meduza | b4e27af0caf72026adc98fa65d34d5fe22882b2c3b36291f39fb2c69b3183efc

Analysis

max time kernel
1294s
max time network
1292s
platform
windows11-21h2_x64
resource
win11-20250217-en
resource tags

arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
submitted
20/02/2025, 10:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Bloxstrap.exe
Size

10.8MB
MD5

05fe4ab617fb8a0e6df903e14b3312c9
SHA1

04500479b9e6cdfbaf431634cfbfd496214c80ca
SHA256

b4e27af0caf72026adc98fa65d34d5fe22882b2c3b36291f39fb2c69b3183efc
SHA512

acff0e95ba628ed724ad331b1e5701f5cef343cb8ee5aa44aff0c5907453abaca68b874c7275a61d835d982ac18e0a1ffafa9289c7e72b9cc8b79c564b46c3da
SSDEEP

98304:sbDOHTscod5DBasbk1mvGWD3vOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlW:sbDascFsbk1mvG6ObAbN0l

Score

10^/10

meduza defense_evasion discovery stealer trojan

Malware Config

Signatures

Meduza
Meduza is a crypto wallet and info stealer written in C++.
stealer meduza

Meduza Stealer payload 1 IoCs

resource	yara_rule
behavioral1/files/0x001700000002b47c-2814.dat	family_meduza

Meduza family
meduza

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 2332 created 3312	2332	SoulFire_1.8.2_x64-setup.exe	52

Downloads MZ/PE file 1 IoCs

flow	pid	Process
59	3132	chrome.exe

Executes dropped EXE 5 IoCs

pid	Process
2332	SoulFire_1.8.2_x64-setup.exe
1460	soulfire.exe
5728	javaw.exe
3984	soulfire.exe
1236	javaw.exe

Loads dropped DLL 46 IoCs

pid	Process
2332	SoulFire_1.8.2_x64-setup.exe
2332	SoulFire_1.8.2_x64-setup.exe
2332	SoulFire_1.8.2_x64-setup.exe
2332	SoulFire_1.8.2_x64-setup.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe
1236	javaw.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	soulfire.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	soulfire.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_66559599\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Filtering Rules	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Part-DE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_278146227\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-be.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1401922954\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_857662649\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Part-ES	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1401922954\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_703532063\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_857662649\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1685735201\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_278146227\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\Part-RU	msedgewebview2.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_66559599\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\adblock_snippet.js	msedgewebview2.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_66559599\manifest.json	msedgewebview2.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\SoulFire_1.8.2_x64-setup.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SoulFire_1.8.2_x64-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133845194040176656"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 17 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire	SoulFire_1.8.2_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\shell	SoulFire_1.8.2_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\SoulFire\\soulfire.exe\" \"%1\""	SoulFire_1.8.2_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\MuiCache	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\ = "URL:com.soulfiremc.soulfire protocol"	SoulFire_1.8.2_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\DefaultIcon	SoulFire_1.8.2_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	BackgroundTransferHost.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\shell\open\command	SoulFire_1.8.2_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\URL Protocol	SoulFire_1.8.2_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\SoulFire\\soulfire.exe\",0"	SoulFire_1.8.2_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\soulfire\shell\open	SoulFire_1.8.2_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3449935180-2903586757-2462874082-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	BackgroundTransferHost.exe

NTFS ADS 7 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\download (4).htm:Zone.Identifier	msedgewebview2.exe
File opened for modification	C:\Users\Admin\Downloads\download (5).htm:Zone.Identifier	msedgewebview2.exe
File opened for modification	C:\Users\Admin\Downloads\SoulFire_1.8.2_x64-setup.exe:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\download.htm:Zone.Identifier	msedgewebview2.exe
File opened for modification	C:\Users\Admin\Downloads\download (1).htm:Zone.Identifier	msedgewebview2.exe
File opened for modification	C:\Users\Admin\Downloads\download (2).htm:Zone.Identifier	msedgewebview2.exe
File opened for modification	C:\Users\Admin\Downloads\download (3).htm:Zone.Identifier	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4576	chrome.exe
4576	chrome.exe
2332	SoulFire_1.8.2_x64-setup.exe
2332	SoulFire_1.8.2_x64-setup.exe
5228	chrome.exe
5228	chrome.exe
5228	chrome.exe
5228	chrome.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
6196	msedgewebview2.exe
6196	msedgewebview2.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe
5728	javaw.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4912	msedgewebview2.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
4912	msedgewebview2.exe
5248	msedgewebview2.exe
5248	msedgewebview2.exe
5248	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3576	Bloxstrap.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe
Token: SeCreatePagefilePrivilege	4576	chrome.exe
Token: SeShutdownPrivilege	4576	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
1460	soulfire.exe
1460	soulfire.exe

Suspicious use of SendNotifyMessage 43 IoCs

pid	Process
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
4576	chrome.exe
1460	soulfire.exe
1460	soulfire.exe
1460	soulfire.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1644	msedge.exe
1460	soulfire.exe
3984	soulfire.exe
3984	soulfire.exe
3984	soulfire.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4728	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4576 wrote to memory of 4812	4576	chrome.exe	85
PID 4576 wrote to memory of 4812	4576	chrome.exe	85
PID 236 wrote to memory of 248	236	chrome.exe	87
PID 236 wrote to memory of 248	236	chrome.exe	87
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 4480	4576	chrome.exe	88
PID 4576 wrote to memory of 3132	4576	chrome.exe	89
PID 4576 wrote to memory of 3132	4576	chrome.exe	89
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90
PID 4576 wrote to memory of 3548	4576	chrome.exe	90

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3312
- C:\Users\Admin\AppData\Local\Temp\Bloxstrap.exe
  "C:\Users\Admin\AppData\Local\Temp\Bloxstrap.exe"
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4576
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffa6bd9cc40,0x7ffa6bd9cc4c,0x7ffa6bd9cc58
    3⤵
    PID:4812
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1856,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=1840 /prefetch:2
    3⤵
    PID:4480
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2128,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=2136 /prefetch:3
    3⤵
    - Downloads MZ/PE file
    PID:3132
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2228,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=2184 /prefetch:8
    3⤵
    PID:3548
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3236 /prefetch:1
    3⤵
    PID:4000
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3168,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=3408 /prefetch:1
    3⤵
    PID:968
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4484,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4476 /prefetch:1
    3⤵
    PID:5068
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4496,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4640 /prefetch:8
    3⤵
    PID:836
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4656,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4788 /prefetch:8
    3⤵
    PID:4092
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4724,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4660 /prefetch:8
    3⤵
    PID:1164
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4840,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4948 /prefetch:8
    3⤵
    PID:2400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4700,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4944 /prefetch:1
    3⤵
    PID:364
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4728,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=4996 /prefetch:1
    3⤵
    PID:2788
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4812,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5224 /prefetch:8
    3⤵
    PID:5052
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5464,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5376 /prefetch:1
    3⤵
    PID:1692
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5900,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5924 /prefetch:8
    3⤵
    PID:2120
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5912,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=6064 /prefetch:8
    3⤵
    PID:2304
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=872,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=6176 /prefetch:8
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:2220
- - C:\Users\Admin\Downloads\SoulFire_1.8.2_x64-setup.exe
    "C:\Users\Admin\Downloads\SoulFire_1.8.2_x64-setup.exe"
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    PID:2332
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5244,i,15552211115212423424,15213091784856960948,262144 --variations-seed-version=20250216-180425.389000 --mojo-platform-channel-handle=5100 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:236
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa6bd9cc40,0x7ffa6bd9cc4c,0x7ffa6bd9cc58
    3⤵
    PID:248
- C:\Users\Admin\AppData\Local\SoulFire\soulfire.exe
  "C:\Users\Admin\AppData\Local\SoulFire\soulfire.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:1460
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1460.3324.6822627165043562070
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:4912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffa6642b078,0x7ffa6642b084,0x7ffa6642b090
      4⤵
      PID:1588
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2
      4⤵
      PID:3028
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2020,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:11
      4⤵
      PID:4420
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1716,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:13
      4⤵
      PID:4192
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3568,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
      4⤵
      PID:2964
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4664,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:14
      4⤵
      PID:5820
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2228,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
      4⤵
      PID:6092
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1232,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=340 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:6196
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4088,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:14
      4⤵
      PID:6556
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3892,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
      4⤵
      PID:6972
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4164,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:14
      4⤵
      PID:5692
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4804,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
      4⤵
      PID:3104
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4764,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
      4⤵
      PID:3552
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4848,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:14
      4⤵
      PID:1840
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2176,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:14
      4⤵
      PID:6380
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4912,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
      4⤵
      PID:4976
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4728,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
      4⤵
      NTFS ADS
      PID:1148
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5200,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
      4⤵
      NTFS ADS
      PID:5500
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5512,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
      4⤵
      NTFS ADS
      PID:5816
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5492,i,8810911173268971904,2454744229747728987,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
      4⤵
      NTFS ADS
      PID:1872
- - C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\javaw.exe
    "C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\javaw.exe" -Dsf.grpc.port=51044 -XX:+EnableDynamicAgentLoading -XX:+UnlockExperimentalVMOptions -XX:+UseZGC -XX:+ZGenerational -XX:+AlwaysActAsServerClassMachine -XX:+UseNUMA -XX:+UseFastUnorderedTimeStamps -XX:+UseVectorCmov -XX:+UseCriticalJavaThreadPriority -Dsf.flags.v1=true -jar C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jars\SoulFireDedicated-1.18.2.jar
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    - Suspicious behavior: EnumeratesProcesses
    PID:5728
  - - C:\Windows\SYSTEM32\hostname.exe
      hostname
      4⤵
      PID:7120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://soulfiremc.com/docs
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of SendNotifyMessage
    PID:1644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffa7ee73cb8,0x7ffa7ee73cc8,0x7ffa7ee73cd8
      4⤵
      PID:4496
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1984 /prefetch:2
      4⤵
      PID:5196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
      4⤵
      PID:3356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2596 /prefetch:8
      4⤵
      PID:5396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
      4⤵
      PID:5652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
      4⤵
      PID:6404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
      4⤵
      PID:6128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3984 /prefetch:1
      4⤵
      PID:2748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
      4⤵
      PID:6976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
      4⤵
      PID:4312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1972,6905211692084619555,11268368303630308082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
      4⤵
      PID:1468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://ko-fi.com/alexprogrammerde
    3⤵
    PID:6540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffa7ee73cb8,0x7ffa7ee73cc8,0x7ffa7ee73cd8
      4⤵
      PID:6544
- C:\Users\Admin\AppData\Local\SoulFire\soulfire.exe
  "C:\Users\Admin\AppData\Local\SoulFire\soulfire.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of SendNotifyMessage
  PID:3984
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3984.1456.6758198725702390521
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:5248
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x18c,0x190,0x194,0x168,0x104,0x7ffa6642b078,0x7ffa6642b084,0x7ffa6642b090
      4⤵
      PID:6992
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1656,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1388 /prefetch:2
      4⤵
      PID:1688
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2012,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
      4⤵
      PID:728
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2272,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:13
      4⤵
      PID:392
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2680,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
      4⤵
      PID:4432
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4668,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
      4⤵
      PID:6584
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4952,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
      4⤵
      PID:6060
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5252,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
      4⤵
      NTFS ADS
      PID:5896
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5516,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
      4⤵
      NTFS ADS
      PID:3440
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView" --webview-exe-name=soulfire.exe --webview-exe-version=1.8.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5452,i,8024280226027848588,2126633140867451432,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
      4⤵
      PID:648
- - C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\javaw.exe
    "C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\javaw.exe" -Dsf.grpc.port=54878 -XX:+EnableDynamicAgentLoading -XX:+UnlockExperimentalVMOptions -XX:+UseZGC -XX:+ZGenerational -XX:+AlwaysActAsServerClassMachine -XX:+UseNUMA -XX:+UseFastUnorderedTimeStamps -XX:+UseVectorCmov -XX:+UseCriticalJavaThreadPriority -Dsf.flags.v1=true -jar C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jars\SoulFireDedicated-1.18.2.jar
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    PID:1236
  - - C:\Windows\SYSTEM32\hostname.exe
      hostname
      4⤵
      PID:1032

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:2812

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2832

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004E0
1⤵
PID:4092

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4728

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3456

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
PID:5204

C:\Windows\system32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
1⤵
- Modifies registry class
PID:5900

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:5720

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:5812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5956

C:\Windows\system32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
1⤵
- Modifies registry class
PID:5492

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
e1ea26d70deaa7c1f192a644dd30e435

SHA1
f2b37f62d6985833a5c9ade9db3f0df4a09bec5b

SHA256
0207abf09cb50b57b86eca159918d4657a96710a22ad36ebc2992434cbd60b07

SHA512
d9a30dad28f1dcdb62f669b2e6d14c8ed6b8c95e7ef8de7b7a4cf4b086199b0865ff9bc2621ffe758b99db3acb735f3904c12e5c5d18238aa977c761896cf18b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\47336a63-ac0e-4e42-9ff0-c0ae20bcda3b.tmp

Filesize
10KB

MD5
bee8ee0fe8d69ab6d91996913d6cb63a

SHA1
3d3219fdf2ad4cc9eea9e3f8371f586a1cb823b1

SHA256
20fed61a34f19d9ab99f3b2f57d4f6acf2592104afe85a3cd5a33194b900e918

SHA512
feb460737b72e6288ce5d5cddfa5126b8c8f6a441885053ba9f3d8e140a1218d1976283605384b043966c2cf05bcf8ad0ed6806feed4f515c3163256cc5b0115

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
8228916c3aa293f80aeb5d27abeac3d3

SHA1
04ac2271dcb12513ca12b0532e9cb29b7086f001

SHA256
3b5fe0b8815e0a4dd34787b47731e138f9acf7dec88d79a41dc3d26aca490ac8

SHA512
ddd02c71583703eee678c73a8fa9dc33f6e5b9d7ebe541b37ceeb744025155dfb53183fe933ea0cac4b3acce55358213b354a05f9af408d2024c191cd589b740

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
fb9d6bbe6a92bf8310127f090cad924b

SHA1
fdce468a6a51fec3b430771fa9848124ec7b7678

SHA256
a54bad648993d3a123be0ce4490f20129177741e469396cde39a1e9f4298b798

SHA512
ffdf9111f252eba2d63068ee90c5c2dbbb9e8c4b8f11790da0db1f83132d257751e100ac52bba21dde10cdb979c5903ff7ebc875ed301a94347334920635608f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
685B

MD5
1841fac6f5d1902b9f8b4bc9da17e1f3

SHA1
543c6a37ff97d17cd885417c39e43a983a5821fa

SHA256
bd0ce86007c1f84ee98afd2a07eb64aa507e6b5c6d3a0e3c625193f4d1eb2db3

SHA512
cd559cc02e19386db1985e6c1cbabd2b55521c7a9f4bfa10a92a48c036195e261cbe1f415d782442aa1d7b320bc5faf5d6b69434aac9721192564d63fdf07fc4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
fd6a818324b9e229cb9d944b58703916

SHA1
d02f19e579f42357ba63458c89614643f2c22ad6

SHA256
dae348575d825c90127571582d06aad7d8cadcb37fd3f535cb7742848001c926

SHA512
7ea16651ae5706a663081e421c8d7843f55398146fd98dbe2ba3ca50de53213e4995bc8515f54c96a9024c389de0b43a239f53a2b4eb94042d957223b8d1d527

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
4cee3030451cc681d9de1373f0b53270

SHA1
5aa8c7148d346a446a5a2e69c297b34d3fd3bc46

SHA256
7ef633cc588c8a025d86387d3a4853b7b1e041d47a3ea9ded29411d3ff6596a7

SHA512
82cbb439465b73f07086dae19b1f98b9766913ef734793a8dcc3c17695f0dbcc15ade59b4bfa479ca867e2a747f4d0de5097fde4055294dc3ba4710ac9f03b49

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
354B

MD5
0ca461e414530a42ac729fb59f4d9abd

SHA1
b9a7a1b53ce1006b03e3773ad17ed4bd063208b0

SHA256
5079a0b98708eee8b3d7c0787f7ba0b6aa81e2b330532d1c6a1fc94c7c01c6c5

SHA512
04b5eb3b2906818385a35438c4e58c8bb1e926272e8a6ec98125919fe370092c8fb32e40d32ed5498f7a4953dea581c8558c249362cf82d9129f39b255c5274d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
447dcabca6a8fc47a318755a79857ed3

SHA1
7a751c1be7435a10224133edeb9694b6d414b1a5

SHA256
18efc8950167605d20946267998a9e74a5597be5985534d2b1cc513ee2521fba

SHA512
72a2abe6b5ac4401f1c232ca4abde34cfc012fe7f6ede5048c229e11d884669e45e0f6f4aeab871924e4f19f92243616c4a22b1c6c67e17166ff69881361ef8c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
a48699da9a8ecd7f048fee795767bd4c

SHA1
e9ea383c3060be261a850f9d145e9547f71664e7

SHA256
dd52c69ae34865d2041e086873041700e1ff165d2a6feb593a5fd6cc465c2328

SHA512
271054e85db08a1510ea86d5c93307214a332b9d9f7ce1c591364a156023238e90f5d1380ac7ab226e0f1c1b3584aeb2033122e5a814f5ebca7df2c41a4083b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6805a476b18fd7a476aa0782f9e00a34

SHA1
cc19a1ed4f16dec2cfdcc6767188db8289b26979

SHA256
eddbf5c47b2e7f5d6c5993a5603ac95b227f36cf94cab0cf05ed0e4a934a0ee3

SHA512
869347311bc161bd7124b141c48f9bf2c2e67b0e33b4d09f068ba22d1c17273fce99ae84cab9f7e346b8fa91aaefe180d2e5c1032cccd2fbce2c9fdf837abe5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d5a375efc0097e95c12f93ff50338f55

SHA1
d6da9425632cbfb5c1adc5e00450f9baa3f13229

SHA256
82db2d8eb95ead6191f9f25d063faca84d0b8219af5dbbfc9c304187583e120b

SHA512
f9a0a43f428df75de73692d144121ac1ff34997714472ce4a42df24a3c84c86c99a235e8c8f321c59a627c5e44cb7e73a54ebff79ad86964fd77fb86924ad318

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
8c412bf0cd890c996cee0bf39d688ded

SHA1
54a07e611b69f63923576287a0c57a8a0acf37b8

SHA256
1bd7d720c2194889db33743f0dc3b888a21a0e81ca116769e3373550965c18f0

SHA512
7534719dc89eb6bba8710c1030dc5659f25006b1cb16e7967293a0591ead24929ac85f69d5894e07a162610a6a4f6edfe0870508245d7a07a64552cdf8fb513f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7769d24dda6a7b8255a703d7c8ea3e3e

SHA1
35990a2e2f2c7682b4ef0b44b7a96f185f7a3ba2

SHA256
a9c546553dcfb640f67a4892092b50198e2e5a08dfcb36987215b365b902b3d7

SHA512
545025c7050abf036074279c99d7925453daa23976e19be8ab5ee1817e40e08a4c32ff8452911666c3f61f6ceadaced640f429fcaeeca6920b854c1f76a9cc71

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
94663d321390ce668b263bffa8976cd3

SHA1
6a73a4e7a751d911ec32d6c0bb4637b6399f3ad4

SHA256
359afe1b4c7d56152be84bf4fd604f5995eedc1c0ff871fcdd098120a43b50cb

SHA512
bd9e069e4370f20f96d332a88c271ed8322fbddaaeabe8e883ba88b0a767423e85e2ba9ef1737e3d464690ec3684233fc0195c428301898e66dbf0e5821f5c8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7ec322d91602fd8595b07813b42ec790

SHA1
6bdaea37c0b96664340fd7af91db0f07d61024cb

SHA256
cd694179a6a8a0edcd9c36df3005d9deafb707682da96d54c638bbca808b39a6

SHA512
16bd283f2335f2ab307c80a10a1b0514d44f78c856991614306c192ad04a2968d0b2f378c2f758d71f32fdeafa72c52c8503ac38630bda3c648220b1c9baa162

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
97a42f4ee3707a0eda5497f5b1536b66

SHA1
bb357d7d17d867563b473c2171a229901e28d734

SHA256
27cd3ed3e975b4d21f7f3f57b5e615951c351ea2809e3bd8f3901525cf2f08bf

SHA512
a57a4eb9aabf556e1d30f4782fabc80601ef0530c5399d3dbc6d0df2bf2821837c7ab230c6a02814e8b5b94a82027edd2c13e31e32fe1f9eaeeab7221a09d189

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
5c767897f353b4b16a4b86b12f3f4a26

SHA1
e3c84f11b5611818457b8a905be46b7b1db8811b

SHA256
421a4b7d61f3951596541f655d35a452f1cacbd078850a51e8c42820c787d459

SHA512
6bef745d029cdce2f178d4187ef7796e6ff7cffcfc141728656060c4668fa8af3da25bf56d2f54339a872f6f609c81804826b46c032e4f43f58a3a34abba43e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
240528aa22146e026c026877ddfbac76

SHA1
2c7dd432edc492efe4b583cae43b63732270947a

SHA256
78a9c653b0be946ccafa1f04ad5bb4267c76c5559aaaec457535a8d7315e3332

SHA512
a21cd53f4a291d0a5c008624c5ccbc384b5b9ef8b5cb8865ca61c59685cc5f1c820a353c78607bcda3a837ccb93a581128aa47d454b7762f52c4bd749b69196b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
fdff7d36b00a9212db697245f895c941

SHA1
bef7f633a7050bc2e304d89685563334f0844a26

SHA256
04bdf96ef3c1945ee93e926b1058866b8d648a759eccb5c5db98a611990326a1

SHA512
680cd924b0be3e23b2799442be652010c09879084e5ea818735218688f08ce3764de00a8ad5b0584b1f61acc2492b83e271b3c818f040dcc8da802d3c55426d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1f19487fdbe92a41e63e3b6c9fa18927

SHA1
6d1ee1e86722c0b35ecfef26ce6b01cafda09d66

SHA256
0c751be1c007c0b9d5dc91c826d3f46a1d91bcbac7abe718c908b24f8fdbd262

SHA512
551c5eb97406ddbb9db923c9597766b0bcaa8de0133071b0cf797abf54c85d721fe6dc18f61435b83cb00482c0ca3d42adb72483fda87839b1f3b870c2efd58a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1b9701058009f2bd76e387ff5b284d09

SHA1
1ccb7464a75d87042b507e26e43b131f5007fb55

SHA256
19a0483c9ced625b020a3cec85e4a3964285f19ea9afe522ad6ad8a5a2245b4a

SHA512
6ee0186a81a8b52564d340d701233d35d9ffd01b472f9e589e834735facb11dbca0ef2fa6a330570accd2dac3fb25483e663bb0847415e3e6056480c752fff2a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
bc69415052a6a2c87e8887f55da50fca

SHA1
60812c31b8ed19b29d7812972b16fe9c3e5c7e24

SHA256
3bfd577c14f0ca45d23509ed89694ad95cab858fc224ac3d519c8cc19558bcf7

SHA512
ca27e4d17e3151d1a10e4b02dc89504acfeded47b26673f538d96a889d9280877061978d2970675d1d2bd53f743cb829feed4960867e8c3db6d8217359a04562

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c0416332e3d87a76ee805fe9db0581f4

SHA1
e27250230398fa13203f27ec1215dc723288ae6d

SHA256
ddb810cac2e9558831f1d2631c58a0921280bda04f297e751909b177232e075d

SHA512
599a1204be11e61fca560cb03e6e71a8bf40508f97dc75c513b7ebb95944f9a10cbf421789381d1218f185fd65c295e431bb05d81933911f1bfd0e835b3b07e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1fdc827cfa1e6ec46c97ff214e627735

SHA1
aa4b3039eb3344860856e4b2bee4ca23242344f0

SHA256
2d6e7bf6dd592e1a158c27930a858b1298391e1286289815c3dddc83a5e2a9f3

SHA512
883bcbb5c365d2587e33297dc1c38f2b072ad98d2a19314af9afd02ff9d902ef2f0da62aa335bd3a6fb5d13a2792a96ec4d6153f5083b1d405cc59e89ebc2ad2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1a6327c1bdc41dfb4b9689d94dec87a5

SHA1
4c5aa05ee55efe3f25ab8de1d39cab7dae49ffb8

SHA256
dda2cb10e88f035d299765a365c0187906678f8b04125c9017cbd5315c0aca2a

SHA512
de221fa0ede85c764409f3946d76d2b86361067eb02823b492d35891a0b13a704f096a3413923206f9b94e46200c7770027e18753fb0d2c230f54ae74f20028b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
7489f13bdd0e318387d621e67ea14d63

SHA1
d0a0dbed5c0e567a5f9fe18a28b2e3077b5ea54a

SHA256
ef314826022a9b76949e626ea82821677562f8cf4acd2417d275d926901e8d2e

SHA512
8e7dec8f54dba3b49930bb8139d48a41ef6f44b7fda6ea2037178eab9c2280565cd99f9cb3d04a2ee287efb64b49e31756124f768089ba6d7618e8c7084283d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
961c412ad15d51b8bc38691ef0cd3506

SHA1
033ccd167d551248715eaddfdf6f12c8689a4363

SHA256
2ddb489c65db7f71e76bd83e1c06ffbb6038ff6e7ed9fd0dfa84726077df3800

SHA512
42da38eae1a58778a5c33cd1d1658bbff4fe95863b0fa11c61d8dc1ab1a6066312d4d45bcd72027cab00944ca76e67ccb9d3e534e405ded0e940864fe1ee373e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
12f2599b0c4982d1b8a715d1fed3d1af

SHA1
64585fe1ab5bbfaaef34d793ee5d84613ff9f187

SHA256
872e2ced08ebd69517083ec1208827f99105e6bec9950b24b2464a726b3bb4c6

SHA512
29156c5b87a0a2b77e528729f915be23f2c7ea7d89a3e65b7baa4263f3cf9abad8c0835f9e641f731766295348c7046220ffce24ffabc2ada9d2102fbc5bf1c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
a808de1e26ff157db5409c0c5c10067b

SHA1
0f3d2d1a2d30dccf0ab53104358d8e869913d648

SHA256
f60763af3b9d8fe44527e96390cb8275bd08f74c93bf7c80ebd1c2153234790a

SHA512
5ef5a26ffd54f94aec825ffd9431d5e278fa91ecfabb43d24172d358ead317070716b3702206bef658c3cca4594d98d556c261045057e0152c7f8f95aaaef34d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0ddd46c036ef2f21fba3d5df83580b67

SHA1
4efa7f7508fb6c7cc181355b84bf178f3c597a89

SHA256
7d5a44b5d3c6febefd63ec3a764479d6e80852e572ecb9827c9d749b4c54ae69

SHA512
81eefeb2de5c472f9acf27f83df6d1b840d892c6af3950c09aa864d59c30e5a749998135d43e4deaf9584bd6dce2108d120b3b364cee4d7974f2ff5212e41f60

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
2d567c043c8d833ee727413a4c707614

SHA1
416a740682bef9040938c7815af9ecf5018a9693

SHA256
35cc81ced7cd03144144661a8d1ca3246e3d5486adbd54a0d34d84f17fd7a971

SHA512
7cd1c732b634b25d0d4acf42c809febf39120ea19bcd6ffe83d47760c7db20f237dd096b56810c568dd211cbf4cf2581153a3e82791b63a879820416ecf67ab5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
067a63370df2ea236be98d75f65600d5

SHA1
2dca094dbcaff3c96ed0876839095a57e69e0ecc

SHA256
1fe551c3ce19452c54ea0006c54d3d422b451c6af8e5f1fad487c0d762c79940

SHA512
03b64bcb863fd4fdc74818d494dd3f270f637165e3f90b059aae63b0e2e820e3f3fbb3c77716e8cad93ce046cb3bc99e01e16538aebcaf0da9a0150820a61ad3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ef37419d934e86fa582d19f9e0459784

SHA1
2c23dd56f45290cbafad6a8b3edf1505ee67c945

SHA256
bc5d3f138c7104e74262600aba60df38bd4e73118c49b887e46a137b809c0bdd

SHA512
b96ea59f65eb1a33a47f2dd7a3a53099bfa72ce8c284ff420f9c320f4a19f29e5859ecbfc9936440f1a52a85c71a156b1871bbd7d954d2dbdc16be1957c0b509

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
cc4eb6c22f0c787bd2dce52c4a0aa258

SHA1
5682c8897865e5b9d85916716ec432c05ec3f891

SHA256
f0e231030982b2b75e97e70ab490787e0887083e4fb5575ac5ac05430bd84114

SHA512
d1e82b604c78b34befe0a94d67345e6cde613346d6a6b7ffee003c301fe7a1978c06e91d752a95f147ac237900e64777eddb0c00a5beea4792ea484fd8d2f34e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7933969579305e70de3ffd050e7d3065

SHA1
cd92a56e15d9e36a18515fc2a4edd263b348a61a

SHA256
5cf29c4a00df2063ec321ed435ab7f7c89eb380f8155be2696b3be82bcdfe59a

SHA512
155a1a309a7d0d9e690eaff3aa922388a4759e9ad1b5186e85c359b496aa41fd6e8cb374bd4c6666c3c8299e02de29e69e15b4a231cda88ee4229b9db8a11aa8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b983704421a0af5d13d074ee584b497e

SHA1
a2a4d4e8650a2d5a98aefa65d60f412711992044

SHA256
f83ccf44b3359ab5061bb0ec5422415fae4945bf85853f6be59b79c0ae1fe65a

SHA512
7771abfab64b90c1bb08cc7bd834d12824c3e95837678023ee1e621e37c70aa2d1bb35aeb8c65836c1b8b43c273df924e3bb156b4c967cd89a915c4ee461a97e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
69d06a9230de9130691dadb61840c38c

SHA1
2dd3079ce1c63f1abcbace1d39115875312ebd21

SHA256
4b183c072387fd493c73e873baf23084f2df05ca9c3a605c2e2cf743d4240bc6

SHA512
8dd2abb8c549143fcf5d75e70aa59f03623df3aa370dee9e8373671bfb6811769ce9860f94c0bde46524c7b1f4895a5086068f6bec9dee52c0fb75933823b9e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e2bb591934f44d340cec75b80a827f66

SHA1
64f2eb643269ec362e1faf28384aa8b3dbcdf362

SHA256
9c4a629b165560038ccc589b59d31c37cc2c2e98373f7341641075a8709db5d2

SHA512
91d9d97b6d3ab5378b5ef1bc6df6f6568a553b85fcb2395f1bb70cf13af5c9a69493b0bf52a53854a008a0ed087856cb11fc920fa2d2549330c18ff9a6e00da3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
7284dc9f804341e72b784e9a1cb2dcf1

SHA1
3378d4d6ffa30f24bbb764a091bb08deba73af18

SHA256
55ca0dd1d820bb51c4a0014257ac4885fe7f30a86b373aff7b432526b2ff7b70

SHA512
ea61e7f07ebf4484e99bcb2b65753ee22ef47548fa31597cfe1891fc12b8fe922eb1ee7bf0d0db6a12f143e0a80e4a842aa4f8280ba748acc4de383e48ea545a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
530bb76f61cd125ddd9e0540e5696494

SHA1
40f80cfa24f2956f6e9f3c6bedbd572b0b3077a8

SHA256
2e516ce945820894ae44b52e22172405ace4d854139f1e4320bfd28485e6e659

SHA512
a27ad707eefbdd8483160c8aae2a8ac30c476e7d94de1c792c4300b3e22fc98faac76d2c47a6dd42555e4c9b5134787906f13838ba1afa6e21027980b06122df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
467935c65558c420cf83a132e45f94fb

SHA1
f9d91c836b624ed69456c39a640923e3173b866c

SHA256
579c8ae308422cb1607be5f38c2d176ac1aebc53da178fb007020f81aeb2442b

SHA512
2388bbd5483d30f5d327a8237095666e639c598ae9e3d502f6374d0b842f59f64fa474a1e48e1a45c9173cfd51f88624320b6f9506e79d3c4e9dc8f02c24f0f0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5a1e6f7b6c8f5f22008e303afc50aebd

SHA1
909a85b093bda94646d1b11c5d897d3ecc8019d6

SHA256
dc4d4380d7afa4460c3a232e9e46fecde177953519cacd5ff134a2aff66bca84

SHA512
b2d3e5256dc833c40827eed545ed5ce1a5f0290ebd844f1da97abbbe5cd9e41892d2a5511b4295f370f2a44950e0be8c3a9e571284e08cd134563dd637e7a88e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
e2164c76f3269b9054454a254e7a6257

SHA1
ee5496c8b53cc743661d221fbc063b610efa47ae

SHA256
4fce48a476c24a4584715bc1edafba7d8b06b70ac2edc16507afd4cbf2820ee2

SHA512
208fd6b91e0f7bcd26ce63372de29ca4b6f22d75f1c0ddf6591576c26a737fdaa658e1e7da5f7745c2aa3336d449d378b627642bd47e60cd8d1363749849d2b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a64ba63d2283c5c08df1af350e57a689

SHA1
411527ce4f5ddddda76d3fe2175b5155b7595f47

SHA256
4c7238633bfd4491e6710a3452e05ffee1645bc5e6de826746b4e65e987aeaab

SHA512
861f0af72f75d3e2630d1a2664eeeddcb66ee746f15fed4dbce6974bb733f957c7c1dc6db8cfd27645100e3baceed85f3d3ab0b09293ae5d43e3e1757abbb5a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
668b0231fcb625760967194a881237b9

SHA1
feec4b1292539aa24bb7980b4b42c5fcd85740a3

SHA256
8c803bae71e7ee9668b5628bd0a0f5e857196257fbf79546791afa226b982304

SHA512
a9b8e7e5e177d1d76098ccff0a12cb4c9d4c7b252823d7616fc1beea7b53de63a80864b6a097cc0d19641b25d797e76e883f3d7a4104d7756e2980cb7036e509

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
349f6439e1f50a975b3a1c9cc95ec646

SHA1
6a9f6b28612a6b94219d1295302ec4b322f83820

SHA256
6925d70546ec6e70fff1a80bc122b206d3ddf90830108b9b15866927b786a6a4

SHA512
1b3d7e040c663ed4cdd489b71d6f16cbdfb5cffa76ee4363ff1ac5b9bb1419235a5fe31710cb36e00eadb4186ddb1c78ab423061a2c07c1ffb8b8a4b4c5df476

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
8ca577c44176295caa43dbc582fa821e

SHA1
d37127b00fe635419c49164c237fee0cddac7370

SHA256
0cc583fa16e7ff7211ffe37082ecac46b81c5a2368722e0b50165f28056349a2

SHA512
f7301bf394ab00f32e1cb8c6bf01f62992f21f46b774f426f23587e122778118ba0864f3d61c3d076ada77f628c6e489d1c1a4a23d2c0ca73fa7992a68ec6bdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d688ca54c746164f0aedcd0775649be4

SHA1
19ef684bdd1b2a03419e87706f5288972a793818

SHA256
ab56bc8a466e2b20a8e1b0d5d3f31ec422e4621d1e50797d8ea6bdb21b0e605f

SHA512
75ba77b3378aa6c828eb5bb3aad18d87fc5bbaee4851ea6a3c267d885ddeaa2c21a3c4002882fb182b9d635bd18ad18391be26a9aff7e5e88e843f8e87c0b1e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ad732e94a08fbba70693c2a9701f583f

SHA1
534d15bd181826a6ebbd7ee156ca9bbdf9ddeb5a

SHA256
5bdd9331bf799e1ebc69550c22ed71417561d378e89768c1c9b6be7686d9a77a

SHA512
ec6bceef7d8d50e7e9e3c1d350a6e7fd65e477a39e2a697f8b38432182644f1ecaa7adce5ba0e6ea1de0dd9be9ff910f66fe37857cb54963f278536eb3078f90

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b9a8ea838ede8a0f1783146d34e8ca90

SHA1
b74c9b8eff2966e08d8ef6b4891dd2f810152554

SHA256
fb01bb05fa1956af6338bc599d901e3271ebeaa18a3f8bd26b8653b9a85eae08

SHA512
5ab7759802952eed20a24cdd67639345abb64b3d5a1ad85b0fe9e73577270e4b5f56a68ed014920b96a13ac4f2978c08d5bc4589dc9c8142d0698061490da31e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d4c317031679c380e70c96412925c8ec

SHA1
f2a1d2d69e500663bbec1065bd6db48ef1eb99ec

SHA256
3091fd0c8d7f319552cd0e6b8893ef9a3f06f5322ab6658a724eb347800d2502

SHA512
9724f8e64258b72cc31bca92951b7227774c2098f89832ee3c870e52abdb7bb834ef293ced442c28996b304f7e26ee3fc86ea95c258327cd80d73f50425fca4f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a108361df0c39293d878a90e1185ab87

SHA1
95ef4e86a44e69ff54f98472efe304c0262ef5e3

SHA256
7c28a8e357c86070b5685b6a8c3dcdeab409d25a4034ea63e1ebb497b941d1c5

SHA512
7ec19a88b76d0cc3f926c14d8ae8727ba6e186b3af84fac0aad8623e4b4f932469b5d319ff4c7ab0f23f07e7fa3bf9aef53be2f3784fae394544986700311d90

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
aae7f673bf0e18d4fbcf084935e16582

SHA1
443dcd0c55e9e646fe9be2fd4ee25dc226c70d68

SHA256
43ac7671eb75c47b3ebf6ff3c74ad6351610a769825cc87b7af1406b63fe1c8d

SHA512
2ffcca77a4a74f051d4a57d1d6869cf8483c35273a2784b8e02777ffd14e0d64962e7c221580c640ddba82529c155bef9da712a746cca2cae04451a268754750

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0b12ae0c5c222074efa71372ce7a0123

SHA1
451eb679dc1c2a3cc65db37b54e8d6a5677936f2

SHA256
100a7c66769d7c47ed15ab3fdf7394e4d03931b06e6494a36d013d82cf566073

SHA512
c2b8c9133e41237e59486a309fa076463df5e52abac46587a465889b9ae2dabe6a1bec76b03a0ed65da998ab5a097311d807c87bd4dff660d7f17e920b8d89c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
53df5350e77401a99dfce20e2d3d89d4

SHA1
64535d2a75985633bdfe0cb296035978a6c16b1c

SHA256
ad8012a7367670d8f0a7162fb89b4cc76b6685f42f0b7e946f1c4f364d9f4329

SHA512
8101721ad35b210983548a5d6a7dbf309617d0d541a79546853999259914055905ef6d8d9c54236319ee2c1c2d7b1f5d7c6d7a51c4791c1a6e0b8564fd51bd5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
034bb0238effe1dc403e4d67d076187b

SHA1
6dd10636b12c3508308a0368db4c11f90ad306bf

SHA256
e7d9ace90154bf3e0ff18bdd881673e7a2b39850a98c66e18caadda2a943750e

SHA512
dbfb112bde254afe53c48aa446b6c210570f3bd418f29b679bb13d7e294e69130db60732acacfa7268fb2765fba4306bc84590c8f0bf3d0af08c111f7b432621

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e2d0d836c785dd3cf16a7080bd85c108

SHA1
cc54517c655a0af24a4a6d1842bd39e6529f40a3

SHA256
d2748e2a9c41857657cdd9be738f0fb2863d080e78bed2a5cb8d3595373b2a7f

SHA512
264822f76cff8c567e405f04d0475e488fe10b640842c8d6a9a410e5fb73588ac970feebf7598916e622b8014f8973214728e5312449ec050cbe5dd562fc656d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
4d13009650221c4d06079b9275c97af9

SHA1
99e9b6ad56875ac8f65276284f536ff19c571b33

SHA256
4fed0acb036bd6d4e32d24821428d783c37051eb05a83673cf1e79e6cfe9c191

SHA512
5acef9d344ff1d1b65fd12cf287eb3a5a0b0350767c8a70102ef40d8740bd5904aa06eb577a2ffb9b4a21688d5ec4d8b3669d1d5e0b1359d6f6c1722f90ae3e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b4e673b881594bb5e1d616b801ae966f

SHA1
98646b6ec50c0f9f2462bcdd81f60107a1e0bdef

SHA256
d7c6f69dce199b5e11f65654b15ec1e3869eef3bef444d8af27893f62d2db4bb

SHA512
76d8ce588122f13d9a06e7baf43db0f4b97ab5508dc9fc9e6cae20944ec2c282118af473fcb6235f0672fb53b3da032ece8a6828d52607a5095f34386d0b9bf6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fa04fff826c4e2f56b094291b80543a6

SHA1
c329ac313e9c6dd243e5939d543d12df77cd5e4a

SHA256
e43c1c14d874ce4989d0610adb3006e811aec8eb19ff47c90f165e85186b1f94

SHA512
364245634f52cbffc6b9e42b1f47db7d89d246fa2433916680ef0f11234df8c405c7eb4d621c97bf3b61adae3e3e67a873bd001a251317e57ce1aa4a4fdebdbb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
beee7d551865c63f356d99076402f5f3

SHA1
9d98ebf331bd8f0a897531965d07464711d7f43c

SHA256
0f5c16f10127254dd9c92b272ea9600e0c4719e5882959ba302a284ee8cf6ed2

SHA512
39388f1f68c0079d3224ef5fd5914392ad7a9f5eacc9abd8cc4895eb3047a2e475c66538619379c38c8f464a97850e4879f7b3e05d0c183e4a714bae8130aaed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1fb49e6032aedf65ca0ce10405d3ee28

SHA1
36e773c11a1979604bbed61bb67fc0594a5bdfea

SHA256
a453bbd26c8484a5dfe00ebe1ab3c984b2973877aacd6913a36f97cdfd3de55f

SHA512
84df2e60290c53442ce25c64d315a1db0a21435c81de2e6b955ac8d41c2784c5e97e93321ed26887d8e00f8c700fead9a5d10f3ad62fe8f3397fefc067fd86a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
220d41200b263f39e9a1b54bb395e9a8

SHA1
82a872f2b88b7a6d66df40c7be86973e5ae43222

SHA256
eba655e3f304be2a01f0cf266b355b36e3e570162ffac1f3416310b968e883f7

SHA512
f50c38f35358c02390f9e416c99448e04833941cb8eb0f4eeb624862c81dc77221e427de718a2f3f544ba0e11314a72e4e2e6cd79f3e18543eb5190f4819e231

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
89999f39099c413891cc649f2ec6ed8a

SHA1
643396566d537a96d9fdc3619105d4b65eedf1e0

SHA256
4ab08703d583f0113bfc78a7e387f2530c4ec0feadcf3435078d51784d3b50b7

SHA512
70b3201201e454739fafbb3adc63b53e2d1d622ebbcf4e0659250aca01af9fe248c0bd0d59d69aec83baf8050ab8af74407604776fb57ab8fd1d7881e8a8b27f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7f04f1020bfdf1fbf0f4f9214ef69647

SHA1
f3d3f4c83fbbf475a490fcddcafa9f133ef27d90

SHA256
000f46023544ee26a2caf0065d47f0d1668cb20267c5a4e4a9a385057bb03df9

SHA512
38bdd09924b153bb6b42394a05d255cf795c196b34a3606f108a05241a1f9bad495f32facf5335c75a36bba595b9203f75a2f68043cb10d45ff26ecddcb10780

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
22c3cc396039c9f244e0b49cda5d9d97

SHA1
a7c6e7c05ca02be015cda193106aaa62c198cb9e

SHA256
5c4bf49317924ebf5592e989da9632c62f98c245fafee08ce468c1b31d496b21

SHA512
ab5f2f18b8d2be3d1a501d88b75c6f1dd4fe96c7366342323bd795ce67449017b05367b55436cd0da1d91e2fa2d517c8910e754cb2a9b83fd19cf3b975dac472

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9dbc3404b1992cbc04acbd4b02347bfe

SHA1
e4bfc8604fc42ea69820a787aedd79d5cfedd3d5

SHA256
f02215d557e3c43612fa5a3ccf3fdf41302936ed9c3c4f3ea2d1682bc9a6c9be

SHA512
ff1534ef08892ee371285c9816ccc46b07153bdebe6ae039e69464edf98f058c23ef5fd1a59fb2450f319aae91843d62f4ab46a4fb581211518da40765a34210

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
1d1dbf57badb2ab8c2866f18cce88341

SHA1
a6687d5717237a95c843b89328663652a6565ea6

SHA256
d27fa9f85389cc948371563e2184ade8b9560eee41dead9ae6021b8677b60313

SHA512
0a804151b626038a3cd55d10094c64e5ef64a7bb5779a668fddba6a505225e736c02090a42464a2ff40ac5d4c594c41c4f1761035f1cc435c8ae75be922796a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
19ca09649f7d85473457473561de80a3

SHA1
7c740cfe2ccaec251e5a69d78d2bc2fff2841bd1

SHA256
6c136817a87079c7d5a68c5811f5a3b6377f743dbe29db85270c297f6f3b04df

SHA512
b356d0c7c8868e4b626497fdd1f8e1a5149c80803f75cf40c41b14e7703d7626606421badd34431c8a56ff70bf071bd3bef3ad4bbc239d5b5c2aefc3d636871c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ebd560f78bce71d46f11be2fe7c7575f

SHA1
2ba1b30c633bb7b3c93d2d6f5d4ef832473229b5

SHA256
9ec42d452ecde9cd732a9151b86c2a7c62ca442d40e0bbcee6d6a613215a0297

SHA512
c42ef71552cc00efefc8041fe7ae21952e11c90f097ee01d99e1f1d506bfb30d817e284e6586092e85cc373207481eb77ae75fb41d9cfffe8a451418f618293c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
878fd28c68013e5496f0f2415287c1cb

SHA1
ffd583e3634ecdcc1af29120ba72f9c5a9d5965e

SHA256
5530fc0e0a72e8749c3081d6c113cecab16909bacfa9eb28371c145138d6fbf2

SHA512
866ba78281e17dc7a6838c247b6f3e88790523ae74e15ba1ad3a4c5bccdfe64f6c1a9dfd9528623d4d94e205361dd9579f0832347365685fb21046f77a82803e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6ef2b617c57e39886d8fffe7f175f099

SHA1
fa61ffa1f83e6f741635c6b61e6ecd07565fe595

SHA256
eaab41aebaa7a802ffa068f10c2d86a9eb44b21f2c5dc75f44f4d864a5ffe88d

SHA512
89d5c0ab2c410fdf390513a51de8b5c107cd120ea79b0ad51b8b2f419e73bfdac5573aa77f4e7abb8eb2959f9279f568c99ef6dd1ba766989e0be17f60e2a4e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d7bbd161d4f04675613f52f6a3b04ac7

SHA1
c981e79938ee7c456361951d504abbe19532d3d8

SHA256
e52db39fbf4df7122c3d11ca47ac7e359eb7e5c5469a98e94837f12bd3576541

SHA512
d7a5142fc89370d9d803358ee2f64356aaff0c81975b0f912db5b1e711614f54a827baf89d3aa1fb76767ce545cf463134c0fe20112cb713a4ce1faa4cdc1340

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
b5dc964cb434c94e5b4018b2a6de4cbf

SHA1
0e59bc7c60893b422f544f0f8d8cff39cdf5180c

SHA256
bdc5bb5c042f828639f3aa060829407c59bec0b72a5c689a1e02584c23d6f5a0

SHA512
4d4b07705183a1078d948e08299aa25386425561f06992cab1d5d918b0c92fb1d92a3c682bfd6c73bd7e8e2272b2b12df2b795218b4e8e444ed371a9e6a4d2da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2f12c9c0351a41135b47fa8ef5d6dc28

SHA1
1c50ed9ca71569fb30dbd1070efbf728f4df578d

SHA256
a948467c5aee601158f8d92f44ee5fe4a09d2e38e7871ce9efd69ebcf9069079

SHA512
e7019d01394e899f686744964b9c9ef27f47105cebe6b5a14f3ac4008e0b4560b5cd91ac2bd20e6d60202628b4a985bc3e5a3784b90c74dcdebd60826511f33d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
006c7c774809e34b173dee2e4af5d534

SHA1
baae5a3ada5387b33463016a1961ab4112744656

SHA256
996f6c2259ae6a478ef3988bd2207ad4c6a20b9d5bdb6baf6523b02c469a2360

SHA512
cb5fa9194131ef7bb3bb027897c2d6a58d660e17e854eba3c4a43b732afd5b32be41d7cece0cd77ff90c7467cb821e870b84f4365b40c9300f4c6a2adbb2972d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
3e27c560352b4fb62fbb42b784c85646

SHA1
d534728ada96812c7887686f8ed812f01b3732f2

SHA256
b6399b6551ff196fef528257d063dbe40ee3f30abe69905b6539b1728797bb41

SHA512
e49acf35e528eb0f217af25dd32cde7a72abdc4814746257f0306db8273e9d8ec37af1de902b18f97b29cadcddbb27a6cdff2801e222e7c74efca4b397b18879

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
4a9272f640ca8ed4f2aa868faadded89

SHA1
ec356f80ed516f8f177d7102a5498075c7c7b382

SHA256
804f8cd03835ec7255d1468d0cc1d114975854ff274bc34c37177e03812f282a

SHA512
e3e03f92322ba487da2b207d03b28758b7d99c63677c996fe52632db9aac3033662b0b958f665ec35f7bd64f68f66fffc2b5ce862379a0fa765764f4c82d4702

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
fa9ee42d5adcb5031b21bdf138349fdd

SHA1
5f8ceb7350102b5a2ec554be2b8812712f02b77d

SHA256
b979a746caf3f541034af4b2d585b6ea299ef85656815fdb802f9ce451998079

SHA512
d4115a6253aea32631c8f5dc47db36b5b1af5fe4e429bdaf6249d747ac7b245b89137c47ceca1745912cb318baf81b592f88385f1e1f53c2069585ae812d9b93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5ae8298955610725f84445e4e900bfcc

SHA1
bb57a043e98ce694e2b5163566927c7e167ff539

SHA256
e21ebc1f48cb0ff403a77f91770c003efe032a705e834fc6aa71252826eb07e0

SHA512
6a13f99ae9ab4151a45f4801bd164688268b41ce8b085552f70a3d85bf1ea1e88906782018716708ec816830c4416a71b6e4bdb5a5e51b557c7eec27f5d29985

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fa57578d107dc327feecda9455a52933

SHA1
12fe92ccdf4d2d3e713f529a84046bcf48801d6c

SHA256
05f587b3b3b26543bbc3d0efad2dee0dd25abeae12ec97d47a336aab8e8c2950

SHA512
1e5bd2ff56c2bc2d5c9439256e0e20bf4239118cf35253356c564ae6d6b74878c2a1ecd9ecba5d0b8b85c13ecdf56f9381ff9c453c52324dec27b0bc3bd1d676

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fdc2024988da0cd8c3accd5915822502

SHA1
d6c823fda800f92dc0cc26c9cde79760f7326a73

SHA256
664cf32136fdd744c0c875999c305859e11660c112a1ed8c3918be3669184267

SHA512
38265c681e781b6cdb9e66c2fcb9ff0c9b5c2fcf7f5ff2690778842961ed21072934e2c8ca3d38e116afa4b7ab0e12603128aa10dbcbcf5ba901fb8fb8b718d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6756330076346e5b5af813968f54ab6a

SHA1
396f5c2eb63ddce74c54fa9d60a0ec7887d58bd5

SHA256
0d6f184be3e7fd0b4a139b0858eb66b4e0b20c1d0b7837bcfeb1e4e91823781a

SHA512
5a807203aa0bee29a0c8081170848f6955373564c89e31b7cdd69dcf8ef67cd876d7d3c191eea9052b45b92644d05dd356f1481497db0aaee650c18b7b813fc4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
5cee83bf164747d15da5f066fca9a6ad

SHA1
c0cdaf3e127253b9eb28e1e96335bb5b0e5b7ae1

SHA256
deb4b15d81e0ba226fdc16ff770f8ccb01684a118f2933bd8dec1a847cca34eb

SHA512
e7076b86b6e60ea3621487a56bffab92d33808cafdce8348ec36d10729ba500efc7f3f39e2e92b69856a3d46cb7e5246f1f9091c1cafb170e541b2cef1de15bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ed19d197fceb59f1a04fd557b10bc9b0

SHA1
115b2874f27f6524a2da3c57ab92b8d3a66c1757

SHA256
ff135916d9837539786f873b707b364b5f53af4392cfedb42dd8a1f28afe99dd

SHA512
30bf60b4268e7f8439c2bc44287c97483b172d9d39d3410614a106673dee0fe7d6365dd80a91cf36cde25dabd833a8cee3616b07a30a9c9a799da9bc5f931c5e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
fbddb7f1215478747683c038a15a8b8f

SHA1
7bb73891cde0ecd276ed8b5c829f268728e2465e

SHA256
07c06fabfacd3deb3ec486f3df60fb0f7d027720e3333579563ff673e0420656

SHA512
2e8b88b0496d50d86b29496a8f87f9cd65a8ccc933f79d44a9a8e08b75719c20751c8b66495311c137057f66248446ad1644416bcefa9729ea89b286cd74f1fd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d87a5a1cd96261567b0b525f144992a2

SHA1
72e0bd151966f70bca380453fb31238ecea17671

SHA256
794f61d36c15f8155e33b4c6774e89222b0c3aff30ce42cfa9461ea633f9c97e

SHA512
2f373107c3a2a05bc6d47a10459e900f73ffe6edd877b33d027e00ea2a8a0d4b8a0d5e81daf8f374c3d8c9d6afe916b941ef91c039c0d4594a7119d1b2bd4be2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
c5592bbfb069b10a465a4b4ad5b8f0a8

SHA1
b3ad9073c5e6bb90879236c0382e70a823cf082f

SHA256
d7d5d6813bc44115fa1f233f55a11431b4b8463482085adb35b5f25a99956179

SHA512
85b778cb70a6a0c76539f10fcef6a0bd8e1af4f145e8879990e8e8bba88820dde87252e659368a139fd24f2c5efc9e57cef9cbc8f9bd41d9051b7e51c8043834

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
43ba251dd0ed96f6e2888b896c457e68

SHA1
395f23023cff63474fc4a07773ebdb0a35541ffe

SHA256
296d4fca6d8bd77da44c558a4eec6ba5502edeaa87bd4c19b717dd7efba89f64

SHA512
3f39ba8e635ffa45a5f3d6c0d52f5d1a45a8169824ca93f616cf0fcca4a07a48916d7364006d44d4a57d2936834374144323529a66d6db05598290e20a9b855c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
47b4db3cdeb765732224694b20bd1193

SHA1
dbbb82359fe0651184502518edad44df58ba8e27

SHA256
0712f0e35ff78fdc058199acb75051c0cf2e50de0a6591a58ce78721bcc79e85

SHA512
c5aa417ccb11db7277a403b816dd3fdea6f8fe6a3e5b779f1c0fe511aeca86d4f726eaa7424168451b9fee6ea34153685c2d841906782fa1b1d0095ca9a3b519

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
857e6d12e143e557d763b76e34c2c9f1

SHA1
16ebedff4b04012b3a9b48be4d93a410aafe8099

SHA256
ee0323bfe5e0527b5b69068ba756655a1f7808e5968b411c1b234e2dffcb8d29

SHA512
782455bf7e4864903ce7a5a2bbb28bc479923b9450c8439aa205088af7af7493554aab2350e344fd414d5b5d4798ad99920057d16316776a72263afc23c7f0a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ffe57ac5-c4ef-4ef8-b812-e45b7f32c034.tmp

Filesize
10KB

MD5
bc5001ecf9f663e8fe087bc4c58c2963

SHA1
40ad23932e3ad0b4706d909d26c463cb814f846a

SHA256
1a88f9033bc32785024d4b1caa294f7a60195d53bdaf7ed2fc3099ab887e351f

SHA512
098e12228c3af9951bf46ee285897cd0b1345f25ae00cc1165c2f54a0dfe478bae0d49c8c25cb3e03214b386170137212c4920924a3d661306f335df06b9e3a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
242KB

MD5
496ec555ac128014f7deacf45cc6dc73

SHA1
ce8466ee3ccfa6382e91e895d5b8587b80b9eb6d

SHA256
f6bb3ed740cf5d5150bb0867236a9851287fd12b7c60ed27e1fb04c5952e7dfe

SHA512
509b7da71e1c3666b74129e7df4d3cf3373bcb3e4695ec53096fdba2b6f9ead1d8f6a76452c17658355c94573f4f8bd32519e21557b1b0dedd7c011fbb6fc0d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
242KB

MD5
bf0b41969147610063905742212aa147

SHA1
383635b2de45f984dc8b0947ff192d491a0f5dec

SHA256
5e2071b6f436b567bafe030ef8fbd706ab1bcb29c8bb64a19362fab8975339ad

SHA512
8d26be40afc732b3ced387e7da326b2009aa7e76756c6ba000e52c58ff632550bd02505f020b8871c637915976afc9e1eb852a4e94d36f82e21fac7fbe43a6a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
242KB

MD5
7ffafc38832450a1d76ca01d52277a59

SHA1
04fcc598c0a2804bfc1b217aa9c86f8f41040dca

SHA256
b42bac5f210b0bca2325b9417e03705df779f1648dd0e434d42dbeaa8936b7c3

SHA512
f6309879c28a0cc0e0329748a92c2d41b823a355413cac4f751176a0276febacc31af80f15176a420d3b9af32facdb9c70a48eab858b89af2243b42d64984563

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ab6627d6da0724908361604b2b351b7

SHA1
d6e7960616dd38cd05633face9bb0bdd061e3211

SHA256
88a373cea6d7ad2daaee9168a0519f8a23ab9ec9cbceab97df4c8d39fe1544d0

SHA512
59903d7dd6da68cb4378eceb6e356d5861514b8365da747da4cd05615ec7c7a51c810cbac6a7a00256db1aeedad80ef71b6ff06bae61e1884e620cc4a45a2d33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
25d7facb86265ce3e89835dd7b566491

SHA1
4db1197fadadd7742986efdc2ca76f89cef96942

SHA256
3d225a00da389fde7674a7eeb98e8572be2879252290ac00faa3a80ea671073f

SHA512
cbfc02ffc441edc20c72b35d20b15178a2173e2a1c54e3736f7ba6d058e1ac7a5c1b15798bf5b91ed3a8197430f0fe84aa3d75a8aba61b4f4dd85c1b3fe68bbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
215KB

MD5
0e9976cf5978c4cad671b37d68b935ef

SHA1
9f38e9786fbab41e6f34c2dcc041462eb11eccbc

SHA256
5e8e21f87c0a104d48abc589812e6f4e48655cabe4356cda9e3c1ceee0acaa4e

SHA512
2faa6fff6b47e20fd307a206827dc7ff4892fce8b55b59b53d3e45b7dcf5fd34cebc4776b63da5aa4d0e0408344bd4602d26d09e7a456dd286e93b768cbfaa51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
832088a5be6d316395164feeb3dd468e

SHA1
db8ffd76f2433f8aded9cb64d4d7eb864f94b03c

SHA256
9f76b550534a034777a3be8be62e87841e818d10e5a50b1bb06f1346c8fb5b5a

SHA512
de6f5ce56d97cfaa0b0e8c37b1c9d5d97fedf23c15d4f0134514c8704c2dda2b2767e5d80d178777b8702758d38d373a106131afb570cf8f58d305b7473eb9c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
ce205df3872324d98c9bfc3950aa8689

SHA1
cca822e245f9d7120ce396ba1c12f66e5a9ae727

SHA256
cad34fb3e7e9db073fd59bdd91f0d1efee79b7a313869806723ac9c74df2fe25

SHA512
7f20973c10a3e283633009e0f1858bc4c9419e1e026c86f6538e05e1013937efc6ca337920dc25dd7d776cc8d2bc68b321b392f89ac6211cb7c2f3bee5ee9df1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ea5cfcc77c554650c6bcbab30811888c

SHA1
3d3d025137e582fea45e839bd65ae0e6fa346ad3

SHA256
709505496c1e3c53c84f665e6c3147f97a38bc38efc169ad967812bf50f0e0bf

SHA512
f065d0df83d97fd141e34778e6d3b8bcad8c171eb0a9bc39ec96dca51dd87cdb254edd9aed50824c52a2921b2b44a0999c481e6a9d961472a8280d3c71eb4203

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
79b735fa946729bdbe14398aacf56dcc

SHA1
15b0e71bc10e30798c07c2b756f32b526245b9f1

SHA256
06d6a3f544a61cabf84ea43bab27ac652a12c0ab78047018d82df35c6667998d

SHA512
2c772bf847e0cc9c379eaa436c3459936ce140dea0a10a78eb3cc1bbe291b4f022199a4e5b1fc6b93ce039adc199013d64ad101afdd822c090cd198e9eb28968

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
70c45924ade08f42851fd5f5b3e4ca5e

SHA1
5d07d62ca3db613f126635d0670142d620f642d4

SHA256
6ba62d5389ea71ae0a488146abb307cf07e83c2c01aab956b947f8bb71a0e445

SHA512
305924828c0d1f8f2d108bc7c0e14b3ac39b5627fce7dd0c89ca80de27e716003eb6ca88b70f160f14bd52d148af58573ebda19476b09c57253f9ba3f5fef302

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe61a8a3.TMP

Filesize
48B

MD5
dad124b63d535a938078f2791efccb8d

SHA1
e5fe13f8d90f9a7c7d0a563409f01ccceb65ea26

SHA256
86281c6b1dcf8ab56c7c58ecd0c9600bdb15a0f6bbf18147bb82cda2ca5de167

SHA512
aecdd0761d8a7bb1f255306ba90e806f8c3163cd02ea84b16709b4286b8915ab5ddc1008fb2a296aeca06fab3663225713570ecb10b581866d1d6042222afcd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
eea450b7a6388319c1d675b84bb16830

SHA1
fbe20f26b87d68cbbbe80182525cfee041884125

SHA256
1e6a9403fa3fbe60334b7042b1054e2ed7037b97ac0ee8951bd3112026b29770

SHA512
316526e681a8f22b5bde0a075d41f5ec61aad502da716468be4dd37680c16ce1738ad510488e8e1085ec1610bc78da4d8e1be5f0dde463ac3da89323c27911db

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\BackgroundTransferApi\76c53d44-a835-426c-b29e-1016c086e755.down_data

Filesize
555KB

MD5
5683c0028832cae4ef93ca39c8ac5029

SHA1
248755e4e1db552e0b6f8651b04ca6d1b31a86fb

SHA256
855abd360d8a8d6974eba92b70cbd09ce519bc8773439993f9ab37cb6847309e

SHA512
aba434bd29be191c823b02ea9b639beb10647bbe7759bbffdaa790dfb1ec2c58d74c525ef11aacda209e4effe322d1d3a07b115446c8914b07a3bce4d8a0e2c3

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
23KB

MD5
d365e71abb1e065be8760cfc85dded5f

SHA1
da621a17c2bbd215ababd5e65c92ca6328d31ce0

SHA256
6bf67fb037283102eb094811646ba5186738d3d8bffcdee143b300dba4053293

SHA512
561f234f0142f4e6e861cea564323e96611770135bc82f19403afc8e33e68c658e345d38f31ef377f944d595d142c7a7e68640c9efc502cdc69e1fab51b932ce

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
23KB

MD5
5518c2053c6760e6ad91a0d6bbfa2e38

SHA1
3ea1ff939f285e7422f9ae1096f36e239b0bf4fe

SHA256
7e21513657a233411aff338cc48b715e34d358b9c0cb7cc74751705aa9e58f4f

SHA512
9a6bb79c06cb115f4db242654a79c55f9c70b836dfd7a1a7dd25fc876600343971db451a0b4fb3ff4266318b129cb5c5a0d468cb743e132dc3527f1df25ad792

Download Submit
C:\Users\Admin\AppData\Local\SoulFire\soulfire.exe

Filesize
25.9MB

MD5
cb27f178313ec1e3b118271880eb5ba1

SHA1
7ef3219feb654fb47abef177bd4fa941ee7f16d3

SHA256
ae26ae86cf414ad87adf861ae4944525b6dd1cf7c86c7dfec02732b5e7976d8f

SHA512
e0e14174e183c12bffe39e316a565415dff384137ceebf5309f8052c1262708f31a12ed5df0441009c46d2dc57e3304916e4e35f008b2cd8fd347b252a96b3bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\jansi-2.4.1-b64780f9821fe68e-jansi.dll

Filesize
127KB

MD5
6e9446209300a85dd5e39b6ba92abe7f

SHA1
bb411127e75b08629b68dde446d9253d23b81a62

SHA256
7020260c8db5116042315ea73714ac36ad94acdc330852280e889212506085c0

SHA512
573b88d731b058e329265ac44966e4265d1b5e3bb47831d4028bf546d8ed35be9406336f7b3f9ea7e9b6f1c800fa29ff01501725e9be735f5929390645f9402e

Download Submit
C:\Users\Admin\AppData\Local\Temp\jlinenative-3.29.0-d098ab1398a7d2e4-jlinenative.dll

Filesize
126KB

MD5
32d7b102666d614d0cbdc5390cf1b839

SHA1
c68956bf20a23c001b26c020003cb01ec8cbeb03

SHA256
3322cf464b273c2e0844b32bc9c16cc1909eb8c393ad65cf0202d0cdee177669

SHA512
077befd6a395424bb3b95dcf8bb7bbc07a88034a811f14162cfd11aa97bad907f580df2cd12a29da9305ac86ee18278edb7247e304b604f7b4649e668ec5a886

Download Submit
C:\Users\Admin\AppData\Local\Temp\netty_tcnative_windows_x86_646718879683650200893.dll

Filesize
2.8MB

MD5
f91aeccd02063f28794a67a4eec5394e

SHA1
45d63dc51abc6dd5eb7daa4cf122d3ebe76f5947

SHA256
1ebf9391505aeb7993afe615e6808b2c0f7113275fc09a52843aa47b14f1a051

SHA512
f20d3e811e6dd820172df7e653d4d207b358375cc295ff0b94da5b10600ee724eca4e84e2d443618a953a11c91a1e62b9c51d2e17f4ec2db70f13bedd1b7f6cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuE84A.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuE84A.tmp\modern-wizard.bmp

Filesize
25KB

MD5
cbe40fd2b1ec96daedc65da172d90022

SHA1
366c216220aa4329dff6c485fd0e9b0f4f0a7944

SHA256
3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

SHA512
62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuE84A.tmp\nsDialogs.dll

Filesize
9KB

MD5
6c3f8c94d0727894d706940a8a980543

SHA1
0d1bcad901be377f38d579aafc0c41c0ef8dcefd

SHA256
56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

SHA512
2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuE84A.tmp\nsis_tauri_utils.dll

Filesize
30KB

MD5
fc4691e51cdfac476b2fc63bbe951e82

SHA1
6532da4545864c6ec95f62f27f2199bfd668560b

SHA256
7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464

SHA512
5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed

Download Submit
C:\Users\Admin\AppData\Local\Temp\sqlite-3.49.0.0-bd1f541d-c0c3-4597-b7b1-e7a46c3d0995-sqlitejdbc.dll

Filesize
966KB

MD5
1a2d5903031a5e0e104b0d43dbff3f0a

SHA1
8f92a7bd5a5248265de97e4ad12e6baae7921e44

SHA256
4395dcfe98b36c395e6deabe79f731d59265255eb02912b6ce9f790224c9674d

SHA512
1dcae1b7b6be33544adc60e32151ba7f163bc7640bf57ba727dd51af6e2a4fc4dbffddc3be372585a40f787324b831d203c3aa50b9c3373455c5332906ad756f

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\AutoLaunchProtocolsComponent\1.0.0.8\protocols.json

Filesize
3KB

MD5
6bbb18bb210b0af189f5d76a65f7ad80

SHA1
87b804075e78af64293611a637504273fadfe718

SHA256
01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c

SHA512
4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\CertificateRevocation\6498.2024.12.2\crl-set

Filesize
21KB

MD5
846feb52bd6829102a780ec0da74ab04

SHA1
dd98409b49f0cd1f9d0028962d7276860579fb54

SHA256
124b7eeba31f0e3d9b842a62f3441204beb13fade81da38b854aecba0e03a5b4

SHA512
c8759e675506ccc6aa9807798252c7e7c48a0ab31674609738617dc105cee38bce69d4d41d6b95e16731466880b386d35483cbeea6275773f7041ba6e305fae9

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
6097d8668a60ba4572076680e149eb3a

SHA1
00c67164e96b3a842ef71411aab2718e55888c57

SHA256
eb9548e3854a2f7e81ca8585622b8b82a433b8f29aee9322286ee941ac79a23b

SHA512
328b3931de710dfc6b817bd048dfbef5fadc6220fba553b9665ba9df4676ff65c885441f793617a42ca6dd693958c0748c7eb77afa0f5ca598ef8f041dcaa4e0

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
14e963a2095ce4716b1af4b56767b858

SHA1
aa3c6659b68c29ada9859613644ce4311f87953d

SHA256
6edf920833206e3b47796754c9732d3ec679821fb6e2917751b7d2f1d7790111

SHA512
f2c865d3461c6a17bc71d3d04abb460c2aca56409c67bf4c97dbbadd8d66826f03db9d3fd6df2e53591dcf0ea7fcbcd41acf74ea75a2843215fd613baf2af3bb

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
8337b722d8f1c20b7d56ec0733bce09c

SHA1
22e577d2ea2a77c08d3e31237428be214a3540e8

SHA256
64729e0e64c40c91c4bd5cbb6402fb4e9a202a79d0c149e3d3bc79628a1fe5b8

SHA512
18fec8ba9b51c8f4a53831e8350068b59f866abc16d2e5c4f12af73c30bf8c12d7f5267a2d897bd44f434a6e432de70bd0cac72f924c3bef8f9188b265566e36

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
8886a58b98e22b60a08b9241e98fe38f

SHA1
822da820bf0c815ec1675a57ba4a3cb51405b381

SHA256
6e049bf8dac2d87b0067e5481f1b31b26fbe78609623f3d7ef5645d2e6a04a42

SHA512
7bda3a3c9f9b9e9d3d7f7965feb6776cdb3eff93cd3d254bfebe52d795af3c1aada6b3ef01766c549243461cdb8af1ba90650d060132da887cc08d02f26a10a9

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Crashpad\throttle_store.dat

Filesize
20B

MD5
9e4e94633b73f4a7680240a0ffd6cd2c

SHA1
e68e02453ce22736169a56fdb59043d33668368f

SHA256
41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

SHA512
193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
6f7bfe08388a369ad69b0a6164f0e86f

SHA1
439a5a75cbb89337c30aa185d4a969d493319070

SHA256
70d7a0743fed34f6d52651c4d6777ec4fc343b811ae19a97a4b68598b16c033d

SHA512
6b5611c31c9f470df78dd2f10dd3ccdcc36760f91ccb7b0c7d9e3abbc28a37f3e381bdcb18a2d86c24555b794b52ff923613dc004dbd0cc8d994cb06f110967a

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
e3370ac8fd54db20095f09edefe7bb87

SHA1
1e35e2490955fafa14f6d53d40ecb88e8e4ee219

SHA256
9bc5775a4f6c16ce2225ca9a5b7133bb58397da64f429f303bb456c39df7a0ca

SHA512
246c8448f7f4fecaedb0966a6aaf37271215763ff0484b5d18c7d847093c3ce6893dca7ed68fc75864ef959b4e9d55b740eb53a3218f3052a30ed37bdcd22b5d

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
672B

MD5
022c817da5e279e2346ec15f2c1b2e16

SHA1
1f4b40b878c8872df3b8f7c7be8977942e1ea97d

SHA256
408ed049d76424e8f92b86f95c2c21a2f85ee2b4e2a36bb3c8e307fc4a35f5b2

SHA512
0e2d41e86ff7b2e7f676f5c8a235789bc29132c77bb8a18ab9ec43ddb318eaad373252cf3cc77abd246648b35c1010b892f618d25106f989eaedac1b366d2adc

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\DawnWebGPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\DawnWebGPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\DawnWebGPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Extension Rules\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State

Filesize
436B

MD5
0776f8a10e56634a4e6309f77de678d4

SHA1
c0aafcd57ce7f37776676935c40449903bc6815a

SHA256
ef95527313b047b7e0783a1448d3963018805b60873701f144453fd217d55dfe

SHA512
79333ad4caa6f11624e8bae116d79cd4f39b88b4ddab3a1390ffeb6dfe71c52d9bd43fc4279caa98d7daea96e006c40e0ca57105cb81e8e4731c8ded989e29a6

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State

Filesize
914B

MD5
18b2dd1b0068d86e2f8739d6e73f51b7

SHA1
c7638a92bc687d3dc87883a79c0c7f43b521e13a

SHA256
22a7fc7442749fc5e9ffee0b33e1790831d973f6f907d2152109adebef3eb822

SHA512
da24af41324833f78a4206141585235edb2544f3ae9cc3da7e3a4e123a037b5281761baa52e47313d1ffd4b184c53e2ee1e44d2bf261b3014fe5561c720cdd82

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State

Filesize
684B

MD5
8d5756c1c27944554adea9d4002e4692

SHA1
e078cd552235565030e29d0731ba951d16c9397b

SHA256
4a28d7032d50215611f2693ba527929671dccfb6218d9abe195050cb64251325

SHA512
cdb9918379d381f682ba17ccfd1d1cc6a31e5d7e7b7be4abf8ff4b82daeaf6c3ee44fe83200abf79524278c67012061aeb2b2e42b6f77ef6c2b32cd3ea3e4cb0

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State

Filesize
715B

MD5
62390caa3fd6a89876fd46a97fa10a06

SHA1
9a39d6c1a6e62747f868d22f77975182911d6acd

SHA256
7ab7d241922b4cf2f108ef75382352a107e090b30ea6227b2072e648cfa67e7e

SHA512
29ead7ace3d1cf21caa0a79416711ef264dc94fac0d017a4dfb924e17121d4aa9d0aeca22e03005b05a712bc51687ebaea61fedd2199ca7dd84020df72464ecc

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State

Filesize
715B

MD5
e6420486240b15382966e4025ec7b731

SHA1
65d60ba5a3dfceceb6ded63fa9f8fdd93988b4dc

SHA256
a414f120422ebe3a2c13399372643dd220ec4f76e524ac938790aef8f47e6237

SHA512
ecd8c525aa9785800fa70001d637d33935470e1d6f7b2d61683bea78bd37bed770e4219236909bc324af1e99d379e84f0f8c24a57fe9dac3fef905d4a6f48453

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\Network Persistent State~RFe5a5ce6.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
edc9ba5cd1b01cd82f396c46071e31ee

SHA1
f122a9173701bbaebdf3715f7a82be23b8b69428

SHA256
411cb52b02e9fc38a66a9d842ed57c6ede2fef3e1f481036aa15e257df107291

SHA512
34fef2387e10740c80030bf03edb56d896f61296142c1ee97c5d8f9ef22acb33399c19290efa307d728a35c111a8080e78f7c5e743a0c22b5d82d8566a1064cd

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
30bb2c8e537c63b3604228efd4038225

SHA1
b55d41a9cca97a037cc57d4e85d3fcdcff95a9d9

SHA256
53c7d1894237c5951fecb2244aa97a3ebd00733a295d6a8132abc12709213f24

SHA512
384a8cca72483daa8aacaa2487a08cffafe893c4fc0cb8993fb6478b5db1fa434bdb2764da071fcd1339dff9c32e5935f40c0c1f3a5345e936b81e013bd7ddf0

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
e668c9326d7775eab6e86dd6b9a5c74f

SHA1
798e953bdf4240f4a8c158110f8b7024900e962b

SHA256
6ed0cd09275d2bc7f2c8dc8d4ff6ae631e5169b99317b9ef0593080d6a0cde7a

SHA512
06c1118564fdc91afb3ca30f3214ba96dbce63856fcc4e7a870d6be7d78defa79b038e74adb4d85bb21b79ec2a8d30f14c82d4f2a0939e2f08ac9119d4fb3035

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
446d4eaf2fe44e1dca31cd8aee679aec

SHA1
9acac99e092253e1bc5374fd6cfb7a2997526df9

SHA256
28d4a9c23ec0d60e6a56524ee64f6ea22ccfec1ae1a5d3fcf9e1afa365494fbe

SHA512
a898ffa0fb0e8a4fe5f70c0239c89063e552633775f1400d0d40efaad24028668e5eecf82a481530ab99f6f44e48387646c24eaa7d566ebf43c010c46db71fd7

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
6205ccd9a7f754ad23b12b3a40d504b8

SHA1
a157a71dde8aa8000d82cdbf9581097efa00bb36

SHA256
45d1476bd1dbab0dbe9faf131fc29364409a07bb597a2d473f317b47354ac96c

SHA512
d3f964a219134ee6c8487b782da94dead54df208c2fa19c99d51e755e188833827f04ac8b858b5e0dc87655f24c84c53f58bacb7085e258d801767327cb4046f

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
f70eabf7b833bb7c4a59707666ab7594

SHA1
573fd199bd52f5ca0ebc506eb396747cbcdab6b9

SHA256
36ff91735dd87117975d77e6e0142183dbfb73dd5a974bf3be6125dbe6c91583

SHA512
3947cc7b6be21e60c7b4466e1049dd05365f417c135ddab865a9ff1fbe74dea8ef7b6b59b7a29846752e1344a2a9682c1f47ad653d33fa920c98de9d7989da2b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\TransportSecurity~RFe5b4ce4.TMP

Filesize
356B

MD5
745f47c774ca4ae9453d55feafed7a13

SHA1
3682c052b23367fb741d3a5ac1a9de3f1a9d66f3

SHA256
d6d3ac864f0dfbf07d694edd85c089c1ee529ab8bf434d19b700fe85a41cba95

SHA512
cfefddaf0f757bd017e2aeccde45b79b1da69fb3db1bfc3a4dd6f8b43bdf1fbd36ed26a356b28bb78f5b820766e17961af92b50f14ede045a265da9efa48b304

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Network\ae48d54d-7475-4f3b-a43b-1c663f9033f6.tmp

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences

Filesize
6KB

MD5
329ef00227f3b15fcbce1743aa706ef4

SHA1
f14f7665bfcd21f92228a15df500dfe9cd804eac

SHA256
1f614ec13526a6d49db2587130fdea46078c4856b0caf90f5bfac1190205d7f7

SHA512
0fccc3ea57d1c93bd5efb50505060fa71dacc0ebef4b00057d8c4345131f1abca57436d3b92a145f180b4c684ab3a37980a411a7b67bd7996b888938d2fd3c1a

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences

Filesize
6KB

MD5
1073da01faf0636aff35b40234d683be

SHA1
4f520ada4c96830d5e473681cf6c0169dba7efb9

SHA256
937fbc32042044a9e03ef7517e8aae2ab006e9d7ea3b0e4e93151c2d4ee2da6a

SHA512
b04dc9ce45a02073b623765cf784ad1f35e98bbeeae9d5ad399801e28c40a30d47b1ad9a7a2a6ffa39924d385f978b75ddf9637b59f79a2866e9ac9974cd2566

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences

Filesize
7KB

MD5
016999af9ddeac14bdaac4329ed6335e

SHA1
a88c5027c88e7c2e5893c6d8bfa56d99dd772a1c

SHA256
ab653a2c4ee695cad18592804cbcb83bb6c2a2c5b254b0a8d2ebb4e04cef7125

SHA512
1790486c35801298ec0ba86cb25ad7192650003aa6bc5bd45c15c1afe046b601f94c3738af316b584f34ba296f2b7d07df0d9d0f19ef7beb75bd45e70cb498d8

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences

Filesize
7KB

MD5
ca3c9ed7e81ab62388d72e1a2808d670

SHA1
54074becbc41448cfd73778ad039b3186b2f5476

SHA256
b694c06f879dfd1f4465c951c4b8de60634cdab09b858e76825745b9c813e85f

SHA512
1b42299502982dc38d51b2a9672ed2660c418037a17d59d0efe16d1d38cfa5edc1d290c09903d1c76cdf15301094064ce7cbeafb57929e4375826c92827ef0b7

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences

Filesize
7KB

MD5
2232b29242013f772badef7369a3ac76

SHA1
9c26f0cda5d274c21f2dfb51980970d9a68d192a

SHA256
8e3690c94c2fcdcb8b9588067890c9c0e155898cc66d2d398ed20b45db7a1d4f

SHA512
2408ad65520b6b0865aa3ef546ab19276a19f515c26dc539ac8c9d2cc07581985ac73bdad622b66469ad1f1106eb8dbfbebbd027ab234bf016ef14c42493767f

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Preferences~RFe59d8a3.TMP

Filesize
6KB

MD5
4be14b10f59e6f86e203afd12d18f4e2

SHA1
d3dddd899ff1024a8e24c404e68478445264a19e

SHA256
671b17bf2ba3ce719bafb18f22a5c0131dc3271a2d0579fb2620aaea5898eac0

SHA512
51d6283caa70e03a79005c03b3b3c089c1112e81992747f443934fbc69ba853190d2ccec5c7f95a273b8eb99b943dc0c0c1f201eecbb3f53639ab9df40d39736

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
1KB

MD5
e33e1e2a73c6058ffe951de6e1dba258

SHA1
06d45d5fc8217569a3586079d1b6f24f401796a7

SHA256
b3e38d34c92356435bda3e9a314946fae3188072f638afd4e7c6c63c0b73986b

SHA512
a992eeabcd723a134398d14bddf9317c4f9220f8ee98e5236c8c1c505373d900f709d7ce6ae15c1e134490da7f254c1f8f1a55f5aeae62561b660bc51f2bc8dc

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
2KB

MD5
e957f7dbb1fe48c62e639a8390b5149a

SHA1
feb188240c6ffbd524ab70941d20a22c47a3180e

SHA256
a91ffdf988eeb84509a642e1e5eb64b4c414d956c49a854a6711eac86a1351f7

SHA512
e3c956655247d1a7894322e65812ad9a7dfafd8f8e9b92b92bad314691fbca2a6e9a9e325d1f97b5bbd473ae52101e8321c59d0d995afb13d459918a0bfffa91

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
3KB

MD5
f6b7d108ba9d017247b2030c69aa1af7

SHA1
9f6a8d4b6e92089760f52f1510145b7491bc96d2

SHA256
12b882b73f4b969c3f77d20d5bb60abf62543187585dba01ad702853738d6fc8

SHA512
ddeb7f9983d7f2a147c08bacb3c29c0eae4e549f77e62b91c9a00c93137996048ed0cac66d5980c3f6b3241cdf7f377581ec5152ee81b4b97dd0c7890d49c358

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
16KB

MD5
e3365c9af3ce88f6a6e2f3839d4651ac

SHA1
834ee188581957ca0f0b9030b6ded70350bc33e9

SHA256
be5cf00535ae356fafab7a0f6a1274656905cd17c100eadbf4fc66523a08d63e

SHA512
9c3aec0d21886dedda0670420d680546c2aedd3704cf642fcb35d20a37a0888d94bce1b4d3db1da7db65cbbe4d07e6b9d801f1d5b5deeb09c3103b61a5128e22

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
16KB

MD5
2d333e6fdddaebf6b34e55bdea83fde2

SHA1
bf5eef14a8ae8ffd00441d17178ffc59b5240d3d

SHA256
453abace36f804613d07045efb0ae4360071117dfeb21d0447235b19d8293fec

SHA512
7a7807c1a291f83879e9e6508892685bcf9fbe94930cb788a01dce30334b2e1fd8350ba3f962e1a3af61aa34fe45daad3161e4c22b93abbc2f5ab6a84826ef11

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
17KB

MD5
c995e489fff7a0088be41b000a431b85

SHA1
24d4f6635d16eba5d40026f16b44f936fc48abfc

SHA256
90fd0bff39d98b29a000fcedc7e9dcb97c5652ea53f183af820daf0210b979f3

SHA512
2b246901580b89a944ef3615d90e3ddfe3097a46e5b029a5f31f5614aa5656c7777dac48e0819e34e94e40cc9c5567511da703d47223b55f268c5c5ca9dca617

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State

Filesize
19KB

MD5
3bc45117ba3004ed89071b2a1b8e14eb

SHA1
2e975f90be8e2d2110f520210fca87d63730bbcf

SHA256
8ebb97b175cacd0a3b561260e7adc72b51129f7703a0c21e8c3bb4ffb95a4df2

SHA512
b55cd6f5ee0a9f959782037e2bc140ed23d59111580c743a80404557bf60074b9ca84a76338871a2927f724ee81481ba36119fe088e04628d937341f3fd76f4b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Local State~RFe59403b.TMP

Filesize
1KB

MD5
f00c40fe8696e24a3d5b37a03715fe29

SHA1
4d48fa039fc1d567a69b117c356196b14309d922

SHA256
4cb5f126fdf95525206ba4c65b6ac93deb28c93001600ebc3ce1799b2f8336be

SHA512
9c95a432a6bbe660ca988207183facb615185e595227a5ec8ced37567302123f19fb75c187776fa3cd866cb687ef31671d20bdce7eae67406e70fd3c6701b8b7

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\PKIMetadata\21.0.0.0\crs.pb

Filesize
289KB

MD5
24a3775317d74ceea8fba6f0cfbce562

SHA1
fed5009eb51938d0894a9bb7aee8a97873d9b6f3

SHA256
192b206ad6f649f6c8767f6a3b11d9c5354710602bf0aeb4157eea08d7461ef7

SHA512
245951359283bff026aad50f7768a9aa59c1926ca7aa441c8f6a3715be34925332eeef4115a442a7841429400105d59d13937ee3aa9b80e83f1982893aefaa8e

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\PKIMetadata\21.0.0.0\ct_config.pb

Filesize
10KB

MD5
09b6469de61db3473bdfe04951f08529

SHA1
d64b455ae9c65d8d8629a128a9f3505ef3df3555

SHA256
1c435f4448dcf1784637fa9470546d12d7db2420a11cf8b5d6343439dd401c60

SHA512
049d3c0e05aa3ab1d4d51cc5bd72603f47aa33141bf771cb86baedc19b8973911445ce74256ff1118483175cf4a104262a22ae9431a6366cbd1f7d28553fcbb0

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\PKIMetadata\21.0.0.0\kp_pinslist.pb

Filesize
11KB

MD5
2d8bcb7c4b2dc669429bd40f7048f62a

SHA1
43a332c99105dcfb67893ea167879c3ce6bac8db

SHA256
7a0866cdd7bd21b8b08d166edb3f6adf8c859b47988b9b3ba3f0eaafabe10ff2

SHA512
15d3c7c6df2c3c75daf7ea9165687c5a6f8acac3dfe83573e20aa1bd425dde8fc659fc2c1b050b3e8ddb28358a96b9e0c083e61fa5d63ae34fa4b0bb63db8a76

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.57\Filtering Rules

Filesize
1.8MB

MD5
d7c9c6d2e1d9ae242d68a8316f41198c

SHA1
8d2ddccc88a10468e5bffad1bd377be82d053357

SHA256
f215127185b2ee6b01e12b6ca75d3e5c4e454598dd4aed36124ae13d59afd547

SHA512
7fd14824e9200dd99e1fd2cee402656dc0cfc3d0a60058c5eb05c68e9e65b7f0b47e550fb4d6c2b59eba204dbf3ef9e69dc9723b43a9b3ccd5412d6b77715fc3

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.57\LICENSE

Filesize
24KB

MD5
aad9405766b20014ab3beb08b99536de

SHA1
486a379bdfeecdc99ed3f4617f35ae65babe9d47

SHA256
ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

SHA512
bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\EBWebView\TrustTokenKeyCommitments\2024.12.14.1\keys.json

Filesize
6KB

MD5
b4434830c4bd318dba6bd8cc29c9f023

SHA1
a0f238822610c70cdf22fe08c8c4bc185cbec61e

SHA256
272e290d97184d1ac0f4e4799893cb503fba8ed6c8c503767e70458cbda32070

SHA512
f2549945965757488ecd07e46249e426525c8fe771f9939f009819183ab909d1e79cbb3aeca4f937e799556b83e891bbb0858b60f31ec7e8d2d8fbb4cb00b335

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\java.dll

Filesize
118KB

MD5
b8f9d4e627536e73ba387de89ea1a175

SHA1
ad64f514572a512e8e80c458d23a931fbdb99705

SHA256
f474176d8e3e8fb77596cd0f902c576cc954d17622aacb2c474404395a981ce3

SHA512
1eea44d4ad4a3062b0230eeaea33e9962768e96bfd49922baeba9f2352b943caf5b24d3095cd1f3cc39ad431aad562b511421f52267d52341f0a1b6a49e72e71

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\javaw.exe

Filesize
48KB

MD5
8f3cea4ecc6d33e6774a71521df84bec

SHA1
f5c861c029954a95852dde3623677ffbe4d575f6

SHA256
f162274fe8723a859e70b863f83e02a95b418812932d94ea3c9105f0265fe48d

SHA512
e6168c296ef64505d9214970cc30a92bb04c92963186e3d8d3d916826f322366c1425b2cbf64b383bd75610e061f1706918cc375dc994f778167d135f6077b08

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\jimage.dll

Filesize
32KB

MD5
21a02272f514787cbb894834a86db8d1

SHA1
27c46d3737aba5fa4719bb169157383bc59fd6b5

SHA256
0bd4173c377c2a8369803adf92862e314745e7e01a44edd2685060cf8699da20

SHA512
7d439d3ac47bdb030aa8be964bb9c02fde66325af157f9114e8d9247068ba473922c456ed203d5deb393711ef90c01ae6e0bd97419c81faef95779dc681006f7

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\jli.dll

Filesize
87KB

MD5
7343522fd185f72df3abba7ff67f2db6

SHA1
3a5a3aa04f8249e4e39da041ff7a8e2014ac14a1

SHA256
7dd4a08bbd29ea590dd8253332c6e33df4f9052a599710e4c30c9eeeed9db35e

SHA512
39956e14e6c84f04c7a17b403ba0c3ee9f5e76bb7b1b27c8124f212c1d24d429e4a4afa166f8ea915ac1722af1150e7faef2c5eec0c1b5c46ebe7b6ddb182029

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\jsvml.dll

Filesize
849KB

MD5
ae0ffee3c346d1c7fe6d0738069cdbab

SHA1
64218372a65e90a39ab04ef7b02dec714d0031c4

SHA256
9b8a36cd33b25bd81388208784d19a137f685b14b7b81be77bec4a9471c7d6ca

SHA512
faff265b2660d23cedbfe9a0363e68b9cce89a3561fc35ff21df76db1a4f6bfef01b4c3e69be50aabb6e96971cad9f0148370b5a0f5fc12b717024f756a8d278

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\management.dll

Filesize
28KB

MD5
c283da05f89ebc560d21ca2b0e6f8b22

SHA1
aeb775cab68bc75362f15024c151494bfd4da43e

SHA256
b200863064edee7ae71229e72820ed69b10ac59f497725a5a3a041736712a056

SHA512
9ffa29e94b532ad8eee9d48de0b3bfa738846fc4c098ba6f4d267c4a1cb5b4072ba11b1f40b48b41a63db5651c12ae5778523df0c5044a6c729dc341a6a4ea52

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\msvcp140.dll

Filesize
561KB

MD5
72f3d84384e888bf0d38852eb863026b

SHA1
8e6a0257591eb913ae7d0e975c56306b3f680b3f

SHA256
a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde

SHA512
6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\net.dll

Filesize
58KB

MD5
cd0c6c6f6a96364d3211bcda4d903b5f

SHA1
adfeac52d9ff3161a350a6cd1820f8ff0e08eedc

SHA256
1530c4d8c3737e04910137256d0513e20bff854b08c0a830da73dfbacd27be60

SHA512
2e3bf431fe16f152c5b85b4ef3f497499220845000c886f0facfcd66558b00e40f91c0c9aff112e31a62ecc927b515d46114659b86804cfe1b09ade253d4c91e

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\nio.dll

Filesize
78KB

MD5
d35a0d9eb225eae4b3d4a719f4d42b2a

SHA1
83fc1791b23bc90a112ccd9a57e6cf88f21f6762

SHA256
abd40c27d299fd26dc0c0e030257a1db9d1f3b330451671073bf0f5f51f5911b

SHA512
23706c74fd1b40915d1fe19e2f1cf2616103ce02c89fc336bd7b17d7466ebead53947941addc11e921c4ca155a1c3044bc30875821fc2cc17fed11bc3e248afc

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\server\classes_nocoops.jsa

Filesize
11.9MB

MD5
7afb492e021de8019851e0640c0dfd10

SHA1
03f7ae7a462b6847a4ca2830368c2b1b8519b4e9

SHA256
0f4ed088454520f1b6b773b4c1cfae32f21577322cdd05a527049b159cfdf552

SHA512
b1382130268466c35a1ebf0945c0f1437d36ef020a45238616e3f038d977e8cdb94d9bbfbded3f1501b4c9fbf965923d7b96b0c45a4220348d98367269daedf5

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\server\jvm.dll

Filesize
13.2MB

MD5
b9c8a7ad16b31b337b431721e7571274

SHA1
565d2b35f77532b1695abee8465643801f7f1b46

SHA256
c2bcdbc497292a1f31a43f39c7c8d03f8ea9c9db10d6697d6df84bc8e59fc35c

SHA512
2e0532eb592cf10be089b03559861dea756fd3312eec0f238617000809378a54d3d248ab6b46cce27ce063d9f60219f02cef87070c7e57cf47abd9d1ff14dac8

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\vcruntime140.dll

Filesize
117KB

MD5
caf9edded91c1f6c0022b278c16679aa

SHA1
4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a

SHA256
02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a

SHA512
32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\vcruntime140_1.dll

Filesize
48KB

MD5
2bd576cbc5cb712935eb1b10e4d312f5

SHA1
dfa7a46012483837f47d8c870973a2dea786d9ff

SHA256
7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637

SHA512
abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\bin\zip.dll

Filesize
87KB

MD5
81ecec3848e39716ec9113d7204f2d45

SHA1
08f01b443c99d03c870f9c161d6d2550b5656044

SHA256
8bbc3fabf069699adbab5276df097a9a878ebb3e4552ff3f22d9e861f268574a

SHA512
9a6cd89600bcfa74a48b8616a6c7247c5283eb50b022c3ae93a820ffda281885bf0d032030f1d0c5a62e689882ef1f0db5dab5a61e2b555439edee1a8a903873

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\conf\security\java.security

Filesize
64KB

MD5
e1b7b2a5c7e2a1f425e5245888e8ad91

SHA1
fd76a263a2ec03b695987411b6ac6178c2cd83e7

SHA256
327adb06968ca5b45ac7b3b0feec12a8ca20286f1ed1152bf23f639587125049

SHA512
cc65b4d186500661fe36b6aa605fd747166cf8299cf16bffc093b5b89ad69c429875192646ab4fa7c987c089d7d9baeb33a85291bc8ddb767e6fc78f39c03f9b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\jvm-21\lib\jvm.cfg

Filesize
29B

MD5
7ce21bdcfa333c231d74a77394206302

SHA1
c5a940d2dee8e7bfc01a87d585ddca420d37e226

SHA256
aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0

SHA512
8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b

Download Submit
C:\Users\Admin\AppData\Local\com.soulfiremc.soulfire\soulfire\libraries\ViaBedrock-0.0.14-SNAPSHOT.jar

Filesize
1.9MB

MD5
aa6f0790f8eca87d47f284536df2b3a4

SHA1
2334e6bc84797b839317b914bdd8afa5c558edd3

SHA256
311a69edac564c7e654a58f674f96b8d53da6eaea472a90282ef060dc8fc88e9

SHA512
38ad82fa329457332645d607f46ffc70f8ba3cb310e5a1a56667b8a6b6677a0412b96fd436a5683d088cec23a21ea4cb0e5ef4d76901b15c0d10d4bdd945b1fc

Download Submit
C:\Users\Admin\AppData\Local\jvm-extract\jdk-21.0.6+7-jre\legal\java.logging\ADDITIONAL_LICENSE_INFO

Filesize
49B

MD5
19c9d1d2aad61ce9cb8fb7f20ef1ca98

SHA1
2db86ab706d9b73feeb51a904be03b63bee92baf

SHA256
ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9

SHA512
7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b

Download Submit
C:\Users\Admin\AppData\Local\jvm-extract\jdk-21.0.6+7-jre\legal\java.logging\ASSEMBLY_EXCEPTION

Filesize
44B

MD5
7caf4cdbb99569deb047c20f1aad47c4

SHA1
24e7497426d27fe3c17774242883ccbed8f54b4d

SHA256
b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a

SHA512
a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619

Download Submit
C:\Users\Admin\AppData\Local\jvm-extract\jdk-21.0.6+7-jre\legal\java.logging\LICENSE

Filesize
33B

MD5
16989bab922811e28b64ac30449a5d05

SHA1
51ab20e8c19ee570bf6c496ec7346b7cf17bd04a

SHA256
86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192

SHA512
86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608

Download Submit
C:\Users\Admin\Downloads\SoulFire_1.8.2_x64-setup.exe:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 149622.crdownload

Filesize
7.6MB

MD5
6479208a44da386357fbf69e97349e08

SHA1
69f3b1526e2eb4f9df52b7b67eb3b42bde450f84

SHA256
ec90782a20f9419d7b808ac3d40f2776e52aec39a325d2a31c0470fde6c75353

SHA512
f91449623cae1853f232a1be6f1beb8826c3337d17afb243bd8386384856bc452397e64652d7cd3c3d8947937ba2831fbccd9d786667980c83ba544a5a6ec470

Download Submit
C:\Users\Admin\Downloads\download (1).htm.crdownload

Filesize
3KB

MD5
0e4ad24fa2b573f7374582ffd94ee0d9

SHA1
0929343b7df97486943b0484cb7ce32b0e9428d1

SHA256
d3844e8c8ab3726a8016738cd32920fb997454df130fda3932bc7edfedb693af

SHA512
41016bfb51fe6dc286556b116c90516dc6e70adaefb352e52d6511d4a7b4bd7889566df76fbbae0726cf43fafd7fbbe45ff99df824e3081f4cf768fb4211565a

Download Submit
C:\Users\Admin\Downloads\download (5).htm:Zone.Identifier

Filesize
161B

MD5
d022daae34e26d83622305604c2ed89a

SHA1
84a56a03880bf87e8f901a7f07409ae0d7c408ac

SHA256
a8369f8738ac22d7c1416b94e581c4e5f241873c07a64be1669b5c5f532e8dbc

SHA512
57fa4581a5e1c0dee5bc955bb5ab59112178330976b4afa860ae219261c3f38609c30279767a2bc7c8dd0d3859428962f6d2c45894d5c6629d909187bfaaa583

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1401922954\manifest.fingerprint

Filesize
66B

MD5
0c9218609241dbaa26eba66d5aaf08ab

SHA1
31f1437c07241e5f075268212c11a566ceb514ec

SHA256
52493422ac4c18918dc91ef5c4d0e50c130ea3aa99915fa542b890a79ea94f2b

SHA512
5d25a1fb8d9e902647673975f13d7ca11e1f00f3c19449973d6b466d333198768e777b8cae5becef5c66c9a0c0ef320a65116b5070c66e3b9844461bb0ffa47f

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1401922954\manifest.json

Filesize
134B

MD5
58d3ca1189df439d0538a75912496bcf

SHA1
99af5b6a006a6929cc08744d1b54e3623fec2f36

SHA256
a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437

SHA512
afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1685735201\manifest.json

Filesize
76B

MD5
ba25fcf816a017558d3434583e9746b8

SHA1
be05c87f7adf6b21273a4e94b3592618b6a4a624

SHA256
0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

SHA512
3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-as.hyb

Filesize
703B

MD5
8961fdd3db036dd43002659a4e4a7365

SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321

SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-hi.hyb

Filesize
687B

MD5
0807cf29fc4c5d7d87c1689eb2e0baaa

SHA1
d0914fb069469d47a36d339ca70164253fccf022

SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\hyph-nb.hyb

Filesize
141KB

MD5
677edd1a17d50f0bd11783f58725d0e7

SHA1
98fedc5862c78f3b03daed1ff9efbe5e31c205ee

SHA256
c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

SHA512
c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_1912411346\manifest.json

Filesize
82B

MD5
2617c38bed67a4190fc499142b6f2867

SHA1
a37f0251cd6be0a6983d9a04193b773f86d31da1

SHA256
d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

SHA512
b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_278146227\manifest.json

Filesize
43B

MD5
af3a9104ca46f35bb5f6123d89c25966

SHA1
1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8

SHA256
81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea

SHA512
6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_66559599\manifest.json

Filesize
102B

MD5
2c2e90b63e0f7e54ffc271312a3d4490

SHA1
4eb9d97e1efc368420691acb2e6df1c61c75f7e4

SHA256
72dbb7d6b647b664ef64b6a14771c2549c979b9c57712f3f712966edb02d7b2e

SHA512
9ec9e8a34cc56a694ac845a4344600b479d11347ec5279d955ab4cf55590440f3491e0a1b635ddb9db821630885e5fd63c269fc2a5d1abd0a0d0062ae21dea8b

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_703532063\manifest.json

Filesize
114B

MD5
e6cd92ad3b3ab9cb3d325f3c4b7559aa

SHA1
0704d57b52cf55674524a5278ed4f7ba1e19ca0c

SHA256
63dfb8d99ce83b3ca282eb697dc76b17b4a48e4065fc7efafb77724739074a9d

SHA512
172d5dc107757bb591b9a8ed7f2b48f22b5184d6537572d375801113e294febfbe39077c408e3a04c44e6072427cbe443c6614d205a5a4aa290101722e18f5e8

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_854121038\manifest.json

Filesize
116B

MD5
2188c7ec4e86e29013803d6b85b0d5bb

SHA1
5a9b4a91c63e0013f661dfc472edb01385d0e3ce

SHA256
ac47cc331bb96271da2140941926a8accc6cb7599a6f3c17bd31c78f46709a62

SHA512
37c21eaff24a54c2c7571e480ff4f349267e4404111508f241f54a41542ce06bcde4c830c6e195fc48d1bf831ed1fe78da361d1e43416cfd6c02afa8188af656

Download Submit
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4912_857662649\manifest.json

Filesize
80B

MD5
9e72659142381870c3c7dfe447d0e58e

SHA1
ba27ed169d5af065dabde081179476beb7e11de2

SHA256
72bab493c5583527591dd6599b3c902bade214399309b0d610907e33275b8dc2

SHA512
b887eb30c09fa3c87945b83d8dbddceee286011a1582c10b5b3cc7a4731b7fa7cb3689cb61bfead385c95902cab397d0aa26bc26086d17ce414a4f40f0e16a01

Download Submit
memory/2964-550-0x00007FFA905A0000-0x00007FFA905A1000-memory.dmp

Filesize
4KB

Download
memory/3028-632-0x0000019B1A200000-0x0000019B1A2AF000-memory.dmp

Filesize
700KB

Download
memory/3028-438-0x00007FFA905A0000-0x00007FFA905A1000-memory.dmp

Filesize
4KB

Download
memory/3576-0-0x00007FFA7159B000-0x00007FFA7159C000-memory.dmp

Filesize
4KB

Download
memory/3576-40-0x00007FFA7159B000-0x00007FFA7159C000-memory.dmp

Filesize
4KB

Download
memory/5204-1061-0x00000184D0F20000-0x00000184D0F21000-memory.dmp

Filesize
4KB

Download
memory/5204-1028-0x00000184C8D40000-0x00000184C8D50000-memory.dmp

Filesize
64KB

Download
memory/5204-1012-0x00000184C8C40000-0x00000184C8C50000-memory.dmp

Filesize
64KB

Download
memory/5204-1044-0x00000184D12E0000-0x00000184D12E1000-memory.dmp

Filesize
4KB

Download
memory/5204-1045-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1046-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1047-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1048-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1049-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1051-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1052-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1050-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1053-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1054-0x00000184D1300000-0x00000184D1301000-memory.dmp

Filesize
4KB

Download
memory/5204-1055-0x00000184D0F30000-0x00000184D0F31000-memory.dmp

Filesize
4KB

Download
memory/5204-1056-0x00000184D0F20000-0x00000184D0F21000-memory.dmp

Filesize
4KB

Download
memory/5204-1058-0x00000184D0F30000-0x00000184D0F31000-memory.dmp

Filesize
4KB

Download
memory/5204-1064-0x00000184D0E60000-0x00000184D0E61000-memory.dmp

Filesize
4KB

Download
memory/5204-1072-0x00000184D1060000-0x00000184D1061000-memory.dmp

Filesize
4KB

Download
memory/5204-1074-0x00000184D1070000-0x00000184D1071000-memory.dmp

Filesize
4KB

Download
memory/5204-1075-0x00000184D1070000-0x00000184D1071000-memory.dmp

Filesize
4KB

Download
memory/5204-1076-0x00000184D1180000-0x00000184D1181000-memory.dmp

Filesize
4KB

Download