84433846e7b508307fae225e3b86ad2b628191c8d476e2aa9833b043408a12d9

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 07:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Network_Toolkit_1.17.148/Network_Toolkit_1.17.148_Windows_x64.exe
Size 20.1MB
Sample261102-jm8s2sat2p
SHA256 84433846e7b508307fae225e3b86ad2b628191c8d476e2aa9833b043408a12d9
MD5 604f1c6813a415db02e0057847c536c4
SHA1 14c5ff6633d90d090fc7d607a6fe8d64d4e28a35
SHA512 00ccc15db3f3426e317552425c401a950aa50af8f3c0f9d00d5afd03b2aadcb1320a3c4b96a807f5f91cf33da5c697a471a29c6e70b261c026a621bf48f0c463
SSDEEP 196608:3aGY0qvnl/p4nP8G4tzm7qOrV371oargU9/Q:3/qvnl/mkG4tzmxh371oarj/
TLSH
T181279D53F96920E5C1AEC171C5738202BB713C48672423D76B64EAA43F77BD06EBA724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Network_Toolkit_1.17.148_Windows_x64.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Network_Toolkit.exe

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
11	api.ipify.org
12	api.ipify.org

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Obfuscated Files or Information: Command Obfuscation 1 TTPs
Adversaries may obfuscate content during command execution to impede detection.
defense_evasion

Command Obfuscation
T1027.010

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Network_Toolkit_1.17.148_Windows_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Network_Toolkit_1.17.148_Windows_x64.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
1264	powershell.exe
1264	powershell.exe
1264	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
5676	msedgewebview2.exe
1260	msedgewebview2.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4260	Network_Toolkit_1.17.148_Windows_x64.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1264	powershell.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 5676	4260	Network_Toolkit_1.17.148_Windows_x64.exe	90
PID 5676 wrote to memory of 5836	5676	msedgewebview2.exe	91
PID 5676 wrote to memory of 4264	5676	msedgewebview2.exe	92
PID 5676 wrote to memory of 4264	5676	msedgewebview2.exe	92
PID 5676 wrote to memory of 4264	5676	msedgewebview2.exe	92
PID 5676 wrote to memory of 4264	5676	msedgewebview2.exe	92
PID 5676 wrote to memory of 4784	5676	msedgewebview2.exe	93
PID 5676 wrote to memory of 1736	5676	msedgewebview2.exe	94
PID 5676 wrote to memory of 1736	5676	msedgewebview2.exe	94
PID 5676 wrote to memory of 1736	5676	msedgewebview2.exe	94
PID 5676 wrote to memory of 364	5676	msedgewebview2.exe	95
PID 5676 wrote to memory of 364	5676	msedgewebview2.exe	95
PID 5676 wrote to memory of 364	5676	msedgewebview2.exe	95
PID 5676 wrote to memory of 364	5676	msedgewebview2.exe	95
PID 5676 wrote to memory of 364	5676	msedgewebview2.exe	95
PID 4260 wrote to memory of 1264	4260	Network_Toolkit_1.17.148_Windows_x64.exe	96
PID 4260 wrote to memory of 4996	4260	Network_Toolkit_1.17.148_Windows_x64.exe	98
PID 4996 wrote to memory of 1260	4996	Network_Toolkit.exe	99
PID 1260 wrote to memory of 3568	1260	msedgewebview2.exe	100
PID 1260 wrote to memory of 4708	1260	msedgewebview2.exe	101
PID 1260 wrote to memory of 4708	1260	msedgewebview2.exe	101
PID 1260 wrote to memory of 4708	1260	msedgewebview2.exe	101
PID 1260 wrote to memory of 4708	1260	msedgewebview2.exe	101
PID 1260 wrote to memory of 4432	1260	msedgewebview2.exe	102
PID 1260 wrote to memory of 4832	1260	msedgewebview2.exe	103
PID 1260 wrote to memory of 4832	1260	msedgewebview2.exe	103
PID 1260 wrote to memory of 4832	1260	msedgewebview2.exe	103
PID 1260 wrote to memory of 1512	1260	msedgewebview2.exe	104
PID 1260 wrote to memory of 1512	1260	msedgewebview2.exe	104
PID 1260 wrote to memory of 1512	1260	msedgewebview2.exe	104
PID 1260 wrote to memory of 1512	1260	msedgewebview2.exe	104
PID 1260 wrote to memory of 1512	1260	msedgewebview2.exe	104

C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.148\Network_Toolkit_1.17.148_Windows_x64.exe
"C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.148\Network_Toolkit_1.17.148_Windows_x64.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Network_Toolkit_1.17.148_Windows_x64.exe --webview-exe-version=1.17.148 --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4260.3408.4590835490402997933 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView /prefetch:4 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0xac,0x7ffc529c5fd8,0x7ffc529c5fe4,0x7ffc529c5ff0
    3⤵
    PID:5836
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit_1.17.148_Windows_x64.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1780 --field-trial-handle=1784,i,5629753978809902793,15032420545557406106,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
    3⤵
    PID:4264
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit_1.17.148_Windows_x64.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2224 --field-trial-handle=1784,i,5629753978809902793,15032420545557406106,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
    3⤵
    PID:4784
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit_1.17.148_Windows_x64.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1784,i,5629753978809902793,15032420545557406106,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
    3⤵
    PID:1736
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit_1.17.148_Windows_x64.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3500 --field-trial-handle=1784,i,5629753978809902793,15032420545557406106,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0 /prefetch:1
    3⤵
    PID:364
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoLogo -NoProfile -NonInteractive -EncodedCommand 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
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1264
- C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.148\Network_Toolkit.exe
  C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.148\Network_Toolkit.exe --update-reopen 4260 C:\Users\Admin\AppData\Local\NetworkToolkit\updates\aab8cec08037e74fda47ae427ec0f73963a1eae5edd135ffbeb5ba4fcb789cfd\.network-toolkit-reopen-1154522258
  2⤵
  - Checks whether UAC is enabled
  - Suspicious use of WriteProcessMemory
  PID:4996
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.148 --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4996.3372.13529669160747674576 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1260
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView /prefetch:4 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffc529c5fd8,0x7ffc529c5fe4,0x7ffc529c5ff0
      4⤵
      PID:3568
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1756 --field-trial-handle=1760,i,15349015349905977116,16646884306984565419,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
      4⤵
      PID:4708
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2072 --field-trial-handle=1760,i,15349015349905977116,16646884306984565419,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
      4⤵
      PID:4432
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2392 --field-trial-handle=1760,i,15349015349905977116,16646884306984565419,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0
      4⤵
      PID:4832
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.148 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3548 --field-trial-handle=1760,i,15349015349905977116,16646884306984565419,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:9efc14e2f3e1cdfbf05cbc261a9b16639f6352a0 /prefetch:1
      4⤵
      PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

T1027

Command Obfuscation

T1027.010

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3f777e66-94e6-465d-baac-5a443d6334ce.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\3f777e66-94e6-465d-baac-5a443d6334ce.tmp
Size 3KB
SHA256 3a6996d1171e6f5cc9f9a9dbd6ebb0312cfcb3f28b8d355007933f4ac1bc45a3
MD5 192f86ecc5db87660f819f47e4d2214f
SHA1 7765942d001798b7a3d52a335bea7233798bae44
SHA512 36ac6b2bf757b8085723c0acdaf10295c194cd9f96d75d8cbba3d5f220287757dd72b0014be1a6df6b391cebc1190c6238fab5d9e2f5ed46e095ebaa1e5506b1
TLSH
T1AD61943B6964A9375DE2CA05B98B3F1BE7A45127D5953F91CAEC0F0C01DB2C81382C17
MD5 SHA1 SHA512 TLSH

Submit Download

5eb274dd-1f62-42c8-af9b-a4a70f906b77.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\5eb274dd-1f62-42c8-af9b-a4a70f906b77.tmp
Size 3KB
SHA256 4a2e0e66fd17fd7a4b2c046864f51fab6168db4c2287d272f5d14decf5520b64
MD5 272e23415cb87ddabb43fea11c0e9781
SHA1 1e2e4f7353d380e83f4c03c4926586c6a902fe77
SHA512 75427559ec338d9d1400937feeb66a34185a54e4b96503009556bda9d85672cd9d95d6c5af050cdda304e22af3d22926f6cd12f8da3f7256e745c2153ca39e43
TLSH
T1D781622669A4AD375CF2C609B95B3F17E7A4502795843F95DAEC0F0C01EB2D91382817
MD5 SHA1 SHA512 TLSH

Submit Download

6830b007-4aad-47e1-936a-6d335cb8c7f2.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\6830b007-4aad-47e1-936a-6d335cb8c7f2.tmp
Size 2KB
SHA256 03837ed73294e051ac442b195bd40bdd988af9e095513ea9ad3566108f39f1aa
MD5 672cd1fd63b00ca7a66526f27fa650e6
SHA1 5c829dca09dcf49b8e0f8f5ef4a35e6b89593294
SHA512 cac89b8149cb35dd36f17aeeb1b06b93aa653534f62cc60398e4df61599c64d066e089f5322e0cd3b3f03725e7e24ceaea471e412b042a3bf54b66f59d28fbc5
TLSH
T1E451A5337D14AE3399E6C659B95B7F27CB3451669A513F509AEC0B0C00EB59C2382C3B
MD5 SHA1 SHA512 TLSH

Submit Download

69cf9617-c4c6-44ea-a473-713b7a574b80.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\69cf9617-c4c6-44ea-a473-713b7a574b80.tmp
Size 3KB
SHA256 be8c9eee378f3e7275e1b44aa70fe7c3df89db059780c344215c32a211aa4751
MD5 1f5ea4e67ff0df77f68bb6aa755b7dfd
SHA1 39336ed3c7cb69a1214378785a1d069eca43c8f0
SHA512 719f622237bce929b235f3a190020a1efc034a05ffd4e2d66c709c0a562c6f98b82c0cffc2c01e13141a5c562f9b5caf2267aae5f05f2ec9b4dd0c6d15d34908
TLSH
T12981822669A4AD379DF6CA09B95B3F07E7B4512795853F94CAFC0F0C01DB2D9138282B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0c38a51d18a13a3d1cc7e010f3d5f1ce0d999756b347fad8cd61e437b037ffb5
MD5 573d7ee9f9aa2589bf0c91b67ec15d40
SHA1 95d41b5dd3717f74af4ea5f2cad541db30495d4f
SHA512 96358550f0138649165823a2808926fee5b0a7b9f61313a84dd86950c9da417835fe7a1baf63d0d3bc4cdeb1f8ade4137645fd9825d247ac620d51df6276c497
TLSH
T154D0121332420274C01024731616B10C0440C10FC04682409438961D5E450541D168D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7917486311b85ebad6b76eff9ced56d971d895532679b9884c7e3b25a4814626
MD5 6f6f8dafa4a51c40fde03abbea75fccc
SHA1 b7644342bbc07e7d7120ffe27c54ff6b91e9b14e
SHA512 5b1aadfa31180fec53d77b83f1b82d93cd1bae4c5cbae439bb200f32c452b6747d0c65ca67d2f235136a472d1f2167c8aa7b5b296c9fe0cbb588b124b5a2d4f3
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c2b1746c2a63a74c725010a6e46dcc726dad1ac6f9780da4124c5773dabbf732
MD5 214524596cc00e720efd4815d8f503ad
SHA1 7cd06eb14cf09a75a215e9532253465bba2977c0
SHA512 4c8df7b8f1d4140daf6c1d5ddac558176304874b5caaddabaa58753cb598cc517b4d3cfa9883500bb227d952284c568c4df4763ddc3bd54845f32b171a742788
TLSH
T18ED0121336420274C01025731615B10C0540C00FC14683409438862D5E460541D168D1
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

85b3f4aa-1e79-48fb-b3bc-54dfcf293f6d.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\85b3f4aa-1e79-48fb-b3bc-54dfcf293f6d.tmp
Size 6KB
SHA256 b2386c06ca76ccddcd4bb0943d6a1970008f1f8ac8b570c464fa36f32e210730
MD5 b2407ecc6c4bcf7be79cc7ce84ae13cb
SHA1 334146cdaa98c41635715d7bfc2cc95b1769df53
SHA512 15b003179209d7d8aa67b2f7e7f9cb218f0c0ed77661ed2bd18c37ebbf121b35c1742ee9ed71d856577b527668ea60213d3736036e3e84d7ac3ab32d5477bf19
SSDEEP 96:rsXdfAIUbDwkCdo616Zdds7/x+6MhmuecU971Kx+1ejeVK+gfpuMI8XM1C7K:rYVJRordsV+F497Ax+QjD/uMg6K
TLSH
T1B2D194055D28AD7F4C8AE518BA367E1BE3FA502275D52E48EBFC492C14DB6CC7207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f6ce76317ad61b6da2919b1b19c39f96b15d6a8bda488949cd3ba44e5c12080e
MD5 7afab36610eccc3230606a949898f6bd
SHA1 99f9e096da89587096288d0cb3f4da1ada7b3fad
SHA512 7eede2c510841db19c201e21970fd5579d59060f3fd65532a35ddbb8e21d8d43a4ef1ce34290a93c1695380c623ef0e4ffbaf0af48fbccd3d7ef980da6e3c88f
SSDEEP 3:MsEllllkEthXllkl2zERle/U/+tl:/M/xT02z3
TLSH
T1BB4402886F820526C40010304011D3521370D61806127753648104329C85A400C00028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 e9cb77037b551496e950c0c1a51c6c983cd18520587c09ac9c50c2aa393c0d63
MD5 7510a96f5c9ec7701f66f43a33f4a9ca
SHA1 7ad78b9b37572e76321d2145eb45d14ec97e327f
SHA512 074cb46044de53c8873a407ab4babdbc15b90adf0b5779a21d239710476c0661038c78ab84125ca055476c1dc14085d21a96ebe8d3c2edf366d5c6bd765caf00
SSDEEP 3:LstlNllkll/lRm:LsX3lEtRm
MD5 SHA1 SHA512 SSDEEP

Submit Download

041a428c1f818189_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\041a428c1f818189_0
Size 207B
SHA256 12e45a24f7d49261e6cf32d74a820b77851b0c8b8664aaedbb246e486b5b7840
MD5 4c459c8c180365a9a1317045de790d23
SHA1 481286a11986ff9e1b2b627866c1282ec5b16b57
SHA512 825ea0862ef34d528cc9ff6e3b9e3485873c3586853cbb297186be6cbed12c6b6da64d6f9ff6b32274725fe5fb315dd45c1acb9ac7c97b6c8c83100acbb62c66
TLSH
T1C1D0225700900AC0E22ECEF4E2BE8013EE4AC2D8408D8290082CA4930124CE2384C130
MD5 SHA1 SHA512 TLSH

Submit Download

043ecc6916179150_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\043ecc6916179150_0
Size 224B
SHA256 835d76e86fc45b81e3ca2c7c30e010ecc4ee4b89982620e0fcbdd5f2b1b15c30
MD5 314e4d174ebb892bc5ee65eeed61aacf
SHA1 0d15eaf2a49bfeb31ac1d8cec663d6f282cc1ecb
SHA512 10d329c2bf976a153327725ed08a1e2bca8add58ad0c8e37fc134d182a45e2a433d690b7fe9ec33c5a2ab760690eb7c2d5858b4725818b58e14977d73754746d
TLSH
T144D022DB49940A80E35FEAF0CBBE4102DA0ED284108B9A822828A0232A218F13C0F230
MD5 SHA1 SHA512 TLSH

Submit Download

0ecb935ab2058ba5_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\0ecb935ab2058ba5_0
Size 207B
SHA256 df9185055e272b40efa0324e8529ac1750bc24f4d25ae932f5015c0bb302e6c8
MD5 742d9e59af0705ed885b25d82907e123
SHA1 c7c3e41ef8de347591ecd7868fc8400ae882f97b
SHA512 2bea0e8d48c8762da5f8976d0beb48f5c272b4180d421ca1f0f58971cb713d507ac28dba0fe47d26d838523fe20ed523608015b5f92927a05bf407a1770d9eae
TLSH
T130D022924464AF94C22ECDB8E3FE8117CE82DAC04C8E4A00181CA8F21710D60FD08239
MD5 SHA1 SHA512 TLSH

Submit Download

111c2b6295ed6761_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\111c2b6295ed6761_0
Size 217B
SHA256 3a3d48a043bc5f74267bb969abfd02dfb9263e2abac0062d6c0fd179ba548a80
MD5 3d83695a1c3446e8fa366e765351a001
SHA1 4ebd4b369df41438fe80ece943499f7b13ed7f01
SHA512 502f54c3539f72ddcc312923468e22df352d9d4f1c4a522f0262425730589f26ff4d45ac095fa5f49bed869f556ed249be21d30eda4a988cd2aa91c9dfd32737
TLSH
T1D9D022AB09802A00D32E9DF0DBFEB243DB0BC5C460CB821054ACF09226229F279A8221
MD5 SHA1 SHA512 TLSH

Submit Download

12174a38fc6c0057_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\12174a38fc6c0057_0
Size 212B
SHA256 9d61ea75835e4b437f0d2302e0adc74f5a5e09e0f79f4dbde180d101bbb4d63a
MD5 41d78aa55cb7a82eedd270f12bbc52b1
SHA1 8cbb2b7cee8cac9797caa7aa240587176b1917a5
SHA512 c9f15c157fb8c0d6a67f8488341d89a2098e895e243298ecebe1fce6423a07b475a900e54dffdd1c768eff91361439f0e73cfb764f946e864304c7d785bf397c
TLSH
T15FD0227302506680D12EC8B8D3FE4513ED83C2C0004BC9042810E462222A8737E4BA32
MD5 SHA1 SHA512 TLSH

Submit Download

12732651a5174443_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\12732651a5174443_0
Size 219B
SHA256 0989bcec836fbf220901458a08a173449167ce08855c6932f4ac99ddf4b45c8a
MD5 b50d46c2a6243f3dd1c256149e027107
SHA1 7281abe0d90a75509dadf803d1ddcd594932a5f1
SHA512 00f2249266500f9937b1a0d6e6603ad1d6debef850030786f0764864178620e37d482ace5214e64898a22771e169163c8663eddeb01d178ad4757ad0089e74a5
TLSH
T195D0229B00810508D23EDEF9E3FE0121EE92C3C208CB8E813A08B8A22022C703608232
MD5 SHA1 SHA512 TLSH

Submit Download

14c22ebdf0f935db_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\14c22ebdf0f935db_0
Size 211B
SHA256 6814fd4d390a17aec22f94da6a84fbcda467b6821f19c40c39eb13b1910a4bad
MD5 48d44339b04370342d0b55e86fbc33bb
SHA1 3504da876d44e7836bda7834ee2f391a98be9bc5
SHA512 2e29f75932f9f0ff2affa67488b649072c7d41276cb46a8986aae06bfc2e734ec759096463d747f02befd119e68fc01122831a82d91c15385d593ab7cd115c9c
TLSH
T16ED022AA80F02580E73FCFF0D3BD4052EA47C5C4084E8152048898F10530CB0BA09A32
MD5 SHA1 SHA512 TLSH

Submit Download

14dc3fb8cf22342f_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\14dc3fb8cf22342f_0
Size 210B
SHA256 376ec69fab4de5e3bf7387334ed7d0edf31aaeee0aa665efa555cc3919227767
MD5 2d172b615cf5c4b046029f6fa24205c1
SHA1 159ef7225c8a033bd480256908e43e62be2b7d95
SHA512 86dcd89c3ce33dc4d372a51c2acb6a93f59d86b2bf7a02e24d5cf8b4299e827619bac3f27397b0ccb3ca50f412af67ae9273a16e8caa30aa221cca2c9feed39b
TLSH
T151D022EE40A00C41D12ED8B4C3BB0022DBC3C1C868AE86620846A89B1524DB0B249829
MD5 SHA1 SHA512 TLSH

Submit Download

175ad48d535e887d_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\175ad48d535e887d_0
Size 218B
SHA256 eff4df9c51e7cb5be766167d44a55bcda1a978b1e2ee71c5254a8abfc7e5ea77
MD5 4a11446685c7b1183512303528f2f5af
SHA1 8c4412d6d7f677371703f28b3f8d189ee8f4aa94
SHA512 90ea306183d7d880bf8db02338090a3e4587796e6bfb62768e92107f7b4c460f5e247fadf73010bbe19d39830235a5f76565e375669dfdf0e1a6bfb3d6ccee35
TLSH
T1A6D022D340C02A0CD13EDEB0D6FF8853E71BC4C500CF8618410965632B35DA0395D720
MD5 SHA1 SHA512 TLSH

Submit Download

1af4071e9bb41529_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\1af4071e9bb41529_0
Size 209B
SHA256 1b9df1d9605c63fbe7c35d2ea5ba18b3a0a57d45a0e6b61793ded10a775117e4
MD5 646e78f5c0b0bfff1a0c3d3cf3400aa0
SHA1 b02d908907e2ddfa8b821f5bae7fae96e86b022b
SHA512 ee962107acbc7fa28fc9537d9c4d28294c06eda73477aee1c69e84c999e15e36359862a34896c3a80eec5384218bb5a8b2f755ebb05e3b7854f8a4fc1c961a25
TLSH
T1DDD0225B40881900DA6ECDF4A6BFC042F716C2C4404F4308A068A8A26671960B905120
MD5 SHA1 SHA512 TLSH

Submit Download

1e900e2165999309_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\1e900e2165999309_0
Size 212B
SHA256 289d57964f1be9f199dcbf690f6c128c2b498a268a57f83ba8fd163faa318ff4
MD5 d7b2c3bdadbc8daecbdd87f8fe33e007
SHA1 024d005b9e9f77b5dfbf501e6eb249fb8c5cfc60
SHA512 cf2d3fbb416a86d24ad5a0bbc85746eb899c634f3dfa75b4c1a7a2ec40338aac25b61858d127fc8d311a55c24acf5c808736afb2cf003f5cdb5aa0b4f21a628a
TLSH
T1B8D0226B40408D00F02ECDB1EFBF0112FB82C8805CBB0631501490331626EA03D0A9A1
MD5 SHA1 SHA512 TLSH

Submit Download

1f068b50e4eec1e4_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\1f068b50e4eec1e4_0
Size 216B
SHA256 38ca4083170b70983d3fa0b0039d05fa09c806058ad86c56f481a3ae7612453a
MD5 440abe45b799019b9a9993730a7f70fb
SHA1 5527cd7620b2b48890e5a1b6ec6a5558dd027fd3
SHA512 2e6f519a5d1ee8ced0fcf51e6ba1fd69fd1b86148d665626776afc23f570fed9de5d3a861b10721532d45877045c640099cc6ba692d2e3057afceef466113b9e
TLSH
T1A9D0226E44F02680E33EDEF0DFBE4203D286D5DC009D0E000858F8A118218607A04120
MD5 SHA1 SHA512 TLSH

Submit Download

23091ade0b0a16f5_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\23091ade0b0a16f5_0
Size 210B
SHA256 0f4f759a863958c6759aa3e3f8a34501b465f1c11819546883bf48436665918a
MD5 9a36cd7a1f5c38731d82f472db39f46a
SHA1 44014e0896578de2d8c8244d4eead4c74211601f
SHA512 60d6e66ea756bc96298ba8ca30fa7782c9ab499cd2a6331241e2c1c0c03dea605645c80e642379df90b6f6d16941f9ab8ed1e2865fcb9fe1fb4dfe0fe87697dc
TLSH
T17AD022AB0078A541D27EDDB8D3FEE14AC203C5D028BE49051018EC220230DE13007114
MD5 SHA1 SHA512 TLSH

Submit Download

28bbb1792018a398_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\28bbb1792018a398_0
Size 214B
SHA256 efa9efa85289ad5552ebc99973ba45ccf04d277932b54c7674a55733062668a6
MD5 3de11e74253cb43dabcad5283003e18e
SHA1 f5e8d0a08ab6cc0e509380af45b94b7a4bfbbff1
SHA512 8acf7744bb199ad2cc49344a1d81320b61ce237fab2a6fbff8785a213007be274acd07d5fb30b335aebe9c578be2aaa41ce162e16eb949122a77b142b5b5f085
TLSH
T134D022968E508600D23ECDB0C2BE0563DA83E2E824CD8A45102490621920CB07E04032
MD5 SHA1 SHA512 TLSH

Submit Download

290a209673e88aa0_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\290a209673e88aa0_0
Size 207B
SHA256 8e3b8c88318138cb408185756dd8b2cb4ea586809a6ba2a3019d876c9e13427e
MD5 54f3d661aafe43bd11a6e2848eea134b
SHA1 0a89f0c2e5421339d0e73a3c36fb01dd509c9658
SHA512 193f93a3febad5d6d0a48283cb5775fb805937dca00caa3d225f24a0782627105999c340625c8bff836d0219ece53ce4372dcd8aaa70d3af1d6b625e2e91551c
TLSH
T173D02267C5900880E20FCDF89BFF4263DE0AC2C0809D02333424A4A30728C70780A620
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 f8e578460d65d6e65c2b394133dc0c817f852b4e123a3e9e657cab7cebdfe6c6
MD5 0424cc9178c076b00a7c929475c3cda8
SHA1 d770c4d980b9e40b448737bbfe361c4296efda7d
SHA512 a780d0a9c4c19acb448e7e4196dfd00dd23f2347dfa5651fd2e5983a4b7c158fb08405e9091511b8a7c13a003c3b19614f3c5d511b8336f2957ed6cae5360070
TLSH
T15A31B703020C088AE31183B0D4DFB4AFBC7019F842B74E7311154571DD46FEC1546D1D
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ce050657101d06b5174f0afec8e498425a38ded6834fd8694e5fd98fb42906ee
MD5 8d5376e40c016e5440c3474b04676de2
SHA1 87b3b299c370ebdbd737abbf5318ce68c49f0064
SHA512 6ebc521550fd9473a0c0161d50d682bf291e17ed33502fbb7b754123ee7f5fa47d49207d16ffada0dbd34468cb2ac48e1f25cf5a8fe3c5ff12f73eec23f9921f
TLSH
T18A51E742020C0846E7974AB194DF756F7D7844E902B74E7A01981871ADCEFE9F606E7F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 75b3c4977e5c40e1e280909d2403b2d0eaac54f6a6b6b3e2e8d4a73b15ca4950
MD5 a5e1f3743f311bbe667c94d4945c16b5
SHA1 192c9b13c46ba642d816f9a6a080b875c166bb7d
SHA512 1acbe715fc3940abf03f3dac704c4b654cf4e6beeb00f2346eb474c0cd071ff5faf010c536cbed7dc777ccf6a1e26d2cfa4903b195cd481ffa9d263d7f8d5df8
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Favicons
Size 24KB
SHA256 c059f0ac73185501ab49e9a63c4d7797b51d116cdb11e742f128afb9ab9fd19d
MD5 f60725b9f50d226de3bb3b212e98819a
SHA1 e02da42e8e3443028ba34f556266494c31e72d14
SHA512 c828c66d91c0aadc6301270bb0f7845d94a89e93d49a916edcbafc6171f872b4932319b52ef26368d5ca9bd935fad326fe1b1a015d36c473fef98e0a4fa0e22e
SSDEEP 48:QBmw6fU1zB/jD+u1eOlqbI+jv+h37JwDT8j1iatWj7aeO/9t4iKfRcVDPHMz7Nq3:QBCy/jDgV8+U2QRs+lt4ZaNsz7N+X
TLSH
T1C5B2E6071B743853EF846E3A3A3A5930FD7FD29C9F828D28B86844552DB5C80A4744AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\History
Size 164KB
SHA256 1230c8e381f69139e8db192d5eae5009e22fff3c3ec954a4c48fedc6e6ac10ab
MD5 e90cb293d97daa8fdda3a49454adc2d4
SHA1 444361c63c1ceb063712f88013b28dba21d5fb12
SHA512 23d1a97cf77fc96b6df3bacaa8db9c8affe818604dade8e42896fa628d6744b41df66d17aed1e2bee7b11121c577bda0c074d3a71c8b0224c201cb238d01f554
SSDEEP 96:8BhTQLqL/uejzH+bF+UIYysX0fxQp97NEHt/DfLVVVN6zRk/E0XEG:8BmqL/tH+bF+UI3iWGVNWNVVV63zG
TLSH
T104F3FB5E5F643312CDBD913768E745B3587DF03F872366866CA214B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 f080007591e28cec103da49794b0bbdf2f813d822ea8dc5d7d01f2bec7ef60fd
MD5 1e65322acfa256a8e098a57ed30d4e48
SHA1 002150556f7af155ca92391d1d456040555a68e5
SHA512 48b47c027838ff2fbbea4bd4af943cb4d8aeccef6541c98151c404f31daad1627f86f11b2d05cb5f729e975bbf768937f5effe6ca75efe3efe15583236cbbe21
SSDEEP 96:rsXdfAIBb9wkCdo616Zdris7/x+6MhmuecU971ejeVK+gnpuWI8XM1C7K:rYVGRorrisV+F497QjDjuWg6K
TLSH
T106D195065E28B97F4CC6E519BA36BE17E3FA502234D12E48E7FC492C14DB6DC6207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 d616da5c0ceebf7b984e07914cfab1b46a394c6c99700203ffca7ed09cd81662
MD5 e4865904a10d74f4b704c07d46593fdc
SHA1 4318f03496b483da165ecb4d8ce54ff503dcb17c
SHA512 dc9efe1bef7bde8d2565eb90a8b890a6f5e56f3d34600b8b793ec727f0ee03d2f182693527195c12c3e1e05470da4c5ced6e266a5ff20ff45d3e8b20967e8359
SSDEEP 96:vXiJPlf/ROo1pkF5d1XiM7VaTEv9V5h5pg5+e05rCvx7sS1hGnVc4I:6RvDg9lZrCvhBLN
TLSH
T177C196A7062DC578BF449BEBE8397ECBDDAA00CF89D9481697D2C44806C2EFC21D94D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 f33ae795474fc4628484beecc77ddcf11909bbd44d0dabe903469fd835d6ebfc
MD5 06c3468ea1c42c2dfb6dd69a67ceeeb2
SHA1 874a781fdad183773335cc46e7922a64b8590c04
SHA512 c37e76b3b83e071f1bb6abbadf00b72243054582f98bb52e822c9d80b251817099432bf242d9be0dc1eac086516acc5d66ec7924d7126b0fec631a5a4240597c
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Site Characteristics Database\LOG
Size 357B
SHA256 dbdc1910b3827b771ed04ffe59079c79b4d1bf6da8fbc1b755d2c3ff6d973216
MD5 2b2846abea3a9caecbffe8c788610d0e
SHA1 d9f05663352f429a0a180d76a772a12a5b30cd32
SHA512 e587bad044341046f1943a4256b32b8addff2c8351b6babcd3367336b79896266ddcdb6b1de34bf5342e54ceeb864a363e565f265a794b31928be3b528459a1d
TLSH
T1E5E092219689826F05DE09EA27B5A3488365700FFAC6356E5E68E744214B814712A241
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 335B
SHA256 f033193f447e16eac6baccf3550b36208e2e98bc4469cf20f88e22c16bbec893
MD5 14a0e764fcd17161f46025e0fc61c0ef
SHA1 05fa03d066ce9d13abdccae623091cf36b498694
SHA512 75731ab2b33fcd5df6281b2563b2e741c54a413f3c721a1678702cb9ff893dccf1b5a1d3d845ea709184bf2f36fa9ba695c2ca442e59df1beb9e2efd57787a4c
TLSH
T19DE0D8719685817B04DD8CDA17F4635D8378740FB7C6369E0F149B042147424B12D142
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 d59b70efbbfe681ac7efad78c067b3c0c2c824d52f8140d79f406e8f8f7819ab
MD5 70302b092b9f353ec922c8c634ec14d1
SHA1 e269b1f34ca4c5fde30a09a1c5a77f64a53a311b
SHA512 71dbac95f525b099cfffa13267561d1f299f6ff7f3f78e5d3450fab8530aa918205474f5b84681c924cea144ae2a00ce65b02868d19bb05f44fd928d15e95ca2
SSDEEP 3:ImtVupiTf3ll+///:IiVuMLGX
TLSH
T189D3045F5D010C33C41D0130D41057070D30D04434154403533C0D514C5470D03075D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Default\Web Data
Size 210KB
SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
MD5 de64b3487ba692a60d246d8fecc05bbb
SHA1 e2c1d6c0c2ef943be79fee667d2895d5579f279f
SHA512 13e75703aa5562b559896e564a264385fddfcde4ca29de673c1ba7582425776f51c6aeda5a324d89207b0d69b0c915284a1290577774220302a45d3b0fae8f1a
SSDEEP 384:FihpPI2DnEDsKc1IysvHEBMehIv0QKIqJOw:wzPDDnEAKc1Iys/LIIvfKIqJOw
TLSH
T1A724554A7B746100DDE2D9B21CB080771A3CB16D8F22E6925DB264694DF7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Local State
Size 1KB
SHA256 ed7027285803aec4e4633ee4b732ed7653ce7d3b6af4be0a5d0a92199b5c5fe2
MD5 a785e44e9a84a113efcaf00c6f4d8a3c
SHA1 36b11dfe22720c05ab35dd3b605122ba36468b3e
SHA512 018d5c072817645c8af43364b267a6a473b45247ce9261cc37f95ca23ce6c993fcd03d91119f4513be1197c4d3f539b1bae8ee8df3479fd981446d25050b6604
TLSH
T1692142B7E6949E33BC96929A7117BE2B9F30156E81105E00A9DD4B0C01EA18D96ABC37
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 342a9e614d0041824d1048e65f31cd6d9bb4b3e16f494f073ffac282213c6bc9
MD5 dea3c040346b21708872559e5d867c9e
SHA1 f96ebb310cc0d8b9bf77fcb90f163bdb5fe3cfd1
SHA512 e8d396ae89ffcf0241eb33006595d527d58cc95161a96120e2252f0b852cdc1c2322027ea7bb468ac16bf1ae0a4899c085bc3f333597b745ce2ce6cae9157e38
SSDEEP 3:LsOllllklkXl/5YK:LsUlP/G
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

e48df3db-9e56-498d-a6e4-8694164882e6.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.WebView2\EBWebView\e48df3db-9e56-498d-a6e4-8694164882e6.tmp
Size 3KB
SHA256 07e7215640b0df743dcd502a0a6a0029780a2fa460204987ccc15ee91b80b2e8
MD5 50b139e09e383eb5a0f76d74e19a1ed2
SHA1 fdda2d3d6e9607a345c81e6a92998d97d757a714
SHA512 5b94d10bb7983248aa1289379a5c08dc6464c95d9dfac4cd8d39c24e5d103e7d826209b727e8d4380334d1a392c5b76e8fa63a14454b800708f759a1cbc7a105
TLSH
T1EA81612769A4A9379CB6CA09B95B3F17E764502795843F95DAEC0F0C01EB2C9138282B
MD5 SHA1 SHA512 TLSH

Submit Download

Network_Toolkit.window.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.window.json
Size 130B
SHA256 ae826fec3e7cb62b101ad7e3e5623d8c1908967a32a1e28fcfc3b08053a049f2
MD5 77fca092bfdbf3a69e667709a98841c4
SHA1 e7760f74435e5d43860eb2d2ee6b26c350dd7ff4
SHA512 31cfe3de10bdcf2b3fa3648e5f32498aa1633b1e05e5a1a1dc37eaf64c8aabc05dd5788e9d25a52fa2624243dc51b9e22b9d5a68dc53216dcdbf9eac5e3dde06
TLSH
T13DC0920BE1249CBE71C0953A4976A242AF694E260B3A3C593A26420D6B2C17D69F985B
MD5 SHA1 SHA512 TLSH

Submit Download

ready

Path C:\Users\Admin\AppData\Local\NetworkToolkit\updates\aab8cec08037e74fda47ae427ec0f73963a1eae5edd135ffbeb5ba4fcb789cfd\.network-toolkit-reopen-1154522258\ready
Size 5B
SHA256 b24d6d33736ecd5604a4b17bc9c6481039fac362bb7df044ef1c10a2bfd21db6
MD5 b2fdab230a2c39f3595a947861863cb7
SHA1 75c0533730caf1f78561c0883fb87bc8d98ef04b
SHA512 ca6616f94a209e53f6fdc526b473172eb4b2157cf4809c31e36ad52db614ed352e68407be53c238ba17a561c4fde43f4a859aa8711f9781a0c934296d4d7571b
MD5 SHA1 SHA512

Submit Download

memory/364-112-0x00007FFC73C20000-0x00007FFC73C21000-memory.dmp

Download

memory/1264-245-0x0000022779CA0000-0x0000022779CC2000-memory.dmp

Download

memory/4260-357-0x00007FF624EB0000-0x00007FF628330000-memory.dmp

Download

memory/4264-27-0x00007FFC73C20000-0x00007FFC73C21000-memory.dmp

Download