Malware Analysis Report

2024-11-16 13:07

Sample ID 241103-pa16bstcrf
Target https://paste.fo/9253e43132b4
Tags
defense_evasion discovery execution persistence privilege_escalation pyinstaller spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://paste.fo/9253e43132b4 was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery execution persistence privilege_escalation pyinstaller spyware stealer

Downloads MZ/PE file

Command and Scripting Interpreter: PowerShell

Loads dropped DLL

Checks computer location settings

Uses the VBS compiler for execution

Executes dropped EXE

Reads user/profile data of web browsers

Event Triggered Execution: Component Object Model Hijacking

Drops startup file

Drops desktop.ini file(s)

Legitimate hosting services abused for malware hosting/C2

Adds Run key to start application

Checks installed software on the system

Suspicious use of SetThreadContext

Drops file in Program Files directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Windows directory

Enumerates physical storage devices

Browser Information Discovery

Program crash

Detects Pyinstaller

System Location Discovery: System Language Discovery

Checks processor information in registry

Modifies registry class

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Uses Volume Shadow Copy service COM API

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: EnumeratesProcesses

Uses Volume Shadow Copy WMI provider

Suspicious use of AdjustPrivilegeToken

Uses Task Scheduler COM API

NTFS ADS

Suspicious use of SetWindowsHookEx

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-03 12:08

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-03 12:08

Reported

2024-11-03 12:26

Platform

win10ltsc2021-20241023-en

Max time kernel

611s

Max time network

1046s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://paste.fo/9253e43132b4

Signatures

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Windows\IMF\Windows Services.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Windows\IMF\Runtime Explorer.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Bitcoin Brute Checker 3.1.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\MultiMiner.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe N/A

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Startup.lnk C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\IMF\Secure System Shell.exe N/A
N/A N/A C:\Windows\IMF\Runtime Explorer.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\dllsys.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\eowp.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Bitcoin Brute Checker 3.1.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\bchainHost.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\MultiMiner.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Miner.Win.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe N/A

Reads user/profile data of web browsers

spyware stealer

Uses the VBS compiler for execution

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Runtime Explorer = "C:\\Windows\\IMF\\\\Windows Services.exe" C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Runtime Explorer = "\"C:\\Users\\Admin\\AppData\\Roaming\\Runtime Explorer.exe\"" C:\Windows\IMF\Runtime Explorer.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\BTCspinner L4x Bot FINAL\Virus Total\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\LOGS Crypto Checker by REBORN - V2\web\fonts\Inter\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\LOGS Crypto Checker by REBORN - V2\web\fonts\Inter\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Blog Bot 1.0\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Blog Bot 1.0\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\BTCspinner L4x Bot FINAL\Virus Total\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Virus Total\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Apex 9.1 - Auto Spreader\Desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Apex 9.1 - Auto Spreader\Desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Virus Total\desktop.ini C:\Program Files\7-Zip\7zFM.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\NinjaGram\is-3S3EA.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\is-5DRG6.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\is-JB4RQ.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\fr.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lt.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File created C:\Program Files (x86)\NinjaGram\unins000.msg C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files (x86)\NinjaGram\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File created C:\Program Files (x86)\NinjaGram\is-IB534.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\az.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files (x86)\NinjaGram\eowp.exe C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\de.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files (x86)\NinjaGram\Gibraltar.Agent.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files (x86)\NinjaGram\bcTrialVersion.NET.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files (x86)\NinjaGram\Nevron.Presentation.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files (x86)\NinjaGram\HtmlAgilityPack.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\is-J6P1G.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\co.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\readme.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files (x86)\NinjaGram\NinjaGram.exe C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\is-UCFQE.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File created C:\Program Files (x86)\NinjaGram\is-3O45M.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uk.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File created C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\adec1c82-7e51-4281-814a-e9c9d44d6c73.tmp C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20241103120940.pma C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe N/A
File created C:\Program Files (x86)\NinjaGram\is-D39UL.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\fy.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files (x86)\NinjaGram\MySql.Data.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files (x86)\NinjaGram\EO.WebEngine.dll C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\ba.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File created C:\Program Files (x86)\NinjaGram\is-3RH60.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\ru.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sv.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\License.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File created C:\Program Files (x86)\NinjaGram\is-RM018.tmp C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\yo.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt C:\Users\Admin\Downloads\7z2408-x64.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\IMF\Runtime Explorer.exe C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File created C:\Windows\IMF\Windows Services.exe.tmp C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File opened for modification C:\Windows\IMF\Windows Services.exe C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File created C:\Windows\IMF\Secure System Shell.exe.tmp C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File opened for modification C:\Windows\IMF\Secure System Shell.exe C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File created C:\Windows\IMF\LICENCE.zip C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File created C:\Windows\IMF\LICENCE.dat C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
File created C:\Windows\IMF\Runtime Explorer.exe.tmp C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\7z2408-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Browser Information Discovery

discovery

Detects Pyinstaller

pyinstaller
Description Indicator Process Target
N/A N/A N/A N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\IMF\Windows Services.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\IMF\Secure System Shell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\dllsys.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Bitcoin Brute Checker 3.1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\bchainHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\MultiMiner.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\IMF\Runtime Explorer.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation\ = "3Du+G8mlrvuFHN3YsyUOeKZeks6RaeZBDGYV7H0pyWJuXV8S8CWNBzbsD1AZSJ0ImoYHMqI4hDlNpNloS0IfaL6ojyqDjjhPzuzbu7G3VQSGDqPyTgZNdDWbqEpXZ+25WlcIGoKjZtD8MSSGJL4/7HNZNtJuEocZTfMT/bln/ZC0uhkoLpgJOA8lHWvx+4O1Wg2hvm364fqJ7Dn8mpAI8KddgL2iXrklpGszvQFB9PyVpn9yGccf7o03dKHY9kIkDhPAngN3QTqtO85vHzfQzPokS0bLwUwppu3MVSp5Tu4=" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000} C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb} C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb} C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation\ = "3Du+G8mlrvuFHN3YsyUOeKZeks6RaeZBDGYV7H0pyWJuXV8S8CWNBzbsD1AZSJ0ImoYHMqI4hDlNpNloS0IfaL6ojyqDjjhPzuzbu7G3VQSGDqPyTgZNdDWbqEpXZ+25WlcIGoKjZtD8MSSGJL4/7HNZNtJuEocZTfMT/bln/ZC0uhkoLpgJOA8lHWvx+4O1Wg2hvm364fqJ7Dn8mpAI8KddgL2iXrklpGszvQFB9PyVpn9yGccf7o03dKHY9kIkDhPAngN3QTqtO85vHzfQzPokS0bLwUwppu3MVSp5Tu4=" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Control\Control1 = "Ez\u0094¢zw¡z\u009dzzw\u0091\u0092\u0081\u0093\u009bw\u008c\u0082\u0082~¢w~\u009c\u0081\u009d\u008f\u0098¢\u0080\u009avz}w{{w|z|~\u0085" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\InProcServer32\ = "C:\\Windows\\SysWow64\\kernel32.dll" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Control C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation\ = "3Du+G8mlrvuFHN3YsyUOeKZeks6RaeZBDGYV7H0pyWJuXV8S8CWNBzbsD1AZSJ0ImoYHMqI4hDlNpNloS0IfaL6ojyqDjjhPzuzbu7G3VQSGDqPyTgZNdDWbqEpXZ+25WlcIGoKjZtD8MSSGJL4/7HNZNtJuEocZTfMT/bln/ZC0uhkoLpgJOA8lHWvx+4O1Wg2hvm364fqJ7Dn8mpAI8KddgL2iXrklpGszvQFB9PyVpn9yGccf7o03dKHY9kIkDhPAngN3QTqtO85vHzfQzPokS0bLwUwppu3MVSp5Tu4=" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\CLSID C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb} C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip32.dll" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}" C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\InProcServer32 C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb} C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation\ = "3Du+G8mlrvuFHN3YsyUOeKZeks6RaeZBDGYV7H0pyWJuXV8S8CWNBzbsD1AZSJ0ImoYHMqI4hDlNpNloS0IfaL6ojyqDjjhPzuzbu7G3VQSGDqPyTgZNdDWbqEpXZ+25WlcIGoKjZtD8MSSGJL4/7HNZNtJuEocZTfMT/bln/ZC0uhkoLpgJOA8lHWvx+4O1Wg2hvm364fqJ7Dn8mpAI8KddgL2iXrklpGszvQFB9PyVpn9yGccf7o03dKHY9kIkDhPAngN3QTqtO85vHzfQzPokS0bLwUwppu3MVSp5Tu4=" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-584106483-899802418-1877852863-1000\{DB7024A5-189A-4420-89CA-87224FC8119C} C:\Program Files (x86)\NinjaGram\eowp.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Insertable C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-584106483-899802418-1877852863-1000_Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Insertable\ = "0304405357" C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{6552ced9-6f88-48d6-a9eb-b4bb36108adb}\Elevation C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\7z2408-x64.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\IMF\Windows Services.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\IMF\Secure System Shell.exe N/A
N/A N/A C:\Windows\IMF\Secure System Shell.exe N/A
N/A N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
N/A N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\7z2408-x64.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\IMF\Windows Services.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\IMF\Secure System Shell.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\NinjaGram\NinjaGram.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1340 wrote to memory of 1276 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 1276 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 556 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3384 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3384 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1340 wrote to memory of 3388 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://paste.fo/9253e43132b4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffecb3d46f8,0x7ffecb3d4708,0x7ffecb3d4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1940 -parentBuildID 20240401114208 -prefsHandle 1868 -prefMapHandle 1864 -prefsLen 23681 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {16cb23a2-6859-4d97-9c05-9e2ce2f28302} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2348 -parentBuildID 20240401114208 -prefsHandle 2340 -prefMapHandle 2328 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {171c3a2d-9ea2-4199-8a01-fcbfc6fcadf6} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3204 -childID 1 -isForBrowser -prefsHandle 3196 -prefMapHandle 3192 -prefsLen 23858 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {efa4ec5b-ac21-4d03-86a1-bc213a238788} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3972 -childID 2 -isForBrowser -prefsHandle 3984 -prefMapHandle 3980 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {da790915-1301-402b-a05a-ac104dda264f} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4612 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4804 -prefMapHandle 4788 -prefsLen 29198 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab73e880-bb51-49dc-b65e-a1ad605d8206} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5296 -childID 3 -isForBrowser -prefsHandle 5288 -prefMapHandle 5284 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1be3e63-4bde-4e5c-af54-ed8cb98ccf52} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5440 -childID 4 -isForBrowser -prefsHandle 4848 -prefMapHandle 4812 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c31e95ab-859e-4d6a-9f1a-f9d41e20ad53} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5296 -childID 5 -isForBrowser -prefsHandle 5552 -prefMapHandle 5556 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {51a6fc20-f89d-447d-8e10-2067629888ad} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5960 -childID 6 -isForBrowser -prefsHandle 5952 -prefMapHandle 5948 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {970c3a97-9f9e-4a91-833d-b9ecfcafef11} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6176 -childID 7 -isForBrowser -prefsHandle 4308 -prefMapHandle 4416 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1224 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f6133a40-150e-4306-832b-4f587ff14437} 4692 "\\.\pipe\gecko-crash-server-pipe.4692" tab

C:\Users\Admin\Downloads\7z2408-x64.exe

"C:\Users\Admin\Downloads\7z2408-x64.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2328 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7572 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8208 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8208 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff6aab25460,0x7ff6aab25470,0x7ff6aab25480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7800 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4928 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6532 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Bots_-_Traffic_-_Automatic_Tools.rar"

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe"

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\Launcher.exe"

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" add-mppreference -exclusionpath C:\Windows\IMF\

C:\Windows\IMF\Windows Services.exe

"C:\Windows\IMF\Windows Services.exe" {Arguments If Needed}

C:\Windows\IMF\Secure System Shell.exe

"C:\Windows\IMF\Secure System Shell.exe"

C:\Windows\IMF\Runtime Explorer.exe

"C:\Windows\IMF\Runtime Explorer.exe"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" add-mppreference -exclusionpath C:\Users\Admin\AppData\Roaming\

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe"

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\Launcher.exe"

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\dllsys.exe

"C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\dllsys.exe"

C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp

"C:\Users\Admin\AppData\Local\Temp\is-S3KHL.tmp\dllsys.tmp" /SL5="$803D0,58215516,58368,C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\dllsys.exe"

C:\Program Files (x86)\NinjaGram\NinjaGram.exe

"C:\Program Files (x86)\NinjaGram\NinjaGram.exe"

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --eoim --eo_init_data=eo.ipc.temp.7020.1.2

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --enable-speech-input --auto-scan-plugin --lang=en-US --enable-media-stream --no-sandbox --eo_init_data=eo.ipc.temp.7020.1.5

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --type=renderer --no-sandbox --service-pipe-token=43DE9978B2BA8773B099AB5C26FF9A5A --lang=en-US --lang=en-US --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --log-severity=disable --enable-speech-input --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --enable-gpu-async-worker-context --service-request-channel-token=43DE9978B2BA8773B099AB5C26FF9A5A --renderer-client-id=2 --mojo-platform-channel-handle=2124 /prefetch:1 --eo_init_data=eo.temp.5520.1

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --type=renderer --no-sandbox --service-pipe-token=03E64E5FBD20A66193B9D336D8EDC05A --lang=en-US --lang=en-US --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --log-severity=disable --enable-speech-input --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --enable-gpu-async-worker-context --service-request-channel-token=03E64E5FBD20A66193B9D336D8EDC05A --renderer-client-id=3 --mojo-platform-channel-handle=2160 /prefetch:1 --eo_init_data=eo.temp.5520.3

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --type=renderer --no-sandbox --service-pipe-token=4DD8F0B56AF08962EEB91A29AF05DF94 --lang=en-US --lang=en-US --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --log-severity=disable --enable-speech-input --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --disable-gpu-compositing --enable-gpu-async-worker-context --service-request-channel-token=4DD8F0B56AF08962EEB91A29AF05DF94 --renderer-client-id=4 --mojo-platform-channel-handle=2504 /prefetch:1 --eo_init_data=eo.temp.5520.5

C:\Program Files (x86)\NinjaGram\eowp.exe

"C:\Program Files (x86)\NinjaGram\eowp.exe" --type=gpu-process --no-sandbox --lang=en-US --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --log-severity=disable --use-gl=swiftshader-webgl --disable-accelerated-video-decode --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --lang=en-US --log-file="C:\Users\Admin\AppData\Local\Temp\debug.log" --log-severity=disable --service-request-channel-token=CC7E46343D400234E8F76348E46BBB70 --mojo-platform-channel-handle=2388 /prefetch:2 --eo_init_data=eo.temp.5520.7

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Crypto_Bots_-_Utilities_-_Btc_TOOLS (1).rar"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Bitcoin Brute Checker 3.1.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\Bitcoin Brute Checker 3.1.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\bchainHost.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\dllsys\bchainHost.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1740 -ip 1740

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1740 -s 9036

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\MultiMiner.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\MultiMiner.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Miner.Win.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\MultiMiner\Node\Miner.Win.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logff.txt

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logmail.txt

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logff.txt

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logmail.txt

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\CryptoTrader BOT.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Windows\helppane.exe

C:\Windows\helppane.exe -Embedding

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\sysBOT.exe"

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logff.txt

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe" /stext "C:\Users\Admin\AppData\Local\Temp\logmail.txt

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\Haasbot 3.1.1.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\Haasbot 3.1.1.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Zyersys.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Zyersys.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\Haasbot 3.1.1.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\Haasbot 3.1.1.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Zyersys.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\Zyersys.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\Zenbot 4.1.4.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\Zenbot 4.1.4.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\commands\Launcher.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\commands\Launcher.exe"

C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\commands\sys.exe

"C:\Users\Admin\Desktop\Crypto Bots - Utilities - Btc TOOLS\Zenbot 4.1.4 Cracked\commands\sys.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6916 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Generators_PACK.rar"

C:\Users\Admin\Desktop\Generators PACK\Stolen Nitro Discord Code Generator\_Stolen Nitro Code Generator.exe

"C:\Users\Admin\Desktop\Generators PACK\Stolen Nitro Discord Code Generator\_Stolen Nitro Code Generator.exe"

C:\Users\Admin\Desktop\Generators PACK\Stolen Nitro Discord Code Generator\library\Launcher.exe

"C:\Users\Admin\Desktop\Generators PACK\Stolen Nitro Discord Code Generator\library\Launcher.exe"

C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\Gift Card Generator By MT_SOFT.exe

"C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\Gift Card Generator By MT_SOFT.exe"

C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\lib\Launcher.exe

"C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\lib\Launcher.exe"

C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\lib\GC by SOFT.exe

"C:\Users\Admin\Desktop\Generators PACK\Gift Card Generator By MT_SOFT\lib\GC by SOFT.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://t.me/AccountCrack

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x14c,0x150,0x120,0x12c,0x7ffecb3d46f8,0x7ffecb3d4708,0x7ffecb3d4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,11932963310600582393,5403102959740495068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8436 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 paste.fo udp
US 172.67.144.225:443 paste.fo tcp
US 8.8.8.8:53 225.144.67.172.in-addr.arpa udp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 js.hcaptcha.com udp
US 104.19.230.21:443 js.hcaptcha.com tcp
US 8.8.8.8:53 u.paste.fo udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 21.230.19.104.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 newassets.hcaptcha.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 data-edge.smartscreen.microsoft.com udp
GB 172.165.69.228:443 data-edge.smartscreen.microsoft.com tcp
GB 172.165.69.228:443 data-edge.smartscreen.microsoft.com tcp
GB 172.165.69.228:443 data-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 93.61.165.172.in-addr.arpa udp
US 8.8.8.8:53 228.69.165.172.in-addr.arpa udp
US 8.8.8.8:53 checkappexec.microsoft.com udp
GB 172.165.61.93:443 checkappexec.microsoft.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 138.191.11.52.in-addr.arpa udp
US 8.8.8.8:53 api2.hcaptcha.com udp
US 8.8.8.8:53 api.hcaptcha.com udp
US 104.21.28.76:443 u.paste.fo tcp
US 8.8.8.8:53 76.28.21.104.in-addr.arpa udp
N/A 127.0.0.1:63963 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
N/A 127.0.0.1:63974 tcp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.204.81:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.204.81:443 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.204.74:443 ogads-pa.googleapis.com tcp
GB 216.58.204.74:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.204.74:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 81.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 7-zip.org udp
DE 49.12.202.237:443 7-zip.org tcp
US 8.8.8.8:53 7-zip.org udp
US 8.8.8.8:53 7-zip.org udp
DE 49.12.202.237:443 7-zip.org tcp
US 8.8.8.8:53 237.202.12.49.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 github.com udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 objects.githubusercontent.com udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.190.72.216:443 location.services.mozilla.com udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
US 8.8.8.8:53 redirector.gvt1.com udp
DE 23.55.161.185:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.200.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r5---sn-4g5lzne6.gvt1.com udp
DE 74.125.160.234:443 r5---sn-4g5lzne6.gvt1.com tcp
US 8.8.8.8:53 r5.sn-4g5lzne6.gvt1.com udp
US 8.8.8.8:53 r5.sn-4g5lzne6.gvt1.com udp
DE 74.125.160.234:443 r5.sn-4g5lzne6.gvt1.com udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 185.161.55.23.in-addr.arpa udp
US 8.8.8.8:53 234.160.125.74.in-addr.arpa udp
US 8.8.8.8:53 fd.api.iris.microsoft.com udp
IE 20.223.35.26:443 fd.api.iris.microsoft.com tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 www.upload.ee udp
DE 57.129.39.102:443 www.upload.ee tcp
DE 57.129.39.102:443 www.upload.ee tcp
US 8.8.8.8:53 s7.addthis.com udp
GB 23.44.66.45:443 s7.addthis.com tcp
GB 23.44.66.45:443 s7.addthis.com tcp
US 8.8.8.8:53 du0pud0sdlmzf.cloudfront.net udp
NL 18.239.38.123:443 du0pud0sdlmzf.cloudfront.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 102.39.129.57.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 45.66.44.23.in-addr.arpa udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 123.38.239.18.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 15.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 ditingdecording.info udp
US 8.8.8.8:53 oundhertobeconsi.com udp
US 8.8.8.8:53 ghabovethec.info udp
US 8.8.8.8:53 dbycathyhoughs.com udp
GB 18.244.140.102:443 ghabovethec.info tcp
GB 108.138.217.72:443 ditingdecording.info tcp
US 8.8.8.8:53 getrunkhomuto.info udp
US 172.67.217.244:443 oundhertobeconsi.com tcp
GB 18.165.227.126:443 dbycathyhoughs.com tcp
GB 143.204.176.11:443 getrunkhomuto.info tcp
GB 18.165.227.126:443 dbycathyhoughs.com tcp
US 8.8.8.8:53 ukankingwithea.com udp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
US 172.67.192.190:443 ukankingwithea.com tcp
US 172.67.192.190:443 ukankingwithea.com tcp
US 172.67.192.190:443 ukankingwithea.com tcp
NL 18.239.83.100:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 www.facebook.com udp
BE 74.125.206.84:443 accounts.google.com tcp
BE 74.125.206.84:443 accounts.google.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
BE 74.125.206.84:443 accounts.google.com udp
US 8.8.8.8:53 102.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 72.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 244.217.67.172.in-addr.arpa udp
US 8.8.8.8:53 126.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 11.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 190.192.67.172.in-addr.arpa udp
US 8.8.8.8:53 100.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 84.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
GB 108.138.217.72:443 ditingdecording.info tcp
US 8.8.8.8:53 birthjeans.icu udp
US 104.21.42.119:443 birthjeans.icu tcp
US 8.8.8.8:53 ajax.googleapis.com udp
GB 216.58.201.106:443 ajax.googleapis.com tcp
US 8.8.8.8:53 nostop.go2cloud.org udp
IE 52.210.174.128:443 nostop.go2cloud.org tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.187.226:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 128.174.210.52.in-addr.arpa udp
US 8.8.8.8:53 119.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
GB 142.250.187.226:443 ep1.adtrafficquality.google udp
GB 143.204.176.11:443 getrunkhomuto.info tcp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 ditingdecording.info udp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 51.140.242.104:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 104.242.140.51.in-addr.arpa udp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 nostop.go2cloud.org udp
IE 18.202.12.61:443 nostop.go2cloud.org tcp
US 8.8.8.8:53 61.12.202.18.in-addr.arpa udp
US 8.8.8.8:53 www.ninjapinner.com udp
US 192.124.249.19:80 www.ninjapinner.com tcp
US 8.8.8.8:53 19.249.124.192.in-addr.arpa udp
US 192.124.249.19:443 www.ninjapinner.com tcp
US 8.8.8.8:53 ninjapinner.com udp
US 192.124.249.19:443 ninjapinner.com tcp
DE 173.249.60.191:80 tcp
DE 173.249.60.191:80 tcp
US 8.8.8.8:53 24.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 www.instagram.com udp
GB 163.70.151.174:443 www.instagram.com tcp
US 8.8.8.8:53 174.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 static.cdninstagram.com udp
GB 163.70.151.63:443 static.cdninstagram.com tcp
GB 163.70.151.63:443 static.cdninstagram.com tcp
GB 163.70.151.63:443 static.cdninstagram.com tcp
GB 163.70.151.63:443 static.cdninstagram.com tcp
GB 163.70.151.63:443 static.cdninstagram.com tcp
GB 163.70.151.63:443 static.cdninstagram.com tcp
US 8.8.8.8:53 63.151.70.163.in-addr.arpa udp
GB 163.70.151.63:443 static.cdninstagram.com tcp
US 8.8.8.8:53 www.facebook.com udp
GB 157.240.214.35:443 www.facebook.com tcp
US 8.8.8.8:53 35.214.240.157.in-addr.arpa udp
US 8.8.8.8:53 paste.fo udp
US 8.8.8.8:53 www.upload.ee udp
DE 57.129.39.102:443 www.upload.ee tcp
DE 57.129.39.102:443 www.upload.ee tcp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 51.140.242.104:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 s7.addthis.com udp
GB 23.44.66.45:443 s7.addthis.com tcp
GB 23.44.66.45:443 s7.addthis.com tcp
US 8.8.8.8:53 du0pud0sdlmzf.cloudfront.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
NL 18.239.38.115:443 du0pud0sdlmzf.cloudfront.net tcp
GB 216.58.213.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 ghabovethec.info udp
US 8.8.8.8:53 oundhertobeconsi.com udp
US 8.8.8.8:53 ditingdecording.info udp
US 8.8.8.8:53 dbycathyhoughs.com udp
GB 18.244.140.102:443 ghabovethec.info tcp
GB 18.165.227.40:443 dbycathyhoughs.com tcp
US 8.8.8.8:53 getrunkhomuto.info udp
GB 108.138.217.72:443 ditingdecording.info tcp
GB 51.140.242.104:443 nav.smartscreen.microsoft.com tcp
GB 143.204.176.42:443 getrunkhomuto.info tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 www.facebook.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
BE 108.177.15.84:443 accounts.google.com udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 115.38.239.18.in-addr.arpa udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 40.227.165.18.in-addr.arpa udp
US 8.8.8.8:53 42.176.204.143.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 84.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 wpsafeguardinfo.com udp
US 3.93.251.206:443 wpsafeguardinfo.com tcp
GB 216.58.204.66:443 ep1.adtrafficquality.google udp
GB 216.58.204.66:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.204.81:443 csp.withgoogle.com tcp
GB 216.58.204.81:443 csp.withgoogle.com udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 206.251.93.3.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 birthjeans.icu udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com tcp
GB 216.58.201.110:443 apis.google.com tcp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
GB 142.250.180.10:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 nostop.go2cloud.org udp
IE 52.210.2.133:443 nostop.go2cloud.org tcp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 133.2.210.52.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
GB 216.58.204.66:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 www.whattomine.com udp
US 104.26.12.88:443 www.whattomine.com tcp
US 8.8.8.8:53 www.multiminerapp.com udp
US 185.199.109.153:80 www.multiminerapp.com tcp
US 8.8.8.8:53 multiminerapp.com udp
US 185.199.108.153:80 multiminerapp.com tcp
US 8.8.8.8:53 88.12.26.104.in-addr.arpa udp
US 8.8.8.8:53 153.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 153.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 www.myip.ru udp
GB 178.62.9.171:80 www.myip.ru tcp
US 8.8.8.8:53 myip.ru udp
GB 178.62.9.171:443 myip.ru tcp
GB 178.62.9.171:80 myip.ru tcp
US 8.8.8.8:53 171.9.62.178.in-addr.arpa udp
US 8.8.8.8:53 redarmy999.comuv.com udp
GB 178.62.9.171:80 myip.ru tcp
GB 178.62.9.171:443 myip.ru tcp
GB 178.62.9.171:80 myip.ru tcp
GB 178.62.9.171:80 myip.ru tcp
GB 178.62.9.171:443 myip.ru tcp
GB 178.62.9.171:80 myip.ru tcp
US 8.8.8.8:53 redarmy999.comuv.com udp
US 8.8.8.8:53 blockchain.info udp
US 104.16.237.243:443 blockchain.info tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 243.237.16.104.in-addr.arpa udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.109.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 paste.fo udp
DE 57.129.39.102:443 www.upload.ee tcp
DE 57.129.39.102:443 www.upload.ee tcp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 s7.addthis.com udp
US 8.8.8.8:53 du0pud0sdlmzf.cloudfront.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 23.44.66.45:443 s7.addthis.com tcp
GB 23.44.66.45:443 s7.addthis.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
NL 18.239.38.115:443 du0pud0sdlmzf.cloudfront.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 oundhertobeconsi.com udp
US 8.8.8.8:53 ditingdecording.info udp
US 8.8.8.8:53 ghabovethec.info udp
US 8.8.8.8:53 dbycathyhoughs.com udp
GB 18.165.227.40:443 dbycathyhoughs.com tcp
GB 108.138.217.38:443 ditingdecording.info tcp
US 8.8.8.8:53 getrunkhomuto.info udp
GB 18.244.140.100:443 ghabovethec.info tcp
GB 143.204.176.42:443 getrunkhomuto.info tcp
GB 172.165.61.93:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 accounts.google.com udp
GB 163.70.151.35:443 www.facebook.com tcp
BE 108.177.15.84:443 accounts.google.com udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 178.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 38.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 100.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.200.2:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
US 3.93.251.206:443 wpsafeguardinfo.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
GB 142.250.200.2:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 birthjeans.icu udp
IE 52.210.174.128:443 nostop.go2cloud.org tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.204.81:443 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.201.106:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.16.238:443 play.google.com udp
US 8.8.8.8:53 t.me udp
NL 149.154.167.99:443 t.me tcp
NL 149.154.167.99:443 t.me tcp
US 8.8.8.8:53 nav.smartscreen.microsoft.com udp
GB 172.165.69.228:443 nav.smartscreen.microsoft.com tcp
US 8.8.8.8:53 telegram.org udp
US 8.8.8.8:53 cdn4.cdn-telegram.org udp
NL 149.154.167.99:443 telegram.org tcp
NL 149.154.167.99:443 telegram.org tcp
NL 149.154.167.99:443 telegram.org tcp
NL 149.154.167.99:443 telegram.org tcp
US 34.111.35.152:443 cdn4.cdn-telegram.org tcp
NL 149.154.167.99:443 telegram.org tcp
US 8.8.8.8:53 99.167.154.149.in-addr.arpa udp
US 8.8.8.8:53 152.35.111.34.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c29339188732b78d10f11d3fb23063cb
SHA1 2db38f26fbc92417888251d9e31be37c9380136f
SHA256 0a61fa9e17b9ae7812cdeda5e890b22b14e53fa14a90db334f721252a9c874c2
SHA512 77f1f5f78e73f4fc01151e7e2a553dc4ed9bf35dd3a9565501f698be373640f153c6d7fc83450b9d2f29aeaa72387dd627d56f287a46635c2da07c60bc3d6e2c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

MD5 e5e3377341056643b0494b6842c0b544
SHA1 d53fd8e256ec9d5cef8ef5387872e544a2df9108
SHA256 e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25
SHA512 83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

\??\pipe\LOCAL\crashpad_1340_EHXJTNLDSJZVLCGN

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ccff51f965f8f4176e4ad112c34c86a7
SHA1 eab249ca0f58ed7a8afbca30bdae123136463cd8
SHA256 3eb00cf1bd645d308d0385a95a30737679be58dcc5433bc66216aac762d9da33
SHA512 8c68f146152045c2a78c9e52198b8180b261edf61a8c28364728eafb1cba1df0fa29906e5ede69b3c1e0b67cfcbeb7fde65b8d2edbc397c9a4b99ecfe8dea2dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 86aa28ffd286b08415aa197216684874
SHA1 d99924976c73e3220108817ad6bc1d8b1795ca2d
SHA256 a6dc4bc6ade3039e57b538f2620b91602199f1908b23c4a2beb3fd3aa721579d
SHA512 a51fbd1af778d32f2f95a9a863a59f42a7eb804dbb8ce85459297959eea21fbfe9625d74c3f91ad65016031d4b3e26eeb748c1c59e09ac68778fc670d408d0fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 03ee0be3eb8fe893c92ef325f232e20c
SHA1 46a3a307dafc774daa0c308800d15ca776cdff82
SHA256 e27124479503ee6d251f42fe881022a699d81717ff95e9e65acbb75b1e24743e
SHA512 3b7e351a79d7172a47817f323a80c3943be74525ffbfaaf36feb462835b0baf185c8fb1b9cd3671b0337bb6da1c608b4bcefabed1c8da731f52747a655882a26

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 a4091dabd3f2c273391e06c3aebcff99
SHA1 510208bed2197b67cdfe80e72fe12f52876892cc
SHA256 d004c94313da67a938fd5dd1a7e44b184785704935419f8cfe61b8c8bd213126
SHA512 513784a69233c26cd904c9e185361671be9502db1acdb6f9bb03224de2f8bb2d12beb34806ebe8e827a838249bf871bb2f1639781e04a302ba3125a2bb407eb9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\pending_pings\f21892b3-df40-4ee9-8681-e3bd9b682435

MD5 bacda9ec1dce08f474dd35d2699da19f
SHA1 f37b904710229c7d97c3de2b54b97541be1bc060
SHA256 4e73bbae1a0211d2f2534871882f6118a8ac77c738283e46052e9b1dfe3ca866
SHA512 28b7ae45362a3535f88836ffc7edcf537c35369c9b4026c1774bb5a27d9295c7161c6cb11960945f74579d0f243dacfbe2280d319a302bd438531279627d8af1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\pending_pings\1608774b-7ce2-4885-8486-64ad5123a84e

MD5 ecba738ace15aef9bb42d557317c8484
SHA1 8d2c99c7a3a903c7fa0ac84f576006f5e118d12d
SHA256 9b3294cf9ac9939cf48862b411f28d00c4b7fa42a0e3ba1269d73ca3efb9fba8
SHA512 614a6aa363cff52931e2cc963434964ff75fa316631021250311639006e7d93beafb14534638b53804e12027e3a5f979d2413f8b8e4642969b972a0f4a781a24

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 8902e14efe0855ec6bcb1bc38f53608c
SHA1 b7aa61c2dd5665479876ee9ce447391835b14319
SHA256 2481f402f7ae20cd7b85277b74e8769926cc240633e9e16b840b79ebf5244eb6
SHA512 e169f9d53997ec83cae9f6f515e932aca80aaf4f85d04e8b96e1e65b106e335a9777e771b4fff18950c556238871ccc2b8ebc2f9ddc7a5d9ebe7a19f21ac07f9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\pending_pings\b9dc4ffa-0af4-4065-b999-8d300a737350

MD5 ab9dbd1a7d4f6a91c2fec343c7390e0b
SHA1 8bb1de14f8eeeab31315dc0478df4177dbbd10b4
SHA256 c47591d5c990e0b4a1d209de5894a8c2cfae39c9259cf1a40a568a73ee64f75c
SHA512 500b2e51afe5cb359767e0859b73c8ccc148dc1b127d0fb1b220dc0e1522b7cf733fad3596e1b4d553490df086a29fb5e676bc2e612c87ac3b15843593a75d59

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\etc817bi.default-release\activity-stream.discovery_stream.json

MD5 37e37d61bd8a076715257b8313c8621c
SHA1 d1f71faa2168fbbc1e50f3f450c3c0e971a1afea
SHA256 14d9041af4cce773f10aff86c146abef577e66034da5245c418edc544ad4c9db
SHA512 03dd4640e69acff26ddafb598ca8fc777b4b1604f89c1286b06fde0eb3918bbf2f8dc7256929407ced96cf75fa4a98f23b47e6ed26043e87131dc4156531261b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 895d4a5deef1c83e0b8db187214d6e97
SHA1 c183509ff26baaf84e2111777dd36d0c718394d6
SHA256 54094c47eb22001dad93014b88ad34f8c02c3c8728fa48cba3007a26b8b82c1b
SHA512 c48f506b636d0d900b6396e0557a667525a98fdf33b1713ff91f04cf376f4f409d0c3bc4c1e1592d9f4dc78c3c1b0edcd44e03e104aa808238925472564d8aba

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\prefs.js

MD5 1734077458fa1d535b11a1f768c5ab4b
SHA1 d8115de57fc6b03d8cc5c759398ebabb4b9cc9e9
SHA256 fc014f3529be994fc4f2a641e69fbfc7a4cb4c0e7e4e1e99cfd65cf815c4eb19
SHA512 cefeda96e0a718f0e23a99f88f0d8f4552e21f46e060fba7850792a0002f123ccf8db3d8cf5e2e68bf72e88ecf0b82903439fdf02ca8b85ec7f24e363da87fc4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\AlternateServices.bin

MD5 e0ab1cc05c09eab8d67a930367629e99
SHA1 00e379258fd03d383f7d23d2e2a67c3fe4cc87f1
SHA256 76065d1b976ab492aa06ba53eed5fd6c2d4e9bc90305e9a0479a170d514ef0a5
SHA512 3ae2bc342e5490fcd579e248d348913f28994b82fd8b091f66d57551353e69bfbb200c014ed858e203801259008839f8510d5171802c80c49e632ff3949f8c6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3ec0e9c93b352d8320e945aa6c5391f8
SHA1 f02eafe7c06e614fea82094bf0c5c1616d504f19
SHA256 dddc57ef36d62d23232a5be8526f52c2559f04c81cc562f925c8fcf89039981e
SHA512 2a07bd8b863d821372b597dd67df3c3cbac6ce0c79ee5775a54a5cefa29abc5285742c5988f50542f211b85e1e3fea39c4ccf2e94e647fb1b45f70831c7b6fb4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\prefs.js

MD5 fb982358b245388c918552cfa607ef4d
SHA1 6c46c69e4e24f1cd26cce0e82c3d0d8a2e1b7761
SHA256 b11366e9ba9a1a259fe89c2506abdf9127449e05fdb7c90c403e10f93fa57a82
SHA512 3c899158cb9b7be0c88874803e1eaa89d7287c4976a1262f08a5f5aea28c7ca3f11e2081fb5d6bb749475ba9f137dc822ed26a88736213de5c84c897d4f39e91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 57b736eaebd0122007e6328d07b79976
SHA1 6330c6626954812421fdb7bdc424ffe5109e64cc
SHA256 d52406ea1285aa525d10d8366d61c0d467df6da9e6f067030db846a0e9a04f4b
SHA512 e9342817f9d4250426f1bfbf128638f388252b2dd4fa9c8c4081c371c8ba332e9a3e8d56b7d8de8b2146c7e395c994a9573fde0a29267da76818dba30fe89703

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\prefs-1.js

MD5 766d4856d0a48d8821f0fbc94cd2ea8c
SHA1 e082a6ace4b4030e922a97211bb04068ccbea281
SHA256 12b847d638f1799b9d58535dd85fdd735ead3394336211cd68379c1d0240bee3
SHA512 09a1d62c5904c1d3f61dd4c2094d421916adb10de9825b9bc3002270e8b5ea0b16de3644d3b22fc367ba18c324d304b6ce34461eef34ebd099fe2258f71cc436

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 26978f38b0bce48572b90b762b7d937c
SHA1 8b8b88012fab1d37fca79575a5db81674b424867
SHA256 b38f05e2e63a1f87026aed06f5b85354570c6f91d28947466f0555276bab6afa
SHA512 501e0de5f46bfaac901cde5c39a321edc411426fd91c83427f36710fa56d20b5f6ab8f2219d963f7ab495c2df7def879652381db3876b7e2a7080921cce78379

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d4b5.TMP

MD5 11104625b105b9fae9c2c77c76e01518
SHA1 de88b24ef50be8f92abbac777a2b6079cfe394a6
SHA256 f097bdee3eef3a32f2d8b717533c4cd39a3ac0b212ce58800bb1e773cec12eb9
SHA512 7c29e72cd34835c281a76291652ea5874501366e4b7c66a89f6ceff306e71206c3c7b7538a1145c4c8aadb84e7ec7b159d55e59338b48f638d2f48356c6738c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe9ec384f9e358f91c82474b71e4d733
SHA1 a390986df3fe8cecba588f5bc29086c0c046bd59
SHA256 5a59b925512d415cd878d3c4990d2013bab00adca36fd693f2b9cd9373442664
SHA512 681fe7f1bf405aa5fce5a1f06c359d61cba41acbce5deb73ea157781e156a495d63c00a01efee2e1da85b12c5ff096470a39200c77ea954bb9ce14510578b123

C:\Users\Admin\Downloads\7z2408-x64.fLiec7Ny.exe.part

MD5 0330d0bd7341a9afe5b6d161b1ff4aa1
SHA1 86918e72f2e43c9c664c246e62b41452d662fbf3
SHA256 67cb9d3452c9dd974b04f4a5fd842dbcba8184f2344ff72e3662d7cdb68b099b
SHA512 850382414d9d33eab134f8bd89dc99759f8d0459b7ad48bd9588405a3705aeb2cd727898529e3f71d9776a42e141c717e844e0b5c358818bbeac01d096907ad1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fe51cbf84061384968a6160a6ae434a4
SHA1 3830d21d155161c37dcec2c833a56c36ba6f01b8
SHA256 2011befe57d93d0296dece58a6a78aad134c17509ae357e7ae1f17e69b03fa68
SHA512 f0caa154a59feb262b47359049a0b285299000f9d8806850b2aaa16d7ae72b5c92ab1ae96dc2149a9ac8b3a3a921adb627013c9d281527a345c9ad12cf77647e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bd2156f5a1113abcb822f866c44e2e0c
SHA1 63518e4679fc3e45f914eb276c1f88b2117031a1
SHA256 15330e17f1bf803314cce6057065ca1268873d318004945febb29bbdf633db86
SHA512 d692a45796982acaaa8e159f7e7258adca734a114d56ddd98a36411eba206d0a85f2d90029441e908d6729f99d0db3f6178f5c6cbb2a68d9264646389a6ac7f2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 e15bbf3904ab7d8909c2d89e509e8398
SHA1 0ee77d2baedb106c5828bb8c7a5378963b2183d2
SHA256 712a535dfdd25fe0bb7df5f53addad957175c1f7192398c8257db6e2e719a609
SHA512 d92d819e5d9b92de222b8c815b7d4a050165fb18079ed80ce56d1387d5ac510dc57482a47e39bda6ba9a79b3807fd94288603c4bd630c629c695ba28d24e589c

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\AlternateServices.bin

MD5 f196c6b12f9535518bdc8b47b6b2642a
SHA1 2c6c2b52f204c3640e61ee4bf51d978ab3b2beda
SHA256 d8738897cfe81bde3583d60cf8864181733bcb29d89ab51583921493c84a9f74
SHA512 16288ff35916c67966e6191e997e1eade582a7b880e25e55fdf78f8687f61134defc64681135bc42366fea05f9376d0aec5fcc6d741b1da2113b1ee0047046a8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\prefs-1.js

MD5 ae50ce59040da6294bb1ff373d54b739
SHA1 7db113196ec317cafd685e7324c0d136c05ba1e9
SHA256 4966c789e148b44464b825e6c26aac0392223bed8bf9ba0e3500602ad670436f
SHA512 01f14d279abee2ffa7f573f07626bd0a67d21578e50b1312ca4b61373ec87ad002b7e1f47d53948d632a01cc5dcff3c394a4766c0e5c137eb11e94e280f430d8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\sessionstore-backups\recovery.baklz4

MD5 559cf0139d4870dfb2c9e43a595691c5
SHA1 8c9c38f63559b83ea1ad14b984d77cfe58cb5f59
SHA256 592775c9673b00726f32be27e9801c25ca9ed463a32ea94b359b2ef311e44210
SHA512 97c64cbb79e60a29c431a5adff5d7a8c28b1b5beef0c5f2cd743c377c97ffee8e43c8d125112e9ee561c00c793dcbaee3dd63eb0d2eb74e24f6056985b18afa8

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 020b3c65375cc589d5328b32527e71fc
SHA1 3d97e9aa4056ea0450c4509ceabca1e69ceaa326
SHA256 a9ee1cb84d0aeec10cb99653a12b3cef0ac67fc013484e8992ad48f930102819
SHA512 6cad1b6f615ebafffb00849e897bb92f960f55f60ff26d23be2946be0d9bdbae67c1ef0b61d943bee9a5d04577b817605dc9a7bb77326e91fd1f7d4fcdbb1e50

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\sessionstore-backups\recovery.baklz4

MD5 017f680151c71ffb5c897b42aa5f4785
SHA1 099604f42e6e52211111803c518480f3c4914ee6
SHA256 f42a593557d2e1d3709f1998abf9f54c5f353a3000120a6ba3b130e29e645cab
SHA512 5fb966acfcc1e86173d112ec2c4d8407fe714f2c2ef2ca8e6c1f73ab89c0d474a5f6a8beedfc18b2e2759ea86cf25dabc7b9b4c2f6c13545688c8fe49c25a276

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 afc117de70c8140984a316f11e830f34
SHA1 1b7b0dc0db0c5eb3babfb7b3b7b4d945214c7989
SHA256 87e97ded37d62540329473266fe86ad3691e994f1d107c947852068d9312e848
SHA512 984d3295e74ea96d03f169f63e2b8265678960cc1fa6b4f4dcf654bbc002739ce84cdeec7caabe4d5b1655784981bfae0e34b7d8fe9a8eba697285fbb6878bca

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 0919d62744e9a5dfdaf1d65d79d52d94
SHA1 e2f5f27577d917414b8e5f766687ca29ce073b1a
SHA256 bbcedff5d2d596c404ae5aabe8b91e9de2ee189e6b5d90864f84d8b278b287e5
SHA512 4274d48ae9f6472f2c370d9e1676ad593607877204f2fcd660a5afc346e0bd06715403b5fc6de6c9dd240911fc1943ebbf24be9c749759838c5c3914591076c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dbf06dd3bc2956ba0f87c99bc11cb7ba
SHA1 e1dfc0c44365073f33fdf6b624024c6971c34fd9
SHA256 1b689fad65609dffcce8150771eed390648c88e150670b98555faa7cf18a68fb
SHA512 f5107d13e48ba77ace7115ea9a449440302cd7e97bd284c8cc0ad4f82fdccec8ecd322df1fff5d32451a26997c5398d5af36be37d0400949e4daaa2db68ef781

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 38681be2ad9d22fea2f50048f50cc53a
SHA1 68543320f909956d94e72bdcb2937e3f3369061b
SHA256 85eaba392494a9c41ddc6feea6e0fbe3b10f3545ad23cc55132c1be777ed0290
SHA512 9cc867f30a9f4e6794ee63dff436de930363f0d3a2528648aca2ee224bf381f7cb6c152de254a0bd839a7c2dfb83a3394d7796519d2006c7717add7f324a29ca

C:\Program Files\7-Zip\7-zip.dll

MD5 d346530e648e15887ae88ea34c82efc9
SHA1 5644d95910852e50a4b42375bddfef05f6b3490f
SHA256 f972b164d9a90821be0ea2f46da84dd65f85cd0f29cd1abba0c8e9a7d0140902
SHA512 62db21717f79702cbdd805109f30f51a7f7ff5f751dc115f4c95d052c5405eb34d5e8c5a83f426d73875591b7d463f00f686c182ef3850db2e25989ae2d83673

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State~RFe58a35f.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 71987e6cc7c014cf153c450802d1ecb9
SHA1 e4c7042ae11126f817421d1ef81f32a8145132ab
SHA256 8ffb62defc02664d0c7174029d3204bc6fc0a981818738704727f6f7afd62462
SHA512 d0105002c7b42adf4fde6eb06133e74cfb1096842cfeea1be7d5305f374c81506aa831b64b1ab4bbb3ea5ebfb21c753c29ced3eba304c735fd169a796a3e1d16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 996027ab1037a4a8ee280c6e73d2c42b
SHA1 6b13e2a649ce18e58da511e4217681cebec25eac
SHA256 0954a0de396de8041756d5c9f32a4b4f53e5da2835ec0a3a7316611b4542f08c
SHA512 50ceab095bf567a99a802b46ae1a6d9df73a2dc8bd69ebde9a2335c6b6108f29f63affb21a6430bfb96385a7ec2fa8804525ee5c7388223181601f758d3b94f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d0d23f52e0148114ed791f53e9c8c1a6
SHA1 af60b598d1fa7cc0fcdfce96600c2ccc6681b59e
SHA256 39196910f485c4b43f23e3bb504986aa91b4dc159ab2838f2c9605585f232cbe
SHA512 5c74807f36aed2a9da5c2a3a5327374c7d736225f9f0acd7391241ff24bdcf0a7b7e3407c4d2c4dfd3a9cd485da945e0107140f4f8ff4a56cfab6f07ee25c509

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 698cdcead014672869d451553dab29de
SHA1 550b571b8dfce3fa70e541000c43a59f8c72287b
SHA256 48a34058b1e7b091fc8e24db43edfc1f3ea2fa1e26684069f01b43a38659c4c9
SHA512 856b0526330548477ab14312271b6e1cbaf4f9be5d2238ddbc1a461a6b77dfb80b2c96e5db52c82bf6003b99881bcdd7e8b62c7116254e854a6835db78b1c64b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 abf2787eddb7c26d71351dc25450e1ef
SHA1 c72c2326956eb5ec058d150fc40d90165be352cf
SHA256 6af445b589d57bf63e65b3781f16062708fdac3a25da5f060fc9226b6d12b8b2
SHA512 e3bd780586922e0d15fcadfde2c31ec8011840b2fe52f85c939a775d845722a5c81d28ac9f8184d42299df74903e8a133f8c2dee01972a099b56f355a7a1b612

C:\Program Files\7-Zip\7zFM.exe

MD5 004d7851f74f86704152ecaaa147f0ce
SHA1 45a9765c26eb0b1372cb711120d90b5f111123b3
SHA256 028cf2158df45889e9a565c9ce3c6648fb05c286b97f39c33317163e35d6f6be
SHA512 16ebda34803977a324f5592f947b32f5bb2362dd520dc2e97088d12729024498ddfa6800694d37f2e6e5c6fc8d4c6f603414f0c033df9288efc66a2c39b5ec29

C:\Program Files\7-Zip\7z.dll

MD5 1143c4905bba16d8cc02c6ba8f37f365
SHA1 db38ac221275acd087cf87ebad393ef7f6e04656
SHA256 e79ddfb6319dbf9bac6382035d23597dad979db5e71a605d81a61ee817c1e812
SHA512 b918ae107c179d0b96c8fb14c2d5f019cad381ba4dcdc760c918dfcd5429d1c9fb6ce23f4648823a0449cb8a842af47f25ede425a4e37a7b67eb291ce8cce894

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\ArticleBot 2.0\common\ArticleBot.BAK

MD5 a6cb4b8b91d0cff9e6d12c583e2a63cb
SHA1 7115b43a5911ea2550ddb99a0c89ae93bd6071e4
SHA256 a3c875ab07d2121140a9ed7593131f033ecd24f811611c42abae9abae4a9f4f3
SHA512 535129165367b6e9801bc7020d03486c1eb78f60a9212eee4cafd3a2b3187abda7e525fedff5586f25cbc010d9d65fa53caac08524dc93584f62a60b6b1b7ced

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\ArticleBot 2.0\common\Launcher.exe

MD5 c6d4c881112022eb30725978ecd7c6ec
SHA1 ba4f96dc374195d873b3eebdb28b633d9a1c5bf5
SHA256 0d87b9b141a592711c52e7409ec64de3ab296cddc890be761d9af57cea381b32
SHA512 3bece10b65dfda69b6defbf50d067a59d1cd1db403547fdf28a4cbc87c4985a4636acfcff8300bd77fb91f2693084634d940a91517c33b5425258835ab990981

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\ArticleBot 2.0\common\LICENCE.dat

MD5 5180046f168dfd684b5bf268f5a0fa56
SHA1 ac8202ad5c94eb4d9e6227af92b5120e6d1b7ce7
SHA256 4139baa8beebcde4504c33bc88cf13b9ab9f32e4a054871ebeb82be6b84edc01
SHA512 04add8dc053c39a594e7889071b3fb9036fdc978b6f39f769c38b322e18a4ea6e05b6b66d97f0ac40c58f39120c791006a5b732da46ceba799e0db74afbed3e0

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\ArticleBot 2.0\common\Ionic.Zip.dll

MD5 f6933bf7cee0fd6c80cdf207ff15a523
SHA1 039eeb1169e1defe387c7d4ca4021bce9d11786d
SHA256 17bb0c9be45289a2be56a5f5a68ec9891d7792b886e0054bc86d57fe84d01c89
SHA512 88675512daa41e17ce4daf6ca764ccb17cd9633a7c2b7545875089cae60f6918909a947f3b1692d16ec5fa209e18e84bc0ff3594f72c3e677a6cca9f3a70b8d6

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Best Instagram Bot 4.1\usersys\Best Instagram Bot 4.1.application

MD5 3ae5c66ad2af2b9f6ef27763b0c2ddcd
SHA1 8bb98ba2348db443475bf01333f75998fc87e043
SHA256 dd7da4fa2830a6edad8c138b1c05fe246bf9f008d1deeb1005698658bb58d0a2
SHA512 5f186a860b9657f115df3afa73940ce6d3b92cab5c7a579393fcd1e612b74ddc96d6355cd0a8a85c1880e856c7e61dd722cdbd8ad8bd7d532804c700dcc62dfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 48eb9acb074decd6bc7e53101d8085ae
SHA1 f3c5a666f990be1ab190cb83df85342072043f02
SHA256 aa582747cb9498007943be05f258d1036906813547613b652999fea0ec26a734
SHA512 45956f0e8babaa645522168cf2448d2548905e1e2007db43fa15b9e040d77c368df3185557f60bff3516b93a5b20c2455d59a369258e6f363e825f2c8f279506

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\InfiniteBulkMailer\services\gitattributes

MD5 23e2b08ac4bff5f9ee89924f6c6eace1
SHA1 26166bf7a5e7016a1a1b610b64639f18eca5709f
SHA256 a2aeea8320805941cba5d36fdaba09c87d11d754ffbd251879f8c3416cd3bc76
SHA512 9f53ad244fa6e74d62fbc7e6db80b9fa7e90aaba3fedf1062ed72e6ea77a25713b1067d7d8bb1d915e8febaa755310ca0127ded9557b8146966f46c6a97f89f8

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Miracle Traffic Bot\DT_DATA\ssleay32.dll

MD5 5023f4c4aaaa1b6e9d992d6bbdcd340b
SHA1 2165b4a8089a7c00dc586c983e8548653a4e0ce4
SHA256 59b1be1072dd4aca5ddcf9b66d5df8bec327b4891925ba2339fe6ac6a1bf6d19
SHA512 c2885d8a8daac7ff83991dd81c6b2993c874081ea8877511aedd61e31829b26d33d8d9e433c7c72dd79d4cdf5d2a6e484b980117549770df1d2f2f522f8a0758

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\library\chromedriver.exe

MD5 467838b0da3380609a468679b0639abc
SHA1 e3b21daf2e7d9e7f564daca4d6b6a772e78f74a2
SHA256 282dd0a35f2336e409fc82ebc8649b0f9257c4016af75111ed709ee7c9132ef2
SHA512 aeb188d37a7184d235c27bc692e255a46e8a6c5d1e48e8b2d1258b0e4d342fe3468671ced9887c3ce2bc7ae71d94f9b25c738cd0742c9135386f20774402cc87

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\Pinpal Bot 3.1.0.7\datastore\AlreadyLiked.txt

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\The Ultimate Survey Bot V2.3\dim\Microsoft.Scripting.Metadata.dll

MD5 1bed5e618b922411cfae2eac84afef43
SHA1 4f61e59bb5339a0796093adb7a8751a2f843d6e5
SHA256 a4ace184ddb98e81cfcc6c838299915d8c33b714594e3836de7c75b1f70e55eb
SHA512 a3c4f3db6e23d244ff8df9209da00cba138a1857b937cb93ccec80076df3cd24a31d03d6e007df10d4c3db5010ae29ae8ccaedd47965de01741b480aeb443453

C:\Users\Admin\AppData\Local\Temp\7zECC33C17A\Bots - Traffic - Automatic Tools\TIKTOk BOT\tcl\encoding\euc-cn.enc

MD5 c5aa0d11439e0f7682dae39445f5dab4
SHA1 73a6d55b894e89a7d4cb1cd3ccff82665c303d5c
SHA256 1700af47dc012a48cec89cf1dfae6d1d0d2f40ed731eff6ca55296a055a11c00
SHA512 eee6058bd214c59bcc11e6de7265da2721c119cc9261cfd755a98e270ff74d2d73e3e711aa01a0e3414c46d82e291ef0df2ad6c65ca477c888426d5a1d2a3bc5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0b70008c55e502c072c8afe15cad0d36
SHA1 237e6279d682c4b78c9456f611d124e830454fd6
SHA256 cdd46075e5b60d90af79757bcb10c968bef536efb5ab49bceb52798d70ad009e
SHA512 f5a4ae981901e2950207e607c52e73ab339a04a59f364243d35c3900b44d5ed5f7514ab805b13c2a1a48d31f5f2c9ee7fa3e20090bfe50c57bad9490570e1e85

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\Tiktok BOT by Arabe & Dinaston.exe

MD5 544b5b231d6e98eedc628e97450ad863
SHA1 73a957371adcad845905906f1195d58ca82955b2
SHA256 02f02a5f50e086aceefb647e19c9ffb5611098c48fdaf89ed994df2caa9dbba2
SHA512 6343880efaf5f427388242b414caf38cec8f1c8e72c202f2faa544627b1443f24e5fcd7f15a460d27e5fb5cf551b23e332e08fdcf335d5be822d386073be6969

memory/5128-5736-0x0000000000CD0000-0x0000000000CEA000-memory.dmp

memory/5128-5737-0x0000000005650000-0x00000000056EC000-memory.dmp

memory/5128-5738-0x0000000005CD0000-0x0000000006276000-memory.dmp

memory/5128-5739-0x00000000057C0000-0x0000000005852000-memory.dmp

memory/5128-5740-0x0000000005770000-0x000000000577A000-memory.dmp

memory/5128-5741-0x00000000058C0000-0x0000000005916000-memory.dmp

memory/2100-5744-0x0000000000C40000-0x0000000000C54000-memory.dmp

memory/2100-5748-0x0000000007530000-0x00000000075AE000-memory.dmp

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\tb.exe

MD5 e06fc703f6562461eff5d4b4f85d8ab8
SHA1 f63c501039e6537bd68232dd62face2a393e3186
SHA256 378efd2c03c7e118e5230750d2f2e95ac1a47766383326ac26c5fa566ded051a
SHA512 34faa341644b971df75a2f8505f785665dde8c41c7465863a6bbf32f62807cd7db59a68e9858e0d40164dbd943fd415a8ab15ba9a2b6aa8dc0c2ff0236fee9a1

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\VCRUNTIME140.dll

MD5 a87575e7cf8967e481241f13940ee4f7
SHA1 879098b8a353a39e16c79e6479195d43ce98629e
SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
SHA512 e112f267ae4c9a592d0dd2a19b50187eb13e25f23ded74c2e6ccde458bcdaee99f4e3e0a00baf0e3362167ae7b7fe4f96ecbcd265cc584c1c3a4d1ac316e92f0

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\TIKTOk BOT\data\python310.dll

MD5 316ce972b0104d68847ab38aba3de06a
SHA1 ca1e227fd7f1cfb1382102320dadef683213024b
SHA256 34f0e44a0d089587e1ea48c1cc4c3164a1819c6db27a7c1b746af46d6388c26e
SHA512 a11da6590a71d977c62b1c26c275763413f6a455e6d85fa052654d05d845dbbe8122bbd8e0a23887f9873d4291382ebbd5df19674ad2dda1cf0ff3206054939b

memory/6216-5756-0x0000000005390000-0x00000000053C6000-memory.dmp

memory/6216-5757-0x0000000005C50000-0x000000000631A000-memory.dmp

memory/6216-5758-0x0000000005BC0000-0x0000000005BE2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_0vc0bm2x.d5e.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/6216-5764-0x0000000006390000-0x00000000063F6000-memory.dmp

memory/6216-5765-0x0000000006400000-0x0000000006466000-memory.dmp

memory/6216-5770-0x0000000006570000-0x00000000068C7000-memory.dmp

memory/6216-5771-0x00000000069E0000-0x00000000069FE000-memory.dmp

memory/6216-5772-0x0000000006A30000-0x0000000006A7C000-memory.dmp

C:\Windows\IMF\Runtime Explorer.exe

MD5 03f5e0141f4519f0c5ac26ce0b036a0f
SHA1 4f7a2a230e7a194a898cc9f2d563ac8777fe99c0
SHA256 78a408c628e33e3332645f480ee7ce01b5dc24fc96cf16ffa0868d43f3d421ef
SHA512 86a68f040654006e06b51c5714e0d7168d0d1bef7f3c39843632068104f773f771d21be4bc251d712f3e915cd1058f89ad31d9e3f3d9e7cf6da6785cbf22d8d7

C:\Windows\IMF\Windows Services.exe

MD5 ad0ce1302147fbdfecaec58480eb9cf9
SHA1 874efbc76e5f91bc1425a43ea19400340f98d42b
SHA256 2c339b52b82e73b4698a0110cdfe310c00c5c69078e9e1bd6fa1308652bf82a3
SHA512 adccd5520e01b673c2fc5c451305fe31b1a3e74891aece558f75fefc50218adf1fb81bb8c7f19969929d3fecb0fdb2cb5b564400d51e0a5a1ad8d5bc2d4eed53

C:\Windows\IMF\Secure System Shell.exe

MD5 7d0c7359e5b2daa5665d01afdc98cc00
SHA1 c3cc830c8ffd0f53f28d89dcd9f3426be87085cb
SHA256 f1abd5ab03189e82971513e6ca04bd372fcf234d670079888f01cf4addd49809
SHA512 a8f82b11b045d8dd744506f4f56f3382b33a03684a6aebc91a02ea901c101b91cb43b7d0213f72f39cbb22f616ecd5de8b9e6c99fb5669f26a3ea6bcb63c8407

memory/2100-5792-0x0000000007190000-0x0000000007206000-memory.dmp

memory/2100-5793-0x0000000007170000-0x000000000718E000-memory.dmp

memory/6216-5823-0x0000000007C20000-0x0000000007CC3000-memory.dmp

memory/6356-5824-0x0000000000410000-0x0000000000422000-memory.dmp

memory/6216-5819-0x0000000007C00000-0x0000000007C1E000-memory.dmp

memory/6216-5809-0x000000006FFA0000-0x000000006FFEC000-memory.dmp

memory/6216-5807-0x0000000007BC0000-0x0000000007BF2000-memory.dmp

memory/6216-5826-0x0000000007D50000-0x0000000007D6A000-memory.dmp

memory/6216-5825-0x0000000008390000-0x0000000008A0A000-memory.dmp

memory/6216-5827-0x0000000007DB0000-0x0000000007DBA000-memory.dmp

memory/6216-5828-0x0000000007FC0000-0x0000000008056000-memory.dmp

memory/6716-5833-0x0000000000610000-0x0000000000622000-memory.dmp

memory/4928-5847-0x000000006FFA0000-0x000000006FFEC000-memory.dmp

memory/4928-5857-0x0000000007370000-0x0000000007413000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 a1c68c4d91e1500a4463aeeb412eea7e
SHA1 a5e240f112f34e5a4b90c47696d5b820839e5786
SHA256 7b3f1d64b2d7a2a407fb186927e6372a543b48bb9f978879ceecf470c07d28ef
SHA512 63a89b7250158a963f3df58d38d77e5331f56a083c498fb660f6d530a4882a7dcd34d456ab6a770cd041482f0a47edbcdeb9fc90bf53965c01493284d9870da2

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log

MD5 f811272c20ff6decbbd16ff364334427
SHA1 cb31be66c972daa61d45920fa2fa824c1dfb194d
SHA256 730aff8c9e430a9f9e5e44f1c376e57f42fa5adc744824df2f69855009473592
SHA512 5c68bf3a41c3607cad5abe94f2bb3816f3e69426fa7d43bf7c9787c4e9ce6660b1843a2e505a22a93d7008b76fc564078513fe9ef47051e5b6fc344ab9d0a528

C:\Users\Admin\Desktop\Bots - Traffic - Automatic Tools\NinjaGram 7.0.3\Setup.exe

MD5 b0b393c3b019d292e7649dc93bf46185
SHA1 56483ba39f15a37552ba9b16d8cfa7f2ca27d646
SHA256 01dce8331911b8751d8aa8b81e3b8f1f735d8e7d65250998dae39a721b22cf52
SHA512 49c9db706c3cf3a4b6f44c6a61b7c19a7b5995c3c5e59d63627e92d5459410605665dc75f172a4bb47808b8a480bb0302ea6e92617503e35d32cfeea08f6c73e

memory/4664-5863-0x0000000000DC0000-0x0000000000DF6000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Launcher.exe.log

MD5 bd76295661516015cc654d284dc2c276
SHA1 66f835bf0b154292d8ad17212a0feabc5f4f1a18
SHA256 aeef561f6ece2de3d114091d2304534b65152dfee9e195c80876477344422f12
SHA512 0aa544e8684fe8b668623d5668a82abc590938c60fbbfd4959a8e8b1cb16d96858824d170a174b2084569b2756a97ce1b825d588a8a5b3cd4ed040182bcad5fc

memory/4152-5870-0x0000000000400000-0x0000000000415000-memory.dmp

memory/992-5911-0x0000000000400000-0x00000000004BF000-memory.dmp

memory/4152-5910-0x0000000000400000-0x0000000000415000-memory.dmp

C:\Program Files (x86)\NinjaGram\NinjaGram.exe

MD5 3c4f65784fa91f626c59568a465362a8
SHA1 63d8e46342c574bb090d341c8b6235b36156a14e
SHA256 ec3d1ac766fc4197b36e98191eddc51b2592f55c5626e52b87ea13a544bea2f9
SHA512 759e0e2c2d099e78c3f3235dd7d2e414560497f8d436f66d70c6966f54c1672f21391c78158a0d2394ba2cd959de9da7ea62b00a462422c9bbabf33917c189a3

C:\Program Files (x86)\NinjaGram\unins000.exe

MD5 c291140e39de950ee6059860290d230a
SHA1 8dece2956868398a75d2603593872383bb8e4d1a
SHA256 37efdef033cb32b48796bd90719366427c9c6e0497947439fc01385ac377a579
SHA512 e413b2ba9ae753f4e6c66998861f96f59d64e507d3b26ec2af5367bbf9facb3ce5687fd0257ec36126f770ad836b31a58b81eaac4fdcf6e3b0f737b1268e30d7

memory/7020-5932-0x00000000007E0000-0x0000000000B1C000-memory.dmp

memory/7020-5939-0x0000000006D70000-0x0000000006DE4000-memory.dmp

memory/7020-5940-0x00000000071F0000-0x0000000007264000-memory.dmp

memory/7020-5942-0x0000000007720000-0x0000000007BC4000-memory.dmp

memory/992-5943-0x0000000000400000-0x00000000004BF000-memory.dmp

memory/4152-5944-0x0000000000400000-0x0000000000415000-memory.dmp

memory/7020-5945-0x000000000AAC0000-0x000000000AE68000-memory.dmp

memory/7020-5946-0x000000000DFC0000-0x0000000011102000-memory.dmp

memory/7020-5947-0x000000000AE70000-0x000000000B1E0000-memory.dmp

memory/7020-5951-0x000000000B780000-0x000000000BAD7000-memory.dmp

memory/7020-5953-0x000000000BBF0000-0x000000000BCFC000-memory.dmp

memory/7020-5955-0x000000000BB90000-0x000000000BBDC000-memory.dmp

memory/7020-5954-0x000000000BDF0000-0x000000000BED3000-memory.dmp

memory/7020-5959-0x000000000C660000-0x000000000C681000-memory.dmp

memory/7020-5958-0x000000000C6A0000-0x000000000C6DC000-memory.dmp

C:\Users\Admin\AppData\Local\NinjaGram\NinjaGram.exe_Url_ivzveptvguw1ovc24c1gmsumb2yk0c1o\7.0.3.0\user.config

MD5 e2428c9fe0b0a206767f57488642bdc1
SHA1 66f1decdbf8bb7628cd1565bc694de3d941fd58f
SHA256 8f0aa810d6399c21089dd6d27281b3ca97a49b332058f27b9ed3b7934d7f7b99
SHA512 b60e91510fe48185260c9b95b59b5e3f7f707252de7c996f6616f45e7f63dea654baccb01cc640ba135dcc22aeb5fce4780ed1a55e42a48342f1599b39c14bdf

C:\Users\Admin\AppData\Local\NinjaGram\NinjaGram.exe_Url_ivzveptvguw1ovc24c1gmsumb2yk0c1o\7.0.3.0\y4wpuz3w.newcfg

MD5 9497a2581f908091a14672e6691aee9b
SHA1 d794149f14074c933924e913e8987ba1d80c285b
SHA256 6c61171bb29a9cd9fcf495fabc630e8d7282fca22c3aa37adf85f40a4e707863
SHA512 e5948b9c5685a7e19dc05076fa3e9908ec5999e8a41b25cff4ebec80d3d39b2a7ded6c6e645435d829df5f770f90881afaa6688e961944277b1b711690ed2b38

C:\Users\Admin\AppData\Local\NinjaGram\NinjaGram.exe_Url_ivzveptvguw1ovc24c1gmsumb2yk0c1o\7.0.3.0\user.config

MD5 4e5ff3e85c8c3b521ae3e78a6ef07751
SHA1 b093682556ee4ee5762ef53cdf1ff32e0e9180c8
SHA256 10c488eb62600817ab91b3001e2156e0c6209e4c61919307ea282169ba94c855
SHA512 d96364c3ec507ef4589dcb3b715c74f812bfbe7c1616a7a62e82cb5338b40e9a190809a51cd63d13be49da4016fd79363efbde4064c432ab22df2bd09b68c037

memory/7020-6029-0x000000000CBD0000-0x000000000CDBE000-memory.dmp

memory/7020-6030-0x000000000C9F0000-0x000000000CA2C000-memory.dmp

memory/7020-6031-0x000000000CA40000-0x000000000CB4E000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 c8ea7922994add999bb9dc3575027f18
SHA1 6475ffc8ac5ce346b6b7f20814dc9dfa70de68b5
SHA256 135b64df74226b4474cfcd00889ab1cd79e597f28f71cd8a97f87c52eccc317a
SHA512 19472d69b43565aff54a79af580a59fd1b5386df0c73eff256b7563c31a03c71881c8e61feea31cecbe70f2aeb7f960bfa11d4319b6be0752f346120042e03e4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 3af22fa343815a370c466163bc9fe6f2
SHA1 d2ca51f56c4bef50ea616b2fbe91aba38207253e
SHA256 f0c85b13915185cc0ce3dcc5a1b5e5128a7954fab491836f2a0b1f477d2273b3
SHA512 57d29876a38d6aa8251a76f697205b31fe3e27380e6704f05206a276f5f7a5e6f008e30ab084019da03513cc231e37a5fe507e9ca4be36b5d1bf74cda211b493

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 48138bb44418cbdfba8cd49c11af6d71
SHA1 68cb40e5a29fc3095d81a2da97f23d88f6425925
SHA256 82b39b4655129f4c7392c70356e313e22d646a0213ddffed3e0c840a4fe4e479
SHA512 65812a7606a68eb724069896a4cabbd666763a95c71f526dae96c6ec650577999725be28bf742dc65ef7085cd1c0bf60586c6658f6774d7579a6b30ea37a5da8

memory/7020-6059-0x0000000011F50000-0x0000000012568000-memory.dmp

memory/7020-6060-0x0000000011570000-0x000000001163E000-memory.dmp

C:\ProgramData\IsolatedStorage\osqhrubr.ims\0ag0jked.qno\StrongName.eqtxup5a0qal3oexw2jfyahqzm0cap2a\identity.dat

MD5 b83cb0f89b70c06342865b23b2aa1181
SHA1 c1ac34190fcf1c9353935255560bd8e3273eed09
SHA256 dc3ae3122326f83c081a4c4c06a16dcc1a591677853b38b565731d3db555a517
SHA512 c452b2d8210541b5c1e84ba9be578640f93a72ccbcc4ba191571f8aae912bd732e195380dc8996dc5c866f950d39af93dbdbfeee0a33af1a32749bde730d888f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\etc817bi.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

MD5 4c21f87908875c67a3b8bf5cb1a248fe
SHA1 6462942412c31f7b26edb49b16fb8f45a610b08a
SHA256 dd3ac321b8542d52c27df0e96c7efe19863ef739aafb12d71bddc72e2c9dd48a
SHA512 c61ce4af595dcc4fab7d76066b196972b622b55427022f8bb78d0c56ee35fd43d43e385f6b498d0ab9d314f01a7912f69aacd39f1419acab0c92f4f98dcaf02f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 7d5957e57224bb50eed2c0178d956e14
SHA1 6fee17c31e9c03d7ab9c662d8c263027f005b2c8
SHA256 e35bf7509ecd9f6fed0c449eafbf344aaac7a26d033b2e2fd3b5f3ab780a5b26
SHA512 e96ce7999fa932532e7bd50c4abd857561dfa001c9970f66865595de99fb2d3c3657ce38cc142b11c9421bc11b64c7f4da044407367520ff20a781930f6d99a1

C:\Users\Admin\AppData\Local\NinjaGram\NinjaGram.exe_Url_ivzveptvguw1ovc24c1gmsumb2yk0c1o\7.0.3.0\qvwm2mik.newcfg

MD5 cab2d5cdec64c8472ae6f3725ac70f7e
SHA1 e51b7ff9879324d41fbf044794eb3ae7c7d8d298
SHA256 901610fd3be724b173ec4f730dc156affd4b5e701eb890874c15f33bb9f287b1
SHA512 bf7dddeaf9a90b4a01227419dce2853ba224de7f7d09890300e3604a0ba991d1dbf8f3c66ae7bd06a42cb0e7da588199c6364d7e0bdde9dd9f1a8106f580e6fc

memory/7128-6121-0x0000000010000000-0x0000000010060000-memory.dmp

memory/7128-6129-0x0000000002C30000-0x0000000002C71000-memory.dmp

memory/7128-6136-0x0000000000400000-0x0000000000473000-memory.dmp

memory/7128-6135-0x0000000002C30000-0x0000000002C71000-memory.dmp

memory/7128-6128-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6145-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6144-0x0000000000400000-0x0000000000473000-memory.dmp

memory/5520-6147-0x0000000000A40000-0x0000000000A41000-memory.dmp

memory/5520-6149-0x0000000002C30000-0x0000000002C31000-memory.dmp

memory/5520-6148-0x0000000002C20000-0x0000000002C21000-memory.dmp

memory/5520-6150-0x0000000002C70000-0x0000000002C9E000-memory.dmp

memory/5520-6151-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6152-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6154-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6156-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6175-0x0000000010000000-0x0000000010060000-memory.dmp

memory/5520-6173-0x0000000010000000-0x0000000010060000-memory.dmp

C:\Users\Admin\AppData\Local\NinjaGram\NinjaGram.exe_Url_ivzveptvguw1ovc24c1gmsumb2yk0c1o\7.0.3.0\dxh4wqnm.newcfg

MD5 2392c904f53d58ab1a6cd8f3b0fab864
SHA1 2e0d0273687f62ae5c8907a5211d7cec5f0db487
SHA256 8c98ec0fd100b5b4d1d7ce55c7a88911c493c9b40dc5a046a76fc815092ca0ac
SHA512 1f530de12121e8fc2086471e0b44a2cf5c69b63f6ba23858708476cea26609e64debf3ab1721b7a1cfdb4618be714875327ace5498c1a02b9a62c7f788afd35a

C:\ProgramData\NinjaGram\eocache_plufax\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\ProgramData\Gibraltar\Local Logs\Index.vdb3

MD5 ac8470eb88bd1ae60779317610b28da8
SHA1 7295ebb8726247e8d0a9e9789bbc67c733427ad9
SHA256 3f806a8aa188ba04cce86cfb6bc6f42943d7e1da89cdfbc48bb460b7c18a93dd
SHA512 5b8d10ec2d9a0c8602c6e377a9f7bf04501b9e8eb737047fcb1792668f35db4749b15134ce303dba4ca8ba7bd55568bd54fb9fb247cba38c96d6c46ee04c55b6

C:\ProgramData\Gibraltar\Local Logs\Index.vdb3

MD5 64e207a39cf3e8ce331d39f833b9105f
SHA1 f44ba2d6f32e19ac3b54dd69493c9ff36140ce94
SHA256 1c8f9bd0e3173a59de83717d5a563ca19ad2fc3469ce2ca9232801c80b40f071
SHA512 b70198e976b2b1bed05f1275c331ed062602ea09c0c37ee5c89ccd7761eec861f6607c90d3ab9ea785a1b79f37ec65a03ef5a532d09223d6f45a643cf5029963

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000001

MD5 6fc521a2c95c44f595f86943d0176610
SHA1 21277bc09ec132e96083a65864fddc4a45673ef4
SHA256 0742fbdf10f581f93f9d27cbf7a5afa3660ca978e7aab064b944f73c614f8d7d
SHA512 f397e8b2b28f4b86e7c2f534d6b8605a3622cd488291136ef5be5bf2c02ed221dd9f1160ca08ffa0052f81c3cbac63969b62b50799e5f073f4873243c50e2f81

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000003

MD5 2804dd63b860b174e9e140988f714f94
SHA1 bb2851deeb016ac7d82de751ceffafbb7b2f7103
SHA256 dfa7747c480aad519ea0d86de30651e435173fbb6aff4c53d0a4546e216a7b03
SHA512 2c78c52ff67efefa90c6aca0a0ff1caefbe3e9f00fbc9658fa7dcbd83cd71a1189f3c1ecc01ba0d75288a4c0a8f547c6e7baab1581b554e1ed05f405980b3756

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000004

MD5 0f55348ab893e5b6bda3cebfac5fa7c3
SHA1 c5e7a0da0e06f14663a8df084e7dccc255c4a6bf
SHA256 e418bb5064d6b8e632042481257937f6569be15e9c39eb80da970cb8e343dc0a
SHA512 a8504a179d4339466b808c99195d4b97d45028b1b249626cefbe60bdd786b8f6995f0d1e8dfcb3a81922f2309a8740862c5ed29d1a59dda9fd851644073912c1

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000007

MD5 804f24bbbdcda4bf1480f6fc496aa45f
SHA1 3cc8354d185a065c41e9cb3171b7f0fcc1b757fb
SHA256 73ed5d5de77b087c72948dd95b6a73ae3e2d6c7df09795c76dfaeebaf6d9b4e6
SHA512 e98ad28f1b59b41e7117ebf8b80b5ae01e3e141b97f230d76d277243bde8f788cca77d18c827b7fb3708f3c9c35a868dd05a13d9e03fc8b4540ac282825716df

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000002

MD5 d3e41fa616c176859a20e3021453ee9e
SHA1 867a76d74ae0204b526d057195f5e48679e94a61
SHA256 ac7d0153f427051f092a584744b518ed8a2a565a5b9298b468dd227c0fdd5f59
SHA512 29fde2c8fe27a5019622bb6e0d42f49c326b8b61cae6fb880984b91b3da752bedc7d7b97c323dd0549e0e95c1b3e1b6ad810c099a774d923963f4c23b8b0b461

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000006

MD5 97a96b819d733446793c81b06cad84b3
SHA1 7ac4ceb269620161176ccdf1f126e8d9b2ff2550
SHA256 c5b04bd3c1493a2945c256228b2a3ed2de0c5755fd566ce3e0e60c732c031d0b
SHA512 04582d2a1692885b7b1a73ed99f2a3c6bd1ff0209a26d8f948602a7edbe4e6ddb4d0ef1da1a715e5c388ff0033fb9caa93c075abfcf513abf59204a2e6ca3d1d

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000005

MD5 b36714c7701d9a93954dbff2c2b686cc
SHA1 7d7cf3bb2ad44a51d38b1b1a8ab61d31692da666
SHA256 e6c3a1c19e51029a08bde5489b83e10cc492b952b1260917d743e620b9526373
SHA512 11be7361dc6cca1afcf333b64bd5479c6716c224ca35e9a3950c67709f3ee70ab950d83ec3ab19e6c24bd5ce5015f16ccdaaaba544cef6cad720425c189a99db

C:\ProgramData\NinjaGram\eocache_plufax\Cache\f_000009

MD5 321537031395b0ae82b6c6f2518119f3
SHA1 9d57269d0fb89f5dc585239102e1cd2b561a32bb
SHA256 50e36472eef4fda9c9719eb5ff98e06cd6dcd2368fd3e32633fae98c24fdab79
SHA512 093ace5bd4d09fcdf2bf99aba43c504e3e5a3e900ce997fdaadd16c5068c4f0be4ad6724b356ade3543e5b92c4377e03b67b9b688e506800bc02f62d9e7f0080

C:\ProgramData\NinjaGram\eocache_plufax\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\ProgramData\NinjaGram\eocache_plufax\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 58a007f0a6fb3f27933ed017f126bc64
SHA1 bba6fecd78e60731b9aa3eb3541f9597bea1eb83
SHA256 b9e2c0ea3aa8bcd04cdf12bc752270539dbc2657b8cafd0d6c14f454a82f9966
SHA512 3f82961d917940445272abf207fffedbfe9ed13ecd9732425f7d4ef00bd7796f94d44944e36d5047ebdc5844a1e62f1746c7d64fc230ed78d074c96e0de8e7bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d1ec4c9a5a42a669d2f455f48f7a2389
SHA1 d0713edcbd03ed5409a6b0c7912e13a2609f85e7
SHA256 c1e1c9c985887e287e65640fbddd840df598ed3e7d277e0125865293ff1a7b7b
SHA512 d57c911f17a948a9d7ce447cc3d1e324fc65530cc6cc95af59bbffb4f3c7e859d74ba00fa3d7aca682c92be0bf8b03a527e3e92057b7d7570f0f4ca7ea0f288e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 414b4e8a727b41017ab183400dd22f1b
SHA1 c2c23d08cd49a85dd536487314e25e770c6bbfa5
SHA256 0294653628710133ea564ab82a6b4880df7e97eb07d02b20eb6d6de57a0227b2
SHA512 66423c2a48b11514fbe6782b23033ed35d8d012cacb3d701e202544cf0c291c91b49c5fbf80d25ffc9a619248632a40b1d454f1fdba1d0ed86266a398997b715

C:\Users\Admin\Downloads\Unconfirmed 805383.crdownload

MD5 228f6e23917e22d7c6fc4c02d7ac7fc7
SHA1 64fc2e2bd888765c5c2b7dae07817c5ac3afd5ed
SHA256 bd8450cfe20371da0352fa110bf9136a996b8523e74763b53b4ea9464b52c53d
SHA512 19885be20e6a416190e582a28654276351949b4597fa598a79b538de6648f6ab6790c49e89b5f0c64a38532564a8cfb3fa82377917909d6036aed3871273c0d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d17c4e0f66d808aa6750eef881689b9b
SHA1 9637bf154e79b6a4cf5641a00f1fd5e4fd605f2c
SHA256 68fcd7f2d152609926a1e44c5730c9c63a42a5eb41faf8542ec7a8514777b1dd
SHA512 a8d61e941e0eaeccf6b4741ac01bd5d3026c0cecf6e942193f23abf030c6fa0b6aae952c9e3ad4f8f033d844757cae596d5b72ece28f9bc8a3649751478fc580

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 422b99208e127a4cd4debb1beec9a820
SHA1 998c8d9040cee5be3cf081fef0ed8bb7a8564e51
SHA256 2a3ed3e6100b1d2a3134dca74e65a4112b04f12c7b75533dfb7b92c13a04ed74
SHA512 8df57915916782be894d4d6ea4401f621d53a0e38bce302d0ed7230f73bce20b26c4c6f43a194600dd849a8c93fca2c9d12ebcfc4ad8277e50ded72cbfb80457

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 b9ff7b692765ccca4376571d3c162958
SHA1 2709ae6bf0887cb169d4d8ad5f24c4d498a511fc
SHA256 0a7d1f6d00d1f3558e7c70293991cd41deafe32ad711b16d164f45fd5df26f25
SHA512 08b16a7672dceb32db5df10fa258cc82195c1a11eed7f1a76c1825c2ed01f71d566ba6a6a7990ebe46a9de7809a3019c246777837603b1b1f776dbdc9e77d7ee

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\BTC BRUTE CHECKER 3.1\d3dcompiler_47.dll

MD5 b0ae3aa9dd1ebd60bdf51cb94834cd04
SHA1 ee2f5726ac140fb42d17aba033d678afaf8c39c1
SHA256 e994847e01a6f1e4cbdc5a864616ac262f67ee4f14db194984661a8d927ab7f4
SHA512 756ebf4fa49029d4343d1bdb86ea71b2d49e20ada6370fd7582515455635c73d37ad0dbdeef456a10ab353a12412ba827ca4d70080743c86c3b42fa0a3152aa3

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\ChromePasswordDecryptor\IronPython.SQLite.dll

MD5 b7efbf654402c78226b8d69ad0011bbb
SHA1 52cc6c9a2a40339ec840cc599240f405e425da14
SHA256 5a6e2eda86e863e155f67cebef095355b7ea7b1dcd97d87e4058f0a5ac60d798
SHA512 496396a301eebc6504dbc57842920649d12dc239c47f81a06079aa8b18ff506545614be5a6f92334c4279eb99b57682cc8033fd99edaf28f041db619993be575

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoChecker\web\js\scripts.min.js

MD5 8f9473193a4c6ea2bbce232cd65ed497
SHA1 3e5711ef6bc6cf0143ed59146ad9ec102fdb56a6
SHA256 322603e11a059c4372fe48bd9d30f9d38c0f2f1d3b8df60a7ce307f58f4f59c8
SHA512 e23e0d227e91f69d71d6f4493e3a1609302adb1f8a245ac637b30720c93a7521387dfcecf74da6c72f8c42077b82ed821f626c9cfe692f46de5503ddd9d24542

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\bench_block.h

MD5 0c1fa94cbfd6d12804458bb7f09b9900
SHA1 74b0937e09995fc389c1f995bc2fd9d8cbd6b21c
SHA256 efe79ac1bd3c3e993c2ae1a445d79d5b0a79e0b24c1f35061db86379ed88cb90
SHA512 bda648e21f3fb6a1aacc011616ec191b84640343e4e37358558bf786976a244055b89f69043b037b0b8018a13a6c8f2a4239265f206887e3a63bb67fe5862b56

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\bitstreams\COPYING_fpgaminer

MD5 16d65cc704bc3e94e828bba932bdc1f5
SHA1 a321e15fd228ccc2b157d6aa67cb4b89166e015f
SHA256 0c5709ee030856bc5cd188d65b9d6a5ea80095673d8bcdfdcf8f7c14dd4ddd1b
SHA512 dbd88a934b727ee9840bfe53109f41e5d95c575bccb6b8076a511c98a58a25e2c56f21df810234bd901455c8ed2fa875414fa2281897c9ca4d7863d7cdfc2ec0

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\bitforce-firmware-flash.c

MD5 f279ffc2dd64b85374408b303e4147bb
SHA1 43bdf2b85da715420920b6b12b65ce1767eed2de
SHA256 b86dddaafc9af0fb83dbddb8b5bb58827375b57918ba88c9aa731265c67b5203
SHA512 52feb708a92491e89c396990cba2b8a91cd92a89e7f4195286bde98a40f06a179bb625d95e725bdb84ca090f5ea4fa34afa3be8a5903d2117f21154393c49635

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\ChangeLog

MD5 0d2afb1cc71e27e346ec325490e57d61
SHA1 e8b0e79d4cab7c9f3f708ba94d66f86b52050839
SHA256 85619188a0b38cd48f9fb9c44680afaf44e4837baac7e74af565d30d9a49af15
SHA512 4358b3fcbdd668e28defe4fd9d6735160fa54e74dc666db2298952f516967c8c0a70795b4f2fcfc29941ae34f816737e0114c2314775e071175b0b441ff425f3

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\cgminer.c

MD5 10bacfd0b58c0fb8ce4cd85578a84c8e
SHA1 6a0d3c9f02d3d7dcf036b0993eb7ca288b58a59b
SHA256 78dc2c0c891a1dd595b881c0a3cd27ee535479a171b2bdb6bd8a5b2139782eb0
SHA512 26d129dc710d18346ecc853961ffde2958cd4754d396786369bb002581c2f490acbb6d95fd4d14d27b90c25c7084751223a8828391ecebfc8e7bc11505e7f7a8

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\c++defs.h

MD5 400c50d9e3b92b5d441ada434a6ac938
SHA1 653f41700c4ea28ca0770bb6815b40504a7a6a4a
SHA256 2ba217174dbdb2b66b6a59a6d97c12c36854afe72e3f69ee445d98a670c63ec4
SHA512 af507934513452016cb01ba552f938ec4aecd01dfd5439444ad563dd02310d7724def5ff0c85f98114a559cfabd1bbaf3982b49559ea69d98e87706890a417db

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\jansson.pc.in

MD5 cfff8269f32d2d5ce6ca4e480ed10d61
SHA1 26e428302f460ebe39d7bc1cd6ff8a5560833574
SHA256 7e8bb11bf7857e73737f7d8c87791d938c41d932e2928260831d3897255c8dee
SHA512 a3a433d995a556e772ada26fcaec19f11f25bd76f453cc3c5491ace2f7a9aa2aadcb51fbbc55a53ecf3254f84def17b6dde1439eb581c684d74f9925bcedfef9

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\Makefile.am

MD5 d584175b6dc0ad542f2c90ddafe41d29
SHA1 4b57e1e989405f546a86d659b6a56376acd66a37
SHA256 909f1325792882b0f9ef7e28664cff8cb18e20465e5c53a6cd89590d9a14144b
SHA512 5efe7e3fceef991f25524fbcad5ee07b617dfd97e0903a85f4cf80a64e727d235705166aa543e0e7915ca8ac1c69ac01b9741226b03794e2893fbe6363b32d53

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\hashtable.c

MD5 78fb293d18bdb9d3f8fb2f16b25cdd30
SHA1 84ed0c694031365ee20e3b1b4aa46601f642898c
SHA256 9e8722ed80247c5aa3df8fbd7e0ccae0ff35d5ad3c695b241e6d1f9e007574c4
SHA512 797a1a5c74a9b93bc9b8859e78c74495a4304ddc8716cad391bbfa3f5c2a783b7d620a589edffcaf320189272208f291432710d9a5d07826f4875372d59738de

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\strbuffer.h

MD5 3a7810e7f6f55647a68e54592a0c3a63
SHA1 7fc76a2b9a736aeccaf8c3f00bcb4f0611a1e6cd
SHA256 32d41731cc0ca9f373007367eecc6200c8970c1297c6f58d7b63b7bc65cfe38a
SHA512 926aa6647ed08cba6c0a5bf9f042bfa7e28397c82d19f29c9f2abb81c523ddb5cf86a9a8841dc4c786e4161fe9c79e17d7a06a1316dd6e30eae2e82359c8964c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\configure.ac

MD5 495b6f3a230dfcf50f3e5a7f1e177ca1
SHA1 691453a7747d9b1a0a4d1782a3d6b7f268bc0ba8
SHA256 f22e08f282fe203c855c3324d83c4131e7890143eaa13fb18e9c3a9ae0847744
SHA512 9dc9cd4e36dcc7ea96797ab85dbd0f0302fc5c213f8ef35e6c1e5b8f013d88dca8f649490565887f6f8dd4baa74a64ee9d3f5eb1777d4ec8c308a38b63a41924

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\poll_windows.c

MD5 4315ae2cc74e9edcad5facf2a63243a7
SHA1 f9e0b145b41e23d9b8f122df6284251c64746425
SHA256 c80df1606bdbc4f4772886648340f44e3276ca1c13d3b4d1b0ad42a01ea1b4c0
SHA512 f54669acaff86d9ce50294e0129333a9d4bfeafc891dc6cfa995d6d27b934b7f7e7aeccc46a07825995e79cf7383f1af4f831bdef14a210450f48e47179de5ee

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bitforce.c

MD5 bf09c140d2da1983ce9bfa5ec2b42c21
SHA1 348110e159c7bfb8a4a79b006cc05f9607102710
SHA256 4d96a84b492d7e0e2b00003394398f9189bef845ea44354c14ff78bc4c4de242
SHA512 560165df93c3e1bed865bd0b9880d26e33256cdffbb7ed74d187aa9879d670235e3c3d0559d928ba8638398dd71f8cab2cb77f122f7ea5ed55df97e016487b3a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\example.conf

MD5 2b88462e9b5e6e3a73ccb2c39ac15cbf
SHA1 26d2cc64e8db381dfb408d9c179461b64939f583
SHA256 31c6b8bf717bc0c83d131d1c23fcbbb8c9382a90cbc76432232084b504f49eaa
SHA512 19c48b84fce573a9204a034f5b76092603a1720f426d5785c9fe686481a945743771989f5eebdd9dd80c63a227306dbedc803068e0674521ad450c89ce4dab54

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\memmem.m4

MD5 16d875a200f79b2d3eac113bd8c52c4e
SHA1 43860985883142e2a45654eb6add57924cd403a9
SHA256 c4f74fcff30b8cde2c99eaff9ef0f99d9f7c3c737c4c21cb677a233ca784a485
SHA512 35281fda811f9a37c1c560cd614abb651d60c0358613b629c55c9100b665fac658a2402f18065e3ba95c89523c169fb9949862b250bd4922994254cb602843ef

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\wchar_t.m4

MD5 f3ead1eb995404b2157b309a25b0f06b
SHA1 ce3094e51183fb58a34d17e40e7a61d136fc8c83
SHA256 73253b622acce67186fbfc33cb535c8d4144793dcbcf9dddbde7ab2099bd823f
SHA512 f90c7a63ed39b823e730e823406fb73394dfeec67c1d768199ea745f1728af203300ac4c34637bd5aec0371744a663346186d05da40ddecd498acc77f6a646a8

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\warn-on-use.m4

MD5 707148bc81d7a8a76a3c7d7c96ead965
SHA1 28bc5e2c774ee0f61bd80782d1e85e59cc137b6e
SHA256 de94af6b5bfa4b58cbeb1d8bf56cc6b1d181d2c9cc8b84f016f4bc558f1672b7
SHA512 d9569f5e8240752f4fd60185c7781d80ce4a2c11f8860d931158eb89fa65964325c8350bcdacec70e052b075e8e4584c2ac4bbd3e8ee88371c7365fb58829dc4

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\string_h.m4

MD5 a71b9295470bb7bfcd93e59de1625057
SHA1 975ae27de32ffc5d4e4c5dca32c7595a05319da5
SHA256 d459989a6d606f8c3c13c4d03a37ef9be191eaf1a73f486449e83c3222a6ee66
SHA512 7c955cd461f136adfe0dedb0266cb0914de77a67f3a9c409b2f60f1cd8e7775e321113f4ba4c7e7335f0f5e29eed6e4151489b9b8c6e935a7e9f5e15856bb7e4

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\HA CRYPTO V1.0\mfc100cht.dll

MD5 61a56eb574daa6ceab692f98be3e5bb6
SHA1 b52aa36e1a2594fe0ac97ee0b867df822d223b76
SHA256 928f0528706576c2f7211e98462e87e03bfc14eb7a84ca3531f45ce1d9f080a3
SHA512 0b787be453e7d55b810e3075ab96e9f07a7f4a10d34c9082f17c26db0578a7199ddfccf1749c87c97541f9484908e59b1a237361b92123f98880dc5835173124

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\SkinSoft.VisualStyler.dll

MD5 2d84a619d4bd339f860cb48af0c9b6c8
SHA1 05e520126ee1100c98263bfbd5a6ff0ce6ace4f7
SHA256 365ffde7df914840eb21c96f34c39912a4b031e3814b8e902b67acee6dff65a1
SHA512 bd0c5e8b018ae393a5f2b92b4a10b5b674ca466074d18b4f86b12cbe9a6a520a95323146cb8e5226b1698f14efcc63addf0df421677b7f5ba3c8d94dbcb511d0

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\commands\xNet.dll

MD5 3df8d87a482efad957d83819adb3020f
SHA1 f5b710581355ac5d0de7a36446b93533232144db
SHA256 2ac175b4d44245ee8e7aee9cc36df86925ef903d8516f20a2c51d84e35f23da4
SHA512 da28c34a85a6530b1c558fa11b0e71e70710d719cd8ceaf81f954d1fe3927ec139bee6c5f3135425cc5220905240f1a31d831611c46d18f5d52600b607ea59a6

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\stdint.m4

MD5 a7c0b316966f998f97c3366381bf3449
SHA1 ad9db17786f6b46f7cee4699b7ee6c3d09a1dddd
SHA256 a9527b915a67e4bdf318a7301b395a7e7a87f4b7d83ae0025ef27edd86ba3c32
SHA512 56a1dfeae4aace257217f1d759f3eb69cb268a8c5a3997b1cbe79554db068ba463b272d8b2eea646100e73cf9acb4000e2dd673d6b1936dd0276bff3db869abd

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\stddef_h.m4

MD5 4f4227455c9de184e09277afefa485c5
SHA1 072319a0990bc7f2dcdc6f65b8d5e76be5f5f0e0
SHA256 40b66a260dda2beeb0bd4e17af36d6e002ad83856980811f8796498207b2edff
SHA512 004be5611606ee1935e2982eb3cf14febdd59e20ce34e3eaa7b8c0d715d97f74af6fc9503ce98c31ba3e4d9bcd4ad18adf6cc535fa45ed18863367b1d8bdf46f

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\signal_h.m4

MD5 a0e0e447c3fd634f1ea9890b99e7c694
SHA1 1053e9e23bb24c28f34af27129876f0ef5de7b36
SHA256 8348671f9a3e0b7ae3e582afdffb8c377d2c84478805f591aa6faf57e784e60f
SHA512 96e82359b7f1fb948786e25cce894a9395b6965d3c0e0ca9066df4dc75d0b04e9d857dd2eb72804c8a7ca5d2f720e94c8c7040174c75e78be50f1e927e9601e3

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\signalblocking.m4

MD5 6f1cc00401993ed3d45e379efa418d26
SHA1 4073d295b326d784d58f09444f3a45af8e8d0651
SHA256 7717474c8ac9a5960bc6d7da9e261875563b021154d27845a3d30ae5656b6061
SHA512 527ae05653eeadad472a7ea6ba538b345ce2efef9bdd0388042d45d89e035f1509ddcfb6e5daff947570122334507442af6a141407dcb15f1ce51384d36069dc

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\sigaction.m4

MD5 8a9290e3b9a884439643f715acc1f2c9
SHA1 4c0fd664d99283c779ce13871f0b502302f63156
SHA256 61c2fc49765a27e423d0b9cf9ac3c05ee156594575a9170d8661d364fa3880dc
SHA512 44138d5f72bbd7b5aa6cfd195ead45fa96db1c51fef760d9665358cb5d1f12b92c5198e7041315f1afedf916c17845b93b94e49a693caa7fe4fad5b6d73d0743

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\onceonly.m4

MD5 f7f29c16af89225296d921287278e287
SHA1 887f4a15951647429ac42715e330a77a2e85bcb9
SHA256 d57e238c41071470805e90730566ec5b2a75a8ad902054c803b3c607768db599
SHA512 0f2ee825580063ddcf8fac7c8e97423839ccb1acf2c50d99b8a9b48ba8635a792ddd7a187e4eb3553d91f550917cf8dd0522868dc65e31f39149b1ee669e2f12

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\multiarch.m4

MD5 84783de4429a331e49f61af812002f59
SHA1 62da52a02548710b4660f306bad82c4b45fce86f
SHA256 48a819719513df0932fed8d549bbc379b75d90d1094acde4d5a24d61f8ad4692
SHA512 ca1d68250089caa423d231a551a3a439f7e15de0d276338372f96b584a4911c1d1d80cbedf8278337e0fb60a08e62c39cd3de02818ded1e2cf916dcb1f107175

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\mmap-anon.m4

MD5 559fd41e8d9d536741018fe39f92b1ae
SHA1 fdedcb1c872e9588f92c31317bf227ac008f7b3c
SHA256 247b3fb020d5f089fd1b6b76fb9b785a8012d1d7b378689d65d3606c54a47f97
SHA512 205a3e960489a6d145c3580e989648014c2d9bc085299b41528cd38a810bcf6179ce137cda3e94a39f3dc3675e7fb906fe7840534c9aa1f5e916a8d4d50b3d89

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\memchr.m4

MD5 59a942faf1c16ffa235f3fe4c92f164b
SHA1 4691295995d1d1e5699fd3adf760281a61287888
SHA256 9f6996d84caf4fa91010c3bcaafece7f0d8e9ade75938ceb66c0c9e859a88192
SHA512 cbef66b5bb9b7430382b76995a6dcb7bfb0f4ec7a7ee1a029c210a551d9bd36ec7e412a8e49235ccde68ae151cceafcf4131d6d26109f5c5eca898179bb980c6

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\Haasbot 3.1.1 Cracked by Zy3r\extensions\strategies\crossover_vwap\example_sims\vwapmax100.html

MD5 b93d857f0edb3f515e9b57f9da6b1050
SHA1 d857e8aef754c63a695d0f21889bd1be88b2fc93
SHA256 475dc2329682d645bbccdc07caae171d27996005302faecd69ae7f2683a488ec
SHA512 63953dfbb70f46fe76ad7492ee194c80d71b54d968fa4a485bfbb0c5078e4056cd3309f8a9d90fc7b877eeca47b1d81e98e3b1a82d03b2ca6a3afb64b1922dfe

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\longlong.m4

MD5 a5f85fa69abb1007ef75734014003fa0
SHA1 c11ba4d043cb4c07210b65152e46d8592ba7334a
SHA256 89aba26e3b83672deedd66bd7a535b8e960e0945ead193b7f22f5a989fb7b1dc
SHA512 51b29149a31ac3e6dc28f10df0d926e87d1e7ff1f076975bd1160b48b22d1d687d2abe9bd865e3bd644a9f4e08d5709e1e40b267b0261652ebfecd56c905e17e

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\include_next.m4

MD5 2004e93d1885735b0c9ca99164220100
SHA1 c2ab94c12a6e758110847899a9317838cb81a869
SHA256 4f49e77e68f04e49336c4eb1d0a789aceaa6dd5c9f009dd6d5d8b3ef15bb2c5b
SHA512 ceee7c05585abed030ee9ae1fcff28c3865795482d48a9551d07586676602c4ceac711681afb1188200a29a436d5c72d3e4df2f6ec3861260f51bdf36320f4e6

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\gnulib-tool.m4

MD5 5fa93cc36d93441c1b5142521ead79c9
SHA1 e43c0835730b7dd1d3e5a57fb66a20e216049e3a
SHA256 2ee6b51ef9144de7aead6fe269c599788f2fd3bdaa4602628c04889000919b6d
SHA512 141790edbf58af5c4d5b465fa8d74bfdd6e5c3f57806aa70e7ffa599d4f041125d2d76764627098f19355a9575fb7d3accf8fe89a460483eb475bbd854102618

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\gnulib-comp.m4

MD5 a54bd28845121ae1a1deebb285fa80ba
SHA1 862d0a97c6e08919dfa13d5a6c0c4323126a68f0
SHA256 012a194f9f2f71e4a77c064f56c9bc2ad0d258b84bb90b9a2a05a9083cb9189b
SHA512 9a0f64f616fe3ba0da48c2aa8dc6bfeaeba6df82f61a77a58ee8dbb32b5af98fa34dd20b219898e10a5c35b14ea8d6499a2b3084085f16f6dfc6965301929aee

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\gnulib-common.m4

MD5 c86fa0354e72af132a58a4c61c12f184
SHA1 5ab0151e65f26a9ef6e5d113876f91978458478e
SHA256 8034d434f8cb7716f3e0739b0140dcc10141fe040facfbd26c6b3ebaba74005d
SHA512 1b3ce46ab8dd7fa917aa7c487adc623f6905abbbcccbbc8d05cb898fe3e2a415d52c6e76e5fa1c1dd414597f6afc856fff3a816d8bd92555c8dc604ed5fee6d3

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\gnulib-cache.m4

MD5 b838d78d285a0bc0a90540d4a553ac54
SHA1 e25b0a0d2db2ce53585d0bdcc1dc44dc67b5cbb3
SHA256 a4f1586ad27b3e97b48d5978afe07432aab1594cce4002c9e68f0feffde51933
SHA512 922bc5b6c4606d10231b4959ebe81347bd43b006d8028aedb261c908a5587e7913f06356fc5e63c235b3a27558eb03d0c624353ac3a7778c7b95e84f45d9ccf3

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\extensions.m4

MD5 1e3fd65ae5b4af1a7eb77d41c7b3a3d7
SHA1 40c9a0dfb1e01969a4878027540241616482a85d
SHA256 b71cb2582a39a302c53ffe7d475f1daaac8d820651b0ced37a033cc3d91450d9
SHA512 bd73a87d6ef22d77fe5ef5fc3553f43050eb33e961f592cae2e117ac0b8307e58112c88f09225d384f0ad61169b6afda8bb4c182efaf5d5f688c6603abb2fd6f

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\m4\00gnulib.m4

MD5 effb854bab9e8044e42d5ed818b3dcce
SHA1 703ad1a7afd356b90dc492904eabe619270931a5
SHA256 a4c49556d0ec352d4e67df11ade8fc8fb65cde06e7c1d90262290873edf31252
SHA512 178c4685f6a2fafa0cd0cc52fb4c21ef91dcac50fe7a6e92b03f990c3bfd7cfe2cc3d279adf88d9170153ba3f2bd046c93953deee5fc8e13b0e16c863d86da93

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\string.in.h

MD5 538a43b5108fe936ccb9b0637bc5df4c
SHA1 070ec9c846d00e273aeb951cc8b6177492940c9b
SHA256 659eda865b220c5ed15041f95cc5c1e05692eaa2a04dc428b744487d93a60fda
SHA512 674eceea5577db745e01afad9e2d3e2423b8b242d0ee93c9b7a0dce8c4836dcfbfb70ba09ea97f5c1825f9d3106429210a29c6453a041cee4ad0e21924d4ed85

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\str-two-way.h

MD5 7bebe4dbc4ffc340b2408ff6500f379c
SHA1 19d533826da67f8ff4bd5aceaf26edad6ca5e4d4
SHA256 5d242fb879353af72b664a7aaa2439a5b205bf20d8997ef1f3d80ac3d24767e7
SHA512 fb88fe4855e10d6c4989a932af92f1d79045408ada8d3d34eb43eb06678e41e73791fe277bc1a1dcb8a8f02ae610b052cb7c9dba3831d31dd17bf5fd4264a000

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\stdint.in.h

MD5 e3f9b4567a9eb7a737e0eb1721f82ef9
SHA1 0c2f3eb72b28e471bf6303a5de681a6a400ba700
SHA256 13d6110955c4aefad085933fa619acbc252a6d6da79e1ebec182675540c7101f
SHA512 39b78b25d365c75947bbdf4de163261a737e6a80093bbd3687aa8c6ddc3229be636d27bc5d73a91e3ac927a801cee1cfcf194d95909d2d82747105d4827e147b

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\stddef.in.h

MD5 bc81fc3cb34549eb51bdbf658cb7a237
SHA1 dc6aa38c5a65a93244df57938b5125d934718972
SHA256 58aa0b9ab2724f9bac055eee5d3ff18841ed31222b0d0e8f01267ef1cb6037c8
SHA512 243a3795f9f79c3ab51b033b4f6e95ac3e355bd925163b2bdd5e12346fdea728e613025eccaddbddd340b3b5bfcfcb3b3f6d8cc7b89fb2b10081b8c672d0df6e

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\sigprocmask.c

MD5 6f30cfc70dbc375c2af5353e484a5b23
SHA1 e3aea06cd25e725a2aa8da772027d6cfc7d2bd1b
SHA256 19998cf7a33dd67015632d578597d51bc131ff9d7ce123b4548e132463c4e46e
SHA512 b76e9777244f9bd8d42a9c33219d7ad4cfc7174fa1b150ebad4752d07b974aa466158b5a6aaced765e06798ca4b9e3a3937620c17ca1d1476358b9e884830a65

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\signal.in.h

MD5 05fb8e7eff39b0809e83fd32278cf8b9
SHA1 42731fa5a5f5b4e89e7056226bb2422c85f43762
SHA256 67d9129d6982c2088882aaebee261ffc557a58279cfc3691d11cc9b7d64ef9c6
SHA512 adf1dc4efb1d8dee86bfc189dff8b62bf70d4a568bf87f55c0f50e76d6c436eda7b50b1221714359d5e8a6b9402ebbc51114ce1e5f6487a6dcb3c94f0131be34

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\sigaction.c

MD5 494afba0df6da54bd5e3d36fac0cbf20
SHA1 b9c3cc577f244c16e451e80fe848090a3522c929
SHA256 e62ce4ad44fabd834e32782ab4eb60c4210a62fbb3118d85d43c628683f05026
SHA512 0e9dcf856a8ceac2ea6d9247b80634b57870a3115d3419e3bfd18bcc32d5aa610076adadd4f1b9bd9602f8ef211904d752b34fabcac9399ad4a8b7b53f1fff30

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\sig-handler.h

MD5 0f3392359d57235423163ba957577283
SHA1 236ae5d69ba78979e10cd59a66522a340bd8699d
SHA256 4a0012d75a574119d955c313a71d72cd3ceccddf7ea963635fb016251775acf3
SHA512 54f5d8faee50ec2b1d265fe49b4822e93c5937b1ae0eadffa524d0ffedbbaba3353694e5f1d5068db8a2ec3100305819e92991dfe1b7968e6972c718ce3ca336

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\memmem.c

MD5 5fe85d6b303d8460131a522f6e9c377e
SHA1 3694fd47b1afe6099282a074763c4da019b5c013
SHA256 de9950b5696b282527c20cbb679196f0c7a106ed49ede802792c69283079a79b
SHA512 4da3b9273172ebc50d42fb4d640f6a9341b22cfd4c618c2b4fc9bedcf379d9edcbcab442ab21b6fd07781f27d99f5bbb55c1e28896c64162ec48a3f57ee67d90

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\memchr.valgrind

MD5 ce80de59225450e9de1cff046ec2f0a3
SHA1 5a9e580f573bb11c6f248e11c11be572804db88b
SHA256 c4d33a28f691c84b723d8efc9fcdf251c64affe0008457a7b2fe246c1493dff7
SHA512 438bba29e0b9c68b8903f8007f6e4eca8bde113a4671604fb0ce7ab3dc63ad829c071ac421ff5e8aa808f33476c7a50a0e96ed6ee0f7dd6f9e983c4d71c026ec

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\memchr.c

MD5 d34be71a467fd1a12328a8ce1fc92b26
SHA1 3c38b6754e701cb8b0d2d5cb39d748dc45b40284
SHA256 24eaa20a3e5ab961aaf7e97fa2fc5ba8ce44348bd37b5da0c300a8f9bb17ce59
SHA512 ad421382ac7353d67de3c8ef5fabdcf644799262b2dc0a04aa774a7d176b4b2ab6a94d9f64f8e456e429f0a4c0d47ce0f4c7fcdec6d7dd974caea4a20df0604d

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\Makefile.am

MD5 271e9086169ced5732d7a174b15d0f37
SHA1 352b4672b7697d62df1220ac17bb1debb92b7528
SHA256 15ff3acd204c23af6acdd7b43f460b7c134c40c1a67e9b9417f53572960a9cb6
SHA512 71c607940307bb1d07c583848b4c157a9a838c0d2822e96ead2f8b32a360c9545bf956156ca68b9ee60716e1daf108c8740b3e24c74fa72cbdf46ed958cd81d7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\lib\dummy.c

MD5 25d10fda557a09d41cac5f667d083de9
SHA1 388b885cbc3180e4656a225cdee5ff7580544c85
SHA256 5e2b39c67a8acc3ad8885e6662e6c20d363dc49cf7aab3f5c4cd30448ab9ebd3
SHA512 2df75ffdde3ac030c418757be1d1844c932a1ed53e1dbbfec9dc01299c4fcefb0d9253a4a9245ccc82f699c8ae68dd374f3b8b98fb5fcd278ae0bc4a69317c2e

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\elist.h

MD5 c55d73365d457f06cb9f40137ffb2625
SHA1 9c09693d6ae76a9818b765016ecb43f01cb0c0e0
SHA256 82ca8988f4c3700c1971d69be0849ea55c8370cd515efbbfc3f78bed7f03d95f
SHA512 d9dae07767da43bfa182e756b1d5d4c7fcf62ffbd3801dedd1d49478a957db6d6dbac33b56381908dcdc3886510faeef386de302edeb6460cd3a395b36fdf472

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-spondoolies.h

MD5 a58d30d349882d71b856f098af03a441
SHA1 3efc58d95bc294b171247923dd0e45284633f03d
SHA256 843665d6328f3e8c5a37d6a30798a06eabd05e85a37afa156988a1a6feee42b8
SHA512 e6f70fd3947d7dff2d1d837d4cc1f4a65259e113335de5731bcd0d2ceb5442e5d9d472d71ede1649cdf823c9a5fe6e28ddc5d45421ea97dba4f526a76df79d7c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-spondoolies.c

MD5 6227c4dcb81e98a2820ac4b32643973c
SHA1 27f5fe2615ee1a1966c896349946176224daac1d
SHA256 c59a613e517058d9c7edc54b0ee20cfccd4e3f4f88c5d54ecf12758a154eb5a0
SHA512 4ffb46fef558099c4fa1c68ea8fcf6adea3abc0a16230b18bb939af91db5bb62b4fc035b0e330f4d7a9b87424a7c9bd1d2a61cfc55b29d0fa5af8daa32edf08e

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-SPI-bitmine-A1.c

MD5 b45e3a9374f646efe015e7d347e922fa
SHA1 b1505e84d81e267528e1fddc8f0892370bbe7371
SHA256 e0209d7412e0fcf551fcedb78e28fbd07db92332110da4d963210bf4c7dc54a2
SHA512 85aaf302f2f5c9db9d6e8f5afb64c017efcefef7d4d31a14bc6327cb7ee467db4aded3a8be89c5514a8cb9c6f1b1ae479f2db51c20e24d9db9a69ddda03c03a1

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-modminer.c

MD5 7576ec4e74d702264150af2baa3b4f56
SHA1 47d8dbd37d67626107eac348c72f555f415c72de
SHA256 aa965d18c003027e1b5d5387bd16f792c1f468a26a92a941df7541ff98b4bbca
SHA512 b81654ca027ca21aea9d0f85a52537756498d97f22ae758e87741b3e5daa08410b8f67957c15ccbbbe4f5019e43407ef64775097d32860e1e3b8e3173b5e558d

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-minion.c

MD5 d221efd4e1056d84ec058aa13b74d46e
SHA1 7c03e85a83091bcbf65bda1491af21047c3415d1
SHA256 e0ff66c709fedaa41071eb8b3ab37475137095a4f84b3442f1bd3b8747a1a6c7
SHA512 ad1f2913a9604e3c42a8a2a4da47e28a39c565c6c175f75f027daa6ae440621126a9fc40a4e7af0ca72206cf4e60f3b5a63cd0d237312eb746306e4b1538bef8

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-knc-spi-fpga.c

MD5 2fd80264dfffc50c41a962e59117cbd1
SHA1 e9d1a5f5efe9ec6bbbbc93af0d9a17b4e8a7e0ba
SHA256 1ff33e390434dd939fb9e9adc83e983927045537f0c73d0f7034c2e59dd594c4
SHA512 95ba73e371aa8a73b5d81822ba3de208a2e18e20e5e296b332838ba0f0c9e7a6d598d236ff7da79959c1523bbbf82c6fb1f354950135eed87be622a565962d7b

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-klondike.c

MD5 14326a98d00a6994a6117da484a74574
SHA1 02d7973f8068badca0efef78fa03cd2f262cb3ad
SHA256 c80e65bd8e5057df2d2f50094fc66f9a73e5f8a4eb6f267137da2b29b0bbd0c6
SHA512 73eb2baad49eee8d9da68d8068be3811d58d44ba592fcb627540665f8f8b36ad07c7dc955e4bd02bf371102a311cc2f2978c4e360263bdf21fea4f0118336587

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-icarus.c

MD5 9c9919d90b98c575454f02a7306e8ba8
SHA1 ab1c111ad34fd5238fe845b52dcbc28147287e52
SHA256 8d44ab4c827f4a7aa77097407ea3ea1d94ef586d40777c2763c100e96ddf4351
SHA512 51cd46b89129342e706f0d3a5e64d82dd6c521d991aaebd3c9cd25f78abcdf2e7bd9fbdea92bbddddab406e6ae335d0213dc55ef9e59d33ef2e749003b3eb92c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-hashfast.h

MD5 72f6a37392a69bb3536a15836acca5e9
SHA1 859cd67b754ed6cb3d573ae844da5aa14bea24d9
SHA256 73e95076cf1cb0f5b01b7e1913a3f19ce27e96570639509cc5a35f9fedcba6f7
SHA512 a5ea50285c94756a4c92181b5f59dcdf7a91142ae22033a6fd71ecb823042080a30d25ccfb43fd3a6fc5b62d3c526e26f2ec9864e3fd59ce711b686b601d30f4

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-hashfast.c

MD5 fb694cd4c77daa63b042d90f13275399
SHA1 06db29e2cb8c7869f979c7667c0f590e7e8f16c8
SHA256 789c8750ede5e19e85c1f54f0451d42f069a492e0fd05f4c4601265585bfeb6a
SHA512 aa5d232d2722a1d1cea688039abb07c6b854f1a8e8336b9bd383b8b17aa6b70f68042a5804e800672d087f1a8dc4bed5ce82ab88a353d6228737913f62a2d8d1

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-drillbit.h

MD5 9e60ea375d212580216ae4b0a909b939
SHA1 fa1e5949ff6e56e2526572ef43e96b149dc416a7
SHA256 1f096df001f7277dac4ebd4d04a5e03d6e119709adfdde7ca445a188bd0c8656
SHA512 fb16ca85fd6d770d763afcf1e3d787ad3447465e6743e79f0cdf512ce2368025ce216028db0e0fe40b4b3ae7d3f408e04a8d8ee96bab48af419e454189f98e04

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-drillbit.c

MD5 4f67b5a91b748f01837e85f4680cc500
SHA1 6fa158a9756181ca52d4351095ccf6b454f423d4
SHA256 ee694a76ecdf3ae816894658e58b61b129c85c6f8de20b92a06b41a2469adbb0
SHA512 4d2866bacc990c9c205794c24a132e683c61b8089457608c30a17cdf2d2ff911464ef936117ce8063846b1d25189aa1bff91eccac8b07505b6eefbdac3bb449b

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-cointerra.h

MD5 e6f6b48183172f03acd299dcb30f8d65
SHA1 0357f433b5c70a693ad5dbe23db52349f00b5d85
SHA256 ccf73cef7a762c70e0acea379dd59ce073571c47da71cecc73de8ef6a54fae94
SHA512 ab48c1e0d543add6648f866a1dd276f6fa114b8eef59635c7571ebf32507ddbce32aa1e6740b5411fdeddfcdac903402c50ca7d8b716917e484dc265b3aa894d

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-cointerra.c

MD5 56fe16b7daf520ef8be74e87195559ff
SHA1 cd56c0822b10e2d0554ba4b57de83d5dc412e907
SHA256 854e46387d259b8ced2cafeb692c4ae979d92188d9006d039fb0d007f95d4240
SHA512 c4b159890d23e1b0e9e2cd51185cd822f39c270d4d8ae278178f8b24e007bd0745ca5fd2509849379796afb2340c9c75791895f0189757fc87772b45196e0cc8

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bitmain.h

MD5 d49a42ab2f0cd651cfa03c03cd3fcd44
SHA1 fd398a19faae9d342f6293b7069715433f753858
SHA256 2f6423cec71ae7a2810089008ad51ab43b7374672b726257ec4cf650c29e8752
SHA512 62c7b14d3cc48d1d08258ca8723ac277c26c427313933bb7d4717044e29e44f5d951e2ac34b234d071686512fd1387751f4435cb85f333ac3dc44813ec60a82a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bitmain.c

MD5 6c90da889506ab10d7e7979d372711a7
SHA1 5fa545892b1d61e826a7ef825ec8a2afa2d7104b
SHA256 e53dbc64a799b630712609e4424ff8ede2517941aa1f8399a43f374ca376ed26
SHA512 e14a6415f928319286cf3a5e51ea8db15b18894dab64c5d3a7dd6a4d1b0f77d0725a0a57fa8d4dadb2c2e38c04aeb45e958e10322dc867344b7ce5bc6aa1ca0e

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bitfury.h

MD5 3fc5b0d921e90487f9c3c968c414e237
SHA1 7455a3a29abdee48a3a7c9cc38dd75585bd7c3ed
SHA256 acbed74dbad93cd7e4ba0a872d4e01f016d83e54527b8b2acbae93374a5fb102
SHA512 a822e8298de608ed2b2f251436f3220a7c97758713126eba457deb044658aaaa3800cd5eb2b840b56ff3aaa7b598a83748ff504161d9890c110fa5dc59d08585

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bitfury.c

MD5 e631fe1833b2a94633a8675eeb0e694e
SHA1 364edbc9e6f76ac52655e60db903bd5576b8966c
SHA256 db5f793187835b6f63a291c6f34743284db0e09933183b8c2cdaa098848efc29
SHA512 0ad686a4e565adff809c963abb7c6a858012519768b0eae9f28ac760b47ccd1217b8617a4db6dfab350cd8fd654d61bf01a63d57b984947eb726b1faae95de5c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bflsc.h

MD5 589a9a86f153eff45f7e1b309e5f7584
SHA1 b2f3ea2f12870fb530820bb944fb52786c34f816
SHA256 39df1920794b8e92f33b32983a2cfc80267858003f10673b8757cd01cb4f4f08
SHA512 79872c737d8d746dc2703a085cad1dce2584e53084dbef9e17fa3b7d796c4f62bc5f9ab9d2ca9bee5bbe5b4ccdc70c372ce6c48ace6058d5a27cd8974915faf7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bflsc.c

MD5 6d4d97a01e50216ccf1f80ceaa4b4467
SHA1 df7dff94155ec116e6ed91295cf17cedf2b986d4
SHA256 69b4b3274691c4f3be77504659aeaf2946b39a42b97b7cce1513a703157cf681
SHA512 8068084be430c3aa8920762beee6ae3c5c9af0e438f874bd202df54ec230e54d8c05a0366901e9bdcd4725d540a368a48de95e53d82aaa06b9ffcfa8eb28b40a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-bab.c

MD5 32bf7c8bb184a43e91b79e67d4c0bbc0
SHA1 6bd229657cea9f81d277abb72c541554116a7c91
SHA256 5ed7b66b4d378087daefcaa0d975147c6ef550e72ea75b2c5c79522d643fbc45
SHA512 700892ef5aa117070f1b6ac6762c2dd8c0d4676614b9eee0d7a4754c3de0fbe1c740b25bad328148200de94b48ddd7d80b5d8c66023cf649761221ea2e4a1167

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-avalon2.h

MD5 18fc9ea93c8171af4df372c0245a15f2
SHA1 d5f362773ab82917ba494a0e3be4c5d588cf1d09
SHA256 b3c2caada45617f0376c42690dc6e98952b1b041d1bba2b8a38dbff6c21b9168
SHA512 629d5ac8eea0817aa452d90a213a292011eed911432b2a7272bd7f3a6fb78b1b88ed5584eb3ad180af8a0a1f13087bb02ff0a738659b3856b8310cd89d2772e9

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-avalon2.c

MD5 5709d9f6dff67385ceb48a39bd90a692
SHA1 a5adb2455eaac49d616f7f102ec20fc06a029dda
SHA256 a8b47d74bacc63b4cbc10f04f67c5a1435eede8eb01b43c98487e6d4890dd6e0
SHA512 9864b9247960e8fd954b0b0dc198ff290c17d38042ad23ec0fea98713d21a063beab6c745b315840973a294c5618a1dc96c2474f0b93bec1c36e59bd4a68d663

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-avalon.h

MD5 cc0a936536d1d53987efdd502f87c7f6
SHA1 b8df5faf8eb119175a4d525ea2eef77bd0db9091
SHA256 6021dd18d9a73de7f9ea1fc14408da97448425842b15db5ffe161912b67945c7
SHA512 b995fdb4203ef70dac6857e08fd6da52860cb04a73ff34647a7fbc3667e5772d932e374408ad74218b53384d4482855f92f768198bd776748a93d99c41f55dc8

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\driver-avalon.c

MD5 f4f97f7ebeae7989bc936998d6da9049
SHA1 ba9f3173246c1b2b75290cfbf033c311d4f25e7f
SHA256 6a54c323ffdf52c4705305b3afe3169165d3d8d3da645d052cddf5c06157d9b1
SHA512 fe5af98c919461745b4f4e4e8cfe2e139316a803ccf2e362b2d37c8d5a54ff5187e7ad012d2d909c96bf7fe2e2845390c55b6a72ca71b0ef1903b3a68806f0e4

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\crc16.c

MD5 18678a63aa1a753e574d5ac87c2468aa
SHA1 d738c131b74431afba022b70324e243f3a6e6461
SHA256 1e2c50b0fe2a13f70207c3642ac4c89c0ce001b705cbd16a90f23da29e0b7669
SHA512 ca128d6b9c6450a97f937763ddd9d046e448eb1e3d2b1a366b9c6840814a0009a3c23cdcf9bbb3ef288141a2c497ea923aa788ebc470a38b04a2d861603c0515

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\crc.h

MD5 755c508053d7571a40e5b4e5432dbe66
SHA1 90a64a96ba0165ba3ceefee1272b9b197871c27f
SHA256 4c64cc18ffbd2dc4056bef10c409dd06817ce539d508ee987bea09f5b079ebd6
SHA512 d4f6ca16c89ef932d42f54c1a395509a8c138c17281e161d37ca834ed5efad6d87180b53c34e8f9a830b5944326f8174a4f05c6b24a98d06337f8ba60a8d15e0

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\COPYING

MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\configure.ac

MD5 34b75bcc02e1dcdbe532a7af2dc12e4e
SHA1 e3d50731a6d853516e461ddaf630fbc22d9f518a
SHA256 7e6fd69dda7e2a2532a31fe03dd5184d214aa075e280c52989408c86557e1a3e
SHA512 45acb48e68b5e7d8c6721dccf08b467edd10e8cea1a9b2e2ad8a1d558d1c84daaf0a3b8f32eae280a8859ac7397fe994a831f8ba3d18bdc660ce6db7feff4fe9

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat.h

MD5 75dc33ecf9e65d4768bd3b7560d26cea
SHA1 e556c32116727ed1d36c8717f46e1280f1194ae3
SHA256 83a9a7cecf6d26c93be21a39a53ff89d1ba4238b7d11384527bb769b33ef78aa
SHA512 370aa4a7ba668e19b1fbd6a4facdc7b236593e0f1bae6ee6af444cddb7bc2954b6894524f34d241c0422dfcb2ddcf22e04f95b51b71c848520dc6f9d7dae8eb7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\Makefile.am

MD5 5d8f8c2b4929fc65ee312525832f6c7c
SHA1 7d1b8954cc8aaeb9926b72cded2b5d65c60954ae
SHA256 1b274db3dad36c9aa46dd9022090a2c7a2f585419a59fc46b42b20dbc6de0efb
SHA512 ea3f5861f16769b7df78da62c43c14328f052ca6c81f39d1b0211e054e5b22ea9491328adbd0222851d8841db2594349719d07502763acf8552380d7562e2db4

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\TODO

MD5 889a0a0360cd5a78bd77cbed87d42261
SHA1 fa9f86187b04ccbaf0e01d90ad2f6f1d7b1e23eb
SHA256 34015c304709754d9ec302ce6565e6bf15f82f13c4402304faea45a1132a686f
SHA512 5756395ce4dbcb66ec4443dc085ddabcd8b3feb3bb6b1abaf5a2a961c34cde515a6247a10cd25219f23ff9f96cf425650e26122a4ef38c4a7ac1289e26a8cfdb

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\THANKS

MD5 8854644b8231409b2374c9df5e489dba
SHA1 4f29ccc1dd63953ab427e422ddad7b1ed544c9f5
SHA256 fb33f28a441f6e7cb09db2c821e8a3852fd92012b6dd7116757552422fb233d7
SHA512 f7e7c61ff56ba0373fa2820efd4956ed7935cb9d38ad5127c5bc11920440c65ab4de01b986ffd30ebd08d880651753c6f523eb19d7968011f1078158141fa644

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\README

MD5 591e5107b612bae760dc91466b97b57b
SHA1 b9d8f4eeeaa209e407b8ca4db35916275ac8a36f
SHA256 884895d4304cf3d35a963f6b90efb43e5075fd100f2004a8cab44363bfd067a8
SHA512 4d4959829d5c4c59c1ec035fe244a7fb44f8d9d6cb28d43069ff958a4071b431cba02891b5b2f2048538c452d45d46b666681db621f7bc86acb6e6196765fbf2

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\PORTING

MD5 b048431131f5c23d06d2fc38596beab7
SHA1 6a76f4e577c3446caa174230e2fd418e5763a136
SHA256 69dd160231c9dbd2d5b8d7a2e1d3747660913802ff6d3600ce85dc9475c0acd8
SHA512 1b2f3e788a97e96b4d8bd083dbd78a192d2b89d56ef8acec4f47d399e98a656c3cfb81203b6688aa1d1a1b695558138a518bdfbfcf173f4b5a5e0ca3e2cb3453

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\NEWS

MD5 986d1e7370cd428ea445835a6e5eb1cc
SHA1 7bd18a5f1e10e51c059d9853f319846186619187
SHA256 435b5eb7ad1d60cd8e5b211c2faa2429ae9d1ae67b83fc534028ec2e5bc75eb8
SHA512 507d5de0357f17dd1a84f1b76d7b4a9ca7184d80f9582a6398ed3810cc7ad4948d03900caf499bc5fb9009661c24e9a0b2a7b301597f27a324abaf56eed3731a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\Makefile.am

MD5 a93083bab8b54f8ec096950110bc1cc8
SHA1 73149ad016bdf2f3168e7aa9db04cca5ea2f95e1
SHA256 40a7ab10bd8ea1cc249f95719395b9e917c1bf50055dba672019dc12ae8dcc5e
SHA512 1115e2caa157d64d7de20c8f8e09ce47e87b2a9f2f36cf37f0caf9fba7070cd63530682063096e677b44ef61884b35bf8d33e0ab49e43b3b3fff5d807aed5455

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\m4\gitignore

MD5 edb1c8ce37f41cc5ff946040be8cddd3
SHA1 bfe2c0989245443356085d3b09ae22d8849905d8
SHA256 d926603264bca11476ea54314fd5be08ec8eaae3e21e66e8aee05e9e2fd9c2cc
SHA512 af013b4ea322942950668f9de56cdac21a21ee6d955e3569721571b65406fb07c4efca282ea50b864205c0a08c01d73e3720751f8b90c1592454d3447059419d

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb-1.0.pc.in

MD5 76aeaeb43ff50ef8b1422160c2a0982c
SHA1 b4cf86b9e93e21b558a51d5b05ed281be94eaf2d
SHA256 891118dc744f4caa36bc2fbec3749320e3da75ae0c8271bd553c36c0f825b0fa
SHA512 fa7ab94e66dba4ffa19b0217496bc3c61bf6a3b03e9942a672b22ec533c70e0db1f5301a6fd1880249ea607128ca477a6867358b329cbf12e3d89f42188eaf76

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\version.h

MD5 10cadac475fe3bbbf8c70fb7a7cb5979
SHA1 2f1d88fdc9d473b46b07fef54a28a8e4e25b2bb1
SHA256 14d04fc2f0d33015238fee716eb7c0d06b8a0fe1a4928b166124fbd146a97704
SHA512 bc266e6b96fdfff9210db1789a0a20ac1771433e0c3dd66fa5833828d2c56527e9c9eba7cfbd605a7aab74190c02b31d069a532f13454f8e4b423e5904fa1136

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\sync.c

MD5 e3e7c288681fe2ee50359055835b6fd3
SHA1 5f942d257399e96d884a19ce3ecf7f843280120e
SHA256 5719e4f725f5ec8ebefa4e585545cf9ea82cbfa318077900eec464cb4f53349b
SHA512 1e2580affc75b90c0741f9aab16d0023f251445e7874b8fe94c14fb4f58afe18806004de04857cbc0d0f8a824454e792bc020e0f2aef5bced0263091d2daa8f2

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\windows_usb.h

MD5 a4d453419ecc121436b676fc714673f1
SHA1 4623acf2260f39cc8e769b36f39df650c836f86a
SHA256 f0a4d4667c9c944866ee4ad8120f6ac1abd9fe9c9e014498cec5d217389874d7
SHA512 b368dc9e0e8fd4990eb25acf633cab30a1f0166edf848fb581e2f39130b3d88c6380ada8919f361c5b3ee9311432f05b7135f4773788aee94e0b5f6e89f7e3be

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\windows_usb.c

MD5 5ea124ce56438679010d86693db5a0ac
SHA1 acd165faeb38e36df6c8f1a86278a15b8b81c08c
SHA256 7895ed4e66cfceebba908807cec65f658bec57bfa4fec55ace158ba868a0c744
SHA512 89d6960e805d9c838f7f3839482ff0786dcc051fb5d2bca6f78dbd2d028dd46a8a6029bcb38fdd41402730e92d86dcd802d227232df92531d5817141ac0e8409

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\threads_windows.h

MD5 cd4766eb693fde75286ec30099029810
SHA1 9205d49f85e39d2db13449099ed1fb2039023232
SHA256 66a6478b2b44ccbada87b69650dc89ebe52e836343378222d7d8b28733285303
SHA512 e8c7d8d85ba923e8376767760b4a7e4378fa49281dea1974549bc6813266450935c5f240916b9e7e10badc14cd288fab9b86dba44f85e0dd37b164e7ac968e06

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\threads_windows.c

MD5 41a4ca56dc1d2936bf3e7847e594c1bb
SHA1 79d0c2b65fc34f01589ec5ec8bdb9b1135b37ec5
SHA256 691dbedf8ccd55ab907092e52b7ef2e7d1c0552a82d33bc98c34633901bfac8f
SHA512 50542868dc375b1558e75bbaa0e19ff0cfff2a0a60454522c0a6f03e6271fd43007e86f267267016608f89499b27d3ac39d70f3e654fd749825298943045d797

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\threads_posix.h

MD5 6d7c728ca79cbc662f1de84a0b6cf0aa
SHA1 d841e8b3a1ebff625d5ea40cd051da564d45380f
SHA256 717d794b3efd94c27939e95445b0a89dd55946a1d5fc152c0aab63190b2f5d88
SHA512 956f7a8bacf611dd7cedcd5b7a8429583851df4ed5e4d8edc0b7933573a6fdc8bc67203ce82e64fd7a9c44757cd9db08db3f0d5f60df0beff019ccd28d277d78

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\threads_posix.c

MD5 0a58519c6682a4e1d3523144a490a3c9
SHA1 c44af7a4f620add9696f51420033db0ca312c202
SHA256 8825f360cec8d558f3c9f2308f143320eb5e3649d363c0e4c18b0f75c97607dc
SHA512 057cd19a05f24dec7214ae4c712eb14a5040312c1297523975ba1490425cc410434a1b52407bb1f890e94dec5332918ccb327b6f1e29b7cb8999c3efd2d0701a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\poll_windows.h

MD5 67bd842f4771f05a1425991164e717bd
SHA1 e48406e0463ac53caa34e626bcfbfb4b63924a39
SHA256 cc71c7ee3e8e0b298d609485f11ef21a0f2e825ca3c35af8007977555f84752e
SHA512 f42812226c6ade6d93c25803db27d1f0a08c5f7f402c47aafd9ae082029ebb84ad68bbd27b4e174a7761144c8705525903bc2781f7dae8d0718bfacafb47bb33

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\poll_posix.h

MD5 53af78fa2d47310d86571c4bca0b87e7
SHA1 6cca970c5a3c097b0817b47d51e47117ee78d39d
SHA256 dd2f2438c82ba6902dd8dc533f1fee686747404a25af7ff5671c5acfeb21dcd4
SHA512 a4ed5e62f216ab486c50e4ae46a09bf26c46ac5752e0f822b500037a5777e721415f4f8ed9a5bff3d8f738eabb29c4048f1b2435d5c17378a3fa381814602f6f

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\openbsd_usb.c

MD5 f8ea5fc425a5bf4ea91de53e67dca9a7
SHA1 ca3c48238e4d5d934e778451773863d1db26d0da
SHA256 118e7d5020436bfa77c47fc0bbfb1e3cdb1c758c0720043d30c251dc69373fc9
SHA512 48388130ac3c915ede588ad1a0869b9386db320d5d32ba6e683830d4bdef9ee9a6bb1a33906f7e6119afea61d3054b248c61e40ce9b761cdd207309778a41e6d

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\linux_usbfs.h

MD5 01fdc7538a22dd7dc9226049abe34d66
SHA1 e0b089c4589bf56f974d5238afd3023b47f99780
SHA256 9325de3900152423a995a009dd43e3d7d14078cb06a4251dd413c4d026e56a5a
SHA512 944e0ae167ba2566c00bc6cca1bb4b23de9d443397c37bc937df9ca0e597b3713f8c181ed2e07ce6a019e89a5cfeadcc16d0eb58d397f86ed8499d2ffaaa89ab

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\linux_usbfs.c

MD5 b217061e1cc4a5b20fadb8a19eac6f05
SHA1 87a1e4bd57aff0322bc2d0ed2c5a92b87367a057
SHA256 abd346e2c7434784c9e13bbcc9b65bfbcbb702064264bf88700bbe1e5cca0ebb
SHA512 87cd49c4fea31ebf9fb8bf91d5ea0074cb06d13349208734771e0729c46850371f885fb0d559c7e164104a1712ee998c253b94f2080e9038f5c1f311fe98c8f7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\linux_udev.c

MD5 a16be5e8be1a5e6d9075cbd06f1ccb9b
SHA1 d7b15073c49846648238036b7847e214cf9d6ca8
SHA256 e8bd093d352a2b4dd9d28c5de27920efaa32fc1dac2ff5d774c7fa69cf5bcfc8
SHA512 9f821084979afcd8fb02325f9651dbec9d2206191fa953cad9bbf713601fb18f5c918a8f0da8ff3e5224229503e5ecceeccda05722bd53ace5e544b1996e4742

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\linux_netlink.c

MD5 ab4c8e5a3adf3b88addda8b8f69e2533
SHA1 0a1565ada1702ba95ba3df32c64df366b0dd8035
SHA256 47ef2119505a4780b90083f2f2d1df7b3b674f699827408deeab4c6b7353446d
SHA512 baa2dad03eb7c1df9598514d6e0cb61adce631f076e64ab7087beef6a23b71fef45eda32bfab540ef918f907a75554a3453ff2da46c81257fa7d09973cefbefb

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\darwin_usb.h

MD5 548e5ca99c2f0bdf1be48f434a946f2a
SHA1 7ba435b68b84b6a0e29e52884549cedb5a72d139
SHA256 2e74210d0927dd4c360f3732412cb029d4309b5ace60c61bff477b3085844a5a
SHA512 2a4e659de68fe18caa34a2913899e3c67a68c555bb597640aa4fc525eebd2d54b048384c0c061e2519d315bfca220506b8373afc73580341cbcb0c09d107ef0f

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\os\darwin_usb.c

MD5 d55445664ca7b4824071a88dce3d41ce
SHA1 8838825f7791f71b1923ab3fa288b0bd618df00e
SHA256 0dccb8662f18a6fbfa748a375c3a01761dc5c5f279ea836901ee0a74a82b3dc8
SHA512 fdbb2d9c02bc21a0aed8ddb2e6179803c13352be5351178cec8e4e7e49240329fab2b269869f46fc13dd6ef6a6d92f5d212e2e62464db88e669b1f999dcf4cbb

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\Makefile.am

MD5 21c8af5023d9368fb3bd1c409178bc79
SHA1 221ffd99bd369e6151c697aa73f0ba3d6705539b
SHA256 b02b150bebbb03d06475ef234b66bf525870e021ff8ab0404276ce7514f108b0
SHA512 b8c647ac1fb21f8e9ef7067bf815771fedcc8a3c61a862d45e466020f19f5f1904a263ef011d12a967e0c0aa2e04b7879be540ebe11157c14feed5e6db8b3809

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\libusbi.h

MD5 c6df6bce65fe6e3be0bb096fa3d79cd7
SHA1 30433228351d9b9552c2559ce940889114509f66
SHA256 d0309e604ed0fdf627d5e6ddbc7478e17b6a00c14a7e25bca2ecf4749f824938
SHA512 909fbf5252c3bdb22e3c1106044e97b040c3cb5b83735a90c0536bcdb78532325106c3ae87f057e2e2e902048dcceef2bf460d7b7ced8626c222a33541633d93

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\libusb.h

MD5 aece3a92c781edddee18320414b7b572
SHA1 31930584b6bf6f1ef2ed730a5ef4cbeabadb4676
SHA256 906e559f5820a9c6354759efb6493ed3f74b0b586cbfc3db2e909db5bdc191df
SHA512 53f2566438e829725cf3a3be9739fa716eed4316431b459f573e297e9139c1b85be61398cb8e2f9beff7c482b0a6d7f823df262abc7a7e1967859d2557486f81

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\libusb-1.0.rc

MD5 0449c398a5e8dd99d258174810b3bf30
SHA1 e76bffe5ac94062ed8429f8955435cc20209ed1e
SHA256 1ce852243c5f67301582a4c657d4d1671e4fc967d3748fc6be40b90c0e8da9d7
SHA512 5f42546285fccb80c46bd6ede6be69915dbb5792d74b5c5142dcd0c6170926c356718ad2a901e060256c6c7d4ca03229ef028f714bb6a670e70b60f3c0d62ece

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\libusb-1.0.def

MD5 3419bc36ee8c01010acb4fb2208313fc
SHA1 94a30ef37eb33e7eda11d671b1b658bd5666925a
SHA256 6ddc978176491f9e8ed8ee9fbc6c043ba50eab5d99d92a0e041981a3cef6198e
SHA512 ce31e19efe2e326b09dbe84c5ff9978846523e5f27612482181c1313444fb7e8e9e105eec8b5e4e8d77b8c06c6a6ce285bf5be08458e1da6ad977f3025aeb359

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\io.c

MD5 e3ffa9f260ff3aef51073b4e6bc3b27b
SHA1 d2d1e522b1a220a0bc279786fc86c1bc97d058b4
SHA256 48f65aa987d9b5a6be34176075129d360495e809099d4f5a3acf9a6139e998aa
SHA512 60b8f45ddbcd3893ccd53faf39627e301e88c3f6eba60744ef9d26b0681858ea73cbe48461d8e7b694c24fef11e389d715962fef37cd38dd5edf42ff65bd8fe7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\hotplug.h

MD5 74ce55d64493118730423f777c8cefe8
SHA1 c6176ededfa5ae0b12d959c912e6bc0aef8aba7e
SHA256 f7add8caf4d9a6d0c0af8f8f4e2503a1e1510f44c86116383ca5a1d332357753
SHA512 3aea039e6174b47faace17b333452c9823b818941b18e7f492050523500c4382a6ff58c083dade4cbd334b87cbcb8b19d0e30542ebe2bced5b2e124d620573f5

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\hotplug.c

MD5 5b5358b0aa1a833780ee5c39eebde6fb
SHA1 6e7e71d572a7b466b99e4ab6b6906c47dfa6a547
SHA256 042909929c09b635ee6be6666204312c31a3c5306e7f87bad0ea46150a49c277
SHA512 42bcacd16e8e0a8d38a66d994916bde1b4a9e44546abc6f288dacde3676422d45d4cf41c6b5176ed39cf2d3b12f4efa4842a6ff261f94000204bfa7effdb70ee

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\descriptor.c

MD5 87ed46f349e9b0079b26cec0855ffe77
SHA1 28129ab934c53b7dd80adf195ee83a86fb9f4e60
SHA256 9ced19a0c7c867e1bbf7fd91a4fa9147e7cf66b1aaa1aa2f262abfb2b39567a5
SHA512 e3517795754549cb3f2e7e00be6eb85effbabecd8065f44322a1c29f971f0c7ebfa56491dc85c24528c61ade72b709b2f813de46376a76d9ea51ab5a638d547c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\libusb\core.c

MD5 8f0fbfd30a8fd75456ad3a2b8f3c6ff8
SHA1 50d50c674b471f1360534739a174e0c17ac5eadc
SHA256 e20ee66639cf9684400a4acf82901002467edffdf49346ea5cf025c7318d8d01
SHA512 0b188ad49c69c8b285f968c8aa78bf4a3ef4df56aa91b3ce94b6425aa9aa4cc8d078cb3765b9e3d7110fcc78edeb705ca094569fce43690040e0f534a98d8491

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\COPYING

MD5 fbc093901857fcd118f065f900982c24
SHA1 caeb68c46fa36651acf592771d09de7937926bb3
SHA256 5df07007198989c622f5d41de8d703e7bef3d0e79d62e24332ee739a452af62a
SHA512 c929152d51e8db633124dc8ec3272b8f76172c4820a587ebba0fcdb0c2ffa5eb90bc795696a2a8a863521b347822856b0e44d576649a3e85af21c17f28a7e437

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\libusb-1.0\AUTHORS

MD5 5e29cd3d9057a312b74c552f66f00dcb
SHA1 f79903bba99069fffbd7716430ebd02c4a0a4ee3
SHA256 d4b6848ba59ecef62cd2ae32c88f59a466e85d3fb3e4198dcd5ce65c81f65574
SHA512 f89d6124229cb328519d8f82d5b1585d684513c4506d4f5b5fd91cde932ba82d9f272633e1d820e3d7b2d63348b2acf817d392ef569588e66fe60427ccd09046

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\value.c

MD5 7c1c1dcf973f2790fbf652acab3b9825
SHA1 05599e7b97f410f9dfdfc3bf29d7546282a772e1
SHA256 b6fa85bd2e49d77840b7aa136bba743794a073b9d3a31e469783038ccfe38e7a
SHA512 98653642de76b2b23eaaa2b34b38b64c251a6ae7d30ce5a580189c9c5cea7cd3dcd2d90f98f87fbe52d38498b89e638135072025c5f14c7ae893022e7da34a88

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\utf.h

MD5 4a27b3c9067f4643c8331ed62b4dee1d
SHA1 a4264bc3ec7607b86a2aa8146ead40917c01da9d
SHA256 8396925b8399ae6b2f3ad586c5965e349a3223dd7957955744291fd78058fb79
SHA512 f5d7df43ae7a193bfa31c6f39a64d40a897e9d602f3d89c257761b6d08dad77dc49d1dd3d219d3eab17e497ff74aeb96fed769abf37e5740a32219357415176b

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\utf.c

MD5 6cf2de1786cead7b11571b7afaf9ebe4
SHA1 e51f81b18760cb6a49209e00565ddbeb94246612
SHA256 594824c4d0c532820bf1f396be5514d10217627fd8a727104c763cc44b803821
SHA512 e4a6fd8a4adc882ec50cb4ef9b9a4990cc1e70b783a6a9e6b03e2c1e73c9ab3828a27e16f74bf8123e57efd0dfcfb9ad709469afa1c4a9619e3affbc3b762932

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\strconv.c

MD5 1f88b2614ab91eb756f765da34bef03e
SHA1 8e89e93cf1a0c64efb8391e8cd381ffdf383af47
SHA256 4075640acbf82bcb49a3306c3c5901603c86ac68b09b48c94da6b6614bcba89c
SHA512 7d956593d2feb5a766f7ae3e995654f272558c88a7b282640dbda3d56043a8192b4810111229ee41b48bf74a11418fc9799f7cf40e3eddbaba731b0412e4b00a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\strbuffer.c

MD5 257c7d5ab39c311d3175a9a7bac91eb6
SHA1 1fc4ee55a5109c1fd489f2e232c56abbea9e3ff1
SHA256 a04377ed01edf73131a1b82a8d382660b6c0f3b38ec9cd09e84e93745a797aa3
SHA512 08f0c54e45b63e26d9dc6ca11abe57c66237063a505d2c6722e96f261bf51f795090563c505705422d2188a211fd67e4e9e8120290b8170bf81f47b5a8fa860a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\pack_unpack.c

MD5 032061162dbbfbc3aaab01783abd20f1
SHA1 dd98237b696ff0fe02572e69d688ac8be568c730
SHA256 aa0016a22e93b7101427e2a3680586cf68ab5881b719299c6dab112310429871
SHA512 cb7534a92d44c128e859b7a8b5c0f2475190e6ddb7919c45beb9980b42ea5fdc90b8bcc1800a2f41ebe8b9fa58170b80051b766ae6e23a09946b6b205d3cc756

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\memory.c

MD5 bc6b5b4fec79c93e02ba0b74d9e8bd20
SHA1 55d0987c3d2631936444546b1e883ab9e7bf2233
SHA256 808273357d7395adf607250c5fe0822e5ca8aebf0753a2c573c9fbdaf8cc4e63
SHA512 ee298b02a2dcc306592e87df9408dcff9d4dc1f20d99076a132cda20eb2eee69814c3af5da0b34221edf81a5488a70df62c27beab01d651e5db5f4ad0963e0b2

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\Makefile.am

MD5 02f6e469feca9860fadaaf60495df6d1
SHA1 0b54a2449590572a68a06c60c1b0f342e87684d0
SHA256 18ba12716f188d232eefd8ae0eebeedae288bc0b47039497afe007cfd3143e22
SHA512 ae96ada47fa8797787f8019b73d92a911672a3e2aa8fd32655979e4d05ca3e7c97892a127d02c983ba2ca46eefc434ea412ad572d61c6b05cac56b25ea6d52db

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\load.c

MD5 d8c13eb8f5bc7a048eea624b5e08f3ad
SHA1 ff7d27354b6bcf3ecc80b0135b1aef253db8aa52
SHA256 fffd7b3cd1e1bb72d5f12cfe1ea502dc193224920441b12a2868e8b6f76660cb
SHA512 3130355739acb432eea2582a85838eb847a6cb3231c44757e2dc79d35074c4b4256c61dce19c14f32d7fa1f4adb2b4286586eb4f335f42957b365c1273727ed6

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\jansson_private.h

MD5 331219ebcdba9aa3af0f03e1bbb9694c
SHA1 0a535fe0ff2cc213a7ff9b490190785c584c8da7
SHA256 982e16c29ecfa040c65aaca68262c2e93de7c39ee76f55f1df34618a62a8cba7
SHA512 e339423702eed0cc37a2864cbc7e4b2cb8f934b990a9b0069809de0ce86f0bce500cc5548534f49f6e261d04733a43ff100ed1e4a3b63ee9a6a9e30c7c058f32

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\jansson_config.h.in

MD5 5dc947d9e07d6ba39f68c56533b6b9cc
SHA1 43177c179941d10ebd49f7aa8af126372405b090
SHA256 d47861d8a45b0ef477f51a0bc819809b64440ede25d29a483c6a1874f2c16442
SHA512 6a6f1cf026e743a44199d4a386f5c7e8d8222d8e6c501618bd72e237f44d019604061af7962fea4b5c9703c09844caa6ab1a43b71747d9eb6c4049e92af2e916

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\jansson.h

MD5 1fc0808240a1c72ad92afacf0b5c1269
SHA1 71d8c0536325da5711d4828bf84c0ccb0a64d993
SHA256 752d2b5956a09cde80cc663a3420bd69618edbfc56cc3c2dbdeefead27f02a85
SHA512 3eb1023578de0e36f31e3a65e3923ed1b12df6abb48d83918f7369181979a39ead8df79d42bf0800b1e464c9b27992de9b41d71fa963f8ae6c530ec3131b6b1c

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\jansson.def

MD5 927b2d6381645efeff0207f416f40328
SHA1 513e41bdb7b80f2a22747d8c015d87fe1c97e3ff
SHA256 04f594e70883822ad03674fcdcccb82f27402265555aa7985ce9f9f1e2ee3731
SHA512 04f7f9ffadbf5d1d6707ddd042b2aae284ea5f7ab783d5cbcaaad2b946e96e502261118b70418e05a4116519140a782f5c2df9056db5bb6b8e7f09a257e7f671

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\hashtable.h

MD5 43c35189f602069a8f21f09ffef6d573
SHA1 f34bb1c378e85cbde21b4138b90d8d75e20a4d4b
SHA256 98cdb5e10aed72823dd231570de1e1ba80f26fcacd105336a501eb58f3059f88
SHA512 3e18f7a2c6ee774db67e5c5f02e1263824c7035022936df082419179182b7656dab34c9ba11afbd1a847ea89ee2975fd2442f4ef6fa49a4ee7800180509b5112

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\error.c

MD5 e2bcf4639f6c8cf3060456435745fcd9
SHA1 b055d3335f1c5d10f7a1ac5bc7d5ac9be19ae814
SHA256 c1d74b7f409764ce5b9198f1cb2908049f5b819b79aa4104763065cfa57dcdca
SHA512 8c5f07b14b65f7b4c1300ddeba9f710d65b1d249882f3235d6628854fe06684c51aad53116e5286168ce94d370884f8c4a7933f544679d9680f84079af5de353

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\src\dump.c

MD5 d5743efa71f6d4d7ac36c1ad9383ffa6
SHA1 884b9371e97b924a7ab9af2645d143d508782994
SHA256 17a841c3dc60c4865cef1d25898fea754678a3a347ee59c8053b3b38080db60e
SHA512 3847a2d9e3a157651d3baaca487560f1af665f8ec69e8c148687c35fa6d9fdbc9fabcb24262bfa9a02806f18c6692363d51bfebfc3a85c1bfb16a84ff46e9d20

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\README.rst

MD5 d904d89876247334e9ad689e43b18146
SHA1 02621a9cbb75b3b8adbb559dbb1b0228fb3b1768
SHA256 a88020717b7c4ce08a601022e4c9c62bc64b8713095f8e494898bba7989732b4
SHA512 c422f72b89b698289735e6b97b9893c4b134c7a61faf48d375eb1c377288d2db89d24c28011e36d98a926c335ccc03ebe150ab7665fba9473f323785e27b2521

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\LICENSE

MD5 74ead53343bf648f8f588341b2f8fa16
SHA1 8886b97b91a1319bf75bbcf68a2a6b888461c644
SHA256 1b94f8ec999b2912fc666911a4fc8d0aa0e503be863763093d69d49377bc2784
SHA512 d9480e859cef210bd3f0fd05ec938e48fb044f1b4c01e0cfdffe238dda2e29f07e4758e00499c930152fd992375263e4918d38c66f5de09ec7602c56e19bc34a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\configure.ac

MD5 25c46bef14053b3bef87ae9e43971b02
SHA1 1702c79bb94e2eb9b697d0635728fcde053919b0
SHA256 34b566b9d0f56dcf8cbff2e19806e10e1aa6a54d7bd7f94094ec2d8b0574731d
SHA512 627de9cadf94381b2b09c0db01dd672b9d0fd4f173d3d94a810574ac4b6e6338c28eea5f9e4ed3364662bc1a2140dc405512d61417b2127d6d621fc00193b0fe

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\jansson-2.5\CHANGES

MD5 6b80b4fc9ccfb2b64aabe64a7122dbb3
SHA1 2aadff1827747621640d5d8b76e4dd48a9b05ced
SHA256 29c55add208afda72c25fb318ea951adb1a8172141d69148f787362992e1a94a
SHA512 1ea036df990031f82667678f74b928260134230555371394b80f83f225c7d0f476900dddf06f10803f45bc18bebe504d4ec88cd2189d3f39f8798ea8eaa86f5f

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\commands\compat\gitignore

MD5 fda1cca6e665c3add8000b91f574b2df
SHA1 fff1204f7d344df215678afd025a5b600e4cc8b8
SHA256 914b7db1472b1382dbf1bd855482658c2c0cfb1ab813963701ff2c93b97f4d50
SHA512 136d05bdcf8c8048d4ee28e21a9022cc15e9171d73867d8fa3a6a8a4b846efcb92348628247a70f6601f8e892b28341166df3a04dd4804006000ddf8f3a2bec5

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\bitstreams\README

MD5 44caaa78960e6358f9f2b88f6926ff3c
SHA1 e8b9943b03f53ecb8fe4f32810b5cde733fa5be9
SHA256 15d645ae3a382891324990d56e2df5447d2135f3e51ba7492a18b5a96ff449de
SHA512 84e8ee64ceca83e1e24140ba8e1b13bf49dc1aaaecd141251f2e4efea7ff566fe1e03578280c88cd91bfa07e9ff8018e6404f87d5b1ed8efb3c3c2668253afdf

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\bitstreams\fpgaminer_top_fixed7_197MHz.ncd

MD5 7c277a4cd37c476dcb2d18e63df853a4
SHA1 f7293a8ba2d716a0d7f7e02fa1e2580d7813074a
SHA256 30c6c2562b921dc6604b54a4aea5e17d3985fb33a2d63bbe0f690fa29710a6f0
SHA512 00e49786c47970afb448a043fd7eb5fc1426f141b2aa0f357a0d67d4327b04d7a2e8297b2ee8c2b475bfb34e3a70ebaf7da538c90808749ab7fc2a897cba8283

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\CryptoTrader BOT - FINAL Cracked by ap3x\autogen.sh

MD5 0fdc3a92cf013c2b306b44602b35ec61
SHA1 21064cf058cb673dd958f747187c24eef933103f
SHA256 b46afdbbd712eb402043e7ab890a7d4dafa7c46dcc7525088b05d944b5cd593e
SHA512 bdb59853ada84de1da41ccf990dedfb0a6535b0b5d121cfedc333224e9d5a4cbce41eed5ae961bb9cedaf3c454017dc65759daa45fef808e6070d40f347af269

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\LOGS Crypto Checker by REBORN - V2\web\libs\Smooth\smooth.min.js

MD5 b034c6e1254d041ab6eba55232f223fe
SHA1 56b895578de86b002e97c6e034ea1110efe86b66
SHA256 78e6b8a3c111d7c1fa0a92bd91de56db88cd54c928b920e308f43fb0ff23ac2e
SHA512 64538943b261695e917fc37a7751bb689e9235405031b174953d0cd6e852574133d8045d0b832328a5b2dc0082a819252441d6abafdbfdfe515f63682bdb337a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\MD5SaltedHashKracker\Extreme.Net.dll

MD5 4bd4346716370386491d6ebc4438b69d
SHA1 7ba0238a2d9c44d0d17d8ad4b32c011b77d23624
SHA256 155e446000555c8edac8304cef99c2cd54e8267981f1482d14a69c66575e6551
SHA512 930d20a9e260f3d56a4621e884786999fc51cae9d63372d5bd88edb928dc384f97e3ba33fe5dde9eb0e09f558554950210c6d21d7f32606f79c976988c09aedf

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\MD5SaltedHashKracker\String\IronPython.Modules.dll

MD5 621192db357916f2261989a49fa2c6bd
SHA1 c32bc90cdd7d8261ac4702fdf30d0e30cc1d80b8
SHA256 87525121d7826dcfc76963ab8bd7996b9644bf4f148d1296757eb702a43da51f
SHA512 a7985ae16c4a4e931daddaa93b4cf4c4cad89c961261afd14765366a2ae46e5cf62ab153bf8dc6a20626c570a1eca8083dc4b68cfd72741619fd5f41143f1ef2

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\MD5_Attack\Jint.dll

MD5 734c5ce8f9b104d8ad3c7b494e96f9b9
SHA1 184cd4152b1b65d9531867b06c2e1c215fb872f1
SHA256 ed618668ae9e7c02c7c2b7332dd09079168cca96432a051044683c996337001c
SHA512 1e3ac0649e3b7bf9e97681aa7b1346aa44afe96d8c86fc77a6e002b8cf5b14b1a57f19f669ed0d4ae9a94d3f65d4eefa99dcffcf5d74afc8731f913c9c9f79d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9017439e2ba54da28375beabb6d59a15
SHA1 b17d5cbf353d06af6b22f492979186978bec394a
SHA256 309b439f7e61d2f28bca5ab31e0645b902bb55d2f5b8c515a77161d8456d035a
SHA512 dc5792bdf3053374954e91dec9514220364c75d45e287d519a5cb4d151ee613448bf1d754f0aaf8e300b609a05920de5d9bca79d137256b187fc13b23ab504a7

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\NullAddFrontend\curl\System.Net.Http.dll

MD5 e4b20eceadd0a1d030b407b02b913ebf
SHA1 bd1bfad57bbafe2b96fe72fd9fa791d5784290cb
SHA256 f48e85c97f8e473240db925d00ee871be9e2e7b684b313b911d5c2c14c47078a
SHA512 95b5819c9c27b123ff9c6a8a8703b6bd8857c006c67035d62c4ea58acda41266bc8a8c43847a010d28e4dd5195b04cf0d1dc409f0ce7d5bf59b36cd5d6845622

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\NullAddFrontend\WPFToolkit.dll

MD5 195ed09e0b4f3b09ea4a3b67a0d3f396
SHA1 01a250631397c93c4aab9a777a86e39fd8d84f09
SHA256 aef9fcbb874fc82e151e32279330061f8f22a77c05f583a0cb5e5696654ac456
SHA512 b801c03efa3e8079366a7782d2634a3686d88f64c3c31a03aa5ce71b7bf472766724d209290c231d55da89dd4f03bd1c0153ffeb514e1d5d408cc2c713cd4098

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\passwordspro\Modules\CRC-32B.txt

MD5 3121b72ccf0720cce31bd8eadaff69ef
SHA1 f457f984f9b567b3ea4592a4345b4fccfe39b2cc
SHA256 265fe8d7557aa9c40c9e2efa89f847813041b7354c27fbca88bd269f5ddd87af
SHA512 971f825246fd7d87721f38bc105ba29d6b0239e5961e529c59162ba9091b904fd62382fa5312b481013d53ee7149d90ca0ab6ef8c595cdf3a8f57fe72dba1491

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\SHA256SaltedHashKracker\KoiVMHelper.dll

MD5 de0ab4c6d7b794cf05d92925c89b11b2
SHA1 c60223c803c1b8f699666dda327b2083b00496e2
SHA256 d2a8a294f524c54d00a3087946bfe08675c16accc93f2fbc2bc21ee67e598e36
SHA512 f422ae39a71f4e54a4b1c542f89b7a768c40d588176d79a1c891f1c38392a1df3c9de5570ec92ce6c6b47621cf33747ae4ee3ad0f1c81572a1a139ccbcbc4d4a

C:\Users\Admin\AppData\Local\Temp\7zE42A9A12F\Crypto Bots - Utilities - Btc TOOLS\SHA256SaltedHashKracker\Platform\LICENSE

MD5 d558c829ad318da6d9f04ca53dc90ab1
SHA1 a6c71e37bf1e0f373311ffba511e631c9543f849
SHA256 c39215a584968bff6d59a042e987678cccc72a32f3fb8cb98c558f331ab55a02
SHA512 0a7f8d64cf14d4da484bd8906c4b857e36572ee73bcbbf3f288396ffd80711bba42d47fecd284916933070b466ab3ef0f275a84a32e0328dac962d111b45a76c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9d29a5efcebe182e23bb5991ff9e333b
SHA1 55202a90e97bceb9a663bb649071d83e9e768b73
SHA256 f7fd1e129e4b726668623500b0a55f59300d479cc1a3e75e2143ee74cea6eeb0
SHA512 400450d9b4bb4b50e7b167b40e7acb4c0824490bf503e75eb611197a93f25def1033d9d95451ed215e2c5f8e8dd5929d2503a7afffe89d559bc1071a83d9b33d

memory/2404-12388-0x0000000000F20000-0x0000000000F54000-memory.dmp

memory/1740-12390-0x0000000000840000-0x00000000008C8000-memory.dmp

memory/1740-12392-0x00000000053D0000-0x000000000540E000-memory.dmp

memory/1740-12391-0x0000000005390000-0x00000000053D6000-memory.dmp

memory/6336-12393-0x0000000000D60000-0x0000000000DA6000-memory.dmp

memory/6148-12395-0x00000125BA100000-0x00000125BA206000-memory.dmp

memory/6148-12396-0x00000125BA5D0000-0x00000125BA600000-memory.dmp

memory/6148-12397-0x00000125BBDC0000-0x00000125BBDDA000-memory.dmp

memory/6148-12398-0x00000125BA5B0000-0x00000125BA5BE000-memory.dmp

memory/6148-12399-0x00000125BA600000-0x00000125BA608000-memory.dmp

memory/6148-12400-0x00000125BBDE0000-0x00000125BBDEE000-memory.dmp

memory/6148-12401-0x00000125BBDF0000-0x00000125BBE00000-memory.dmp

memory/6148-12402-0x00000125BBE00000-0x00000125BBE0A000-memory.dmp

memory/6148-12403-0x00000125BBE20000-0x00000125BBE2A000-memory.dmp

memory/6148-12405-0x00000125D8AB0000-0x00000125D8AC2000-memory.dmp

memory/6148-12407-0x00000125D8AE0000-0x00000125D8AE8000-memory.dmp

memory/6148-12406-0x00000125D8AD0000-0x00000125D8AD8000-memory.dmp

memory/6148-12408-0x00000125D8B80000-0x00000125D8C02000-memory.dmp

memory/6148-12409-0x00000125D8B50000-0x00000125D8B72000-memory.dmp

memory/6148-12413-0x00000125D8B30000-0x00000125D8B38000-memory.dmp

memory/5020-12414-0x0000000000290000-0x00000000002CE000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CryptoTrader BOT.exe.log

MD5 c95e300f659a8dea609dc3501d232db3
SHA1 05139e1e74079d136c326912af4938a3bbc1de9c
SHA256 b580eb8d5f8f97e90448655df1fc477aea550783f935ff53fb8abcc3351a0eee
SHA512 eb91768559b7ff33818c30491dc922241a9d2cf2a0816116bbbf33a2b43a535d89406fd32265e33054333d597e9243ebc359b2bfe91ff01d21008894d317ca0c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\etc817bi.default-release\datareporting\glean\db\data.safe.tmp

MD5 8a5080315ef1b1d080fa2688a8bf6a1b
SHA1 3b83d390a0760dcf87741773727ad40de3fafa4a
SHA256 dd851739b2ced64c389fa2470790ab47a8af1657c4b481de6246dbc938d30e15
SHA512 bd5532f32fd3f1d0b58a3b73a412e67eed21b7ef1e6c3f611ff32b7bed9c1d3c37c69ed71ba3772c9e40d7b243e3cf6593036547303040ed5ad68718c2c44c24

memory/2860-12465-0x0000000000C20000-0x0000000000C58000-memory.dmp

memory/2584-12467-0x00000220999E0000-0x0000022099A98000-memory.dmp

memory/2584-12468-0x00000220B3EE0000-0x00000220B3FB0000-memory.dmp

memory/2584-12469-0x0000022099E50000-0x0000022099E74000-memory.dmp

memory/2584-12470-0x0000022099E20000-0x0000022099E26000-memory.dmp

memory/2584-12471-0x00000220B4CD0000-0x00000220B4DC8000-memory.dmp

memory/6148-12494-0x00000125D6020000-0x00000125D6028000-memory.dmp

memory/6148-12493-0x00000125D6010000-0x00000125D6018000-memory.dmp

memory/6148-12497-0x00000125D60B0000-0x00000125D6126000-memory.dmp

memory/6148-12498-0x00000125D6240000-0x00000125D625E000-memory.dmp

C:\Users\Admin\AppData\Roaming\MultiMiner\ApplicationConfiguration.xml

MD5 83b6a1eb7fd9a21fccf82253a638e5b2
SHA1 61ecbcb15dc69604ec59d4b94184f06549ed79c0
SHA256 8f63fa729975e1eeca16f66061a081955d5df875d59d4b0c1e811ce6bc413bef
SHA512 ff65c44cd21b66ba2bca1afc70f1217d62671ad2e30658ed53571f5fa5cd026129330bcd3f493934378b5d80f136bf730a737c12ee8ba5f58985a2698692bacc

memory/2416-12536-0x0000000000060000-0x00000000000A8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 e59ee997156e15f61872b837d56def90
SHA1 b051ad53a3bf85796c89a4439e5301d51a4a4cdf
SHA256 ee85fc02ab1f1d4f537a70182927b773979b960ae3dca5fe3093052fb352daf5
SHA512 6e8df24b6013718564f93e77f88f15468de5cb39a7551fadb5d2f917022ec29555bab33314c83dd1bb5fdcd033f00b018755b33d914af6381b4f2046082745f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 2946d51b200e99cb6d11c502fd007785
SHA1 e661cee86fbbaa5d776b301c45e8027d7bbe24b0
SHA256 696b697e16f6a3c2d287111e20d9797acd29ddd734031a8463233ca731ad6bf8
SHA512 9f96976d705379086a0cc6b5833057ba8a08af00939720955f9d156eb7a9ef1988d6397137e38a431a995809fa29300ab0e9f86681ff9bb7db6b1b2cea8d0aa4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 5fc196860cdb433442078a9131ff2211
SHA1 19484f4cbc5ee6d9f9675b1da6bf6b7ac67e955d
SHA256 5701c0a10f1aed8cb66a26c735fdd21abecf13093564b95d52c621c4fb480ce2
SHA512 fcb671ae729eb3ef37a69d0f6794bd0d42c34d5cdd4ccb90a5826f0e04190e06775cf2bb19f64c4b539c3f9ebb60938a42cbdf050cbfcff1c3da10ce30074451

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 6bef1e665831213c80169f04bf234de7
SHA1 4e4b630f52e57acd88801094dbada4c6238c5e05
SHA256 c0ba0caba436252c7c5705943d5d971ac8e7f51ed82c3badbe68d5b7d825dfa4
SHA512 63c8108dedc9feab8bc40d53aeb286b9a690962dc0c2ac37c8153db8406f29c3d8d94ee22b71d7cf593fc599c01baa2b4c63aeb3b4c08948a44015bd1d8888d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

MD5 bec2af13143a7771b0b89cec2ab92b27
SHA1 9cd25b2c17a630fd0d6dae4aa80ea510ef4b89b2
SHA256 52aa9c3bdb64b5d1c1fe6dbf456fc50da434916b6c7489f3c64a0ea9253408ab
SHA512 42d00250350982b0d3f26b84f33cc1365c8ab57f830f2f859cf3cdc8ba2879c09249264b1177c4b85de6a2461efe06620668c8d5bb036fde0b0030fa246075b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 622921477473e93dd9223d6a6047dae2
SHA1 c6a5bc5a590fa0c75b3725ceb8b2628671ec54a3
SHA256 b1ee18ec4b74bd98f27151f10efdf21e03ae7b5c8398309de570318eedd29b0f
SHA512 df56309937468d93ac2478141e5111568b5e18c3e16d20f62e437e60f5e5a3b8212fbc17feb1cb089490f5f627dd62899ea5506535b3f5e99ee3783cca4eb6e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 57632c3e3288b2d52d3a6ac63d989c5a
SHA1 8bd0a80782c89a5da2e8d950205dcd93aab5387e
SHA256 f63506da8221e2480de12f403a9a18c91470ca131cf67b83dd7e003dcedaa611
SHA512 e63931370f5449e16030189ea1e5da61bb654f61e34b713fc46e0e20071c1b1f5d52fdb8ac6495fe4d2de1929b0eb2ca6a1214b2dd99133b6f2cdbfdf6f36554

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 43d894a0f6f73bc8db80ed1ed422a548
SHA1 875ab1efddf388af37c38988c3f93ed7020f2fc3
SHA256 9c90304354365f943ee07412bcb2b86acc6b987009c9cd6567571d038f22bfdf
SHA512 b64d61cf9b846921b80015f345b36abab8a7a5675b5ef754d453534f478d3a797f15578af51434831b9cd07c775e7b5539052fd014fa3ae45ccaf88746cc7ecf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 96086653eb87cbdbdab3099878361e9d
SHA1 b07d59f30b416c780160b3311f942950afa75271
SHA256 25f4e411aa276a91e6fd761794172c9ea26a867eaf4406c3c89c94d059f87895
SHA512 eaf991716b1dde233c357d2b31a06c105dc8a001860a530e6f30cc8fca34c242ec8d5d0b60bd0ab0000ffdd70bfe2c9d876c0d07e5e9c6a4c6ab399026938e47

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 d24b455b4cc2e87e4df271b340573718
SHA1 72e304c03204ea9df2a89580dbd3cb7707972387
SHA256 813322dd5177659f6aa3484b9009ba5124d7593a5aeda3d074d9fa941bde125d
SHA512 6502626b9478a90755d5e05454d041d087114929d3ab7a4df0a7caa37726fa67b69cf4ceddbbd12ae2f1ad8937ba223fc61f486823b331686e6f412819055696

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f07f00c06f94f899094660e2c90136d2
SHA1 869cf2e348eac11e5db109389f5d8b6a162ffdbf
SHA256 e6b1b1ad868baf25b9e68ce0293520bc64bc84f5f67c9e69fc3276f3774016ca
SHA512 1bdabd7f880fa297a07562b5d8a22f5a52efa5498540ccf9662b04cea39e50016933295e0df055856d197c3e5b5bbd31e442df00d42dfab91f390d2bcc51fc0d

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\combolist generator BY X-KILLER\Virus Total\scan.txt

MD5 2e99fbaf1ad4f921ebe1ba0adb710c25
SHA1 6335db361e4666581ca3fd9d594ab1827dba734c
SHA256 f2f02c614c4a88b423ad0a404f7f5e7c1d33c5445e75f3d6f651ae6e791cdd57
SHA512 ac7ccfcc0fd077218cfc8130d587ef03f2e2ca539b052e1f8c224f46a000884b1da1c7daa43600f767b8f3c4da545e0a3832f75caa771022281dbf75ef1ea175

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\combolist generator BY X-KILLER\Virus Total\desktop.ini

MD5 c279803b27f13369aa54fc9b84b72468
SHA1 01d430e118952d9e077fdcd7ff13084d375995dc
SHA256 d80758a34364cab9de42ff6ed57bcc753a0936ddddf9952c5b4fb9ff0d7966c9
SHA512 2ba7cfe2fd561a0cc4fdc39ab7e6fe9ea9aee8618afe31030a0a79af06542b83ef66ec4817c646f027e1733263cb46a9a9b6432f01f6a938fa29080a59e44678

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Discord Account Generator v2\rdpcorets.dll

MD5 b68448b360e7660dbf1d48f2a15087f9
SHA1 35a7a6bf7c94804c94d6b7423d7e58d28fcba4b0
SHA256 0570048261865f95bfa88d97ed32afe75b6e376d4c7050a2aeb956bdaca45a34
SHA512 fb342aec978504646649dc573971a5bec83aa3f34abffa70f30bbd2841c3fe1e1a10c421c903c3a1ca390480c5f731cf7552d3143ba60eb09e8ea2c78dee9565

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Gift Card Generator By MT_SOFT\secproc.dll

MD5 c72b72a6f2eb72bc6dd0a2a2164e02e3
SHA1 18825cc35e84e960c3c26e23f99fdc80bf346632
SHA256 b008544fc732a9c05a1479a2631dbe005e24b69c4abc2922ec7bd87337b76644
SHA512 0b73040f80a477b307efa6ca2baa2d8bac7e203b8a23d7e3e5b7daaedc1940778b805e3fbed5c12cf6516f09e243f77a55c404bf2c12b6ee6288f7b2a80f5f98

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\In Shadow Batch Virus Gen - 5.0.0 - MOD\msacm32.dll

MD5 67705d9f5cc5b1b5369020db75a96cca
SHA1 361570bd4996035fae9a00643e2702af71c20258
SHA256 a81f6c00abb9f93e087e7cc327152548d48ac41e4e87b641d35de9ee9c32c428
SHA512 9daeb80668c3fb6ef30d7cd3ef0dc299f88ee4c00ce0abe6ccc21c345102e4a1b7584b25da8a90b2d7126df3da42fc0704db9a32f3da0a3d456a03d0e821f1e0

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\In Shadow Batch Virus Gen - 5.0.0 - MOD\data\Xceed.Wpf.Toolkit.dll

MD5 c3d181ab31e5bec15d266f50c8bfa4d8
SHA1 e46b04fe9e1620945881404fcdc73588e84f2dd9
SHA256 d78d3c61c4665c703976f5f697187669a5ef888ab1c00ebaabc0bcf409e833ae
SHA512 11b0dd0ba7292b5aceceb8f55a388571663f2820c55582e39f7e2727ff4e7ea0e3b51e24ae37c858326f3d1b3ce2ff272703c904dafc11b766ecfbdaaca59572

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\In Shadow Batch Virus Gen - 5.0.0 - MOD\data\WebDriver.dll

MD5 9283cfa187616d4db0e41bdab6083d88
SHA1 066b9bcbaade014d100e8077124ee6152b233615
SHA256 0ee619b1786cf5971c0f9c6ee1859497aecba93a4953cf92fea998e8eefadf3c
SHA512 e3f4e406d3fc8518c0b204046b648e23c9008067ed4f4855a023f1c7a38a4309e637f3230e39bfdfec245631b4f8678b772cf32b563ff33f59881048a107a090

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Proxy Generator 1.3.6 BETA\bin\IronPython.dll

MD5 9a39a51e6dcb22b80db481fbfbcd7826
SHA1 1684cea396967b979000d7d0bfef7db166703a2b
SHA256 61b809b97dc878f42e85ee2c5d8471853527754e4f53b17c0507334c57e19e04
SHA512 292e5d8d0a901b104a0cc760fc1946088e5cdf404008521a6db150e54e6b31b0a104ba6655aeb310ad0b2906b1b460a4c5cdd31b57f33ae729a833e8dc2566bd

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\PSN Gift Card Generator\CloudflareSolverRe.Captcha.dll

MD5 2e7fc88dc1f92061db050d238d1e69d4
SHA1 41cc2b71f3ac55ecb0ce7b332b00cb1d74676c7f
SHA256 902f76b8cc416cfb6f25daea0ec128161ea50404a857773909db8941f0b79e31
SHA512 044776a7a4d8c0401551bd09b6323074000503fe226d18957e21ad0ad853daf75e24191b54f67071ecddf54c678bbffe1e5509dd7b2f53cce24069e47f93f2ea

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\PSN Gift Card Generator\database\edbtmp.log

MD5 b6d81b360a5672d80c27430f39153e2c
SHA1 3b71f43ff30f4b15b5cd85dd9e95ebc7e84eb5a3
SHA256 30e14955ebf1352266dc2ff8067e68104607e750abb9d3b36582b8af909fcb58
SHA512 d6292685b380e338e025b3415a90fe8f9d39a46e7bdba8cb78c50a338cefca741f69e4e46411c32de1afdedfb268e579a51f81ff85e56f55b0ee7c33fe8c25c9

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Stolen Nitro Discord Code Generator\_Stolen Nitro Code Generator_1.0.0.0.ilmap

MD5 4e7c42c9b8c620681c7188ae1fb2ef65
SHA1 8ef539f85f55c6817de08c6ca46abd52e1588bca
SHA256 1030ea5bb20a6224ff2ac8bc2aeb60f9ff98146f695001a7eae9d392c3ce8253
SHA512 a470aff60af14ddcd85d0510912a08d7f9e076b0cb74c4844639cfc001cead5de46feb394e40194a92356b94e4cde1a5ca78b1357fc7713cce82a28ee9e18a48

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pageformats\preset3.txt

MD5 87f4c2439ddd025a233bd5aaf3656168
SHA1 8e06a46d5b4193d809da6040c3d2546537b035fe
SHA256 516bf2da52790e61df36eb8ad74ff5a458d44312e0cce3d08ca6fd5cd4619835
SHA512 5017c0654f5f1caf680b14bb3cb6f3dd020576ca6e74763f101633567a75565cdd080b8f08b79841830b4dc4f92a090f5e0d3684092a547ae643713a26948b36

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pageformats\preset4.txt

MD5 6c7fc3eb438d36797cd28bb6fc12d41f
SHA1 fa8b4584b640b68e73b9bd1d4649a6f15ec84822
SHA256 61d2085d7ffb226b76a13e885e9fef6cb3b77b6d1e54943e9ff3282c17526e1c
SHA512 56ae01a15f95d197931963b23bb82f1478e55a0c9177b9db77706b4589766fc1817577950f7b8398293dfae81e13bfe01232871d06af9a47c12c0deca79a273f

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pageformats\preset2.txt

MD5 c8630823238a94802dac85f7e44161fb
SHA1 c5cfcd593f229d280ae5e3a0b2d7c045a202f586
SHA256 3836540f46cec7da1593dbdb58f24d5775d1f0c4d67aacdd91ecebaa41f7f13d
SHA512 b45c6dece950dfb36636f126772e9e3c8e6569c6d2409760dc544b4f139ced96800e2e93424a60f71ee7fdc92912a42beaaca7275eaeda928e915f2da58178e1

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pageformats\preset1.txt

MD5 2b5731a9f0ce7d2f2a072722cbe79b0e
SHA1 1ed044758f4fc7ffa1036162939e0b3819027614
SHA256 581d58a3c96630d424548cf351407f0bb391c4626ffa688b9b11ab76e9877f1d
SHA512 5c8a03b1a841963db1ab1d87d9b3ee28a1ce034b6f766ae04645a7ea1041599254215976dc3d30ec15d28ea8cea06be003710525c288b6728c75e396217827eb

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\keywords\preset4.txt

MD5 0f66e729c9aec472641b571c2c0bab26
SHA1 018177d39ce577e6e76409f5b1d82d601838bd61
SHA256 405f1e7d0f5eceb5749886f690d1a915a08c7d9f357579e866bf1481b4200566
SHA512 96f197630fcf50a9e000bda3f56e453b908311ab7fdb7f6693d2def6809c2c5054b70493c3b28335ea1df666b7a877c420bfe952febe8dcab958bbd98f106af0

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\Settings\language.txt

MD5 a54755df5bde02687d657e9703763c8a
SHA1 0af546d58ada5760bf6451de7b72fb2e125687c1
SHA256 93eaaad295c94f5b52113b9032a16310e01a620e52557e4db08d826914bef869
SHA512 e1e6a9a91bd2089e3c95617b4912237590c92e8e4dda045ded142431ace2103110b303129102f2171d2a6b9ca79eea70839d37cbf572fa6e49f69b3e25f2d626

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fef23e50c12b4be71be148c0a2970e07
SHA1 bb00a307f533ec750baf980da5a1d6ee75f952b4
SHA256 80218bcd85d8117a1752a687502caaafb6c38f15fb8121069f19d89c89fb6568
SHA512 100b674f07420b2ac5c0c5b697a843797a2d2db5351baca8e8ebbfe74dc25a88416fb9d105626fbce2377d7fc68128b7916643369e656560acafcdc2b2b129c8

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Uplay Account Generator - Freedom FoxY\lib\nsi.dll

MD5 f1c7a0b888ae21b85749dccc18cb1b39
SHA1 e83a09f7bbc2fd4da8797e4eba9c3073d04eb6dd
SHA256 d70fe697431eaa77eee2d98d9ecda7a9f00ead5295593d7417ac0fe1696fae47
SHA512 4d03f7bac4701f8871a8598b8e07534526abbe907341dc569af1bd99b3825b160bef371d1b8d6d18b77b3fe97f4444ff567be58ed7ddfba13698999414e057fa

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\Uplay Account Generator - Freedom FoxY\lib\LiteDB.dll

MD5 25b242d00c6c32e1f437eb2064ea2e29
SHA1 3712bd78c80a237dd804ec77c64498defde12e94
SHA256 e72acddf47586bc0999d598e3bd125a254bb6f4ae151c076993304f6e31fbbed
SHA512 f1ca54008290f67825f4aa0c8f78476d0e4ebb3b7f50c338f51c87a96b0d25457496fe6062aa57e401c444f5aa80df8e6b97c2e681e699905f3dc39200d235d7

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\searchfunctions\preset4.txt

MD5 d212cd16ef187b1104d7dd8770e21a0d
SHA1 4bffa16b8c4d2cae20d5cfc5da2200ea857dc36b
SHA256 b8ed4fd33677f91883123d6d62f1fd4683785b3072b9a1ee6b5dd0107e0752dd
SHA512 d34d7af5ae605ffed815b7228c9bf4c5350f0d3925f418dd771c9f758e9e82f434e4a77b512b0fea4bc8435b38af0a5af2a39af5cfd8223650880ba5532aee1a

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\searchfunctions\preset3.txt

MD5 3090be520902b8c025561c8cf6e836ed
SHA1 f71db113749e04acf6b5e85d07fbc4868d176540
SHA256 248c07947ad2b6d9e99f9ca4f950965735acd0f70b34069c3615e863f02f40a1
SHA512 70f4f5b0482daa2979fcd9a9074f3eba8210e73a66ae604f0eda257f90379cfb4f20f1917427c350168069079da74a281beb6f1f33b509089c210502ded82251

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\searchfunctions\preset2.txt

MD5 0d1c471e849110783e72c30e42739d84
SHA1 85274e3f288fbff3d41e3891bb658a60f6e5be1a
SHA256 65660887cd06e72cf738fcf4bafb40f27d1a444dbbba82881038abb9e7a42e62
SHA512 b6f7c4a810b7909b2e9a483d142d3155be0fd1306c71d372cfd471430058cf5f6efbbf8db40dfa4c0244f94231761c575afe6cf1d95e93d77772fd9d47e7fe6f

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pagetypes\preset4.txt

MD5 d58f0023c6286e09e869f2c5b325c228
SHA1 7e2b8376d86e4fd00bae5cce9f0aa039d971a804
SHA256 0e37cfa88a01f7aa70a758da1d6e0dad6a5766425f0302ac0bbcd73071dd5c47
SHA512 94bdc823737c95853562f755d4d614e9ebe8d90da35a977d53988cc2c67930baf36d5b146e9fb5fb966d3c48d667d5949080c9c6bca345b14e7282a3c50a5600

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pagetypes\preset3.txt

MD5 191cbde5955ea52a58efd6d65d5c5156
SHA1 167b5a64140b3e49007bf0843a49fff95cf80d67
SHA256 14c9f52729b15b0e0b6c42f147513a7ff4edc45af6f9996030d56033d9ca022e
SHA512 bce2a287c84e0d5c332507ad15791b07f8cd0bf1cee817a010d04e0860945d7705d1a31dc3b0190b20d30d198cb44973823aaa569b97c973e019078dc99281e9

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pagetypes\preset2.txt

MD5 5429b5bed87190b6a82e57a4701d7256
SHA1 9649d7a48d99c9b8fbd50605defdc7ce7c0ade62
SHA256 85e3265a68c922bfaf3e0435dadcd2d511b7b4e605e31e28ffd54a4d70cff9e9
SHA512 157145dd5cb4766e11192a627fdbcbb3b65dc707ff186c61a8dc3feec60edfa014e7590dafb2d77c3c7f6abf6fa637d7864ba25eeaf68ba21c28892244f47ea1

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\pagetypes\preset1.txt

MD5 bab63182b97f9e5678786aecea52700f
SHA1 f1ab3751655eb24a8c2e9c2cc7102c041672c212
SHA256 f5f82368c882677ed966753cfa4371de6ef5214ccfc3ebaee050e3afddffbc5d
SHA512 d81838356006205007ff3dfbd9fb1df76d60ba78503a96a15f8effac1e6b8bbfc348062389c83c9e3a64b4586ce469462d53fe029acdabc95272fe8aad22b4d5

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\keywords\preset3.txt

MD5 fe3b7ad87d2546b67915e710c73ab2e8
SHA1 ab0e26f465704b92f212390d2e34f797815cb1b0
SHA256 7258ddb3adb38169e5a4192a52829963f83c9f9f2311d124d516b3d46cd9937a
SHA512 1aec6f5d869d13aa16ba54ff4b068abe200175c7cc8ae2b91357692ddd7ef42df3c76e2c3794c9445cdfc526466a96241d4f0db77c0ca22cca73f28f484d82a5

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\domainextentions\preset4.txt

MD5 d226f5e0575e845ddb610e0dab8654aa
SHA1 65cbd013a833e31440b062904b7afeb7e3d5447b
SHA256 946666992dbd0b0f4fe9021f312c616aad550091d1097524b4ff1df738b64b7e
SHA512 534c03f1a5125f3953c4137776e424ab8f5149dffc2536a77cd8950c48ef3e3fedf135bbcf563844dabb9d3f09e4a9f30f5d5b73749d876be18e35d8c5df0399

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\domainextentions\preset2.txt

MD5 9bc73c29ce06144a655572deefcaabdc
SHA1 5d4a166dc0153c455259fd82d84d8a3e0e4b8c17
SHA256 bf65df2fcdf6b14147223c9c82172a2fcd9c668924381bd00618c4b57cc4da2d
SHA512 9a5c5c62929bc83eb390ab71918c49b4c59020c02e49bfdb6537fa29a39966f11989aaa103d5a549e796f75f3d53209deaa2397525cacf28ae01017b34d4f57d

C:\Users\Admin\AppData\Local\Temp\7zE8CCE3D94\Generators PACK\TSP Dork generator v8.0\Data\presets\domainextentions\preset1.txt

MD5 67815bb37d3b3d1bf9cd8d247df71921
SHA1 7d24b602f8687cad4fb3ff0ad6c170a712683e8a
SHA256 ab11a70eef7ba2a8f146864ec8a4e675c0834a71e02087b86815eef7f3b1f4ad
SHA512 a623414f8f341d9784d6a732cc871626fd00a092c8b44af8d80f81ad30250be4d88dff3bdec887c167f35afe82283d5c4ab9a9423eed92cc26daeefe2d35a7c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3c3c3628add08c877b104f8e08fc13f0
SHA1 ff80036f2aebd7f3ffba104c12c35b9bcf54e41c
SHA256 0a0b5a6a8815fb036dac68366d5108cd9cbdd8a2320e7541bf6a62f7277dca23
SHA512 3521b7747eb63677a9456f36a248842e6363df937756d70c63c427ec5568764e7610065ab308fe55428d1187b26ffaca26bfb97c9fd5e71fc2e93748c24f2ced

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 47577337ea2f4edebf2c844e3bef9f03
SHA1 179acae7e3498416440ba98c90d1bc347d675767
SHA256 e5c204a967e041342876e93e2ace75f7ed05a9dfa851015618d51ecdd3f58c67
SHA512 c8c4949b2c1bb51c5572e36053171282ad18b52286e991f45253592be5929b0b3919f7d52ee769a34ea27935a4d8e72a4ff9cb850f751aa0a5640ffc49a780d4

memory/5188-13664-0x0000000000400000-0x0000000000438000-memory.dmp

memory/6988-13670-0x0000000000270000-0x00000000002A6000-memory.dmp

memory/6184-13672-0x0000000000C80000-0x0000000000C96000-memory.dmp

memory/6184-13673-0x0000000005660000-0x00000000056B4000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a8ad5793aeb97638ce2ec3af32e303ab
SHA1 b1ce1e85dc205aa2ede533d0a6bff1488e5a21fb
SHA256 376c43b2f988c3273643ffcaa2efd8b19bc19b97875b9069cbb32b33ec226bbb
SHA512 7eddc935a67da3e512a3fc40e9a8bb711a72eae7ed8284b4027c7345ed1e5e4c35ee09400a5cabce18b584f2b16e16cb0a8360d398675f1f7ea09a224b5edd75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7d385f994e39ca269d8e270f37015df9
SHA1 fe1db5eb80c0c8d0e09f6e04b2e89299d719b0d5
SHA256 9d0bdeb9fcd9a12c0b409dfd46a0b6b84b1d84f5a8d93b63a6e579dfb4f8a9fd
SHA512 5fb4dd3a1b2bf1124a326316d016274b442069a542617bcf66c6b2509686e3b2071064647c3854c8b296015f7a9ca3bec3c07de2e4b0af3da4408005d3945feb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7abe646296fc5eeafe29cb0eb4ba13b6
SHA1 2da5bbace345dbb5338aabffe509289f1fd14348
SHA256 fec436f248208c97058d9df1dc665d55be0ce3489cb2ed018c7a757e93a43087
SHA512 b99f28effdeca7d16727aaf50fc0de444751c93a5e3b5ea38fe62c0bcd0988989b6fe719a719b0807be5099732d41059d0ba9a440c449d6be46f9fc346186a59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 512e8e4850c4a29e470eb7dc0088b9d6
SHA1 b6e3052aaed138b4066cd3cd72fc6646d1d1ee61
SHA256 cb850ab29e737a416964fd11a9edd992e9e7ce36a3bd8edddfc7a46b775f3d24
SHA512 0a9de95ce355f6cffbec470789cffcc2a914cd6a7f2444a8215a463ee1a466f8c9b6a5af4322148d0a942044f712737b31339efdb51ddff46cd3276bf6a9f5e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 62e6ddf4e14f9ef5777a7e379b562867
SHA1 8077f24088f0786e863f6e50d7f2a6e1095ab198
SHA256 df53485f4dd5a38718b11221d940084ad2bd7d52eccef9e51295c943e2ec603c
SHA512 fa31772bf11b446cc38db58dbf54d5a8bf76fbba28f4a121b798b205de5a781e6588b568ca0cfca0b204f274de67abd76f2d3e84b303d35b1d79064ecf304cd3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7b01c91e2d2af055b4a8f4f86f468e42
SHA1 c8c540779285aca3c45f4ffad1828bb1806d0f4d
SHA256 8754429b3c8ec4b5bbd8e7bceb1f3ed140d02ab812f9e1a7730876407640603f
SHA512 f3af8fb89b359e1cdbfad4e63f0261fe8b72ac00080f35f8884005b61565d8ddc6f7da949960b7e4c08ba28174f9febcf4dc21468d9fb474a96f8ffe7773bf43