hxxps://download2300[.]mediafire[.]com/bf3sescg508gk5f-TrqWtmwntzBRgciXbcqwZwRDLhQdLyxtVtgbtY5zyhAaWiDNl1SjjZ5FFS0-1r5ZPGKh7qPIbYXMzVQjbHxZoez3WLiXTZekuMEj44qaLNYsjwQI_QL295Cg3j9qXGL7xlpLpH81RUShfW0YVss34YqbFwjz/vtqh4mre5e2u4el/Wave-Setup[.]exe

Resubmissions

06-12-2024 15:47

241206-s8ddps1jcl 10

06-12-2024 15:45

241206-s644mszrer 1

Analysis

max time kernel
538s
max time network
543s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-de
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-delocale:de-deos:windows10-ltsc 2021-x64systemwindows
submitted
06-12-2024 15:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://download2300.mediafire.com/bf3sescg508gk5f-TrqWtmwntzBRgciXbcqwZwRDLhQdLyxtVtgbtY5zyhAaWiDNl1SjjZ5FFS0-1r5ZPGKh7qPIbYXMzVQjbHxZoez3WLiXTZekuMEj44qaLNYsjwQI_QL295Cg3j9qXGL7xlpLpH81RUShfW0YVss34YqbFwjz/vtqh4mre5e2u4el/Wave-Setup.exe

Score

10^/10

microsoft defense_evasion discovery persistence phishing privilege_escalation product:outlook

Malware Config

Signatures

Detected microsoft outlook phishing page
phishing microsoft product:outlook
Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0"	MicrosoftEdgeUpdate.exe

A potential corporate email address has been identified in the URL: =@L
phishing
A potential corporate email address has been identified in the URL: currency-file@1
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000\Control Panel\International\Geo\Nation	Wave.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000\Control Panel\International\Geo\Nation	Bloxstrap.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000\Control Panel\International\Geo\Nation	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000\Control Panel\International\Geo\Nation	Wave.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 19 IoCs

pid	Process
1456	Wave-Setup.exe
3672	Wave.exe
3036	Wave.exe
1396	Wave.exe
6668	Wave.exe
7144	wave-luau.exe
6768	Wave.exe
4420	Bloxstrap.exe
11892	MicrosoftEdgeWebview2Setup.exe
7868	MicrosoftEdgeUpdate.exe
2068	MicrosoftEdgeUpdate.exe
2764	MicrosoftEdgeUpdate.exe
8668	MicrosoftEdgeUpdateComRegisterShell64.exe
6516	MicrosoftEdgeUpdateComRegisterShell64.exe
2212	MicrosoftEdgeUpdateComRegisterShell64.exe
3760	MicrosoftEdgeUpdate.exe
1404	MicrosoftEdgeUpdate.exe
3088	MicrosoftEdgeUpdate.exe
1016	MicrosoftEdgeUpdate.exe

Loads dropped DLL 33 IoCs

pid	Process
1456	Wave-Setup.exe
1456	Wave-Setup.exe
1456	Wave-Setup.exe
1456	Wave-Setup.exe
1456	Wave-Setup.exe
1456	Wave-Setup.exe
1456	Wave-Setup.exe
3672	Wave.exe
3672	Wave.exe
3036	Wave.exe
1396	Wave.exe
1396	Wave.exe
1396	Wave.exe
1396	Wave.exe
1396	Wave.exe
6668	Wave.exe
6768	Wave.exe
6768	Wave.exe
7868	MicrosoftEdgeUpdate.exe
2068	MicrosoftEdgeUpdate.exe
2764	MicrosoftEdgeUpdate.exe
8668	MicrosoftEdgeUpdateComRegisterShell64.exe
2764	MicrosoftEdgeUpdate.exe
6516	MicrosoftEdgeUpdateComRegisterShell64.exe
2764	MicrosoftEdgeUpdate.exe
2212	MicrosoftEdgeUpdateComRegisterShell64.exe
2764	MicrosoftEdgeUpdate.exe
3760	MicrosoftEdgeUpdate.exe
1404	MicrosoftEdgeUpdate.exe
3088	MicrosoftEdgeUpdate.exe
3088	MicrosoftEdgeUpdate.exe
1404	MicrosoftEdgeUpdate.exe
1016	MicrosoftEdgeUpdate.exe

Checks for any installed AV software in registry 1 TTPs 1 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000\Software\KasperskyLab	reg.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 8 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	MicrosoftEdgeUpdate.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	MicrosoftEdgeUpdate.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
3384	tasklist.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe	MicrosoftEdgeUpdate.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\psmachine_arm64.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\psuser_64.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_is.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ro.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_zh-CN.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_gd.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ta.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_bs.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdateOnDemand.exe	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_el.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_fa.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_fr.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_hr.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_iw.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_or.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_sr-Cyrl-RS.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_es.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ml.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_cy.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_kok.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ug.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_hi.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_pt-PT.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_sk.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_pa.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_sq.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\psmachine.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_da.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ja.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_km.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ga.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdate.exe	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ar.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_hu.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_sl.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ur.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_bn-IN.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\psmachine_64.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_en.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_nl.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_de.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ko.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_zh-TW.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_eu.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_te.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ka.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\NOTICE.TXT	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\EdgeUpdate.dat	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdateCore.exe	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_am.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_es-419.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_sr.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_az.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_fr-CA.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeComRegisterShellARM64.exe	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\psuser_arm64.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ca.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_ru.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_th.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_af.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_gl.dll	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe	MicrosoftEdgeWebview2Setup.exe
File created	C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\msedgeupdateres_fil.dll	MicrosoftEdgeWebview2Setup.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	Wave.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\INF\display.PNF	chrome.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\Wave-Setup.exe:Zone.Identifier	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Wave-Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	find.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeWebview2Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MicrosoftEdgeUpdate.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
3760	MicrosoftEdgeUpdate.exe
1016	MicrosoftEdgeUpdate.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133779740220254763"	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods\ = "10"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\VERSIONINDEPENDENTPROGID	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods\ = "41"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods\ = "43"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods\ = "10"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\ = "Microsoft Edge Update Broker Class Factory"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\VERSIONINDEPENDENTPROGID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\LocalService = "edgeupdate"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\VERSIONINDEPENDENTPROGID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.Update3COMClassService"	MicrosoftEdgeUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ = "IBrowserHttpRequest2"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4152190078-1497776152-96910572-1000_Classes\roblox-player\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe"	Bloxstrap.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.CredentialDialogMachine"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{A6B716CB-028B-404D-B72C-50E153DD68DA}	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods\ = "41"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\PROGID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ = "IProcessLauncher"	MicrosoftEdgeUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\VersionIndependentProgID	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods	MicrosoftEdgeUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation\Enabled = "1"	MicrosoftEdgeUpdate.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\VersionIndependentProgID	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3"	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6"	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32	MicrosoftEdgeUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}"	MicrosoftEdgeUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32	MicrosoftEdgeUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods	MicrosoftEdgeUpdateComRegisterShell64.exe

NTFS ADS 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\Wave-Setup.exe:Zone.Identifier	firefox.exe
File created	C:\Users\Admin\AppData\Local\wave-updater\installer.exe\:Zone.Identifier:$DATA	Wave-Setup.exe

Suspicious behavior: EnumeratesProcesses 19 IoCs

pid	Process
1456	Wave-Setup.exe
1456	Wave-Setup.exe
3384	tasklist.exe
3384	tasklist.exe
3672	Wave.exe
3672	Wave.exe
6768	Wave.exe
6768	Wave.exe
8676	chrome.exe
8676	chrome.exe
9424	chrome.exe
9424	chrome.exe
9424	chrome.exe
9424	chrome.exe
9424	chrome.exe
9424	chrome.exe
9424	chrome.exe
7868	MicrosoftEdgeUpdate.exe
7868	MicrosoftEdgeUpdate.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2984	firefox.exe
Token: SeDebugPrivilege	2984	firefox.exe
Token: SeDebugPrivilege	2984	firefox.exe
Token: SeDebugPrivilege	2984	firefox.exe
Token: SeDebugPrivilege	2984	firefox.exe
Token: SeDebugPrivilege	3384	tasklist.exe
Token: SeSecurityPrivilege	1456	Wave-Setup.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeDebugPrivilege	5700	firefox.exe
Token: SeDebugPrivilege	5700	firefox.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe
Token: SeCreatePagefilePrivilege	3672	Wave.exe
Token: SeShutdownPrivilege	3672	Wave.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
1456	Wave-Setup.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe
8676	chrome.exe

Suspicious use of SetWindowsHookEx 38 IoCs

pid	Process
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
2984	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe
5700	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 1636 wrote to memory of 2984	1636	firefox.exe	80
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 1052	2984	firefox.exe	81
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82
PID 2984 wrote to memory of 4400	2984	firefox.exe	82

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://download2300.mediafire.com/bf3sescg508gk5f-TrqWtmwntzBRgciXbcqwZwRDLhQdLyxtVtgbtY5zyhAaWiDNl1SjjZ5FFS0-1r5ZPGKh7qPIbYXMzVQjbHxZoez3WLiXTZekuMEj44qaLNYsjwQI_QL295Cg3j9qXGL7xlpLpH81RUShfW0YVss34YqbFwjz/vtqh4mre5e2u4el/Wave-Setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1636
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://download2300.mediafire.com/bf3sescg508gk5f-TrqWtmwntzBRgciXbcqwZwRDLhQdLyxtVtgbtY5zyhAaWiDNl1SjjZ5FFS0-1r5ZPGKh7qPIbYXMzVQjbHxZoez3WLiXTZekuMEj44qaLNYsjwQI_QL295Cg3j9qXGL7xlpLpH81RUShfW0YVss34YqbFwjz/vtqh4mre5e2u4el/Wave-Setup.exe
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1952 -parentBuildID 20240401114208 -prefsHandle 1864 -prefMapHandle 1844 -prefsLen 23603 -prefMapSize 244628 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e040b4b2-aae2-4c46-a5e1-7a8269bcb89b} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" gpu
    3⤵
    PID:1052
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2400 -parentBuildID 20240401114208 -prefsHandle 2376 -prefMapHandle 2364 -prefsLen 24523 -prefMapSize 244628 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c2017e4-1a63-409f-98e0-41a71c97d635} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" socket
    3⤵
    - Checks processor information in registry
    PID:4400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2568 -childID 1 -isForBrowser -prefsHandle 2988 -prefMapHandle 3028 -prefsLen 22590 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3ea3dcf-089c-4445-9d97-08bd7afcba78} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:4364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4180 -childID 2 -isForBrowser -prefsHandle 4176 -prefMapHandle 4172 -prefsLen 29013 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {027d0cc7-8f41-42c0-a0b8-2455e43c8699} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:1268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4688 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4896 -prefMapHandle 4852 -prefsLen 29120 -prefMapSize 244628 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3b9265c0-e2f0-40ca-a14c-ee84fd379b8b} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" utility
    3⤵
    - Checks processor information in registry
    PID:2520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5392 -childID 3 -isForBrowser -prefsHandle 5412 -prefMapHandle 5408 -prefsLen 27029 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e53d1f7-f18c-4128-8060-f360b76b674e} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:628
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5508 -childID 4 -isForBrowser -prefsHandle 5512 -prefMapHandle 5516 -prefsLen 27029 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {790b7623-8540-4b87-83ad-29dc216672b9} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:3364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5788 -childID 5 -isForBrowser -prefsHandle 5708 -prefMapHandle 5712 -prefsLen 27029 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6cbb745c-dfbb-4f02-8761-548d88487e41} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:4688
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6140 -childID 6 -isForBrowser -prefsHandle 6132 -prefMapHandle 6128 -prefsLen 29160 -prefMapSize 244628 -jsInitHandle 1096 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0efe749f-1864-401c-8ccf-a1495bfee3e7} 2984 "\\.\pipe\gecko-crash-server-pipe.2984" tab
    3⤵
    PID:3300

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:116

C:\Users\Admin\Downloads\Wave-Setup.exe
"C:\Users\Admin\Downloads\Wave-Setup.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1456
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Wave.exe" /FO csv | "C:\Windows\system32\find.exe" "Wave.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4292
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Wave.exe" /FO csv
    3⤵
    - Enumerates processes with tasklist
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3384
- - C:\Windows\SysWOW64\find.exe
    "C:\Windows\system32\find.exe" "Wave.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:116

C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe
"C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3672
- C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe
  "C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1804,i,7542996368411637268,14708014453398206942,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1796 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1396
- C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe
  "C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --standard-schemes=app --secure-schemes=app --field-trial-handle=1980,i,7542996368411637268,14708014453398206942,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1840 /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3036
- C:\Windows\system32\fsutil.exe
  fsutil dirty query C:
  2⤵
  PID:6248
- C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe
  "C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --standard-schemes=app --secure-schemes=app --app-path="C:\Users\Admin\AppData\Local\Programs\Wave\resources\app.asar" --enable-sandbox --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2844,i,7542996368411637268,14708014453398206942,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:6668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKCU\Software\KasperskyLab" /v Session"
  2⤵
  PID:7120
- - C:\Windows\system32\reg.exe
    C:\Windows\system32\reg.exe QUERY "HKCU\Software\KasperskyLab" /v Session
    3⤵
    - Checks for any installed AV software in registry
    PID:5272
- C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave-luau.exe
  C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave-luau.exe lsp --definitions=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\globalTypes.d.luau --definitions=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\wave.d.luau --docs=C:\Users\Admin\AppData\Local\Programs\Wave\resources\node_modules\language-server\en-us.json
  2⤵
  - Executes dropped EXE
  PID:7144
- C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe
  "C:\Users\Admin\AppData\Local\Programs\Wave\Wave.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --user-data-dir="C:\Users\Admin\AppData\Roaming\Wave" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4216,i,7542996368411637268,14708014453398206942,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:6768
- C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe
  C:\Users\Admin\AppData\Local\Programs\Wave\bin\Bloxstrap.exe
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Modifies registry class
  PID:4420
- - C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
    "C:\Users\Admin\AppData\Local\Bloxstrap\Roblox\Player\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe" /silent /install
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    PID:11892
  - - C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\Temp\EUFE44.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
      4⤵
      Event Triggered Execution: Image File Execution Options Injection
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Checks system information in the registry
      Drops file in Program Files directory
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:7868
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:2068
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:2764
      - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:8668
      - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:6516
      - C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Modifies registry class
        
        PID:2212
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEU5RkE5NDktNzdCQS00OTVELTk3REMtOUUzRkVBQTc1NzAxfSIgdXNlcmlkPSJ7RjFCNjkyNjYtMTBGOS00OEJFLTlDMzItRUM2NDhCQTVBMkZBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszRjA3NTg0Mi01NTk5LTRCQkEtODlBRS0zNzAxN0QwOEQ2QjV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTY3NTU2Mzc1NSIgaW5zdGFsbF90aW1lX21zPSIyNDE4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks system information in the registry
        System Location Discovery: System Language Discovery
        System Network Configuration Discovery: Internet Connection Discovery
        
        PID:3760
    - - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{8E9FA949-77BA-495D-97DC-9E3FEAA75701}" /silent
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:1404

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:5492
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:5700
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1944 -parentBuildID 20240401114208 -prefsHandle 1872 -prefMapHandle 1864 -prefsLen 24779 -prefMapSize 245047 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3956251a-416d-4124-ac29-b6a570ffbcd5} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" gpu
    3⤵
    PID:5796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2300 -parentBuildID 20240401114208 -prefsHandle 2292 -prefMapHandle 2288 -prefsLen 24779 -prefMapSize 245047 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e69d8677-e464-4697-81f5-678c6dc61c17} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" socket
    3⤵
    - Checks processor information in registry
    PID:5460
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3180 -childID 1 -isForBrowser -prefsHandle 3036 -prefMapHandle 3104 -prefsLen 25278 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {51e0ec72-71aa-4050-ba72-82ee2b43ed91} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5952
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4320 -childID 2 -isForBrowser -prefsHandle 4308 -prefMapHandle 4304 -prefsLen 30511 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9b42fee1-9c79-41e8-bfe9-864b884b3f54} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4844 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4876 -prefMapHandle 3012 -prefsLen 30618 -prefMapSize 245047 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f76910c9-b78d-42a9-a498-fbe902e8e89c} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" utility
    3⤵
    - Checks processor information in registry
    PID:452
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5296 -childID 3 -isForBrowser -prefsHandle 5276 -prefMapHandle 5272 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5cf9e97d-eef2-4071-90c1-c2cc870f608d} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5304 -childID 4 -isForBrowser -prefsHandle 5288 -prefMapHandle 5284 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5aafbb4c-f02a-4ea4-ab75-b230bf460adf} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:3620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5544 -childID 5 -isForBrowser -prefsHandle 5720 -prefMapHandle 5716 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {da7d60ea-9531-460b-8c9d-56f6616f673e} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6900
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6036 -childID 6 -isForBrowser -prefsHandle 2848 -prefMapHandle 2844 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f284df5-098f-43bb-b78e-8c892000a8ef} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:3236
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6460 -childID 7 -isForBrowser -prefsHandle 6452 -prefMapHandle 6436 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9c6179c-84dc-47a1-a4b4-3a4480acde62} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5216
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5820 -childID 8 -isForBrowser -prefsHandle 5808 -prefMapHandle 5792 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {993cde0b-bbbd-4fa3-8b95-b208422286e3} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:2552
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5772 -childID 9 -isForBrowser -prefsHandle 5784 -prefMapHandle 5672 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7803216-56e7-45d6-98b5-e27b266324c4} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:2280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4916 -childID 10 -isForBrowser -prefsHandle 5840 -prefMapHandle 6052 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9777430f-f458-4477-ac8a-a380860e0630} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3560 -childID 11 -isForBrowser -prefsHandle 6996 -prefMapHandle 7004 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {79f360ec-f2cf-4efd-a01d-d265370ace9a} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:3160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7040 -childID 12 -isForBrowser -prefsHandle 4652 -prefMapHandle 7052 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {116ed56b-9ade-45b8-8a9c-46ffb18b06b6} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6060 -parentBuildID 20240401114208 -prefsHandle 7016 -prefMapHandle 5840 -prefsLen 30618 -prefMapSize 245047 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a10824c6-9007-45f5-b3ab-7cb6ba4d6748} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" rdd
    3⤵
    PID:5220
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7392 -childID 13 -isForBrowser -prefsHandle 7384 -prefMapHandle 7368 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1176911-baad-4d08-8321-81f031ab30d4} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:7092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7624 -childID 14 -isForBrowser -prefsHandle 7536 -prefMapHandle 7544 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d7041c73-3332-4275-9b53-fc28aef825bf} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:3252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7880 -childID 15 -isForBrowser -prefsHandle 7872 -prefMapHandle 7868 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {131affb9-7450-497d-b81e-3131b8c6e608} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6256
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8020 -childID 16 -isForBrowser -prefsHandle 8028 -prefMapHandle 8032 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8223353-c7b8-4c6f-a7d3-92ee925c2d8c} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8216 -childID 17 -isForBrowser -prefsHandle 8220 -prefMapHandle 8224 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {51c5604e-5f72-467d-8be5-e3a91f4db9f1} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:4468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8316 -childID 18 -isForBrowser -prefsHandle 8312 -prefMapHandle 8308 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {01116559-6db7-4147-8b7a-fbdf14b35086} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6964
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8432 -childID 19 -isForBrowser -prefsHandle 8424 -prefMapHandle 8320 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e3ba1bab-6a08-4352-9a38-3346da72174b} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8572 -childID 20 -isForBrowser -prefsHandle 8920 -prefMapHandle 8916 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4a6ab624-fced-4879-871d-7907edc96f37} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:2224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7784 -childID 21 -isForBrowser -prefsHandle 7384 -prefMapHandle 7776 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {79486b12-280a-4460-8b64-0a3287a75bbb} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9196 -childID 22 -isForBrowser -prefsHandle 9204 -prefMapHandle 9212 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a1586219-0a3d-40a1-9601-5ce567e54a5a} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:4796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=8300 -childID 23 -isForBrowser -prefsHandle 9356 -prefMapHandle 8588 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {38c660e5-2826-431f-a973-7b562b3ddea1} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9340 -childID 24 -isForBrowser -prefsHandle 9480 -prefMapHandle 9180 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {904a6b3e-4fff-4f24-9854-23444f0545af} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:6808
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9536 -childID 25 -isForBrowser -prefsHandle 9016 -prefMapHandle 9560 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3fff129-f81d-48d0-9fd7-f5e5619c8671} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9656 -childID 26 -isForBrowser -prefsHandle 9104 -prefMapHandle 9644 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e47564d9-ecfa-4680-a4ae-bcb57843211a} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5564
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9844 -childID 27 -isForBrowser -prefsHandle 9616 -prefMapHandle 9852 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3034159f-c83c-4145-a0a1-64746f26ca65} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1028
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=9972 -childID 28 -isForBrowser -prefsHandle 9604 -prefMapHandle 9608 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f46a0fd-2d7e-4b0b-86f4-1846bb561002} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:816
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10156 -childID 29 -isForBrowser -prefsHandle 10164 -prefMapHandle 10168 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8fee69b8-1d68-4d9d-b41e-e73a28f7ea67} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10308 -childID 30 -isForBrowser -prefsHandle 3536 -prefMapHandle 10296 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5ce51f64-7c7e-4378-9028-3e9bc44583ee} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10616 -childID 31 -isForBrowser -prefsHandle 10512 -prefMapHandle 10600 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f2233c76-ba77-40d6-85ab-bb2c1957b837} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1572
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10760 -childID 32 -isForBrowser -prefsHandle 10628 -prefMapHandle 10640 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fc2bc4cc-7c9c-4661-9347-d39ed1f7ec9d} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:3968
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10964 -childID 33 -isForBrowser -prefsHandle 10496 -prefMapHandle 10500 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b81a3364-2e1d-4644-8e50-2b6c64651344} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:1196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11112 -childID 34 -isForBrowser -prefsHandle 11120 -prefMapHandle 11124 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {80ec0683-84d9-44d6-9a5b-1b67f9155a1a} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:5276
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10820 -childID 35 -isForBrowser -prefsHandle 11016 -prefMapHandle 11020 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b79e8b22-2ae5-446c-a80f-f559986f9c1a} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:7848
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10812 -childID 36 -isForBrowser -prefsHandle 11004 -prefMapHandle 11008 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cfea698c-8843-43c4-b16d-ac2200c8a545} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:7856
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=10804 -childID 37 -isForBrowser -prefsHandle 10992 -prefMapHandle 10996 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a04f530b-95f0-4b43-82c4-567d65287b07} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:7864
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=11628 -childID 38 -isForBrowser -prefsHandle 11644 -prefMapHandle 11636 -prefsLen 27965 -prefMapSize 245047 -jsInitHandle 1384 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0172583c-3bb8-40cb-90a6-1a9aeb742de1} 5700 "\\.\pipe\gecko-crash-server-pipe.5700" tab
    3⤵
    PID:7176

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:8676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffdf835cc40,0x7ffdf835cc4c,0x7ffdf835cc58
  2⤵
  PID:8696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1948,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:8920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2176,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  PID:8948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2288,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=1848 /prefetch:8
  2⤵
  PID:8984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3136,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4524,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:8352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4364,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3180,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4892,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3244 /prefetch:8
  2⤵
  PID:6216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4936,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4908,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3244 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5440,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4692,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3296 /prefetch:8
  2⤵
  PID:5224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3308,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3332 /prefetch:8
  2⤵
  PID:7784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3348,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3372,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5644,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5424,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5056,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5004,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4996,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6164,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6188,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6460,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6612,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5020,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7152,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:6944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7200,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7344,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7184 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7460,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7716,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7732 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7864,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=8004,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=8156,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8060 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8288,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8296 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=8448,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8460 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7760,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8484 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8600,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8712 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8744,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=8848,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8972 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=9092,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9104 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=9128,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9244 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9364,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9376 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=9384,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9508 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=9516,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9640 /prefetch:1
  2⤵
  PID:6148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=9760,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9772 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=9796,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9904 /prefetch:1
  2⤵
  PID:6168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=10024,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10032 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=10040,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10156 /prefetch:1
  2⤵
  PID:8736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=10220,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10180 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=10224,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10344 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=10672,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10692 /prefetch:1
  2⤵
  PID:7240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=10700,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10828 /prefetch:1
  2⤵
  PID:7252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=10848,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10964 /prefetch:1
  2⤵
  PID:7516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=11092,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=10988 /prefetch:1
  2⤵
  PID:7524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=11104,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11228 /prefetch:1
  2⤵
  PID:7532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=11412,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11424 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=5364,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5400 /prefetch:2
  2⤵
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=4792,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11668 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=10560,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9536 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=10652,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:8592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=3352,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9404 /prefetch:1
  2⤵
  PID:8668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=13144,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13136 /prefetch:1
  2⤵
  PID:8672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=13164,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11400 /prefetch:1
  2⤵
  PID:8232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=13196,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9732 /prefetch:1
  2⤵
  PID:8248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=10164,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9440 /prefetch:1
  2⤵
  PID:8556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=10384,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:8552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=4772,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12928 /prefetch:1
  2⤵
  PID:7400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=12880,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11808 /prefetch:1
  2⤵
  PID:7648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=12380,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12032 /prefetch:1
  2⤵
  PID:7728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=12296,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12408 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=12816,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=7204 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=12932,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:7636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=10372,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12764 /prefetch:1
  2⤵
  PID:7868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=12800,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12184 /prefetch:1
  2⤵
  PID:7024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=10432,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12576 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=12312,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11804 /prefetch:1
  2⤵
  PID:7768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=13244,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9856 /prefetch:1
  2⤵
  PID:7764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=12336,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13272 /prefetch:1
  2⤵
  PID:7756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=13260,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13588 /prefetch:1
  2⤵
  PID:7792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=9064,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13780 /prefetch:1
  2⤵
  PID:7812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=10576,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13256 /prefetch:1
  2⤵
  PID:7936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=13224,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13904 /prefetch:1
  2⤵
  PID:7892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=9068,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14020 /prefetch:1
  2⤵
  PID:7836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=12964,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14224 /prefetch:1
  2⤵
  PID:7508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=8976,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9060 /prefetch:1
  2⤵
  PID:7504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=9020,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=11768 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=10340,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:8392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=12612,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12280 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=13228,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14664 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=12500,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14884 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=12484,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14784 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=12452,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=15116 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=13300,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=15140 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=12496,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=15016 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=12212,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9772 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=12752,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9508 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=7080,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12640 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=9588,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12400 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=10656,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12304 /prefetch:1
  2⤵
  PID:9144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=7024,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13184 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=8548,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=13908 /prefetch:1
  2⤵
  PID:6148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=8868,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=12044,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=9704 /prefetch:1
  2⤵
  PID:7644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3724,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=14040 /prefetch:8
  2⤵
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  PID:9424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=14088,i,2308850373390095769,12539742906839247544,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=12668 /prefetch:1
  2⤵
  PID:6260

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:7712

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2396

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:6060

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- System Location Discovery: System Language Discovery
PID:3088
- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
  "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEU5RkE5NDktNzdCQS00OTVELTk3REMtOUUzRkVBQTc1NzAxfSIgdXNlcmlkPSJ7RjFCNjkyNjYtMTBGOS00OEJFLTlDMzItRUM2NDhCQTVBMkZBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBMDdBNzRENS0xM0U0LTQyQUEtQkU4Mi00MEVENEZFQTQ2OUV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQ0LjQ1MjkiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSIxMjUiIGlzX3dpcD0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IiIgcHJvZHVjdF9uYW1lPSIiLz48ZXhwIGV0YWc9IiZxdW90O3I0NTJ0MStrMlRncS9IWHpqdkZOQlJob3BCV1I5c2JqWHhxZVVESDl1WDA9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBuZXh0dmVyc2lvbj0iMTIzLjAuNjMxMi4xMjMiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIzIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5NzAwNzkzNDg4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks system information in the registry
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

Filesize
100KB

MD5
c4f263bc800bfa461b3302b98924321b

SHA1
58fae564f115c65eadd3f25085a7c2386f867627

SHA256
5a23f1060230d628d23474fcc88824910459690dfdb27a641e8983bc2c973c25

SHA512
3d66ec177a8310fe42b1843858177815f2de8b4b8d4a2b7beb3eaae60af518b85bb62e6b4288107f6738442ed3af12f8e031152108b5cb28b7f9849c1a54cc19

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
2033c4b38186118f7dbefdbe387c0559

SHA1
06d08079dbf216bffd9cfc4add2c72fb6919a463

SHA256
5b96ed0faa287680f47ab745d40251037efeba35561e024547cd120ba6ea8083

SHA512
2b19e1af9f8c30c789d640841f366e01fb354cc590e10c9c05e54636c5dae3aa111d704b35550efb41fdb5d1f9aaa673789e709851a853cd4673b4aea5a580fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

Filesize
67KB

MD5
bcfda9afc202574572f0247968812014

SHA1
80f8af2d5d2f978a3969a56256aace20e893fb3f

SHA256
7c970cd163690addf4a69faf5aea65e7f083ca549f75a66d04a73cb793a00f91

SHA512
508ca6011abb2ec4345c3b80bd89979151fee0a0de851f69b7aa06e69c89f6d8c3b6144f2f4715112c896c5b8a3e3e9cd49b05c9b507602d7f0d6b10061b17bd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

Filesize
29KB

MD5
79ffcf947dd8385536d2cfcdd8fcce04

SHA1
a9a43ccbbb01d15a39fac57fa05290835d81468a

SHA256
ffc11b830ad653e7a9d4257c7cd7a8056db5e7d7e89439b8fd67d1207b1729bf

SHA512
3dc82ecb2abc8c567434666a9162cc188de669927c3dada6392d8bd97d5e746f1ed350e1a02ec016ee2b1dc8a9cc5c71c553f2ef1293d6793800c276560859a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

Filesize
54KB

MD5
32a799fb5d3dba2370df157bb6e68e10

SHA1
cd183ddac04aee7342b6da8e2ba0619f69c8074e

SHA256
b2a24bc380a2bab6aa943faf14895813d503b16d2e143d32b3390eeba90b839a

SHA512
542eb58f2fc5bfb86be939b8da0c6cd657cee59e59d29e00075cf229cc3e54091cc0351d034d18d510fbb953cc534f8fbcefb99f70a90066c71c43d37ae6a0bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

Filesize
28KB

MD5
c3df0abcee99bc052cc5de9dc1b57bc0

SHA1
3047a6d5642cd367ac1c9f81e2471d3e31724854

SHA256
52742406fffddb5df0f2e85ef551557bdf1ba9e0a97c1bc8d534a02223452352

SHA512
72cbb18d3334e7955a1c7538205019b2e735b5016dff23ac66671b43bb1a47853e319f2a40712d2254b5e2ba71791228ddfc20c9f04f5b3a524535c7f7009594

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e

Filesize
20KB

MD5
d0d74c9f5f71a8c1944f599486b7c8e4

SHA1
d264684445e2fe6e1afc48b868afd63df13d698b

SHA256
454939e9149527b92db720a29e9b10cff0d729b618931d59acdb3f87aaf8f354

SHA512
8875d755e453de71360e938b3ba34c5d1ddb0dbafdde8886358555fd0c3dff9827239aa120df01c81ad78a28f40157fe54e9683885403c067474ac6403de1e7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044

Filesize
36KB

MD5
9a56f4eb7af045f304951ceac625d949

SHA1
669b2ef84c7cdd419c9dc893899f429fead33109

SHA256
0b81403335bc3a5ad450bac7ab9c397da343fb3d41aec9cabbce5bef4e03727b

SHA512
91666500a50f49fbae49bef7b531ad9bb816db1ccb877f36313f4db5621c871f83488f24390524868d2160b865e4ca13d170568e9b2c410151b6d7a7d66d42d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047

Filesize
40KB

MD5
7dbac6d608d3bc0f57be2efd51065d20

SHA1
3eacfad51474897bf1e8e57ffaa0cf18d86cc0be

SHA256
9ef35a1662655ac434e69a0228186be57f3e33e0009295e456ba3fa88bb2a5d5

SHA512
11769fe00d564aa85584eb1d568da436ff0b1bb334be9bd5c7f4d74e4fe1d331b6cfbe039a86200a2482e71e8b17dc7485a17e5596d62c4f90823c0394539a64

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050

Filesize
35KB

MD5
7c702451150c376ff54a34249bceb819

SHA1
3ab4dc2f57c0fd141456c1cbe24f112adf3710e2

SHA256
77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583

SHA512
9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068

Filesize
23KB

MD5
4b0b34e1e050a9744ae2e51c25314450

SHA1
0c8ce02f7b319c8569b80c2a381f164487eeacde

SHA256
a9cd50845fc5688626487119a9b45ffa9d177ded518f003cda7fed31fa3271dd

SHA512
bf4d01a6a56c87de0b5f402db7b4e8c67950cfd15880b83fadab12a1e3a4f8b0e64fa3b3440e2a954c31acc1b51aeeaeb5fb7aa812e383c7c9c59f33892da0dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\26b32f7e333ce35c_0

Filesize
259B

MD5
aacc2a2de12ca0c3570a916b238ee2fd

SHA1
996f6d11a9b3b6636d29a80efb0bd6b931562d74

SHA256
cd8217c1c01672449032ae509ec8379c61f1564e9fd4651f05c80c1796bd41f3

SHA512
6468eaa3c66235df15c19b9739e510b983635cd1a2ba330fc7604336718e0af7935ba47a21f320a0dc2c3d3289768271cc3af48b60f25a3e21b4c3dc3b10c834

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3d939e9920e098a7_0

Filesize
287B

MD5
0d84b52551b8f9638665929149c12980

SHA1
761dacb1fe7c06ff130432f88422a45492b0c574

SHA256
7c13ff0ea1156b165d29661c95c6ace85522e71d46f32fdafd07fd5241b200e0

SHA512
bdb08fd62657e6cfde99261c4b1d255d529f570d244c3f3ae2d7c943aba72c6c93a48693ff5491b19c9896750ba4e48f2bb249c51c8ef4b253a099dfd30165b9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\43019d352db09ad5_0

Filesize
40KB

MD5
64c24a6ef17d8922bc0414366d2dc4b7

SHA1
20da4726cb6b9e839dc630a8c0bcf53a079026f6

SHA256
8471a2d0511b551237854958247bd43dc79f295c28f68b5d5ec73161e48c4565

SHA512
bb205a5e2fdc16573796f0596553845d5d15a5f641e88509f8ddcc00103dae485a0af48166f5c7c45aacee9da08270653db0d64e91150fa3e96d982365ebfffb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7f548e86828a56f6_0

Filesize
279B

MD5
a980358a113c625c0dd3aaabccc72253

SHA1
cd565f1ead4b9b624dda96e3ec0607ccd86de22c

SHA256
d74830cf4bd0ed0d1b01c11ec7daf3377ed236f773dc6e3d2e89b6747b07cfce

SHA512
168454b2fb34a07e2ff868e528d84076795c4edff2c2284fe3b904c8311888d46a78b651cbaa5fa74ba86a35f90a53a8f3d656f95a2fc4df57412437be949d12

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9e4f49d8c72ae3bc_0

Filesize
303B

MD5
07150f510d61da8e11be17878101cdcb

SHA1
90600c30cd429ef9788d3e621bcbafd1cbe87d3b

SHA256
b057579739ababa0691294c2abfbebbcf71aad537359b4745a707c7c5b7d48fb

SHA512
75bdc48ee012b4e91984975daa874f9795b6375aa00a933316054ee4d238d8eacf8f21e12043c06b3cdb24c5fca95e97eaeb4a50c071795f14ec3a9808307d38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c0f84022892e7f91_0

Filesize
9KB

MD5
618223d040c6f4bccc90a226938fd263

SHA1
525d98b649a5699e2e7f3cf3fb72cbd113b23c91

SHA256
149bb12141013951600817df03a3f8bd2e63764c23972dbb2be91f990eca7898

SHA512
d7139720b0b4ebe68d28ce0cfcb9a041cef81e53280422d3bf4f6e3db8eed51bee2cc9ae39da3430d86e7169e0677a4794a1118df49499e3f42edd2265fe911d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c265e5b1526a4a7c_0

Filesize
54KB

MD5
727b0952c2e15eb670b8bbcd6789c246

SHA1
ecfcb0b315eea5b4b13b5a1795137d01aaec49bc

SHA256
9393751fad2e9bf1d51e5b2356784351d813f9491664f11f92b0968896a5ed1f

SHA512
6b7ea6cd513853715d39ea502ff2eb3aa102b86c60c075f7f1477a3ea85aa29e639fb1c33a1a2e3548da0a07164ffc8314520bace91016260bf7e39ee3f53188

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c98e24cc0ff663ff_0

Filesize
54KB

MD5
f3e8e4382c18694c85e6eaa74ed72067

SHA1
46eda01691ecd7047a191f28047c85fa3e9a0cb1

SHA256
b53c6e14768f4ce049113586aa25291159c16eec08b765d17f94732570b98b11

SHA512
e0ceeaaf01e1d7477468b96c10b130926a0df796450a2bdd24ee5250cc2dfc6b0f041948dcce23531f913b05de4ea91975ac06c6b674b929ca4364df5b39c5c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
80fd0747c66288e2a0cc16796537800d

SHA1
6a55d24c62e29988005361def442700229604f0b

SHA256
36621dbf54db5ed015ef1a70b7910cbb0be46ea330dba54f05f807b08c11e037

SHA512
a0f58c032e3b51ec45f4f819af5d0e3c2e5962c0ba1ed73d8229f8914452f63578d07d07b126107428964cbbf91b8ea3b49edcac50aa0ea6adc0032f56585624

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
b1e84fcbe10fd3bdbbb95740f514ef48

SHA1
12c4aebf07c6fcf6257c8d2692b53b5731d25da5

SHA256
ef00d453cb0becdf31f59330787b6f15eecab3b660732b0e0d88790f89db4001

SHA512
0209d89b552e1aced08fdc1dfe3f0c15a70e7baade8c109d9ddafec07729b59391d58763242f86d814a7329e1b3ed1878e31e89e8c3daa2ec05bb207b5957e31

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
39KB

MD5
05cac54cd0f1312e04a54a71bf5798e1

SHA1
28aeb432b922fc831342de568c8d3ee86344826e

SHA256
0810c6e8676e6e822d4e8b869541019e01861f95ade767a43aed553d79654a62

SHA512
9a8278cdf9783d801d3a02efe155fbb51c7edb3c8c0c7e2b08eb8f77ca3e3a5b7c58704a4264565a1ddf689ffe1e18d39b9cd4d56cdb37bdd7729be18a960f65

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
8b570246c0046b6111875c46542c5818

SHA1
3d2ea4e6d0ccb162a0e5c3b2a712a346355a25d1

SHA256
a2d775d72e6281bd8938e16e217eec88cb33ac54883255b31fdbc7e03b0f4b27

SHA512
db4ab19d3209e82bec0d1c340738928ee0c43fb4692e753c8d025c820d395d219ec50b2aa2907989fbb6497b2598f958db46c12bde9ef578f920f7fbefea7d57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
64778d3e5286ee0a6d05b54588f06a3f

SHA1
1f3f064749842902a920816bad776e071677e05d

SHA256
b9cbcf33209baf6d40c3f5108726d4e784e8b457b4bd3eaf7db693cd67fcc4e3

SHA512
9407eaf6a77dc5dfa1bd1ac7db82b20eeed854ef6b453bbfea097558a654a21cc95ea9eb18c189ddd8c36143a9a402701adf78e10b687fdbf777e4ccd576f6e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
6KB

MD5
8db8ba20a0061a73b177631dcdcf806a

SHA1
626072e60eab8700354092deadb07d35cacf094e

SHA256
fafc6e2249739505c6950bfee983e76745dd2a680ba91c9601ae67fe1b943ad6

SHA512
fa9d3d84d2f3d8b21b7d96c285ec7daf029fa4cb770db99c33ca27ed6c203dfcd54e80a37f11317a857f0ad17d5e53c0ae3aab72e529a08f66708981cffca4b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
0563de536351aad60b5914a9cc6bb73c

SHA1
3f7fbde5dde76586a0bbc1f562441b088fb028f5

SHA256
ee663a437ba112622d0754d1e0cda8246ed58c098ef3ed2dbea68e2c07faebef

SHA512
611d7fae91a77fffe7a6d3c92a4b4cc035386e589baf623b7aff2ab059bcd35bc7239396b5dd6d9872896ae6f70378c9a5406669d27b7075673e13c4cc135522

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
4977e852685a08cd2b0a96d13b400d12

SHA1
8c9018e465bbf4b87dee9d5d4d0edd1d015cfc15

SHA256
7f17f7c57ccc35c28ef3b62e9c267c6fb1d86420a5e32826bc9b1c4cc81888b2

SHA512
47c3e6e49984288fbe730973bdb71cc71c4bf9c0956b3f21eea8d86ce93dbf13df9c4dcbef4fc6e3ad6c2aa4159e6681ab69a2379ff8d23fa385c9c09d5021fa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
65a040c860d7e827373cc033bf989d5d

SHA1
22857abf0dabc0aa39b64d1391c52a1a038a7761

SHA256
abf6dea3cef2098bd75ab339cd0fe380440629ecd91a5a7b7b25da35726afb1d

SHA512
61d37dd1f8c64239ebf740974811e1194645fa06c433b4f557e4db2035f1abbc7da431c41c4270b323ad5d6dafba3042d57f7c6239806404ce8c77b7237afaa5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
1faee9124d60d8505cebd6febe5b0ed5

SHA1
01205551070fa370a83dbb6172077867431b9953

SHA256
7e65b784e10116cdbbdc7e394b6d25662946d1531149ca0877c728d77c1fd67d

SHA512
e7610f0fa29e73e9bddfdbcfc1738e041f41f5fef208349cdc8232060fec8a2e44d3f49cec82f8de01942c1914eb4795b3e3c5c6789c6bbdc3fde6ef8b911d53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
f3faff85e5402b060204bb681d484e56

SHA1
f259ebd6be128d5b7efec0f0f66ad7a7236b69c9

SHA256
a9421c2e666d4a0fbb2647da8554d2aa1860806c82687c58f8135496f4960863

SHA512
8c263ba56203f6cc2487ab42b74ea14c9a827f231d3e424eeb881c7c56fffb056a8a4287e5e9e63db3a8c8cb3af65059940d3585fe98f7cf0fab63d9e391c75d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
56bda02c2bd54f7a688f68eb3c57dbf0

SHA1
2bfdf32feb3a968c4610b4f9ab08dc5682eb2119

SHA256
2572ebe23b7525448a6bfee9e77f9be8907b8f7e27bec249b4de96b809ffec9f

SHA512
e89c373e71c3c36491c0c1f4ac16e54c37eca486cdb6eac2e8d958d11ab8826cfdfdd44dc6145b0042f2324111147c6922953ce21bd3d172d2fc050713ff4a15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
c769f15ed11c57d555c109885aa4bc06

SHA1
122638f15c3c3f02f7209dd763e128cea4e0c44a

SHA256
0a71596e049824d481069945705face500db27a46e50de250c2127265ed0b85e

SHA512
e08fb5cb781fb3ff2e17c29dcf75c7b65c6e6a891d9d72148f5f028345555a7a1c7506baeb5411cdf165c138e3e80b05047d5d9b88995b668f09df9b762808b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
a61fdd556e93d6b6d3d05a3ebfcb5763

SHA1
e545cd6fe86d694f85ca6bd2d206f2145c1887df

SHA256
10a5475e6632e3be4c3dde29847c12a3b275fe2658a98764bc0c7d4b23694143

SHA512
67730bd44104e710e527037c628800c6ef575bf6f9caa22ec748f1cfd4e10f15de7cfa615e475b579bea10cc2b6892c8ee24591b2f2a3b513d19105f9f268e70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
cf646f3e5e0b34bdb3281728d6ba5512

SHA1
ea720c18df0ad52784aacf0a6f742e1e9370bafd

SHA256
2048915e23e73fed576b703fc27a96eedbb2ba0df40287798b106c16473968fa

SHA512
658b56dfbf4053eefb4bcf29fefb7282de6526d3b6fb39a14175171b554d8a52ec09712923937cfde2511ed4053e7968682b2da60e78af9b9a02784a1f72e5b9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
7KB

MD5
3707b706f872d043d5ba25bb61bf7752

SHA1
094ecb2e9e4e1ea4f6f30948b2abb4e25779ecf6

SHA256
1683333723167c096c2adcdc4952beccc83227d1e2a555500f6b757b4340b877

SHA512
1718400c9934b91c6248620ab1583fa802e234acd3a94cf7d15186a5b6c18b6f18849c5808f91127f537c2b3d7e2ba3b66dd9d95f0e87290a892420900ea69e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
876541ec29b0debaf65ed5c18cf07264

SHA1
3b4bf6e4eb9752876627e62a64c9b899b2ee84d6

SHA256
b5820294f450a91490567f48b5e2b6421d620f6d298fb47d3e9aea4965ee740c

SHA512
06868cd9561e1a6029ef2d26f8fc3810280d0903075904537ad257b28afc13392961cd0c5a5be514585b45c2cf41c085525fc6e2860aff508d71f06fe7a0e2e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
cb682f182bbd95d3bd409bde5d301454

SHA1
8f0fde16e20f7b42a67432de180a162ee33831f5

SHA256
87ad1d45ec5b58a667cd84a41d40b0b4416fbe4b4bf5f33d386e6e19f19b4c76

SHA512
9c67ca8be74fac9245f55eb92c58521c81a1408a88ffbcb7ab92d98df14bc300d100c6d08a37aef4c1be01bc876e73c3707f245055aaed1ab27c02d2eb634ed4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
6c8d9b68339ecb020a94fe5aa70c0239

SHA1
c8f9dbeff1a68bc1fbf286f5ed737a94fd6aa65c

SHA256
e698761be19b6ae8bde6468720a342369c98be3915faf0b9143c068e1f2279d1

SHA512
cb3936a46a9ae4de71463706c45b09a2dfaf3edc642d36f494f620fa0c36e4ab5918b4f79588ff29e8850c1c698f0a17cf72961509c4c433c298d2380339246b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
13047b86e09f243b4424f9191369567f

SHA1
82e1e0d2314dff0cad04fd5c66aaf071c9dcac87

SHA256
90d2fb67f62dac1bb2d7880cf180917f8d7947596cd3a1e445ca4402b6d3a8c1

SHA512
b428e9cece09a7a10b24c6a0ff71c633dca580c5d88f80f3c14f72eca4fcfff50f2223e79e5247ffec3e54cf99df205342c80492bfe252abf0ed7cd274ebb0b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5fbe30df6c69d0030f1e892162a311f1

SHA1
21e2ab4ef0e54e96d067a72e18a8812c26b36670

SHA256
c5c73cce6c7514b0b65e7abf98e442ff413323223f77cb302304706b20276283

SHA512
c6a8da2fb95377f340d5e9113a7b73020bd9c2ceab37e03c5401bdfaf59197b03af6c2217a8af623ff6ee687f7ef25c9a40390c389c1bf48cb324bfd00099655

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
dcbc86806745fbb91dfd0877ef65da3d

SHA1
8ec15bd11011dad112ffb166f2c1ed9dd4f628e9

SHA256
ffe7427e95fcb4119b90fb3a7d0f058fa0d1a44c3710efe6783e2beecb4e054f

SHA512
a4fada1e83cbcd1173ba3396b96efeaec0a8953a9889d6ca4a101af61097f70c7766fbfe1cba2b3988bab2b42f717a3147be8e361913a2ab666d19208bf3913c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
836ca12408a71dedc56ee0fd79b5c0aa

SHA1
2236798e8979cdfcac3b49a7009e45d45f8f4df0

SHA256
5920bc605c7e4958a3170610330565fe841da51e799a029af351455c5f0158e6

SHA512
861b8fce686c48b99e579e3fcfca6675fe4439e309411a08b43682a561763f5b47335cdf096c4e8e075fd6dbcf3fcd46f35126e527e5d9fb642704baef94bad0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
2b645927f877042a6f921168c4207034

SHA1
6ca7d1c0bf989888c939eda08fd01c05e6a9bb11

SHA256
ed77128801dd03a2280ae28fb6fe8587c8b2414033659d149753b86870a0787c

SHA512
95d4614ac0c89710926372b7c50ed0f8e9bb0fff4cd8c9506236ae1acc65a8e4d1cbc437147e817e44cb7f0b7768fb5c3476c57592c479374022f55024fa2d25

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f8e83a3ebca3f940782dad3c119f1067

SHA1
5c3bd33c46cf0d037a9e47088bf675af20814350

SHA256
f43a23972e2f6a117df6acfa1668d8e67cc8184e701c7966d440786be8a5d4bc

SHA512
ca9d8a6905bf31274995e7a8d14e4ff5d556c124ed7081f293e6d9e1c91c62f3014981c2a8bfada839c064ca39666dd0690ea14e517edb779836482af4a984f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a93c3574060b84e64d9c26886b35b1f7

SHA1
55b7f612e278add2e912e57008c9606cdaa212d2

SHA256
eb825a7e31cb0a38d27387745fa99dcce437f031ce79a63b5704525f4d31f717

SHA512
a429e3dc8086a70d66ceefe2e85f75f599782542b240a860dd47a95fa3cc8db95f7dfd991bbab035dfbff3e556e18ab7563a77c4311188efa415a6ad5c4ccddb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f5f676d32d29b4da3622233aaa17bf7e

SHA1
3b1243b17a73c17f3135b6ea054e4783610eee09

SHA256
f0a15ce3513b5be13d74e8b43e1d29f711da28d87c84267be3faaa430062b32b

SHA512
34900d45af763482c8bf94b8ba78baaa61432b457adeb8fafbd68a64883c2f6b75394ec973595d3f0ae4e005eec8ea43435df1c82496d938f806d2c0eb0e8d8e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2cde8a880942393e0a9365cc97b6113e

SHA1
02ff70b214e8176d293b4aef3fef8dc8fac59d86

SHA256
766166d80c6587b3bb242266826f58521e353719f0a419dbfa28d51f7da966cb

SHA512
2d97bad77775dcebce5a4dc3e084fef541d84c4498d1e4403dfd4678d00599b6356c462e244c5c9ca6c26c65f2eb69770f5e3e65e9c0af9e9c8d247030438104

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
1478692dd026d0a1e77843e6d3936f99

SHA1
94a6c94aa9711cbf9e2940396c2e6c1cff900812

SHA256
d7363ac2e753f43e90010c670c5ecfb8c27a3e8e791c76492ed49283fb974ba1

SHA512
b9b466e60a17695558e8d378eb46a77d8307fd4e3fa0f1d00d4911a5e306bc9b11445c19bd4ab131a23cb8ec67175edd36c7b285e4819436fa74ac9c56ba9e13

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5e17c46b5504f5a5021e2d913de63aef

SHA1
70c89fd359a313a4c18c23568b474e7401d25523

SHA256
89dbb678c05b28b2865358fa72b5e9babbc8843cf2475f47920d47125cf72064

SHA512
e3d7c00f55d6d66bd7fbe1ef36300cb53f77ddf18cec6e5183d1c39a5d822338288907a098156e0a8dc0ad24a3148ad8a91e4edbe4ab270cab6fa60fd103ed1b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
49e999c30b5e6ed0e8707e221eb79a0a

SHA1
ff66a947a7e74dab3e5ca6b7ecb1c3bf09fee615

SHA256
fd528d568788f16ad7f81eee31e0669ac0ea77922622d18722991ab9dd90a4ac

SHA512
54bef71c8167f7ceb2f206d976ae65e7dfcf1e8b99d2203ae49c48786793fb1187808f4bdb40c3e33ad20f9c6ad31b6af3f1bd942e769d4c0f10eebbeae3eaa7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0e3ee51235eeeac264fb108f079e589d

SHA1
4127b0082fd8892d0d023c4ec243f7ea2504f85c

SHA256
ddfed7c99a5b30827523e0b9b20799c1320167f522ae23a7e1a3c580e461bc13

SHA512
4a04c0b65922b73a7183b6e2d62c8d30638c6d9a294e065423cc7c5a5d0b489046ffa6fe966e6eeca46305aee3a721545f52b8e6fd203d2bc5d05cb71fdaba4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
f5af841ba10ab95a264de18be6f6b348

SHA1
a076245a221e1bcb46f2400d5fd1751f15f608ca

SHA256
bc13b990360fc6cec159be7f8dd72ce2867458d950b38a2bbc36aea18ed574e8

SHA512
3bea472cd607de0ff2263fb45f60786b5462540408d4b6e1ba92d691d761468791d79c254c3cdfcd7e26cae485649f73e4d20a698f479002309c12017395200f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
fac5b3772650e5ddc5a334d14be2a16f

SHA1
ae91b07f1cd807ea83ea805a9d5d7912dc2906f1

SHA256
a4dcfed44a54ab5237ddcd7851e2fcd3956e8530fb4d768248efd71c376918c3

SHA512
2a8e6d10b7ef3bcc40dbcaee131c5849eb68e0034e8c2b6f293610a57f1b70b32da26ab6c2f21ed0d2c83122c64fd0c046ac5b9b7083afea45cc488b393ad62b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
7d1fbdb3a8daf1e93420d0125b0d272f

SHA1
ff8de957721bef21a2b4700e564bf1aeb361d424

SHA256
bddfd8b23f4407ae0c6789ea818d03be9d42a41d6c7ca0cd3213d04093ff385b

SHA512
d43d505be9ec78adf92e60029578c78fa0cca590f2cd6cd344d0ab152ba9fac3c287203ee40c3b931ffe2449ca7a98b885ae3446d40c37b9847bd2d961a47264

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
48B

MD5
e86ec9cb042a18e96c7a2b91c8232c6b

SHA1
4e9f8ea8ea82f0c8f43b31a533410632eb8b2580

SHA256
c9700a6f814eeda63edc85a77353cb8df91125dcf60909a1e0a4c2df604b06ef

SHA512
2a4747ecc21d2206af0c421fadb88008ba4742ca54ce9af8ffbacbe776c07d21fe87ea77221ff1eb13353b3e070e95b3a3c57f803c76953212afef2867a94a78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
a3e60692d7e678463e002d4d7a38aac6

SHA1
625eacd908bfa17eff058883ddcf34c759bf082f

SHA256
1ee37e50dab9a4ddb3696fc8c305615ecab247cf190b89506a55fbe3458a2685

SHA512
d55fa703c22dc14103a6d2694fd7c55479d991e061301dc941240583238777682fa7899df6b486e21cdfdb42b095aeabe3121c169b32b548921f7ccb3fcd84ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
6d750bc70f3b8873089f3f2ea27b143f

SHA1
420ad9554c1d0095bcd15399ad976c8f1729b919

SHA256
16599c9843f8c247aafdba4ffa8401ede470254fa929320c49be6f06b874fb8f

SHA512
be328ad0ec90e3918b72100bfdf3a99ae5cfbadcb7a21f9de47cbbb8cea18cb3bb49404a114f686bc362182975c5270a9c379e8c52754cf94bc2731bdb04281f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
50a9ae0fcf1a235e389687f0541f05ea

SHA1
a11dd1088aa8f9e89a68943fe3a5a183fd22463b

SHA256
7486a7f76e8c7253017e62ecdcfc66b21600fde3e30a45cadab489b2dba51842

SHA512
066f3677dfb0f4a3d644474216b98534fd0622fc05221ced9bd50b734eee3024cfd3d6fab1f5371ae1277cd80022936a8817620ef90b9018ff67afc944b0c21f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
03247d1d9f3cdd794f5b2d56b915a60c

SHA1
66986d9df7e1e04b791353c18d09dbc9e86ae063

SHA256
031f2657b53bf0198479548b75320926f629f1fb8007e519284e7e2f7aaf8b15

SHA512
fc1ff2c704cc4a09022d6d23a7315a2547f12e2e59598252e424d195812dd52458aa0d409a857ea932fd74c7e2aa3c2c03f686e028cc7758a4c5116568594050

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\activity-stream.discovery_stream.json

Filesize
20KB

MD5
08889bd9c1e54151a434f2109263013e

SHA1
d0b4ef8762fd0a2a3b74c56b28ac1e398cc6a6d3

SHA256
7733d5c74d4a15b46336983d27454e2bce7d1d5ad29fcc97fe127159a23327bb

SHA512
ac11c49d428d119a480c3d3cd4cc4e86e53486ac6c7358c5ad25c190d91c2dfd9e7bfb77753e714c6824a8561bd0da4420f6a3fe817c7b6f3de8b4723335c235

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\activity-stream.discovery_stream.json.tmp

Filesize
20KB

MD5
a85db57f89079714784cddd2a493e863

SHA1
c69dff5df35c51f73dc56961d9b8098365a5f588

SHA256
4fad439cddb6a3d6d48ac19d8a70609c7934a1a7f858fbbdce81ae61d6bc177c

SHA512
3cedf92a6a5e4edb9b9dd2fb349b5ce99a1fe73c865c831c114c1b4c8ee34bf29eb4c3c850e3cacdc52dce5bb89e342f5d88982aedec1c46e884f0a218563bc5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\0305BF7FE660AF5F32B4319E4C7EF7A7B70257A3

Filesize
13KB

MD5
cf8d7eed3908580e72531fbb1f48a524

SHA1
c87a52a7fbdf1602822bb951400e3b83ccb0fbe3

SHA256
cafd8613459fae70645f8fbcf4655d98f1f89f93dcefdde277ef3512f42b6cb7

SHA512
d8cc1333281bdaa500e2d43395ce6e16fbd223140b968d433f746bc5c53ad5bef8ad1a50404aa84ceb73f5fc94550b1dd380d188330b300c4a7fca6da49656dc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\05C847F4C5B415754BF3E069B9EBC4473AE4EF36

Filesize
19KB

MD5
f92aad873e80e393e7c87df56e79152c

SHA1
867ce56c485c7b4c517baf2ffc272d920675228f

SHA256
faa076612d6d68322fcf91eb0554f1f1b221046ac267d7ed81188eed3f5c8348

SHA512
a1620ad2923b27e87b11a6147459755603b6fc7cade7bb0c72578d83c9a6236de385d42131a5fe87bb72e94b655c5545ab17d7fb49715c9e23e400823c82c86a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\0EA2E1AC3653A248EDE38E975FF2A4ADDA308244

Filesize
480KB

MD5
1b968024cd764b8a407bd2db8002be62

SHA1
3fd52dbb531f4a7ba8c0ca13bb946638b0cb3e3e

SHA256
a57587baa63938d8d9b09a692c966d5fae4e7f39921e4f368a926b76b351eef6

SHA512
8968c14710bbf1264391c05bbfd123c10a8302f96edcca416c292ab65773d8a53115a4a29dbf0820e8a5188571456139798040b9ab2d8222c8c1a3c9cfef0b94

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\1359ED108DAC0E97EE2DD9C5867FA66A6BEE9B82

Filesize
23KB

MD5
1550b4aeba58d90dc9a546d7f5ae90b6

SHA1
3e5eac8d91b6c95a96f90eedc7d6dc4957fc841d

SHA256
1073dc436aead0bdbb5020d3569b09ccc73ecab6347c883d4937e7e9f4df45ef

SHA512
4a43f248e941acac27bf50bd80492f47e0803fb892886c9be31be6466f2ad79e6f91eed912b4277b5662639a7b32048525fe0e4403664e65030e1e3232002306

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\1658C85FCA746DBF861747C4FD62F3310DF087C8

Filesize
9KB

MD5
6765f1930e7fa941da96949422cc0818

SHA1
e67d00c3d422426db5bdf87c7536d453037891d9

SHA256
e967d7a6a97c2f484863c67d33540e0b75ff62fd6ea2570514ce9a4e419c5981

SHA512
d21a0670e96dd1ab987048946d42813d0eb61028c2793007e761fced64ae3120a96c82d479f8275d0fbaa4cc3a0fa0491ea0366056ccc73572ccd120e9bb29d6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\17CFFF6E7327F9E10F7B2BC626BE005CA2F1C014

Filesize
14KB

MD5
117ca24bf044550666c466eaf5f5e069

SHA1
54f0953cb8c997f94b055b1aeed4aaef5ca96604

SHA256
6c456a0c5eb8c9164b591e79dfb9b3de1ead09e877effdb03077ff7df550be4a

SHA512
277b38b814627fc84dbc69c68b4256aa1f45dc48c37b67d3ef8ddf6a56effe69c6f2839057df6da0b6f2a9bfad0c56cc11de9cc116b38c19d124eb678d40c3ce

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\20EA5935FA863C5CD349B9C7F291E361336C9C33

Filesize
40KB

MD5
0bffbba95621fe9cca172d66f7280c3f

SHA1
5379483a0710fcb34d2b5c8207632307832b5a5d

SHA256
04ca73d02886892a53e1a7536aae11dd99ce4b6995f28fa9775ff911c59630f5

SHA512
52e9a55ef4c4559664a4d345e90c8c75f26e4e0a031e3b36e86c1664875c62ec967a383e69473e7be32223260872c95710e7ea38f6a2b443d2039a0542c7be33

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\251789BF31A9302BEA16FA24CEAD8F8B0F86BFA3

Filesize
1.3MB

MD5
41f80b570a4626d099bce692ed8e5cf9

SHA1
e5d1096150f5ce3b3c1a65d47d18545e83bed356

SHA256
9b7208b5a7454567e8efa405d7ed3ea61792daf44b9744be3038bbbff5759b10

SHA512
a4ddafae07008f7375ba2d89b5cc530427eafa5c03f2f46cbabbaee47fe21a1e09b25466eef92446ed6a6520484c2c82e177f125551af65c50c477f414f24f01

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\254256B27E0C48CF9B80B695F0B3B8CA84610495

Filesize
9KB

MD5
3114d8ec51148344af82577abe6140db

SHA1
e757ff18839170e64f59fb7e8bb5950164f85012

SHA256
3e8c631af5ff36444ef82151681ae7580cad324564053afc6336690b8fa5372d

SHA512
b515240785408d590f45c51770f7f3b4e7de7a33306a83a8aebe993d29a6915fa313bf09b84c72f416052a8110cd707ae402a579b423eb0ac9ae527c479a6bb2

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\2B6CE69FB10CF8A79E2CC80EB7EB6EA94FFC3991

Filesize
34KB

MD5
23c90028750fb5f6d3475e1f01d1b76f

SHA1
2e5e2de145b126d204d7016839ae292d4bb50afe

SHA256
36b1f6d0127a56e50f006be82457623ec85e73cec0465be0e5c79ff26181c732

SHA512
f168394dea71c7dccbbb9ee71f4840ff40756ae17c7c4fda3403dafdbbabbedeb0759bc389202a79f09d0e5a24783110f51c4b33438b6b11853160f4b723f071

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\349A5CCC901FF16BD458C47140FEB9FE00CE4F67

Filesize
22KB

MD5
82129563908f8876b0d1052b55df177b

SHA1
ca52bfb1e388b97c75eb53971fa66dca2f3c9fc6

SHA256
1c3718d0ad1c0371a3a299c7a7dea4e07b2e16b26930f525e3b9d67c6dd362fd

SHA512
f9f34b2332478ca713418f10098fb32f52a51574491da38021bb2b9c72eb5c5877bbf765c83ff2ca48a808e5f6d58d689d05ee7bcd0fa958dc676e483d1f6d78

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\37373F56CBD822F5FCF64BA01E1320A0924D8460

Filesize
24KB

MD5
4c676f83e97ce6c2172438e5297488eb

SHA1
d6f80b19032b698d9919497b9712646c32f31243

SHA256
9d9e0eeda557afe00b4e3077b7c7c6efe6ccb648548206ce99839e02d2704ac3

SHA512
72d9e1dfb4e2ca4e4bb55778108dae6492f3eb5d575e069d9ee7af8159d0e95c9e8a3e8d59b6c06a6ae30a124da85c9eaad8ac06a0d9a9081c79e5a16c788fe7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\3D4D1913191E6317F80655EDDC87DAF9E9753E36

Filesize
95KB

MD5
c6ca6c9b27d0e28ff3504c62589b48c0

SHA1
73a96350867045ec82f81509262b92b8daa43b97

SHA256
684e95ebac7b6041fcf918668d906cb073f7d37b0b12b948d2ebac5ccabbc403

SHA512
688ce04d4e3da467b9da2ac391c819d7a4241c1146ec7a02f38ce77224c453d7d56c1580df5e9fac1146b4a857428559a1cf6202b18cee485f14b7b29772eb7c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\3E388052777D236256DA4088A5C133E76C9DC9F6

Filesize
20KB

MD5
aadf40be5e2767fa7eba4961b201ef9b

SHA1
b1787a09fdf9028b73014e65bc307895526e8b7d

SHA256
31e383c4e75f925545a2dcbfffced31ae01090215991eedaca6b20e07524ac07

SHA512
648f293ce2f486b711c6f178d9d841dc59224ef6e951dffed4c8a390435ea7049a18fa7be7a93941038e2f0dbbb5504702f36fd8bf3067b45b462561fcc45300

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\40014F4A106615AC0A96479B5299A88D6B07CCCE

Filesize
22KB

MD5
fc0b78fab8273e0ce735228d87193ce6

SHA1
c86e19ead67bcea07075399ee17d120b2aa09400

SHA256
1655055c68597d716b4d38e5680ffe187cbdfcca6e150969ba43f26631205a27

SHA512
df0a17b46f13e51d90de9d6286ca9fa246a5825e997dacde4d1854dfdb191fd4203abd11901eb7ba42115672bcd308da84f28e7bd2d4d8c5883eeb2dac6695b3

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\401A78F1293072DEB76E18955D685FD4070B6625

Filesize
16KB

MD5
78b160056e9067e0b20b378fea211e31

SHA1
ba734da70a747cb84eb340f7b16ae00031869643

SHA256
a9f3958612b8d36ac9e880faa1741aba001004d52aec609c63b017e25e76d8e8

SHA512
e89ce18631c28f7daff0192d2997bf9bf6703a73904a0a362fa66ff44f33f634bd2f1a1703a670227c4fdd3d5ae0710360f86b0dda3e0505c0e6b03d608ad67a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\408A18B8355DDEDBE289CAD44FEBBD7616DB4434

Filesize
15KB

MD5
60041370ab080ab20545ac8a9a995aa8

SHA1
a77ad76f0a47c6e5f6dc20954b492f7c3ab41582

SHA256
4e70ba69825f4d3ec226bf50d1a9a954a7dc5ada2f7b49d8a0f09d93493ac18c

SHA512
434e883fe12449b404fbad2653ad7dcc95794868a7eef2315d514fecb610e2f5b101b428f421372648c6a7381310676b1a09832fe6d327731b9e12e0ec69b984

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\4598D060E199B9D74F121FBB57267F0A36D3291B

Filesize
56KB

MD5
7f56f39b348dfd4aada78ba092d3b503

SHA1
15b8f11b7db48bc0b425a0302736390e783b30cb

SHA256
1c6f76fce0027226bb8c6e710be8777edde6ea1da0d5c7de3dd28d9678520ce4

SHA512
7c05f80172a9a7f9e9a32ef2807be940c3ab67020281d2581850ca20b3e49d8f4d2576afa5badc912564d55356c1f6adcda8f7cfe4ffb71b9537d59027a24691

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\5524427E76785200FACC0DF8A5808E07217D7E24

Filesize
14KB

MD5
c5ac37fa0e192cfe56fe5f50c6608e73

SHA1
d91c18e86e17ad7999ebfb644d4a14dcdbd3b044

SHA256
021efd52cd51a596d45f0ec4a449f56749ec6602c483787f6083cf821a9b426e

SHA512
18c8f9ff4a362ebb916d381fdc4c0d6d0ec261ecf72f2d331e5cd50b43cc41893715d854be6f7167e8286c42af5f95de042f42b0b06492f8cb60e1a824a52dc9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\58A06B918B4C05AA7D2282135346966D3185E2F2

Filesize
259KB

MD5
93164aeda6a0e28a579c3fa2eb0f3b77

SHA1
fe6bf79ef30d1d3763d787aec41a9364e0565794

SHA256
25b4d4f362503e96e0600309e485b8e50075193339fcede631159eb335b1114c

SHA512
7c87aacbb56b8b384acddb8dd33a40eddececd01ce13838d1f3d5a4a575591f1053a2fb532863fdd898d90d2c6e6d6351746f95e827efe6233ccd04f802c4e26

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\6069CC2CAE203443B14848288D3FF939270A7D39

Filesize
144KB

MD5
cb958588817df03b7b71094f6a593fa4

SHA1
632149e6f70fba543f848a55c1c339a48241b69f

SHA256
c95b480d354cfd71041311af63f73027054187c4062dcd757c3d472d4f595faf

SHA512
b487b6948f81a8f79eff801984792f4b27fd301e33f2de54427d3c187119904ce37c55b651d8f7a6fd80da9f504bd8e740958a6f0bfa95522f71fa82373b6180

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\6171C3DCD3501947A8FD700724EF6121B8CDBFBC

Filesize
17KB

MD5
24fe7304e8c77123e13a203bb7f6d3f5

SHA1
665cf2d43376873403e417073a81d2f9210263ea

SHA256
af79881f17f76107c44796739548a0dcaca48eb28cb66113e1f6a5ef357de6cb

SHA512
81738b0b809779436bd3beba8d70b22aa03edd5c708928029ed28ba16ac27ee8d896e114fb620be3c591ac5039c75d0ffb19f40a1c23ccba4e85b37d9d3bc277

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\6A693CCB759B65C699EFF3AC209FBB7D82DC9C0A

Filesize
38KB

MD5
9b619e16f8f22d6b1fab13f85431f8e2

SHA1
6af2f2cadf660d5eaba3aaf2821fe17a12f8770f

SHA256
d457fdfc75596a07398443f7ed853dd170ebfd2ded3a18d23c065f6663c45aa0

SHA512
945c9f5d98c5fb104539a595e6b3d784c5787bc672dad38e301f00875aabe2293b820c806806bb788932368e9e7e17ced5a0b31922163b3d24467abb65776c03

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F

Filesize
14KB

MD5
16802fb05cfba0c4c441af6df43586d6

SHA1
693027c7dc903a3cbf754ad2e87261ce5132ec94

SHA256
0f94daa133ee4f123d3ae2d9f280a884ab926bd2398375249a31cf7015c46999

SHA512
5edd9b3ee240391f7074d870a8b04604e749eb0537191e4438fe6d713cbf0af0943ddbffbfcbfd615d71a48b90567bb2adbfff6911e3cf2beb378b393e55aff1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\808EDA8C40AD26C31B17AB7CBF563B59278B4CC0

Filesize
6KB

MD5
dfa034075d93cfac6432ec78dbb13b0b

SHA1
68522e23c03190991be9e7d1a9d5f865c1e098c8

SHA256
5975599e82de97584d1ea738f54a7c2b8c0db174eb0dd6ab5e8a67b8171dc2fa

SHA512
7d62a180b76ae1b9e62c9bc0c3e4a2f2003102436885dd9b1f06c5bc1edb2a8c15a24a466a77008ae5311d3814a6c962df0f94782718c10297f12ae3492f5b13

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\83AE208B2D1891F2938898ABB1D213CB8A32D7FD

Filesize
320KB

MD5
334ccd8f8aaeba4fc5511e48ab382bf2

SHA1
bfbb81d7813a2b1f352e577665bc9bb840350f46

SHA256
f88acd41c61c718f157ce66ee400ac13c4ed6ac98834dc06ba3d19faf1cdb181

SHA512
b5f3c3cd5f9996fa3a69cfe0f09c33bd48ed32ea86a675dcedd29d7035c62900a906e50ae50b21f2c44183e1602e399a55d60b7e7cc12f5f2ca6a893276b2254

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\8AADC122BECC7CB710792EC42E7E86056CC68F50

Filesize
33KB

MD5
256cf66d3f46b45dc266dd1264f042e0

SHA1
57b35630d6d61025c91f6893db10c6716eedf29e

SHA256
e6b8a0f5d335d8948a3ec06509fb45b91040f2d336880e07411224770262c155

SHA512
0cd53dd447a0ad573153eeffb2b9af5ea4671a44212345e7e01371ffde2d9dffe55474ee7117ac914d95fa27d55c3fb6afe8621656a252f8d6d013c306636c21

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\8BEDEA9D51609B0EF5FAE4B7E34EE86D752D295D

Filesize
19KB

MD5
34140c77729338be302a50cd93545bd4

SHA1
e14e5b691004ee535f070c5f2f57c0561147e6d4

SHA256
539c78a9ca1b263d270ecc6c9b959c59fe68cc338228eb0a4e3fce417c0137c5

SHA512
78b8356e17a08b1d533b199e9e3964eb7c871cf7e77109c385bf83404952f442f0ff5d5000d32268330c421f03cab7fef79dc17bc616fcd9a714149ddddddeed

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\914C32E3A583E48AC9A8A42F871B51B54F4A3BFF

Filesize
14KB

MD5
0e0a47f39a093790aa8d5bb0b7658fb9

SHA1
045ba1978b92890521cc9bc7b6b3eb644764720e

SHA256
28d2fc8a99f6b2f2a3c28d35499f1bbde119a44ceca899aeacd47df528ee24a6

SHA512
3853f4c512f84bc926d9a22a73c61418f438b412f481f41bccd052e3236fddd041f1cd7a6772989fe6f2fcf2e6f0eae134dfa03eb7dd4fb860a396092e3b47a4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\96DBEFB59992582EBD3CDC6FA0D103E94667BB95

Filesize
17KB

MD5
eee558908ae1f16fd5868181bc65f734

SHA1
42ef7bdb502a4843c7091de429f10f09dc8895a6

SHA256
3d0372502991514c5d8695e8f7ccc4d9b4619bdf6a5de5af493f15f23ca3e4f1

SHA512
85efb7392fa56300483aff48d6d0e60179bae7b550e41f8cd09550047b866522035d559e7c05564396b743f8fe0a0647af599904ed2a36a8c750dd23188e1b89

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\99AEBBAA41E92D3D1310639E7262EF8C48928DA9

Filesize
54KB

MD5
8721494f5c14fbd05f06a8af6251dbd3

SHA1
34bb13bceead6e33dbc43f9c582ba4c76a5e8f57

SHA256
ed157412444fa02bcf12563b1b3ee47efff5ed0b2028e55ace90e29422609f25

SHA512
3f8381189ecd90108cef097db27954d77542d85c3e38890c51b9651961e2722fd41c3341fc66260124e7445b61f31f7c58bbfbff8f84b44c24fc84503de3e1ea

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\9EB496E7EE0573B750AA2F165C2A7817AF062669

Filesize
139KB

MD5
6ee3e05ac49e93acf94363df30d689fa

SHA1
2bd677d73e7802d29d4537970e9f7933f1168f1c

SHA256
52692c0c95e4162f1afdd7a7195b90b236901867b8cbca547e9f9f8e926714c6

SHA512
3ed4df9d3e4603fba6ea464062ed9cbce7187389d8bb6b2b0520f1b56b857a98cd733be17ac17f26ea52b2f76481993fc50ddb15390a6870a0e23312302e2c65

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\A49456A2BC2C2BD424F15F21A80B76C80EB72078

Filesize
41KB

MD5
be8b0dc937379a23159ad6e8ca83911e

SHA1
b01da2bf6d40ebe263dbb3fe1bc8c9ae85cd2d07

SHA256
960df093739ecd963f49e7cb0265c654b0ec05e4ac5bc6f3ad9bd4329041a72c

SHA512
ddc6b5db1a17a5a4680a970105c7a7d8e4c8a655d0480d81d046fe8d7f4993ce67d8404c8647570dbf32257f59583893ac02302edafcf91487071fb3ba146282

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\A54BFC018A94D8CC549E6D8738E8DFE274855EEE

Filesize
29KB

MD5
48b5c8da7743d876251a2bfc9fd69a06

SHA1
e0660ee24041b59e2f5435536e237942ba9294fa

SHA256
d06dad5ff900c45dd75d98130da2d2c7c87e2e2669d6480bfe75027ac12d679d

SHA512
4d78a0177147c1507c36726866135df708e0a39dc1fd94b5734621021d550a3dac89a4d825e37769839175b1b6d364cb1db5016247905e0bec204eb150ed3216

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\A8C416C400BD266545350E415B36226AD172B0B5

Filesize
13KB

MD5
df5da0da0725465c1cdec460a030aa24

SHA1
f0b9cbfdf94cba6ff6f31e8c938021deba57b1e2

SHA256
129c8237d484d4784679cb8881c13fa20775d004437d7c1368745686f809543c

SHA512
ab78b5f8cd55a785b0660543b25b993a8899446fbf66dc46ff719b913f41e0464efa93dd481303dd4f7ab33894f6d2ea6be1c3f4e34114b59df2096303affac5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\AEDFB4590CFEC0A7A915638248F0401C3F2585E9

Filesize
48KB

MD5
9486eccd90b3825621731b65f25b8c79

SHA1
2adfddc27a431f7feca365e241f1d346a43dac75

SHA256
062e2761aa01731d841b59b4789bcbcfa7900082c8c85840208bab4db6cec8be

SHA512
2fc62234b02252b32934b7151b2c4c6d3244cab5a5c91e2b25588452bdc458d92a9842014b9a392fee471abf6e1d4e26d950f33c8b41419f2f5063c9eda10c7f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\B56A1A2EA4376B519899055B8D4A3D1067B57504

Filesize
18KB

MD5
8abbc708191bfae8f9d6373b78aaab85

SHA1
3d00c4f154aaf49fde628c7fe12176da2509de73

SHA256
371e2eeb110ae114b546adb78dc3afb776e01d50f17530b49cb3779566d198b8

SHA512
22941fc5dc453b6915047b9677352de998ffcc7ada9832b5a45ca896ae496dab7cf175073ce7d006dc8e015eebb17f3ae793ecd2b3bc1ccfb261604c533a021f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\B643AAA14AB157D80C053E4743CC0C9921DE22E0

Filesize
79KB

MD5
b6f568f0b9c57d0b344590e2e15a9ad7

SHA1
28bd39227b764649c314d7b4b2dcdcb567ada707

SHA256
3426d664e3e62fbe70edecab3e7e84ee0315d473ab9f1e85ad132237957de1b6

SHA512
238a1acb7f4814a30d20a6eca62c16340a961103356e0d5301ffda2f66b055c9a4f3fb428195ee22077f3e6e469e5e9344c5bc1a7cfe221e3ec81f4dc9d333cc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\B8953C9CE846AEF79A17A09C295C86EA92208F3D

Filesize
24KB

MD5
12d78357f94b7275f1954acfdd981474

SHA1
c0244ec0a148f731690b2cb0395dfade6f8b9455

SHA256
8bf59608adf9ed6ae3f2bc2a3daadcdeaa63c3dfc72e27fd415bda25690b08e7

SHA512
5875c7e692b4504e91214c79c5f477fbd6ac0bfcbcb215299698f33b94fb0a83f1779d01ae61ed46a072c96ab263b638343b8627534c0b8e91cfe1eeba112aea

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\C3F1768A77315DC132DB9D6893152153931F0859

Filesize
422KB

MD5
57c5d91c662645fc289a9c410dd6ff52

SHA1
2509748810c98c7eb11048f04ed2a9476e7b591e

SHA256
0b2fd625dc351853b44ad605de8a52df7752fb7fc6497317af5ea76e81aff215

SHA512
8405d12dd362399208254536a28050e274fee0a9ac9e6e36af10daa8266303a3d62263968fef4e337ead95ad5b291dc770e2eb442864dcb60ca0f0c3529f4273

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\CC56D530A171A2B195D73254A65896C0EE9596AF

Filesize
17KB

MD5
c3afa7e76d4a18cdc820c539c1dfb099

SHA1
5267d054a420b194004789cf38b2076decbbb1aa

SHA256
215cc9aacdbad3ffe329f342438f80dd99c32bb732213ef1a7e2d7a25dad99a6

SHA512
e81c6f769e2eb00546696b4b7e60493b84757e6eac18c4ba4b23872431ca80e565e10e2be4814ee9b6fef7f343fc49bd1628722d272cf5cf64f73be61b0fcba4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\CCDF696C4D34679D94013BD8D628D7146E0E5C15

Filesize
23KB

MD5
021780c161c5cd69debb0ead77070dc0

SHA1
c6883c3c14675e99346b111a7fc0f3c1114447af

SHA256
d504cd9ca2d5807f8a3ad9f213f03b38cc6e1bf6affe84c9cbfbece0176721d4

SHA512
92064173fa581778b02c0d1a190a44eebe8db9244ba7ee1628fa2a6aa2bf18da1d4e462622e156cad2943e84dd0bc97e38db5d99e4d2c88dd80e448de30e4ab9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F

Filesize
63KB

MD5
0f93e6f2db363b5329887f0cd00494d6

SHA1
fbd3e469ea143987307bf068e0d0a881003826f6

SHA256
c51d5b59f6f7729f79a077fe982724f844e0fa15ecc1218182236819a26a9b8b

SHA512
02d870261f12f77e8f20c4bb4b91eaa030909f7f80e58fde147583d97fa0fd461ab3a8b6857435948638941d8e7b046dbf0ac827d804d35b15c8a95ce4188878

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\D819CEE6DA493E9897B4E7340BD3834C28E83245

Filesize
215KB

MD5
adf945e5c7afc9e7074480b1b50094ea

SHA1
affd834fa77c64d99493f97e53b134ca1004ba18

SHA256
3edc46ecb170f69a67cac93e150997882c20a18b7c556b29c0167a3b40f0304b

SHA512
af1b6bb0414c829cbcda97dc1df0f04bd1137b439b1a0e8a7323d51366a35eaef0c26b4e74df536448a3fc529249d28852521ee676b410eb4b3d0ecf78803639

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\DC9D9F0C28D6EBD1ADC348DC29248B1D4BA307F3

Filesize
17KB

MD5
ef8e127980cd48b213520f3533a8afe0

SHA1
4d15bc8dbcea669078741bbf5903f97bc43a8518

SHA256
5daba57bc5676523a6361ae80ff364071c7bdf2a5c9c3db7cffada36624da1ee

SHA512
25734f58229478d01b356126be4d3255b606488098f8a90af4945c1a3147276052bc334a3fd6703daa1a0fb5fbe308ff8a646d8a29a74dca1958bb3c9f474fc7

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\DFAE86F306DBC5934107B5EC3697F9EB95DD81F5

Filesize
17KB

MD5
032ca3dd6bd77fc90da18d3e6409ee11

SHA1
47cdf2d39d165bb646fe781453e86afb0a9ce4d9

SHA256
2514a2aedc39249345ccdea7c194bed4a57ccca80304669817a64d0037b91d32

SHA512
f9d46b7a48187325801564394c614508fc30d21bbe5026841e35a1134bae9b04ae2e745452a6d0535c7fd890c8206d3b92b1ef4b77551585572a29eeaf9f3b56

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\DFAF798699EE7D2494A7287D4CF123272A2A18BD

Filesize
1.1MB

MD5
ed5d5897eade9b85440f467853c5b16a

SHA1
d4c702a95043abff70e0b251eb8cde3364ffeec2

SHA256
ca8451274fff150be57af55815a3352a817d7a9f4ec379edf6c1e5ed388427de

SHA512
b1b37cb96f396140d4f42099edfb0403c7a0984e9979fd6ac597bd7ed19e219af295c6b7969949689797e04f58f1e2bf4612c800f74bfe3757aea5b42a3a4256

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\E3E096661CC12A0FFB4E42A32E6157FAAC411A71

Filesize
97KB

MD5
7554294a9263bd3aca01feaaf1adf62a

SHA1
d80099320742e855582309f0fc5b5cc172289c04

SHA256
02476bfea8f65c3101c5c7e60acd3c67265ad04eea5fb395f3bc98ad082b9a82

SHA512
7fc166b2f2f5ea8ec939520850a52a49f70576c198a455ef779b127cecb665967694e964dfe0c2c06345a5fa666e6d60a8131a97586cb6a637306ae85e9609bf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\E7F7A560FAB7054050F81D89B8B3096A4AEE843E

Filesize
112KB

MD5
905de6334b06eee8e7d9b38185893186

SHA1
fab474a5b5cff79423c464635d3fe0b7665f4dda

SHA256
53b9e0f4578e4f3c8392461b8f1e4174c4f68f45e7f7822b1804989f3f45e334

SHA512
29787465bda1834b7a34f4bd8a7b49127df2883cc1bb8a08b2ffc58e8afd7b51591a521818571e31bee3cd7fe305c694f0824a1f84c72e4a8f2d8e071abe06b3

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\F0EAF5000FD9C2A30FD2826A9F349C1386795C38

Filesize
70KB

MD5
1036e9af0e6f2d95c798182af70f922d

SHA1
ab96206678308deee4bd97b1df1c6a0d22818b1e

SHA256
2b1c51ae33266f612c0f436519b5f85b73c4290144e9fdb66c98b5405f49ad13

SHA512
5607515dc65e3c846f753c623b16d2719bb92aed3d17d2edf5098f59814b9108b74a7e88a9356d8a41b90492b4e6f2db48f70e4a8b28bebfdd125b3f1e3c0a99

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\FA7A4C51D2048A50EE202A3195A12FE0008F6C3F

Filesize
16KB

MD5
c9408a5041a3303738160d801e6bbe75

SHA1
2d51236c81ec1cb4e77073b463ec5339889255e1

SHA256
c26985ef53be769a2caddf18cf59c47dfd8f559333dbd97ba6737a665010733c

SHA512
d3df4a3b353c5f8341a34e4c22253374eb7bc6cf739e08913508eb861dde90a5c8bca63d6966a5f8cc1724ec8a65e02312e1b84d80ed3121d84b74570085ed31

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\cache2\entries\FB34FCE5F6BD6E98B4FAA44597FEA4166F4D6C17

Filesize
36KB

MD5
a43e84f4247437b73f511f5a37904a52

SHA1
802718e10d1a34314286512cc868132556ea2168

SHA256
2c8d1b10a63f466e07441a4ec883421a0d179990c155bfd5a454046f33d478bd

SHA512
aa7d5f62a6cdb0b8508b2137096aa2292f9aa47d66a7e923476daf455f2c9b072e7ebc42e4770c1d3bb3e11d40ada6b71cdb3e52b76b4beaa4d03e786e344ff9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\jumpListCache\CvyI6ZrNlwlQFw3VVEVX+D6yc9B8l0uOQMOdg+aceRE=.ico

Filesize
603B

MD5
145f2163ac418521bd7403dad4051ac2

SHA1
fc0ec4703ab6078ef0f5dbdc6479f8156dc9cb59

SHA256
5db3e064f488f49d80944e73c49aa1e7efc0896d745c28d20d2bb82920b6e738

SHA512
6d192b20c247375ceea375ba2b0b12508b8edab9dd3268ab331c1404129e97022642b0966c5ce34fc1f8dd65ea7358bdcf4d174c1bdd2a4af937d7f2c271bc9b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl

Filesize
15KB

MD5
96c542dec016d9ec1ecc4dddfcbaac66

SHA1
6199f7648bb744efa58acf7b96fee85d938389e4

SHA256
7f32769d6bb4e875f58ceb9e2fbfdc9bd6b82397eca7a4c5230b0786e68f1798

SHA512
cda2f159c3565bc636e0523c893b293109de2717142871b1ec78f335c12bad96fc3f62bcf56a1a88abdeed2ac3f3e5e9a008b45e24d713e13c23103acc15e658

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\startupCache\scriptCache-child.bin

Filesize
769KB

MD5
265041f6668fcd68f87d33a6a0f33404

SHA1
51fc8152dd659a5c27cbbcfb57d7b6677c14f819

SHA256
b0af02bc9c96e3a5109ee20352095f071ce3528d59e65ce016c84c51215c51a2

SHA512
f359506291b6e86567bab0bed5fc2db85ec84764d1bb1e00a5911efcf75318bda5d9896d9f46b0a3d8bca2f66348f8d189fcb139482fc108a7b7f8f7cc62bdf0

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\startupCache\scriptCache.bin

Filesize
8.7MB

MD5
55434f3932c3e1bc8c8a14ddab22f2bc

SHA1
da3ac861a2d6a4012f827176d7628e12ee2afb8c

SHA256
69c19de8ce6606fbbe84cd12c04c321b24d5c3bf66e47dfa7af96b35e0049f48

SHA512
e7ca7f6fd3703adccabb463c7dc2e3ba6daad46ad36ea005ca57e93baa9cdec2eddcca9ec2649c0959287803f328a58cdfc889d8fad192f3c5b5669a9a1e443e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\startupCache\urlCache.bin

Filesize
2KB

MD5
574833c9fbdd8804498552ac7c4410e2

SHA1
bac67528679d4b9586995b458aecc39a4b78c31f

SHA256
6951e901cafdab0644ac1b4375b0780018451709d33d973c9b3b00dac0440f16

SHA512
7d536b976c2bef5bf459c0da998c6583ee32b261f1f3342488d6ad863b23bc2fee7e487505fdbbc64e7e8b1ede034334f10e6b3b65e6d52adf5a9a857777212a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7xr8dama.default-release\startupCache\webext.sc.lz4

Filesize
107KB

MD5
22bc6590a6b6c6280d18700ad2654f94

SHA1
c835060a7faf966a00efaf65c5fb42aeacb39b2f

SHA256
c7757a61371db126473ce934b82d93a4275afeed128b0ba76d5e17eb23b8e88b

SHA512
2779c4ee6e18a7ac39c11f7741a1dd9b2bd88bb59d81c255189c443f701949e280c4b7247e0b07f0cf12f99d1712be56624b311113c0935ab59da974f46bc058

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\LICENSES.chromium.html

Filesize
9.0MB

MD5
ae174699b663bd90d8d06c68c6952477

SHA1
8c76eda61d320779909adc541593b8e26b24815a

SHA256
c6737ef4ed9de369077718824f76c5e7026d0e39163e26af8606783e41c93e18

SHA512
3fb72dcd790464dde34978c9d0895376827f4d839b4a199c6e9fe77ab810d62b960babc4b21f6e189dc70147b5fb4334815730f4d1cdec05489c19e0725c2158

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\chrome_100_percent.pak

Filesize
148KB

MD5
cb4f128469cd84711ed1c9c02212c7a8

SHA1
8ae60303be80b74163d5c4132de4a465a1eafc52

SHA256
7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3

SHA512
0f0febe4ee321eb09d6a841fe3460d1f5b657b449058653111e7d0f7a9f36620b3d30369e367235948529409a6ce0ce625aede0c61b60926dec4d2c308306277

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\chrome_200_percent.pak

Filesize
223KB

MD5
e9c1423fe5d139a4c88ba8b107573536

SHA1
46d3efe892044761f19844c4c4b8f9576f9ca43e

SHA256
2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa

SHA512
abf8d4341c6de9c722168d0a9cf7d9bac5f491e1c9bedfe10b69096dcc2ef2cd08ff4d0e7c9b499c9d1f45fdb053eafc31add39d13c8287760f9304af0727bf4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
a7b7470c347f84365ffe1b2072b4f95c

SHA1
57a96f6fb326ba65b7f7016242132b3f9464c7a3

SHA256
af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a

SHA512
83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
9691e33909895bfb5bb0355b6f439c81

SHA1
7fca2dfcb9aca4ed92c644e8f7ceb98f87116a52

SHA256
223448ec1715cb4b1a2abbf1427547956f3ce583092177c287542e6d226319c7

SHA512
9ead46836900c054d8740a1e2f569bc321cc53cf3c47e3fa927f4cca54809bcf173bdea239fbdeecd694277e8869565e476fd272df393b924bb62a845e897533

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\icudtl.dat

Filesize
10.0MB

MD5
ffd67c1e24cb35dc109a24024b1ba7ec

SHA1
99f545bc396878c7a53e98a79017d9531af7c1f5

SHA256
9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92

SHA512
e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\libEGL.dll

Filesize
470KB

MD5
09d3bc8a5c6104d78566cd6e51c5a6a8

SHA1
d1db4f83bad27dc0caf75f77d510f2eb62dd84c4

SHA256
1307025ed98ecfd00770c2d5c74c8a5e498c4e457397f17c3cbd176ca8a62a85

SHA512
198072fff54bd6ae5ac21bd891c23da9d657a4525dd5944719eda6f7062775ae66d9cb15d29105d2477378ae605351e4b840c9934106bf80f936a596e7a1eddd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\libGLESv2.dll

Filesize
7.7MB

MD5
02374701c3dc3b26088763fd3cc11bc9

SHA1
84e582496c53ce139d9efd219b762ad38a50d011

SHA256
8e68245d98bb740f393472938612979a56391f127d1af7683253e9e749e7af41

SHA512
09693492447b037e8ce16095fb3d63d806604d18c3340bf57fecc0e0ae3c877bdcd83320e633b0fb898a4c20616bfb4558ccd8d93a10d235dd90c3be8020a8a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\af.pak

Filesize
494KB

MD5
e48860fe82ef022ffab38cbc4c96dffc

SHA1
a832fa66bfddabf3ae7f219cf379f66d2903162a

SHA256
e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13

SHA512
e4d0973ca7e59091c482d2acc384aa48ec87d3ce72d8d42a03a183b230fd209e085a4e907473a05d02d41e15ebc527df942774c23b4804c150367fcd727af7b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\am.pak

Filesize
800KB

MD5
d6e8c344b2b40a9c671304f6f252d51b

SHA1
c59ddcaad921b6d2d3f70b7ab07026c35e5d1e08

SHA256
4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5

SHA512
018ce2bf4beb4ce066703b2ac7413c6517759be68f889f27990de5d6694e9f84b4027f9861901ea4b15abdd1bb570e5a16651c935713feafc4d16cd57be0b911

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ar.pak

Filesize
874KB

MD5
f6ca56d15814dd5afd5e7ff985257880

SHA1
ef236d7027cb50a188c1e771527e6628702311ea

SHA256
5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f

SHA512
46c0436c110d6f1a8f3ebe962226c51af525228262cd56744e4d89aeb05d1eda614801a294bbfd2e08598e355750d7a2d200b3e7b594da03dd26ece4cdd31e3d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\bg.pak

Filesize
913KB

MD5
e6608ecc589e87a6f78f9ce553ec2609

SHA1
9fdb2ff6291549df773ba243b3a92b984b15bdf6

SHA256
97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768

SHA512
25450b23acc962be85977ef08be9b484c2a9127775039c521158c1801cd57d5781bcd8d5b8784f8a8b9403ce44b59964a20dbe36ce181f1d239143b22b53d5e2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\bn.pak

Filesize
1.1MB

MD5
57eab375114893a5ed0de36a516e8252

SHA1
16f23ab3eb62bc7a2525a7a5d86139fa88670b89

SHA256
1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587

SHA512
895bc282484ed028f5f023cbbb6e2755091f036e540c531b6ff639cf9e0ae5da02801dc81d7910eb141edd5c255d8b088d1abb531b152fbb161d6c2bf9615f4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ca.pak

Filesize
556KB

MD5
7474c8e0c3285b97f1f12792964b6824

SHA1
8b9381be0754fc3df2f4f13f8575bd4abab90e9d

SHA256
b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb

SHA512
4ad524fd530bfc72d72edf04ba4890e06ca0a20cc1d5c2c3d95cda746b1d884a62ec2d4463ad7be9cd01c7529b41bef65f9e669c62719808a83d3c70f9475d43

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\cs.pak

Filesize
572KB

MD5
582fde87aac61961e4f7955f16d31769

SHA1
3a8eb832317dd7e07efaaeeb5885c32b9d381622

SHA256
7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c

SHA512
adb04ccce5471d80182f7ca73bf1a2e4ce63a4980d455837fb378bf679a0022d4ee6f9fbe148d6932fad83f458c76ac229229542092e0cb9b271c8d44639b11b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\da.pak

Filesize
518KB

MD5
5f8f09aa98ec3a4c8122d64c5bc6610e

SHA1
08a6dfaa3a11d8c994da90460e78ce0a4fcfb644

SHA256
3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee

SHA512
9c643eb6415cad6aca0584d62211aed5ed21a0f8d71ac4f692bd420a4a190a9781add7c874d0f56bb5c1c0f65d543d932d0f50caf127e8d014c05d015ae61ca3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\de.pak

Filesize
553KB

MD5
d1a513308f9de55b6c7bbeef7c4fe90b

SHA1
a4a5e99fe73d5f9df2e508c3c8e9b73dea03a76d

SHA256
662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b

SHA512
9756e16255976569584a3a5e2a17421a31bc8f9b158c0ad3d30f6fe624ecd0e77c255571e46554c03c54d58b06d3f7b0fc77d347548f435547eb1ed9173b30be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\el.pak

Filesize
1001KB

MD5
34c6150acccd20c7f260b269bce06930

SHA1
277b6d2387f600c84263847d6fb2342fd4746cfb

SHA256
162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840

SHA512
58308b1f4f92f1eb26af8516351194b96defa8b40f26cca2776aeb9e804e585fdb9918bd2acb9c6318b63c3768c29893574bd0a4fc18fa9dee96b9112732ff94

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\en-GB.pak

Filesize
450KB

MD5
56bdf77ab3487e28d354a8b0f9ba8d2e

SHA1
b10ee918320a50a417b1ee6a28cd4b05a5f77238

SHA256
7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb

SHA512
8d74c79ba3a554d69f26fb8c20210c9a339d85c0e9a9af445901e8a5c7ea544ea6ec713f9dd2db7b8bb5cb0afb0fb385236d4668a73af37dc9ef8d2f73c57fcc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\en-US.pak

Filesize
454KB

MD5
5c52a86b21633b55b383c20f16859b2f

SHA1
126585e68cb17f241351004e21c1d30e65de1cf6

SHA256
41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078

SHA512
2a1b6a4becfb97d470cd7de74857edf2cc9cd4a77f377ccd9bf60c30539862ff1ac3ed6cc849632a3ed4ea0e5b92679f3cc5b4cb26cc7eaaa2bb2f4ae9974a6a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\es-419.pak

Filesize
547KB

MD5
15d1e262602e54d76de8bac02dada000

SHA1
54e93995675bcebc595befaed6b73c9ff5e6e735

SHA256
ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483

SHA512
a232eb97021f17fde322697db2c00423cd70e9741772912c5f7a41849b35dcf3e2fe84001ff0a7902b2b54305d1f805f53988e421e192be0d5abd157bf8b5f1f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\es.pak

Filesize
547KB

MD5
f90d43351ffdc63bcef25bf634c1fd35

SHA1
f80df8034cb64df1ef62e586891275a74868ab6c

SHA256
0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573

SHA512
7bfa70a5de14652063d261c28ffd3df89ea5e38877cc7977ab27f7280c48084a4ab1e5bdad0c2f624a7434a5d975feb9d8d221c010e24963d3c42921f5a36e65

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\et.pak

Filesize
497KB

MD5
3cad945e9ae6e31cfe66c89365e5d353

SHA1
43758cb523d60d936b9a417123f337b8e123481c

SHA256
ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461

SHA512
ac07e7f72b670a2e8b7a46a672fefedc58d9384d4773a6f220c231c619c1134613ff68c0ccb0dc9e03eb5f47dea7ac57de318af5f3f242d6be7ae43071e2d947

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\fa.pak

Filesize
813KB

MD5
7851efacda8438c041c9a511f4097de2

SHA1
64cba381a17ef0ffae2dff5135d57fd1f9300ab1

SHA256
f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8

SHA512
d94fb1d04630cc292296ad6033c6beed1a00dcd4c11eaca04a7eacb50c238269b21e4d2a4002836f4d41e0f6d951624beefc95beaae23530eccded4569ff1869

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\fi.pak

Filesize
508KB

MD5
6d7aaddb1365b3efee94d4c510a3002e

SHA1
2a970204894c5ac163c980ec0fac2dbd1711e5b5

SHA256
11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274

SHA512
f44bab9cee552dddac17d4ac1949870943cf138b3fdb0e649e8827acb6de9528dd9cf738757e5b495587e165d1c750b8bcc6205bdd029a01eb92aecab22ba49f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\fil.pak

Filesize
573KB

MD5
c744b92c8feff1c026034f214da59aca

SHA1
95780d3374841efdbc0d8a46cddc46bb860a26e0

SHA256
d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745

SHA512
eeefc73474642e75da61056f2841e7cfeb8d8475be55a39852dfe7de8a972f7d86e9d1df4614b3ca3ae4fb01b68e5ced664bc8e46ccfc94f44b06e29a5035b43

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\fr.pak

Filesize
591KB

MD5
79d945ef9b8ebc7d39fd03d05d9b2f27

SHA1
6fbcb748515f97056689d4a747e4df3a830fe049

SHA256
1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424

SHA512
f1a26715ad9399052b664c71fb60b6eb6f965fa80d6d8d6c47e0b96ad0d4a4d2028c3e19dad49e008bbc29edc24e656777ce073da008d3f4dfdee4c8f2212a07

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\gu.pak

Filesize
1.1MB

MD5
e884bbc8ded4f5f059211fbbb85ed351

SHA1
8f4ecb45ca73902791ff5e56e0b272252c08508e

SHA256
087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118

SHA512
50837daec40a2624097cf36dfd7beebba4db748fd9cc470bf71b526e612c1aa6c88ead7511ba751e370f6f5d28ad9d6338dcb3581d7e3d53e2672741915b952f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\he.pak

Filesize
713KB

MD5
ad6af80367f0b5d408bbe2c7b32ade48

SHA1
9dd4e4e5a63e50e9d3715667b8149edd8d07a52c

SHA256
20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934

SHA512
95df5ce7f7885d0e72b2d89e1794a3796a1ab407fb27174219db22c668f74a8c3ba1f680cbf990be533c35ca0b2136b1917c0cb92d4556e3ff2ef3447c55efbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\hi.pak

Filesize
1.2MB

MD5
66ab509000cac52c805d6871ca6c1f25

SHA1
e3d3e7bacbcfaa7538ca89d9d26218eca06c01f1

SHA256
9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8

SHA512
356642a19f044c6e192f658ca2bf8764431129cdf7c9891b5b5bf4e99f6b990a1428c1e483487b619865e7f2d31cb5c9bbb3b49ed25fa81c4374de3e8e65519b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\hr.pak

Filesize
551KB

MD5
1973723b9c45b9d971c97229e7a441cb

SHA1
2bfa4922bf2084486681af45cd7f7dedf95b2d66

SHA256
afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f

SHA512
6a1f35435b01ab187cd93b376b76444dff575284632fbf37bf8b08e6cfe7783f985d0fad2425df3d3c332aad2278971412455a748e83c2d6fabd0f6afc3dc292

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\hu.pak

Filesize
595KB

MD5
2515bb367f56f282657b3dd3b9ffcbc3

SHA1
8cc350e359f1cfefdf0ce3b016109dd483d45a8e

SHA256
b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a

SHA512
779a77b3380f08dfb1d1e9bd65806f3d5ab56619d040bd6ecc9726c17944f4d0c3a619edee06d638549250fbf4c6a2be46cd6196a3a8862d184a68d45d6f6d72

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\id.pak

Filesize
490KB

MD5
91bad2312491410c7f0393be512b895f

SHA1
6e4e9cc985c5b96eaaad91787f8bb7f72cddb604

SHA256
a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059

SHA512
5c0e1cd1741e78fff90f3ec2be02bd47bfc669e50ad0cdde975238a74cb4081536faf80d0a28dc9fea6efda6548dcca4e569c54b903f5c2773c17f72000a99e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\it.pak

Filesize
539KB

MD5
591113bc491e5c388ee3876de4aab3a1

SHA1
a63c2a18eb92fd03445bd237a5755d557e1cb593

SHA256
33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e

SHA512
66f1e79c9bf179f19942352258181858268a991b42d4a79747ca580df3fa219c2be71ab6597cec4ba7bd4c691a5e1328aa03a565b3eef442c6e2216f0d82653c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ja.pak

Filesize
659KB

MD5
412bef3ec11f53c2aa6511ca139b1f35

SHA1
8b42655c2b62edc13c61a4625f55c961cefd1c49

SHA256
c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985

SHA512
85760c2a0dd4404a2d41f0d957c9cf8962d6b80389df838cd2d85b6a31a54f4e50c5f19ee73d2ee66e3e61a8809aeb5b493e7170aceeef9bda53e135ae02bc42

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\kn.pak

Filesize
1.3MB

MD5
a11d186b8eec7362a280abec3859107f

SHA1
966065cc6f69c3a222751d2191a0efeb6049cbdd

SHA256
a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508

SHA512
099e73977453a5dca329b1d8a8cbc612dd2739bb3db034b7509af35877ede6ee12450875302ff3f9351fc7096b60be1b2d8ccbec89ace3145eb264f25946d46c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ko.pak

Filesize
557KB

MD5
965ac0d213ccdfd83ac4970de23a8f11

SHA1
8326841ab80c40a7ca8b13589a3f5ff54fc15827

SHA256
3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07

SHA512
5eaf14ce5c493bb4704716add07428edc6569f2dcb721679e140916c0e426cfa8e8ce27a2c38c48ae6e60461a678525e48e42c2938ce40e488b59d3f97a2f9cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\lt.pak

Filesize
597KB

MD5
20906aec4a21bcbb8bc8bab067075ba6

SHA1
369da9c1567d4376852cebdb87cd9213dc4bd321

SHA256
a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58

SHA512
8d1ee40bff980b889af83b95fa408bddf2ff5d257f532d2da46bfc3ddbcc31b9cf14b473fdfca1a574c0316fd689a424ae241e9bcc533b7dfe0c7203d4b252fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\lv.pak

Filesize
596KB

MD5
a999e734f9addcf07c080f9861c3c170

SHA1
522bb12a0cd4e5232570001684aed84f421abcd0

SHA256
33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653

SHA512
ecb92c4ddf7b252a3216059e63b387c6847f6eccde532c300b74e6b04ab56da0208c2ecbd00ab1d5e48acced909db74b1aabf88e34d0d5928b89320f45200dc8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ml.pak

Filesize
1.3MB

MD5
39d4a5ed8cf7c8e0df946220fbfc0f68

SHA1
70794849b41d00f2b895f1211a6baaae3fa7d261

SHA256
87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6

SHA512
ac992b9cebc2fd51f7477b36f1aa4d9157a84c3023949c02ea236d909c78fb5ccce28dd213c089820131ee3f669164529daf58901766630ebcf40546d33e132e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\mr.pak

Filesize
1.1MB

MD5
649e76b6666096a2258b942745ff9fe1

SHA1
82edf8ca68dff0caa36b17901c1e12a17172fa51

SHA256
039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4

SHA512
92f51140416cd6dd53109ddcc1ee24c1d26999de5cd48a11e6954dbbc985298c1b90c0b4a7bbd8701a2737b71340e8a257e8b1ace85ff3b4876b714c60befdce

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ms.pak

Filesize
514KB

MD5
9fb7c18f376b46b254ef9a960e08655f

SHA1
31cb060fc606d011151f1b5464e2a469372113a2

SHA256
2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2

SHA512
23ea07d917bc0cb9a2f530f985c4c1930d31eb6e8271804709126b8b0f5266dc51636f679944d2e3d8dd7b603564defe85c1088a33a922e9fe15c2073b509a8f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\nb.pak

Filesize
499KB

MD5
de04250ff403e9af66a1351598d2a64d

SHA1
4b7a5a2bf48d988f95aac6e85b11a8c2b2fd007e

SHA256
887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15

SHA512
71527c025205bbcd63351283b7b123d8807c05bc68f2f7555f10386e330e052d031b9986ae2c1f0398bd174e67962657e0b8d4a57a07d167c233390a4e6c5556

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\nl.pak

Filesize
516KB

MD5
d59fed8986eee2b9d406ad52d88cbcf5

SHA1
f7e409e17723e21174361bc81e54bcef269f40f7

SHA256
619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e

SHA512
234aaddaa7677b39667b4078dc3a630d67b4f2ab7df5ce763d509183a4d88e8f7bd1a231113b8a51418d577e4aa630860a7f2735c34ef59e0f65966cef825597

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\pl.pak

Filesize
574KB

MD5
8d4db26e2ee5181afdfdd513053f3c17

SHA1
0da427a085927a5c02d2a67c424ea99cbf5e6b02

SHA256
f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786

SHA512
bf441f501d746f1fd996c21e5e2cde643b9031bf58bac31474e68a72ea6993447f8bfad3284351bffc94d6a088e183e0b24d109398d65dac0edee8826076ee21

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\pt-BR.pak

Filesize
540KB

MD5
b4183914f46fd63a7bd32d715b8629f5

SHA1
d0295b556e55a74e357f932473f9dd2bb1cd2f51

SHA256
5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8

SHA512
3bcd37cc49a827c03fb5b3a97a5eeb863ebb6f071fb2af697ebfc4f57dda676227533cc6a2fdb00505cb2395aae685dae087970ce13af113260d856b845a985a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\pt-PT.pak

Filesize
543KB

MD5
03138b2e4fb822b03713f6c4f0fc67cf

SHA1
8f6f6585743676177eaff5a582d18691e3386bbc

SHA256
02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364

SHA512
b000f1b8fc952849d1ada21aab665cbb97989fc28e892a75077ae9a24c4ef1d15b7d5cf1c5aca89d27d40a01c64f343a08f790049249fcfed43a1a430b4fef9b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ro.pak

Filesize
562KB

MD5
cfd7cb2444248216e12193689ba56c10

SHA1
0a9d65fdbc68688bf1624a8c98fd42673961e0d2

SHA256
655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9

SHA512
7ab384dfe93c4de0d82d3a581d0c4b988f823f49848cedf081067e052be2d43c42389899588839dbc7cb35ba70617648bd0c7c199900e78c487f3dd77e64b4fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ru.pak

Filesize
924KB

MD5
46fb61aa9515e97293969683fc330764

SHA1
5bcc41716976eefb65870ba2a2b230238f7e53d3

SHA256
4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558

SHA512
c3acfc1c902c651e5fc0501a7a77358cbb99daa020597f7f6be9fc81ee53509dcb0d63c6bbc5ae308c88d95dace7099f024d698b6f364dc7db4ae2a7660e5b31

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\sk.pak

Filesize
580KB

MD5
5d41e75bf42cb12d7674986f4e5dcba4

SHA1
7c3375226997e3f69e3c9a3a5ed762ec40d24973

SHA256
89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623

SHA512
a2b91c888ea3dc2e618bf8faf7ac9f0fe562ff16c85d03afac0778ed671b1868a665b892aeb2d588e7f5bf32a7eba57b75e2e15f2c51fc9264e0db2f95d804d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\sl.pak

Filesize
556KB

MD5
6c71fa576a41711dcb351abf92a65ea4

SHA1
a0281f6b9dc363628e7d6045f7dc2904149c9dad

SHA256
458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47

SHA512
258e49b51ee65bf508d05a5b3286a8937d3a876a876635b59b97752c5171e89458b9d23d9d7178153aa16b6fc908cc011a8e855c6d3a0152c919b40349cdf4fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\sr.pak

Filesize
859KB

MD5
eb8ec452c7079ef7dc24bc7975513ed9

SHA1
4787250292b8f2040c7ec0b265f60edcfd1ffcd6

SHA256
4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41

SHA512
3ab2eafd3f09627efed8263cc2d59d5780b6a856a6d1299be511bbb5c1350fa05f98b0e77c53c3707ada17e7e44b8801b191802e2cf5129548e279703983a8ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\sv.pak

Filesize
501KB

MD5
819b5e4f2b7734ea4677f6d579d72f84

SHA1
aff3048d8e35fabf68a756513b67efedba59f85b

SHA256
105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e

SHA512
3e1ff5d934c7e0656dd16265be697420c31b191f88a5140c3598b4fe37a6bd3031f50d45ac7e961acaf0886934951a48230f7b10a53d85e015d6d5e1602c3eff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\sw.pak

Filesize
529KB

MD5
be2bc09130635406f560b95e789f9a81

SHA1
f189cd6eb6c844e2d96ffaeda66fe4d5f1453130

SHA256
f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58

SHA512
f651ea959066a5966f35493788b9833597dff653f649a5bc8b09a8ed748bcf086bd0586a36e1f4ecddd361d04774253e21d67801760d0988f3e17f0c6e1121cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ta.pak

Filesize
1.3MB

MD5
52ee28471f2f9d01ef3f57233496554b

SHA1
abd7dd9989fac90636626a41f007eb6aa5ec7a2e

SHA256
1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242

SHA512
af2e9593faf60319244c90e9c06604dd3830705f14c18cd380dc2338aaa0c1e137bf751603ab9beaf7f1783839f83bcd4fda357b7cebc66ee94155d560b6f691

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\te.pak

Filesize
1.2MB

MD5
3a71904057869c23d1bc108f1e8d0d31

SHA1
6fb6e60c80bc332a2bb66d02a1e3db69961a9c41

SHA256
8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e

SHA512
7248058b2d357c4a8b9c2e95d580a2000a96d9a5adb0b822adeeba5c4422e08cc12ef84b9b9a627a1f6cd07a08698ec000510885d14d64afd40c6e8d69376022

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\th.pak

Filesize
1.0MB

MD5
879a881174501e22c3de65b9f80bc19b

SHA1
a2e020d5ed1be7dee50a495a2f8581e751cbf735

SHA256
647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d

SHA512
b8961a90036b94340283237da57659cc277e65e545764251f7d3e406dc5f70c9ae29366184d0aa8831aaa0a7cb5c12ff825078bb87528606cae223fba58c73d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\tr.pak

Filesize
539KB

MD5
414b557adfe76e3564d43cb93f513c5a

SHA1
f775095f7c55e834a777c7f25fdfb81f1e63ca08

SHA256
f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291

SHA512
8b1be522ef23888d46c13888a18229f4c9cb6e1c6e6730cca79d9b13d71eb86ecd3d0c172ade6f70ff63a7fb5242e4de7d9742b93376669d13c77de0cb622f94

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\uk.pak

Filesize
923KB

MD5
241fc33569b22647e7d2c4189a8ee7bf

SHA1
f56a73cc81b1e96560b74ee5e73d7af792720ada

SHA256
13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232

SHA512
ad16f84482f0c7c3d3c3fb98caa3dbd0048138f361aa6eba2b6338ff6e25da4c3ab39450354f2a86a53d655cad99e92fab2c030b5771d7e6a25190617f1a9385

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\ur.pak

Filesize
808KB

MD5
fb978b7d211112a0774ce09ca54ca96f

SHA1
fb0c69801230437dcd20e3803db81ee60fc042b0

SHA256
60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a

SHA512
abde8d79f46b27e0e315034025837a3126d6e5d2bc52504d49c946fe96828bd9b20cc4a5c05283fb9f8813e6820a28249cfd68b30cb27fba216970c16ecc8d44

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\vi.pak

Filesize
639KB

MD5
565abf3f9b296fcff95fa5b169a7d598

SHA1
24de1221b2adec13b5bcc23c4a54b8e987e9f12e

SHA256
fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257

SHA512
53bfe0c1c289ecdf48114048e15807c3143dbbe357736753cb845a31a6a3fccd0dbae652294508706076ca4b30e5da00e53bc6aad11b06fffbf2621997e7de36

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\zh-CN.pak

Filesize
460KB

MD5
3fe312d9859b299c3a332373172c33f8

SHA1
ce6a99d79dcfc363bcf68bdb1ddd4e6862236020

SHA256
f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b

SHA512
488a6043381834c9d69a906edd9e3273da01b618e9f3351a89082e6a4727f9f882e435eca3d590cb30336cab289fc71b109322d43804ddde5fa038a63a0b84f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\locales\zh-TW.pak

Filesize
455KB

MD5
e302e1102f3f5a21860f38f41b3c30f8

SHA1
78b5d1c451cf674a7641dfcc815f966fc920cf57

SHA256
d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b

SHA512
1f96b197eb7ae6b7983ed38d4ce33ea0c845ffe527fedfbc9e53a6009871dd3c39084a04cd1d43fd6dd24e7f26e3ec4845d4225df828de0b9ba346cbc98efea4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources.pak

Filesize
5.3MB

MD5
3a87e8d6dc2d7dab0c3c37fe4a74308d

SHA1
5ddd587a6541e034203f24ee329796dfa316656f

SHA256
61216fee0360053988d5be52ab626c89173c86da1cf0b5a697bc32944282fe14

SHA512
7ba1bc093f25cec2539fb462084cb1fc32b17841f79be95679c90f4c735772d1dbe652471e52f4be254b10e650d31e3460ebebc82d89efa6a9ef801e5d98ea6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app-update.yml

Filesize
95B

MD5
4dd45d9de32f1a1a9aaae5d05314e29c

SHA1
80e458fe95becbdbdc82b1c06c92ae4f3781f497

SHA256
f2063da30e10724592fa8e42767f066c34520c4fc8302b6647a1d2a0a039d71f

SHA512
f5b0ade03d39d867ba3d7db972f999b92696beab9c20d1eb0440d3a0aaf66fc6459f0d6100f3ee8d9dbaacb5d6d78b8d3e0f8abcef8dd76f05719b7f896a7c40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\@next\swc-win32-x64-msvc\package.json

Filesize
430B

MD5
704b387859cdf10e134ba4c181773747

SHA1
626f9cd6f668b8f310a4c11f331b96cb4289e44b

SHA256
f6b59292c52960efe68cc3813a78bc505d80cae11d632006770059380173cd53

SHA512
5416f7ac6d243bd04f32d5a776b596b94db1858cbf904357d8eb4733a22ddc94bcfbc116437e86799ccf402493212117f65289308f4ae16f3d39083693f9ae66

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\.prettierrc.json

Filesize
26B

MD5
e502800d651a7ef3ff58d918c68aa81a

SHA1
c3b456549821510c5729648bfd93886491df1db8

SHA256
37055c98043228133ffcc5cad7bba5ef6c8f24698a551cae547b90f51d22e519

SHA512
9892bb44616c6c2761027562371e5c72a355ce1b519072ce5733ea1d4971ffb8c9b3e83f935a18120e0702aae644d07274ad4b09214459fc13679a8ed6051e7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\LICENSE

Filesize
1KB

MD5
9b54883148dfd5ff6b9f1a23f9470a30

SHA1
f062e421fa2d8f722e9ccb2b0b4be9502a7386ad

SHA256
0fa6b5d2902f7ac42db390dfd2cb3b4ce82ed45cb5ad5dea41c11d1d67e0934d

SHA512
d2af503c12f0fda687293452af39f98f5c3987eb8a57cf12c47da5aed67c761349e5186c15371a96f5d490c140e8dd0d5e8bd6a6164139dde0562d6ee46db90b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\bin\nodemon.js

Filesize
436B

MD5
30894042a167528293c057f833e7b6f2

SHA1
ec993fedf1f1a22c77b985c72d8b0074811ea680

SHA256
9bb0e59dfd1cc00fc40bed0ccf10d88414d915d79875b9dee5c1d5009f4e89cf

SHA512
2b544b29e44e0471a9da5474209bc15cb81a44a38448a74a7a67f4ed3ca7d1926cef4b2b13d3269fb785a468d00f1cfc042d2a7d6b4d563725da65028e2df15f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\bin\windows-kill.exe

Filesize
78KB

MD5
de5ecb14c8a2212beb309284b5a62aae

SHA1
cf89d1cbd52f3183590b33bd6be591f95a6f5291

SHA256
d35c0d3af8f66984b1ead5cb56744049c1d71ef0791383250ad1086c0e21f865

SHA512
fea8a49538f5fd4cb8c262c1619f9f8e906edeef7d3c791bd3b85f032a0499aa5f18b4370a00e1f4dab9698e1958b042cab467103598f1bdaa583eb1fb918c07

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\authors.txt

Filesize
236B

MD5
b5c019895f49ad741cd49e6291aad090

SHA1
03567a03c8346dd89516e2e03957bb674af91408

SHA256
e1e0dfdaaed1f025c106731aff67d664b849635cc6cd3b9b08674db8dbcbc5e7

SHA512
ff13c9416d29d9a3fe636e14fd63e5424129a6e72366c06b1bae3c5a06f60cbbf3520d868c492d472450e35e547881be93955b29eed63e66979592da576f8bef

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\config.txt

Filesize
1KB

MD5
73ea33e660552d101eca031a0baf6be3

SHA1
3d3384db49a197a8a616a274598bc18a25ade114

SHA256
032c4ca3b1814a39579d7a0a00154a3772d89aece9884d135fdef782f36e27c1

SHA512
c7b9a4bf4de7d13bb45b4db857511cb411a7927ee4db759af263905e01cfda8d95477d2e2d6ad6c51c9f301710e20ef64b54a4d15082f5054680da9cfbca1146

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\help.txt

Filesize
1KB

MD5
0034cf996f84911ff0646b717ae47ee4

SHA1
5aeef8ef12d8023fe208c0492174a960e57c643e

SHA256
d98c56a3cb9643b399fa04c422da35204dc91cd869c47019e9783fb4f7289adc

SHA512
b1f174300ee58e16676ee8ccfae4e48794ed5412d89e0cc0d8a134ec055dfbdb596d0ab43ab376f46adbf76cf970210455bf46ed666839d69357d0ded8c057af

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\logo.txt

Filesize
799B

MD5
f55be3331bb0e69fc47994610da41ada

SHA1
d8415b399bd3853ef658a5f2057812404598b5c2

SHA256
cb0c73fe1bc7676104d6a92ca91250cd562b7f37a564edc260de01a3fc636b6d

SHA512
505d427c6d0add618e0c54f8079e4303fee73e0ccd9c4edfa67b44660ce5d5deab4fac09601002f73cfd00f445640a69ce9fe9a39b8a0f3039b200f5bff058e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\options.txt

Filesize
1KB

MD5
016f8e569786ff8f5f6c321a735e2323

SHA1
b7a7a46bf03f4564d6e47fa55a4fc6b9be1e39fc

SHA256
3c8ec4fa239f82b2b9f427925ac2f75af2af9147eaecc706b1990540b95ae94b

SHA512
6b8372648371ea46ac98dc49ec93cb2efb9cc81f75e8ee7a5e1f0a01b7bf209ca92e07649c22630722370b1f254e956ea7ffe4be68d0f9ef419766f90dc80fe7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\topics.txt

Filesize
325B

MD5
57a5e0be8307585fffdbe867f0d047da

SHA1
0185976215d973431c6810571b21d6804bf64632

SHA256
5f8f41620ccdc1d7298df4ab786abc7edcf049fa7e06fc69bb26b38cbd453643

SHA512
4c05c95f21225be793051bf799255f6e021145e17ca384697877aa9dad66303d8bdb6e47751433eaf17b22dc766758cb799034a34e1e7851a8328a95b6784273

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\usage.txt

Filesize
88B

MD5
1448d12c8524497e0abecc6089aa5a99

SHA1
183f63e7726b128a36e247e6bb506ced31272e49

SHA256
844e2d826c59dbd72ad383fe8a23b24373d83e9b184b437f7f04c42487cd5759

SHA512
e14e41721ee4bba6deeedcc5786a113042cd595024eb411ea7d874f282547c5943dbdf1eb7674d752ebbac16ac4e1c98149b957ed5cf3623e85a561a42354e45

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\doc\cli\whoami.txt

Filesize
1KB

MD5
5a53b8ff8c3670ff035f6490a24a0789

SHA1
e079a16d67475a83eea085058af0cd704da97393

SHA256
4e7d19dfe1603ca93a0421b1abd4b19cfa5324ef458ff549809c5e66a2efc596

SHA512
e906ef44ff0273e4df3397ba719c173c87a9919b7f9d2580e2c3354fba22f69b0c0a020eb049d276934dbc66f497b279d15c135fa0e12e04acd39802fc5dfefe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\jsconfig.json

Filesize
142B

MD5
21cfa078a36c66a3d1f4f2caf729fd56

SHA1
8849b6bf237cf4464a4628f0c2e163e866dead8f

SHA256
87cd1d700216892ba7d388d04f42e373e1abda0b5d407c54a60e67b5dde48ab2

SHA512
92f7960fe79d8e5813372d7a7833bf883c3dce6eddb083302314a2d9ff52d800178f8ddcbf071c169267b346dfbc5d59b1dc0f95a70671bd63453e56e18846d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\cli\index.js

Filesize
1KB

MD5
05d07534c94e2d589bcc02e96e1b9503

SHA1
3c3712ecff74a1099c4d65e4eefd9cf2e38f1119

SHA256
5c5b008f28d9aa1d6f8c30a30de037b95b50141a20ad0f029d0d79bcd75caa4d

SHA512
7c7526f2b4e685cc7e20689ebe5abf7630b738d2d15ab7b5e94765e0e6f221492e9e029f715f5b3ac156d3d11ffd907e070d2d7f968b5f5fb401aa9c7ec84ea5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\cli\parse.js

Filesize
5KB

MD5
63db540f7184a372ac611fc3d7f21136

SHA1
0b3a8e70600a6705297a532849b7470c34f8c19e

SHA256
93b9bbbc19e6f0456185d7c9e9ce11e994f41c01e46067959c5168bd345b0313

SHA512
1f56bbc4856fbefd21f6de0738712157b91f1388a71a957c37444b617ee161885822b21fcf4e7efe14d5af54b9706d8181acbb286dbd7525c91a56b53dc391be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\command.js

Filesize
1KB

MD5
90c1aa9f031e818373c2f2f7ed6b9dbe

SHA1
b6476cdfa45ab967436ba9bb32aac1d65e531a9f

SHA256
50f10478098f06b77a58b351a93bb8fe7a7572bfbfb3e6f0bf668460865da3a7

SHA512
4ee766da766530bb372d8e04b058edd6b28ca5d77f603b175336e9b5e8f5c677e77e0ea4afc07a642c07c48e0c209716dbd9cef4f6ab97864a9ea51af2b49bbc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\defaults.js

Filesize
979B

MD5
2e6f9c975170db8136c9ca5c5ecf2a0c

SHA1
404a2c64977cae3407aa138c23a2f841546f713d

SHA256
2b577f3fd8e3d03d64c1ee07ef13db89df04d0a9cf7b69ebf2c17041f7251104

SHA512
15bfa9fad522ddc043383704cac725c8cc2b4565708b891e9e03d889237cd528ee4d347e54a983c801550856c2d1ac1269dcc127edfa6d63bf3d2aa0a19eb358

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\exec.js

Filesize
6KB

MD5
efcab0a70d5e71fb513734cf92f2a201

SHA1
aa55660d5d6a38e2ea632d4de0640ad2b1b7fc5a

SHA256
fcd713c63326ff75fc44afdcbd2bf63991c3c76169a26a2646defab46ce24155

SHA512
260a468807d297c2fe85ce8341ae10be64a7833a8249f2932c6a93e6ade07438ca4bd26222326a1b0e3203ba0c80a6a6fb78e90015b667feda8f68538e1011ad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\index.js

Filesize
2KB

MD5
ac3af2f96d2e824bc37e36e30cb35cad

SHA1
d04e50eb9464ee715a940819ac7af1b612884bb4

SHA256
be155df5dbc29c88c67c936f2840d2bb3abd09981fdb6db6480d54beeb27e9fe

SHA512
060bc19e10d8b9cd959869866b4ac5e0739edd72ca1e61a230a5f3c735feda6fb75ae7a8ea13349013082bedbcd40e30219ca09ccfaad43571059a765bcaee8c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\config\load.js

Filesize
6KB

MD5
3379b8830f56cd13355114f157e57857

SHA1
cec1a9f2c8ca7f666cb4efc2f3eb99317ea59602

SHA256
7329c732d39f8e884c0ec197e1133c536545bf4137417e6d664bbec962990e29

SHA512
0690be21833aa598da0d7d20312ee8a2e2ecaf164981c94c3bb12036cea40a206e1b25e839209db78419d6262ae87e29a5c94f583ddd9b45e05bc5a107842d22

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\help\index.js

Filesize
733B

MD5
e47db45cd167c663151a07e6a3396427

SHA1
f3002a966b346ef937a47576d754787e4bddabff

SHA256
1c1678d18dc75f67bbfae8c92836543af6990bce6b1cf1ad3acfb52285dac393

SHA512
3f8e10d09fcb527e1c1753d50c9bcef2b8fb70586f34e600c0d60ed27a295f077f380e1df2fdadc78b0d468a54f32a5351fb5c4cb638e3012c96358094d31dea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\index.js

Filesize
38B

MD5
5250f6ffce08844c0f9f139fd707243c

SHA1
b5646886daa1c00461042d1a35c1a83675f8c8ed

SHA256
95111d84575ab36b697d760e130d722daea3d322cf56612f2ae67c7b3e8cef19

SHA512
49dc989edab7b4ce7477bbc5c678e1b1f4aca0f77e0ad6323d3c251164ed28b59f4d18d5b0280d53108b93e133eb2dab5469093ecbb2f1fe2bb32b758f59e729

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\index.js

Filesize
82B

MD5
532b43e5038c9f6a6d65d40ca44375f0

SHA1
c7fa3f4fbab77df0eee87d08d428cc06d18faf76

SHA256
cc16aeb163da6cc7746bf5ced2d11f1436e458c7ee803241e9a9fa1d107450fd

SHA512
809479d0b075c9bcb3eef6670cdd652a6caf39ec7f93f1d7dde0eee8a792d518238cfa9f78a2ec1a11ebbfeb00d2a117d25b198718af668c7f356bc3f93ebc1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\match.js

Filesize
6KB

MD5
65475ff22153cb7e1cdcd5322341c398

SHA1
c026de2f4276472496755344bea58e11e6b38748

SHA256
d09e469209e55541c8c67fa7ab25b7d4e051ce26d36f737c6264d4ade4b26d63

SHA512
8010e71be183c4b1a02ced648f083be4c8e4be9ac474e1405d91d9925887b00fed0aa07d15b994846417a48ebf768c5402f5d0b004cf9107cb44149bac3da655

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\run.js

Filesize
16KB

MD5
47603d83844b08ba9fc39ac940d78f50

SHA1
4b8dfa2ec30dbd1146a9908b10c858ecbd73521a

SHA256
d93e994fddfcf6c7683976452a3d877a51e68f56ce2a49b821240c93cca86d13

SHA512
52f33cfc03dda936f4641f1ef8b3f14659247053a701b8990f0713742fb90016ba5d51d1e1f44fde84dd883c92166e77e908d586c527858bd3c0a416b9c9d256

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\signals.js

Filesize
488B

MD5
0b71010f098a8cbf8ea47a83a699693a

SHA1
456a713c6a78b49bbf6d613ff9cfc4bc9f01f589

SHA256
5c16e2e5f7101eea3f13c19da7c7a9e6fa02f7d1098b170e71f07d14f915e394

SHA512
95a382907ac465d95db0cc41055038e839ed9164d4010003c08e6ba4456c19b50158c908b8d287eea09a153e38fdcc7f9a8c0052f35eb069243628e0968750fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\monitor\watch.js

Filesize
6KB

MD5
a0bccf8a21d0c4332643a758c666f725

SHA1
1aa6968e927afd86a3f056126f31d2eb6420573f

SHA256
efb0a3f37d9a6279614b29fdbca3f29c1a6d47f2d26067be1c86bb56fbaefcf1

SHA512
bf4dc9c5b4f3b0a01ca161feee0ed13e6f1db24b0a64bbf01b325d0a2788380516da7da7654ee983818f3e0684983302242fe790bbb384dcc126ac4c394c41b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\nodemon.js

Filesize
8KB

MD5
392a1c2f9f7dec3e4f64bb738f21785d

SHA1
02d0364639bbc6483d727e5e24e6c6b39c8f0ae2

SHA256
3bb0b111682da4977e265b0bc746cd57191e294e0c25bf667f129771897dace4

SHA512
48b0517f41013b024dd5a674b88a9e53590113f664482b0420236babb9ecbf0428c40c9f708b204bcb1f2d59789ef6383641eb8efcc7a7ac506d4345c78358d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\add.js

Filesize
2KB

MD5
4739ea852e85157f1ab60544ea5ce663

SHA1
d83c88f7f8bd7ec5d1b36f86009ac7eba9ca1bbb

SHA256
3cc60361f99b1080c66fce4d6ea0390a38c2a49e821e7f21dc43ed2fafa31277

SHA512
780001095f33fe4a18fa06c3311f3505949dfa762da5f1c0c6665b5501190b6e6c45eb69633c99e02b8b59d01813abfce2baa611509f2a0e65364ccf71965bc6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\index.js

Filesize
1KB

MD5
0691f1f2acabdb82da7d67e05479ca5a

SHA1
dcff01be935756a732591d61fab8e64e530ddeee

SHA256
3e64a2a35a97e41ff8c073299f07c3754d99b0a6e7d42faef7dc02d61d67757f

SHA512
85ac8207410deba52d3b58fcf30e468ee46b1073544b61376b4b015e588a52973fefa192a027bfe8019b6cfedefc3c4c1cb4fb0ee88e7c2ef88da1c7ed0f9eb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\rules\parse.js

Filesize
804B

MD5
078e15305c8688746d2e6933d291babf

SHA1
80f0b4201c45af197cae63c9d93a88525cd5c5d3

SHA256
9259995d8e1ca1737ff36cf4f97c80e55d812726ec4ead43b6c0829ce9679df9

SHA512
83ea7a6d31845542cf03f4b27be92087e417ba5f995ec740824440ddf92932d3623576b7a1022ade20deeff2f1741d617e32dfeda52efb5fb85e9be28de27df6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\spawn.js

Filesize
1KB

MD5
ad2e1e41a1aaf8c0d0b622a27bc6bf9e

SHA1
139625411959345da513904bcb7d73d7c312b63d

SHA256
7804d7450f305b9142af45967be5c96f52be8350dba2a403f4bf79d5e092bc60

SHA512
e43ecd8af261ad4cbed89f549c18c18df9cfae6338c0719c1e5c06361c6cee4598d080ee32dfda56cc742e23fad5db56a842ef8511d9d5e2c28b7f7eb4eac091

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\bus.js

Filesize
946B

MD5
e469c4cef4116cf230f86394586c5775

SHA1
8849ab04de5836797a3839989d4325906bea9dff

SHA256
8ebae78d8d75951b714acaa3e1a3d7f15b382a92b90c8040423e9866d97f1ad9

SHA512
923ecfd5103fc6e266e53dbb1d35e11f4058893177fa00cc392a628524dcdbe616c90015a24e15b987f971c5eabe0e53a3b107878bc41bc73aacf1e370d660f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\clone.js

Filesize
829B

MD5
9ef3c7b72b1d63f5e3a7975ff67bdfeb

SHA1
a406bd661839b5efeff4929af9fcfa991e51be12

SHA256
5062a7c87599935fec99e505f3f463c3e0872455da73f8c8054ce0788c513ba2

SHA512
eca4c0784695d43435573725f659409ec33a3acd3a5695665935439cca28122a6d8fdc1eaeb8ac6fbdb921893ad4226467777e8c35e3b9b0b672b2196f4e12d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\colour.js

Filesize
690B

MD5
a85f32c2180651cc03bb1f293271bfc4

SHA1
0d04f9086ace00f08c628c1af25c728eab897d66

SHA256
a4969a552701982cd415005d5ce162f955cf26c205229d2f4c75ed4a75bceceb

SHA512
b32f6f7c1bd75a3a23aa5f170e5356cbe1ba7eb031f6eced706aeff8c15d8b37fc771c29a82580a48a95c65334d8e41b0ddb551409164a43bff29def7277c89b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\index.js

Filesize
2KB

MD5
2f2a9c006f17f892a78a9381932918c6

SHA1
80905883f8b96a2265d60202f61de419e8c6d3e9

SHA256
c69735d5a8d259dbc87614ae268de4f6581fcadcf6f931dd20b36bc09c0a502c

SHA512
702966aebbf2a8f98a89da8640a3e0f610fdbd063a19bd4c7ce2097dff7ca1d49a2c8040885ca3b31f85662e6a8b86769ea9224e8f64a03bcd0bdcfb71873b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\log.js

Filesize
1KB

MD5
fa4ca8a08fd35bba58f2af0f046320e7

SHA1
5f672b1e8d504a468b7946514e854425fe938d29

SHA256
dabbcccb1bf0089d96ce9592a575cb64139926d6b899091c1dbd37632e9269c4

SHA512
70cdae1e1983fc7bed3bee24f50196ec281752e7567d5c4d5aa2859172141422f3eb6a7ffe9165c408d5e3354d7c139fd90382c73f7ac0de16a5840221dee399

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\utils\merge.js

Filesize
1KB

MD5
b5932e306173a01da5d3f814bedcf4b8

SHA1
d3ffa9ab328864682cbf2f5e9c5e5f6437d92541

SHA256
c4598a00e91b93b7964bb874e8ceed6d614436335a7fd81aff7f504499e210dd

SHA512
cf565fea7c0b2453b8276fc25b5e0b546b0ef79eebdea4022aedcfdeb7866687c925d95cb4d56de413d53db51d03168b8302383ca9f8b04c3b5e501fd3be0fab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\lib\version.js

Filesize
2KB

MD5
7232bc938db18583ac3447bebc844430

SHA1
55051c267076fa3bd3764864ee77d4c41c4b3233

SHA256
5071083e2e09969b2741a46cdedbbfcb2608fa35c1d1237e3bcf134749fb5ecd

SHA512
9167690b0ad72c815c3d8c7227ba8d3574acbab95236de0ddea28c73f6a2899dd700ef9083b06d2badad19c21659a93ab101ecc439a42292d2540ed8c2ff3c5e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\nodemon\package.json

Filesize
1KB

MD5
d973ee4a6969bc5e14e93d99d4680c16

SHA1
22ad20391ccb50fb6343931a1312751b2f7e049f

SHA256
f0051785c8178f10c2b5ebe86edd6949eb9db7b293d9abbb51a857f7e62500aa

SHA512
2f8c64f04b3fe023d296899b16f6596f42cd69c1b8230c5bee561c18af6bbf44697966b45b50d718eff75cbffab37054a6de7b57bebc16b2d85a5a0e307dfa9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\LICENSE

Filesize
1KB

MD5
216384c4c084ff996a55be20cbd26ef3

SHA1
0510d5fdf8e7bf002b8396958f2240222dbb2a5a

SHA256
fe0982bd7d38ee4cb08b2f111067bdeedb9732a6621c761bcf7dd01aa6211c5a

SHA512
eed68402c44f099b181ebbf43ff7efd1dcf6791f7f35f6d386d66202bae0da6e7f0108fe9c3d62af0f69989d92286fd0c307d2192db0113b9fc857746dd01abe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\bin.js

Filesize
247B

MD5
927d799c0c996a865d11a78f04198211

SHA1
f5898b61159f1f56ebd3cd439b498a177d413c0a

SHA256
7f69b31efa09c6e7d442d6229e82e65f38faeafeda1fbed7c5e54324aff062e6

SHA512
97e1061700f32af28dbc946e2f3be0358234689f9d3482b37429dc28697516916cf1ff6c7891a29b835cdd775705f432ff7f437bb67ba87d7ae81d62453407b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\LICENSE

Filesize
573B

MD5
7cb552557240a921e34ad313a224d17d

SHA1
92ad1627269adefd696ac5a67131e4af575a2cfb

SHA256
7d355d1a2324c2073059ffe7ea4d96852c873e718bcc197374440dc3efc3f7ba

SHA512
b4bf90a3cd77805fc149a4112f822ee47b4f13404ee92455ecab9dd12d796ffe81d664bf21042ae3ad6419abf6a9de6df231328be6bd8ca2426e3432d456921e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv.h

Filesize
4KB

MD5
349864c2d1fbc9c7788cdf95c541ff52

SHA1
fa968f5bd6560675c26078de4e7d52b454c778f7

SHA256
7340eea1def3c1d832a6f40c5022725f1704a783f7f992b71d5f3ba2dcaeb34c

SHA512
5e1910c23dc08e79199fc80ab8e0c7b300e2e1bd2678d0d9171a73d8f328adbd32021146e5e43485f64f25fcc6bd8413ce1ce3846afd7fcf49ffe3a04d0efbf6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv_inl.h

Filesize
10KB

MD5
a5a0f8294daad33a66bf30c329157a2d

SHA1
02b5d7fab93d942033fe9ae2620d1a2363914469

SHA256
4955fbf455cc29d63f5dc777d3aa5172d6e1e6df221a33808a913bdebf5a1277

SHA512
f583116ada3f281c208a98d053fe6b580187d6922e2ceae69917770a46f56c16444267172db2cb0bdef3b8012088706ba1a2203631f9ff79d2814714b25fa78b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\index.js

Filesize
514B

MD5
e5053e64fdc67009804a42cc8baebf90

SHA1
8814ef33fe018ed0a1817e77c7ed7ddb16076137

SHA256
5e591255fa35fb3650502e648ff51d6d7c7e57ada312bd33058da03cc412efb3

SHA512
60f941a6814dc3efea6a65c6dced552d4248273e1ce57222b428f813e0ab655d13546a0951ad3c0b22adffc7fc40542d7667ce70d315052308ea0fa1195526f5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\package.json

Filesize
947B

MD5
2ac7232223dd7c39ae2e82220d9a767d

SHA1
cacf598ea739460d281587549421ce95546b3048

SHA256
0f49b6c0282be08a5dba3e98024401a921167974a516b630ce9f9a9f2301df08

SHA512
249f93debdc2f2aabc8a1d977f2c1a9a54cbc0e3580e4dae06a1193ff83c801518a7cfb7919f98c3b943eea7c7b99d85c8148292b0b96b3bce4788277b956b56

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-ia32\node.napi.node

Filesize
198KB

MD5
8a50b5876633dd9bb73612fea622a521

SHA1
27fb94a39849fe6ba1ce7b983c0d9e4ca4e62ae8

SHA256
053c3100121939dfa1fb936718c6088e4490e72faa3c713310b556ea90155278

SHA512
958d901f7c72773a2f9439842f422048a8cfa941ef943f5f9e61c5e9d48b4d9ebbbaf72acb2a07138ae66f925b46dd98717656a58719902d417a14ba1e5aacaf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-x64\node.napi.node

Filesize
251KB

MD5
0b3ffb5b756beae28d8d9da67c288283

SHA1
7c2a0be0a5ab1b936c4752254927f5ed066abe5a

SHA256
462e527de86494f96ed0d42a80c261e46bb57352e86d6175607186c1dcdfc7b0

SHA512
a1568e7d02bd34992236c587cd77404e4cc9c25011a075dc0cbe52b59ae254eea65cc31ee7fdf26898386e370a752df8bbb2ce70592244d6f24b10d39f9f7854

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\skip.js

Filesize
117B

MD5
92a4c6dc39d38ac078ec80977508feac

SHA1
edc8d81988e99c77105abb1455ea224fde97d212

SHA256
c12583530edc83dcc7cacef4a428eaefa84c10bfe4b62c0c9707de015e338859

SHA512
3833af1f274d3bb89776a8dc6b9ff015f5d219ebec47f5e98bf88670e523517ad8a493b0959dd41dd6e658c230335338325e8c2befea61f2f22f8e83822ccab2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\src\showver.h

Filesize
116B

MD5
6f621ba192a6fe2228ef9965757f0bc9

SHA1
e3625cddde946f5ea21e4c00be95cad214da4016

SHA256
2b561b980e0a01191a6c7cc1cf94c8d5c061f9f299ea256f1e7ca17250ae08bb

SHA512
ab90bc30f2c23a3032334d30294aa02007e0db180c82c6c8f0d84781203be7c342134cc17bb2ac0c7bd89c1e5902c852afb2d09b0c7d4dba27f5101577491f4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\node_modules\language-server\en-us.json

Filesize
5.5MB

MD5
de2ac61fe7207c1b2f304b05fae4e39f

SHA1
72a4623fde7103eebcff4a55ccb8eb6acf6bbee8

SHA256
c8dd69f4f8f07ebe1c73a433bbf08f67e3bef3047c35251a243c3ac78f500647

SHA512
4d0be337f5d6f760fef3f79d14ef6835045e12e7eef5cf906a5f73841b01bd59d3171c31f63de34e5b44f791d5912f940fa391d96685532e0baeb7613526f8a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\node_modules\language-server\globalTypes.d.luau

Filesize
434KB

MD5
6fb690ee838bebdf6591733bdaf632e5

SHA1
658ccef6ada0551d661d78706266ff6ad2797858

SHA256
ae99b7b676e4becb10e6a9b77229e99bdd60e5a91d2e6bbb141c85721962313f

SHA512
7218ebc8c64a7bbec231989ac7d2221be63f29302f6f16bfc0bd67ed5e9c5ddfcb50ae781f6ef73a3d891a70ca73ecc62bbbe6c5a4a218225b24c0d19c7737ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\node_modules\language-server\wave-luau.exe

Filesize
3.4MB

MD5
12fd29fcaf6f6518b8bf9e976928fa38

SHA1
1f9352e217518eaceefdd041e3f085ffbb93acb0

SHA256
d38d6297b4653f30397b7f45964ed99a70c8ab73d60063f68d3380c309e626a4

SHA512
b0c5bfb87639585564915f284ecff5af7e6664097ea3d9df6908c08ce09f9f6c31912225620bb7f7cf818efd6a7146280ce37e10ca7fb55bd381b95bb8a2189b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\resources\node_modules\language-server\wave.d.luau

Filesize
11KB

MD5
7e477f85c45cfca5731e0e45ca63f8d5

SHA1
35390d8d2c0dd00e3c60dd6fd7f1727e36874566

SHA256
e58e8b24642a8693b1b1ebad703a7efab1cece9a1b12dcf353c4b4432f23062d

SHA512
dd3d9b149dffd31ba4e94b9c84ed0fda1fb67f1f7d633900688cc9e4e40c26f55048c1730f205e5c22b5030362683f0abce86033816f1e089c3b67cc3853ca70

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\snapshot_blob.bin

Filesize
302KB

MD5
62b9e00c46ed829e06d0c2494aa994af

SHA1
988882632b95bb78d80db60e4787c576e48338e4

SHA256
22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e

SHA512
03b7c57782923ca3a011fcb85f74e865bb7ff9976c89152758770be3bd3d40684ebd216fe34f0d0050936b536c8bab5eafcaa35fc26e893d30a108e36687876f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\v8_context_snapshot.bin

Filesize
646KB

MD5
a62fbbb671bf975ed46b42d9cf437bcd

SHA1
408b595b1dc6658533e0db1d35f509ab9ee70525

SHA256
a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae

SHA512
87c934670df70afcced0ea5c73449a17ad27d5b6a25cedad9eb61634aaff8a42b713f578e861c2efbc77593793bba240a1495822b69c99a8ecaef64b07b6a62c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\vk_swiftshader.dll

Filesize
5.2MB

MD5
337b0322f328251f01bd0fda8948217f

SHA1
6e59fb5df7773c8668e8f18755e62b532a9071c3

SHA256
11f24457eb9af084eb845780f3fdc1989605766c2749fce6fb003dd988d5ff65

SHA512
3540b2f5df1f20b5cbb6e61caa005fe7da5d1cfbe58f639ae0c40f6a4e7a9d8786f3db4691dfee9a001a2a87ac7b0bf39b7f308c14f809874a89f86b18ff8fbc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\7z-out\vulkan-1.dll

Filesize
938KB

MD5
6db4abe9370ef778e93cfc6bd6dbd292

SHA1
0d7bd9d21524780b6f8904a82c3ce09ae5d03f97

SHA256
52bf439424759a84cdcb6d379ed88582a6d6ba58127c44adf1b8379f0e88e5ec

SHA512
1ec07916d82d78243d9a144db3e947c95ca92fce1350708484c45fca2f953bb76728889b8d9a02c041849bcf005f998804d7066a90359fa180d94c237d014317

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsx3A4C.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir8676_1319306985\CRX_INSTALL\_locales\en\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir8676_1319306985\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\de-DE\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\40371339ad31a7e6.customDestinations-ms

Filesize
5KB

MD5
0b67822f6166058e7b78943c4dc29651

SHA1
6aae22cc497e6a0ffc0a96cf57865ceb12d391bb

SHA256
0df46f65024f49e842da4555ca8f2bbe1ed8d45466d195a839a286c7d8d27f34

SHA512
8774d31e5244d93545f6171739cffea913fe12de64cf3ba46f10bbc4c440085967b23623cdda578c68feef5e717e28700643136bba3c719495b268be71300fef

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
20KB

MD5
cd1426272a13d4c46db8a208b512f767

SHA1
0308e528fd119eb3c4c52444bcae59f956c41243

SHA256
a8579ab8af778df273b97fd22c953b1aa8d8f2e6c3558e281395e3ddd2dbedf7

SHA512
2dc2de4b928c0ceccded0ea67d73075c20c2e6df55b303fd8ede40d04454f03dabe66d75d5213d4f579bb62af31f080ea3471d3f1f5511f2a0d3fa9b9d85712d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\AlternateServices.bin

Filesize
6KB

MD5
f42bbf4df1497e40eabac88a4b83bc6c

SHA1
fc3871f5148a6c214f83378dab0d3f4b685c66cb

SHA256
ca664a1421fa8bfc7cf14f8a246962ca1ba05b38b62ada05e97fe6a342ebc1b1

SHA512
d10d1dc5783bf3bcca2e63b65544cacffae5c5616bdeaca246bf2f9381e4f50912e02933c7d9da7e15ac09513ac505bb5798a8fd3480ced8ccd2497d6c1bc255

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\AlternateServices.bin

Filesize
11KB

MD5
e9777e655f28adca93dc5d51ca1293ed

SHA1
49c1273356af0abd9e84d6ad41cf24103b2799f4

SHA256
2e4d15c16c5fab47d1a366e22a4bc0e2c45760ed9ec103ec693459945ea010f7

SHA512
a1fc79c811ca5984c6ef3c78f857d1a5ed39dbe0a6b07f1d7f6bf857d41ca9fdd8e2ce20fb539ed3b23e64d98e4d9b8570a6af187efbff6d0af944e568e361a3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\AlternateServices.bin

Filesize
8KB

MD5
73404062891d0bad755f70e44c180722

SHA1
e8654578ddd4b25539737eb22279821664a545d4

SHA256
a522939e49a5feee19445b5778fde89b53762fc44906db869bead086c10a6105

SHA512
c4fbaa07280704232580296d269aa7727dbe3aff3f5cf1827c9630c746396f125f49dd0a2ebf0aef972e8c328fe77868f7a0066fbd93a61fb4d3a3b116b6d766

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\SiteSecurityServiceState.bin

Filesize
1KB

MD5
5ea353118fa1522ba72c374a2259c4c0

SHA1
7ab62dcf3b09ace2e1f523625a9a9229dfac3081

SHA256
ac4fb0244533dffb24cf91a6e65af58e179b091d62c5c7498a57bb88baf60312

SHA512
733a0cae92a80891841e09284ea4b5d6f121d886280b814c464cbe9f81ad5c910fec3da1b19b1320089cc88cae3f0fcd836f372cd17eca4a461b2beb59d99c52

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\broadcast-listeners.json

Filesize
209B

MD5
97c3738563a9448365a735f5f29ed3d5

SHA1
15a81433236ca6e6ecc4e1c8d0fdb8523b265c57

SHA256
63221253f5c30efa214c2cd2adcf51a9c9f9a2c05f119b00a51c9579825c2c24

SHA512
ed98f42d5d02ab53a9e50f80b312bed4b5d05d053bec582cf9d619ef91251e86cf4f4d1123c645500fc1dc4673b49a8b7badd3f3a39f565ac643ca4fd0157ae6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\cert9.db

Filesize
224KB

MD5
022f6ba5f33b45d770c005824df6aa63

SHA1
695d8cb524cedbc4a8f93a821f74c1b99abe0184

SHA256
a704a5cee773497ef9fe5a35c01dfc804f8428ae2f35363c75519e379031f7e3

SHA512
5dfdac33d77979c2711379f1b14bae04b1361078881f9e1d61fdaa649c9fb6b88b63ee46ec4a3b33408c3f80b550d51ccdca220b5668bfa9083ca44851c7816f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\content-prefs.sqlite

Filesize
256KB

MD5
b5acd9cf58ba89e643e7b2e839e0707e

SHA1
82c2b9cbea4acb50b446b786818287be7b0b8b61

SHA256
4d4fd87f1cdccc9f826ab7de2b3980db6fe4ed328f079ceb24f680557da9667e

SHA512
1fdaf5173a2fa956e3793b3643b44d928a4c81a1599bdf4b057396bfca5948ce1097194dbb5f528959c8cf4e34d058922828236c6060b41510e9ea2cb9ed424b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\crashes\store.json.mozlz4

Filesize
66B

MD5
a6338865eb252d0ef8fcf11fa9af3f0d

SHA1
cecdd4c4dcae10c2ffc8eb938121b6231de48cd3

SHA256
078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965

SHA512
d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
30KB

MD5
7327e716418065e8fb6e7da459822b5b

SHA1
6db63a2a40e30078dec3c71ab2caeab88bf0a44e

SHA256
63e188785badb907fedf95568c9002cc29763e941859ee15c5d831c1b1bc6e00

SHA512
802641566ccd35b8ca857d47cbbdf0fa8653be3aa79e811fe2ac9537fdf9664cb4801a7478f0bc042c13e5c26e95fba6b18155cb544e415b4bc8ef2932136d8b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
31KB

MD5
b2dd076c581076b6d8a473fd878cafbf

SHA1
c24ba1647a0e6504c0653f5008d9b24fb5bbdd1e

SHA256
84d75c325b2b700696f58beff6ed2e643379ef7df79ba4ebd4d271e9f3f1362b

SHA512
5c8963abff6a1cd7bc70b79f4be9b2e9a65675e1df4ac1559edfb157219d6e87732073659247abf7992f2d2d82d3536830cad705ba05925717678b22531441b8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
31KB

MD5
f6ef825ef6c77a6a392d7893a7874412

SHA1
7fd35077e541570977d63f88df4d037e0fe8395c

SHA256
24e0d6abeebb5d6335aec2ce718a690fc807e987d29a3a6bc9cb6dcf3f04b60c

SHA512
c608dbaa372f787d122c30912a9ef799dcf1841dc08996f0c0e30263be58e86170fe9f64b5d943ab10a13357b28416f1cb53e64eb348bf27d7b74800c2e8afab

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
31KB

MD5
290c7e51646e3b0055e4c2147160a6d5

SHA1
7f504b901415c1b3623850e46fd53ced4714b8da

SHA256
8ed493dcc6b9b16f59922b50e2a10b3e1b9f6f76504ed2556d0c7e7ac94a246d

SHA512
62dc064ed2bc0b150fc7e80224418eab856b899edc6844368d6e699721bbcd415c0f5f7f5cf55f05592cc7e07d96eb35eb6100afc35b73b588873de3a8e35087

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
31KB

MD5
3f7690b89a1ed21ed999f60c39092e8e

SHA1
6fcd168367abdd197bcc8cd7317c49c85c6070aa

SHA256
6f251a5d0442330ce5a372b43e11f06f286967d4ff623d2b80c750867e2c64e1

SHA512
13db99b1b7ec1732c4e587a602edfba402bc46e3e2a9052d6bf2c723d05193139142d576c56343eb3d53472cd63109083b31d839969b204c3cd7588ee266fd05

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
31KB

MD5
7b0c1eca4e7a6c43a064e0071fd36321

SHA1
47d7231cb89e5fa53a01a1929792a6a964b1cbb8

SHA256
a2f3c1a0f415a57ece4245cd469e8c1b66e88612398b66c2e41ef3fb9f4292d7

SHA512
c873ff4ce87b7cc31c39e430be90a9bb172ac5be8d69c9e95bb607055a68d224cb274d60b8121fcc614184d7f37c5f543abfba0371e9a6b116d9e76a58e1414c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
6KB

MD5
26cfd2bb915f7469b45064bf92e3edb7

SHA1
f7d8ae22ae8e98a6fbba2ab8f1dc4b4001b30ac7

SHA256
47f4bd5676d626238fa345d671cc850543ad12001f8a5b5ba96dbed4334dada8

SHA512
08426667564eccdca48825818096f79c3c09a60ef7fdbf1efaec59bd9bf15cca854ca3508aba1df56f8d9ba48678bf0a47402fb1a3b7386e485f39eac49ca4c0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
16KB

MD5
da9b2a07eced1f5fc063054480d6c329

SHA1
3d2dfdfea29778cd612c5b36b3704d5f31549526

SHA256
300dcd5868d627fc25d4c2acdbc64e13aa8b2d9da8048b05e0d4537ee7c23744

SHA512
42689ef1a76341ff2b284e24dcbb54711b990561c626c4c656bf5eeaf962c6bbeab53e946406e5eb2373ee8c888851e91dfb062f2f04d91b0f47e2aa7490d2bb

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
a39dbaf1b74edf3186c3a50ca0056c4b

SHA1
1505e31b6b30cfb6e2a675f4764374fb872b7921

SHA256
23cc3c275d1180149f6eb0e46a55d66c7fa5a04516c3dac92aefad09d3dfa493

SHA512
9192d3cac63c0b06763064c167b718dc6ccad6ebba611725ca4aebdf9db418d379e9f2f8c304f85c2f2105519452164bd32a794739800f53f3caf7b2a31c1997

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\events\events

Filesize
438B

MD5
db6fd84af70c4f2924749f1e10366ea4

SHA1
de9945d5febd1d1bed56c887831fbc4ad44d92b4

SHA256
e346be7d7377b909660aa652bd11bc64f2d5597c788d6b674ee86c614c12f39c

SHA512
abba6c91a12824f48b74a720cb75ce803cd623bb48a1cbb7f5e4d44d1896987fee1a81ab31192f7b8615ec34aba97d6fe715769dec8a0691901efc31b33f53ce

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\082e6309-ba62-457b-95ff-29987a69f549

Filesize
671B

MD5
c6f4751eea054627072b82ad73c5ffb5

SHA1
f48115dd7581aab3d2ab06323c2d5e283519fe60

SHA256
0d49a4e436420ea29f0127cebcb45c6df1934cb184461f325d8125c502b0461d

SHA512
bbe3d7d2b0ce466b787b840335ef5eb9b226b694eb2828d73dfd6e2d286d6772141e00c7dcdc7c0f91cd160da13cc3b4e2213890a92540a2574355da277c606e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\310d74b0-f1b8-40ca-9cd7-e77a67d34ad3

Filesize
659B

MD5
532dcd0a79ad25c6d839528885bc033c

SHA1
9f25f9f932a70001561fb5d8163a2dd6c56b5747

SHA256
79b46bc198febcde006a42ae222943575509aa8e966c095a47da0d7d216c5d78

SHA512
46cba764f8cbe4f822cf5adcccec149fd0021c28df55e27a15b091924b1804c9152ee996a782dce3dc979d7049510f1f68fa9904c2cce9d1db121f328b60fb55

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\3a23c787-d7fa-40b4-b465-e476dddcff76

Filesize
982B

MD5
4f1ba07f6deddd1a766c4e58dfabf669

SHA1
c7a68297e0fedba9de8fe3b1cdfbb13ae5c56e0f

SHA256
06cf7bbf7fa4e7c602369d7029fa142781f8fe21b374b0e1ebc460b61050b1fe

SHA512
96707858009a205295cf99668cda834cbb2edbedf354d074ca2ed042d4164f78fdf9cc5826f1bd9078cf7b3f1e1bdc37124e96559301eed1490859731d6fe1ef

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\44054161-406d-4be7-a844-6dc2513913e0

Filesize
1KB

MD5
cca23c7ac59f63a8cb9214d0388eb501

SHA1
c97ebfd3a74a4ca140bd5bcbfd13e49ac73daf0a

SHA256
43c25912a4479d8d524d34099e3228c35c4033c5f74f07e5dbb414bd48db3e01

SHA512
3991e3cf31f838d3c301c8f82fac7839535c5dcd1e429a149a8f5ceda32839e9aac07a4b215cbf54388b70184e98553a1cfa80ec1e967ed7a16779b31446f86b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\5292dad6-5d36-4f7b-8651-d219511af782

Filesize
756B

MD5
8bde8e1457f600f8cc1c16556b436e69

SHA1
4aa772647c522a2d2a7db383038da7dc624febf6

SHA256
72c29207684c042cd49e95694118e21fca19a1cdb984cb918df46def4d94c0d9

SHA512
9f69d8852fcab53dc8b6820a53fc4d0c649541955e25a2a9013df7608c41e02a363586f7faf79f5f4443ee47490cb03fc04602de0c7cb16cdc70c004e6d9cf8b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\datareporting\glean\pending_pings\674afed3-a8f9-4ebc-940d-ed17036046a4

Filesize
27KB

MD5
faa2776317eb2352b3e2cdefe0e9b295

SHA1
11e9b344462b667d9f8789a2f287673634ac929f

SHA256
32f8d7617eaa31c394b6e9602ff3ba5ff6d430d8e997cc598c98c60b0db4a419

SHA512
7c6a84b50a22eae556a690ddd57ece2edf3edfc9b3791fb4eed39efa8f50c366556553de2b02fe098b21905dfd5dd84d6897e724c3abdaabac1433edc4919f96

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\extensions.json

Filesize
37KB

MD5
a0cceb1278397281e8f15dd6684b08ac

SHA1
f995d82f21168176faaa6c8f60d8591ca454d5b9

SHA256
e2dccaf735bd6a08fffebb86d6f2c834d50f3c09cbb7c44aacf46afe17452cc8

SHA512
203c73cdc11e53d7dc23cbbe39e616d5fc4c11e4c79d5c061edef85d840f02797a7d1fb9ca123498e10db467ef344d3e46f158fedabb8572efce85f450a28f01

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\permissions.sqlite

Filesize
96KB

MD5
c7366c6da5e640d7e99b9703ca8fb6f3

SHA1
66eadbe338416d4b4c10029941687654210b55f9

SHA256
bd999e4a85ec563d3ab488a7ec7be838706ad647178afd5276073f96ec44bce7

SHA512
22c821892a07ece12ab5b33a2480042e75bfac5c5dd5badc57ff4152e23e7f55662259faec2d270351c815a9dee7c95eaa603cea28bf9d406460580b7121608a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\places.sqlite

Filesize
5.0MB

MD5
1ff34f1be00d4da30d7df47d9144ed5a

SHA1
841df41a88c4dce017ac99d6a3b173cb29e95d8e

SHA256
c404e629c92d01ce2d456d296a6607a9f65050fb1366da1696fe9f483f423675

SHA512
c6a2193598f62292d98ff6899b6749a383422e8fabe92d3ee8a26c23a3f58dbb71004eb22c6f7996803d384aa27a8581ce5edf313a0e95f395e03df9170043ee

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\places.sqlite

Filesize
5.0MB

MD5
d614e9983544b6bf8bc3e438f54a456f

SHA1
5ccf895a41378e076819e50dbf6662d52f9c687c

SHA256
a44d3bcfb1ac877393b1abf408af2d3ea7037886586013269cce860380315553

SHA512
f8aa15c17fbd8c37b7764a2440ab54539c1ea05db3998e70b1d76df41121b5d9aee9baad4a86958c9a424bff75c205fb016eeb6f10f07772ec83997f5b6c3bde

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs-1.js

Filesize
12KB

MD5
ced3c0d23309e96796172bc639946886

SHA1
1f12ef41fedfacc5e95ecdb4acb4c6e7cf24e8c3

SHA256
57f28f2e44e6a28f31ab60fdfaeb3bd7457d23f7cdb96d57a3cb8ab8017c04a4

SHA512
e705a50737db7efa7a0dbbfc6acc60cbf39a7222cf726a291c35531eb472db22475589d1453f242c41428f516d54f926c9ce97de0b4e7648cc31bc5ce04ba794

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs-1.js

Filesize
11KB

MD5
5b3c5a7dbc4f4d4f97554a67e8d42f77

SHA1
855c3211f05b4ba6d4cfbb0da7d5828742605075

SHA256
d226658978d7990f135e43f886af9225d8276c42acc24350839951c8bea41039

SHA512
4f877f5850c1196b4c907cf8322ff8a010b7dc9bc88f7db7a099077f2db310383c9c42ec7019318107aad81a6b4e3c711e3cd77d6f917da9dccd10eb4e09b986

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs-1.js

Filesize
12KB

MD5
8d116afec6a49a894960bd558e063644

SHA1
a7306135bbeda29137b1bc4088ad8b13c92b8e9d

SHA256
0435f25d8268ecbe643226b914b46bd4125edf84ed45553ec1f649c7ee4a4cb9

SHA512
3d28779fa50278c40523f848e722ef26f063106c223a6fbc9fb349c788b48cb720504746809dbf0597622b9356054d593886f0c42b4a22b1c141cafebe34d35b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs-1.js

Filesize
10KB

MD5
354349d10edcdb64568c30258bad8ced

SHA1
5b32c88c1fb56189b1173275c6539f303bdb7b3d

SHA256
3b6742d4bcbf6ecb617043aebcc02434ceada76b52d84ab1566405edc00e6b3a

SHA512
0b7b018941ed7f2a5bb65ec617ae1fb3ef0337b56818a48822f9440a1489bb57729ee23b5bbf8eca973e6c58cf8454269b11198dfaec7a560e1eb7e805340fb5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs.js

Filesize
10KB

MD5
2053e36db4b6974b875ea51209a27a17

SHA1
fe0bd3c3d39143d1bc2e4542fc2f731b8f55a847

SHA256
571049be4a6e26ebbb04b00df9cf126320560487bfcd8c8063964e979f979c2a

SHA512
282c09f9a350673c30a277ef1f4184d3dc8ed767ba1bf1e59c46169993a1e1d68f80c0c89f04176cfcb2cc58006f12cc443ddc95a8339697510cd79d035f52e6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs.js

Filesize
10KB

MD5
933578efedcc333c4e3e67a84e3766e4

SHA1
48430ebdd268868ef43a18b8d28da9cff79c8bb4

SHA256
7854e70dbeed2345ca72944ec95d072d486dfd8bfd140bf7b3521362a0b26d5a

SHA512
ad57213c4c7dcb9f52cb9f4af324a996a34b51202636627c574a14294875f115add63ff714059799b933626c8c798007a75514534ba1a636b8da49e5b9d4b898

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\prefs.js

Filesize
10KB

MD5
9d066e32a8cb9316bed10b021ff35db7

SHA1
de10f3096c9d41fab3996b42d4f7f21d998be300

SHA256
b356d696c74a246303abf365bf2654d37b0d1d486e59c0c397eb88ed0432e42f

SHA512
33be8926c9c2478fdf16418e4c15565b4c67daf8080e1b1746243282808f02029f13031dfd450106f241a52c10e1aad7d75642ab98e081208bc00036177771a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\protections.sqlite

Filesize
64KB

MD5
76786a4c0dd19d88d6d3ed95a293bf2f

SHA1
b0d6d676127a7694fc6e71ee57fcc2ffaa621ff7

SHA256
1a2564c1ba20b8038d35c2319258d94dc15d97914dcf753b31c48b79940dfd31

SHA512
8cd3298e2ebba763d3c80ac4b17e44af7eb63b46304967d0c6316d314baf8611c05f7b9979c2c5c329ac167aea0246e8c9f057ffbb272481c13fd5e4b4bcb2d0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json

Filesize
288B

MD5
362985746d24dbb2b166089f30cd1bb7

SHA1
6520fc33381879a120165ede6a0f8aadf9013d3b

SHA256
b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e

SHA512
0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json

Filesize
122B

MD5
99601438ae1349b653fcd00278943f90

SHA1
8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9

SHA256
72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a

SHA512
ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json.tmp

Filesize
259B

MD5
c8dc58eff0c029d381a67f5dca34a913

SHA1
3576807e793473bcbd3cf7d664b83948e3ec8f2d

SHA256
4c22e8a42797f14510228f9f4de8eea45c526228a869837bd43c0540092e5f17

SHA512
b8f7c4150326f617b63d6bc72953160804a3749f6dec0492779f6c72b3b09c8d1bd58f47d499205c9a0e716f55fe5f1503d7676a4c85d31d1c1e456898af77b4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json.tmp

Filesize
259B

MD5
e6c20f53d6714067f2b49d0e9ba8030e

SHA1
f516dc1084cdd8302b3e7f7167b905e603b6f04f

SHA256
50a670fb78ff2712aae2c16d9499e01c15fddf24e229330d02a69b0527a38092

SHA512
462415b8295c1cdcac0a7cb16bb8a027ef36ae2ce0b061071074ac3209332a7eae71de843af4b96bbbd6158ca8fd5c18147bf9a79b8a7768a9a35edce8b784bf

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionCheckpoints.json.tmp

Filesize
53B

MD5
ea8b62857dfdbd3d0be7d7e4a954ec9a

SHA1
b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a

SHA256
792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da

SHA512
076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
6KB

MD5
97fd9c2b967a9bb2b61cdb3a93c8fcb0

SHA1
6d430b0a934363eac5c410665f404a2336a13d4a

SHA256
331a582f72f4184ac4c94c32c405d9e1607f449cd4e3174565546b1c39e215ed

SHA512
03041a23da69031a2b143643dd1096a66db138db7d78da25c935a2122b31ae3461b7cda127a987a1880369f7dccddf725351dd0e7ff6c379993c03b0bf0317b2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
1KB

MD5
2e52e2d8388ba83249e6e7621a79eb6d

SHA1
1c0193aff4788613f6c2bfa7e91b8bebd09c4e90

SHA256
278c917baaf8dcbeeb948a47ed9c5c39134e6a7e799ff9c653b099b91286a3ed

SHA512
fd68f607cab398e5736f5d2c23bffb1f59f844181d5577dd407765b29b37353a67319b122a90251075ef428d81df649d0ad9b46c89c03bf4353f647da2e8e107

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
7KB

MD5
38063341233c0bb675766e15d39992d3

SHA1
5755ddad47df180960b1c6dc19e71c51adb6f5fe

SHA256
e106337970342aa61ac43d40cafe1e68f77e3507acf5f91806a23a7b035234a8

SHA512
abc39addb0a9192d09ae37001b11c1ca8a0630a876df30d1323f42a7f1da1e4f04dcc46676c6e54b33c19ce57ef177c4390b0c6e4f51826afb4f2f65834353f4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
8KB

MD5
dd4f1825223f7acdd40aaf0d2720380e

SHA1
963365cf95d0299ee5aaf08684600390da44ae01

SHA256
747aca0d10d01a7dba8bf031fdf6282c2f89be5f95d839c658034e91aa4fbc7a

SHA512
a12771b046ae46fe0d72f47988f3d99aad3dd8c128d2f2d9d5a1fce5df9ecc32ae8a0b8cedb34e76f344dd07d8811ad987ef9b5f189f8694366c1623c43cd3c3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
2KB

MD5
73e09798c60709b794cf0e5ef5e0e663

SHA1
33fb1270023f97d716faae692c304f598f4c8658

SHA256
dd5f162d51159af468c131730879f4cca619d812f47feec82fc483352b4eca55

SHA512
abb32dc3261856f1cefe777926cbb9200c16b873431d9482ca0c9e2a1d6ccf86e4a5d76ba332a122dc5df49c9e3da444e1a2a087c6915c31c675d349ad861006

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
6KB

MD5
ef9302b3dfab395cf2f914b08c8704d7

SHA1
16989c5e313b7567ede22fb215d82d1b24084c36

SHA256
dbd322a754a21b551d973a77edfae820325a609d206c53eec4f7bb4ed30a20e8

SHA512
71ec890293dc3949a7c4fa91de804cf2b1169216504d744d4d4094edef1fdb8015aaaa14581488299bbc3b89513e397be09c344b3ecec3504949e1c448855fab

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
6KB

MD5
0d655c15b4acb0a9100368c93c2f01f5

SHA1
2cecb93ab97cd665ab6202f6f9c8b77ff6273808

SHA256
04956113babbfd206e2e36f0db906a259d91a9466aa71023a910b0089778fe41

SHA512
ce9449a96d3968a0d9088b06baf7917a7a1889c648b6bda6c9a3aa63a879812d9e2aa425d99d3381be8b509f553db3b7aefa116279186b0298ea17fb10cc463d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
8KB

MD5
464aa49e7e98a6a06f168f9eb0fc4350

SHA1
3af18747901126c5eb1a6c390e5fe5421f5f9e62

SHA256
d57dc4f982d629d848d007719fc1ba5ba0648bba94c84cb8258cfc4d63be5834

SHA512
597e196435db31707195eb6a0e5783ca463db14ebb27aad9bcbcb06d888585fc9a342750f1ec44f11013477a52e6f2a24790ac9b469c28397d5742a76311c14c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore-backups\recovery.baklz4

Filesize
10KB

MD5
4ff9de6431d889bffb243ec7be0102dd

SHA1
4beb61c634b7a1fb1f105f49708163313eb87aac

SHA256
c7d2952ba3d262f2a13e36220b5561e61a897137b21d58a715e90261cb9b252a

SHA512
1e70fa6ec56b81d2db8f841adabd1d470ca6c260e68cda7257c781877c97337939f92817daacccac5ae341981c8e91f364160eedc9688c2a0b29b8b32676458d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\sessionstore.jsonlz4

Filesize
1KB

MD5
8e4284c3add33c02b3bdabf1582dd5d5

SHA1
84793761d004eda149fbb01614a0aaf26774c1b1

SHA256
a7f00c35c1ab936ecebedde6d2ba6066732b0fdb44fa84af2b3024c03fd5890f

SHA512
cba39a056e96deeebfea43815cb2652d8b215c604200ad24315b97eeb8a9978c07ef796e0488fe963a3928d08d939199407d69564f84431540ec0e4268e559b7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\storage\default\http+++www.bing.com\ls\usage

Filesize
12B

MD5
dbf56c9baef8cfcf85d0e41d23a77279

SHA1
1860d074cba3b076fc9d03a95f3f967a45938285

SHA256
f250942f2420a35d207813b3486f2efaad9ae27f69e0623ae8ef96c962e5bfdb

SHA512
2074246193e25ecea2f4c9d523637b426c83d7b74177693188cf1dc06cb3d612d1a535ab9bd5d89f62d0c47306aa9f1693c1885194bcae37bc015802085871bb

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

Filesize
48KB

MD5
671d92ebccf5685d15a849c83a572d7c

SHA1
ea6afb76fe74eb43f7ed59ac8ba2929e4ef9f169

SHA256
4e96e791b9542040f924751e298ac192888bfc4123ef3749b5193b783a36a510

SHA512
83a1b8f5d3db50ebe75fde13c250d7f276e65464b49af8619e4594f5b4943c8db141528d26961fdd0a2c1404fb975db7a4f946b53b016761f50f9f9d524f7f54

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
384KB

MD5
99b30d6e20fa286e78c19c8c922c3663

SHA1
a8e091246cf7dc8ae0b09b0fa768e9ef7157c152

SHA256
9f8639a2a7f5fe13e6bf4a55e7931546b8f4bbdc61ad0e081d82a248437b5241

SHA512
c4bf30cda451e51fb2200d48f7a90c289667aae02306edbaf01daee410bbab8526b11f881c199b5ec3ea586b43e9dfca1d04b63b3a1f47c698b9601843a75bdd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\xulstore.json

Filesize
592B

MD5
a4352d1696b455a29e2a6bbe5d58760d

SHA1
d399d5ab6df0beeae2edc226ae7e1f1930a012c7

SHA256
874394d223fd5da134658bc156affea86db71b85f7ac5c7c306eebab6de9a814

SHA512
37886c02f602702d78d1b92e966046ef5d0f185f4c5268db79ff44f73f8fa63e8eb8143790cbaff3034eef529018edd4dacff7ed4a7ebe1a60181bc9200761bf

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7xr8dama.default-release\xulstore.json

Filesize
516B

MD5
af77a78ebd7348ecab3f3dfce3777c0e

SHA1
cf2294abeea4412163862ffa9f39adc6f9a35827

SHA256
b8922eb003d3f98b15681699fa353e97ddc918bd72a14bbb32624488f84f2af8

SHA512
d52aa3ca56112649c49e1bcf977a94a8bb47c0118479be6a0e1228afaa2d321ef29c919825618730b67ceac85907a8f750341c5d88afbe2d5dc1dcd1b2e55611

Download Submit
C:\Users\Admin\AppData\Roaming\Wave\Network\Network Persistent State

Filesize
375B

MD5
cb9d81f0bfb13dd54c71c9d94e5f9eb6

SHA1
50b053bc446dc599f12850f3fd3d89d44af5d646

SHA256
afaba29cb010118b8d9dbbc8d23ba859f0ff0ab8de59bc30302823f0a1cce587

SHA512
7a90bf3b3d68d04f33ac0ee85dbaf9361a7cf2587fd4204fe7a27dd5157ac9682b840dd045a74a90532d54b57a414eeb5ca14b7f9e5385d146bdc822eb16fe5f

Download Submit
C:\Users\Admin\AppData\Roaming\Wave\Network\Network Persistent State~RFe5ba600.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\Wave\Preferences

Filesize
54B

MD5
cd2a33ef74950d0c2e037a136cb4dced

SHA1
26292267c8082ed86dd3dc440701f75d50d509d9

SHA256
aeef9ae170498c52c919f9bf07ab46d45a0fa78a685e345be40207d29adf6ace

SHA512
74eeda213c771928e7e5ea2d9968c275bc6ff1c77b08c0c531f4dfc04dee8d32f7f3ffc0f4dc1a32cc97357c0f54ba077a54b0c03839c4eaea796eee20b45a02

Download Submit
C:\Users\Admin\AppData\Roaming\Wave\Preferences~RFe5aacdb.TMP

Filesize
83B

MD5
ee5315d0568bb498784afc96c212da67

SHA1
b64f01f89b6dbdbd287afb113d6bbc11f6dbb2a8

SHA256
a72150ccc318778081bee9c4d5f2d2b33e32aa1d87b12ef97d850ab5647c4792

SHA512
d411424409fff57aa08990e0b69c36e909004f62999d2a1e49009e7ce361813cf8b88aaa737b9e7fe5dcd3283b4577c15ba26e5ff8e5bcdb66970c5c94503c56

Download Submit
memory/6668-1626-0x00007FFE163F0000-0x00007FFE163F1000-memory.dmp

Filesize
4KB

Download
memory/6668-1625-0x00007FFE152B0000-0x00007FFE152B1000-memory.dmp

Filesize
4KB

Download
memory/6768-3707-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3719-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3708-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3709-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3718-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3717-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3716-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3715-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3714-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download
memory/6768-3713-0x0000025DF8A90000-0x0000025DF8A91000-memory.dmp

Filesize
4KB

Download