38917afbf4fd34af26909651d9a0c5808e18f8655186b475880b7e3e45d32eba

Analysis

max time kernel
29s
max time network
26s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
27/02/2025, 02:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ui.exe
Size

15.7MB
MD5

dcfb3864861147a02575aeda7ac48dbb
SHA1

37b9a26c9beb498f71c565d5b132e39b31136bd4
SHA256

38917afbf4fd34af26909651d9a0c5808e18f8655186b475880b7e3e45d32eba
SHA512

f30631aef4b0f5eef0af6b2b64c9a15c5d379d46fb0abf18c71687f0336ffb7f42ba89fecc37d17db801b3b064481bf106b035a819c5c7ac72b90a131448e75f
SSDEEP

98304:9deFH235hRnrD4OzVN03DUtSYorb012Bz3OxPrwqQ2jJ6cefe2vtjlprky/19KfP:9dX5D9IDnk4BmVjJe99IfcQXYrVJV+

Score

10^/10

defense_evasion discovery trojan

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 1980 created 3464	1980	ui_0.0.24_x64-setup.exe	56

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2593460650-190333679-3676257533-1000\Control Panel\International\Geo\Nation	ui.exe

Executes dropped EXE 2 IoCs

pid	Process
1980	ui_0.0.24_x64-setup.exe
1936	ui.exe

Loads dropped DLL 3 IoCs

pid	Process
1980	ui_0.0.24_x64-setup.exe
1980	ui_0.0.24_x64-setup.exe
1980	ui_0.0.24_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	ui.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	ui.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ui_0.0.24_x64-setup.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133850985380179529"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1980	ui_0.0.24_x64-setup.exe
1980	ui_0.0.24_x64-setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4660	msedgewebview2.exe
5076	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2808	ui.exe
1936	ui.exe
1936	ui.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 4660	2808	ui.exe	87
PID 2808 wrote to memory of 4660	2808	ui.exe	87
PID 4660 wrote to memory of 3888	4660	msedgewebview2.exe	88
PID 4660 wrote to memory of 3888	4660	msedgewebview2.exe	88
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 4952	4660	msedgewebview2.exe	91
PID 4660 wrote to memory of 3868	4660	msedgewebview2.exe	92
PID 4660 wrote to memory of 3868	4660	msedgewebview2.exe	92
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93
PID 4660 wrote to memory of 3040	4660	msedgewebview2.exe	93

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3464
- C:\Users\Admin\AppData\Local\Temp\ui.exe
  "C:\Users\Admin\AppData\Local\Temp\ui.exe"
  2⤵
  - Checks computer location settings
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2808
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=ui.exe --webview-exe-version=0.0.23 --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2808.1184.13413691014158334948
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4660
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffd8797b078,0x7ffd8797b084,0x7ffd8797b090
      4⤵
      PID:3888
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,831209778487124832,11977955683315147523,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
      4⤵
      PID:4952
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2040,i,831209778487124832,11977955683315147523,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
      4⤵
      PID:3868
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,831209778487124832,11977955683315147523,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
      4⤵
      PID:3040
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3620,i,831209778487124832,11977955683315147523,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
      4⤵
      PID:4448
- - C:\Users\Admin\AppData\Local\Temp\.tmpz8vTkM\ui_0.0.24_x64-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\.tmpz8vTkM\ui_0.0.24_x64-setup.exe" /P /R /NS /UPDATE /ARGS
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:1980
- C:\Users\Admin\AppData\Local\ui\ui.exe
  "C:\Users\Admin\AppData\Local\ui\ui.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  PID:1936
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=ui.exe --webview-exe-version=0.0.24 --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1936.2584.5601297235885755332
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:5076
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x16c,0x170,0x174,0x148,0x194,0x7ffd8797b078,0x7ffd8797b084,0x7ffd8797b090
      4⤵
      PID:1140
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1796,i,14489731065646336831,13892230523366815884,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
      4⤵
      PID:1852
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,14489731065646336831,13892230523366815884,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1748 /prefetch:3
      4⤵
      PID:1872
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2096,i,14489731065646336831,13892230523366815884,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:8
      4⤵
      PID:5004
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView" --webview-exe-name=ui.exe --webview-exe-version=0.0.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3652,i,14489731065646336831,13892230523366815884,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
      4⤵
      PID:4780

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\.tmpz8vTkM\ui_0.0.24_x64-setup.exe

Filesize
6.0MB

MD5
05109562391c857d7f80a3cd81dcea5b

SHA1
e748d0b23a190a537ffed0ccbdd31786ab04550b

SHA256
5cdafb8aae6bfe44e7bd526cd4b5c0b725a2f9d4d9b710ed07b853339635a7b4

SHA512
980554808571b5383adb8b2c2aa3d705c69c88b53f05f52e22882a3b30ae96369d6b898096b109f2cebc6c3250f0bef4f40bae4d32cec6fc5cf68ff46c5fa04c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl888B.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl888B.tmp\nsis_tauri_utils.dll

Filesize
29KB

MD5
c5bd51b72a0de24a183585da36a160c7

SHA1
f99a50209a345185a84d34d0e5f66d04c75ff52f

SHA256
5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266

SHA512
1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\04beb650-33e4-4545-a0e4-efb54a4d8499.tmp

Filesize
16KB

MD5
fff4b3e2d86f835621d4835c6076995c

SHA1
97d3bb2916e81a90bb76c2735c8b8db51cdf76f3

SHA256
57d942dfba031c30681cf89a8dbebf7a8ac7bb46d9376d28bad06cd7045053e9

SHA512
326929765e14b0518c8ef3a3602dd9a8b54fdca8b5f701a6125c40e7a7a981d8c20821137ea211ab58a506b832f0959379cf57202b1f3572fe6bf0a5ae091f6b

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\99bd66f7-1bc2-4a83-ab89-855eb3ee9ee7.tmp

Filesize
4KB

MD5
c6e23659b0c7b47b53eb6b911632b6f3

SHA1
229065201595b2019261de3c7088038c7a73a42a

SHA256
74008a68566a36adfcf85a1db47ad4ff41aa41ad42737ee3086a9b4c04a6de42

SHA512
3ebc82c4068b4ff10938aa1d1920b62b1554bd95ca85191993ee4fef700d1d8199d6f2dce3822ada1d4ba2a694a4ce11b17e9fe3e2cff7709cb56a065fa8c180

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
8641d7d4b39b4111b7b1115ec374258e

SHA1
a8cc1afdfb1cd2f6819292f0ef3204503f8aabdd

SHA256
db3c8ecc135402ef1a5cfc19ef58b6d3ec5552b4bcc76ff77758c2d4691c4268

SHA512
ffb169a9f15dc16e20a68885478c04176a567e1c1c01ebccfb6ddf41db8821608a4d8dd62958713cc4ba450304c45db51743d35e39b5a94bd170b5cf498ad2a5

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
4ddae4d32c8a434097627ae1636f0c78

SHA1
13f5004e61ffdaddf832f7598dbd2ca5e8a3ed3e

SHA256
1166e1ca5e80019b6b0a6515ecf1f30f0e0eeb473b9b2324b650009a74fbec4d

SHA512
9a21c28360ba2b80d77aa4d5878aeece352389337ab5531c3022abd5015b1a602dba12460e047645e889f39c37730d02dc901ddf6361bae5ef9e538c2e249bcc

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
48df8669a97e1ff3108c412db5a57543

SHA1
596ae68c3a523e6d39e0c349f4e0c8c7bff12ffd

SHA256
5a91020158ccade9ce5d99a52adb03fd21673344282092b4fe2022d7c7d04cc9

SHA512
a21b603226ceeb961270b9ed42bab209655deca002cc0481e0c93b4c1b53effdff03a30021fa00071eea24c7fcec91d2be965f47a9f924d4809b68214d58cc5e

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Crashpad\throttle_store.dat

Filesize
20B

MD5
9e4e94633b73f4a7680240a0ffd6cd2c

SHA1
e68e02453ce22736169a56fdb59043d33668368f

SHA256
41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

SHA512
193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
78185cd8dbd642403c0b4654c8395ebe

SHA1
f79e3a8096a2638967a2849d73eac02293ff2dd2

SHA256
4c3cd78519621175a6b505e389751a80dd0d84cb4458bc1fa60eac5a4173ea0a

SHA512
fa2c64b5a777fb0fda013b1dc96f4bfdfd190e90d62c91ae4a839593f7ed3f29e2bed01c5fb4fcdc3027f8a264cbb1c352f2309fd2a17acdb7a75923e0c98486

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
307b797a143d11ab0634f066a6efd682

SHA1
109098f4bc9521ad58489f870c650e6ec56eb6ee

SHA256
d9dbfbe97778701237dea0242311bd46b9c219b01fdb7ba6b0a700e7ae07738f

SHA512
2c6c0f3acd011fdfbc49a99d7e8a4d5234c9a6dc35661a9635b2336345d3217b9612192a16d8bae353b39e24ab4e89301f6a3c443a73058f124160e2a08c651d

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
605a5e90afd114acb844eb05ba6c99e6

SHA1
918a75a89cc43a7300351568eb141b2bf496553a

SHA256
23b663b71e53d255cbd93222b73005fd884fb69484f32c81b46dccbfd9e1fde9

SHA512
d2b26d46274bfb76322430aa978ca0b198afbe05ad6f8193c8e32c742f69ec2169260b6cb9e08a0fabdd725725e7df3f11193dc14e6d48581b7e24542c8667c5

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\data_3

Filesize
4.0MB

MD5
fa1f426d05407bae7f4750d291513fb4

SHA1
f338f4818112f66245b6184718e1c94cb56afce3

SHA256
34ea226a3fabe21c67e2c62efe45a69b909b591e21312e54d6ad678307ecb7f9

SHA512
005f8b719d3880b28bfc98484e7993599eb0d4b6807f2c6a8d5a5ae1af9fe6e427f2f9ac35a791287c7fcde9cb85dac1c24efca35c6251af45c4620953c3513c

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\f_000001

Filesize
47KB

MD5
8e433c0592f77beb6dc527d7b90be120

SHA1
d7402416753ae1bb4cbd4b10d33a0c10517838bd

SHA256
f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af

SHA512
5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Cache\Cache_Data\index

Filesize
256KB

MD5
4dfbf01ea305072f5988fd97d5fff84e

SHA1
d38f3b8d0f23d86d5f551bc0b6a28fa82561a9a2

SHA256
e4fd7567909427746de0596228a435cb0fe632194a58b24c49dc557c2563f0c6

SHA512
6550dbbb76cdc7002aa535949d373806fca72a5c4f19d4f4269268d0c5227316ae83bc5bf8fb084b6c9ead16477036d39b012e012be563c5f231d4f56e750c92

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Code Cache\js\68cf047eed0cf17e_0

Filesize
258B

MD5
6fa86d8eb4891efe539d0b4b5de98d92

SHA1
f713d067d05a7c8f7feec20bba007970fd979354

SHA256
4c37f099b40bac2c7aa5fdc2be57d5112b66daaa3701ca4c6b6da97e7b7303f1

SHA512
c137c43bcce4a358f702361223893e105bf25ef74965aa37afc1fb58b81d8bbf8ff79ff5fe1222b451c22124dbe31a58977184f78bbdb6495a9d0e8862c027f3

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
8f7276c54b28cad3d4e24387cd03f97c

SHA1
aafe0832af92221a7955a6ca56d93ce9bd385f91

SHA256
92380b7b33ab80a14d0698afadb0ad8ba47f345f1ef46514aa9abf107a093967

SHA512
2783b6c12c180a73dd3bb43cd2c1b00477e9a04496773ed84a15c936f6343701d3c3fa335df3f2c3e0bdb842af8913c25569cda7a005d1dea8589c9fe46e069b

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
6b796c4688ca702b8dbbd6c6a46da77b

SHA1
016f931ae4229e78711cd1883286932602c50945

SHA256
d7af3f4df623b6cb1bbd0269992a3a767c8459f7ab617d01aa5e66c7296b0334

SHA512
ef2c3fd087e519d599ae9013ffbae5c9675624c4f2f6eaab6562ee58793425a1b4a40de876bd0579f6ba49738ea2c31100f7c92dea2f62e33bb42a93ad106903

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Code Cache\wasm\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\DawnWebGPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\DawnWebGPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\DawnWebGPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Favicons

Filesize
24KB

MD5
c67cf92a2ca47a555e4dbdbea8e175c2

SHA1
5ac2db8882cc9a624abb840465c6f179c707e2fa

SHA256
1a1489905a79ea9ba070be3c93d74f0fcb395c261bfee0c5deaa7bc516b40ddf

SHA512
40c63f504bd13226b5606c5f32a1f9bf64011228b3420210a2846de7f8e410dd767a71465e4486e78385cfd81fc0100c7b62e151dc5e39bdf156cd1340557b87

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\History

Filesize
184KB

MD5
6c5df930b185ca4cf6913804e2a55d68

SHA1
26cf40a1b067a0721eb4a9965f00d6945a947a80

SHA256
b890c747ae257bfd7c9f73ecbbe6b38f2438debdf10e6ed56710cf6566840f1f

SHA512
64cd8be9d36a38c372e119df3f1b2bebaefc99c6480d42062a4080047f25e5592642466fb4b1c329cb2af02e273326cc6035c4970e6f3557e9797e2e5b73a379

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\Network Persistent State

Filesize
813B

MD5
a62d168d3c559ddad408b836ce00f891

SHA1
9c414d26503da9969920d2594571e5118866633a

SHA256
669eff658f52fd4007606e891170d4258ccf7fdf0b7472fcee649be20710ff33

SHA512
7b18ad33895a23156fc574a1846595925db1502fcfb88b54813d33022ec7caf296aa3af54b4915b3edcc6e157d2e432c21ffb3ff62843d08efad5016a33e7893

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\Reporting and NEL

Filesize
36KB

MD5
c822dce63d5367cf15a5756a1a30631a

SHA1
6184e921821a79ffd665f41b24aacf9e531a2e75

SHA256
4228947ed9a9b58cce16819f65510afa1a376228795177ada7733552452bfdab

SHA512
018671094c4940e1cc4bdbc26ae87ec77e87bc312cc7e1dd676f7aaa2ac6ddc2aac3f3b8758bd570648ab09565c0f8e45cbb51c4044c89b503a0c7e2de240279

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
e7deb298031640cf4f3e4434ba5c7232

SHA1
759fded8f3ef9762019e8357ccee094e6d6b97ef

SHA256
b74f65e97422b4b00c6f2741527b37136186703d7e32f3ce7ac3f43032a5ed9e

SHA512
96d1687b2fb7fbe5253291a11b887252613bb5384ea0513d66d3601ea51a91eded32a1a65c30c58c1ec1efb9fba7f766ae1590a4681bc4e67359789e5b8a435a

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\TransportSecurity

Filesize
189B

MD5
4e6d821fa1a1da09810be124b9714d26

SHA1
f07d463c9d1492f32376313b3877a46693efd820

SHA256
2a17dd80da7ffd1f4c7f7c4bc10f3457fb8b9d10477cd796540e33156c43caa1

SHA512
31c0039dc6c066e5cc55e053fa76c73758c341da17dbef8c5bbdb8ebaf0d4e37bfb492a62be5a0aa4f36b184daddd8ad244789e5b3eb56dae20ef5cf1c2df300

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Network\Trust Tokens

Filesize
36KB

MD5
4203aba60fd9de5b4232fc624db3f817

SHA1
1f07dfc552d6b509c83c36cb05986007ce29e250

SHA256
19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529

SHA512
6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Preferences

Filesize
6KB

MD5
10b436f6162c8beebe9dd698d8bde198

SHA1
ad5b9e9b664d705e7b258bb26f7fbe1f3a77bb7b

SHA256
0419e15ef0d2dddc2f1f0202a27472871358738258e480487fe3c57fdbb394d2

SHA512
de4cb8db2f1ea1cb249fd9e22b06a37e9f5a40f39ff3b4b342b41a4ecefda4307dadec765d80a7e5e055808e85e9d58a58f982d83749eb418884f988c262ede8

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Preferences

Filesize
6KB

MD5
cc59fdc32c488439dda4e22b334a1a88

SHA1
17a1f4e5c469011569ecf98013a86dc7fa5156cc

SHA256
86184a1c9bf666dfd8d621d4847e38446af8a9d8678897d71c3a7169d830406f

SHA512
d4a949598f9a3c5b1ec2dbdffed974bae1e137e33707e52f322afc4d16588411dbb371407f7d7b8daffaa49b0a99bc7a2351c9d46ab269cf5d046407dd091afd

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies

Filesize
20KB

MD5
a156bfab7f06800d5287d4616d6f8733

SHA1
8f365ec4db582dc519774dcbbfcc8001dd37b512

SHA256
e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc

SHA512
6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Secure Preferences

Filesize
6KB

MD5
1efd1956d7632d6b967bdfb8b290c6d4

SHA1
0709227ee068a9e70b61c2ccdf4f8b6015bbbdb7

SHA256
994355560be81b0768b6abc533a3c6dbbb59fd2d604cd1f028e956c3c8c4c260

SHA512
27416a01b379d784dbc0c8e3e6d653a0bbf2de9b86d335030a975e262d78939b96c2a90a5d6e971e8cf286dfb45b5a30c5c3e50562d83c4aa717145df56156cd

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index

Filesize
48B

MD5
78aa018c48951d0b30ee97f4ff50d3a5

SHA1
9eb37317419d59b6d570c34d12bfa2b8a121d293

SHA256
837e748b362433509f52d677b07b2c6cb0d25f92d1459d1627b2413cb52e109b

SHA512
9605f117333c849e01846dacdf082f414992d0a623c85a0fa66010aa3785a3bfb53b29cc839e82143e45e7eccaa41ab579c9b5a05ca4ae4cdd8e6f63fa619540

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Shared Dictionary\db

Filesize
44KB

MD5
b581f0ff8f8aa3371ae47b48c95329e8

SHA1
4f588efadf3675f3526cbe762c50eb8e79d9f2e5

SHA256
f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0

SHA512
e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\SharedStorage

Filesize
4KB

MD5
b9263bbf24428aaca95d04d04f3aeb6f

SHA1
5346015345f6df766df4bc9b42da076f6fdd440f

SHA256
1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489

SHA512
5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Site Characteristics Database\000003.log

Filesize
40B

MD5
148079685e25097536785f4536af014b

SHA1
c5ff5b1b69487a9dd4d244d11bbafa91708c1a41

SHA256
f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8

SHA512
c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Site Characteristics Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Site Characteristics Database\LOG

Filesize
303B

MD5
03a7eaf182d6a72d2518281e390afd84

SHA1
a8460215403eaf5f46bd48306938f3c5c10732bf

SHA256
225c112fc57ee6421990bc554d78a9cf0f2f78f95f883b8ce8d37579822b84c0

SHA512
33e132195c239a073f6b9716ea98462e7cec7e14ca5a51b8a45805f26327e230f07a21ac8d5a7b41f4ec7d61726e0438e56e6de02a52395775eaf7dd2aa95713

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Sync Data\LevelDB\000003.log

Filesize
46B

MD5
90881c9c26f29fca29815a08ba858544

SHA1
06fee974987b91d82c2839a4bb12991fa99e1bdd

SHA256
a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a

SHA512
15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Sync Data\LevelDB\LOG

Filesize
277B

MD5
f99446fe11aaaff27d4c4651c07ad1a2

SHA1
7e3017cdde635ada0a4212b7cef469e805e9aaa0

SHA256
dc43cc9e983ad26c5366fc4c5d7842d05cfc272c58bccf0743df9176c67951d5

SHA512
65291bc120656b4793c6265deb6a7852503a11a4c2d5933201c7850687cabdbc9715b83d1bd0abc6c32dbdca5476cb8ff10a68bec6ad1a29e1aeeb3247cafd7b

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Visited Links

Filesize
128KB

MD5
d840eeb81d8cfb5f09b658e5e8e4dc1a

SHA1
56f1c0c8c9701bf45a9ac0573796db9aa2d90c3a

SHA256
0f00a359a371b1d88d68c5105d5acd5365017c7494ef91cd110948015cb865d7

SHA512
d7093dda2c99b15df5c0e58cb7cefebebab86aef79396820b877b75693a99bbfd8754aabf4131d4677f213d0667f3dec3dee1f2f0dc98740d7e0f149c7d448b7

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Default\Web Data

Filesize
216KB

MD5
4ebc7325aec489f53e4635ea414d14a5

SHA1
c85641375cd9bd4a26922883598a02e8861a6bec

SHA256
2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf

SHA512
a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Last Version

Filesize
14B

MD5
96fb5f155aee0f8cd88274656c58ca83

SHA1
1fe86d9df188b0f86ae2d8da8f7c1ef663258baf

SHA256
06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91

SHA512
fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State

Filesize
2KB

MD5
fe780cf7593eae4afc466a16c6c1155c

SHA1
872fe7e40840212893942aadfaf6e62c5ed69d4c

SHA256
55bb19687fea6a853f323b9060fa653a7acf800ec7343d60c97e67960154e7ae

SHA512
eddcbb6d08a8954176cba923bf06c2efcc9e33702cbfabc64a66250d0c1b6346b2a48ba59fe23441578df20e2d61c0837bb18c6b634ae29b31b210bdaa3b5da3

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State

Filesize
1KB

MD5
7803ba768fd16577d1fff1242a44ed1d

SHA1
22fd9c1f8dc46f43d224a21b06bd68d3d6afc19a

SHA256
54cfcfb22995ab886bd030239249f0cbb0e0071e0da8a3845882a78dcffd1244

SHA512
a141308106128dc719a4011e35c1cdfaf5d8800868dc273a00af1d2eba3bfd933db4f27b172827afc76e3a7920743d93203f4353ab738f46b58969a57022c571

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State

Filesize
3KB

MD5
23e4e93db3aa88cd733946b0254004a1

SHA1
54be6f43400a37626df0716fbcb466324d1cd7ab

SHA256
38d0d7c222f94352be8f6096de385cc662e37a7b653c7bc4118ce8b0eaa3170c

SHA512
a8eeb7742351a0f050ef60d904fc26a2e1872d0cb09eae90d873d52c9a9c8781c995ebae506f48b50c8dcf7f91a7b0bdf6035190414cca3d3e8731c70b1bf478

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State

Filesize
4KB

MD5
63455dee813d17d91def46da9eb156c8

SHA1
6704473ed12ce2a66e9ea4a19a642996aadb5a70

SHA256
7797b8a2231590be48c246cd1d682daa1d43e61f97e49413cfda35c8e2bb3dd3

SHA512
0b95d58b1891be3a615b901f749c7c181a678010c8bae005585d7eeac74b13a73fb06c23df14fb3702f5f9e31916665fdce5f65c2a02989cb1c73e4ed203980d

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State

Filesize
4KB

MD5
cc477abec51b91a1fc0ad446fb41ce83

SHA1
ab5d60d8f721e7849966023f261a6efd55709bd9

SHA256
1c9487d86def639c93e3d520c638c89d026cba54d199d49fe1c515af3fc7f0b0

SHA512
45a7ef4f2e1534f455a81b769b3466cf957ee37ae6d642dca2259273d9e45d249ae66bd36222e083f83cddad0a0efcc77b090cb44a312c4f53617aca7477df85

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Local State~RFe5777ff.TMP

Filesize
1KB

MD5
91072906e60850bba405079e2d4c1dd6

SHA1
67c84d99e6c10da9f7503bd80c559b13ac18989e

SHA256
4f60a3d773103c933cc4c5e9cfd393d2067695fa31103187a4df17e55b26842b

SHA512
2156f2451344491c08fe042c80227b686f5a34c6a49f95c48f1c74fba5527f0b3b55ec22d0b4ac0f8765b358624c2afe0884ef2b20936c192ba1e92b7a38dde9

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\ShaderCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\ShaderCache\index

Filesize
256KB

MD5
fc7eec9e0114f837941f3da37be0bf3b

SHA1
91832ff0ae5564c819dc7dfebc4a926590bca47e

SHA256
5c95a5ea0c73984e64c6e4717f3b337bf834a3f4455cbefd801493d544df72fb

SHA512
fe9ee398e9ca0381187f7cf5b96f9c30b4ec7b74e26711e5528be2a11a4f23573d2b751658a67d9033af04065c5b346abd5b6c560c44f54d3f120b1f6b3e5072

Download Submit
C:\Users\Admin\AppData\Local\com.awp.dev\EBWebView\Variations

Filesize
86B

MD5
961e3604f228b0d10541ebf921500c86

SHA1
6e00570d9f78d9cfebe67d4da5efe546543949a7

SHA256
f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

SHA512
535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

Download Submit
C:\Users\Admin\AppData\Local\ui\ui.exe

Filesize
15.7MB

MD5
26ce34f645c436d9d24dbdfad12c3e4f

SHA1
dfcf2a05fa6950558b0c955eb31aa4dbb263c410

SHA256
a6e240102faa66b4254f0c24738e58671be82c6b4ac4723e09986cf3540babd2

SHA512
7232b5c7fdb60466fd1e042619511555cfd51c46b1b1d34156c5790287fb0ad2aaa7e7a2c20342d3302b483b301473032d911c067ec6e1a2910eb9fc19c9efe4

Download Submit
memory/1852-488-0x00000203F0E10000-0x00000203F0EBC000-memory.dmp

Filesize
688KB

Download
memory/3040-48-0x00007FFDA4A90000-0x00007FFDA4A91000-memory.dmp

Filesize
4KB

Download
memory/3040-47-0x00007FFDA49B0000-0x00007FFDA49B1000-memory.dmp

Filesize
4KB

Download
memory/4448-144-0x00007FFDA5020000-0x00007FFDA5021000-memory.dmp

Filesize
4KB

Download
memory/4448-225-0x0000018AE7540000-0x0000018AE75EC000-memory.dmp

Filesize
688KB

Download
memory/4780-489-0x000001F561D50000-0x000001F561DFC000-memory.dmp

Filesize
688KB

Download
memory/4952-26-0x00007FFDA5020000-0x00007FFDA5021000-memory.dmp

Filesize
4KB

Download
memory/4952-324-0x0000028E78650000-0x0000028E786FC000-memory.dmp

Filesize
688KB

Download