lumma | hxxp://evon[.]cc

Resubmissions

08-01-2025 22:22

250108-2anapawlft 7

08-01-2025 20:13

250108-yzvjhs1qcw 8

08-01-2025 20:00

250108-yrfema1mcs 10

08-01-2025 18:59

250108-xm664s1pfr 8

Analysis

max time kernel
687s
max time network
693s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
08-01-2025 20:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://evon.cc

Score

10^/10

lumma discovery persistence privilege_escalation stealer

Malware Config

Extracted

Family

lumma

https://cloudewahsj.shop/api

https://rabidcowse.shop/api

https://noisycuttej.shop/api

https://tirepublicerj.shop/api

https://framekgirus.shop/api

https://wholersorie.shop/api

https://abruptyopsn.shop/api

https://nearycrepso.shop/api

https://remakeveile.sbs/api

Signatures

Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
stealer lumma
Lumma family
lumma
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Loads dropped DLL 1 IoCs

pid	Process
3300	Process not Found

Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs

Web Service

T1102

flow	ioc
70	raw.githubusercontent.com
75	camo.githubusercontent.com
83	raw.githubusercontent.com
84	raw.githubusercontent.com
93	raw.githubusercontent.com

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 3168 set thread context of 1424	3168	Soft_Ware.exe	135

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Soft_Ware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BitLockerToGo.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup_02024.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup_02024.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup_02024.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Winword.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Winword.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Winword.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Winword.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 56 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex\ContextMenuHandlers\7-Zip	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip32.dll"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\䲡䄬✀谀疘	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\䲡䄬✀谀疘\ = "rc_auto_file"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\DragDropHandlers	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\*\shellex\ContextMenuHandlers\7-Zip	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\.rc	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\ContextMenuHandlers\7-Zip	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\DragDropHandlers\7-Zip	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file\shell\edit\ = "@C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office16\\oregres.dll,-1"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file\shell	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip.dll"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file\shell\edit	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Local Settings	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file\shell\edit\command\ = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\Winword.exe\" /n \"%1\""	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex\ContextMenuHandlers	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\.rc\ = "rc_auto_file"	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip32.dll"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip.dll"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Folder	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip32.dll"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\rc_auto_file\shell\edit\command	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex\DragDropHandlers\7-Zip	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex\DragDropHandlers	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Users\\Admin\\AppData\\Roaming\\7zip\\7-zip.dll"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	Setup_02024.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	Setup_02024.exe
Key created	\REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}	Setup_02024.exe

NTFS ADS 6 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Xeno.rc:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\link.txt:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\link (1).txt:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\link (2).txt:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Soft_Ware.zip:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\RobloxExecutor.exe-806043.zip:Zone.Identifier	msedge.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
1336	NOTEPAD.EXE

Suspicious behavior: AddClipboardFormatListener 4 IoCs

pid	Process
3064	Winword.exe
3064	Winword.exe
1448	Winword.exe
1448	Winword.exe

Suspicious behavior: EnumeratesProcesses 37 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
3736	identity_helper.exe
3736	identity_helper.exe
3244	msedge.exe
3244	msedge.exe
4248	msedge.exe
4248	msedge.exe
2228	msedge.exe
2228	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3288	msedge.exe
3288	msedge.exe
2440	msedge.exe
2440	msedge.exe
4368	msedge.exe
4368	msedge.exe
2448	msedge.exe
2448	msedge.exe
4184	Setup_02024.exe
4184	Setup_02024.exe
4184	Setup_02024.exe
4184	Setup_02024.exe
5096	Setup_02024.exe
5096	Setup_02024.exe
5096	Setup_02024.exe
5096	Setup_02024.exe
5724	Setup_02024.exe
5724	Setup_02024.exe
5724	Setup_02024.exe
5724	Setup_02024.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4652	OpenWith.exe
2592	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 59 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	4184	Setup_02024.exe
Token: SeDebugPrivilege	4184	Setup_02024.exe
Token: SeDebugPrivilege	5096	Setup_02024.exe
Token: SeDebugPrivilege	5096	Setup_02024.exe
Token: SeDebugPrivilege	5724	Setup_02024.exe
Token: SeDebugPrivilege	5724	Setup_02024.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SetWindowsHookEx 63 IoCs

pid	Process
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
4652	OpenWith.exe
3064	Winword.exe
3064	Winword.exe
3064	Winword.exe
3064	Winword.exe
3064	Winword.exe
3064	Winword.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
2592	OpenWith.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe
1448	Winword.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4216	4936	msedge.exe	77
PID 4936 wrote to memory of 4216	4936	msedge.exe	77
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 4152	4936	msedge.exe	78
PID 4936 wrote to memory of 3416	4936	msedge.exe	79
PID 4936 wrote to memory of 3416	4936	msedge.exe	79
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80
PID 4936 wrote to memory of 3396	4936	msedge.exe	80

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://evon.cc
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcd2c33cb8,0x7ffcd2c33cc8,0x7ffcd2c33cd8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1716 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7096 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2228
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\link.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=7028 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1716 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1872 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3952 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6972 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1872 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7208 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2440
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\link (2).txt
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3020 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1696 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2892 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2900 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8008 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2900 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7492 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4036 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1200 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1936,8865428740776401528,610889957541132056,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:6104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1892

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4652
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Downloads\Xeno.rc"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  PID:3064

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4568

C:\Users\Admin\Documents\Soft_Ware_(password_1212)\Soft_Ware.exe
"C:\Users\Admin\Documents\Soft_Ware_(password_1212)\Soft_Ware.exe"
1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
PID:3168
- C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
  "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1424

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2592
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Documents\Soft_Ware_(password_1212)\agcore.dll"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  PID:1448

C:\Users\Admin\AppData\Local\Temp\Temp1_RobloxExecutor.exe-806043.zip\Setup_02024.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_RobloxExecutor.exe-806043.zip\Setup_02024.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4184

C:\Users\Admin\AppData\Local\Temp\Temp1_RobloxExecutor.exe-806043.zip\Setup_02024.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_RobloxExecutor.exe-806043.zip\Setup_02024.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5096

C:\Users\Admin\Downloads\RobloxExecutor.exe-806043\Setup_02024.exe
"C:\Users\Admin\Downloads\RobloxExecutor.exe-806043\Setup_02024.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9

Filesize
471B

MD5
6bbf055a85f474fcb6ccfea453109827

SHA1
7701f5eaf74db01bb3ec4700bb6621fd1de408b6

SHA256
aedd5fe6b1b28b10ac4a345ce7f125a8f68f3f5882378b13c6261e4ae91ec662

SHA512
f8fbeae9c724c4919323a6bec28789e672853213cafe29b6a224038a51ddde9bde3b0247af1514daf32c1b424cc3d9ed7e38a08001e1ee5ce38f47da4f6577a9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9

Filesize
420B

MD5
a120bcc8a2ef83eaad5f99ef0f635f1a

SHA1
1e036c340bf6ca1964bbe3acc7de869b6c24516a

SHA256
5487ecd777e17fa76d297955fd19af35671fdbb54affdc9ebcec6d512f514ffa

SHA512
c28e8acf5b696f9c5d8dc34a408c921ede39048a0a534ef9a2ea5d81bc227bda2fefce42b0f6928116b2034e8e7028e398f0b89e5005ce26cdef728584101b22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
003b92b33b2eb97e6c1a0929121829b8

SHA1
6f18e96c7a2e07fb5a80acb3c9916748fd48827a

SHA256
8001f251d5932a62bfe17b0ba3686ce255ecf9adb95a06ecb954faa096be3e54

SHA512
18005c6c07475e6dd1ec310fe511353381cf0f15d086cf20dc6ed8825c872944185c767f80306e56fec9380804933aa37a8f12c720398b4b3b42cb216b41cf77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
051a939f60dced99602add88b5b71f58

SHA1
a71acd61be911ff6ff7e5a9e5965597c8c7c0765

SHA256
2cff121889a0a77f49cdc4564bdd1320cf588c9dcd36012dbc3669cf73015d10

SHA512
a9c72ed43b895089a9e036aba6da96213fedd2f05f0a69ae8d1fa07851ac8263e58af86c7103ce4b4f9cfe92f9c9d0a46085c066a54ce825ef53505fdb988d1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
19KB

MD5
23c881bd9ff24ec1e1c1388e1967d94d

SHA1
cf340b91392671812c5d68f70a32b8b0768f4c75

SHA256
60eb6975421a62b21622524ea781e64e7892294e65056ad6ca7766e1362b7156

SHA512
5694ab40278f68cd46d12a39fd7c7883cb1268b9896f3f09a8283db4a4070147f7970f18902885b119848f532d04f662fb44ab8ad5a7cd47a473578a692da7f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
62KB

MD5
c813a1b87f1651d642cdcad5fca7a7d8

SHA1
0e6628997674a7dfbeb321b59a6e829d0c2f4478

SHA256
df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

SHA512
af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
63KB

MD5
226541550a51911c375216f718493f65

SHA1
f6e608468401f9384cabdef45ca19e2afacc84bd

SHA256
caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

SHA512
2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
19KB

MD5
1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

SHA1
6dd8803e59949c985d6a9df2f26c833041a5178c

SHA256
af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

SHA512
b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
25KB

MD5
d458599825f1991b12515799ea5c21ef

SHA1
473f5e31b20136c270cb4c53b4ccdc8ea75b1afc

SHA256
095bf74a4d0ea0c8abbb03e1371ed4c85d26e49d7218796934b784a08138e90c

SHA512
dccc6fe06a766f706441638487424e5d11648b2fa549dfd0f2282d5d2dfa554a2e4190de01397402c49c4e394676afb8a3a3def150ea066fbe8b86d3a7bd7e3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
38KB

MD5
c7b82a286eac39164c0726b1749636f1

SHA1
dd949addbfa87f92c1692744b44441d60b52226d

SHA256
8bf222b1dd4668c4ffd9f9c5f5ab155c93ad11be678f37dd75b639f0ead474d0

SHA512
be7b1c64b0f429a54a743f0618ffbc8f44ede8bc514d59acd356e9fe9f682da50a2898b150f33d1de198e8bcf82899569325c587a0c2a7a57e57f728156036e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
20KB

MD5
0b17fd0bdcec9ca5b4ed99ccf5747f50

SHA1
003930a2232e9e12d2ca83e83570e0ffd3b7c94e

SHA256
c6e08c99de09f0e65e8dc2fae28b8a1709dd30276579e3bf39be70813f912f1d

SHA512
49c093af7533b8c64ad6a20f82b42ad373d0c788d55fa114a77cea92a80a4ce6f0efcad1b4bf66cb2631f1517de2920e94b8fc8cc5b30d45414d5286a1545c28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
37KB

MD5
9f394757279a4ff3ad2a3b668e96c107

SHA1
131eaef19e2953762922d0403a79c663474aa48f

SHA256
5144936a5db002ac68fcedc9c3336a0e0fb038c8dafbcf025f1641986d4193d4

SHA512
aa8b10b03b5986ce59c83b8de223b68cc21fd3163acd1834d288b54382ae5410125f45ab62cf52c12eb20e9d9b630b34fd08686426b2764680d9447d8b69684a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
18KB

MD5
abb8bd3b5a206b3a87c46a869c561e78

SHA1
baa9e7aa2be00a396b2631a8e46a41af73c389df

SHA256
a1eea8b5277e7e3bd6411970a0dfe1d6b44a0ae3b43ebf788f25d1544e3af6ed

SHA512
6032f78ada98afc075363ae2200e2ee0a07553630ed23a060061099c27a76ea52f114699da0572229eb5b88c8a45bfb7dd18b6033e860f1a5b9044f5224cc02f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
26KB

MD5
73fc3bb55f1d713d2ee7dcbe4286c9e2

SHA1
b0042453afe2410b9439a5e7be24a64e09cf2efa

SHA256
60b367b229f550b08fabc0c9bbe89d8f09acd04a146f01514d48e0d03884523f

SHA512
d2dc495291fd3529189457ab482532026c0134b23ff50aa4417c9c7ca11c588421b655602a448515f206fa4f1e52ee67538559062263b4470abd1eccf2a1e86b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
18KB

MD5
8bd66dfc42a1353c5e996cd88dc1501f

SHA1
dc779a25ab37913f3198eb6f8c4d89e2a05635a6

SHA256
ef8772f5b2cf54057e1cfb7cb2e61f09cbd20db5ee307133caf517831a5df839

SHA512
203a46b2d09da788614b86480d81769011c7d42e833fa33a19e99c86a987a3bd8755b89906b9fd0497a80a5cf27f1c5e795a66fe3d1c4a921667ec745ccf22f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
18KB

MD5
f1dceb6be9699ca70cc78d9f43796141

SHA1
6b80d6b7d9b342d7921eae12478fc90a611b9372

SHA256
5898782f74bbdeaa5b06f660874870e1d4216bb98a7f6d9eddfbc4f7ae97d66f

SHA512
b02b9eba24a42caea7d408e6e4ae7ad35c2d7f163fd754b7507fc39bea5d5649e54d44b002075a6a32fca4395619286e9fb36b61736c535a91fe2d9be79048de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
58KB

MD5
6c1e6f2d0367bebbd99c912e7304cc02

SHA1
698744e064572af2e974709e903c528649bbaf1d

SHA256
d33c23a0e26d8225eeba52a018b584bb7aca1211cdebfffe129e7eb6c0fe81d8

SHA512
ebb493bef015da8da5e533b7847b0a1c5a96aa1aeef6aed3319a5b006ed9f5ef973bea443eaf5364a2aaf1b60611a2427b4f4f1388f8a44fdd7a17338d03d64a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
40KB

MD5
e4c10b0ba1cbde0b44acfa479d2c44e3

SHA1
6ccc6dc424d638f4740dd5e1bf4b5b1b6a9df929

SHA256
65e36a17542b0b5a0bcf3991e55b4f5813e2ebf05713375236b7a200f83fa322

SHA512
f5785e4ba09d65b7d41a14f0fb22e6e7b2b5c0008961c5bc153a05d7771411dc70d602f9b5fcc3aa8a4635459650e9539221edf7e6c27a6d3fcf9148e1b33432

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
105KB

MD5
b8b23ac46d525ba307835e6e99e7db78

SHA1
26935a49afb51e235375deb9b20ce2e23ca2134c

SHA256
6934d9e0917335e04ff86155762c27fa4da8cc1f5262cb5087184827004525b6

SHA512
205fb09096bfb0045483f2cbfe2fc367aa0372f9a99c36a7d120676820f9f7a98851ee2d1e50919a042d50982c24b459a9c1b411933bf750a14a480e063cc7f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
53KB

MD5
2ee3f4b4a3c22470b572f727aa087b7e

SHA1
6fe80bf7c2178bd2d17154d9ae117a556956c170

SHA256
53d7e3962cad0b7f5575be02bd96bd27fcf7fb30ac5b4115bb950cf086f1a799

SHA512
b90ae8249108df7548b92af20fd93f926248b31aedf313ef802381df2587a6bba00025d6d99208ab228b8c0bb9b6559d8c5ec7fa37d19b7f47979f8eb4744146

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
87KB

MD5
65b0f915e780d51aa0bca6313a034f32

SHA1
3dd3659cfd5d3fe3adc95e447a0d23c214a3f580

SHA256
27f0d8282b7347ae6cd6d5a980d70020b68cace0fbe53ad32048f314a86d4f16

SHA512
e5af841fd4266710d181a114a10585428c1572eb0cd4538be765f9f76019a1f3ea20e594a7ee384d219a30a1d958c482f5b1920551235941eec1bcacd01e4b6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
16KB

MD5
5615a54ce197eef0d5acc920e829f66f

SHA1
7497dded1782987092e50cada10204af8b3b5869

SHA256
b0ba6d78aad79eaf1ae10f20ac61d592ad800095f6472cfac490411d4ab05e26

SHA512
216595fb60cc9cfa6fef6475a415825b24e87854f13f2ee4484b290ac4f3e77628f56f42cb215cd8ea3f70b10eebd9bc50edeb042634777074b49c129146ef6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
21KB

MD5
79c27d1effa10e477abac583311f31fc

SHA1
83c3f961bc8cc7836b8dafb7d788129b765697d3

SHA256
3741748fd850e4fc86c168bab8ec68389ad77056efd989f5030d8ed5fb4543d5

SHA512
cd8131939bb91837f8e2026cf49ac21a83f4278d332b15ab8f08410122e5d2d2a199bac6ce2ffd44c5a59ce6d3fcef0a1d8e9bdac730100e1cd68d418c9842a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

Filesize
24KB

MD5
db51ae38cfdd75ad1ff1d2bc124ff70f

SHA1
6f52bcad6f5a1281c98d24cde99a93f2ca1b98cd

SHA256
48f55428e972d20930a4a9d82c53456a67aa6e9ca8c56120d5737dd0334c8ae9

SHA512
d31ef7d374e0bf7f711fec870b4c1c0d9807a0888804fcb9510fc1ffa67bcff4c86ddcda7958a2335b5cd48cca7565a6e3e830b9ded590a77214b48b5a5bea0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
52KB

MD5
6b09f2fa47a1cd2ff030d8040fa23766

SHA1
72e7f993a0b69245173feb65fe7382446a0eafae

SHA256
c89d1b4be175befaef7d2a64a0c835eec2e6b70251c43992df334fb0c0abaa82

SHA512
30791a59f5ac52023efbdbe0acfcf4a88c18b7e54a3e18cfff946843083833492c6797c122f8055095979981619edf6b06b3fd7c5f3fdadfacdead381db959af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

Filesize
107KB

MD5
b54c83006e06db11b699891d1dd1987b

SHA1
6698f0464083d98e212bf07f26e44fd5669a590d

SHA256
b60cdd5acd34a0d108162b7f5afbb5a2bec529fbbbabe5b57ca6c00c87e3435a

SHA512
a6fdfccd22ea36c85325a5ee7f5ff68619d70449ae168f7c3704e5258b3e5b4e3b2c0521b94d4a91810f5468898335e9ea2efcd0fec89dacfdb06354f6a9581f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

Filesize
67KB

MD5
bcfda9afc202574572f0247968812014

SHA1
80f8af2d5d2f978a3969a56256aace20e893fb3f

SHA256
7c970cd163690addf4a69faf5aea65e7f083ca549f75a66d04a73cb793a00f91

SHA512
508ca6011abb2ec4345c3b80bd89979151fee0a0de851f69b7aa06e69c89f6d8c3b6144f2f4715112c896c5b8a3e3e9cd49b05c9b507602d7f0d6b10061b17bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

Filesize
20KB

MD5
077e3f0d3dddb018c1e71fd8e46d2244

SHA1
b50954ed5904b533372fe39b032e6a136ca75a7d

SHA256
12ea854aa2a6588219451d4af53fcd368e24b109085062deec4e5b891e059e82

SHA512
f9cb475d16d3e8dedc6ef2feaee4f9bad365a8bb992352163a0a9f4ff9e809bf895fc0ffd59375e60a44e5c5bd1f43217177fb44ffc0cc76cc85e45a612b9b3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

Filesize
20KB

MD5
eb419105b350daae11a93d02b44307e1

SHA1
6823925c86e418d21ac8215b1ffb2f9dffe2f751

SHA256
05837111baf6f2119f8147884202be998a6792033e25ce55a3550af91106a543

SHA512
c7f3b063e411f61fbc7b7e44962e70e46688d889b436f5baf240a5c7d27893b3dda57f0ac875a6e736d9010a90b0f515a493ac5374b82d70f14d2c38f4bc9e1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

Filesize
35KB

MD5
7c702451150c376ff54a34249bceb819

SHA1
3ab4dc2f57c0fd141456c1cbe24f112adf3710e2

SHA256
77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583

SHA512
9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\235242c3f3fc6961_0

Filesize
118KB

MD5
54d2b1c268d54a0aca185985338497b5

SHA1
18023f57e290bc1b9a712085be2fa435e77f679a

SHA256
705d02d3f397c20db509669bcc356550ae491327562fee0faa57e502d2d69e2c

SHA512
74d952ee8551c96da73829d750ef5b016c874c3ca7f31d2a5b97408418a96308eff6a4e7178196e08101e9ce1f065640bea42d91e2434b0f77843db89955f52d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b77cc7fdb69c2940_0

Filesize
318B

MD5
6a06d90b9ab9811844d6c3f52968fbaf

SHA1
27d280ea1666dd16630387c6a9cca8b130d7603c

SHA256
0b524320931ddfde31e740fb7bf05dbf4694f12c706156993ddd582ec118b2e0

SHA512
78aaad18565f50f50a741b21c8f3051473ae24e254f6f50f0680ec91d3707e978b7a5eb91ad20b484b4cd989920c9f907612914974fdf45698883febeb6e9d5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
3KB

MD5
dc89395e1ab3d39a0c155a48a0ddbf79

SHA1
b560e0fa05c1b8ba7de4537ba6934a1e6bc9b6b9

SHA256
84edfca64daca622752563b4acb915217a1aca261f4f81bdb4699e8437af91f9

SHA512
1a4e5815ba11af259494c8ebeda7ddb4bdbb571259247049bd040bb2abd1572c8142bae0f9f0737c05e5d6fd82eda2fccec5cf729b55fca919a81b38c9de1811

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
1bf853b64ebd54d84804d51b3bde1ec1

SHA1
b4986b46fccb1e360708ff2c893bd5627f2af08b

SHA256
38ba03a0dbd4f26a023d9b8496432d943ef5b4536bea2bffa0ca33018335017c

SHA512
8fa902fa0630ad37920c1aa5ddf49b80b67e10f3c7afbd0f5877d7e04b9bec803b34eb230ad263ef758a077e3bde24dceee68bb367cc85b89947996fc0644c47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
51b1830d742f64dbde5fd2b01c25f979

SHA1
fd5dc8ddc2faf34dd08e01e42e2cda1c75549457

SHA256
8aecdc3ed936e35f120314a90756b0ebdebe9db9f4fd703ad02f83d845a67d6d

SHA512
b7175c16cfbd0acddbc1aae38f3f3e8175c4e88cece1d2e2878117d4502af3379c841c3383910fa626c51d0d76b2fda3140239b60dc0eaae3c113269e37febff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
f97fe046a0aeda4eebb55ebaab280755

SHA1
d6a7ee458d6623917ea900ad9a129c326d0cf223

SHA256
86758a0c8de38f5e040bb22b73764ee7e7a13fe8186896e44e120708e8450208

SHA512
c9e7d8f623626a6c2067b9b90349bb191cfeafa606673f2301d224496372d5c222fe28b718e6225a5ad89f48bce988ee577751e46b041792b60d6546087a06d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
02957e2425cf8f1d0e93e6851e886ae4

SHA1
b605bf85f35781b7d50fc696c3c3e42341b5ddec

SHA256
da45caea520eb328a7b2eb42d118fa4592895a39d183028b9ce91dc31e798c61

SHA512
4a42d2eaf915eb5328cf1f67da3c15d55ef722b78cbacd03f14e8d3af4f7645f8e5ec5dca43f7e2a03919447ef9cd255983a8809a195cbb7d271d991ae694293

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
bd7faea68f4878d346482b7490fa9c2e

SHA1
439617f101ed493ac0b7a36f2e4f1a36a0de91d5

SHA256
7992fa5f804e0d7985a06f61fdc66099695b3a2dcfa736fd8a808752cb09e359

SHA512
530c6e2bba234d96e70c4ef9a0ef84c251010257f2632ac3966ca9ce8a6fd67ec17db0c38ca0f8ff58b660495ac9b82c750dc369ba9fc54a509b197b1854aa02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d888806660222bbe6e34c4a6b4b3cd94

SHA1
43c92d91b2d6cc1485657fb551a2dce5c72f996e

SHA256
bdac146f69324a9c381ce8867023dc57c8c30882a9625de5864d0a9bcf890210

SHA512
7f447aa80e732f2e2a7cfe02f4f2f578fdd34dfe8ad5fffc644b2008a85818ff50ae1d131b10e2a2f8b7763879319f545b8667ac9b10b37cda7fb05860093034

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
773abf4ddf66f565f4a0ec6369d5a797

SHA1
499c42ae484198281820b1b1b063957f4a2e70e2

SHA256
924f4fbe5ee380beb3761b193b20d197cbd7bd310778e94cd8d5d6c0d0b57eac

SHA512
a3fb28e3f1a2be4951239965e34557a64be1cb8d5b27d07170a86eb48e838a22aad6573a837a012b878da9e0e00cca4c3d17c6dae6eb3a513e5fff0303d73dbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
db61d9a9773f541ea42fa1e88d24f47c

SHA1
d8c212ecf49cac60dcb8a2208675907307f83581

SHA256
bbfa08748205f38551e5ae843e12bb2bb6786fe2c9a9912788221dc5500498fa

SHA512
0cc34863cc6ca0cd447c6938d7ad983b04a81eb50b9697d999635cdcdad2f56f379ad3cafb54d2fee5e18279a35b66a1ab2628ec6b3b81bf8bf6aa7eb257d911

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
09bd9b6aa98d487ac7650f7076897600

SHA1
8ccfc64fe313e00a66f37b27d1ca93d49f8a6e52

SHA256
a0a3b8a6192b3ba3980b0a57674bafa7b88e767102bb2159c45a20d6508c1022

SHA512
e8e756ad08273bea2d9b88d4b2c5ce977fa0f896e602c92204cff489d60e70119f6b4b02285a7bc326e3ef2242a95d63de15864bef7bead14b306595e086fa17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
2a3ee7c9cab2aeab6c5bda77ba9c002c

SHA1
e27798e9b9cc3abca76a3395c0ee59dc49263d71

SHA256
4fd597e20240f98e95a8f04f0fd65a9db922f99c761f9328a379b19f83add1fd

SHA512
7ec478310e6011bf284a468a6d36e91c63d24c0f69475e63f06bb061a49910174e9a3a912ea2d7c4c983904e08d280b55680009669481a552051f178a113909a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
7de4da8efa96dc7a5293443bab60dee7

SHA1
8da1343b2e494c9f349af763260bc55a666100d5

SHA256
9e767885ed19bae860c913c1d5bc6223b02566c32649d77b98fd72d9e20aac22

SHA512
600f4dc23909697151d001a1052e18becb9064c3b477765c32a835b8c21293baa622f0d0592acb91dd694819c5ad757f0202fb2d68dfacd5715991ef224bbb11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
137ef9eae6ecf0cd4553ce51f2544357

SHA1
205a60d951ab0a4491c995919e3368edc8cec6d1

SHA256
0d7dd232c3fa45426c3fccb0cb2e76629ca6efc101e6655613044603a3f9456e

SHA512
8f4b3c71ddb0a0d17a7ba833d4958c8516c3a2cedbba67556930a72831e8b6aa9ece15bb8fc51632926f904699f27e5f2729b077bdd1fdafe1eca655f8052cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
86c4bc7c391aeb4dbe4b5f7c8a57125c

SHA1
632d6e3777a9cf5618c356ac7cfdea194d608415

SHA256
fca317a79c41c16a264e82813987e64010839a1ed14755a9a9d66cc33419f0db

SHA512
b52a08faa4f4207f809dcf74523cdf2cde8bb541b6c011c8e79140944cc6e859e928086d68eb756816d493be96622281f38e56fe543e49f969419ef41c509891

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
51c0c3d527b6be3361d26f51eaea7a8c

SHA1
36f25409b8355f0200ab68782a11c00c92d1b483

SHA256
f3f2e5f45256216fe86203662f0b40829aa08cbde55bc5b4fcb1f3b7449f6f3e

SHA512
41c1852d578bbf832433d3cb7222d719d6761077c9b23aca06d0c2d05a4214b3a5365ce012fe9f390dbc36971798a542aef7cf061d1ac9f49d19c334487c999b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ba282b92badc825990b29b666e18e4fe

SHA1
775058014a41936b657fd393d07bc3fba2ff84fe

SHA256
4c73d445c5a5072ed392b9169682cc89101308c8a212a7521635fd8ee858a199

SHA512
e8a460a4e03bed6949bcb00f5d6981c7ab04b4fe667fb557f356e28483e286584e01eda0e1091d97e9f817469d8c3057b5a5f44af393fbc480d10294cdd3cc6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6d8997c603228b6bd0487ae1d1a81179

SHA1
7c09ba1f9ca395c5f2aa9843b96007af3888f15d

SHA256
bd64e1acba2431cd6210d8f65c8ba055feafa14a486b678907c89c689dc16bba

SHA512
b12511cc1ffe8afd4bdba199924ca14dd3314a04ec86a8c6a56e6d640e12104ac040fb5e2d7f12276d851f590ca88e7fe9e1b61294bb821360e3984979fd8224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a7ce08dde7757a6206bb944c0f3f9c49

SHA1
1f556a03e9538fb40829037f276a815a8ef4590a

SHA256
2794b31a502d5ececf9c2a28e5176d98396c759b0bbc404dc88b9ca6adc7c920

SHA512
996e82f84de369dec64ccee3e481b1aeb7ed8bee42594624b8688689ddd9f5b9b5964eb0d0c04b425a06aa10071e66e7d17e9d62ebfe26ce418b90671cdc7838

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4d4c317b7797aa60e718f348a5b25adb

SHA1
9d930b95b07597a06a368457501da8db793138c1

SHA256
6fafab470f133c894d3b9475ac2d7112ee0f4c0b1f1235794ba94f6e07a9483a

SHA512
9437bcd702fc3efabe5c5d2f7ddfaf3fe6ae979291a447c779241c7b0d4ba19183ad04c9496fb062c305015db5afac2433789995858a3c48aa186855f0a6fc8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9e1603edd721120aabc81fbd722676ff

SHA1
a070272792db72f5625f302ad52e80335096e05f

SHA256
5e9ffbc4b77224613540b08351c6f3e96485bafeb8db8fc2ce4a055b1c1fb8dd

SHA512
19fef5c861636d4c82b59729c6d83cb4ed52aad6b5af2608b3ee264b7e15471a5e3e6479ebf215030625715f3d6258ee09be9278f46d099414d57b9a539391a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
dbca1dffa2f5ce618760f477a63cad25

SHA1
0378131a48cf166cba600010b7ba0510b9abfe14

SHA256
31ac00e0d053ab5e0f11bc88e5b050e78e5ccf2acb3dedb1b105ac3c96cb827a

SHA512
d53d1b290a30d82aca6cc2d69dcee4edba7e4756949ab9e5f696bfa854bf0dae97012fabe44c04657e03d3decbe81beefc6969315bda8817bfcb31b05834f276

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
c4b853ff0e81b4738734a483bb7b7b47

SHA1
1dcf980ff30b1e20dba5c408bca9358adac0494b

SHA256
20805e089bfb9d74b80dcdc97bf29ce41650e541afc6fbcd1312e0a72d3244ca

SHA512
20cf55e8d73eab2018640ea0bf8f668882653448431f2752cce8c2bb5508febbf7966fdbfa8ffe65c2e0aea51c0d2a69f067c5c08d0049a0a8898e4631372dfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
272a3675e2431ea6065768ae8e955410

SHA1
1e28998e6bafeb50beea506b420ee5fceec1b2b1

SHA256
4d22770051065d0cf01cc697debcb4663c23ea95acaebff806da838d81f78125

SHA512
be30e37ba271fe3c2eb31e959e6afd58f7f3aad09c5fd09b1c7fbd703899ad33d84e5435939a1ee23d9fb82a8e802a53fa90df64d5fcb28489bad0d48a8d9422

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
5fff9974e7f3a332f32ce521fcdb3f47

SHA1
ffebe77d673df1fcc55a60a4e62dd2548487a80a

SHA256
8bbcbc61226f21c6872e7f929583f6f4cffde1e5e6d61479ac1883d112cdd861

SHA512
5f79fd6ade8c5df072d6124a16f0dd87739554759dd6440c70a2fdaf800cd28df2d831b98238a3477f0a170508cbfadbca616572470a8b58b9d2a510f4c0f8d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7be4ffd167d97639dfcf6ac96122bef9

SHA1
75063883d65db7420f9d3ca038b6efd3e45f76bb

SHA256
5f9f161cfa5954ed19ed5c21c40d12a98f9e7289e586960102240cd909210c44

SHA512
9941bbf54110b22ea2702186592a79cb4a2d37eb956ff3612dbec967d5aa2062bfcbe563c5e3b6f1b73e673999e18350602ba4e0f2c3f157cc5cd115ff250060

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ae7ccfdb541b214a27eba8167f9275fe

SHA1
174e9fd78bdc70d8d68ebe061e8864b340822b7f

SHA256
557ca18ecbc40bcf840d2bdd2aaa5c02912ad973df1dad82f18934752ea3e5cc

SHA512
12e1845b95a19b24e40e52504af56d0c75f93dbfafda6f283c213e85c52c47910236208b68ae3f2f322a5cf93ee98bc790984b18b4bf2a626174f6863f3cce54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
15aaa8e496e73c8fc6297f91b50b8f60

SHA1
94255ad9541445c16cd85fb281b483957a0bfe68

SHA256
9ce89ccf48a671de13382e8306cfad772777ec7ed960e4d5a99f42380dc5a84e

SHA512
f92e9d1344298810bef17f16b10238234320b1826afe4ce03e68a12a5239de0391437485fcf737b723f8011df31151f9de07cf7ace930c63efd825e7da35d466

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0601c8b321b6fe60a9c8383e7d9a7118

SHA1
4e5bfe1c04df59d6040d6529484779aa647b1ff3

SHA256
059c57fd1a7967c3940d6fe1ce705a1dac76a6d34041f65b672549c3e34a52d3

SHA512
6a5e4211a750375bb1c73c14a820e2869dea1d294421c6e625286da236df68738652d11b1a9f412b0500724d0fca69b45fdafa505de5c0a07c03b4f5b3129103

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
82e4d85dc6176cfed8b0c3a279e7d86b

SHA1
8b1a157ad1faa1acd3c6c4bbfa229f5719d87c69

SHA256
a2cd76887f2ee22a32f2ed3deaa38e42115eae35aa6fb90666dafda1d4d5b7b9

SHA512
ee40fef92aed5c9e78504a3c7b9ad3c3d82d399df88a291c15c9600481c111354618f6c3a49801cbdec7c6c041beccd5b2fc0e1b18e6a64d158985606e20baca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
ba56070815b12167209818cdff277015

SHA1
b7de43137d96c3007ae729c6ea6418793dde591f

SHA256
bdcf5ab65e4ef5f4048dd6e7ccba344585acb5377d0fed39ef220c1f3446603e

SHA512
262ed7c36b1e5adcc9eabc9c96f373b707277763385fb45ed416081854d248332ec8750d54d006b20adaa8716763d3965c65ab984ac6ce006fadc41fc85121aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
f022c8b36738fc38d60f3b7e3a280d0a

SHA1
404d9fc63a86094f74cf8894cff7ab2daed6257e

SHA256
0bfcb929865b836ed5199241128071e4f4e6f1d6cf39d1ad608b57c4901c1dc0

SHA512
e1ab963cfbe9fc1ce158f321d2771dcc746bbc3bde3e9796750e6de7518ed69c1a8289f6df0e01e11e239306edccebd423ceac28751cda2b592837302d5a360f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
da291b862d1c130e8e3d453a1c1efb76

SHA1
cd5d26e483e44ec5a0ee56e7c6cdb9b01cf72509

SHA256
5e162743e527060475374fca172891c649b289a1ad2a4310fa838fd06f7e2cc9

SHA512
073393de67f93bcc41c0176d06606e62cba5235a65b53d4b5e9a328f2962cad80379827e46c8ce17a064faf79e699a8becb2bb958e2145e391d20672f2eef571

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d3c885e93a6f5bfa9c664d4df1cc0a2f

SHA1
af2513a5380301216ad22ba8a13a9bbfbbdf197c

SHA256
7a3434e68ed40f483a65f1f599e7d444ed687fdf75db9ecdd31b4955350245fc

SHA512
6751bc99791177f5d5f1849b197b13bc192dca1a8a241cc36c16aa810f0640e2d676e9b1c6b3880567c1eb6cb0f5794551eda106733e4319127cc436b2f8fd5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
6db8b379a2000f2d9fe48358cbea634b

SHA1
c829d98f437d80f57ff829fd9f40f361e23ff148

SHA256
fe9636159bd543412d78d7996efbaf778aaebe743f5c658143015af5d2b7c848

SHA512
d27b8ca69349d8fe0ecdbc6ae969c22be9cacbb3a4a2adde5e43fab0e916248b8cffe16657a302ff37e4c82d496dc2ae26071a4465e54722046fd74f69954c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
41626e634192fa26a7f923194b5635fa

SHA1
e537779098be52b62f373347dc483b4038aa11d7

SHA256
3a18b0551312fd14a32f4655bec748f414c797c99d7e2c367d928cc1297bc325

SHA512
66b548a517c7b80f83c2ff6114b43b71a64f8953c2012c74296560a9ca2bf36d427ad7772bfd3e9d53e4acfcf710a8cdfee1a94e80559146f3df26b3bbe249b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
fe5164928fb079538f8c084333ac6e2b

SHA1
1fe680302a907e0d525a82c664ff3b72b5d1f8b1

SHA256
9ab5edeb4e25eaa20bd64f2748d531e211b5ba4d591b5f55c5a7ce0e49cb38cf

SHA512
cd4886d121b05df9d324fbaf53275d3a4e25c831078ac1c9ca1a67388df075e46ed8191c75fe85e37fe14c2d9e88db1b83890875c4fd3bb2b29f03fae3c1d22e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
676fd0ca53cd18027560adab50781ff2

SHA1
7cddbb878870cc292ed8c4337999b9819999cef5

SHA256
5aee21d3d99cef21be1f514d63429882a9f5e4c37218192712b7ff44adbca6ae

SHA512
a8bf613a310e8854970e1ad47c6144535fb0c7f800c048d05cf93d61ce5694353ab003201dee10372e21a37e2404bd953a00354e0bb01832c3f49d678f5fe763

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
1fc3f6d3685273296dfce490490c67fc

SHA1
8558f5c3cc495eb1ba2dcbc5c6c6db227cde0b14

SHA256
0d82dad6ec412091e85fdae190a051a6fe396fdbef71c63007d11e4ab1964841

SHA512
f73b1fe5832d397b6c6fc8004cdcce306a185b72e513f813e9d0796f8a0122fcd6917c2337b8b239473cef0d70bde8ab7c1aee48f5b51930f1d5cb200606f850

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
efcaf92e0ff4cc6d7b7867cbc937a481

SHA1
24caaff930b110f237021d8513275e38ded80984

SHA256
4a2c5f9d1d495b794b6295c35b3235d99feefe65347ff4ae32a05df7944ab463

SHA512
26e1aa400b695cbd91551e8207f0dffaf252997724b1efeab8950ed223dd1865ad5b48853338c410843ab85e83f8c15c5f4da448288ee38b24197ea0adb9f9d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d74e26213add916268ab128fefb964af

SHA1
4941ebbd7b44dfb0d57183e03667fcf3e586e8f3

SHA256
cfcbae60ec3a10aa4db398b2b5b808a3412a35f383a10acc1b1b4f159cea513e

SHA512
e29bf80996a8b90444897e87147a5587a98f50b9920508c369441c85fa71f1e8ff5e164a4705ad1b3a7c1c5de765f4dd97717a98f3ed0475acaab78872f44b05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
50e50bf993f77621a253a9db25b580de

SHA1
e3bfbe10161dbefc0f88b595b7a342649d81a7ae

SHA256
f45286450f9c76bd4aa98471d5e95ddd58428f0eec52abc1eeacdc85ba3e9b96

SHA512
99f53be0764226fea5fed8cb5f5d3fca16c0350f62ab6538cbb817f304cdf96146cf222c0af41b3c8faa3a3fb01e8199edefd0db5888eece016bcbedb1ab9689

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b847d7f4f2a5750822d45ca4674475d5

SHA1
f51fc020650d6c2cb9b83f70c98de36a167a55c9

SHA256
a71c20b0298535b4bfb3d568a7434e154a5cde6e50419249adf6b2903ea03017

SHA512
92469382eca51506cc66a99c2ec7eb75ef73ba960725f3bba5a41d25d23579181389fa09b8bb9df776e01582d4babd41bbbf45672927c1e2509a140cc482a47f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cf94.TMP

Filesize
539B

MD5
6ac9b1c3098da4678fed2152287da44d

SHA1
55b531c1b3872f21e9447b974c97ac319f88c3db

SHA256
00242dff52a4efafbf0dfbc59aab8b9c93358e59040abd76ce6df0fe2b1e59df

SHA512
6662db9eee5059c816ef7476e417660519368f58af0367dd048f6b3261ac223bb9dafafc75c876daafb07c7aafbf80dc55a63bfae07a2b557b7950377096c253

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
da03fea90a2f9e80df345d0cddfa0d94

SHA1
c9b400782b8c84f67e3a15c36ef6f179aa344900

SHA256
fdfd25103646e535e781925c9081bed78f58d0adaa784704a3a1a2508a06de65

SHA512
1a0576aed364e28f68dfadc87cbe59be6854106bc4b6138a318d642d8082aa4296eaaffa95d59c7ccf27206d0c3e67d06ff5b0ca029c2f84b46a7271e4d4e8b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
99b845168c4b26a0cc05e06cb7404bc9

SHA1
84bc6f6a84a9a9e9289896503a0de9b0887b4d88

SHA256
fa41b9b59e64e90961df09828b412c2af0700f6f14461062848eea461edadeb1

SHA512
d0ebd7be501d223b867fd262cebdcddf6c34f6edff65c807417b6b274ff048dad3370e735454b671965ba6742d04df58ca0ff681345dd481b060278f8c158dca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
42506a8fbe79862d8c5ca8b8add4cf0b

SHA1
9a10cd770104d7568712c23528c83f3719fba4b8

SHA256
2b839fe449022f903c85026cb19c9744808a014112d6b4c9d835574e4d50ec1f

SHA512
f80a5b59f24bf218fd7d078eeb73e3471887330c164d01e3e5648b25fd8827df7cc3a8b91b0daf6cb1006e0a0940187f16c1278d685736878ea44fc3a5c2e107

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3bbfab933d4a1687a17907a691cdb77e

SHA1
2fe2c3fd0b6a7cc7cbd405ae2672b6458f35aa53

SHA256
da4a8389ce87d3d8d9fb4c7e45fcfb39d7a9c22ea06c3a44490b14e560a503fb

SHA512
f0f118f68916b00479eeb85141284c17f493eb335493d5d3273d766b430b1ecff5cb13cdb1f131e53ff170473eba5c0f62bdc1731a699d14dd3d3dfc11b26d28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fd51e67f531b7d24367c02d2e7718ca0

SHA1
d7f31d311b5c26ebc684639f68bd2446006ca89b

SHA256
9885375f29a6a1ea6634c637045eec9606a4b539bbfb22af82b7311b82eaf5b5

SHA512
02c6599d6f9349eef1e5d5e241d3414bbe5664212e1c120877e40ee071bf49ad77810db2fad0b2f5c2173d3b63a8c5dbaa4d45369f812898016a8b1720654b0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7048f98bbf42b3c427cf022f277e3426

SHA1
d336fcad0e6d820b788ad11769dfc494511d526f

SHA256
64b2759db7a071d2d70c419b8403abfd8708d1db9bda03aeb4437cad81562e80

SHA512
662946befe696dddf3a017bff6075034c3ab8738b17e85f7265ecf8e7ab9bfc15c9884bf72da097fbe7b8f67c71f5ab793cc16a3024d4add999c60d89e0984cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
32e3b603cb752ad7ac2b35d8c55f1e0c

SHA1
d080c0c11f464b487008b5d8c4051c40c39a6437

SHA256
2a2218627c39f8280d290f1c140e2cfdb8d98ea7587e953f5065184d1cae2682

SHA512
78fca4971bb5ad49a7bd35e3e5bb2fd05458bd6571a0342d958adb7fb2dba6a550cce81e4080976a557976f95350f72129ab2ce9ca607da78c0c5628b43d26b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e95e84e3094811be08e71afafa4ac65f

SHA1
604ae706f2fe83c6de70e5a81098544b38340517

SHA256
06b433fe54cf9e9734a89f50d144d662a44ed14068d2bbac95be2e3b64989678

SHA512
59fc7364a0fa958caf75ae8ef4bdb950ec10c2ce9e22886bc99b021fb7d055bf4a08f6049549ab884fc570eadd8d577fe8336b93c1cdba6fc81a539424daee42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Word.CampaignStates.json

Filesize
21B

MD5
f1b59332b953b3c99b3c95a44249c0d2

SHA1
1b16a2ca32bf8481e18ff8b7365229b598908991

SHA256
138e49660d259061d8152137abd8829acdfb78b69179890beb489fe3ffe23e0c

SHA512
3c1f99ecc394df3741be875fbe8d95e249d1d9ac220805794a22caf81620d5fdd3cce19260d94c0829b3160b28a2b4042e46b56398e60f72134e49254e9679a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Word.GovernedChannelStates.json

Filesize
417B

MD5
c56ff60fbd601e84edd5a0ff1010d584

SHA1
342abb130dabeacde1d8ced806d67a3aef00a749

SHA256
200e8cc8dd12e22c9720be73092eafb620435d4569dbdcdba9404ace2aa4343c

SHA512
acd2054fddb33b55b58b870edd4eb6a3cdd3131dfe6139cb3d27054ac2b2a460694c9be9c2a1da0f85606e95e7f393cf16868b6c654e78a664799bc3418da86e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Word.Settings.json

Filesize
87B

MD5
e4e83f8123e9740b8aa3c3dfa77c1c04

SHA1
5281eae96efde7b0e16a1d977f005f0d3bd7aad0

SHA256
6034f27b0823b2a6a76fe296e851939fd05324d0af9d55f249c79af118b0eb31

SHA512
bd6b33fd2bbce4a46991bc0d877695d16f7e60b1959a0defc79b627e569e5c6cac7b4ad4e3e1d8389a08584602a51cf84d44cf247f03beb95f7d307fbba12bb9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\Floodgate\Word.SurveyHistoryStats.json

Filesize
14B

MD5
6ca4960355e4951c72aa5f6364e459d5

SHA1
2fd90b4ec32804dff7a41b6e63c8b0a40b592113

SHA256
88301f0b7e96132a2699a8bce47d120855c7f0a37054540019e3204d6bcbaba3

SHA512
8544cd778717788b7484faf2001f463320a357db63cb72715c1395ef19d32eec4278bab07f15de3f4fed6af7e4f96c41908a0c45be94d5cdd8121877eccf310d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\E7181A63-EF66-426B-A879-D579F996ABCA

Filesize
177KB

MD5
f65b9a792d4400853c176ddccd8e4dd9

SHA1
d926705c4afe2774adb47b9ffd4bc78788443a56

SHA256
4ae46b9114d0a1750f954bd988f8baba251959ffa0260b5a1b6309966016b9b3

SHA512
c05d2327f38604c5b2375ce92404e55f990ba8f56a03b3fb806bd03679171f38b412e4148c703b43be99c6718d85044f4df3ef83cd4e4ca499d75e4283c70c29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml

Filesize
331KB

MD5
93b86dbf4b144be5b008e1cf103fc857

SHA1
65b7222eb6dc14a104558d62e28d4441838f1a14

SHA256
fbcc86f3fee25158e3445c60f44ed208ea64fa3c2cbd175fe07c689a330a2b1f

SHA512
8b3db391afafe1782937bf28caca0e5847b536bf0f846f098360a8ce59297f1a4793b96fbea1264fe19775daae4d9e5727a3f4295e82c8257ca0f705152c95bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db

Filesize
24KB

MD5
8665de22b67e46648a5a147c1ed296ca

SHA1
b289a96fee9fa77dd8e045ae8fd161debd376f48

SHA256
b5cbae5c48721295a51896f05abd4c9566be7941cda7b8c2aecb762e6e94425f

SHA512
bb03ea9347d302abf3b6fece055cdae0ad2d7c074e8517f230a90233f628e5803928b9ba7ba79c343e58dacb3e7a6fc16b94690a5ab0c71303959654a18bb5da

Download Submit
C:\Users\Admin\AppData\Local\Temp\TCD863.tmp\gb.xsl

Filesize
262KB

MD5
51d32ee5bc7ab811041f799652d26e04

SHA1
412193006aa3ef19e0a57e16acf86b830993024a

SHA256
6230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97

SHA512
5fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7-zip.chm

Filesize
110KB

MD5
e8b5cf54c6bf22492b373715b8b59dc0

SHA1
6f77c6484340beca444aedcb3a8411798922ba27

SHA256
4f5c2170efc2b6af63873aadfed45e398ba73b414a87ee1e95c4a3af3d5c7ec3

SHA512
4813a9bbe77eab0c7f9f65eb14f0b5e0808a0fa95ce47d9b2b34fead09fa2e03d0e0eaa4ac14bb5691b9c53b800c660f38715d058aa182ba2cef5561b786d629

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7-zip.dll

Filesize
91KB

MD5
8b8670df5ccd10d7f43a71c9827ad659

SHA1
e8cd304f4c796ea9d415c34070c347929d7df5a7

SHA256
73b61b8a6e58fbfa99d7659e4bd3e4fcabeb98f12039c93eea54e09687d98498

SHA512
22f6f9fb9132e3fd933f8a30423913cc0e9b095c46067537a7e869675210e4f26d13520874c9ac381df09e363794efa6397ddaeb2503120febab7f95f57ea3e2

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7-zip32.dll

Filesize
61KB

MD5
ca7c01946958ec1d40df672c801bfe47

SHA1
d43f9b8089f58d6af585e2834729ba75bc8c037e

SHA256
589dfb6f38c6e636cd32d268aaad0936bbb812927b283f65fb5e594ea2be2afb

SHA512
945020533db9d5b7e6bfcf430499f9d88573a1765f4369b01b3612ff96040e05947fba6f02898e90a82b3820b8e441b6d31ad0d3f11741a16a8e727ee948f08d

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7z.dll

Filesize
1.1MB

MD5
0dce103b0102adec3279797665b7a4ae

SHA1
c121392bab6dba8d04bee89c6b526e8e67650cc8

SHA256
3db62076e5fcc897ff29da47fe4029900a4ad696b395b6fa96acff1229444c1d

SHA512
20f0f02097694579ac8794d56411fbe2d97c47d37794cb52afdabc9956c0452e8a3bb273ed34e463f31927e29e7e41c0fddb82fbbe688dd39c4113c00ec91bc9

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7z.exe

Filesize
324KB

MD5
7187ae605f4dce14bb23ea2623956335

SHA1
f7c1df33b875c98f41dcde24117d89d42d25b7ce

SHA256
9e2631c19b243c28b0980607ced2540e9447b1166572483475547c1a9dd4ac0e

SHA512
f64522e2fb6bb61884fe53c34e79b355efb9ec33c02b2cd67d729af7d763e7b3873a5c7ce6ac7bb4567e6bcf8c70cadbc66f511e8bb151ab05096a832032bc8f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7z.sfx

Filesize
210KB

MD5
2b8abacd9d1134f0dfdbdcbdd4055f10

SHA1
8ab145661ceb8a7da0a9737286e6731386945f36

SHA256
3af679ae9456a73095bea74ce4238b4a2f3793c261532f3818c5ee6b844bf2fa

SHA512
c5579418a19058c5113ef779201fb3dcde9dac9fce69b7fdbae54c00056fce5dbe1065255a41647be99cd206860ada003be4593b4b1e8d151ea516e1f8f65328

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7zCon.sfx

Filesize
189KB

MD5
1f175fcae0c2c4b2f35999e1c6a63039

SHA1
101783b9384eb53d6710533aa4747923146c0916

SHA256
b762f2a075698dca10a8b7e62c6711b4db137228afb5eb2d2e5df35fbf84efe3

SHA512
a885d43ee6787779bafd50f0cbfc95cbb630752c6e8cdbae548e591a523e52c2ceadc5b7a4ae5e234c75d8e5a703368a4907a6886e8a69a9b0bea340a4b60439

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7zFM.exe

Filesize
566KB

MD5
3e53089476409b289a2c8454c792eeaa

SHA1
9a0a92c55d0562173417ae880f05493f92d03084

SHA256
f9e982bc418a0895effcd0d3deca22f9d0bf8038ed14a914a86c05fbd4275d66

SHA512
f199bf971e50635bdd9b8db61ac1de148ce010dd00c46dcfcf68dfaac30781eb8b9c471088de45cb05c157a8bdb56e7c5791c0218d088da6be7e503e2d39045f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\7zG.exe

Filesize
409KB

MD5
921d7f84fa4b498d79952e1ff0cb42a2

SHA1
5204ee81e11ee45f01c03eff1445b1bc70ee3b4d

SHA256
24073da4e8b38e21144ec93ad8aced81a851a39ebce05538edc99c1c5947dad4

SHA512
566bc44d1dab011e1d540b6a08f08d25c7e9d149dcb0868f002c4d5e6da3859c0167c2227d273b7ca933bd86c96a00f05ca0df46e63d7e2c510514f910f63627

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\History.txt

Filesize
53KB

MD5
d68c7d03873eb191f46bcc0cb6a89664

SHA1
2467e3044a96ee2bfc2720e7e0d6e68d5d1c5837

SHA256
5355372cad5a5142bc7a0991bd84dbb751bf65a4c272e9c7eddf48cee79dd24b

SHA512
c4d25238c9a934c13c68fd4b10794cd0000535baa80fe3b74f1f742fd5227c3f65d13f345dce8600a8d7dafc0b85e0025a4c315305fba77b669f65524a29c6e4

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\af.txt

Filesize
5KB

MD5
fbbe51acb879b525cc6b19d386697924

SHA1
a030539bfe976e02f9540993e746c35e288834cd

SHA256
3793fb69ee9fd958cf15a272b1ed54e4b3d75592836ebcd085dc0e7b1400d1cb

SHA512
3fee44a909cad9b620fdd850a31d70e762a834524d8ed61490e243c8df40eaebd5b8e0ee5243efd924714e49376eaa024b8ed4bc70b1b7d50d5c6695b03f12be

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\an.txt

Filesize
7KB

MD5
bf8564b2dad5d2506887f87aee169a0a

SHA1
e2d6b4cf90b90e7e1c779dd16cbef4c787cbd7cf

SHA256
0e8dd119dfa6c6c1b3aca993715092cdf1560947871092876d309dbc1940a14a

SHA512
d3924c9397dc998577dd8cb18cc3ea37360257d4f62dd0c1d25b4d4bf817e229768e351d7be0831c53c6c9c56593546e21fd044cf7988e762fb0a04cd2d4ec81

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ar.txt

Filesize
12KB

MD5
1c45e6a6ecb3b71a7316c466b6a77c1c

SHA1
04bf837911fa31ffca8e034158714b47f6489d38

SHA256
972261b53289de2bd8a65e787a6e7cd6defc2b5f7e344128f2fe0492ed30ccf1

SHA512
5358bb2346c9f23318492b5e7d208e37a703c70d62014426eadd2dd8cda0b91c9d9c2a62eafe0137faefb38bf727fd4d5d8dc18394784ccae75ae9550558e193

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ast.txt

Filesize
5KB

MD5
1f86ae235bc747a279c9e9ec72675ce4

SHA1
4a67757fa535978021d794d8d2392d3028350686

SHA256
8fcd1b8ce6fed05f406c4b81aea821132800bc494d3fd6f42a4258a81f8998ec

SHA512
216500b5451b84a4882729307b6ea952688550e109a0afbb0d67db0f882f642e5d9e8dd2fc86591c4b2d49658fc7434294cadcd1d2322119fbd1f46190efb7e5

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\az.txt

Filesize
9KB

MD5
81b732a8b4206fb747bfbfe524dde192

SHA1
4d596b597cf25ff8d8b43708e148db188af18ef9

SHA256
caec460e73bd0403c2bcde7e773459bea9112d1bfacbe413d4f21e51a5762ba6

SHA512
8667bff18a26fe5b892ecfdc8d9c78ecc5659b42c482e1f9e6eb09f7cf5e825584851cd4e9a00f5c62d3096d24cc9664f8223c036a4f2f6e9c568269b2fbb956

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ba.txt

Filesize
10KB

MD5
d83b65ac086da0c94d6eb57bee669c2b

SHA1
6210f62d41d44cc280f44b39accf10da28424b75

SHA256
2901b54f7621c95429658cb4edb28abd0cb5b6e257c7d9a364fc468a8b86baae

SHA512
56c7ecb4223103d81ffd11c214cceac20e7770b82fbc78a5e82e6dd9d589cc319d4689bb6d9027e5d272097e1b33ddba27a8414fcbc29f9ef68329e343004222

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\be.txt

Filesize
11KB

MD5
3c21135144ac7452e7db66f0214f9d68

SHA1
b1ec0589d769eab5e4e8f0f8c21b157ef5ebb47d

SHA256
d095879b8bbc67a1c9875c5e9896942bacf730bd76155c06105544408068c59e

SHA512
0446a0e2570a1f360fd8700fd4c869c7e2dbb9476bbdec2526a53844074c79691542b91455343c50941b8a6d5e02a58ee6aa539cc4c4ae9cf000b4034ef663e2

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\bg.txt

Filesize
12KB

MD5
833afb4f88fdb5f48245c9b65577dc19

SHA1
1a6e013226be42cd2d2872b1e6e5747fab65fe8a

SHA256
4dcabcc8ab8069db79143e4c62b6b76d2cf42666a09389eacfc35074b61779e3

SHA512
05bbc7abcfd0a0b7c3305c860b6372871cf3927bbe1790351485a315166e4cbdf8d38d63e01b677bdba251ce52da655f20b2d44b997d116a1794c7b3eb61ef31

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\bn.txt

Filesize
14KB

MD5
d0e788f64268d15b4391f052b1f4b18a

SHA1
2fd8e0a9dd22a729d578536d560354c944c7c93e

SHA256
216cc780e371dc318c8b15b84de8a5ec0e28f712b3109a991c8a09cddaa2a81a

SHA512
d50ea673018472c17db44b315f4c343a2924a2eaa95c668d1160aa3830533ca37cc13c2067911a0756f1be8c41df45669abe083759dcb9436f98e90cbb6ac8bf

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\br.txt

Filesize
5KB

MD5
c2eb67d788756be5ecaa0a8cfb3d1e0b

SHA1
0636e7fba4ec0fd12f93347451b5690c7b0bf788

SHA256
0f6bf6749c42c844980db32ee56cadc987ce245ef650bc7d626d56468a7cbe6a

SHA512
0f98317078723d35553f8252ff9e37a997c90276fbb18359247aa257fc7630b7f6a0c6f6b02ac0a06afd33cca56c77a01494e04fc1a4ce43ded0d40f9f18dd42

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ca.txt

Filesize
9KB

MD5
1657720023a267b5b625de17bf292299

SHA1
0045dfafafb9c9058f7d0d6a6c382959c5a67fe0

SHA256
ed8748da8fa99db775ff621d3e801e2830e6c04da42c0b701095580191a700a6

SHA512
e7998f6484370e53db9cdc80cd55070e408aa93161fa59e48c6e2b26462d6d3eb774c011212840ef1eb821a5ba067b6706cd4ca2be00619aecd24a11e6ca136f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\co.txt

Filesize
10KB

MD5
c76b8c615c11469d5f6dff0abf39171e

SHA1
1906cd1ce4712d79d129fcf32fd2ff87368081ea

SHA256
5470b36a4a715deca06035333a01e0a2899fce1cf6c29a6ece4c35cfcc843cfd

SHA512
c4920988538810b9501c6790a2ed4d4e82500134244b8ae1371f3025bffbc7e6cc73fe1a9839aa2a0d020f2b9cbf0fd09ec99354cb2a65c3d08af519bde38384

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\cs.txt

Filesize
8KB

MD5
641b90f9aedfc68486d0d20b40f7eca6

SHA1
0a683dd844534905336784fadd80498afe26f6fa

SHA256
87a4b9369fd51d76c9032c0e65c3c6221659e086798829072785be589e55b839

SHA512
567cb9f6c31d196a171e5a9c2726a39a9b3d351ac92d4acf8624213a68c9033acc31afaaad82aa9f5359f32d3a0ca40522e151b8370d553a41abeb6a6e097078

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\cy.txt

Filesize
5KB

MD5
0f5662a68805d859f871edc07e766a57

SHA1
aa4c9c1271fd5ffdc6076ddfe157d9fb8e0018b8

SHA256
931de741a6c8f1348a946623776fe36c55dd2fc384c7b1478225f7467853199e

SHA512
cb8c072a8f6c782b678845e156493ac3b2e29a0821e2939aa5119f28289c0e70dd70eb3f7e4832bdb5e8ac1f486a3d7900ec013a637ed117320b96740f37a8f1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\da.txt

Filesize
8KB

MD5
d8aba2da47c1031832957b75a6524737

SHA1
b83069ef9f7a08f18804ae966b8d18657e2907cd

SHA256
f65026ae33d4302a7ef06a856f6f062c9730100f5a87d5c00fb3feaf5fcd5805

SHA512
82b5f4ab8e3e2310a98be87b5cf2cbf04b7aeae1798cd69529325ee74add40bdca38eda865a821f66436906d4f3224004f690cf406b532e116475d2b2424b570

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\de.txt

Filesize
9KB

MD5
40ae22f5bcbeab6f622771562d584f2b

SHA1
4eaa551055ccfa0076766b7bdf111de9dbcc1c82

SHA256
06e5265a2b30807296480dc0b0d3a27e41f1381d61229e4eb239c4930d14a43e

SHA512
581a94dc12fe48aebfd88453351697aed9de5b1decf4c5dd53cf4db38d50727d3b887498f0bee6bd532cfbdc8af7bc01fc8d58ce0c3f6fac235bc6ff3f843125

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\el.txt

Filesize
16KB

MD5
812df218dae08f9f883a7455015707b2

SHA1
6e7d7d1c8e783b9b913f44df515f4d376d3502c4

SHA256
cf90a21c69a13e0d674b6b74e2904f7d9d3bee594d89862155d94105311f47a7

SHA512
51c3c6151b47fa5e3968604cc2385c5d0984ccb96b8f92982bd28440786e1b99826aa70ae1232465a3469ddb6c50d13a241b6a979387eb47bff013953db1ed07

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\en.ttt

Filesize
7KB

MD5
8d7264236adca0407fa61d942b7e575e

SHA1
21861f62751d2e3d452146ba139e758f20da6f6c

SHA256
628366cbe1964564f8bcd0732abfe08cc3f9a86fe761e41abb41f84f7b6ba00a

SHA512
74ab8e70fc3a685ae715368df90e9f6b9630e6dc1091436c244ad486db3faf25bc59ac1b89f90e935e7eb2c6766e19165032fc24824ad8af932ad95a8a34172b

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\eo.txt

Filesize
5KB

MD5
53bc9385d0ea9e7e601bbe9b2cd5e3cf

SHA1
2ad5323c3f8340027a19ca63c46072cff56505f2

SHA256
d598733b1dd7fa37fd156348bc2bae5549dbd6c709125d1d40f43eff6bec2445

SHA512
354c841c73662b2529fba4f10b802102b9f2d87446c7e68f02c96a19265621c250fc0fbf27ca746d27da7d06d56e1d6f2a7ff6f990680afd5290778d7ea28ab4

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\es.txt

Filesize
9KB

MD5
5a449308a0176d6401181bef4af13765

SHA1
9d8bc3e801bcfb43c7dbfab94ab91a4079a2070f

SHA256
7dddae25296f14c1f45ac032d9c950c3a8d39a41489f9d2b06000edcfa7a6660

SHA512
2aebd25219b12d88bdf7a4a1b90b6b13b4ed5d4215e15d2316494c56b7d696eeb3252478200bcf0d84160d11979f5a71c72ca110dd3e28e901cfdb13255c45b0

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\et.txt

Filesize
7KB

MD5
54d610c174514d0f60b382249885963c

SHA1
4d2c22ba3da557a3e8641f8d5388123d96c8259f

SHA256
d3fc7e1dd6f0486c99997b75d9d8c5592da6cfb9b89c3ec4f59e7bc5826b3456

SHA512
80d51ce4dafa9967ddfa7a8bdf4f62351fa085a7059bc63f9427e0a5e70dc21cb917057f1a41b5e1a218138141dedcadf02e18a0f028ebee8316aaf4ad280d59

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\eu.txt

Filesize
8KB

MD5
29ec04893f6b2c9058a8f1e0beaf9081

SHA1
8e7b5a0ec24153aa7be02f0395c003df02cf6a09

SHA256
536d93ca6d7c96d203b51333c4e78de2429f78d32cc321461589626759c84127

SHA512
b84e6606a5f58392de5c5f8113db10b8212a82bb93367469284ad2dd9a961bf381e3d230179ec19a32cae7a266cdde7290d95a262dea247b267fdce905f89972

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ext.txt

Filesize
7KB

MD5
f048977cdc74ff4d1f045fb3fd5d0118

SHA1
4d44f8644a0d41fdde9f7d7732b197a4ebb65dae

SHA256
3cd8b8633fbc076ee07bf58da6e01ab692df461381a2bad4ef5512c653da46e4

SHA512
48011fbffa45f8809fc6e7d1e8899ee29d4cc6be2cde36484301e71a3c3ffb85cca6cca6a9e9e79af5355b1309834f67d62100ad09aec852d152aca3688d129b

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\fa.txt

Filesize
10KB

MD5
952328b44391b1d4196dfe1f832a16a2

SHA1
7bf9ced7d272d2df60d2d3984333a6bb26a69377

SHA256
05851ba54b24d7fd45179419aee91a2d40bcab62e6aab99c1a92189fb636bbb2

SHA512
34cc2908320e349d04babf2e5039dfc18b6aaf9f39bea6192e9d53bced3c661c847cce8a17b9aa6bcb941390da9a7ac40b28a93903c9f1946152a7fd93f43aef

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\fi.txt

Filesize
8KB

MD5
7ac9d88f81aacef8759e510e9601a4b9

SHA1
249fe906a2d5a8e084cad76e3e67dad26c77bdb1

SHA256
24d66c5733314f3f72b7ca0f5ceb5a3246726dddefcf2f033715188edb062db5

SHA512
00b67a09cc101c557b7c9a5ea623e654407a953fe87ebb5786a7a2e8ba1944130ba4026a64bf83952a14e7a7c719f81351d8a84fe0b3fe9ba553e4796e7a7ec1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\fr.txt

Filesize
9KB

MD5
b1b6e1c3cf5247ec1618a88f9853d54d

SHA1
0671cb77ad76f9e27237aa538f8efa6bccc40de3

SHA256
cc283e9b0c1822f757372c21f179710c4592a2f7755e706c48065bcfe70bba5b

SHA512
045422d358b3348a1e52cced12d70757a7e6026801113eb68f07a399acc75b6ecc9a1a4401cb7a65506c6f61d4fbb348765b0c80080072bfe06e0500cf31b0ac

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\fur.txt

Filesize
7KB

MD5
dfd698a0f6ed7bf405a8fdd6f33b2315

SHA1
a8cdbc14ad118c61d484cd62e8c4e7d1141fbb4e

SHA256
fc944eaa7883341372ebd5ef0e2f236ca248b2996a902240a75218541b600e72

SHA512
07c5cd9ededc00fc28f878d83d327d91a91edc236b51d05cd8171e43bb175072fe9bf0a4c89d09e21441d8192b08e5c3e5e156fa132b1c657715a5b7cb0488a6

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\fy.txt

Filesize
6KB

MD5
0111890c0137974fce2d79b6d22e5686

SHA1
98ab055fa8bf5f410cad55627424d6512338a4a1

SHA256
9fe460264af4abd9ff23eab79387ebb52b4498758645cd5721e75fd7b747e536

SHA512
86acdb4d62bf9c784bf21999cba5fa3674e70fe5647fdf1dc6a9c5b3cf9c182a18272d9c8400d997bb09e12c908e08a87a951c3d0156a134802e00f70dd1ad90

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ga.txt

Filesize
8KB

MD5
b4295e254b9dfc90e0093188257c007c

SHA1
6ae9b959a752c32fab8407b3aa277f300165a579

SHA256
406669ecbdf562e773b9cdf831cf5f63c3dd1a012c3521a41227c9141511d959

SHA512
cc4671a9312b7f41ddecd2e02d038affd58bbc62363b811f15f10002c82ae826e060f5ad6e2b1fd75557b3dc3bbf12b6e6900b398623cf547e3727ccaa6bf8e1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\gl.txt

Filesize
9KB

MD5
492e51b4b5b287fe2b90a5f0bd433847

SHA1
f7e1eba770d3d07d0e8c2bd61d556508ef0578b8

SHA256
54f676333ce58af67b839b0f0470f99f405b5ce7fdb9c345a19d00b6423277e5

SHA512
0aa1df55256324b24b495543e4abbefd776108bdd90d3155d02b1c10f018bdbd1700c4430848dfbd5073a374715f8510efb17ae1812a9aa44b65e50edb23de59

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\gu.txt

Filesize
17KB

MD5
410c8a33c66b4b2bc707e113d9c76914

SHA1
81a9f3618168dbecf309907ee74591ac3b1297b6

SHA256
9025d8a58e0c76b186c943ef8a73a1bba6c08945e346de14d3c255ccfa3a10e6

SHA512
a520cf2dc7e9f653bb08c93c657cb8e2d1142e86c3e0bacc44457cba5ede044e91ff01f55139c5aeb7b3f26e51724931ea2b2bb20a058c4b9d888a3ae8766021

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\he.txt

Filesize
11KB

MD5
1b53819f8d58fd734b5fd985756b557c

SHA1
8759783adbd62c6f32511313babb9d138fa0a150

SHA256
dcd061a0a7b29f55fa28d4396f60881836c2df07cd936412c476a7f149540cc4

SHA512
b7f0a16d9d02434e7d1c619768dc1d67c163ad6630c19630c405b5934311c41b65918c61dd5f27555cf5cf629411d57fe2ce04fc6c99a2272d4689b69a078e73

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\hi.txt

Filesize
17KB

MD5
a0fc3c3d880a54918d86b40ffda12f23

SHA1
34fb9f1b5a6731100466f66e193ab5028b3ec1be

SHA256
8cce5e5a846196dac3649483290160177f47d88a7dcf0e85acfd3131856a266a

SHA512
bd1f17d76699f177ce6df4b69f82dfa777a0ae20e243d5fed0605fe951a79d8ae54371b07eb30f075161c108f46be1ce21b162b66cc099c02adb6eb6d5e8f158

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\hr.txt

Filesize
8KB

MD5
a0a8a75560efcf15801c96e6d71becc3

SHA1
b3f7b92d2a13151a14b493108a50a8365c46f6a0

SHA256
a72f01215eba3be3af6659129dd20f7a42d74f1da08658a9c8ce8e303c3e8f64

SHA512
d730c0dc30a299b6bab1b8cfae64d8d4bdea121e651641f578b0947bf5f67669f342ce20198b26fe7881ec99baf290695bc460828198a997b4e59ec91396c217

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\hu.txt

Filesize
9KB

MD5
eebea9c4e71a5d2820f5e8972822800f

SHA1
e9f5e741995bf92266e5b6d6891896e5b9cc1f42

SHA256
ef79e98fc911e0d0d16bd061a65f50f5e50caa011699852e1608a2629b8ba37d

SHA512
01b4bd586a1b2629b94dab877510110e6fa1286eb9cdf7882539d42466609d830489ba450e7e7cc41958f463227f5376151f912591aa88c7866182374ed574a5

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\hy.txt

Filesize
13KB

MD5
1362c3c286cff992117d5466bbe284f6

SHA1
faf50ecdb6db6cd6ba9e0ae18e7fad64511048c7

SHA256
d8f60bf92541d20d01f6ddd56d49f25519303fd16e285e18080be6815b74b8a8

SHA512
1834fe901b1182b793872e2a822801966abdf312873e15877e589b9c6a58d04e06a2c60b26d2209fe7048f7ea9befe0f6b39630eb4c5578a54735b6840677205

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\id.txt

Filesize
8KB

MD5
73b9f189f0c37d7cf37df8db89fb52af

SHA1
060ad5b22f8dd408260b7210392c0a6f6271fbff

SHA256
18c4531e9fc00ed242f1c0526dbcd0a3d1ada9bcfee651ae950328ac872a216f

SHA512
f8dca8e9aecbaa7fd596535fb792314253814098c1089262ed36e78960ffebe377c6436354228a9b4e17bb87fa6e1833110fd843c63bbce3294262b623df86e0

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\io.txt

Filesize
4KB

MD5
df8bd55b7a296da48c8705e1d00bad7e

SHA1
a77adf8befce2ab506c2fc728df2d0725983af95

SHA256
60eda200d8d995626fdfb1d523f02a9aa538ce5e8ee5028b41293f615a9d451a

SHA512
c3abbc52ed7b331681e2ca1ea260dc54ed93854799839ec5e724439368e970f09a145bcdb0b638099fa3c8dbedb21b2ef69196b35565a597e45606491b5d5642

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\is.txt

Filesize
8KB

MD5
f361950b7d1bb073ef48ca729b7ed5ea

SHA1
8c5d3fb8e09c9682c6256f05f82ca67c58f0ff2b

SHA256
f4f9d6dfd36512f027452499b083ad0656df6503ce03e4e4cc45b925f1f1d678

SHA512
6163fb77d3155525a563ad907cdf48fa18a6ce019a073c7d9dc2438927217d0d8534ada7fc444114f14ac216c89d12e83f5b582021be693baec80bd69199909e

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\it.txt

Filesize
9KB

MD5
87efe148b443c6b50eab945e27f9b39a

SHA1
d4a46f9a798c381a7415de8b74b296f5632124c1

SHA256
dd0a9a9ce33d25a9f6c461a6e43721e975b8b1e189c3d5b81f1dad0ff12870be

SHA512
3f391e6c840ea267f500e7912e87e8696099aee683a0a656a97033dec8de38f875c60dc21e9332a7e24ca3e2ae8c404fd936f915ad8c8a05eab090c355916dd1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ja.txt

Filesize
11KB

MD5
470b0ca449e9f34bb34244a7ef39441b

SHA1
471c37014eff0214ce757b6e88987fb9e2b31931

SHA256
b0150c2b3d2ad9b37a7f47a24466aea4a56ced728caf12d02b407fd0080602ab

SHA512
1e2d690e484449fa4859836f7ab880d512e98e5f996bf679ecb3a5c3ca8a3fc7e9fed4e6c2470fff790ce22bb6aa407d951ec6c7ced571b5ac8e86ca873f3afa

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ka.txt

Filesize
17KB

MD5
eb2af4dc4c28275ae1876523944d708e

SHA1
bfb87569112a081a99ecd5bfdcc6f2aead07f67b

SHA256
b78defec49d07120b74c2172f3e07540314771b16729c6bbfc3a1902ece2eda0

SHA512
e04680a6050fc6b3d0bf50a092f5fe2049bedf705f479fb5c45852e4cc19d1b735b85166da15ea67dbeb3aacf39dbe6c80eda9d4c180805d87762468875ab49a

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\kaa.txt

Filesize
7KB

MD5
dfba5c2185e113eef167a5e21c32df76

SHA1
e36703d7d1954e3f1729a0497674ec15c41a2f76

SHA256
4d631602ce3d0c4d9162af6bf56a90c8eef75a24d556b729191b62f79aba0681

SHA512
3271b66114bd6f145693258c5e84a175acb3db865169734a9beb5de7f9aefd06b4144650dc0e98fd47dd38ad3cabd26415640cddc8ac611c23d14487e975fb70

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\kab.txt

Filesize
8KB

MD5
c6ac7aad8bce83ac69f197db9d4529f8

SHA1
5fa31ccfa23b753cee7aee7ee65915aaa94f9b01

SHA256
b8a7a5182dfdacc9baccb412e161c60864d3b5d30038935122c736ae4f4ebc22

SHA512
a643e38a5801a50fd318fefeb0245b8935c818737b860839c15fa09b0cc0e9ef55eb455e3ceaf8b2263ae23b5befd1e6013ba63c4abd1b89627905498ff026be

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\kk.txt

Filesize
10KB

MD5
f4c46b450a580ad5abf0b638dcdcc6fb

SHA1
750dfddddadee9cfe0e8f651f1c6cc38cf1fcd78

SHA256
f2e6e55c102485e232daad00f68d8905f7a54f8ae2128db6afe25231c17acd69

SHA512
24b6dc7b491302b905c1e20e67ddab16af9420820b6c83406618e017fa84d952661087e2ea577831441e8a3c82ef697de713597e33626aed787f3485dd9b1f7d

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ko.txt

Filesize
9KB

MD5
55e8685ac21571f0b5f11a4d5fa088f9

SHA1
285d09b7a8adcab4e5d72928487c711b8f48b8fb

SHA256
58a2dd10438c1199653c1bcd88c520ddb437fa8e01bcf311130ada0a626151c7

SHA512
bd95e5f82e17494404e7319f5cdc1b4bdd868b2ae73be1cf407f9f1e54b360bf75a36993a60a14d29e4af3ec15e0538f23e1f22dca1153bd01fc0ba964390337

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ku-ckb.txt

Filesize
12KB

MD5
c90d029172a8533946ef7419bf383305

SHA1
7b3d96899f5935e559626d215517315c04207627

SHA256
19af39960142b8599153a09ef4f03f944fc00999beb9fe2399f5f8b236716eef

SHA512
b0a711161ce233e5b9231c21abfd721bca6a85567debc6cc9c033c68d0a6e1292f369dbf1ea52b4088658d13263c245ea37752e87abd8b2aa878b5270ef0b1be

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ku.txt

Filesize
5KB

MD5
6e9a3e86335c08c15350ba91df969269

SHA1
3c5fdc93b569db37b76009f51483e7bf55a7919b

SHA256
a00b21a87a58adeff29ea379160b6ae72df5ec380f6e4c6a1bc352b6581fb4c4

SHA512
c9919ca7ff62b673a22447029d77630c44d71847e0b4d2d8c572fc6e0fa51cc03473be46b87c0dcafe0194cb12119e8706286060622e42892702ec3c6239ad0f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ky.txt

Filesize
12KB

MD5
7d0420ee265c9122dc11ef964871e179

SHA1
4b84b209e5a637869e501d54ff0b535bd3924851

SHA256
4ef68fbd8ab002bbf4cd6d1c9fd6d87a5fde048afd2ef162b727259eb97d70d2

SHA512
0ddcd7871e61b76acf3fa0224519ed8e29c33234c300097f69e799951f8f9e87943a4f755f1362856f0c2a3804c399e466cf08cf0e189ec7bcdf744e07c61635

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\lij.txt

Filesize
7KB

MD5
372bc4a26b676c48cf8fefab3711b91d

SHA1
39da7ac5a483bd675657c24f875c2cee93204a1e

SHA256
431cae1bb77633fdf3ce339e97bc5d5d885779decc01ed03583e381f097a2487

SHA512
0bf4ded969bc2af21b806fea241b7f0a312d8d4d9c81b14293e352e09dc31b3b876c77c155b6c9769d89b169d8de65c4f52b649acbf90af14e75ccd6bb8157df

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\lt.txt

Filesize
9KB

MD5
92d03523dd0e7e7b2862a6396abad455

SHA1
ea1fc2bac5ab8d5ee329a5945f1ed90269cb7aec

SHA256
c5da5b37be32fa4cdd8b938d479c0327b84c9f83c948eb7e65f4ddc15a6beeae

SHA512
1fb0ae4117dd69418ecc371f699630d79f89daaa3099f57ebfa4a7de398cbdef095e0b029a547dfb6936a336a9e2748b880ec83a65554a1858f2f87104d63e27

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\lv.txt

Filesize
5KB

MD5
341cc2c7302ae8e91b286d9efff55693

SHA1
a92f6126ab3d22e2c6a8d35c29492946e92b4a3a

SHA256
4de5f75c5e05ec4fabfc2d266ae5b254f0c335c822523a0a7f7edc60e35a5e0d

SHA512
98f267b9023c5d681d6d2839a22dae01285196bab2080a9d9ee79abb549b7a99bd6effc51a5896ecf541d98f47d1abfc01f1c31da498b0650738b63861667e36

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\mk.txt

Filesize
8KB

MD5
71d42abe45803ac9c3da5fcacf9cc59c

SHA1
98a1049906972abb480abaf1f5658c1b8c10f27c

SHA256
78f5cb9345ab258cf745eaa90d44c7a7a73d3fe06ea182b1298a989135ffa11f

SHA512
a0096575d6f911cc2600dac93d6fd7aa8d9e2f9f71a92571a76996fb4c47bdb714bba453c862b3f42cc5f4baaf2aed1dff3c9d6f84a3e2053ff2037c56ab85a5

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\mn.txt

Filesize
8KB

MD5
8756027adf94b3cc3d6c42f0d3fb4af0

SHA1
823bdbc5abf1d2f3528aa319a417ee090d1c6928

SHA256
cf5245d17224f85011ed85062957dbfd936dd760a214980fc8f2eb69e6ba3cfc

SHA512
92715a814d24318533ba26af542b174df12e5d8cd40251bc27890345eb6c64d174448745b2b138bd0a7e0fa0d96b803fab9b29f89767729e64a95b164fb27f29

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\mng.txt

Filesize
20KB

MD5
ba28c5c312d1a7827b40ed84f1f6f85b

SHA1
72788c4b14c47a3988245e81fc6e7bbb8f88442f

SHA256
92898472c1db5248b0556fb5bafda8090684249b561de5ef2a84c10f2f4383ca

SHA512
35871824adede6169118087d28fe3c78ea09cb259c7c168e83a22ca74c024d9f0d61250ad1fc9f75b71a8ee5235a12ffd52c146b8232b7bea84ec024b19da7d5

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\mng2.txt

Filesize
21KB

MD5
a0d06dc2b7f53acd8cdebf7864080cd1

SHA1
a4b9c4d1c4355bd90356e60289fb4efce0046b6a

SHA256
47bfe43f3f5a88a0f366fb317a542cdc1e216f8c368ddc67252480ede7d130f4

SHA512
811fdbfc11f8db60b2d059d433495fd50220e5a718ed9fe7f9c422d9695353825129b05e0f287419d4784c3564ea7cf7be9117c4408170f4afa3353fbc875442

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\mr.txt

Filesize
10KB

MD5
2e9fc42dbd17e30f8db8205fa2d18543

SHA1
60639e6d06a38d5c507136c130a172d606b698e7

SHA256
08b8f7ff35dd4315133e04fd17b6fb896d63b9c87040a2cc68a83e81ea4efd78

SHA512
7e1aa7234dc2c07654847de01600787ba735e9ccf5d376d37696f3810418a357beb1d611a164fdfd7a24ca33e7bed150df08187d4ade6c973c45be5df74fd95f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ms.txt

Filesize
5KB

MD5
91da4b7d7cb3b5eb4304394e0c4caaf2

SHA1
940259adf9fe58722df14bcdc472e1fb9196b6e2

SHA256
31ab339e581d0d13a43cadde7c0d1e11cc03a6d8c92b91f8fe79963a6982dff5

SHA512
743de69fbdab306f8550a9b377494f9231cbb7743f627e89540a8b924cc9e92e18159afca09ef363f2c1f4f8832a3db9008f0c1dcd6012d5f05ab27a77d0e9fb

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\nb.txt

Filesize
5KB

MD5
7071cabd6fb28ceeddeac8b934879855

SHA1
f45785be897c13e90c0850a81252ca9ec472aa6a

SHA256
694481b64e223f9bdd0936f89138ef735ceb92ac962d9dd21682109ba81b9697

SHA512
b3b0a4da8eceedb39cc72f344880920acdea7d01ec009fbcead3079aa0a576ddaa5b754fd9ec5770cc3ffe5621a95b00da75448d5e7770549c0beb756ccceff1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ne.txt

Filesize
13KB

MD5
c7ed0560a6145a417b1e92546ed6b0f1

SHA1
6be9ff3e7ef34767caa165a0e9851914bb65378a

SHA256
c129f67193295736e1c1ff4ac7245cbd737a07ea6073b43fd22ac767f3d56e23

SHA512
508504216c916c6ef168062c1d13336594d469db92d8b40571c726a4b3053ca6fd0c57f9f2fc389f3216a5c663ebdc4aa520462ef39abd5be55c7b87b522d90f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\nl.txt

Filesize
8KB

MD5
54169e744254bb5a4182bcb2678f8479

SHA1
244ff8c38c8da10e20282cf74a08e18ab165640c

SHA256
8a74f64c91c25da6056b054d388bf1bbd97384ad7d0086f86df0240e077c6149

SHA512
b798027c10f2aa7f06fa4fc3473f3040a23968d967aa93c08d072f86da2747d7847f8d7b37bc796a8270721c200978c61b1a4a5c6fd8b87845fdbb1337a142a2

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\nn.txt

Filesize
5KB

MD5
366b85bf575444d20944db387f94564e

SHA1
e93fb8c9ae5ea26eb5c128be27869cf3d3cf8fe4

SHA256
e6922e17b7622361bc4d07e76874a919e3095b477ed008986b94f84a931cb22f

SHA512
19a7b5c8f4ce681092ed56c78d9dd6bb95367809db78f905f357859dd797e7e04810b6f0441b3f5ea7e1bf53d4e06ce361400f6899d8a6a54ba4fc58f9d8e991

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\pa-in.txt

Filesize
14KB

MD5
6c48ed7deba6d3efe6447be948471810

SHA1
4e1d76d565211416f0ed32a2cdd473d9ac54a61f

SHA256
377f793eedf3a935ddd6260d72ac3cada9391aafdf1f019d0be72be2b83a5dd9

SHA512
22b8bbb70492e19ede9c5e74483a1a6d57d4f86f38d1321331e0137c7953c6612e03f854fb1bb0c3234bbc0f561e92501a345d881fc09dde598e217d946018dd

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\pl.txt

Filesize
9KB

MD5
2cdf63e6b3f3a474465d0d88e5386718

SHA1
aa4f3f839b35c68ea2a17e7a63053262e94f952d

SHA256
223c109301a7bbf01fc57c42609083b28e3fcededc1f6e6dcdfdc8ec1580c51d

SHA512
db7c086b9fd9111d468b7bb4f55455524fe161869c20c20ad7e65e5b8eee38fd4e3b19aaa183c69c87d2c61f4561d12c90aa966a07156f193af59bcb6db10ff7

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ps.txt

Filesize
8KB

MD5
8f15262b3c1cf560b6352fae4a5fde21

SHA1
c493f7834117f02aab3dd34999acf55977d94c67

SHA256
881b19dd1f74251e475855b8bdb53ce9af1c3d2654a9331b069a3c273f723769

SHA512
18406e2c762f5e7d5d37d76c0fdc8a8a85d50fcb66b2d92d072b4ca3714fca6eae9ccd9dd50bbb00da84bccfd07eba290930c17a1b9342626715a6d6de8191d2

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\pt-br.txt

Filesize
9KB

MD5
7b02e1ae16e2e709d7c97de560b4dbe9

SHA1
191a54644417f7d36f5cb4182dcdb3737d74be51

SHA256
da0b58f52bbc131f967942d1d8e9de1b5721ae864bc21852a0ad4062332297cb

SHA512
4f689f854db3f766b5e53ce2f19e9f8293c075ee3f9b18098eb05b352f2ec95df85e49a78540781eb531bce60c7b1f7890f1fe3c65200dec3cb908e90fb827a1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\pt.txt

Filesize
9KB

MD5
e6f09b147cb07532c12e47b05ccf87b7

SHA1
1b6d069d431edac41c4221a120e8cb9b1152fc70

SHA256
55807ed90ae0d9216b93ec7e1d0571cb16d7f9db40723581aefc4ea829d4d182

SHA512
95f7db5dd308ca3e91fc3203dfb9fa9dbabd7eec6cf1a8590eef0cc670c6b08447ba09ad151a972d721dbfcfa03468bb7e9d2cac190d6c72c543ce5a16c7aa32

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ro.txt

Filesize
7KB

MD5
e3ee837f02a1f6e4b2213eb36c025284

SHA1
56ccafa0f9c3d805a845311c2ebd80c93a595b17

SHA256
f168bb4d026782134cc6c261006b815850e753a27fb47c4f23ee617666459a66

SHA512
a923f953af5df72e04b5c38e523a003b85c0ed74e20ae1c3a2d4848828e03de8e703953cfcf653c148a0eeaa9365f9187804de0d534435ccb90dac1c4ea68a63

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ru.txt

Filesize
14KB

MD5
b5cec4d03d2d9e162137e475c54afbc3

SHA1
3e86ae0174a096b07173c623b637122e4323dd29

SHA256
ac73d4810639114c3269e3beaec84ecac9473ca6fbc248d804a09df2b33e4351

SHA512
cb78bd4f6d7d94780bf84f6618a2800a3b6885485c6cb7b0836affcb9ca6f6734834fb84f756946e59595067788cd1b1a230cec760e39d3ea0baf523f7cc7647

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sa.txt

Filesize
19KB

MD5
9fe4da297163a84fe9d0b0289b1af077

SHA1
d14a6a318a50f2f13e45b2269ea2ad8fc5e3c44a

SHA256
a44e8c328bf809890aa6ca883e2cb82b6c5207d9636e9a91253da4cd893668c8

SHA512
a6fee2f3d6448f1f5be6ec88b51fb65ebd07c7ba3dbaf2f7a801fef54b9da410e6b800094853180a884889b304ea9a54672781fa7d0f1067af6c4a63c494a44b

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\si.txt

Filesize
16KB

MD5
2b78e18bcb07cb8d59d8682502576f8e

SHA1
c277b543ee18441681cdaff9efead09963bf9604

SHA256
3899edd17a78bc729278304f7b0ae7750c422a5ba684aac9edc15b8527a229da

SHA512
da07af56bbd954828623c7b38fd3e6cdfe89df98f2525aa486a43fdd17ea5ce79f90e691b1f459df5238b04b3fff0fed58559bc93e15559ff6d8d2a2cf4da172

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sk.txt

Filesize
9KB

MD5
ca2b22d21945a478757a099eeafdf9a9

SHA1
5efbf215647e82ddeaa4c83d064ef83b51413dea

SHA256
e571c0d87b50f4659099b4ca618057533c22578066e411c5ceb3df8be1e77cff

SHA512
40365ac6cdd70ff7b7ab09482e1e9263b1b131772019eda357007d029a879111da72b05756adbfc3206b1c060211a16b5f10d507fb0caa3696907c8433fe9537

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sl.txt

Filesize
8KB

MD5
7004b98d09316e84156b91c54888c9d4

SHA1
39c8681e497dde4ccffa3bf8d15b53627757ece8

SHA256
548aa8422a228617b30fbd448d03c38c3a11d010051a24544cf8ae479314acd8

SHA512
c48f4baced7a4faf958712225a5326ca2225dd7b396164787ad2c83a0314774e9126fa510eba37b1ab2ff26c67a7aaaa0ba9129b0d97a119ad1d726a56a33066

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sq.txt

Filesize
5KB

MD5
f5c16d9111631a7280ae99c89d5be4e3

SHA1
7fe61a09330c58d445c9c9b48c0ceb904d7879aa

SHA256
40a3fc08e4b2ca3d691c08b9382b2e9fa391f9123a0769052294d93bc2983734

SHA512
1c1801b68d1397d25d6c6d5ce5d1b2d89bd18536a2c0d60ce6aa79cb3cee92fab26424033006091c27efda84e77256c668fb8317fd940bf6996d1fd9ab1fe46a

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sr-spc.txt

Filesize
11KB

MD5
ffd26304b9b5fae8547703515e84460d

SHA1
cff3f023bb47ca3c6c3db202cd8c126b0bb2f59f

SHA256
283dd99ec8d13784b3d79c36766cdb16dac0ede0c1c09e8b1efa64f5dc2c1a55

SHA512
0a4e39e2598c73f936e4c8bd56201fee00aeb5daab0d7b735d5137a8b7c15830b40f028c77b528b75653540836098f5e8fc059111dd2efbd0a46ddbdf97465c1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sr-spl.txt

Filesize
7KB

MD5
fd327f424c7e4f23d2c018ded334a1b5

SHA1
0fe9a48c528be4022b19f7373cba9190d3bdb473

SHA256
d5a250b45bd51267e2b0d78cf60e7f14113419565f9b95c2b1113963396570a5

SHA512
ae6c2959a5348bdbc1464fd0e08a3a00f8598a2d423381e5883347a85e88f7749659e0fac4f89d6ccbc74a1e83f47ec4f42cac22115ca3921def00de41978adb

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sv.txt

Filesize
8KB

MD5
2ec8b6f0c0c05157ae90aba540debed1

SHA1
56de30674cf6ed17ae1fd42080214573b8383789

SHA256
54112b265ec01759adbf72dc856ff0f9dbb2b3029eff8a56de08dffc5d3dc954

SHA512
6cb83b0d3db5254e47f86100c38be073f257b4f2e643f14e91df9ccac36a631bf06e52ce8f98106f5a17cf19745f2b6277605968bfeb9e0d423b1fd3ab5c0a06

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\sw.txt

Filesize
8KB

MD5
ee27959aef24cef2ec07684cf420b2dd

SHA1
07d9b4d2b4ab10b3341f3286cee73185daaad918

SHA256
aaeb1631458e448b678579ce369fd0a6d66e0fb02b9218328c537ee38636c557

SHA512
9e0fd7db8d799763eee9980d8c2b0864640fb74a86036d337b019ac317a3541cba6d65af1c4179ed46d64d4005395cd6c761f6a234428df3f1fb04634955242f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ta.txt

Filesize
12KB

MD5
228ca6d7b8d850853233c4575a7ebf1f

SHA1
4bc90fca87925f7d855972f5dc67ef5e9e29b438

SHA256
0a3b285566bbeb3f188b3c72ba21cbfc545ea05471eab706e972c828da5234e0

SHA512
2995d1c2bacc8c0ee757fc47fe9c8ac07f1ee74ae3a70bbbcc66cbcfa13a924855b3f7515d04031434870829be34f0fb49a35388eaffacc0e7a33f9a44a02870

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\tg.txt

Filesize
14KB

MD5
4a5529986613cdf743b3f7755f8f5cae

SHA1
970dfad147ab3d32e93eef6bf464bcac23368e4f

SHA256
1cedd8f699940fecacacbc5df093ba70fb2099faf9864376a3d990da78b8e075

SHA512
1f7e8a8a21e8e5faf546b2f4c621b326a907afa017dd8221022df2d19b3e41d10d5157a8713f8d5485601311029f4e25dcb21d0e9b4991b6d26d651b416239c0

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\th.txt

Filesize
15KB

MD5
8ee06a03dc18e5f8bc750cb6a78f6d9c

SHA1
179c195700df844216c2cabdc17062cddbd1d6b3

SHA256
01e7b965bd4b722003f74b4e4b30ef6a1baea67108816d1b9f8d6add39c7fa10

SHA512
4c908ba391bac8bd36bf76b5c3b59dd59eb71f2513bcd04c47cbde683ad463c0feac5d5aada67730f3f566156c4beff09cd7b7d1eb043b988ad7938b9041c4ec

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\tk.txt

Filesize
9KB

MD5
75c23d0431bc83ca17308f08d1173c1d

SHA1
a052e61036e0da973253ba225031d5929ee5e2d5

SHA256
75eff9de596459f3eba755b5c4c8ce635af2cecdbae40749df348c97a2e56ee0

SHA512
10872e31df08e59d080be3c0b975df06e2e8bcecea14fcf9f547965143a9652c8b9ed50d38232a72b8f0745c964f4e616b06368d9983f35ba05fbcbf2294900b

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\tr.txt

Filesize
9KB

MD5
c69be29e4448a858180daf367464d531

SHA1
d83819911331f73bc35e2eb02ec1fbcdddf30b7d

SHA256
4816929c4bb958ce8d64d14df47f0b6a35dcf0e7eb88201eaa93af541894e354

SHA512
469be1075e9a5c4cc8bb6a0b55e645448eda3d46527a5561cd55807f5e52c3410904a34e0e64e11f963153d5cea5ccf16e7e7fc7ed63aea3fbe532959056aa77

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\tt.txt

Filesize
13KB

MD5
6e299b81edacf15face1271d032cc5a0

SHA1
f2e955fd7bbf9140f0e86bf1a759d729c9a4e4da

SHA256
18479d66e0c8b5144ea32cc9d6b58eb8748e80d2c3bdec0dbd99bbc3ab42495d

SHA512
84e9484319deb5a7049fe130290a7d67a8faefc9a17f7b2ce9f9586fb0f0641b839bae681c6f8ffef551780f56166c9886c1f7f6f0df386389f44710423b9865

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\ug.txt

Filesize
11KB

MD5
ef3e8d61d03e42a3b40d6f0b12535adb

SHA1
569360bcfeb39c102a3dd78ed96204b5d733ffbe

SHA256
9d0268d1eeb8dfdebbb8ea1033c2b99cd667a244c9859085be5d54c9e5ced369

SHA512
6e9afeb0a96da6d8bf63f06de421b8d4ddbf4d750e1bdf861fbbdc0268cbeb19068d08787f0f1655b40ebdc603d888251dae188c3547f32b970c7f927754066a

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\uk.txt

Filesize
14KB

MD5
d125ef7f9a009cfe4093152e48055ac1

SHA1
7063f242690890c98296314884e0e6d058c23aff

SHA256
53235cb228dbbb5207f18bd0b318f54fda9f9f5b05094ea6ac7ae368216cc4ef

SHA512
cc199e839e2cf24abcd8b9685702732427295858976a038fddf6e3691fd1a31bcaf9f1dbac48e125e096d1a395dcabfb4ecbb02a6c5e7d6dea67e44e21e69037

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\uz-cyrl.txt

Filesize
14KB

MD5
7afedbd6e9ef3a4a2a99bc1bcb133605

SHA1
317d758dd9f65a6e320a4d45776a21ecb2ad60cc

SHA256
2dd421a44ad779d961c951f01e7abf4ac358c61ce26ea8311a0c902b4fc77ca3

SHA512
48650bc3ac6c316ad6431b9db3e49d76fd066f976fdd949a8dfdb194775b0e1c6eda5ed99d2574c9d3c2781c6138e3bb3939c294894443eec981c78377823af5

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\uz.txt

Filesize
9KB

MD5
3035144eea3a382e39541b218a5d813a

SHA1
eb7a2f6306f7d2ded4cc88fb4cab0f65558db8b0

SHA256
a310044dbc86e2441f0d50bb7d7dadb9879359b0c6ceb1faf413a0459e07045b

SHA512
99d86146e0a6407f8d0fd7179061699bc82232e6a2427203a2951fef9089572c9c4e29c8484910f672a31f98ef13b5f3a45d5786fb118701a5b908f8f85a5c6a

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\va.txt

Filesize
6KB

MD5
639741f687d4427c9d3b170b1ced41a9

SHA1
ad3d3a09b8877381df520e6eb654227da045b89d

SHA256
f43c31bd959a752eefbb7c76ed918c4cacd50d43706121c55093d72a638fa7a5

SHA512
eb63b0437624782d2bcd033905c7c0538902f9644e4facdc52d094ede5353309613b4eef3cb437d4f69c2a4fd4b2e0f241990aaa3a38366685b10cabec20a357

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\vi.txt

Filesize
8KB

MD5
044531d134aca40d5e57cc0ab96b4940

SHA1
988aa2bb6922360c1977b97725175613266242d2

SHA256
3a6dca3e1b5c8190c81fc859b5be83eaf54efdcaa148f4374d1225381083406f

SHA512
458a86ea6468e8b1c9cc98a7a579f74854a34f101ec2ede3ab48dd7dfbbf75eeae184c5a23443b3ccc69b8c06e0e09ef2df04d9f00d86ce99b82e785f95b7635

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\yo.txt

Filesize
10KB

MD5
698af9267c08d61b712417491da6a3bb

SHA1
01f21ce60e571699b006098afe9520c02d4e11dc

SHA256
ffab6b91ffd2d3c2b1f7f431b47f7d28aa17a11587b876565613bb26c173402b

SHA512
d37f63d3824d12d9bd4749ea94fce924f3a5469874d6777261f0570a2a7ef28574825fae199408c0e1eee7061b08c447da8744a1c2fa486981165ab5062fc8a9

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\zh-cn.txt

Filesize
7KB

MD5
0aae98f500ce669da6a4fcc33aea04e9

SHA1
9326f529b796bca164835fb1eb4e135f01cb61af

SHA256
7cf13e7434e6c062a29b964c026b2f66e75ecf541228665bf0c826ef7c0fe133

SHA512
fc64fb4c2df2b99f3d24cd938f4f381acc20547ba655fb34016a1a1f860e0d8a99c087b24fdc160d2bd1dad1f04c9ebba682adde0e0004e0b64d774bd3f3550f

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Lang\zh-tw.txt

Filesize
7KB

MD5
acfc57de6b0e4489287bdafe2062409a

SHA1
dbf62f8c6dd239aa16bfd62500517b849ed8e5b4

SHA256
37c79297f8d4e491d681b556c23d957bc830068ae1d5f4535fd054c2233f3474

SHA512
50a76a2c5a61056b2b9efaf143335d86c5882d97c9d42acf29ca87cd39d79876d561ec0fe83fb377e25379cfebf593b782ecd8613d2a84ac33cbb6d8314481f1

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\License.txt

Filesize
3KB

MD5
da110cdcadc141bea8e32c64f7f80fe5

SHA1
c959125237789c5a1701ae4e29b19204a2aec348

SHA256
72a99a393afa877265d336cabb6c7bd762b12cb1fa210303ad61c125665d215b

SHA512
ee995b09f4fce04c45ca0a317b916cec8246b50d996b66b8f0ff09e35d21b2fdcadcb6e728ead069028c22ec1d1de44f69c8886e374d1f16aea31e823a773185

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\Uninstall.exe

Filesize
14KB

MD5
432c6d0c5053668e20f4b4be6823a563

SHA1
6e6184e5c3655128b58701a598c4604401d80a3c

SHA256
2e8be9a2357d48dcce56e24ce066f93c62e4765f4e98170fd5a7d3bef69b67a6

SHA512
2e6ca50fb161095e564741f61bed87539eaa0656e21dadaee6d363db3317f8460eca55e66d162c655e64c6418f0f3ffc9a8704295d20f385efbfbb7cb010a93c

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\descript.ion

Filesize
366B

MD5
eb7e322bdc62614e49ded60e0fb23845

SHA1
1bb477811ecdb01457790c46217b61cb53153b75

SHA256
1da513f5a4e8018b9ae143884eb3eaf72454b606fd51f2401b7cfd9be4dbbf4f

SHA512
8160b581a3f237d87e664d93310f5e85a42df793b3e22390093f9fb9a0a39950be6df2a713b55259fce5d5411d0499886a8039288d9481b4095fabadddbebb60

Download Submit
C:\Users\Admin\AppData\Roaming\7zip\readme.txt

Filesize
1KB

MD5
3130c41d18f99b83d27c2a4083f1c047

SHA1
bffddb9c213e77490f25ad20800bce7aae571da8

SHA256
42aeb97dfd35b5352d3f79dc32911336ef59b6b38ee5571d3e2b09460365f5fd

SHA512
ccc2cb356487f8e2fcdb2742819369fc56b5e923347f92e85613a6828772e60b761ded6e1a4ecb4f4854b62f206e96e7ffc06b8483de5cead69237e483146a69

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat

Filesize
242B

MD5
22b15279d62b7b3e0b5a7a9d8cbdceff

SHA1
040818a38d33d7061fb32dab017475da3498c464

SHA256
0d90ba009e26a017f61a360d7f1e5af9353b08c8ec63cc5a06e54645499e3a26

SHA512
8b2b30d698acceb2844212f7509567179d9f058eafd978334311e5cd6e0030361afb0645793ffeaa82383e2e6c81807d10aceea57d386b7b5aca248b36d9ef06

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Filesize
16B

MD5
d29962abc88624befc0135579ae485ec

SHA1
e40a6458296ec6a2427bcb280572d023a9862b31

SHA256
a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866

SHA512
4311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
11KB

MD5
b07e59fdb4c065dcbe7505f21464c0ce

SHA1
2c45948b4145c77b0a5b4c2358dfd5f62aa5f662

SHA256
f44108e048e249760de4e1d3f28658cd00e5fbe4d8bbe54be4d4a0591c1e43e1

SHA512
9cdc8b10b1b23ce090c952c65fca04c32bf683796009202ebdacccffd5af06473cb017aa8d5e02a4a1454e9465aa53c5a03665eece6df00c005985ae2fa2e304

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
d061afb8f595e3b7ed1be88b14936c5b

SHA1
43e94019d25948b5158c08bc4caf4193caccbbb5

SHA256
c53f8945a2f79d15217c8f01f1fc8e4fd2dcbaade8a80fdcb0bdfbd4c9592761

SHA512
eef99970a5a646bdd77e1a88f4254751e378982d8da663e905b0ecd947a08da37596061b884ca6467cdf66f59691cd189d55488a73127b44174e0764c5f47b6b

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
fdee1396b15efe97a0091d01eaaf38f8

SHA1
2b61cc013146170175b0f8d983cd4d9e5b7a8673

SHA256
91ba6a78417fb5cdcd5ff33193592a0cacbc32b73b477a7e4e78b304aba61d80

SHA512
d6a1d1311406bf2c893b94c677ba62bb9a0305278c4b6222d0522b1a510557faa1df5933dc177d2421d1290bca1704b7c10c11f2e7577c4ac0353ab5613a167c

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
17f75dca0232c8f6ed503ec1138570dc

SHA1
c74f06bdf2bd4d21d5af167c2081d4dba6b48a9f

SHA256
3e5314e5f9902d83c256cc07128e8b76cfe4ca825701912503b86d2a0cd73a36

SHA512
54469a8af2aac1063ce96b47f0c4e76e41cc6a954a834ebdd5e3ae859b8837b76213e389431be99dfd893e3e24c442f557d76499fe1d6e3c3aaadee0ae5c308a

Download Submit
C:\Users\Admin\Downloads\Soft_Ware.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Users\Admin\Downloads\Xeno.rc

Filesize
158B

MD5
63cddb68ef08c74b7ca0eb2098490d83

SHA1
eee3317b12b794d2b1ea48fe273f727967f8e4b7

SHA256
9b83c1e6f597d6f1a0684c951240f224a2d0c24d7dd200c7bae7c6335bb5a6ee

SHA512
7c320f37f49f885ed942a82258d77933d6c88a49b0fcb5f0321a0fe88f3af3fafa1b87ddd32abadaba3e5ba90f86184b57175752c9dae4305b7d4597fd61a338

Download Submit
C:\Users\Admin\Downloads\Xeno.rc:Zone.Identifier

Filesize
55B

MD5
0f98a5550abe0fb880568b1480c96a1c

SHA1
d2ce9f7057b201d31f79f3aee2225d89f36be07d

SHA256
2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1

SHA512
dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6

Download Submit
C:\Users\Admin\Downloads\link.txt

Filesize
1KB

MD5
080a382e71fc8a286d9b14debcca86cf

SHA1
cd9762d5c5807e37ab9441f3197aa8efbdffa980

SHA256
d1009eba7c4a315d8b2c4c95f836cb335f2be4b7f7d40aa8331b11e568b8cb0f

SHA512
e41f39fa57005b704d12786b84ff2bd8c219e83deb5bcbf66665d71e97ea6ec06f59aa2bd4a675ebe18155e39561c850fecc9ed9cac19eca2d16b0aa1fd5ca4b

Download Submit
C:\Users\Admin\Downloads\link.txt:Zone.Identifier

Filesize
183B

MD5
9083579ecdd1728b6e84203e5997af31

SHA1
f7df03e0a772452974dd2e60a1e1a9633bd8cf5e

SHA256
03b46ec47b8da0109b3ed92411edaa1a10b4ff5ac5391dbf8cf59d61489bc274

SHA512
af1e46d1ee1595f9fa1862017434306dec299af4512a1b191ac5bf011cc1c00ecfeb7c936de4d2c96b9b745732eaa4b147881ad2c455484a3811f5bd27f6d32a

Download Submit
memory/1424-1060-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/1424-1059-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/1448-1065-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1062-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1063-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1064-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1595-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1596-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1598-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1597-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/1448-1061-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-434-0x00007FFC9F360000-0x00007FFC9F370000-memory.dmp

Filesize
64KB

Download
memory/3064-468-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-467-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-469-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-435-0x00007FFC9F360000-0x00007FFC9F370000-memory.dmp

Filesize
64KB

Download
memory/3064-470-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-430-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-431-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-429-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-432-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/3064-433-0x00007FFCA19F0000-0x00007FFCA1A00000-memory.dmp

Filesize
64KB

Download
memory/4184-2626-0x0000000010000000-0x0000000010630000-memory.dmp

Filesize
6.2MB

Download
memory/5096-2849-0x0000000010000000-0x0000000010630000-memory.dmp

Filesize
6.2MB

Download