97f864833d680ceaedfff9f59cdab

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\49-sansserif.conf

Filesize
566B

MD5
2af29419e19f4efd5b23aae788df77f4

SHA1
be9fc58147615eda57a66ae45e061a16977f588f

SHA256
d620813d169a4ce95f8d1ed012271da6c32ccbb117e4a11a2d5a3437d5f2c807

SHA512
3df68c371763d6b6ccc891aaf917fdcaa0a087901742b7b3e21117921976440eebe574bb1d9fd310b1957d61dbf6dcd4954fad7389b0c88d444bc35988137426

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\50-user.conf

Filesize
688B

MD5
3a146ad251ebf5a309286c94763f33eb

SHA1
07c970734ae8ad57e3714cc1ffe9d02ce2d629d6

SHA256
913bb70766225e7f67396dd9fbf09a5bb30ca555c374655882e799fd776b08d0

SHA512
0746cf56754edd46da61211c2c7646c4690fb82570083ec003095538f302669630cdffb037e2ff463024e16ae389c033ad495a690d2f0512af31477d33ce8765

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\51-local.conf

Filesize
195B

MD5
94c2bf8b5ca3a4723c011ae95a777c21

SHA1
f9fae47abaf60a00a85ad85398d55f12c35c7893

SHA256
50768af1574929d8af3ad9b216715ac1afcc4588a32fb334b4b934c40baff814

SHA512
b4a6cf19013c136220f9bd9564b6848d0a6a4a291132c88eb0f7516fa034e204a5d09b42a45a691a4f9e421ad27f58e5151fd8107d0e4d5ffcd084f951244dff

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\60-latin.conf

Filesize
1KB

MD5
86b1061959dad8e296db82b9e2c19952

SHA1
58d6461e204e6f892c9734a15f4227556d783184

SHA256
dab0749f73625b4cef00c4966d2dfd4cfce5fa9a929c07b9cf1e807314680827

SHA512
fa44f65d53e57c26e5259616335a27a39539c8495f7756d3b4723a0ec2c9d1574719066d9bd297b5a0ee47498a36c98a0ac7aa83266675c35875c6b7b5e24f53

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\65-fonts-persian.conf

Filesize
10KB

MD5
2d79533728003aea85a40a6f3c776745

SHA1
502a1d31f36fc5e28e716f0cb5ed7752fb527a07

SHA256
5291eae913264d70d92b02f8c35ce999dcf515046ddc926c5365b05fc17f1229

SHA512
b0da2d35400f90315e7ae29ee4406ae2d734d89a7dbfbbd309c9c6d934f407e0736a92c96abbe9a29a090c0d44ae0acb32ab70d30f89bc924bec604cbc8b8fac

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\65-nonlatin.conf

Filesize
7KB

MD5
76feb004a4f070762a42c9633d676215

SHA1
75f76375aa08073bd221f10b7415f12d2c6e8e19

SHA256
6fe3585e34297391009c2518b06e37ab90a8715e6991ad3effc47ba4df4da22b

SHA512
c2bdf41052d81595a211b36efaaa46227c9559a53bc77b26bb5d3efb862171b3cc149ee06756342b8d15fc7707771b4475297ad7fe284abe7a2423b9af3689ad

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\69-unifont.conf

Filesize
700B

MD5
972bf7c88690e5a7790453830111e534

SHA1
6a70104a43a39e118c3192819f0fbbbc5f8ec20f

SHA256
5d49c5b3c372cdce076a3f634460d1ba98d2acec1338b16106cc8448401128e8

SHA512
3f23b3a797b7ee814008ff09e963a794e55216e5a56a0379d1546e09d69da878c2d361ba1cf3c5521a3b70f67abdb753276431b866f3db19fda6bc3b5ecb8210

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\80-delicious.conf

Filesize
441B

MD5
7b1f881357b9401f1318e204d25de8b1

SHA1
c63bc6c9641d45916b54addbbe3eb454a9f924c2

SHA256
911c0320ce00939a4f9fddae56afb03cbfb3b0185458ee5b677ce03f305cdb3c

SHA512
e9daa5e44ac7da003f9e8a237e196fc8afe59fb48fd3fc31e4887b8e021023ec2250e73bb6ce1e28939d362429f303f39c18fbd54409c255e1a7477e91d8c935

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\conf.d\90-synthetic.conf

Filesize
1KB

MD5
711984c7c96035f4a965762531f2271a

SHA1
695e54f9dc1c254882a22a688c3833b4464dd817

SHA256
d11df61bffbf0fabff7199f34e9f47dda4fc73b4d4efbe2857f3700a7a5f043b

SHA512
0b27ec3025ce912a9d9ec3b2dbbb82eb7b12fd699ef0632bde5eda0fdf5a2f63a29369e0bc582049dcadb6e3fba87a893870eeccb4a3dd2e0a31bc86c44d024c

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\fc-cache.exe

Filesize
11KB

MD5
e68026449c6a69d4961fa1a9ce315d38

SHA1
d65e9b921caf5fdd0e4828bf6efb2ac32590e091

SHA256
da1504a8ba6e4ac64e337323cd18eb79466bab7dd2d1c9f6616321c941a1ceb7

SHA512
beb96996b0d047b452d3f3d096b521782d0e18ca712c0c73f071151d4c9eb6eae7bd09561e208d27a64521d88ec7583f594a64aa906d89937dd02181fb9d751d

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\fonts.conf

Filesize
5KB

MD5
d1b52aff33d87933ae7a486f9a5c3f27

SHA1
be4ec8f6ed295cd1ffee4b4e23352b17e23f3743

SHA256
c8e41e2b764952826120a93e13363f635845e40a42c3b31e4d359a4247b0878f

SHA512
1a78235591bb0d6101692715f322f3cc8b887afff5e7667afb729232b4515d4a3d50150debb58104c6e0c68a3d97d9af17d2452d11b11612b6ed45adb083f07d

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libbz2.dll

Filesize
341KB

MD5
313e1da8c509b7febfe96ea5479af3b6

SHA1
8dd32b3c2c1d461d91f26876cb0a09af54a8f56f

SHA256
3c5f99f349409b5f78e71f4d17994c4824e83a4f66e0f0aa726c723b827ceee2

SHA512
ae5afced383bf1911c5605b578e765d0ecf3481895194230e43a91fdd7e49d87e6523bc9a7af2e03a1abfafc9d78685adabb3aef3400b60cd6bad805dfffcb44

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libexpat-1.dll

Filesize
663KB

MD5
73daa97834c690cb47bdf7d6d584e153

SHA1
b4f3bd9ed8e072f12ab118bfe2e00a027a487a7a

SHA256
ea9ba4c2c8c6e66b77b511b6a293de5c13399dbb4750e1a31496b64ba5d97d9a

SHA512
eeabe42a79f7027bf192a5555ef4576b3431a7a10673e5be936437ee0ab7c5b446d2cef5c7e0d7b63602be670461c030b35271f9406edb1c2f99ea2acc4b1e6f

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libfontconfig-1.dll

Filesize
238KB

MD5
dca8d01a2aa7fa4031a16a394e158fd5

SHA1
d1f75bcd2f08a93089552dcf26f8e6eeceaafacc

SHA256
367b1134c19be4297685e6a9ca7e1fa3c0cf1af3d0b1e060fea290a40ba2b729

SHA512
886842c20b3fc4a41dae0d3b547a896ae79580d8c041a2b3fd5661b7b005c6d47c17c67313ad778f2cd3c0fc3974b1b0645de6159c4949d2019d0b9d1e3e6064

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libfreetype-6.dll

Filesize
3.4MB

MD5
72be071fdcdd6c7da279388b048a5316

SHA1
83a3dceea815fe542035ffce8d48e93b259098a4

SHA256
0cd07dc0272143add9925ef250408c51b1af525be22daf196d13b9c5457cd5b9

SHA512
6c4fa217c56d48193e89fd8fcff080d37a58378e4251fe3bdbcaa1fb5f557b9e216abdc060b220fed045dcfd93a83b9f8ec01e125e438140d0ebdda82864a89f

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libpng16-16.dll

Filesize
1.1MB

MD5
4d6c2041b76828cf6f781376000e15cd

SHA1
196d83c66cb50ff883d7d633263929279631852a

SHA256
1600f590aa52e8a27dc97d26f13bf0b6843fa6c3ffd9e083d9f28465434d25eb

SHA512
cedc2c56da55a6acb9eaa072543eb59a3a8f86892a889ab202009bb3bc3b4ae5b8e5b71d5b945c43882722e21297368c63671fe4ab2793bfc17fc04cf00b678a

Download Submit
C:\ProgramData\Red Giant\Universe\Libraries\libz.dll

Filesize
93KB

MD5
a5db4546d2860ea085559d6998f50479

SHA1
173ad3046caa45b4e7b55c2016071303ccdf0fd5

SHA256
2e3b6d4b2df39ad6bf63865fbe212edfe6f7948b107acc8332f0d8f5db3dc94a

SHA512
65d2d58e2bc42ca3bec4502ebbafa769ab2500de13bb62fe2c3e5daaad984226c479defea6c657121c6932e1756fab3ebafb848ec651fb91804961c26f46fa35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
3b0ca6d97340606586c7f67d75eb44c1

SHA1
8d0039f79bc0cca2dea64f6ecc6bbfed3b3287ce

SHA256
21681f47d8887eddacc25a2382985d9c75bd575d3cabda8b907ed4b2514eb3c3

SHA512
15b5b02cd39bca9f19a2bee21f05a037dbaac6e79ea17b60540ba6829fe83f5409267405cb49a5c2fd2bd99090e9d4081c7b0dcd048aef83bf2c7bd69e6b32cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
13b65d3b03789b779db0f1f28c93b81a

SHA1
b00eb872d89794a749292c2e5471027ab8d124d6

SHA256
b76f0ee399e49890420c5c03cb935dc11db2796efcba9c225e3b26455f62d039

SHA512
52cfc1290e9cebe97347d18e09f7069105a60de74de762b022ef4718c7d95c45815293eaf3c104985b3a8c33d649734aab8cd86bee00f5c0f7e58d3f6edf207f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
ec4190e5d93ac3723eec94063d5b6a91

SHA1
156e789f640d66ef3e26de9b1523edc2433715b7

SHA256
647b6b9e6bfa8e53ca0500d5aaad7055fc0f95ba6be40a35cc92ce4da15713f6

SHA512
4fe1bedcb06a3a2efff1bd7d933bd1e69cea3e8bc038f0d2d4653ffe1e25ca002e41d74b77f413541aaf3193dad36cce60fc397166e59529df15c9a84425341e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
1ffa2e609ef231e46f089b9866f01ea6

SHA1
9ab743cd6f19249a8ecd30d71103e63353621772

SHA256
555879e0e90145e8cd289a227c3240c3b0e8e898f7138ba8026a763e8e3aa01b

SHA512
ec38feb544463c90e319057e1da07d5304fb579730c4260f743112c10d0bbbbc71ef9389186d0e9180de0a92ebeb4ff52a36ea6e56687f97e6f1182d0be48bd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
99848c7a3b5565cfd9cb1b6e100e5db3

SHA1
bcb9c591739abf0ada5c36e398bd55eefb3e0b71

SHA256
f351291e75e146001ccc17216f8a05dafa24b7a6dc27ed76122bbf412ea66589

SHA512
443565d9486ec4135a5fb6273b3199bbe7be120356669b6221a83987287d0b3bfcb920141da686c68571ef1643667d37a61841ff395c0d39822945d0b58502e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2758eef41549c19d3cf5160eda2483b3

SHA1
9c21e78734b9bbebddf4311dce6daec8a46ff9ad

SHA256
8fc12f2482d69b1480b379a1005b5793e2898d676349437b68d72cc15ed870eb

SHA512
dc9bc65991e642b6f8668412e67b563b19575979b48502212bb52a1dd6b5f9919b4b720a00dd3226cc238c58893eb97245ddae8c8b3fcbb762114c6f8d648c60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fe4a217be93b00c8bb317a1d81dd8b71

SHA1
840d71c525c8b08d0beacfec856def9ad321e806

SHA256
f8ae222f78588c38140f0e3fca15fe13ed071caf6c96d1e489349215279bfa2a

SHA512
b44f3fbd1736d94ee82bab7b2ea156c242c7d8c36b69b0deedfd865d235613251c9ca8366ecf13e9dc8ec7884e94c06820a6d2938f97c9f78e59f7217643a0b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8dced6851f23d6c7614bb3e20dc1068f

SHA1
b24efbd0befef75dc3bdf40e778c59232aa323c3

SHA256
8c1ffff425c6c96e9aff5968752b7e9d45467b932f77f47b4709932ff1295527

SHA512
2a822c58e3190e38ea2a382261a3023557ab3bc5095fdf278bd19ba1ff0088694db52399a41cd1ca7cebe316430ac70854a7a0a1a5f7d61872ebbcc9de74f69c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
be5176344e5354afb65f2b718b8d61b7

SHA1
70fe339e73ce7f4b63d0ab4b17823de7f0b2b77b

SHA256
dec01548b8ad584b4ce8a1564a38537e03b533f6a352999970fe59db1f8c12f6

SHA512
8bb4c4e6e6460a9d19d6441d224f3b73b701d859449be2d86d1628f30b0993d19745703ddb55b7f286f3f0b90b9548bf7830c514f82c3f5dfcb2aa398d5c8cf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3321dd77c698228be45366b77802ccf6

SHA1
ec4915d5bf349d86aeebc94694f24986d102fcb0

SHA256
de2c5f54c75b96388fca41bbf38cb95bdb2ca9f3a89d474510af5069b8214068

SHA512
06318dc8729621d6f4087088e618660facc2bc663bb0b879d121ce13441d12676a68f8e588ab42839c7559aa75a5a394964157e338f0322236f8f8b1d84685d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
600a80bca8abcfd159788e1e39188b89

SHA1
d598c8521649f19e7e6b76e51cb93ae85245d136

SHA256
6db81aed396ee76733a4b69d20a57e6e29ffb762c931e48e8e01e965a62aa64f

SHA512
7791ce06a70448ea69f146b0dcfb861b4010d82eace8f8eab91f9fbc80fff68371a0b029bbbc295dedd9d4900cad090e58329a53e239cfc4fa7ebc502003fb2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
66646a4db80150eea0d84fab005b6377

SHA1
2a6777526eedb29b2348794afefa93b1ac6d5818

SHA256
e75989dabc5227d895c619eec1e2c9072e4cae67db320ba1ba3ca55258877f3d

SHA512
0bb03ccfacae7d6df61d4014b6e5e959440dd1e7e928c0d1977a2284eadd12df2ed2ac3ba7e8369494e8e8378661f0b98626e2672ae23f0a2c1fe80e0f6b0727

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-27I3S.tmp\RedGiant.Universe.v2.2.2.CE.tmp

Filesize
1.2MB

MD5
07599b9f2894ebd23d466450b47c1fe5

SHA1
19583969c025f53c0b8236f893e06df39c596c42

SHA256
87a8a986376d73c71987e18efad14451e14b463ac0e604bacd84eb0597223a3b

SHA512
3dc1c24b226c40ccb05e464e033947d32ecd289e14628930fc52d6306df60be1f4518e8cccf19f5f470c27e7a5e43c98fb57b22af91dd6f41f8ba6aaf38a91aa

Download Submit
memory/2216-11587-0x0000000068B40000-0x0000000068C4D000-memory.dmp

Filesize
1.1MB

Download
memory/2216-11586-0x000000006B400000-0x000000006B459000-memory.dmp

Filesize
356KB

Download
memory/2216-11577-0x000000006E8C0000-0x000000006E8E0000-memory.dmp

Filesize
128KB

Download
memory/2216-11585-0x000000006F4C0000-0x000000006F81A000-memory.dmp

Filesize
3.4MB

Download
memory/2216-11584-0x0000000068F40000-0x0000000068FE7000-memory.dmp

Filesize
668KB

Download
memory/2216-11588-0x000000006E8C0000-0x000000006E8E0000-memory.dmp

Filesize
128KB

Download
memory/2216-11574-0x000000006F4C0000-0x000000006F81A000-memory.dmp

Filesize
3.4MB

Download
memory/2216-11575-0x000000006B400000-0x000000006B459000-memory.dmp

Filesize
356KB

Download
memory/2216-11576-0x0000000068B40000-0x0000000068C4D000-memory.dmp

Filesize
1.1MB

Download
memory/2216-11573-0x0000000068F40000-0x0000000068FE7000-memory.dmp

Filesize
668KB

Download
memory/3992-260-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/3992-279-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/3992-11593-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/5568-2280-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-1412-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-530-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-11570-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-4548-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-8916-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-6816-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/5568-11592-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download