quasar | hxxps://github[.]com/quasar/Quasar

Analysis

max time kernel
91s
max time network
376s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
11-12-2024 04:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/quasar/Quasar

Score

10^/10

quasar office04 discovery spyware trojan

Malware Config

Extracted

Family

quasar

Attributes

reconnect_delay
5000

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Office04

127.0.0.1:4782

Mutex

QSR_MUTEX_3JitU1pPzUbhO1lcjz

Attributes

encryption_key
C724APZd62HOdZ1kii5S
install_name
Client.exe
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Signatures

Quasar RAT
Quasar is an open source Remote Access Tool.
trojan spyware quasar
Quasar family
quasar

Quasar payload 3 IoCs

resource	yara_rule
behavioral1/files/0x00040000000120f0-9053.dat	family_quasar
behavioral1/files/0x000600000001cd96-9142.dat	family_quasar
behavioral1/memory/856-9144-0x0000000001310000-0x000000000136E000-memory.dmp	family_quasar

Legitimate hosting services abused for malware hosting/C2 1 TTPs 55 IoCs

Web Service

T1102

flow	ioc
237	camo.githubusercontent.com
270	raw.githubusercontent.com
196	camo.githubusercontent.com
131	camo.githubusercontent.com
198	camo.githubusercontent.com
178	raw.githubusercontent.com
220	camo.githubusercontent.com
236	camo.githubusercontent.com
137	raw.githubusercontent.com
84	raw.githubusercontent.com
227	camo.githubusercontent.com
235	camo.githubusercontent.com
46	raw.githubusercontent.com
77	camo.githubusercontent.com
78	raw.githubusercontent.com
123	camo.githubusercontent.com
129	camo.githubusercontent.com
177	raw.githubusercontent.com
252	camo.githubusercontent.com
51	raw.githubusercontent.com
230	raw.githubusercontent.com
231	raw.githubusercontent.com
245	raw.githubusercontent.com
138	raw.githubusercontent.com
210	raw.githubusercontent.com
268	raw.githubusercontent.com
136	raw.githubusercontent.com
211	raw.githubusercontent.com
212	raw.githubusercontent.com
179	raw.githubusercontent.com
133	raw.githubusercontent.com
219	camo.githubusercontent.com
261	camo.githubusercontent.com
59	raw.githubusercontent.com
43	camo.githubusercontent.com
130	camo.githubusercontent.com
197	camo.githubusercontent.com
244	raw.githubusercontent.com
35	camo.githubusercontent.com
52	raw.githubusercontent.com
222	camo.githubusercontent.com
45	camo.githubusercontent.com
79	camo.githubusercontent.com
262	camo.githubusercontent.com
269	raw.githubusercontent.com
76	raw.githubusercontent.com
228	camo.githubusercontent.com
174	camo.githubusercontent.com
173	camo.githubusercontent.com
175	camo.githubusercontent.com
229	camo.githubusercontent.com
232	raw.githubusercontent.com
44	camo.githubusercontent.com
243	raw.githubusercontent.com
80	camo.githubusercontent.com

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
341	ip-api.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies Internet Explorer settings 1 TTPs 42 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "440054171"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{AC1D4821-B77A-11EF-95F7-72BC2935A1B8} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e78a69453f00554b9c7935775bae7b9600000000020000000000106600000001000020000000d3c27a82b0ab12be7338b8791c3ee68ada0f2a3b3dd373c0d646cfeca09603e0000000000e80000000020000200000007352bc29717ab83809b1327403f0e09dc5313f4c8e767d0cebe31d4890c1dd27200000000c9fc404fde5d2666bd4a54a0a24484dfab88421df72920f08a3f2667c5d8ba4400000008345f789a3656612aad3883849c37bc4191115712bee6563fab6adc48574649e4da3b1934d4569fd14983355e891ab268db03e28feb83eb2c31e5a32dc34c0c9	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 407d3288874bdb01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Height = "21"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\MINIE	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Opens file in notepad (likely ransom note) 3 IoCs

ransomware

pid	Process
2144	NOTEPAD.EXE
2356	NOTEPAD.EXE
2940	notepad.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe
Token: SeShutdownPrivilege	1920	chrome.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
1712	iexplore.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe
1920	chrome.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1712	iexplore.exe
1712	iexplore.exe
1748	IEXPLORE.EXE
1748	IEXPLORE.EXE
1748	IEXPLORE.EXE
1748	IEXPLORE.EXE
1748	IEXPLORE.EXE
1748	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 1748	1712	iexplore.exe	30
PID 1712 wrote to memory of 1748	1712	iexplore.exe	30
PID 1712 wrote to memory of 1748	1712	iexplore.exe	30
PID 1712 wrote to memory of 1748	1712	iexplore.exe	30
PID 1920 wrote to memory of 1924	1920	chrome.exe	34
PID 1920 wrote to memory of 1924	1920	chrome.exe	34
PID 1920 wrote to memory of 1924	1920	chrome.exe	34
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 2156	1920	chrome.exe	36
PID 1920 wrote to memory of 696	1920	chrome.exe	37
PID 1920 wrote to memory of 696	1920	chrome.exe	37
PID 1920 wrote to memory of 696	1920	chrome.exe	37
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38
PID 1920 wrote to memory of 2708	1920	chrome.exe	38

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" https://github.com/quasar/Quasar
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1712
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1748

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6e89758,0x7fef6e89768,0x7fef6e89778
  2⤵
  PID:1924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1180 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:2
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1504 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1604 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2264 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2272 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1308 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:2
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3212 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3472 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3912 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3792 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3860 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=1296,i,12961970828309063617,7454576234244894094,131072 /prefetch:8
  2⤵
  PID:1900

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2904

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
1⤵
PID:2804
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
  2⤵
  PID:2696

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap6848:88:7zEvent17579
1⤵
PID:1408

C:\Users\Admin\Desktop\Quasar v1.3.0.0\Quasar.exe
"C:\Users\Admin\Desktop\Quasar v1.3.0.0\Quasar.exe"
1⤵
PID:1420

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:2724

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x5a0
1⤵
PID:2768

C:\Users\Admin\Desktop\Client-built.exe
"C:\Users\Admin\Desktop\Client-built.exe"
1⤵
PID:856
- C:\Windows\SysWOW64\cmd.exe
  "cmd" /K
  2⤵
  PID:3048
- - C:\Windows\SysWOW64\chcp.com
    chcp 437
    3⤵
    PID:2724
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ExportOut.m4v"
  2⤵
  PID:1572
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ApproveSearch.ADT"
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
  "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde
  2⤵
  PID:2304
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\BlockConnect.i64
  2⤵
  PID:948
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\BlockUnlock.sql
  2⤵
  PID:2828
- C:\Program Files (x86)\Internet Explorer\iexplore.exe
  "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
  2⤵
  PID:3012
- - C:\Program Files\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
    3⤵
    PID:2864
  - - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
      4⤵
      PID:2004
  - - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:603141 /prefetch:2
      4⤵
      PID:1572
  - - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:406540 /prefetch:2
      4⤵
      PID:1760
  - - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:930825 /prefetch:2
      4⤵
      PID:3012
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\CompressConvertTo.MTS"
  2⤵
  PID:1684
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\ConfirmSuspend.i64
  2⤵
  PID:1488
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ConvertDismount.mpg"
  2⤵
  PID:1616
- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
  "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\Downloads\ConvertFromUnregister.xml"
  2⤵
  PID:3056
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ConvertToRepair.TTS"
  2⤵
  PID:1928
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ConvertToWrite.wpl"
  2⤵
  PID:928
- C:\Windows\SysWOW64\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\desktop.ini
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:2144
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\EnableSet.m1v"
  2⤵
  PID:1156
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ExportOut.m4v"
  2⤵
  PID:2484
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ImportRevoke.mp3"
  2⤵
  PID:1556
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ImportUnregister.au"
  2⤵
  PID:2272
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\InitializeExport.cr2
  2⤵
  PID:3000
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\InitializeRestart.emz
  2⤵
  PID:2816
- C:\Windows\SysWOW64\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\JoinUnlock.inf
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:2356
- C:\Windows\SysWOW64\notepad.exe
  "C:\Windows\System32\notepad.exe" "C:\Users\Admin\Downloads\MountDismount.ps1"
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:2940
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\NewGrant.vstx
  2⤵
  PID:3044
- C:\Windows\SysWOW64\mspaint.exe
  "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\RedoCopy.emf"
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
  "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n /f "C:\Users\Admin\Downloads\RequestDebug.dot"
  2⤵
  PID:2796
- C:\Windows\SysWOW64\mspaint.exe
  "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Downloads\ResumeUnblock.rle"
  2⤵
  PID:2024
- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
  "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\Downloads\SendSave.xml"
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
  "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\Downloads\SplitConvert.doc"
  2⤵
  PID:656
- C:\Windows\SysWOW64\rundll32.exe
  "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\SplitRegister.eps
  2⤵
  PID:1892
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\TraceInitialize.m4a"
  2⤵
  PID:2932

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6e89758,0x7fef6e89768,0x7fef6e89778
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1092 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:2
  2⤵
  PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1500 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1600 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2120 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2128 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1292 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=284 --field-trial-handle=1252,i,17194034997630982539,1647045465243701761,131072 /prefetch:1
  2⤵
  PID:1728

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1936

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\Quasar v1.3.0.0\Clients\Admin@PIDEURYY_7C9D391\ntuser.ini
1⤵
PID:924

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}
1⤵
PID:2924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

Filesize
2KB

MD5
3abff11d79846fb6d9e6a3df99b730c5

SHA1
ed488805b19c03755156f3b4a50d050b851edccc

SHA256
aab9feb711da96b634138345c11ea9323039df4193f87624bf9a4202d07e0c02

SHA512
7590186f7184126804537481d25c8af82f5c1c7bdac5621f57ad11957e2bf093c8e95abd9e82caeeab94d5261b1aa9e79799a1bd907a5aa3685aa76b74fd394f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C

Filesize
281B

MD5
18d35a04edc5f7f76e4110a634d8899f

SHA1
14e201aff42b270ecf063f9fd4ef600bdd6eeaa9

SHA256
05ad57c65eac362f2793b39c9a3ba6fd8b3ea72670e545d46c804b7103f0f5df

SHA512
020e8f7132b2cdd3184ef03a20f8253772f5b2b0fd8d6fadb8da5a5bc56d31706903c55d96057121b51f8afe70a416255330f1f32ed6425c20061d18681bc366

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Filesize
1KB

MD5
f4cbb2b9632b5406b10933b95ecc7d91

SHA1
a278007006fb997abf792e33542dccc86713fc2b

SHA256
7a97f5ecd6a19b285bcfdc75dfa1a2c998e4a4cf6f008c5eaf722050b30e563f

SHA512
0bfd079df1694e53dc2b26181fa48aad1fac5ff43d8d0588097fd0445ebde55309d5f50cf63ca4a599e2c96eab8091aecf92f538322f81816df6101e87cf13de

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

Filesize
1KB

MD5
5890b835ebede7489e6738fbd7c5c26b

SHA1
ce5a010ff84e0145a4893525f760041abee69b60

SHA256
417ec3d4a4a821c255e6c2103883e0437a26310d8aa9bbcde058d85c20c2cc23

SHA512
5e0afee870a5de2756ef49c8b4e017b9898080effa80d4eadae9693d34c8284bb32c7eec9d23d273e83c3a57782a25f8e068f3fcb52efa4b3685b9ccb93112ff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Filesize
979B

MD5
2410ff98d5f84911fc8229bc1caec304

SHA1
12e047247cfb0a2de8b25b5c48710884657e810a

SHA256
4de1179f902b0833405f6ef2ea46f21e3115b3d3cc5502c7ecdf63cccbcf5eb9

SHA512
12cb8c308f9f713d855ef2c22173795d3ecc9f1101779c35a99b1333a9ae48a8f491517c5db18314fd00ec748bc0ca70c34fa94a54d840e6ee1aef3ce451b494

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

Filesize
488B

MD5
87d13f3a7c194280c64044340bf60216

SHA1
a951242adaf4feaa3d9a416483534a7a3e921e0b

SHA256
e0db43084bb8d8b8fc01e844102936007436e5d7ca74d53c7bd62d6ceca2161b

SHA512
14bbd5e4f4ca1f4683168889536b384dc41d75c30c91ad99fe606e99add61388b996681f313c9091344428187022824a7be0c31b36da78a5bcd824ed33c4043d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

Filesize
488B

MD5
a4384cdedec8f22ae27d800533e7e454

SHA1
8c6297cac48c9c7ab49d84fd5101c93e052c16be

SHA256
ad6fb711abfd1fefcbfbb19024ac9bcafa19c35a2386542833d2f63e1daf4769

SHA512
f3d6e51e726084af4343d3715d2a43790a99e0be57bdb4a4e990ce66c573303f2ecf7d1e7791871c86da44dc467495a42c48905ea04df1871c26739ddb5d5376

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
e220d2e8ef07d1443432495bd02c590e

SHA1
4f4036f1bf2c0032f65df21c3ab0aeb0c1a8c0e8

SHA256
2860cd67f4a94889abc7a952e1e3dd8062fb7f952ba382619f50ea15538605a5

SHA512
a2a5f3ddc62851ff007cfa694ee739b7da068489b6d54be86cca02078d34f935640101b73286d0dcbad56a21e852987022046a0cb7162d38d9ed798cff350a0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e1b3ad2ac22274060b61feb56a8e3bef

SHA1
f2bf0319f326b34f394c131567cb656b80042eb1

SHA256
1ef179a0158077d0f361202d8d705309e83739aa2a0f0ad0e45c0328e6be1b5d

SHA512
6d12a2db98cdca1d942dd48ffeb4b09906462ef9ff7e90ca08da443a64dd6f88731243a7ced2f759ebc059153a0be8071d9c75a39c861927bcbea72ed1594528

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a959ebd760320425b3fa705247b414a9

SHA1
615fce0828184198f4bd415705cab6dfae69dd05

SHA256
be527442c2b5e7ea51aeb325dc4e0307b037e29619a743c75323635e6715db08

SHA512
2e55c94aa10b5e75dacdbb127e8574beceb698ba6f076d389ea5b20a4f59fffda9dc87002d978ccc70ecdaeb776929c24395294a16e523dee506d99591b2d4c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bf2efdd4d5ae4c59cf5b94817f3065d9

SHA1
48cd670d740a932a81116279170ad13a4b4b5913

SHA256
256b49dda65d18765430c01083eb9790c1e86d54ffde9cdaf05e0adcf3d1f558

SHA512
976b7b092440c0560bd0c6f46f19055641b8fe82e2c41d1086d40cdc6811a7f7ccd22a401f36c60b1cd1f5147e396c7b6cebab54c65b971693d3864e1b9578e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
58bab83775ba01e9405aa8fa036f578a

SHA1
d03386d86ad4146c862b1a6e7e28bcca88eac896

SHA256
66d5a54024645aad9c4a0793015295693234449e4419cd10c4b83499b8431dc2

SHA512
83f19441d5be1f149793f60a10574cbcca9dbcd20ebb6a22eca1809569d79cf55430d9e2545788f9f37a40f0c88c40fb9a074a12ba1aa8faf3e7f60031f81abb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
255843b8aae9875d84b7a23241e48bb7

SHA1
deeaef053fa401a02525536c72f95387d5caa2d3

SHA256
e77977a23d11e45e0f2d72e01c4be169c33b0d7fbaf84cf857d5bd6229bee0af

SHA512
d6553a8f9f00a7b8db3bffdae954a8dbcf4baa8aefc2c086d1c383ab6f9f45b7e918ee6015556d56f3901f5cf0dd766e7886fc27226173c43da4194713ef1c39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
24de649c2e9e520798af250fd550c207

SHA1
add6eada56b1f84fcc6626f7803ecf0a762b7ced

SHA256
1923d45fe2a5ceda7c8c1df2d84dbbd18f263b43e3c9c4d0a45d43a7345874e2

SHA512
e772b639d4f0f83b179c2dc4d2053d13dd0c805b790f1711a05e661fc97b90155b31d96a75552d8622d325a50aec831e586965c92dcaf0de8f7aad24ada6e500

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3149c448102dc5db26539e77f872d5f7

SHA1
a5fac64746301af3c8d2642747715e5a89b8f170

SHA256
0c6eed058abfab4edd1b56ba490dd395161bf1401b2a76384e407a653fbcb129

SHA512
5c05944084f3b520153d1324a1915dd9eccbfc0a01486d75a9bdabed87b67875fcef8b3dfbe4edbc77dcd18531cce968d321d973f47c28313d02fe1d807e4df0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d15d3d6c9540b0fb32d367e29b09c787

SHA1
3ee5e8e79c5cba1bd93a4db55b9b0866fff638f6

SHA256
bf2121c08204f2911b56caee4f1309859f985994ff629d1ecb02234336c17fd7

SHA512
6d21aa7f51db449638b035ffd803594084e920e6595953b484b45c100c2a9b184d926f8411335769b56991fce6ab3d7bd6f6856b0f7f453946948771998c45eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e33e4f16b416bc4485f01f3980483477

SHA1
ae87493a12ae9961314fb3d64dbe2aa89a15fe43

SHA256
b37309b71a2f181dad371c0028aacc5f4ba55df003540c9dcf35e3b595a4d86a

SHA512
a4c7ba8eaf4f635d7d689e15fb31b620edcb25d7631715b1812a667736a6b219003ce4b4b8672e75e09e3e14cc9caf32594cc8ce965c56af9fa11d7c85c9e5e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
82900d19f23299efa0770df8d9bd76db

SHA1
88d0c762beb55ff131376d858a4d0466e5b76759

SHA256
b83b650187da2be6b13be6faff4883c1b7557eb77d5b5998821234599e231869

SHA512
b912308fd491e2dabf1ab68dcde7e4633604e38bda08534bf2dc758268f90b595b9d3dab3601c5e4d508923210d483e4c0921e5610b74d129976f85d54cd5188

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3502baca9a42d860fb87dc1f162e9e28

SHA1
391b96ead6cc188ec7beaa63a839877fdb955bed

SHA256
b3951bc5185e662324c5c74cfc12d166564ea9525b963c986f15d68b13d3c96c

SHA512
2ecf9383ed6e48f2c13d475bcd6659ac5722767f194d27c467a40d4b46e81e674777212805f665c14a2e5bc6bec4dd4a831f928f96a51fd17e55c9d117ebd482

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3dd35aa6ee6c3f14c8f7b12fb02a60d6

SHA1
1827f801657efbe6773ce380af3fa2181ea2bf87

SHA256
a4b5059da2854c1570495b6b217f7fff6dea081969adc5b691fb309fc5359e98

SHA512
ba63204f822fd16e77fa8e92ee8384f2c730ce747bffe374bfcf21f470abd56fbd37393c2fd7bf8ebabc478632f8cfbdee3bab775d9f268c2a73a2a408a5f76d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bd288ccaee5e7e386141e39a1f986cc0

SHA1
cfb8dea11c170ec1534cf6c514a88f133284ebba

SHA256
9be788c3bc5163e604cc4ea8ca9d283ffd3aed8af070f8a3bd5dee929eb931f7

SHA512
9083bff5f8e4963f8945a933ed6be4354aa3967af04268904abeb0dc177f6f00e12a010e761d3160904d1a0b1e60ca010024d40566fdbea55b1906a70bc6aa41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
de2ad80e223ab895db93a52e06bce14d

SHA1
933ec601f12de03becd7168f4064a98e1f0eadea

SHA256
1bbf63ca3530697c3c3bdb0a7f2c1781626edb43c4f25038e2e0615da358415c

SHA512
b5fe37444aae97b6bfb848b3ff5c1c8e6390ca0f8dc16098281e7950e2057418dbca076804cc3cc5a2a59d9a0a25e50aaaab67a661f698f5a59621dd7b8a365e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
747f8dee4912ccee8380d0b9144ccd1f

SHA1
5a777a11ed3e8d2469f1a5c644922a4b84b50743

SHA256
f8cd67b5fb28c9778ae67441c40ff4601cbe2219df42a19b28968d20f32f5709

SHA512
cb9d7ecca5fdc3c7d58245896f3fecd2a15cd50d205b9e9e113b7a04b3492e79bf6dc2c4ce94cd1a24a3449599ec9889effcaab561845fa2b2d957af284b9c13

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
876866a782833737838df6d17f15147c

SHA1
c2c92ca790a60625d6eab10ae6d46adcdcbd5c5e

SHA256
14ff1de57cea8ca667260b31606560bb2e5b2656a0d80af597a039ed542c8a8b

SHA512
9f99e60473a5b9f5cb2cb99f48a93648cb9c80828d5240a6376578be8031b7e524d717d257483e54d80ec6598383aa161c56cee7971a7dc12c7edc1b3bbf0582

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1245c458c092bf1e5fbe864e6deb6b1e

SHA1
3a5ea046eae220c826eff6997effc856889165ed

SHA256
37c9b66a235ec38cdd993fa6a406f3ff6ca4d2d0d777ad2f256aec4cf1078e38

SHA512
7d36569b5ad94d0e219315a74924bf1c36661e25e235e4c6d04b161588cdd35d322fd05268f809c473b9f471b5fc426a022f3c1b96255c93d8e78dd2eb0406ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3a0566218abb29439f4663d100afd3ca

SHA1
9c038c1fdc257f004e7565d11ca88b333eee8f7d

SHA256
9a5c861d2fd131041b92476d70002480818aa9f38532497c3b832c78eddf1781

SHA512
2e690a9d37ace47891975b30a1c0d5c76499dd9e828bc5e3f6c7cd01375ed4ec5b75725553d081df2b9e5b31da2d032372f5aae34cc9b0c833179b67ce43233f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
93c64a6d127638144590b046f103e14f

SHA1
43fa4776050bfaad67591c78342f8d806ef27f50

SHA256
726525f70a1d7edbb03de7ae268f198f6993aea40f429c79c91e55bb0d0c90d0

SHA512
e5a6acb5d6d9e78df51ae7bb4a1202bd85bb9f7971615b06963f568d424ae4abd015a7c2b7255cc42e60d33fab2a6405b94c5c204af21201911b6789a6e009ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fc23ba04e112641ca388acaadff14367

SHA1
96bcd18e17dfdad49c0d805df09c05cd214e10c6

SHA256
ca845d9fbc705c2c20a85d62d3f4d3bd6b36368d04eddd22ca3d699ddca32d56

SHA512
98ca87fa09f76df46a2837f3854acf11a12cbf7b95af007931ec8d68c73ad30678f35d47d58704b926398390cc5c4620d62f8b62e6d2fe1ec73dc4a1b7b895f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
600bbffdfe3333ac925a26384a039145

SHA1
d4deadbc766c83564f26147bcdd5670cedaaa039

SHA256
ab9914cc740e2681427c6b0ebb152d5261f0d82eb943953dfa1c9dc17bb019bb

SHA512
605ff9e79c11caf147795bdda00e1a2a145ca8fd5e99c9aca6487c4198ecd288b7d75026eca0c7a5d10dadcb5ea34f53c292320c3d8477e6fd0d4098f5d25c57

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ddea16cf758801e6a9c9b9861804552d

SHA1
b9e939cf301d2f0ab5bd8ad259a6cb527332e7ca

SHA256
23c81f25faf21e09e6c685b0f4e35ce87fc0ce530cd01bb7baece4d43c8a2ff3

SHA512
58b1c1273359aab9d8baa82e966703feb0442d2c448efc4aaa72058272f51d29f0dcd076d23307f27ca978c3dd183b73591c1771eaeeddd5884e3418bc59d4e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7ba71be51ca27958ff625fe91fb89d6c

SHA1
37afdb3dedbc314a185139db226bd1d53b9a2fd1

SHA256
ebb370e02a2d1959a2a0cff71d8c63e4ab01ab93c95e74e9a03519cf7b325697

SHA512
5ca4a16da8dfe6753b0ae441fc86acf289cbfd696b3ccfdac8118dc66f54a3b3f8a8754217159e1091c212b75eacd8764f95803d028beac5d1eed2927679248a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6dd07947c97a6b5cfec0202d95734a4e

SHA1
65301c7b51e195a7b9079fbad768d7b627188b45

SHA256
38959803845a1b15edb067ad0feb4a93e7612b28ae2c3d7a03753d6f23a18f15

SHA512
8cbde644ff26381e7ffb3eacca951e4afd1144e0390e7f5b33ed2b7a319d64c779a90c7f188fd1f281bbc8360514ed100db4769a91896bd95a0915784b62ca42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f8d55dfca197c2c8fbfdba2edeb6e428

SHA1
d42cdeeb03f103840af44475a0680c3ce3d27f6f

SHA256
c1be0888a831e5fafd9c087e5dc618ba497985024e1b5bb6114324b5b3808411

SHA512
e523bd0c85b507a4a81d9d9fba3f76c8fd2ab425c22395c676a8117f5fce49de87d04ee9427413c397940d0d284e5136e6f6167053028ca2750df661f37c783c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6515e2c9f7350ea8ac1cc0223dce250b

SHA1
a02df2b34392d895f87a8599a25c44847ba84b13

SHA256
04a7e30e7bcd09f2a91e951fce4eac8d7a0356c297a57e4d879781f9e7664601

SHA512
2007081c401d8042d4add968069aa77d55d629ca602485328ef1594a4aae54670b207b3f392417e600d58be99bbfc543d84525e085349d0feaea9266d6147852

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a1b46cfb050beb4d0740e6f1f27cffbc

SHA1
6a57953da040edf72db5a3c961fe689b0018da52

SHA256
d7cabea12bb144a510f6f3049e823cf4b41501b30bc3f48330b4f1a387091e64

SHA512
0bd100f460cb7f88a8c9b5a2a33e021258b8cb3981229f2ef3e722479ade9c8e3f249026f5f26ffff068f373d8f47898d488ca15656893390477f8a54a263131

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
94360ff202afda6b9ea9597d0ab311f4

SHA1
9224e1f6f62152ba9479f40d83b82e202cc39dab

SHA256
558258512a4889dd51153b5dad3d7895683543c8f40be5f573bc93715a4c7418

SHA512
c853bfed296c7a36150ce585467762acd3a9f5d31e0b5a04b4531dd496e8f7d4bbee90cf570a665bd087e9e1d906adb5960f7a9270e525c7ec9e59715e56d5c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e92bede9c3e3b94f6c10e21f4a010dd

SHA1
6bab894f99986c43ec5a7e2967fc06dcea415d0d

SHA256
4d31dd7320f43b497888601241bc738a2333c680ae1a805179bada20bf9b5497

SHA512
d20c9aba0fba4c86578897bc62434b594494eeeae9e1df5a779e8ca4f75af887dc3eef3692fc6d031876e25a3f397247f652924ce1a08d6d534c64ebe9879cd7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b11df74d95e3a676257d8737f1921dc9

SHA1
e26973fd943f0e27752e23c053e8ece038c1612e

SHA256
57963a59c0107b92649711a94233392d59207aaffffceaf962d6659cdddf897b

SHA512
1c6afe27ef95ee88f9dbe31691cda2d36060e9a555846f1a4cf3958b633affd4c2afa7aaf962332d095261ce2e82bf4413080040a6de6bbbc77b4a389eba5436

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
10d63d7bc25d8c55cc8659f9d17c4438

SHA1
3a4a647a6523da72709649546808f8702ef27d6a

SHA256
1450a13f10cb2451c7306bddc5ca5a797886ad8e25215a2442943450e46cc707

SHA512
a92b03e103595767d11aab8600a1802cc263bed98296dcf8c8cf9b3c16a443d4cbc061e806fe0bba2a211783d1871425346d770ee45b25df42de8b70279ea7e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ea1d2ea2d94afada72b0b0191cb79899

SHA1
781bba480e65ae75b4d28bfda391b5201f2b341a

SHA256
c738e7d1d6fcbd51256dd4558e9f60408b47dea8d6b869186527d5671c9b572f

SHA512
30054472ca7eae0ccd0a4fa72faf7deb9089a306fe3130e08e93c3a6642581d7a9251637ea6062bc7aabde6af6e58a16474d1d8fc7c7567a27428c92833c854a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a51bc9c5c2d2e6a95d41366b6448987

SHA1
e86a6ef97d32ab9dafb72881e7229dce532b443b

SHA256
72f01f869f05d8a5d8692d8a071269a43b650f0509511ca24f6a2ba4888b4f5c

SHA512
5ff14e311f0edc83734958aace640264f22167d7bfccb45f74bde66d4eb66c1b200df7a14ff66a1a1e7f6d99dfc34c6b02355988f3e63feab00c1d7e22ce94f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ec6b949b0e3178c760f2ba9a6a03cf31

SHA1
2ba9256cc5042ecc563975b1c8269cd29e0bb11b

SHA256
5c7c977bd1b6b921e714965bb3ffe01cb63f1f2ca1534237e67e01a412d2f3c9

SHA512
a1e300f99a0c844375492136d01835bad09b63bb7bcf5431c5456991dee742e62186412fab2904fe607dac8d5f16ec288aeb0e96a09e7858a6e7df50db3a675d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
66bf4e00bb9b65037ddc45168517bf65

SHA1
057dd723b4f8869d11f7fe8a9e74fb407ab727b0

SHA256
62879460538b3e6a5e6834255cdfbdca929feee2d4a43c7f571dee7cce7c400c

SHA512
1a7def5ac5ed911c020967e66565aed868d7b08d92a712a6579b4ef79b65b3ffce0e39746d0e8ee328ad26cd67c6f44786cfc8be4bfea56cd44c94396c4b29f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b44c5e7b23a316a87537ee4fb7304459

SHA1
09e6d357b5ad8bc0c4ed37ae59f992f63f597db6

SHA256
0c14ecff6b203740001124c01e063b6720689d34816f0c45c0d85c3ef1c405c3

SHA512
dcb5c07b5a9789c93d19cf6719b0c5d11e07b213a1f48637b26fc623573716e242a2b1417e9a70a0f41db51d3242febd6ed30e5731debc909d3ca475be548b0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2d2d9224ec68c33a608f729ccc52773c

SHA1
02831a1d59522c3a2b7f67a8f23b8d6884ca8d4e

SHA256
26539d8a43edab62f7e078b5daeaf210c5f9fdb54454f2fca579fac027a2e5fa

SHA512
c8c54cf3bdbae4567beb750dbec9bc91d997b535674e458bd57758c0d27cdef6e4a8d863505fcb89ce619b0eae104d64972340347b367ea4f3c908e6e9e85af2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
27fb99f8c849baa1f5859c7b9e3b77a3

SHA1
44998125efd5ce0c3ea3743965c96ce34d2bd98f

SHA256
5a9cfc9d156dbba7117af4b35b3ca4f42cdfa23a9cd47c4bf3f6196f6a54743f

SHA512
a481f2c4fac7b2cb4262bd23da3824ba1fb95393834b0e8147cd0bf645a25b8dc4125697969ba4d2f460efd76af557f18c6a12750fb046d21a5649fcfd1457ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15dc0b0b6903b1c4c876baad37d297b2

SHA1
ea4bfff2b5fc52d2228f777d77f1edb2e1f6f0a4

SHA256
6a397218eaa6d5adb8d34a0153c7d8a576eb986ceca0b33034ae3b85c4ced6c9

SHA512
1e480bc8e2cc4f9d7aca3a2168362cca6dc5c4603540884a95fa15b182cd30f71d128cf6c23f2a5242ed939c15bc017b3c14a7742d6a763dfe813b606768caf1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
55e6faae38af4fd5249f1b01acbb4fac

SHA1
ab3a4151a0fb03e5cb3410b791ee09e16ea70e58

SHA256
610db838d1401ea935c4bb20dc17d2939d96c71b057ea1e16b8fb9568cf03c46

SHA512
d5a366ee78452e1c7a00cd7c5a5db82a76d8da9c90c7c42de70903285100103dcf7608e57fb4533224bfbc51ea6073997ad974fcbb2c4abaf98695dea6cfd839

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4b55a4e85b4c2f305d8ae284b6781b0f

SHA1
e666fa47a858782db8e36f61fc41547955c45856

SHA256
4578dc784017c34bc860f529b7437f0c41555cda134adf93844510ed86ba1d05

SHA512
ced6f0d40139c314dca6f639bd7ce6f4e27c1327491bf4892ad31a6359f3e2c59115f18f64ab641f03421aee89fca50db97d0ed86f68429ba4003f7a47f9767f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9ec214ac1618c9049b686b7ca8a1ae77

SHA1
d870f217a2d227a20bea4cfbe7d45084cc6ead13

SHA256
b831f2eecb332a8741f6dd9d42248256875bdc406f2e3bed32884dd4196a7b5f

SHA512
cd0906d828483d38262090743f4299262957aa441bed1b363608769a82d4530c87578964105be72fdbed398ee102c53a22fdfd927b5b83fdf5128d0c03216de9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
898f8777fe5b0cd1f6466d85df9738f2

SHA1
f25e1e8414e26b04ba423d25b088f50a940911fb

SHA256
6a49a48b70e9864506cf833affb551018d0b1dbac1d9d00d1e25ba1e8eb9b2a7

SHA512
d572a49544145ac8f0f529e07f7c7eba8b5b18e93870d366258a464a3be698904bd6e76f8cebda4ff1a1559bfaf399411180bb9d1ba056f41132a57849a8180c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0f43a13f7e9a0151bc5d2d38c27631de

SHA1
1c9bbd28a6ea5b5e50aeebfd53ad480873fa4752

SHA256
d1d622abb8b662efeee9227936a69eab1e29d2b0096017a9b0e7f40536f679a9

SHA512
3799017a60f45165ad2f7461bc3c60130d0ee30ae9602ec0d03952c9074866b5df31c36e8848374e3a1a8e2040c6da55dbc706f2e1f5853e12c6448f2cf4777a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5adde7d4de2734018d9dfcf7b0ea404a

SHA1
2ae8ba35497207d055fe3dedee8b135848b7ce0b

SHA256
2fdbae2604fd14bb8cbaf3c61192630415bbba265e81591a5db2e36100d6d08d

SHA512
7bfea945ccecaa4afaad6dfa795fe461e22b50ac7b05653dc36b691324eacd27494c783d227bc38202acc4a1da70da3ccbc5e3bd73b3ff05850da2d2cc974247

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0890bc06b2744ef1abfe1601234cd77f

SHA1
b20ef407b9fc093f91f947a88253f619025bfb2c

SHA256
da7ad8bb3a2488c8d5c3fcbab12069ae43819f95c6ffa28494a2b8ec35d201fc

SHA512
fe33acbc6a4070f2ce6df57b4b2f076cc79e2b81130c3faf8846507dd95f70b59e180a639c8bcc9e1f7b5be31bfb70523ec2820b8c8aafa5b0ade122670ace22

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a75e7502f4debed4b5ddf9faca78a24b

SHA1
8dad6bb9a580655488c4f98479c88d9133b1a418

SHA256
e6e82adfef3b2824062b75db5ad6c9bc1c9141dff22f3efecabf426d913661ed

SHA512
0cd810e079856b171dcf06e72cfbccab621c17d1a7e4693ab1c158ab7c18f38123ae11785efc664b801dba3512bbb815a4ec818a1615c1c20e622d53f38f2bd7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
51ba0ecc9623a5a0e3efe0356bcfc217

SHA1
1935a46c6ec3d7a240b0ea718bcff9794dd56ef4

SHA256
b86ab376bf48757c5c37a727072b4a5e8e03bc44fdb9ac0e3f15589409349886

SHA512
b96ed48a99b3ac4372dd41e6f23985348dd7e587120d54a81d7b491cba97bb7637cf2ea715c33363017591bd1d9d33a259d4180063ea9d749adba4d00099be4b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dc4f2d2fb21833f038a793cdd35fa0b1

SHA1
534ddaafdc13d599af8e2177e1801acf464bd692

SHA256
45aced5aadd858f0edba22acecb795c6edbc87d83d892c6fe64ea8b5b79998c4

SHA512
6b045968ee6d4495ebc84fb7a1279bc5520fb730bccd018c72911dcdd066a583d67acf9c77f9dd5035890db1dce91a219b58c035607f555eb616d5432b701452

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ec45a251d971fa1ea9d5dd4593eaa4da

SHA1
90a09adf4b3522dddbfb141f3e9df99acffbae1f

SHA256
f5d66bef599a4c8069cd251187fa207f977524cfa8fce010adad3ffaefad4620

SHA512
03de94f3837d65b53f3dcd00d64e40af14a9cde1f7b2888491b5bc4ec3c45e4749fb604cd0bc20d7e662ad8006dae69e88de64cd2bb7e2abf71fcf8701601e82

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae14e1edaf10bd257f44ab07b01ec717

SHA1
c2edee3e8f0965b202bb5625cf69b5d322db09ff

SHA256
11b3858071b8c3fa82427e422a45c47c0a9ec4f3d7f057d9706d8b047e3ce448

SHA512
78cd6685389f12282b8aa68eb421d5f47331c3dca0c0f1008ac4ac40e1657287dee1e140980f37a78b4435a64b29930ce4904dd84fe782470ff4db992db0a85a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a32539f6952c1fe87b2251b099d90d64

SHA1
f4fdaaf47f997415bf3f99d2fc64806dadebf00a

SHA256
cdef508fbaa27f0ab0bda002e0d9cc429ede18a14b47f2627c853a87cade8a3e

SHA512
b796df5e2efd149e0e28c91f3f08d10c31c3dabf195471bf1f8baf16e5b778b60fe52b5b91336ba7add1e214d890a30df5a033f21561ddd5dd1051837734d47e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ba02837c8cf6e931e0e6525a86816636

SHA1
d1c1bb5e7268db57e908cec9bf142e701227cfc0

SHA256
6e441c7fd5acf9bb564e0f8748c205ad0dc17e9b64299cded19746cda2e109b5

SHA512
7e8e728b7834bcbc6c84912ec7c2d22f614d7892578e1aadbee171b926dba9c04695612e0741efc011d9c0f1232babb83de8539c1e9a63f4ad62b8bceadb6ed6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
82ac1ec39a1b4dd93d0e4903628fac7a

SHA1
f9b5cbafaee90f5008bf77f3da70b6f54e05ee09

SHA256
bee65db7c31977da3c0b285f6b9faa2793cd0eb2ec47e3922ba753e0c967ef41

SHA512
27ef4d849f5b34e719abb7fa64b18d95a171d1ce91280e4633af829e7cff2fe73465ab10af274bcd154a6a4427378061ae78e989934e95424d00c7c47fef3eb9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
789bda82853f0a66fd572fabe41347aa

SHA1
7f637c4b525f54ac96f15561bb9ed0a0b64bd588

SHA256
dec6562c3938a37af74896eaa4591f463dd09d7a7f8f07a8a3ef8160f832243d

SHA512
7f59c278620b7c8ee1ff1422b7bdb10d700da486f3f1fada1f55f0ab069412ad48168656b61a545b86b6b916236a70ecbd74081b8c653bacb19ada8c7b5041ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b343deb3dc5c3615d239ad0233ddcadb

SHA1
09ba53b3d2f2498d18e47dc93947fdcb22c72ae9

SHA256
d96e4bdbcf28d868902bf760dd806bc72a3bad08d224fc2d8deeb2d23cec1659

SHA512
577bb13963221ed87aba0409e6e59f13eecc5bc61eb3986640736ef205b1402d86ede126635f5d081a4f0730b4056db2aa036654d51bf96710d59004ecb05d3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bb442285d86e6069c7775006c1b8dbf8

SHA1
f70244274f30e53af94cc6136d26dae9db6d6b0e

SHA256
524b07ab89883791bba9ed2f5b7c2c18ac1b6c64509b0c078446fbe63462dfa0

SHA512
3519609eb43934d6be3d69f8d9acde77c1c92e766aa0ccea091e179ad65a640694f46d879267bc25136db382c8df3fd0da63a56f59383484c386c1edbd98e1fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e235c4fb69f1bf2e55d679f0ff2d77d5

SHA1
9c47475fd70385bb83ddd9ec7b51f8061d28093f

SHA256
46a22d64102b26a4ea20fbd326c93a7e61c8397e88cc54cbaefbf5b67ec78974

SHA512
f2f2ddc2e44f4a6ae2bf10ab3a5219a5abe03e1fbabb5ec6ecd0cb866d8d0a8cb585ded6b68603de0bda05f18c791576d1e93325adf8f12a2af720efc9a6ae78

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
faa675ee6cc1df68503361c82062d7a1

SHA1
b343af52ec54d2e3d7765e993c89d47c7844f2b3

SHA256
495004c1f2f3f0fdb9b3d95bccc9e215b0ad68c73d075021e72bceee75e2b889

SHA512
aa486a47564c6e19b95946d006feb458bc6b5ed17c4c2546c28006360829727a0c7c3d4cd24ec42b5fb5096befc14b5c6445dc6ce9a97f2c927d662b47862610

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
70275e8426d5c6a108f1cbeb6e6ce32f

SHA1
a3143ec5227084ecd672a32eb35ee6acb47927d7

SHA256
4a8f3d27e4164941fce5e581a65f652f43cb52d04d5abda2aef44b3c0c4b64b7

SHA512
4cd72967dccb81e83fff0d1a5d35138fc94edd8b0fc17b542bf579442d4fdd006a716cb61acde400f888982006887c101fada144c610a18f0570f7c3ee59eae9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ad2bf663585f6f493c1e62b3dbd4ca4a

SHA1
606de0acfe6383e39f2b80b33605df5b39d06736

SHA256
a4bb912f3d05e16ee505f48eaceeeed98548313b636c60eb7697cd3bfdafd462

SHA512
ff37d2777af3d123c92a0009ab54d732face8bb302f04b090277e3067f0a163b25ae6a125f4bd92e7028175b43788376a54261ec7e24fa9107c2a03dc56c5ecb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
45e462b52420671836bf016a5cc37fd6

SHA1
537b75e749ada7deba0d67fda0192865b420809e

SHA256
ae665633faaa5c87b750a10ba5f8caacda0382b11ffd27be967f1a2e476cc5d1

SHA512
cf4854152049654fdc2831bea5a35dc590465b4ad4b7b11deb2093e632602b1b436240f584934da6e3de54091a04243d25057e0259a17a16642adc42f2ae0a00

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b185c1b71f52c25e6998d9a599aeebf3

SHA1
35be5ad742234cf9017433b912ad7d850f9c3cab

SHA256
7d24a01d1ef0223ac85daba60d37701dc74fa9058942a7d7ed2ef4fa7f82f0ba

SHA512
67cbd7dbd74b1fdad4156a627ca7446007bb94cf346c985743d893ed083aee7bed6d87ea32d94e789d2ea5b9ae5caa2af06f31c06fcac4f569ff1939f7953cb5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1ae402ec08aca61718a044da81072f97

SHA1
1f3fb6618f685e7afc715de8919d20dafdf23eed

SHA256
077b90cd7c63724fae2e1b6cb8590e484852ba8e252b219c9c6b1b53abebe808

SHA512
a3f76d6473fbdebc8d318dd3ca3283b2f849612cf2db9c1dda26a7a547239d1db8414a9a927cfc9679426ffb3c1517534eb446255c0ecc50f37f0ec21ecb3fa9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8fee97e0b9d07faa107ad70bbca6d635

SHA1
0215bc151919e9d6601dfa45f261cb571eef44a5

SHA256
7ade180ce4498ec44b1ce2205050c1ec902608a3d8c1a63852ce774214ea56c5

SHA512
9fcbe86a4506238b851fe4b3c5282cf30c93a7a94df274e55a85b633fa05a0bbca0555bf4b98868091951e599bacea5e966bb47f24c1b47cd5bf6e74b97fe817

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7271b3ac2caf1ddde28f75c6a39cb649

SHA1
5ccb9fa91961d688fe916dfd19bdeb903753cb29

SHA256
a3a5df3e2848871cf62d16c2cf83917fdc6f3235dc8b4d915a8f93c5d8152450

SHA512
4e0b6ab9439f9d984ef88af7c6baf27d0a305245a1efeaf1c8a54edac7d5c06f5a85acf2e5243dbab36bde1f6ab714cfb630c19df178461427759243c7bf702a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
979d5b797136d6e05f5bf432dad817ce

SHA1
1c28436e698e68016c9f2c0cc77d636253936021

SHA256
04fa20c3cb14a59aa67266a8fe52085c5711b8f6f49a71c3af73568c85a17628

SHA512
7655c4c91718cdc07bb43e8c4752fe9b7e136e434cf72208425762d7ecfb1ebd7b5e03964fd4f63caec517ad353ac160f5127df152a30092cfdda927ae0819fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
301a27f91e9a18389173f0cc4b0cf4d1

SHA1
0d7dcdb5d31fa62a643fe297d525fc919b9d775e

SHA256
5deeb74f6bc668d13e0193ed2ccec6303b0a1d43083c0a176933b96291deed41

SHA512
a250fc276ed683915fd6e03877dbf2ebc859f90e05fb8127cd90fe3988aa824855ef316f100003ecdda39e82c441a8d47fbb224be7a91458716fa3f59811d854

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
684d5485e65a61befa594afcdb020643

SHA1
ed2ed01f2017c9f559f46a132757a69182bf61bf

SHA256
a92561c288025446abab4c7f1b981bb3e2576df8bf4a1622c69c892d1dd0f011

SHA512
1c871b3b3c5388cafb35fb7d84ccdd000ff8a7b107d471022e559f185cdfa19e669f18621ffa0b39c1fd068618b125f6131fd3eeb69cb156d7255841657d2a66

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3381f3af5ccf8b0cf5c2cd8c52b9660e

SHA1
44eb7cc471b0462a8fe54971a6c61219528ef343

SHA256
de0c4eb278641af03699fb879e4befe0cc8ee7288d291954ad38ae48f7938960

SHA512
1069d8da2afc0db7a6d26ee3334d4d0136d911d8fda49f4c3d7f20d1c1851bdcb5fe2e4356a6577be55aa28f18f107278e8c78b1da4f5fa14a8ea1bf74ae8329

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0c8f1cc248d72f2108c34b45b100a0ae

SHA1
21204c5d7ae9918d89a25390570149de0880c07b

SHA256
0faf0f20fd6d150f3f6b87fe8da6bafadbe359720b49afa897f0f42e9273973c

SHA512
d880842f0f6c699182b26ebd05852b74396236e586d7508c410d970ae749d11c11a1deaeb1838fb602fa07cea108e6cd6b112811a0e1697820091fe51092427a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
608d6b638c41ea571cd0d88a3f3f4d42

SHA1
191acc52ee265e827178f8483459a382141fb12d

SHA256
9ab258471d95ff5e770a38f6fbc26ec2a874315d443db4969206536fb3b3c1ef

SHA512
96a663f591249e862325736e33f9eefd8747577b7206a29808665aff3b06d5d6c589678490f14f34f2321267b614f6bafe518b6c11b2f7fbf317d3acc4211d0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1bcf2fe11132e1ddd221e1655c602015

SHA1
87bca9b4223ee99c23e0a0e449ae269aca2a3a80

SHA256
d1e1c4b48006ed4b561f534556cc5b49b3917206ede9c7802575f88434e7b083

SHA512
f2f2e8454132b0eff387490b164db9e524fc9bf3b48c545cc88616a7e172e0832d6966296009178ec2815e28d2e52ad755c8716b45c3d00cf52215d19d06887f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4feda394b977c5cf67ac148203fc70b4

SHA1
e392ca963be9f41eb03dd1248c78e3e188a4b659

SHA256
2b466c77aba3b6d44687a486dc7734a76a1405af9dcf8f27ad4bd1a06e0760b8

SHA512
9993db89962d3c8113b221ee4a76eff1e03a22402aa37d63230dbc319186eefb627833c1e175105fbdc394b525d0bc086a9f49a8f93c1e88ebfef5d659eaaebc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0602708a16cc4f359aa122e0183797c8

SHA1
be36e1866e4ca738283245fd68a4738df2336848

SHA256
6d4b1a3df6371c330651aeedfffd7b451e404f87661aadeb37806c98bb1c2a9b

SHA512
d81c9d6dde630a738b79eba8e1ef5722416534321998eca0fc4c818e622cb94c452c9543a32766002fea355f2ede8cf5bdeb35f18fe429d47889b8e9acabfd09

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8562ef182e315266f158eda8d8801d11

SHA1
8afcae64701f02b60b989077c6206df0bc19c27a

SHA256
87e87ff58f7a5b4d4f02470b26e86ab3113f772b5776201871af664dbc25f4b8

SHA512
eb6a81abfcc3a3e11138f0918279bcef01f6e25337360038705864b93125b15f9fd3b119bebb3da780dfeba83228fc2655a8fca48d0ec8eb456c24c5b4b68d41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f2c5fba306b804cec2364d99032c9f98

SHA1
bddb17da804628d66eae80b2b37e6df6e06089d7

SHA256
248ec3c6e53547c139367dc3bdbc712f55b57eaa8154cc8fe7f0927d690777ac

SHA512
fee06f594b0602f370f7411f0b9d1958dbba9380d5fb8f7772e3464c859af7e4078ec02c9f6e599ce66372b002d9283e0dceccaf4372d05027901c325c91d276

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
61c097c5ea228737cdc24e997f85734d

SHA1
1ea88f887e5a725d09c51cca50beed85e2f6bf3c

SHA256
4ff13f875c4fd8960d2062ee22bbe57d129605470c1b18c1c3b102467eaef4e6

SHA512
da804e9ceacf7f3cbee7854a543cb4b4ab92d75b4e19d5042535244d746c7881decacb9e25b3fe1f2eea37e3fd2715a4ed24e12459fb3880472c2025239e6dc4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
73f4718643f08a7183c42b130b29f8a4

SHA1
9d27b349efe724dc27fce12ececb0f2c545ffa5b

SHA256
fb5d4d157b99497696cfc54f2d2e5fb1755ad43ea8448ab231408d8dbdda29f1

SHA512
cfe0a3a85a87439a44dfe3ec5561582132df07d2bbded08e2191d5f9d60eaa0d711438d0bcb73ff20a3de278a812e0d1e009eccef95e3437802920a34797201b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5e3633830c82d30ef4880b0a9c51cf96

SHA1
12b25fcd064e74cef9b4ed5f41effe7dc34344f5

SHA256
1a5476ace25a27822b04213ab864b0686dc308d91bcea2a5e76052e01cf1e636

SHA512
c8a154203eebf1ae1a195e2f35dbada6ddd3a13b5749aab76e4afac0ef8e2c56de98b2f9a9262790c68c7371a3c20f294bbd6238b98f3d73ec833e2e44c031d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9b20d252afe1f528573734229a02db36

SHA1
7a1bddbd3a3ddc56d1c9f97fd09a5243cd05bb29

SHA256
3895e78d7162d37e93ccf442b4f33a64e06abc5f3381a60955b72f5bfe994459

SHA512
fb43fa866c29f7333c5b05daea462d2fed322ae74deb95a4b792bbee486fef0c6278d8a17f595b020ea68e024f0b780a782bef39d56f2d040a53be6d5d780656

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
29bcbdc3189aad175df388901a289b9d

SHA1
e6bc82fd5927fbc16ca9220262e80b9e11b50a76

SHA256
65e51291e25d6dcbfe3088b6807f58ddec6d1653ed9200d5b2331ab06415cdbc

SHA512
6cc509bbef5c792386fb236ffc3cf99174b86ac249a5c0cb8d1e2973ba040fbc7b323b705e828999f588dde69fb0da5f3748af4f379f1c2d368087f702999cd7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
146bc75e36a60a7a896266899d4155dc

SHA1
8dfc8afd1b6b1ee50cf1fbfbadb0c3069f85bb06

SHA256
dbd3b230ffdc9e016e0a540c31df5bf7024c4178f625419930ace109d77edf48

SHA512
ef517446cef4c3b2be7d992b3ec2c90dbe36f874226573eef3633136e98fd4515f138f4d57825b34f5fe3e12289452a4542d7e7f69f1d8d2d82707352d54d6fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5e88e4c3ed6e2851d74f2bcc65d6dbfc

SHA1
fb6460b4673d77c58a3a2a6335b161a14c852e38

SHA256
dd05549365959d8af30f3bc6871bf944b93d4cf99526e5b49c67f9110bad592c

SHA512
d1bb4d6a4ab7cb4fd0d062ce91eca2b3fb2b9be9caf8af6b20ceaafcf02ef573122c14dc232b4f1cad28a09c5ead88821cd565ff1c495f195fb764545626b444

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
370386d1208b2e3dbae4887a80e5c219

SHA1
8aa8a66a160cb690a7bb0e88e3533169590de5e1

SHA256
68bc54a0ed52b4f3636299cbddae7676bda2f6f2493ce8fdec7f7a7ac4a5244e

SHA512
9396fa7501c6e4f699127a39a8a53be7085e6f24b27a210680cd8d15c6d753bc4513bcb000e754572b9b9366c8e5f0efb14b6880f35e91f2270e6f8ce0594d12

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
819a8a5ff4abfeae32f12f001e7566ce

SHA1
b79f3d85aeceb7def8d102158bc4593657305665

SHA256
bcbbe4a4fd66a69f9bfe1ec1b3fb20e8f49a94f24dfbcf2fb47769dc00660af4

SHA512
4e21205d7684b64c3457e4f3ca402fe8968b818946d115bbfc64d1259d5fad2cf16e86f20c3f5561d8c16b056811689de2b5ffd6f10de4bfbc18522e3f474f14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae08d93e9aef1f5f46568fcc80c90248

SHA1
b8fcb4eff09d264fab26fc80af8bb206f9b8ebbf

SHA256
590a2199a929684502cec1747b446c35ee8078104f0401584ee7b7df3ce875bd

SHA512
3c72cdf29732a83c276a39aadc5de5e34ade6f5486a07e05d4c85201644e953d655e47def1765234031f5c08338609beb2e9a10d99432fc82d38f8a49d162ad3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4f7631e607333e6021b6bf857cdc9bc5

SHA1
78d679d2870debb60965dc3451bb9a79f469d50f

SHA256
3f0c9bee160c35db011650c9cb031273b2b6a0c599cc98c6ba9128142f311b22

SHA512
a7af242391d8df83c8f9659a85f02b3c6a8fa13ed242a56188673b3af61a05fb17eb3565bb0cb6d7e484f5595cc5aa7051dc29016633f787036b3e4aa0110d48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a40aee7cf4daca35f48ebd2c7bfc040f

SHA1
21be0d429429b56c68cb75c4c299c72a645e399c

SHA256
45a0d790bb32c73b010a36af9ea7bd67d040575c1b088ecadee6682898f9206f

SHA512
8695181309c6f84a7c02ac1299d4ee0ed4574702a0ec5998ec36e5b2026c52809c5eda357aa436bccf4c239e62cd26491128f4990d209b840658e4130790b9f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C

Filesize
480B

MD5
b444d0914bd77e29b2548f0302592814

SHA1
7cee0007065fe9edd6fb69e3c29631c97e6f50f8

SHA256
2d722c3418b973a669687c05e0b19ea9ead74a4ea6596241db3e58829ecde221

SHA512
b5690196ecca5985e9c60f7ec7f778bc4d6eb2dcd8b34b219c73e48758a399257c9ff0b31cc3bcff788e9652b906e9fc5d545600d667617732444f27b33fed69

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Filesize
482B

MD5
081e596e5cadd65bc80dae232b12d134

SHA1
a56179efc49f6b1679da6b417b199673e416bc3d

SHA256
2fe963d393f4eb382530627e650407b085055c66b134afb555cbd97c78c9cddd

SHA512
ebf3471cfa4ebe0b7db078d006f1c371e2c9273ccb17ed0e444a1e1f99b28339040bc2d44a4cafa3430f940d45ed052804ed56343cc5ab898e03f0282d74dd2d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

Filesize
482B

MD5
c06a54dfeada5b6bf7b99b1c7e0a7b6d

SHA1
dd490d8f856e8f526547b9f937c81ab061b74ee5

SHA256
aa020910e694d868538a8997e76b043e2fbbc2886472d211aa1b123ded3a34ea

SHA512
46d2009d807dac816f6c05fe2b9dcc6b7bf3beaf1a7e7f38de1be08de8be0d59258f52942188418a568ef0679b478525d54255fd8be676f9d3f3ccdb353ae69a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Filesize
480B

MD5
8771976a85e1c69178769a5ccfff4821

SHA1
fdd2b5abacb4c2825d4157379018131045d354f2

SHA256
1eeb7f20be624e0eb8371a1d74f60645e382d36ff88389582fc58f81534c7e90

SHA512
8c8704e7bddac6b8f76ab0e1c3ea77a32fdfe358706bbe13497b4dc623713ff7fb32f25e436049a11d6da81e5fec214d296ec5ebc63943137ad8e40cd8018b18

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
a1965244b74cd64f54f2562cd4bbbf54

SHA1
7c46f7dab297caf7821a7a042d22226b5478d93b

SHA256
b089790673104f0bedffa862a719ad4302e10524db7f4e9731a414f295546647

SHA512
755a598ba0a415e8229939f1612bdc9cc9906bbdbe936b7a11826236ab609bd9426cec439b4aeea8e4b5f839d2b8f283bbc27f138fd86e4a544564d0da448043

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6be28059-fed9-4646-9b54-ab82e9b2bc79.tmp

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8aafa2f2-5977-44e9-9c66-acccfa9c501c.tmp

Filesize
360KB

MD5
5acf56a920a7a34a1f6cbe96deb7d507

SHA1
0b1da8ba8ea875ebdd53265f93c8e3978064582e

SHA256
5b725ef9e7d9efcabe87e5542174843b1d11ad52cea4eaf2efdbea70e8b9a7f4

SHA512
083936b3db70c0c1a1f1bfd147efe5726ac38388d55c570ef7c7da99091a4cc1d664909b1289fb75043d8f9f6704fe50ddde9678699d66003a92d065a06decd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
ade370d72a5e4a9155639bd6aa7522f6

SHA1
1f3fd4c8c7c358053efb7a665155bfced357badf

SHA256
3fa4c0d6a158c0cf88ab17ad09018739515eefc3ff31bffff3414cd50c4a73cb

SHA512
5723284b5ac7e7c953f0582598d34b302ce620bcd0f9a4261bc364ce033669eaaee298c47f4a17940710f3e656c7e160c0dc0638b839317e7221427332ef076d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c9408cb9d4e9891383f8fb91b914c110

SHA1
19c8683c1120c294749adf3a2abd36902e16269e

SHA256
3aa7d6d6e9a71607276c00c551178967f37e65445a77f354741db11a5f698455

SHA512
b02fe7325e518e5ba6ea94577d0d160d1343b452869030480b36afd86b50d4570bd22fd7dc80029a799eddab0475819f51c8835fce1aeabe6d9a3fc587b1a53c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000009.dbtmp

Filesize
16B

MD5
979c29c2917bed63ccf520ece1d18cda

SHA1
65cd81cdce0be04c74222b54d0881d3fdfe4736c

SHA256
b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53

SHA512
e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
148KB

MD5
11908437402d4c8039f50c4df6367833

SHA1
cb9023bb5a2f2dba1d43346a85147cec1764838c

SHA256
7c2b51012601e7f001a047c3c8030729ccc97037a4bc055854e4ce38fd2bf451

SHA512
b705b232fa312e5c153c915aaab83163d72102ef248bb2a3141232a7488f3b054d03b4075d121e856e0b1284ac2ac578e75f79930473f692f2453a6ddea0c629

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
dcc1bfac82a8edadaab62e958ac8fe5b

SHA1
f0b434eb470f0e24a46825033ccb910cbb90e920

SHA256
fa7b7efa5130ea4dfbd267ba9b88f19d6f47bd5945d9270c7656b23ec76194af

SHA512
ea09643e9036a8823786a40cdb2668fa06ed8cdc069cf07511fa73c069ec5184485aeb4d1e9c43ffbf1fec1b264309109867bc13aab922a9f5bb3d8cbb61b748

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
96d82b0cd915ed848a61722a19db0f7d

SHA1
f7b35ceae2112158b5115918a3af3029b1f8c237

SHA256
4cad073a8550804039d73bd7c03b88aac483f202e95dfd38951cd27b5c2f1cf5

SHA512
79747475ec402f8135235b8cbee48479d29247b519a4a7963cdd61e297f200188d4bab2f2d41e5ad4d86f1264cc2e38e60d1a9ff6fd5511d8699a4b5b6d5f08e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
3fbc38ef7c3f105280821165b7b60b43

SHA1
9bfb6f738d3f99c7db402bb43077581af7d33f57

SHA256
29e27141a2c3ecb3f1d59d1ca1c0928425cacfa204848ecc235fb277c1fbef84

SHA512
b488edd415cffd9ef61a24a69969e28af7cbd4e39b3b9c310d446e325981c3e73f970a400f7da24793be2d496f02c6e5e190635edbd9d5afc132c9491871fbf3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
851B

MD5
91b3a646153cd99184a6e18f973fcf32

SHA1
936ba07db7e953fc702f7591a29da6201e0e4100

SHA256
29bd7fdc49141e4b44e43ae114ba5ae3d1705f55d39beef42d73c3c7cfc6032a

SHA512
76a4026e2322d2579879210ce9b5aa307c3c80597259ab7d1d26208210a6c11caa98309b046d3b3c7e49f9fad6df66b71e0f611ad0dcaa803e3189e7384ac9ad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
851B

MD5
712cdc2d58d82554ad55be881ac1f22a

SHA1
9c734464d8899564e269daf8339d9598357146af

SHA256
522a304ab0f1cb4e79040987f0769eb50ec779d90feb3bdbe32d9b91f91caa44

SHA512
391ee9e98c5e64169aef7c1ec77cc5a48cefb2cb833e3de60067ee17738b093fbc3a16be27fa6a41f5a8738517e9239c23c6fa03d40ed62a1c1983cc3c3b1dd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
851B

MD5
46868a68f3e20a4d61c1a96ef2382c1a

SHA1
52121edf9a8d7228e29ee05527b344a08b4421fd

SHA256
59a87fd8377f251e21608cca4a75eba289ef59432e201bf476162dc12fc89c09

SHA512
c9ef8d7b04d150dea5a2cdb757e31bc2e36a3db7b1f720c6f29c5d7a8de528e5781f4402a8af4290ec3e7aeacc8590649a220343ec552bc8bffe95b9480684d1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
851B

MD5
25a8f83d99a30e977c20a331ebc329e0

SHA1
84205a76911bb4072dab7b1a9b99da1c868557ae

SHA256
7d89ee38f00a08cfa87849933b4900b289cdb0c7689268e4629edd41c6b3e462

SHA512
f67d67625c17421b43089551ffa92065540bbf5f5f7f1aa85753d93c4415f0f406b6400ecc6f84235571ea603e6736cec5d50c15d9e9492671ba8bd2dc7dc144

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
851B

MD5
8b83c3c0e64d8d91d24360b63909e704

SHA1
a5f4db7d74c7ccea4593636c163de78e3973c0be

SHA256
27fd7bb95d721f70d5dda1d2ea25c5c339247e337aa08131f0880e7a4a3bc0e0

SHA512
611bae8f90a68d045db15fad2dc93608920b4ca3fecb4fe541bf729095407279224b2dfcd38c0cd8280f1a705c63782e975a323d5308ce56a09d927cf014e411

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
e9eafd0ff412f5e6175451f1ec9bd422

SHA1
64aa78398dfeb01dab5cc5fd5b5d6d1071524fff

SHA256
4996b0cf8f1dc885ba99c08599ee4c21aa073d535b7667fbe0329f11984a2d5c

SHA512
41bce6c815604da0f66185b80a1e2d14295bc1e0428179a1a536900875d44723bb5d4d329aaf3ed4af9af5b49457f5b5242c9775db11794f5ed77fa99d17e54f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
20da3f51e9fac4cf5e9cfb3c1e22d713

SHA1
927e0e023332f3ec388de4e34b0086e32c55bd27

SHA256
afefd8a3949fc03335d4ffe27696e127faa082f11a378d71db44fce90f54620f

SHA512
f7824d69012048c86a5d8da2b7fbeb2ccc4db9c0a61711fa059e39e4ffb5c0d1267596a416bb8a0c480d87a54cd4aea8a68539a050053146b98ed6caef6eaeb8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d3360b58acbe4682cfecc0ee951c746d

SHA1
748a89a2094475fef5b2b77e0fbd366762fdaefc

SHA256
88d7d07491d882b3baf8ca6c7e85f5c25828b59861d2072502a556b6045a4ae1

SHA512
439c41467c2abae8a1cedcb1f8408a977c63b0c487fce36a735b410ee03e13677c34168b38bd174314d66a5c5815ee48eb807d267d03317bb558fee32edbe37c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
14aac9b75f653ffb40b703dcf3f7b09a

SHA1
d9d36c20eb31729017722cce77f277d0bddedffa

SHA256
06f74cf65ed5db219367b32a3c8e965f24f1ce9ab2d96eba55a8c40812f847f2

SHA512
1f42f6779fb30f2826e0c7367339a5fc0779eca1bbed99dc0826c1c8d52d003e773a26b6b8044d04c284f1260f12157177f57347a66d65b2852d3b31535fdbe5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2f0bf81dc880573a5c3b5efb9ac1ceee

SHA1
866a4cc45604faf29d40b9775ff4df50c75393ca

SHA256
a92c96304c9970c5a66b8326a91eba472e05f096dab995e9fd115a001c6d444f

SHA512
9943d8a8f76bca52a93df7be908da0ada0d9b7de78c65f8ba1ae6823acb9dce1984f4d3098f90bbfbf803f7968ed1b9877961553cf81af25493437aed186d738

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
39fc7c376c08ee030a15c170085cb806

SHA1
e12da412aa990662be0deda04e6fe9f0aadacd67

SHA256
c2dc01a5903e33f4282aaeaa625813d4aa82cbe400b73116c32ba0b92558b746

SHA512
5ccd8a651d3d96279a9477af21bd37ef17877b6deeaf877bfce5ce881951c44025c2f2a1ffab91eb535838201e91377cae85805ceaf2b2874553d34dbb80309d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6c9c555b902f6eb87042205bd7e16d84

SHA1
7243fc4a6d95509363825eac9a0942535ea610f4

SHA256
28a1c4cd95d6755ad4464dc4fb5a65f371b2cd73cf9373af3b41911115d3eb10

SHA512
212a69c8daaf790c2440c5b7346493754285bf29aa7aeccdca051210d56e64666718c6dec06c7b9433199bf9ff596f1a93a97aa89c434cbfa8d47d65f5975c4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000010.dbtmp

Filesize
16B

MD5
60e3f691077715586b918375dd23c6b0

SHA1
476d3eab15649c40c6aebfb6ac2366db50283d1b

SHA256
e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee

SHA512
d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
14B

MD5
9eae63c7a967fc314dd311d9f46a45b7

SHA1
caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf

SHA256
4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d

SHA512
bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
400KB

MD5
4b09d4ade32d674ba9747526388e2531

SHA1
7079b0e9bfb1286dd24d9f2daa6dd7dd3e52ae58

SHA256
eddc4915dd79f05bf42319912e549bc6a39cc7fc84b71969d9af89b756a8eb1e

SHA512
f6c3f247b677e3b389d8a8a38ee17cf1d0908df39e102002196b307146cdf3bc032258f2987a801da72f92838c57a63eba2c7c5d2f64bb78c2fb0be79fa20c0e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
187KB

MD5
61360b1b75db6bfdfb7869fd36773de5

SHA1
2e29adfc688dcf0a2dc7255f5da3944f6830e5fd

SHA256
0b1941f251a71c047e91279b8a65fabf2a4d2c7d87f0c0711aeaa3a111161b71

SHA512
3856483b1efe680511caf917b5286f648763f92c510745d4ca310936def54d9950d436acdb107a261de94cc42a1d662b1a7ad0cb28aed2fc54f53f3d9b71754d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
353KB

MD5
af93f2d4fe103c333aa29a3ab8e6558c

SHA1
3d089c453014bd170bf0eae4b752fa7a1c03cd43

SHA256
f783d1536e205da09501faff520120a2b009aa132b2316367cf2d1063280cca8

SHA512
c5cc7b2f4c6f58b3bb84f726ea6a74eabe1ae346d2c911579229b10f2bc97a07c18072aea410d5be7048c788ae4d9f22c61e489bf53bdca49fe70769a9dd2bdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
353KB

MD5
b4621c40d80bd836c4472724d164d898

SHA1
bfd4a207cd584681ea314d24fd8add38f4c9839e

SHA256
6cad521024ffae5e7f4d63bdafd56592fcf36403026881a6b22399c09daafec9

SHA512
ac89e7e945ab6da0bab2c7286cc6ffe6129b313ecab2cb6b628550d2c1933a789388ccf71e401bb2805783f69cf03ffa16c745e10dbb623b565165ba7ba0701b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
353KB

MD5
748298baeb816dd58cafc5691d3a802b

SHA1
fe92fc6d87818e8df575dc124b7de34f393de15b

SHA256
7c06ee6d52e29fde1daf56ecd7ca078b1a345c9c417784ff9f0e2197cf3dd07f

SHA512
f0e6597d1748de9c29a93b528ef04c2a053c5ae662c0b9e7e99ff8d5b9d8c28ad9bf13a998441abef7a6db3f7fce2f21267f3d5ad3aa88117ea587dee0c794cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
353KB

MD5
eb3c6e5da697adb81d048ce700419a25

SHA1
6245b5c9ea988ffa0da63bba75cf90186f54b3f5

SHA256
d4ac19b8afc34eb62bb82b0a5a4c34856e1f13487b23e17123efee4a2df61ac7

SHA512
3233f8c5878d5417a24370b382c925edd03a209b116d2ecfc27a8a4e8d9810bd40166acc47e0c5c9ef5edecd9e853cd91cbbf27e03101504ef0f67cb3c9ad5c3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
177KB

MD5
a8e9a95e1198a51836572bd7187cc606

SHA1
55265cfcdc5f2f6855eb7ef4337448a79578d9f5

SHA256
e43eb599422134353b742876dcdeb511698d5eed3eca00c99a8394112392c67a

SHA512
97f13b67dce65d54f9d2484b898ef365c11975db670ad71245076adfff302371908044df7da01f193a5a2fcc1bd844324d72f3fbb93f787764d4c69f9d1fa967

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
70e2769f0dac697da7e493e803c47f2e

SHA1
9605c669b882bf7bc3b3052e9c5f5f2333710ad9

SHA256
4350430702a9297a2083eb065e7f487675cf46d46aa71acdc8d72289e228feab

SHA512
bc4cc24db7359abee283b7cc2790dc59741b768330f8dc2c18321cda57e91eb828d53a9691065e559b332b58c6b0b35c731f356ee560126357d98892ad758324

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
85B

MD5
bc6142469cd7dadf107be9ad87ea4753

SHA1
72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

SHA256
b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

SHA512
47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f462388c-42b3-47ef-8e09-eacc58ee5b8f.tmp

Filesize
187KB

MD5
d65ea47ca502ae8314c6280b8c5727d5

SHA1
339ef12bcc3d743c5f7e86c6f7f9e3838ea1ea72

SHA256
d67b2fcd4e420981401811b64e5f9835e12ac9faf564fce51a4e40329d5c98d3

SHA512
6c2e2f46a24be2b372bdabcf1b0a5d7e7fd723cf47a27c82f9645eec8dc8e4a4ce038fa4295b261e236d3c57209f80adebbcc2406cc38180e64be1038f09a884

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{AC1D4821-B77A-11EF-95F7-72BC2935A1B8}.dat

Filesize
5KB

MD5
0c336c002e37cdb55332cdc35c1898aa

SHA1
b74ff593c20616cfe68df54cd9da7ae17175fbbc

SHA256
5e0ec4ee4695dcb4a87a6ae828ba86ba6296e562075f781e03318a8797679eb6

SHA512
84db8b36f47d39c1be45408a53cfbe55d5c07272e5c34da33831da5f1fa5ed7e0327f22ed9d33fa45f8ee25558f1a2a5dc0466b09d3b9060753785ab4ff03e5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{652546F0-86E4-11EF-9C83-DAB21757C799}.dat

Filesize
5KB

MD5
10ae94a5ad294bbbc07ae98c4b1aeed0

SHA1
aac006438a94f7692be9e2b900dcb2eebdd2b54d

SHA256
19c1e9e8f18d21e0d039271bfce2d97f394cb26c6b8d8cc8aefaef121ae74ce2

SHA512
90bc7bebe421af211ef810157fbd4ddb1bc2ecffbaf9098b0f9606bfc8ac09c070e64ae4718d0a16a13c2a518a2ab2f439bf038ab281f01798ef2d0b2e0d4376

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{B5D263A1-B77A-11EF-95F7-72BC2935A1B8}.dat

Filesize
6KB

MD5
06d27eefcf0bcc537eebe8b5e751816b

SHA1
63f71a71523952178b952a482e4b6c512c209932

SHA256
04d606db71bc35dda11da6424c45f3d05cd21791d6b504de2d48c93e100850b6

SHA512
6d260990bd00558899e5b151debcf5e4fca6f50a33c1bce5ac558d45e1043425c3b7af5628b64ee85d9a344fbb9f66d68d7e1a020b4b4a3384c67adfa0bbaf98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z8d0nzh\imagestore.dat

Filesize
1KB

MD5
4fe3f4ed3febce8c5f765e1fe29b5da0

SHA1
33bc7e706e022afa791d454254b0a4fb1364019d

SHA256
c76458b5c15dec42937b21d1e5eb5025a485f80139059a2475c02ef71a520c3d

SHA512
b7008f1ad25d081824fa83a629e53084a4ce86c54da881b94330b38b0c65e565330d58eb419aad85071fe7a820610479eef19dde9be4147c3e7e60fe93ccc28a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z8d0nzh\imagestore.dat

Filesize
1KB

MD5
68c2cd2506f47ffdb56d65b8b3960349

SHA1
0b7230f3715c855867692d165b5b329ecd4ccf56

SHA256
a13bb00fef0727c297c0a26b43f6f69d07181246ea7a11e36e1854e94051a1a5

SHA512
b6ed1c2dbcba6db815951306856900ae9f09ac670ba06864d662632948122369fb4fa2a07641a648409a3e40f2590603b85d88445076975daefefe952317d626

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\Quasar.v1.3.0.0[1].zip

Filesize
611KB

MD5
ac17f5bfbdc14e9d9e8100d64cd9094d

SHA1
dd5b3afeb326fc02a59e3eb667abd68e2088212c

SHA256
30a4ec904324aab10b9f77127944ec98e8e1f222c893c1862f3bed4970ead8fb

SHA512
733a79e5326f6a09b5c4b4fa648bb967cbdf5ec00b389df8a12ddc0c46bd326e4ca7ad98e61b009a373ac404828444094498408b5683fec4e63251900ba3621f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\octicons-react-45c3a19dd792[1].js

Filesize
366KB

MD5
9e0a969dc3be03bb71b0a302026d7b0b

SHA1
5a4b153a4a96e52af91bcfe5668cb2f971ba6046

SHA256
9e54a9b2770b55e03e302febe2a4d06312f4834f8d51fae43fb918301e89d36d

SHA512
45c3a19dd792b9c92eac4b2fd84303a4c71ed592f599bc4c279cf340e249c5fe5c22f5df3320d3af4d680eaded151b50c97774cddec2ccc93c7b630fee5445f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\react-core-5eb582e1c3df[1].js

Filesize
123KB

MD5
eec22f7478008173c8904e5cae6e8f7f

SHA1
570237e5facac91fde3ceacac4db956162362e99

SHA256
eec06568095cef7e8c21effddfccca8b0f997f1ad84facb8264f71930df05636

SHA512
5eb582e1c3dfe25252af7d417d1c7771f65a82f6d0ccf6d54749bcc3b0ef4074a030c11a7827192ff47ffe01ac6e28a23b7d23b0f5548d0549d62635aa7d42ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\react-lib-2131e17288a8[1].js

Filesize
209KB

MD5
d579f127ac395a1be905e812c2b44cb3

SHA1
630d159c8cd513b78a00a50e66160f57f911d3a2

SHA256
b6def242769e186e38d17a4dc7e63672cddaece0e89f9af1c371bfbcf2e8e9d1

SHA512
2131e17288a8e95254851e50faebfd08244151e54463179b1b2238962ebea4a863f19a7ca991a58207dea404c85e64babbf8691ff42d8742f950fecdcdfb977c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\vendors-node_modules_emotion_is-prop-valid_dist_emotion-is-prop-valid_esm_js-node_modules_emo-37e3d5-92730c05e718[1].js

Filesize
24KB

MD5
c539d2d52ed41eb77319ecf5cac911be

SHA1
6a0df8c3bdf5a4ecd2bec6c02b3bc0dfc9d5dcd4

SHA256
ab637a12aa6a683945730f11cee3b457ca3eecf0ca7e9cab4e4c3b8fc599498f

SHA512
92730c05e71820923ca3a0ffb4e1e46470ef15010ed887a5de7917bf2646ffa770910f3ffecdea7818f9319cd693dc0c09b0ef944cbc92c283b3a7de3362af0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5GWW47WY\vendors-node_modules_tanstack_query-core_build_modern_queryClient_js-e6f07a7e80b7[1].js

Filesize
23KB

MD5
192c7c832dd1773471ed5fb3970d91ec

SHA1
43abdae119e93bb7c2038db4e5af6195e6775ccb

SHA256
c91dab796127c6af495bc1647b7261c9d51bf3cbe0c032c64bde7f6376fe6c34

SHA512
e6f07a7e80b77223128376585565df9489fb414c495eb398e0a6239d4cc5e130f556198087380b5108d55088ec0c37a0743cfad13cdfa4252e7ef6c3d30d929d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RLHRIIGD\favicon[1].png

Filesize
958B

MD5
346e09471362f2907510a31812129cd2

SHA1
323b99430dd424604ae57a19a91f25376e209759

SHA256
74cf90ac2fe6624ab1056cacea11cf7ed4f8bef54bbb0e869638013bba45bc08

SHA512
a62b0fcc02e671d6037725cf67935f8ca1c875f764ce39fed267420935c0b7bad69ab50d3f9f8c628e9b3cff439885ee416989e31ceaa5d32ae596dd7e5fedbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RLHRIIGD\primer-react-c8dd4a584007[1].js

Filesize
650KB

MD5
204e6cae5946eec38705e6e2f570fe83

SHA1
83ec31c5a7ffe3203e03043d6fb07c29a45e5824

SHA256
a255e91e196a97b46fa71fe4c324bc87dea598f21e9010ab6055c76ee7a1f7dc

SHA512
c8dd4a584007f2ce1e1130a51852ec4c4b7aee6483eebaf596afbc12e5b9f8a149891488af33f814bb2141ce38fc35c33de28c1573ff3e44247c6f6be6485230

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VUUZQMCA\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-e7dcdd-f7cc96ebae76[1].js

Filesize
14KB

MD5
b0002f8946f9e5458e7b198e99f04f26

SHA1
8956b3d984c1e719a710a05df36db26956119f49

SHA256
43af9e53d1a1d14ea2e1235f487240147d09f8d3552722bb0ff0b6321ac779e0

SHA512
f7cc96ebae767863d408eaa563c92157f95149857b2abb9fccf9d0ed5b60d4a7524ea34996f2bf98423cf60b899b9c5120158f52ceec40a4708a7bf23143f564

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VUUZQMCA\vendors-node_modules_oddbird_popover-polyfill_dist_popover-fn_js-55fea94174bf[1].js

Filesize
9KB

MD5
104c331ccb6850e5965f81b3139faee5

SHA1
90c678799120c63512fce95f4171de4d3fb8afce

SHA256
81256ca25d0ae714bd5ad27183003f42ca57c7454c6f1e737def7d5b8e65a8ac

SHA512
55fea94174bff84c2131861aba919c8f4252947340c37172cc9b31aad5a5416de4189037dfeda7354e12261b46954eed25c762c30716a1cc82501ac9fe049c00

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC10E.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarC1DE.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit
C:\Users\Admin\AppData\Local\Temp\~DFFCAA1E8D890EEBF1.TMP

Filesize
20KB

MD5
c0112902313e886dcf8191cf0c61e914

SHA1
7939cf42c8a499f10f24ec24389cb5b0236f74ed

SHA256
512af711158ec442d47970e921f3ceae29118fd7d8913cae64e7714460f0191b

SHA512
a7a94603a0174a569c3169628994d90cda7ec347811dca2b60d41ef8de0343c5622f8eaafbee33f38d067a27b34a4cf27245415b429db7e7fedcf1332feb62e3

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\OUGLLOPO.txt

Filesize
164B

MD5
ad08d8978bf1593d008367623956d70c

SHA1
43454f0fae6a3b54b5062f8f3958fdae538264a8

SHA256
c7da46b5e739004b8a7cb4cd7ff283b4bfbf5765cae14c3fa4285e7d0e2cffc4

SHA512
84b42a3a9f0753e1df07fb5810fd3e1f46009ef7d6e6e9daba91cdf0e21140fba4c2a8ae34bad48821f7ad0b5ffa3db9b4680c53f4c5169269a276722395f228

Download Submit
C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

Filesize
574B

MD5
92a2f18a2a962c67a996c1eadcb2e59f

SHA1
8da7d76410c4d5b8a3ee064c64c20dbcf782e802

SHA256
d51da25605c10600289384065544af57f5c9c1f7a7d04411eb00fa87764d4f68

SHA512
82594b9d6004e4311e800ac2e61c177c39e11a5ad890418978f1bd7eb18e93125bb585de6c096d27dd35530ccc434e727a53b59c37779a26e39e769a0189f89b

Download Submit
C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock

Filesize
18B

MD5
ab5ab7dc56395853ea2e49af5d54b7fa

SHA1
3ce6e34c978a56c7aad64df73ebc1d85319f7e89

SHA256
c17058fddf2c15f2a75e534e863b400f0e0b60fe9219eb773c86ebabf668eebb

SHA512
574fb683f6f7081a4e41fc739077ed1d869f0f13a10ff8199154797119ab2a40988db5ed0124d92fbc70b814a4a81c6c950232541ee89464ffbd157dca5ce5cd

Download Submit
C:\Users\Admin\Desktop\Client-built.exe

Filesize
348KB

MD5
1e12fd0023bc835eaa8147979f48523b

SHA1
8974e591ea07a53f001b957b96608424b78e6492

SHA256
382ee7621664bdefdf8d281a40106e9936d6a13a6301d959c212168c73713f67

SHA512
2877954453a55c23e4d93eeac2ca4ebd593d4d87aa4e349b6d7363a3125e7bf8e3cc923160a0e56caeefb02adb4ef58dc04a8728aa8c665349b629ed84602ca5

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\Mono.Cecil.dll

Filesize
277KB

MD5
8df4d6b5dc1629fcefcdc20210a88eac

SHA1
16c661757ad90eb84228aa3487db11a2eac6fe64

SHA256
3e4288b32006fe8499b43a7f605bb7337931847a0aa79a33217a1d6d1a6c397e

SHA512
874b4987865588efb806a283b0e785fd24e8b1562026edd43050e150bce6c883134f3c8ad0f8c107b0fb1b26fce6ddcc7e344a5f55c3788dac35035b13d15174

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\Mono.Nat.dll

Filesize
40KB

MD5
bf929442b12d4b5f9906b29834bf7db1

SHA1
810a2b3c8e548d1df931538bc304cc1405f7a32b

SHA256
b33435ac7cdefcf7c2adf96738c762a95414eb7a4967ef6b88dcda14d58bfee0

SHA512
9fcfaf48bfe5455a466e666bafa59a7348a736368daa892333cefa0cac22bcef3255f9cee24a70ed96011b73abea8e5d3dbf24876cffa81e0b532df41dd81828

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\Profiles\Default.xml

Filesize
1003B

MD5
d217084651c3fa421da78bb2b4e2a41a

SHA1
6b537afaf98c4cfc63781cc9322a6c4271b624d8

SHA256
e7f99dc4673356dd9b9f5e1957f6b084a1862dc4de6219ca1ad3c22f8ce30d97

SHA512
fc0d172e95317a17dec4f278b3bd9a079ea0260e61cb59dddde102ed72ef9c9326da6cd6ecfc699f4bf0a45d17700e04406eb159861aa4c441c95481826c32aa

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\Quasar.exe

Filesize
1.4MB

MD5
5d56758eb0cf106dba55475e9bf9b479

SHA1
088e81d1f82b3e063198872f8802bfe080dc7105

SHA256
ef012e22ef53045f48b574b395788c8639f853484bd78f4c9ad63532d916c1f9

SHA512
defd29f745d90b945117c88e7ddcbb8ff5eeca38e60bea9fa2be643818c15f99b83045ff464e08cfeb210474d0897ffeb847f7b4a3ae842bc90c942ce035c793

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\Vestris.ResourceLib.dll

Filesize
76KB

MD5
64e9cb25aeefeeba3bb579fb1a5559bc

SHA1
e719f80fcbd952609475f3d4a42aa578b2034624

SHA256
34cab594ce9c9af8e12a6923fc16468f5b87e168777db4be2f04db883c1db993

SHA512
b21cd93f010b345b09b771d24b2e5eeed3b73a82fc16badafea7f0324e39477b0d7033623923313d2de5513cb778428ae10161ae7fc0d6b00e446f8d89cf0f8c

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\client.bin

Filesize
261KB

MD5
3e1e36fb99f3c37e11d4edc9009b36df

SHA1
50b7cbb60530980870baef13e4f04ae2e7e4e1e6

SHA256
42b02f1c1118c037f18aa331b8b21a159ba4faf412b3bf319cec6cd4eaaafb9a

SHA512
32491ca1299d6608c4b3cd3af5646c76a6669101d6cb7ab1157b7b1d912190726c1dc2698ddd872b900214046d7c521a93542dc65f4394384c4b39cba394ec06

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\settings.xml

Filesize
51B

MD5
8af01757cc429d1347430084913566d1

SHA1
e4ec570a0b1a5c99e0613da232eeff4b42ffaa75

SHA256
f1a33cd5b1c9368f73b8ff144bed026664577317df27baff774b2bd2acbd52ef

SHA512
3edbca5a661d0fbdd0f8aac994b50e3f844e1d6ee6bfeadf0d8aa89fab1b7cec69b9f687a704c7a989726bb676604e2cdb75ca30441e94a05fdd4027ec9a494a

Download Submit
C:\Users\Admin\Desktop\Quasar v1.3.0.0\settings.xml

Filesize
428B

MD5
b1fcf219d523a59135c1cf986211d12f

SHA1
745dfdb007cbcc18cb7605edd227bb75428d1ef5

SHA256
9af92da16a6fff27bd9ef54b15dfe914795fd5b6215d5caa26c95396503948a8

SHA512
9698f0d1a213751d95cb43b6c8f31b8bfc0bc0290c6cf8af083d61fa0af6194bd53551b9430e317cf626e2f3e6614723644ad41b1ae800d468a0bca73e289a11

Download Submit
memory/856-9144-0x0000000001310000-0x000000000136E000-memory.dmp

Filesize
376KB

Download
memory/856-9425-0x00000000047C0000-0x00000000047C2000-memory.dmp

Filesize
8KB

Download
memory/928-9393-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/928-9392-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/928-9391-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/928-9390-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/928-9389-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/928-9388-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1156-9396-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/1156-9399-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/1156-9398-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/1156-9397-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/1156-9400-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/1156-9395-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1420-9039-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9032-0x0000000000010000-0x000000000017C000-memory.dmp

Filesize
1.4MB

Download
memory/1420-9033-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9034-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9035-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9036-0x000007FEF5AF3000-0x000007FEF5AF4000-memory.dmp

Filesize
4KB

Download
memory/1420-9037-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9038-0x000007FEF5AF0000-0x000007FEF64DC000-memory.dmp

Filesize
9.9MB

Download
memory/1420-9031-0x000007FEF5AF3000-0x000007FEF5AF4000-memory.dmp

Filesize
4KB

Download
memory/1420-9044-0x0000000001FC0000-0x0000000001FD0000-memory.dmp

Filesize
64KB

Download
memory/1420-9048-0x000000001F940000-0x000000001F950000-memory.dmp

Filesize
64KB

Download
memory/1420-9050-0x000000001F3E0000-0x000000001F42C000-memory.dmp

Filesize
304KB

Download
memory/1420-9052-0x000000001ECE0000-0x000000001ECFA000-memory.dmp

Filesize
104KB

Download
memory/1556-9412-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1556-9417-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/1556-9413-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/1556-9414-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/1556-9415-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/1556-9416-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/1572-9344-0x000007FEF2540000-0x000007FEF27F6000-memory.dmp

Filesize
2.7MB

Download
memory/1572-9343-0x000007FEF6FD0000-0x000007FEF7004000-memory.dmp

Filesize
208KB

Download
memory/1572-9345-0x000007FEECAF0000-0x000007FEEDBA0000-memory.dmp

Filesize
16.7MB

Download
memory/1572-9342-0x000000013FCD0000-0x000000013FDC8000-memory.dmp

Filesize
992KB

Download
memory/1616-9375-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/1616-9366-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/1616-9368-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/1616-9364-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1616-9367-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/1616-9365-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/1684-9361-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/1684-9362-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/1684-9360-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/1684-9359-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/1684-9358-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1684-9363-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/1928-9380-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/1928-9382-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/1928-9378-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/1928-9377-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/1928-9379-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/1928-9381-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/2272-9422-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/2272-9423-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/2272-9424-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/2272-9421-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/2272-9420-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/2272-9419-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/2304-9350-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/2484-9404-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/2484-9403-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download
memory/2484-9405-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/2484-9402-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/2484-9401-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/2484-9406-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/2924-9426-0x0000000000130000-0x0000000000132000-memory.dmp

Filesize
8KB

Download
memory/2932-9430-0x000000013F580000-0x000000013F678000-memory.dmp

Filesize
992KB

Download
memory/2932-9431-0x000007FEF6D20000-0x000007FEF6D54000-memory.dmp

Filesize
208KB

Download
memory/2932-9439-0x000007FEF6FF0000-0x000007FEF7001000-memory.dmp

Filesize
68KB

Download
memory/2932-9438-0x000007FEF7380000-0x000007FEF7397000-memory.dmp

Filesize
92KB

Download
memory/2932-9437-0x000007FEF7180000-0x000007FEF7198000-memory.dmp

Filesize
96KB

Download
memory/2932-9432-0x000007FEED8E0000-0x000007FEEDB96000-memory.dmp

Filesize
2.7MB

Download