ffd75540b52e4e5ad5725d58ce5af9d65e4984789aff76d82ad2fc5715df0357

Analysis

max time kernel
968s
max time network
984s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
09-12-2024 18:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

download.jpg
Size

8KB
MD5

481a86abe01f14ad73d0d93e454ed545
SHA1

065757d42e841d3448ea2ed5faae9ee0bf9aed97
SHA256

ffd75540b52e4e5ad5725d58ce5af9d65e4984789aff76d82ad2fc5715df0357
SHA512

b39935b0a026fe5c500c7e575da1922f22cf8a439b22d74ff1a7187b3786c18a7ae5568f9f34af4279560fba5a741a3760613eb903f836d444b246c5d56ed4d5
SSDEEP

192:eWY1Lq5qF7bH2cGfx/XmqUZWJgrKj14Y25DXiX:eWY1FJrufBXvIKR14T5WX

Score

10^/10

microsoft discovery persistence phishing privilege_escalation product:outlook

Malware Config

Signatures

Detected microsoft outlook phishing page
phishing microsoft product:outlook

Legitimate hosting services abused for malware hosting/C2 1 TTPs 8 IoCs

Web Service

T1102

flow	ioc
88	camo.githubusercontent.com
89	camo.githubusercontent.com
90	camo.githubusercontent.com
91	camo.githubusercontent.com
92	camo.githubusercontent.com
93	camo.githubusercontent.com
94	raw.githubusercontent.com
108	raw.githubusercontent.com

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	colorchar.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	colorbox.exe

Delays execution with timeout.exe 11 IoCs

evasion

pid	Process
1600	timeout.exe
736	timeout.exe
1964	timeout.exe
4936	timeout.exe
3004	timeout.exe
960	timeout.exe
3176	timeout.exe
1056	timeout.exe
1436	timeout.exe
1208	timeout.exe
2552	timeout.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133782427879128896"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000_Classes\Local Settings	OpenWith.exe

NTFS ADS 7 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\wifi-bf-main.zip:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Wifi_Tool.py:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Wifi_Tool (1).py:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Wifi_Tool (2).py:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 122893.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\bruteforce.cmd:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 27 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2180	msedge.exe
2180	msedge.exe
1956	identity_helper.exe
1956	identity_helper.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
3440	msedge.exe
4288	msedge.exe
4288	msedge.exe
4672	msedge.exe
4672	msedge.exe
4476	msedge.exe
4476	msedge.exe
2840	msedge.exe
2840	msedge.exe
800	msedge.exe
800	msedge.exe
2444	msedge.exe
2444	msedge.exe
2868	chrome.exe
2868	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe

Suspicious use of AdjustPrivilegeToken 14 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe
Token: SeShutdownPrivilege	2868	chrome.exe
Token: SeCreatePagefilePrivilege	2868	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2868	chrome.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe
2780	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2100	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2780 wrote to memory of 792	2780	msedge.exe	81
PID 2780 wrote to memory of 792	2780	msedge.exe	81
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 2884	2780	msedge.exe	82
PID 2780 wrote to memory of 4732	2780	msedge.exe	83
PID 2780 wrote to memory of 4732	2780	msedge.exe	83
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84
PID 2780 wrote to memory of 3428	2780	msedge.exe	84

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\download.jpg
1⤵
PID:912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcc0813cb8,0x7ffcc0813cc8,0x7ffcc0813cd8
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1876 /prefetch:2
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1332 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1532 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6916 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6444 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7024 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2364 /prefetch:1
  2⤵
  PID:496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7364 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3008 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3364 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7196 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\bruteforce.cmd" "
  2⤵
  PID:1376
- - C:\Windows\system32\mode.com
    mode con: cols=80 lines=35
    3⤵
    PID:2796
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c netsh wlan show interfaces | findstr /L Name
    3⤵
    PID:2328
  - - C:\Windows\system32\netsh.exe
      netsh wlan show interfaces
      4⤵
      Event Triggered Execution: Netsh Helper DLL
      PID:3440
  - - C:\Windows\system32\findstr.exe
      findstr /L Name
      4⤵
      PID:1596
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:3004
- - C:\Windows\system32\timeout.exe
    timeout /t 2
    3⤵
    - Delays execution with timeout.exe
    PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,9990382952653624178,1169652805095415693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7264 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2444

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3640

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2088

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2100

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\bruteforce.cmd" "
1⤵
PID:3704
- C:\Windows\system32\mode.com
  mode con: cols=80 lines=35
  2⤵
  PID:4352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c netsh wlan show interfaces | findstr /L Name
  2⤵
  PID:2612
- - C:\Windows\system32\netsh.exe
    netsh wlan show interfaces
    3⤵
    - Event Triggered Execution: Netsh Helper DLL
    PID:4908
- - C:\Windows\system32\findstr.exe
    findstr /L Name
    3⤵
    PID:4232
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface Detection"
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2672
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " WARNING"
  2⤵
  PID:3368
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:3176
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:3532
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:2088
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:1692
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:1456
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3308
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:200
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:916
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:3864
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:1892
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " You have to select an interface to perform a scan..."
  2⤵
  PID:5012
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:1600
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:672
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:1924
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:3600
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:2828
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:584
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:4524
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:4256
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:1524
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:4644
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Help Page"
  2⤵
  PID:4852
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:3896
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:3640
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:3536
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:4600
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:1576
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:5072
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:492
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:1768
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:3380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c netsh wlan show interfaces | findstr /L Name
  2⤵
  PID:488
- - C:\Windows\system32\netsh.exe
    netsh wlan show interfaces
    3⤵
    - Event Triggered Execution: Netsh Helper DLL
    PID:4936
- - C:\Windows\system32\findstr.exe
    findstr /L Name
    3⤵
    PID:2352
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface Selection"
  2⤵
  PID:1476
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 " 1 - "
  2⤵
  PID:3492
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /07 "Cancel Selection"
  2⤵
  PID:4036
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " interface"
  2⤵
  PID:3036
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:3108
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "select"
  2⤵
  PID:2024
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:1552
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Invalid input"
  2⤵
  PID:3624
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:1056
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface Selection"
  2⤵
  PID:1500
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 " 1 - "
  2⤵
  PID:3516
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /07 "Cancel Selection"
  2⤵
  PID:2204
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " interface"
  2⤵
  PID:3548
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:3280
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "select"
  2⤵
  PID:4984
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:2192
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Invalid input"
  2⤵
  PID:228
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:736
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface Selection"
  2⤵
  PID:4464
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 " 1 - "
  2⤵
  PID:2872
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /07 "Cancel Selection"
  2⤵
  PID:2864
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " interface"
  2⤵
  PID:3656
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:3508
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "select"
  2⤵
  PID:2120
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:664
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:4576
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:1684
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:768
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:4616
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:2124
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:3452
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:440
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:2188
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:2844
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Please select a WI-FI..."
  2⤵
  PID:1492
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:1436
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:3448
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:1028
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:3480
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:4652
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:1660
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:1372
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:1872
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:988
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:4048
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Invalid input"
  2⤵
  PID:5008
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:1208
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:4004
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:4680
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:1828
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:3096
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:3592
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:4188
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:2528
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:4040
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:4968
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Invalid input"
  2⤵
  PID:3860
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:1964
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:4676
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:2548
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:3420
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:2324
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:3392
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:784
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:4564
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:396
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:5020
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0c " Invalid input"
  2⤵
  PID:1860
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:2552
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:2420
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:8
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:4848
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:3968
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:812
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:1600
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:672
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:1924
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:3600

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffcad7bcc40,0x7ffcad7bcc4c,0x7ffcad7bcc58
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1924,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1816,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2040 /prefetch:3
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2188,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2216 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3088,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4440,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4796,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4620,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4552,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4928,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4412,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5080,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4580,i,4574277242548617966,15769654778430088467,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5344 /prefetch:2
  2⤵
  PID:1660

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:5036

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3480

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:4680

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\bruteforce.cmd" "
1⤵
PID:5108
- C:\Windows\system32\mode.com
  mode con: cols=80 lines=35
  2⤵
  PID:632
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c netsh wlan show interfaces | findstr /L Name
  2⤵
  PID:3036
- - C:\Windows\system32\netsh.exe
    netsh wlan show interfaces
    3⤵
    - Event Triggered Execution: Netsh Helper DLL
    PID:660
- - C:\Windows\system32\findstr.exe
    findstr /L Name
    3⤵
    PID:1392
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface Detection"
  2⤵
  PID:2324
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " WARNING"
  2⤵
  PID:1504
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:4936
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Brute Force Manager Version 1.1.2 "
  2⤵
  PID:4172
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0e " Developed By TUX"
  2⤵
  PID:1092
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Target - "
  2⤵
  PID:4892
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0b " Interface - "
  2⤵
  PID:1984
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorbox.exe
  colorbox.exe /0F 1 19 76 25
  2⤵
  PID:4312
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0a " cmd"
  2⤵
  PID:3452
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "@"
  2⤵
  PID:1376
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /08 "user"
  2⤵
  PID:3396
- C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\colorchar.exe
  colorchar.exe /0f "[]-"
  2⤵
  PID:800

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
94a1b202c60ddb603f9f54b4e1da874b

SHA1
78219923850450a49b34b8be4fe5a831d061be88

SHA256
2813b3bf2bdccd23ecae64cc3074937c4e5d47240ee05e22949618907b7da0a2

SHA512
59c6569e09edf107bb21749f2410ee14ae83407da54f2fa4db57abd1c2128e3d2bfacbe6b3b61711e609a89ca9c3086ede2963c8239e726cb52cf5b51b16169c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.84.1_0\_locales\en_CA\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.84.1_0\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
2c4a20b53fa3c362430743982c15095e

SHA1
66fdd40182a7973f526f24b04bdf385f2005a06b

SHA256
f7ebb4a876f2b3b2403f4735e242db6af3ba0bbbf9ef4192cc2c4cb60f26d57a

SHA512
e72fad045e09cbd67cec5d627f956972358506400e14d883d2c49c40461d27a86a5563a82909e72626932a850dd9eb7969a97139105e9f895b7a7aede50b6cf3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
582ee78fca60119daf2db20aa595018e

SHA1
5bd5c8122254bd7e3feba66879a5f624bb27c1f5

SHA256
dd3d8c6a0bfa40329fd02c5e01c08fed48800b3429dbd09d59b41d91e4d90c3d

SHA512
6c599837e6eae8ea851b7ce92df6602368fd36f3246b0cb18fb7f2a0c4ce59fc5c76e9ada5b79af01a7690431b9169749adcbe1bffb19afa2861ffdc682d77f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5e5a2dae3744ed2c64c75b68084b3e92

SHA1
ee80070f2cb86ada649f43e3e9967b543f24fd5a

SHA256
e9d7d68a5a624ed08bd4b107fd2f2b5f6bdb1738e49cbd11ada926b7366f285c

SHA512
ca880e7c0490517d4e2c77d7f9e040fa68691371ee77d5962dfb7bbd59d51028c9881f7a7542e3a86810ab933ba262708cf9b62b8426eb3f432d54a229ef8834

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
09c1a528c13b38710e72e1d785380b08

SHA1
9dfe8c132f6722d91aaed4669e5e8c2bdf319071

SHA256
656fad848164279490a340dc588e461c6601a949f45c69838c943ba62fa808b6

SHA512
c838cdccb638a8b35fc2a8f05bb901e677fd6c9b474d3df2d193a3db1d0d0c4083d0a577a94a2f7f9600c64caacc6cbb74f9534e42e8e0c7829b5aaff6df8e58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
7d3bd13a0150904985b1d59e6aa30d52

SHA1
2ef4e598861af384c49e2c2ecd74b071c051e322

SHA256
34b6a3948dd3e2f4d2912fb66f0ca53b6a96f9d324f10bf0d10a27622861accd

SHA512
cea45a85cb491c10f3d58f8e871aabb7bbbe6c585773b467f30b3dfbdc00a570984aa176395475731e6884f4db50aec74e9e37214837377d236771a0b259b365

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
230KB

MD5
ca0b7e1b636e64d26fb091c5983e88bd

SHA1
86edbd1a1b8e5f7793d3c1b27b72fe966fb726d2

SHA256
0e82274dcae7e715a0193ca73d619535362b7b295a80220c0bc6843c8c669879

SHA512
7d90a31d90874ca338e713d0af9c2f8db1676f73d15ad1a9ce7941ddc4e638ccebac88e6798f2ffb0abbe1945765f4e8a229257d17afd76dffac1536b5fccda3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
554d6d27186fa7d6762d95dde7a17584

SHA1
93ea7b20b8fae384cf0be0d65e4295097112fdca

SHA256
2fa6145571e1f1ece9850a1ac94661213d3e0d82f1cef7ac1286ff6b2c2017cb

SHA512
57d9008ccabc315bd0e829b19fe91e24bab6ef20bcfab651b937b0f38eec840b58d0aed092a3bbedd2d6a95d5c150372a1e51087572de55672172adc1fc468a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a28bb0d36049e72d00393056dce10a26

SHA1
c753387b64cc15c0efc80084da393acdb4fc01d0

SHA256
684d797e28b7fd86af84bfb217d190e4f5e03d92092d988a6091b2c7bbbd67c1

SHA512
20940fee33aa2194c36a3db92d4fd314ce7eacc2aa745abec62aa031c2a53ba4ff89f2568626e7bd2536090175f8d045c3bb52c5faa5ecc8da8410ab5fc519f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\43ef3a12-6d53-426f-bf30-d3fca0edd3e5.tmp

Filesize
1KB

MD5
73c7f562e47742f1f7ea8edfc5327d4c

SHA1
9d09e9617988f83d347ada6898809e3656f83d51

SHA256
e437a8e17bdd149c183ba1c0812ae5e52e5665db1a084516c7318106ccfcfa95

SHA512
9870b184eeec8be1b6c4fdef44ab24d72c02f32a3eef87ff72e89619524e3260295e6cde3e57d8d9bd5b12a539956fc41fd0c0e0a446a7b29beea29fe867e463

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
68KB

MD5
f26bbba7e176ea7ee28bb8d1bb559e46

SHA1
04efbece4b8f5160b177211e1451a649b844b775

SHA256
e1fd5de2bdb5c05b81918158dd6f841338028f72ceee214de7c67813ed2a8155

SHA512
c23a748d54d6829127e50a912a0af1f8e9e611bb919a972697a0e71ba812843dc51642f4d72dfae6b6cfdbc65503828456a7773338e1fa83a2d88f889741fd45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
70KB

MD5
807dda2eb77b3df60f0d790fb1e4365e

SHA1
e313de651b857963c9ab70154b0074edb0335ef4

SHA256
75677b9722d58a0a288f7931cec8127fd786512bd49bfba9d7dcc0b8ef2780fc

SHA512
36578c5aedf03f9a622f3ff0fdc296aa1c2d3074aaea215749b04129e9193c4c941c8a07e2dbbf2f64314b59babb7e58dfced2286d157f240253641c018b8eda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
63KB

MD5
226541550a51911c375216f718493f65

SHA1
f6e608468401f9384cabdef45ca19e2afacc84bd

SHA256
caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

SHA512
2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af82499b1a63749c_0

Filesize
1KB

MD5
d589b802994cb9a0066377cb2d6e997b

SHA1
dd74cb0c74b2d4e5b159fd7f111024687cc5c267

SHA256
d21f2135a2f5118ae1676d96dd03a198954b60675504f5f38d70a3960e73b50e

SHA512
ac95f5e718761254f69f7d7129364d174b821cd1f3454d973d85feb5ea150a5b68bfadfc494a8583c88d68bfa4f2a23f0fde3e3218c89ac7df419855440f773d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
dad2cd4a6a2991dd5ad3e956a6d31b96

SHA1
269966bc18d9d7caa3035ebb6320149d4ab3c78c

SHA256
94e56189c100cf114b9cea61a386d7c73012436ec50c23597f338b27b52d7a62

SHA512
284e0e55e976d4f1fb2afa0e75e57627dea14392330ffa001378eab9dbf9eb5a9bd56dbae6ab8cbbc8d3139dae2ff8ae37602238590bbcc10b2c2638730f9422

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
0404fdc786c02e6bbbfb8f4a92cbc4a2

SHA1
40ed7a24c5410f54e175261a23b2027fb59e5680

SHA256
b0721dd6664453d2a77e1d80744653449e5c20b306a1b4115fd0cebb698fd930

SHA512
e4da7f3373e1270388d40e96703e3d375ff090cc55b986bc8bfb8aef7f0082f38447ba0606e1793b6af1bf86360b7f98ed707afd94c1184b04de7b1d083da8eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
84dbe881c8220feba279846dc86335e5

SHA1
7aa76394f200d48a252e7547b6f238637c28b195

SHA256
be34d9543487f09594d2a27c7a69fb30a58694955a12232c28feb1d2ace9d9f8

SHA512
6be997c1c2711c040a3a0d5251b92a653d4ced568d9543bb9108e803bda3d4573a618262cf7e2087dc7a93213080d01737c446da48aac8693becbdbc5cfd2b7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
84edc7ea66cb07b9f24f2a729f87975e

SHA1
f4676220a5bb6b314b91e0147716fc532ae39f9b

SHA256
a9fe6aeaa1de6e676b86068327c038b6da0c8bf79f2a115f12063ecc7d606fd1

SHA512
8ed7a65d78088335b7ea57fad072d828022b0b7e1133b7a07607752fb725bc49f5d108001bb0e65aa4bd996f010215930135ba8bf63c99b8a7ee988f109c7ea5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
d838ccaba6115e8003a1a97edcedd967

SHA1
16519ae961c13623dddc67ac374885ec11e21e33

SHA256
ab57f30b173da2a56cdac824eaf8fb7af3978b9c5b948e4042e5d9ac946429d5

SHA512
3aa923fd495a851e72877ff5dd255f2d07e547d25f3cca821eacbd25bca1ba8b25337c8cd9772657b5848a73d800ef393a72801b1eb7333800f152f0a7315c16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
1a10af9c87abdc8ff08d37e6e3355665

SHA1
859ba4bdd9cc1bd35fab3a933b73816188a2ce4d

SHA256
3c4eb084367f1bb1460fc08b5d59b6dffc4438b404fb2e9e41b957c8b8fc1965

SHA512
19fcf9ec38df77fe9d8c2e060e32f400fc4fe30e3fbe3a3f4a64de67c2288146303a87f9c8abbfd285bd355882b2fa0c3a4a22a26dfafe125827edd660b7c1fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
54c3d6ba9d003315cd1518f58ef84ec5

SHA1
40deefb41b704d99fb5cec413584b8b5febf0d22

SHA256
c8b23889a50429d3eb18286dda61daaf63318aa0903acd6524d5c385d6f08ade

SHA512
07bb5f159c9a8aab053df2573983c01abe1c66fc7ee951d8579a74c057aca21ce3f24a3bd83c71cccc167dc1cb0136e9ba4d6c39812dc5ca6c3163cb82563768

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
3af8be34210c59aeddd7def598811ffe

SHA1
b9186da1f80b469a306a98c8918dc55f8b01785e

SHA256
4081b6f0dbdbfa7b8e8543ba804d65cd9e68088f5752045423f9037bd0a89d70

SHA512
d5fbd6145642c52feb412fc3b61b47f0fde4c1586c43d41b91bc3251f61ab3dfcf1e969d40131b41c513225c7c04b26bbeba4435215e9bfb66655da265e3e5c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
87711144a0d389721b7da2d10b5c31c8

SHA1
cd977321608cb48ddaf0e5f3f3721f3b867e4533

SHA256
e52d58dbecdba395877ab38ad7c9da53602ea3b841d2be2e928e21cf03993e87

SHA512
9dff518f50a1e038e4ae9fbbf0ab875381f7e091b0e7dc883083079450886202065390c051fbf091acd78774815dc50671e3fc2f74ca52b16647f0896e788ffc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
925B

MD5
cc8cb6a04981f37e152779d15eb6031d

SHA1
4fb4160d5a6c9cbc295fa67222b3e38588dfb331

SHA256
e8edff9d92de948c9a7bcdd4ad82d80c97d2a8ebaecf19eb2eefef9a3bf6ca58

SHA512
0d0544447cee2c2d47f87a2a2284d9becabacb1fc75f2d746714465de6bfc575110058968866477b9a9f6423321faccdf0b2ea9cd6bb536ed1de38b152dba411

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0b1f3c647ae059e0580510b262cc8e0b

SHA1
f90f6de9fa3e2fbb61bb28d390a4556a11b731cc

SHA256
6ddaff764a264c517a29b349fe305a6a3256c4976d987fb7621a4b90028fbf24

SHA512
058d7849cf76b82dc7d3b54f155a9b7a4c13d130496dfae0c1ccaaaee830826b3362456fbb31871e50badb5e5a998025784f4d06c3f8e328ae696cc0d40c027f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4c6ba4c156f14eaddffc2a1b68b6a8f4

SHA1
1dafc76620d94fb4afc1be4003b39a39df6928bf

SHA256
f9b9d054cc24899b75653bea66bbc1f1812c846d20ae4ba81adde66587a1e547

SHA512
10b47b64df921c5bda569d4ea24c7458966090807b87a7f211ec80482d8bbfe50dd6c0cc1f14e24919c035872b75e982ab5e60281e1e3808dd6eedd7333bb812

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ae57cba7d57089d2abb5064aa9ab0861

SHA1
0919aebb411f070b804fa1516c3148f5db26cb21

SHA256
761ba12005ec48dd23698a16073d50091f67b6ce88e072396ac90a1b2dbb36e2

SHA512
700383580d0ad9d447a3a26a7cdb724af839ed7c2a8cb1b8b60990cf3241cd294e8bf720b96b068522a29ca7dc208d8d44806894b9bfe1ad09f244a23adca7b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
a2fe36a34ca8c56aed8a6f017da5f5e5

SHA1
b26a032a01fa5cc991b98afb1ab6997290874a4b

SHA256
c775037ddbef7759e68b8d863685e06bb706d788df6eef54dd8bac7a2ebd5440

SHA512
e70fe4852b925a81baddfb4149354dfd6b0835a4543c3daca9e5b6153800e9e2c6906b432a62296200083596a18c406bc96fa2c3b201de3c2834c1bce3d0225a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
68afaebbee3a28f5c22986ed690dac97

SHA1
406d5199284dfa68959ce30a915242638e1ef657

SHA256
7fefbb1676790ce64bfc3d8775e95cb08320ef2cba5f519b9bf6adea8014a93c

SHA512
45b7e1265b07bc0fba8ce99709435c535636df92c30ec75b6666e8fcf44edc69b92e86feac65d9766a62992c6aefa74ed46282702a53214dd81cab3edda7dc14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2bb73c439ae00ba278433802d85f5882

SHA1
a778595e72a7e7680fcd8327613c6ca653f7aadf

SHA256
cae1c186f2b635467862fdb4be6e7ddc012d8114774a26ba05c6d452fd93d85e

SHA512
f2e85c9e3087981289808a598d579aef8434b4e141feb39291b36db94f27a81a1f8072a32bd140469b57207cdb49a6e468efa0db8188ed0ce32130a27e408394

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4afe7a5db578b43cbbb2436fa4e9e36d

SHA1
4176330326e26d1b451165cd5b3cc19ae4d40671

SHA256
be29a9c6bd7bfbb30dfb7a101287b3e4467f502cde8f5aad8483cf1d801acd96

SHA512
ca09fb6d0e7d66d13c2ad34be6ff330346ec6c0d6f043cc0f0146ee56ea9cfbd540a5e0657eb76b29b2988fc8c8aa1eba763e8f5604658920e34a6f657c77e7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
231c52d7e081374a7d2e3e62727b0b5f

SHA1
bae2b073bc2a4fa3f3cab5ebb1bc14bb652ea434

SHA256
a3136d9c3168dfec63301f9dfad20b721141f7deab5a7d9f546f043db3f55af8

SHA512
2d157fac245e182d68fdd7a3fdaf59b8cba311b2108257956512707af3ed6861d3a9766b3739bf185550d7aa8d8391e03c51a05e072830ed85829f0c58a662ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f07f3e79918479bcddca37430fe81377

SHA1
2b56f96e54885e4a6dd51599b54921e37515f41b

SHA256
f185c5e6ec7c25644899e8067047214a5687664c58bd8086e86a64bb9ee6a983

SHA512
f1faa52456e566dfc09a150426fd2f7d35f0c1e187a51d7761a6017e39696bab7ca49806bf6d80a9018928b7150caf1fe7c709d74a2288ef4cde54f7a134efdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
37a4da21746c336564d88198768f9333

SHA1
ed300297c3b011fc6a8754a293097fc7ddf81269

SHA256
4e8342cc43afa4b3082e6694ec0a6f73560cc99275cdc62aeca20c8d2f0ff7ed

SHA512
6fbd4585d06173ce05a14f803df0c2963124fe60172657aedc7c9b8df3e8d9b7f80d1d01c74cd16594957200ebcc3a10e1528f5499c2978ccc863035940789d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
254a58feaa1bd829e8c07caa66885ec9

SHA1
8083952878b99ee5a6d71a996c7014d27f16bbe5

SHA256
28d772f7253bfdffab5df3a39a21d5091a6754e594fc9a364f7ae6889ef6ef50

SHA512
183a790f8db61e43b7876e387ca43d45d1bb46b5079c886083a8f1af76c60410b917a93fdd7376db2cc1df60e736af7c9a4d67753052bf29cc056abcd048aab4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9747f202d9b090d56b256e83d8078fdb

SHA1
27338cca4b0e4a0d976e50f976ca44673ac36957

SHA256
0138ae30912199f19c746dfbdf46118cb9e1ba25d57444deedf8f15edbbd9ecd

SHA512
1b701234babebb954ec7cbb2bd6c8bb66949eb86ceda9cade5d77be36ceb40aadf4f7feb16395433d1aa44c9899a5c6569f4056dec52cc33d54b6163c045922a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bfab0c6277c07c01ce17eb1be6ea0a5a

SHA1
5993dd2b65fc7e7676f6e202a551e28d38774a4d

SHA256
f4f2422f9abfaf182d36977c8d288b6e0fbb022cde764c2ebcaa41f260a0ea8d

SHA512
7ede4f2f7bc6c2c8fa285011ce0e976ed758e1d29eb9ffcae3f38987c5fe3deea07c1fc8b983f59984612e330571bbada7be36da1022db26aeaf5b9695855bf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
34647ea7fc1d840c3d36e5b87f1d9729

SHA1
a75fcbd43b46c045254fcd7208db6bf809a370ee

SHA256
025a1f30eadf4670e4645fe597154e5356646d31cec157865208f62a4f43e905

SHA512
85de538c233a676dc5e2359bdd5d3232b7ea57f50885a56a3d7b78086fc20f60ef6d4655e52ce6c0356a875e3521b4872e426a15279a0c530890dd5ccbf2f50c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
9d189d4114b4390564f3cdf201ec7643

SHA1
c626aeba2c3e2fa60e1fc2fb949a0b4044813c9d

SHA256
1233cc9f928b2ab0a7a2ece0f47830d17510f567c16323ea9a46b8d12ffe94c6

SHA512
06c31d9143c0d4b5f7bcacd8653a52a225dbee0e4d0c945905bcd9a8597f8175e8895ff02d5af13de125b211f52a3bdde17efc651bc486b74b3cef57ef358646

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cacefea43797012bb11393eec08441d3

SHA1
b549cd9d1e5b189424324228e0a1fc14e64f5e2f

SHA256
4800e227d371625ead42a4e65aedf8be0c1dea8c7a16ff649a695f97a5effb13

SHA512
770ee73900133a385e2bf2f9ebc0c25b0907d58dd324286554172fca842c497ac33192ae453ef3d07f561f9d92db9a10a0f4280f05304f0e0775e1d845a0b6c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
29328e8e10cf3d53ade5eeb463913a3c

SHA1
546776a95d724b64c56984a7ee38227491babfe5

SHA256
26ed4d1af25929950a29882d5d14c3c36d10046674fc14cf91b0e446a5483472

SHA512
b597886ce0fd9553e65de6ae9211f0340b908283473d294f92e942f8794cba1591c8c51525aa7d2bd4a8f9eecb87e36e84c69c0830927d12e96036c83dabf98e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
8fb398115b0a8f2f2378c85a9a9d0317

SHA1
54eef895deaa6a2b608d95470c48c334b64e8d84

SHA256
6c0ef99271a7355e813052e58b8d90b88bec8ada6ab4168ecdde81d0e078e259

SHA512
9b032a6cbba2a3e3393d3b86ad6edf2bc045aad05fbcfd8b3771da7b1a0dbd7202461c7e22248596677edfaf0f48baba2e2b8b63b2e631ce1e2ca81e49eef6d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c393309201295b8d0b8e0183549aeaaf

SHA1
0ea0774efe75c8877def6763cb00a6ac8a60694a

SHA256
29fe48298bb9553e71f865dd4e81fb727bf7f08c0a937e19abe1d0dcbd6beef1

SHA512
c78ca93123372c95fdb061c8d8beb01217210a140f656ecce5a9c4e5db45108189ff3089b6f8ccd9194a56652b50b9e22e7dba3a42f198d761073b920fcde440

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
35724f10ba3b494e7a15dcbdc95593ba

SHA1
461e943beb10048f4250ecf91f5577b35d12c93c

SHA256
70c859cc7f678423c7335fcb348941e15b577fe61820024447026d04a6fcd0f9

SHA512
0dbbe28473054d6c74f66c183a88b744e202b7d681cb5d70a69544df2eb8b2a5c5e56972820c50a4fcbb64765e68cc1e4e88c3e0a2f48d6991cf1695fefcf61d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
fd83aa66f0eac7e78275c5f7cd44f5e7

SHA1
0cfb221d70d9bb6276088901623b3933b4ad3167

SHA256
935bbf5ada8886155f996fe86816a5608ed793b0c3061d7288e6e57f757f0037

SHA512
cb806a695c7f70c308bf8b906d4a277b8b311b4d8bbd78a294581d4b92969de31fe406ffd349706a43f7d55ccb88e4eebd58cb4bf16d2a389d854ec5280ff7fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1882be2345d942cd83cd4c9167e3c26b

SHA1
aed7ddde50d65f2fb3e83674efa276a40fd3a04d

SHA256
4fccce019059e07463eda1a74ca552e4e8a8d25379f172d9a7a746a41215e61f

SHA512
d43ead309ba8745f45b3c0aa264eed260af245632dc8928f5483edcd7e9e313a4811ea8c587e36726468b84a0f2ef790b4964cb57a90eeba7a6dde75b46b8bbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c4616318cb34623cbf4907d5392d0712

SHA1
a1ef22563d6cff047827fbe5524bbe9c13c17db8

SHA256
6d48f6bc63b486a17c1397fa03bb8492f29e32bcdc822b376eed1abe01c0c6dc

SHA512
37066411577fc2d0f2737f1b4b95a3847d28ba618309a54167666465de44a11952c6a8a6db77a8280b8973b1917bc47a24b48734d4d38dff1765cf269c5732ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b0f5b702eca28da95580845ed70d398f

SHA1
f4c4436e7a65358fdfb129edc49b2f7e01601bf9

SHA256
acdb2c37e12cd068e065905cd2bc82eb4bbe4575b5e9be81f06b0c5aaf6e48cc

SHA512
b4b434b98f4e3ced9ba28e0c164cdd0b633934331b6efe9d9194f641d2f8b71f617d6f96e2bd557e1d2ed1c85fba65bae91ccc239fa7d847751a77aa13b8277d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b2dba1c945ae9ad2290a7d68a9104193

SHA1
bb61ffdd1c063276b34936d16af8f35b3b7cae2d

SHA256
1d85a0efc703e6f5d8aeeab9bbc49a473742ccdca1ba9b9b937ac01608a8294f

SHA512
eac2858501b8773e56ce3d4776e998b0e0d1da13873b693acd4d58b178f05ab53361ed2bba745bdab0171db9be0c7c029679d2d797d39f6377b05dcf1d0ce595

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
0ff29edbdb0bcbb61184d41c9144e011

SHA1
d4be20dbfa4a6502c1ab921d353cd66b6a1762bf

SHA256
7778c7deaa05ea3a992c48c1bace686a11b21c71ec9cc3c30837531d7115b301

SHA512
9583bf1e210d3ca9a23bc8c771cc2c1726d49ad74eeed6c7ef3c9cbd9b20e47561cf10e27c67ffb5a4438e48cb4f10253153482c536a23c61354636807e09612

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6a7bc45ed9e2cd2147813fc8255bb808

SHA1
e8215437ded3620a0fffb0664fd37ba719c3dab8

SHA256
702a5b00c8003a79d53813cc1a68183f8adf838f18d5bb88e96dff291639f858

SHA512
a8945525f93583fef56f36473971b43af9e31f5a873fdc9be7251f671fef4e9c1cfa7af1c4ca38b6f217f04ed2d04a377e649f75f52920e1e8dc544f55164e60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
23df64169f4c499de23aace5145b4642

SHA1
c2eb469e673b0cf8b76e0bedf61a4ff37cc07e26

SHA256
e2560f752cb4e7d95c67484c61f43bbfe16dc7ef8b1f973c022af0ebed6fad1c

SHA512
2cc412f8ae35dbe4e0b5d4d4d0b4cd1d057733f7f350b4e4468414ca9e80f1f0327ca78647f8a04018804dcb974153f64389cdaf9c270c8e2f0bd0d6aab4c81e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a2096d1b1ceb3a84b6bb3945516e1785

SHA1
dbd01e812979bf3934e93d3dc558647b779aa9b6

SHA256
86c49651da3744a10419f3ae907f2c8126f3a9e81394b087865191d5f6a9c7d0

SHA512
55cc43afa491a0ce2b18a452fc67845849cccd1b86f10d9ed8e9a93e9aa02ebac99fe5955435e6ccf509057aa53a9cf12f7781c508f0140d1e5ac90158a6c1f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c57430ab02967c3eb4924e2c04168584

SHA1
3f0fb6f70f72ff34a439c7131e5e6901933ebcac

SHA256
5cd37f5a6e7874ade589715c6d5d97f6568dd564f9b2366d077ef8d38fa0f405

SHA512
977eb4c55d65a652b3c69cb5dab584212f6bb8a57904fa1b344f187ba2b987d81196a2e0006fd33b613ee834446a9326a3c9c44f4ea44122eb16f038ad248c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
04c2e06df99666b8d067eca3f6436263

SHA1
0cc2e9dec94ded2c7d3afea90d85b211851e722f

SHA256
74ee9aebe9b6f489b801983427b1ba876826a9ae1f4db8a1b9c970d15f0c6c1a

SHA512
407652dad2f124d05c98e17faf4c25ae6c53b123bf0d8ac2ce072be6424ad1ee11c907d3ad5a688f15098c9e43916fc580461e5afae64ff2f85ce8bf3ca13aa5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
28a1acb3dbc23f960722f6980c81ab12

SHA1
0f326eef4f39ddfd526316f8951a27889b1081d8

SHA256
54ec7b6c8a6c3470761651791721dec4f7000410e030ceeef3d7fe39592400cb

SHA512
baa7cdb2ce538a5e7ce1924540e836a355a226e4f66a36f11a44f0677dfb69357b8040712851e21c9097781a47c3f21b519e1a28ac41f97a718796eeb039bffc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5c85f3286037ac750b78d5d568d081d3

SHA1
4dd9406443e3b3de79c0d34a4f316177f9ca2d87

SHA256
1aede4eabdc38cdccf036cce803af95c3331ee44e64eb7742a293c4e36a746cf

SHA512
b3401ffcae33aaf5e6a2567318284ccc00bb767326aa82d69c34ba6b892d9ad7384cc873bcaf22bc8f143204b3c06229c70e38a7dbc6a994aa1611b7aae10aeb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e76c5ca81d1c1a3644b25647a5352a8c

SHA1
03498e6b07c6ea0b8d6da04cb0ad3a1b57c0761d

SHA256
e5c832517eb661cd362f0baa9b508223855f813600f27aee7aab21e2d3e34614

SHA512
d215fc9335f681a90b1fadd26699d5652bede366b552ff1418ef15972cc7cec8a01559709bb2cf5154674572ebcc83ef3760b15afb841c982812397a4ec30420

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b27afb0cacf2dedc5f1e5033414f95da

SHA1
8266cbba2bd58ff9a9cbc637da773cbe416dcfef

SHA256
9ea34f343e19f28f38d45dd7a86393993a86969db59cafeb2728049eab2b232d

SHA512
7280005bd0d46cc4b7ec707778f04cc9ea5ae8ea959e9c7585e9cba0f36511c8cbcd9c9e018cd96ebf575247dd00333fabaab1efba78daac148a2a6ccdda835f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c4d447cb76ec326f75abb0f6114dfdd1

SHA1
40a8d9ed043d1a1c974b7a6095b536015ddfeee0

SHA256
a9e5a6c302fbd1f27f05734da57e43658f560d1c84cdde7025297cdc25bc7934

SHA512
b64bccc7a94b267825a57b72db91f9e3d54d6baeff12aba1b8754ca51a9831bf7932b2c4db04f8513f3e6d517444339237effb229541de17fca7a6df4a381123

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5ec5024f842c5b857bf033390e8a97e9

SHA1
375ae74a2eecf9f0403cd349bbc2ffd26128f88d

SHA256
8602eb494fc77e6bc3ee4ccc15e2c6a7c512c0d6ad2df4b38641f99507da274d

SHA512
b1197c089e9582a274295a56819ca04ddf6581c9256882ef5d7afaeaaa2d6efa0cdba96f15c64979c57520ba0b9e10f2aa8b4d9b008ca0584415282e10b0622f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3a3562ea600d6cc1def9888ff5b56c64

SHA1
e658839b3167da8e859b084022c6b17582a0a88d

SHA256
6f792625f6246067fef5900c28df606878dbfe2ea9ef0ef995324928f0310e76

SHA512
403e464a8f2f73af8c18f484678b6df58020093d0734276559c320927c1478f3254cc8cac5eaa04f56a9c2684088f8d0f4754104562fdcaef28f0bf51b1d397e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
123b14eed13210b87e14f0e524869c04

SHA1
c628d4661495b5b2f69493f4981eba3430c659d1

SHA256
2c783daebe6b78c0585d00a552f150a58c1c776d331399ef348f0b1715fc46a5

SHA512
e548122374c9337bd3414b53c2bd79e8c68205451c52a7be7e1e9f8934852f0453a84e767b28074822e2c2b874190642894ca195c995085b2ec7856151a3bedc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4685d176328b4f4b2d3f3b4eb461797a

SHA1
6dc7c03f946bb7c512979c86df63980cae2c5cb6

SHA256
6e01d323116cb12c8d2723dc9b2f4d18eefdcab41b0538451cdfe3406577e595

SHA512
fe8d18fa6625656a4339ae00bbbb44bb5702bf028a4e9bcdde7df38cba3b9e88f96e3ad9749cde1f9bc9cdb33306be175c88a7ef2395c9333bed071491046e91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7daa61a72b35be9aff35c3de31d31a89

SHA1
837e501c4d63eaf915d4ab4449f2eae21aa1e4a7

SHA256
a294fc535df3b4782a4dfff6811e214cf5e53b1785e651031b41f79d9b4d771d

SHA512
b92b62988766aa10e55950f29ec68f8019e95b1eb8bf38fcbd77063fa8d2d37d01261ec3200c48c12373792a39aaf5279e0def40b6e4394cb6deeb4be2bf016e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bf7c0b101582f2d2fc10d1dd3403899c

SHA1
e373cadbab52ed504b3b84361735fac7658454f6

SHA256
000eec2cca1c71a8753d4c7ef94aea611c75e9298106df16055bceebb9a14481

SHA512
ef35ad5970d761765808f13b514f25893535bab6f4603c2e0817506c544971656f770645aaffc7d75f0936a50eb6501a713cf0007cdd2909f5d7066ca1a8b312

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
30c61beba03df1c438fa96cf6bdc45a4

SHA1
fb46aba88775dfceb182249c85f300aa4fee75c0

SHA256
934f36b947928785801266cf0f09df3525c4b75fdac03c94347e4ef691e4ad04

SHA512
e2184d54f1c2d5286c53a32834ee98d4b8cf39129e24e1299d653c5a12230793e32c2fbef649409bb34cd6d10eb5565f3980c65dd5e4ac3c703398d05034f9c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
baf1cd0b1b2c2f48ceca1435a8cab832

SHA1
1fd29e690a0329c04a01561588ca8fd5226995ce

SHA256
b9f5aef99b70305fb0bce633f9cda36ccece4ef86ef217bcd352cd4a3585b01b

SHA512
6bdc270529f2468414d7dc6f456b805aaf315f095ff34d0a679d14a87eaab6584655514e8ac7509b46fde287c52481583c67cac0a5c6a4db0a9cba14a97a9d38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3aefa958e828e058587b89a3d99ac6dc

SHA1
ca241dc51673c0a8cc876ca1a6ddd3dd44af68e1

SHA256
1d2145ba94dbf9cca1135604c46e481c581936b39e2d83d658a6f11da44ae002

SHA512
a988c7483e2ba761be395e42301557c5829e21004c39313c8a5b14aea35530c388fc7eaa2c5f739211443ea7e957fa1eef71bfb96e267be5f4d81d4788fd582e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
42c22a7f6ab87be14bf278940b7dc93b

SHA1
48012809ffecf6b681e3bbe5690f3b391122a630

SHA256
567ddcad7e3f291dccac83e6d44656e90c34aeaa8987da3596fcd4f94ade5148

SHA512
7dc10eab3149189d59afac428e4ebde09432fe75cb5ebe0dd86b1a3cfed72a0bf0dfde9a7334ffb9c42433a7933089a9dad26e07687d72bdd5c35bae4b462c24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
21c2d5856f3089042c3a79de032e5ca0

SHA1
7b5d777d220d9775a7fa6d7e352b75f13956c70e

SHA256
42ecffbc272bf2a946e40f6a3cdd9bc987aeadafd3acbbff57ed44c146b5ca73

SHA512
45e010dbc72918c3a21cc888dfc5aa2cafb234605553384dc43bec1058c3c09664b7f656826e946c8d14fe13c9b41d568f4d9ff09da712f445e107b5b1522bba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
537b21f097cdda5970e271d224228160

SHA1
92502117db36032febb7022f658aa52dfe4f8a27

SHA256
b82948e0dac0203899add17203facfcc896db87f8dc7be9077ca9137f064c534

SHA512
66e5c4ca8029154a247cff5950bb511ceeb4b1c4fedb47e84f5f441be9b5bfc08d803c8220f47706e31dac80476a55f4ab95b9bfdfe1ee54545fc19761b4768c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ac2544f63b588f1106007d64821e68c5

SHA1
4b4cbd8208668970259ed7e92be6297388e45af1

SHA256
1c1157820043ffec3077ed8ff93ecb2ff6d85ea3e3065d5cf2e3b1c93c78ef8e

SHA512
944db1765beb7f1fbcd9b110ed18aa43341e2773e109ce5cef66da3ec6928026058bbadd1571f3f70acb78ba2a7c34f399f631b3e459ac4db7819c2239396ac8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5845ed.TMP

Filesize
538B

MD5
f817d3a9654cc6a926dbd5d9b931522b

SHA1
b9c6c58600874db583079cdf03526625c6e9534f

SHA256
99f15bb3c04089b5e550a00add986f633ee9f8b5d8cebb85c0fc171bc590b33b

SHA512
c0d3bb4982640f7a952c1e4533a16553a7c50dd578d925b4290faae403ab6e14dfb8d7594fa3f58022eff14a79891080959149a058b65d8158405b957cbabd05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
199b48c68951c4f459d76807fa763d8e

SHA1
223ecc211eb48f226d7a78c777828f854e496d76

SHA256
35f6c6fa5e496d87c3062160757b819636e37349560394131e19d25dd2b2518f

SHA512
d588218c4df86ecff97ec6543060a1cf984f820765d4b909cf4b52f669c7cf4b3a5435cdf48865b1d212c9610a13450277f69b79a0427f608460c98417bb2217

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
41774e69d6aa8b1c67fe45b2a453b45d

SHA1
516dd277bdb74af58204f67faa24375fb9f912a1

SHA256
5174fd03572e4c678308555abd88334b75bf21dd9fed80eee0b87b0638989da3

SHA512
bd616f121e02d8921c546cfb98b2668d94a034f28f7d3968a19607345debf8a1f6b17db4193b3562837b3349c24d71c3d78fba175be3d5da40d320ae338cfe19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
01eb0476559eb5f1f5d12e73954b4230

SHA1
2beeec435dc252c69aa32bc441e0a2f56dac75b0

SHA256
d50d6d7020bc1e50d0f94c59b7662f861452359c5a8d44a1ac3e95086b0b6be4

SHA512
95a64d8701e010a868cc08afc1e0b134ef8206aed523dd3d5a76bcd78a5aa5545e2a7d25b94e1756948b0c50b0035ff35fcf372b522b6c5775e439c2f97ec7b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6f6db1febfba77b31cbe4d970ef7fbea

SHA1
cd788c2ff5aa01f9ce38a0c803bd1878b1392921

SHA256
c0549f6ca91482e47ae42709472dbd8d3d289ecc344e4207538c9e80e9741f6a

SHA512
5924ee527b33e902d2aafeeb567f57c714be26b317abd49267868812fcb626efdfd8aad1d6cb4dd2b775b0d481f760c102a27e6887f482f26e04794c63dfb311

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
689515328ed7afc7253c634e2ee14261

SHA1
42241720f12241890b5867212dfcf3f75a06b0ba

SHA256
b26636d828046db6c5ebb4db734d1f27f866c972a7b4914c7f465f2e277ca04c

SHA512
3efa800b646c497c4f18974f10ab2ebd21a745e0bf1777d545cc76114de8bedb10c4e6360a58f6adce27cbb0693289cd56aec4759efbc6deed3158455e438556

Download Submit
C:\Users\Admin\AppData\Local\Temp\fbd05408-ed77-4dbb-8c05-8ba9d8332e52.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2868_378531021\2ef925ed-737f-4ddb-bff7-74376e58140c.tmp

Filesize
135KB

MD5
3f6f93c3dccd4a91c4eb25c7f6feb1c1

SHA1
9b73f46adfa1f4464929b408407e73d4535c6827

SHA256
19f05352cb4c6e231c1c000b6c8b7e9edcc1e8082caf46fff16b239d32aa7c9e

SHA512
d488fa67e3a29d0147e9eaf2eabc74d9a255f8470cf79a4aea60e3b3b5e48a3fcbc4fc3e9ce58dff8d7d0caa8ae749295f221e1fe1ba5d20deb2d97544a12ba4

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2868_378531021\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master.zip

Filesize
652KB

MD5
e9c2d7ef70542d7bd398890a6419a9cd

SHA1
ec0c0602dd330edeb8bbc09784910d01754232a8

SHA256
27eeec6d07885f19d5a672b5514bce23ccee857c4dcd84b140b38914850b1c0c

SHA512
ff03066a46f58ea65331efca1809958f94f50e5442cdcade702b01ea5bb263b70000dcce663d47edb583cb0ea68369fda779e51c5ee21b802be756d317717e06

Download Submit
C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Users\Admin\Downloads\Batch-WI-FI-Brute-Forcer-master\Batch-WI-FI-Brute-Forcer-master\Source Code\BF_Files\interfacelist.txt

Filesize
22B

MD5
9fc92874f4115d075e5813f1467720fc

SHA1
797d869b3bbe45ecea75a9df76c684118aa4b86d

SHA256
96f62abc885c2c766fd239a5a9a8dd9292cfe25e1a2299f2c80f126e7ea1d55e

SHA512
3de49118ad9e6c062fbefaee466f1662d0aad8df3eb6a1de3049d64b8c18d529f5dd872d18aeb8bd29c9b86853a5504b33eb4b68f6c49cf385238e9f6c5dc3d1

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 122893.crdownload

Filesize
18KB

MD5
ec6ba97f87f3b26c6007aafdd6a14be8

SHA1
fabd70cf56f69ed56a39fed62b87f64393d5f36a

SHA256
f51af049dd4dc61ef9f92b6ed97c6383b99f33272e5bd82a2c256f1c2023fa66

SHA512
dd585fe0a7da600a312599013ad154e3f32679dd3d8c7f8cb3f179b0e4d00562fd4c84f2f4c1babe26b53641c805953f9a5367fc91a97ec87bc7c8918238a2e8

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 792645.crdownload

Filesize
4KB

MD5
82e4978b7c4efa013cbd3601bc244da5

SHA1
757bcaea963f5d6702a24e40517603b65b800c85

SHA256
f6fdf9f1ffd00be9c1c91eb023d1305b98d5ccae81cc897e29a10d6c7f35ab7c

SHA512
5ce2c6f3af569030424e9561c50a201bce6f4c6304614e02ef202ad4ead99e943183cd7e6dc4464d15d84a8399b6b02ad82d656a83c6017fc5bc5239d662b93e

Download Submit
C:\Users\Admin\Downloads\Wifi_Tool.py:Zone.Identifier

Filesize
55B

MD5
0f98a5550abe0fb880568b1480c96a1c

SHA1
d2ce9f7057b201d31f79f3aee2225d89f36be07d

SHA256
2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1

SHA512
dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

Download Submit
C:\Users\Admin\Downloads\wifi-bf-main.zip

Filesize
7KB

MD5
902b6c64bed0e4b022d16197dc87cd36

SHA1
a8fb6fd2d70ebd0d8efc3ad256c94cb1b46282f0

SHA256
b7d891fd15794271e09d8eccc9ca2feafa81709c27bc8508f909d0653f773da9

SHA512
3efeab566fc96e1eaac20089b66879fe3f87d8fad93549a20b50562ea89c3d6064242ca3d7a070944dddc0fa21fcabe43fc1d81d371486480c8b2ec01b73afb9

Download Submit
C:\Users\Admin\Downloads\wifi-bf-main.zip:Zone.Identifier

Filesize
163B

MD5
3b35a772ed52c00e40bfba07fa986b5f

SHA1
36ed725e460d891925be7ed81047b73ab5f920cc

SHA256
859ab81de889f148f46edb6656cafe21728e21d5b79afa719978694a49b930b9

SHA512
a6a0e044c3ccab908a84af90b4f0eb7d7eb2a74936f5d7073261b8e0a40337e4e1555d12b6cd2b1cfe44c265eb9b60408b70d027a601f43cc3c74e3fcdabc170

Download Submit