hxxps://vegax[.]gg/

Analysis

user interaction
yes
max time kernel
242s
max time network
248s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 02:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://vegax.gg/
Sample260511-dfs65ady6l

Score

8^/10

discovery ransomware

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
128	5060	msedge.exe
198	3344	Vega X Windows_46828071.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000\Control Panel\International\Geo\Nation	Vega X Windows_46828071.exe

Executes dropped EXE 5 IoCs

pid	Process
3344	Vega X Windows_46828071.exe
3924	ContentI3.exe
6400	Vega X.exe
6724	node.exe
6924	node.exe

Loads dropped DLL 1 IoCs

pid	Process
3348	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1572509836\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_71781823\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1654710978\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1572509836\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1572509836\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1572509836\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_927481407\domain_actions.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1277023717\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1654710978\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_586398497\ct_config.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_586398497\kp_pinslist.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_3348_1614361848\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3348_227982048\_locales\ta\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ContentI3.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NOTEPAD.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Vega X.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Vega X Windows_46828071.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5060	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134229418762519724"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 54 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\MRUListEx = 00000000ffffffff	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\MRUListEx = 00000000ffffffff	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	Vega X.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\OperaStable	Vega X Windows_46828071.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0 = 50003100000000003e5ce60a100041646d696e003c0009000400efbe3e5c9d02ab5c3a172e00000054e1010000000100000000000000000000000000000027cbd600410064006d0069006e00000014000000	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0\NodeSlot = "5"	Vega X.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell\SniffedFolderType = "Generic"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 0100000000000000ffffffff	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\MRUListEx = 00000000ffffffff	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0 = 6200310000000000ab5c201810005645474158567e312e300000480009000400efbeab5c2018ab5c20182e000000a242020000000a00000000000000000000000000000009af93005600650067006100200058002000760033002e00300000001a000000	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	Vega X.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0 = 78003100000000003e5c9d021100557365727300640009000400efbe874f7748ab5c3a172e000000c70500000000010000000000000000003a0000000000e8710a0155007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\MRUListEx = 00000000ffffffff	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	Vega X.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-643422742-1162610606-620613169-1000\{FB6EA0D9-618B-45B6-B805-78C9585F6D1F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings	Vega X Windows_46828071.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	Vega X.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\OperaStable	Vega X Windows_46828071.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1 = 19002f433a5c000000000000000000000000000000000000000000	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\MRUListEx = 00000000ffffffff	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0\MRUListEx = ffffffff	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0 = 8400310000000000ab5c20181100444f574e4c4f7e3100006c0009000400efbe3e5c9d02ab5c21182e0000005ce1010000000100000000000000000042000000000027d7930044006f0077006e006c006f00610064007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370039003800000018000000	Vega X.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0 = 6800310000000000ab5c241810005645474158447e310000500009000400efbeab5c2018ab5c24182e000000354602000000080000000000000000000000000000007a600a00560065006700610020005800200044006500760020004d006f0064006500000018000000	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\0\0\0\0\0	Vega X.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	Vega X.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	Vega X.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\OperaGXStable	Vega X Windows_46828071.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\OperaGXStable	Vega X Windows_46828071.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
5256	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5412	msedge.exe
5412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeRestorePrivilege	5412	7zG.exe
Token: 35	5412	7zG.exe
Token: SeSecurityPrivilege	5412	7zG.exe
Token: SeSecurityPrivilege	5412	7zG.exe
Token: SeDebugPrivilege	6400	Vega X.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe
3348	msedge.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3344	Vega X Windows_46828071.exe
3924	ContentI3.exe
6400	Vega X.exe
6400	Vega X.exe
6400	Vega X.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3348 wrote to memory of 2820	3348	msedge.exe	84
PID 3348 wrote to memory of 5060	3348	msedge.exe	85
PID 3348 wrote to memory of 976	3348	msedge.exe	86
PID 3348 wrote to memory of 976	3348	msedge.exe	86
PID 3348 wrote to memory of 976	3348	msedge.exe	86
PID 3348 wrote to memory of 1148	3348	msedge.exe	88
PID 3348 wrote to memory of 1148	3348	msedge.exe	88
PID 3348 wrote to memory of 5344	3348	msedge.exe	89
PID 3348 wrote to memory of 5344	3348	msedge.exe	89
PID 3348 wrote to memory of 5344	3348	msedge.exe	89
PID 3348 wrote to memory of 5636	3348	msedge.exe	90
PID 3348 wrote to memory of 5636	3348	msedge.exe	90
PID 3348 wrote to memory of 5636	3348	msedge.exe	90
PID 3348 wrote to memory of 5864	3348	msedge.exe	93
PID 3348 wrote to memory of 5864	3348	msedge.exe	93
PID 3348 wrote to memory of 5864	3348	msedge.exe	93
PID 3348 wrote to memory of 5240	3348	msedge.exe	95
PID 3348 wrote to memory of 5240	3348	msedge.exe	95
PID 3348 wrote to memory of 2480	3348	msedge.exe	96
PID 3348 wrote to memory of 2480	3348	msedge.exe	96
PID 3348 wrote to memory of 5064	3348	msedge.exe	98
PID 3348 wrote to memory of 5020	3348	msedge.exe	101
PID 3348 wrote to memory of 5020	3348	msedge.exe	101
PID 3348 wrote to memory of 5020	3348	msedge.exe	101
PID 3348 wrote to memory of 3544	3348	msedge.exe	106
PID 3348 wrote to memory of 3544	3348	msedge.exe	106
PID 3348 wrote to memory of 3544	3348	msedge.exe	106
PID 3348 wrote to memory of 5940	3348	msedge.exe	111
PID 3348 wrote to memory of 1900	3348	msedge.exe	110
PID 3348 wrote to memory of 5940	3348	msedge.exe	111
PID 3348 wrote to memory of 5940	3348	msedge.exe	111
PID 3348 wrote to memory of 1900	3348	msedge.exe	110
PID 3348 wrote to memory of 4048	3348	msedge.exe	112
PID 3348 wrote to memory of 5372	3348	msedge.exe	114
PID 3348 wrote to memory of 3776	3348	msedge.exe	115
PID 3348 wrote to memory of 2300	3348	msedge.exe	116
PID 3348 wrote to memory of 2500	3348	msedge.exe	117
PID 3348 wrote to memory of 2500	3348	msedge.exe	117
PID 3348 wrote to memory of 4132	3348	msedge.exe	118
PID 3348 wrote to memory of 4132	3348	msedge.exe	118
PID 3348 wrote to memory of 3436	3348	msedge.exe	124
PID 3348 wrote to memory of 3436	3348	msedge.exe	124
PID 3348 wrote to memory of 5652	3348	msedge.exe	127
PID 3348 wrote to memory of 5652	3348	msedge.exe	127
PID 3344 wrote to memory of 3924	3344	Vega X Windows_46828071.exe	128
PID 3344 wrote to memory of 5256	3344	Vega X Windows_46828071.exe	129
PID 3348 wrote to memory of 5708	3348	msedge.exe	130
PID 3348 wrote to memory of 5708	3348	msedge.exe	130
PID 3348 wrote to memory of 5068	3348	msedge.exe	131
PID 3348 wrote to memory of 5068	3348	msedge.exe	131
PID 3348 wrote to memory of 5068	3348	msedge.exe	131
PID 3348 wrote to memory of 1184	3348	msedge.exe	132
PID 3348 wrote to memory of 1184	3348	msedge.exe	132
PID 3348 wrote to memory of 1184	3348	msedge.exe	132
PID 3348 wrote to memory of 648	3348	msedge.exe	133
PID 3348 wrote to memory of 648	3348	msedge.exe	133
PID 3348 wrote to memory of 648	3348	msedge.exe	133
PID 3348 wrote to memory of 5108	3348	msedge.exe	134
PID 3348 wrote to memory of 5412	3348	msedge.exe	135
PID 3348 wrote to memory of 5684	3348	msedge.exe	136
PID 3348 wrote to memory of 5684	3348	msedge.exe	136
PID 3348 wrote to memory of 3712	3348	msedge.exe	138
PID 3348 wrote to memory of 3712	3348	msedge.exe	138
PID 3348 wrote to memory of 1096	3348	msedge.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://vegax.gg/
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffffd13c188,0x7ffffd13c194,0x7ffffd13c1a0
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,2014630121585482918,16330761488098900250,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,10460439989264477783,10509677455333181303,262144 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,9274911818408910457,12115155626358203921,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,43768107954320369,14858547577510284057,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,16792545687641127025,16249643405107801827,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4940,i,14109571977689464662,83592968149952182,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,2431670589919947417,12085897289531510303,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,11535764493650703490,11299340231304723523,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,10165524565825443966,14655138438158844761,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,10165524565825443966,14655138438158844761,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6476,i,16081719077739335079,6829616216936935548,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6568,i,16251607783786648900,4569970341804617058,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,16043262268703849644,4333959069609534161,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4968,i,6202358992898053277,15227072300694541037,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,4566617441255927793,9513286482389474276,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,235924720194290311,3189490079353727553,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,7206441141834296199,11876508739316445471,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,1306368683414284266,7854677299224377700,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,7700666238694128461,9732115744782126998,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,4952993800411511505,8846273147694453966,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,7950894999791109832,8011640963956899140,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,8073298253327212478,12554291196743023528,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,1643260752180871164,2203573517909792562,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7108,i,15669218271430260689,12168979482066193661,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=2152,i,17610115451303578881,6930774448800140957,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4968,i,1630516043891158174,1543353701511826596,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7236,i,13510660882823952584,7749060907934091533,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7532,i,12109672795078688835,12788095181953824614,262144 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,258554891138775808,11193421401736973584,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:8
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13085331888663715230,1399249878548956556,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7304,i,15268046796966003756,4723800864112659365,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7324,i,13700203558992285301,9687937148720249742,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:8
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7268,i,13751678981331143040,8414525986084622946,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7460,i,1339185332892657326,7990322705843635205,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=4952,i,3864178491579195026,2942902428672972668,2097152 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7748,i,9940741135094026281,10176431308056490846,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,5419870879863132467,2142669800886344706,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,17544671783237464597,15466488285341132683,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7888,i,15103615549933729405,2368246555766919512,524288 --field-trial-handle=2292,i,5085670537331204290,14239430072409769896,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:8
  2⤵
  PID:6872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:452

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:716

C:\Users\Admin\Downloads\Vega X Windows_46828071.exe
"C:\Users\Admin\Downloads\Vega X Windows_46828071.exe"
1⤵
- Downloads MZ/PE file
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
  "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3924
- C:\Windows\SysWOW64\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
  2⤵
  - System Location Discovery: System Language Discovery
  - Opens file in notepad (likely ransom note)
  PID:5256

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Vega X Windows.txt
1⤵
PID:5436

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Vega X v3.0\" -ad -an -ai#7zMap29328:84:7zEvent31500
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5412

C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\Vega X.exe
"C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\Vega X.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:6400
- C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node.exe
  "bin\commservice\node\node.exe" bin\commservice\files\index.js
  2⤵
  - Executes dropped EXE
  PID:6724
- C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node.exe
  "bin\commservice\node\node.exe" bin\commservice\files\index.js
  2⤵
  - Executes dropped EXE
  PID:6924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1277023717\manifest.json
Size 52B
SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
MD5 50ba36034cb8b97ce52eb941d76e9103
SHA1 a8757a3700f2af777ce5efc382010d2619f51491
SHA512 001110c3e45514a09cf6f60ca14855524e83ac15cf56776cf3005e016464dc6584b107c63842328a7c1738cc7f2154d8689f84d913b9b8199367699c3f9085aa
TLSH
T1FC900260082491171AC10E506570F8859391661A95851D1D0445154802A646CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1572509836\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_1654710978\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_586398497\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_71781823\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_71781823\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3348_927481407\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 924e96ec20750cb6a5239ec6615014ae8ebb3de4d3c60595d6c95e7ccd197fe9
MD5 9b2430d85ce0b6612f557c45f7f3cbcc
SHA1 0a1e10f745cd18a847854cf92a1d4154f1e53a18
SHA512 187d6a5fac24a44192cd7964a293cf55a01134f6bd0ced9759bf4dee1fbc0273c5e118208cf3606ca4853d0f0f145448fc8342dac94a0745638e99f4acafd46e
TLSH
T1FED0801C1275BC31D4BA8575544537092D1DED675543533B5433557C0D87E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce180cf0fce9a4a96685bbb0c58efb5750080d37ce961b69a74ae38b49eb68c9
MD5 2abcf056d353616a5983a10f17185a31
SHA1 40d71f06b42cf03d05e8dba44f76231dd24d9fd9
SHA512 5bff16b6683201694139145fd708bf7d834e97a5792e68cfb43b011e13c0e993e1cfb6a8c6f450aa2437fe486fb6f3ff1af62a05b918ee73bc195ec5cb0b3e02
TLSH
T1D7D080181275AC31D4A68575548537093E2DED675543533B5473557C0DC7E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2bfff9fa55349dac687c745dadd746489e4a459e486a1fb9a41b3f56891a2ffd
MD5 58328ecb6180e23a9677268cdfe93d10
SHA1 aa7cf6cc398cbb2a12cd772d53a9b241f52cd69f
SHA512 601826e42ad2b3b7a929830f38d6aa88c6f0d6b9d268500345f912133172148c40e9a8869d409cfae077c66b6c1c97b69ed9d25edd773a788763a0a1d0efc9f8
TLSH
T1B8E02BA9D815EC671DFD5718B4504785E76103162B81490F3F3CD20D8FB563E4286C9C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 19KB
SHA256 04de4b822cda39d55bd6ebde97c09a578a4f63242e7cf804977da383fab17618
MD5 646c73cd9bdc03d8c616bfbf868d9672
SHA1 4d93fdb8c3740ac0f32ad437fa68ae1464e7dfb2
SHA512 b7a4460dc6e75d30d559646cb85b56b210fa5326ee948057e4c819432d5bb35634a7ccd9ab334e180a4ed6b00be6b76ba4804e178053b763224a87b1b71108ba
SSDEEP 384:B3N5kjhDv5mbCOcR61oWpQt3QIIuhzTEEr6XDrPFeuCsOVeQF1sKkiXA:Bd5kBhO461oWpQtAGhzQv0u5ZQFGK2
TLSH
T14C92E0AE6C191707B47AFC8498B671E5C4C71DAEA0E22537179BCF774CE0079882293B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 59KB
SHA256 c722c19fc53a8cf11507511be0a0f425d256d0edfaa0c43b9177dbd9d4a538fd
MD5 1fc9d12e079e8053730adb8c5d9769f5
SHA1 6db462ca8de6ccd660bf01e497b886ddbb0ce571
SHA512 96e68c0e4eff5f88287c32c4d29381145245b101af8eec994eebcec35bd39899705f6f74e40f424335160bd5f26e79bcc4772c3320d274ad0ce4c81487866c56
SSDEEP 1536:crMbi15cl7L9+vf6tE68YdwfitnJh/C9UuOqTRt+pyS/+st:crv124f6tEHwFrK+uOqP+p1/+Q
TLSH
T1CF53F12E9CFFA07F2AB0D9EEEB7910F5DE9601BA65009FCC797524431BD61718923908
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 55KB
SHA256 d8204a264efd7b1935aabbc7c85fc471bb88bbc9016808a165f8e063a2f5cdba
MD5 fe4db5c31e53c3e67838fd54a7b1dcd6
SHA1 390118a32d1739456db6f38fad9194ff8f808ff6
SHA512 f42bb0df63bf8438d121231ab46e5752de5c620d43689097edbb1ee6b212f290d5da34fed07d44b70cbbef7c206b58505355b8b200b6fa10a0a9d6797cdac448
SSDEEP 1536:chq9KMvJGt0Ze36MbYuE4xkG6OFQWQ+4Orj0xfEfdD:L9KkJ3nMo4t4WQ1Ff8dD
TLSH
T17B43F1C32F6D1474EF9BD17521A5CFA547AC247F843DD2B0121BED1F628658DCA8105A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 72KB
SHA256 193dc0e32aaeaed8373689a34903a7a869eeec406306b0e054513bbc229ae432
MD5 b3dbf823c6d17d8fe09de16dbe159b7f
SHA1 fe4a900e50856987bd05768499405cfb70e60575
SHA512 9b44b951d0b75af0d8d99b8c8071b805b881014baa7dfb5eb00240f933136ae68431ed67a2ea3556e027f947f82110d4a6b8289ae0b8d5b3829495d03b97cd09
SSDEEP 1536:EvoCSHkUIk+TW7n37v90+O2xgmRbfcX7gaXQ8zEl5f3CZ0L:IokRdC7nzfO2xXRIX7gag8zEl5fs0
TLSH
T105730241779E5F51BD730D41B3229C6B0EC012ECE7D2D6B8608641AF7C981BBBA8921C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 20KB
SHA256 4a68a8c4aa95e4aab781436c75d5210419bd211711dd076496744e5561f2ae37
MD5 ae40b9291e220c09a3f94c9349eb1879
SHA1 eba869002864cdbe784131106634158c86781e89
SHA512 c879e995005f57ec3dfd1db029ebf1394caabea0f10072b1b8133212a2588b0de18d02069dfe5c86e1e235e8e7588471663009fbe877e280f0a0102ca7f8ecfc
SSDEEP 384:JsqpRkjMH613mvWHZzSxgYGyKQEW/8yX/MzUFYnAdT6BWjH:WNjMH61W2t6BEWvMzUBdT6BWj
TLSH
T1D392E0BA88BD7F79B6349440C5E41791D03B97A005DAFDCFA6F8A040B2695F7281E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 82a0f8fbd6abc5fca9214a3653645847ae8ca0d658008c9bbb4c62c5aeb5f1c8
MD5 3a7d3e415fdd1d4ab140d3010062f4ba
SHA1 9f19af0a902ab3b4724e101ea6d3cd24f61fc427
SHA512 129a554c9dc67181efe13fa7f6a26cb5268e8bc21ebe3cd483b132023502ce6fefff7edc9764c84d6316d863890a3163e3bb4b99f473746ea692273eb43a46cb
SSDEEP 96:Uf5OvOKS2GVdjzlGUKc1ZU5nDM1zC8gKkGeZfWG0OjilWF5M7clylIrhaGv/EI9k:Uf52OKS2GVdjzlGUKcjUnDM1zC87kGeU
TLSH
T1E5C11E9205C16851FFF126B180A60D85A63377EDE39E0B1377F5822D1BFBEA072165A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c8b27b58cc93eb21ec5561a489df2425137402710cfa3810cb7f1538dfa50687
MD5 4899debdf30ca13d4dc2d9df9223d966
SHA1 a101480109e873e755a8fddbcf427f96753bc2d2
SHA512 bbd0dcf8fe9ee315759d3ef72216112076727f8b1c602ad7e4c7035b08328a37198fbba198ca6f2531bd3861f6b2656cc2c3ee527b368fbf275f8f7bf9467e3e
TLSH
T19F51404421858D26FBE22439D6FF4C8972797B8D412F1F463AF6433D5BEAB71500AE01
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 0801ccb57ef2a94f993a6dbfc718d0b605d5ee64d40c6f40257fcc8c55216238
MD5 f8f73613577097fc41bfdef99df5d9cd
SHA1 a2f62490b728ac47597b3fce5f41160dbc3cee5b
SHA512 0c135d61a669757e3b91f630a1e5ee93d7f3a0db37799dc830a2f2656d7e281258f98e7b4488edc5c10272de6eebbcf7a3aabf613764cd0a9896f79c2dee0277
SSDEEP 96:9f5OvONAS2GVdjzlGUKc1ZU5nDM1zC8gKkGeZfWG0OjilWF5M7clylIrhaGv/EIX:9f52ONAS2GVdjzlGUKcjUnDM1zC87kGY
TLSH
T1E2C11E9205C16851FFF166B180A60D84A63377EDE39E0B1377F5812D1BFBEA072165A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe584bc9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584bc9.TMP
Size 2KB
SHA256 702d9c7500fa6b63bf77edb81e41f0e19444297746dae99e8ee81ee61b22356c
MD5 438ae46beb180eb96f7f554b2f698853
SHA1 3005f7f1187a457e98f03f9600216b784fc4413b
SHA512 3e75c06866528b8f236aa69a9c9021b8ef9f9a22bc72f8b046ef13c70bcd791185551349753602669ab66ef196668ce0d0f3dcd7be59de96d9e2b257e63b1f20
TLSH
T1DC511E1421858D26FBE21434D6FF4C853379BB8E412F1E4639F6473C9AEAB21404BE01
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 42KB
SHA256 c392adab5af0f1725ad44fdfadfc1380b1dd95fe9ff727dcb9ca832aab410e20
MD5 42fe9a3ffdf98f70c5d19cffa0ff4f8f
SHA1 e11484a9b3c6a6307f8bacdfa6660b5ed7cd4ca2
SHA512 eb3e4565414dd56b7ac1714785c7d3b11e3ef229e3cf6b37b4c804186f75b6457cb1fae14af41ca5dc1e1d5cda7783391a8ee6168834a5565ccbd419cffd2bac
SSDEEP 768:JuC2nAPGya2ao4Ga3uPx7fHkMAMA0iJhn7yXD77B7gU0+Y7FujesnsQj0JNmJ1QH:2AA3Wx7c7E47FujesnsQj0JNmJ1QDl4o
TLSH
T1DF134562B5F9120AF2BB9F7BA8B617564CBBBE462D04C85D5870620D4C61F40CD73B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 383B
SHA256 5fb7685204fb65a430847c9b07fb26bb43c7d856a5759223385604b5629eb82c
MD5 a3c774a70cfcc6e8f84a0aff34d190a9
SHA1 430e9765871cf0f5bb37d77da42d06bad3ffc8a6
SHA512 49b18c450364499246ae1e3c4b491ed48ed116d76c0d0c7b630dc571edd1e3135efdb39364fcbed265dbcbc85b4ae5a4649f4a0c4b06b22cec525bab7bf12c6d
TLSH
T13FE0E5A984DD865FA28456DB4229FF0CD6E3360A968C6C811B4CC848B082164B6AD290
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 1a4117d1512d68fda69caaf9c09718d10bed1d488a467d199c452c3ba2bafafe
MD5 4f63212a572346d30aa74aa7c9147562
SHA1 de347e43ccef990d8e6eed39268756cda3e5487f
SHA512 e1c14fadee34929d6a4930151858c1fabc52d81947bb6756b984472de9f543df174b1fa332ba3a109278daa8a50bd95c6f3827e44fb895ed5bb1c501f5b9cd53
SSDEEP 192:D1Npx+tDceqCfRWYjM9rGOLsKtyrpKypDsxrE2Gj6dpUBRUADEKSFE1gxl07:D1Npx+tDceqCfRWYjM9rGOLsKtyrpKyd
TLSH
T18002BCF7C3E886ADCD5156F4AA283E1BDE1D0959432C3D1AC4E8AF4B97F1470E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 5c91d20c46e07028c22ffcc33f663555fe24a2955b9ca538771901bf362499fe
MD5 d33a9366a7ec97fd23f3a101e9e0a889
SHA1 6024f49544ee1b9a8071cd8d92c8b5c875146203
SHA512 c09fbe1499ce3d69e1f9c49d0e0d9731e952de022766c22fa5735aefdef81892aca865a2a3f951de7264b759db2a56d66568d7edcb0468366a591fd0fefab4ce
SSDEEP 192:D1Npx+tDceqCfRWY/NNkgM9rGOLsKtyrpKypDsxrEPj6dpUBRUADEKSFE1gxl0aE:D1Npx+tDceqCfRWY/NNkgM9rGOLsKty7
TLSH
T10532EDF7C3E886ADCD1156F0AA182E1BCE1D0956436C3D1AC5E8AF4B93F1471E251B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 23KB
SHA256 d148ccee29611218cebaa42f4750e8c20906c59f5bbaf93abd79eceae7255241
MD5 5490b3ce2faa7fc7ff2fd0960876d7f1
SHA1 a2e2cca4461038880a6e5b4bf25286ab80127c75
SHA512 c14a94ce015c2a9664f86962ee1eaf5adc2ca060a7f241154ef02c27d77ac1fe4fdf1c15c031e4bbfd41c50610ab3a503e9625108186d0f18c35af9fa86e84cc
SSDEEP 384:sxZ2WnM9tkqCnk/fH2s5YxvV9y5uS/ZAc3BBz5+imlxHOSPkLJs0xl/eHdyrHX8m:slwdCk/ffYXS/ZAc3BBzyHOSkNLiu
TLSH
T171B2E9537524897BCDD7C516F925BF56D6F80463CA908E48AAFCCE0C04DA6FD2506C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 778f664d6cecf419fe21b4d96665190b501f8478295fa759b7365882e4614636
MD5 97d99de568545d7e7bf6ba8c1cc47b13
SHA1 ed63443e53b9d2c7c5253689e01a43737da271be
SHA512 3087f287df52b3b4e25796c4215378b849157da66e06449e07b3f278eb42788630b29a58247a3f0d17fcc48b21e979499471edcf6e2880ee19d430b0b97bd518
SSDEEP 384:sxZ2WnB9tk6nk/fH2s5DxvV9y5uS/ZAc3BBz5+iMlxHOStkJs0xl/eHdyrHX8334:slfLk/ffDXS/ZAc3BBzoHOSoNf5h
TLSH
T19B92E84676284D7BCDD7D226F905B763E6B80063D6904E44AAFCCF0C14E6AED2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 639d309070673ccf752d8cd1b9b8fac8361fb45896cfe8771f484f48f7aecfdc
MD5 0f184610dad4550bc1fc560bcb167972
SHA1 6105b15f49f7c4c01ce8ed32ea9c76dfbeb728a0
SHA512 169cbacc9097443660c14d7cb1a28f7b9cbafc97b5c03bec1df38814aec3e89c97ec824e102ce3c3c8200936ed932d258d673af629e0b69bc3a9af4b75cae6f6
SSDEEP 384:sxZ219tkbnk/fH2s5DxvV9y5h/lxHbStks0xl/eHdyrHX83ykddG7XU:sI8k/ffDiHbSANyzh
TLSH
T1FE82D856B638597BCCDBD21AF945BB53D6F9146392904E44AAFCCF0C00E6AED2107C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 cc539e925b744ab400109f0cdeaeb851be20bcc73fd4b8bf9a346f101f28bd55
MD5 6fc7dbb31dec0a1a5c7c1040feee9198
SHA1 0d97f3952a5ddce53df4826bfb95774e38d69770
SHA512 aced188f67b0b0eea9ad38123d320f26119ba2d2cd17a35e3eba8b1ebd5ff137dbc940e7d0753eccdfb2e24722ba7199666c9cc4d59a23eda2b9149d6fcd7445
SSDEEP 768:KJ4Z0+27pLuL/8MWv80Xo8F1+UoAYDCx9Tuqh0VfUC9xbog/OV7YsLLlXZUJRrov:KJ4Z0+WE/8MWv80Xou1ja+YsLLxyJq6a
TLSH
T15EF20C3B6C4CCB7E4F804E9CEC2A7E8E6DE8028F9698885447F9944C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c372b8fc-5619-41f7-b679-2ef559361b2c\index-dir\the-real-index
Size 72B
SHA256 0d1670fc287f141564d5120b46b5ec6663735e0a43062cac1251c2f28bbd89a8
MD5 ff803a8d8049efff744a4728818298e4
SHA1 fc5bed13c6bdd0b5c03e8855cf46cc75a9c32e41
SHA512 b8ceaa9379ef03dd5b9f270441215c8078f0afbe54dcbc773e09a96374d60fec94c24bc1ac31d47f1309b60a36e6087f7bd57c515b7f76b2f67392a4883738cc
TLSH
T19CA0025DC5E12315C86443B81043679076106D143209D70395E91848D998594579B05B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59dcf8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c372b8fc-5619-41f7-b679-2ef559361b2c\index-dir\the-real-index~RFe59dcf8.TMP
Size 72B
SHA256 170b0db18025baf8345cc70be9ae78ee3c79fbd68518ce004bfc4bffc56590d0
MD5 930c4a12ddf541bb4f83c05b9d384df9
SHA1 8c31625cfd17edc10302a73e576b7c2b6a8ba407
SHA512 5bf1bd39d49a952f06665d4c95f3023f7004e00c4492e230d2c7ad32b2ab2d2e410ab29c17be3fcf0b4c951f5e46b3d9b2afdd5c95f7e05a2cbe86c609bcee0c
TLSH
T1EAA0026D0340C908DC00657530076652A68E9911100006AEA79BFCE6BC9C8B4C749021
MD5 SHA1 SHA512 TLSH

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e1940040-ba3a-4882-afdc-249f8af79c0f\4f2277ea2139c475_0
Size 63KB
SHA256 8e2b5470aeee67e421bc5c6ada31902ef86b835b5f05ca29b50bfc2ed1fbc869
MD5 bc5576e892c4a213237d76499f67e183
SHA1 60c5c04500c64f2f4397889609d33e8d1212b606
SHA512 909a72f236c28423a828c2f20b467fd2f0a5f195818ca2d20b175283b6775d55309006cdae1713c8f1f19c8ee9d13f9841cbe8254bc76bcf20bbb91bedb82937
SSDEEP 1536:cm8qnCNQ9jWdWkYs/b23Whz5CGmNHndMzmcQrB7HPwqpzkv/m:cm8ToK/YsfhzUGmdtQ/m
TLSH
T1EA532AA7B0626035C7AD22D6A4673F00F12B17563844C9E8F46C6A913F19E8B5377AFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e1940040-ba3a-4882-afdc-249f8af79c0f\index-dir\the-real-index
Size 72B
SHA256 12529c48e1dc23cee586ddc9e8fd0a2f520091a81a7a29e10fe3fec381be052e
MD5 5b65e25b00c8c5216ceb0c6864399c80
SHA1 cf25fb6dc797f74cdd8f2875acfa94d8e8d58c47
SHA512 95d1cbbe3499e838c048c10d9e96ec507fb12f2b031d1ec09a19e493d356007c47d746694b40d1da1c8024b36f39c8fa380f9d2793632515853587b4774c81f2
TLSH
T18BA00221655800D1C5411AB85172D15467147D150109930A75E50C57A95129C4609055
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d363.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e1940040-ba3a-4882-afdc-249f8af79c0f\index-dir\the-real-index~RFe59d363.TMP
Size 72B
SHA256 b59c51c3cdbee20e27687d4f0f6161b90e66c636a7bec85ebf73333bd2ea885c
MD5 b64175695d1062cf5cf9c685352f878a
SHA1 6e439c926eb95e2b55e070730099b073ba444144
SHA512 2457f4bf3fcfa388bdb44d4553f75ed802c49f23fd35f8ff68b20ce0bf1a992d27817ed4d6e134b2837497ac2b04b34b66cff248d88ea4bb8246de03502b8e29
TLSH
T1A3A0022473D41470D00005BC590312503705DD61170A57065D900C958C9D49C4A01064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f589e95c-170b-43c1-871c-9ea072d3076c\index-dir\the-real-index
Size 72B
SHA256 01ddae502a84e3427d64afe00f01e48ea441ffdd3da4ef2849805282c9e6bd94
MD5 5ac6469df9bc999d2c41377d843a7955
SHA1 08c606fc68a6cdbc690fb8a0731f0ee29609aa52
SHA512 eefeb37222bb7629583391ca945d7fcf255fa99c976fbb035aced2434290deb3ccd3556303c5e6d2e635aad10e83374fc1827a0cabf76b35320a0fcbf98604da
TLSH
T163A0025423C01517C1131BB025B2C185A210AC144705221A75D5184BD991540474500D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e073.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f589e95c-170b-43c1-871c-9ea072d3076c\index-dir\the-real-index~RFe59e073.TMP
Size 72B
SHA256 3aacbfbc7ad222cea3f9781aaa0a12f4df7f24de5185d9cdbff050a4829d3543
MD5 53671a880ab851f2689039881057291b
SHA1 d6843443a83c0a6adce606fb8f8557b299f678c0
SHA512 f616ab848442e5f2354accc5676b42bad9fa5d60727844fd1589d3276a0747f0df265787e332dbe22426bff63014c2eb3246ac81126f5aa6f00b3ac7306365f8
TLSH
T1EBA002202BC01036D26261F9156716411211C958120D120699E609A4CC689604A8152C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f5ba40f3-432a-4c7f-8e37-0710a00cf07c\index-dir\the-real-index
Size 2KB
SHA256 a3eadcaede19cda3fcc087f19e3e5f76e031ab05ed42f46cb2b53244c057450c
MD5 dc1b815d44c468164115478148fedb79
SHA1 1bfe1083ef6144cfebe64f0d1dd74588f765639d
SHA512 5a41c753b70c92e02313c29db32b05beb8cbdb28c110fa1f24d198efb9b7c900137ab4741a574b5f7de05c0cbb9523a2fd148a44ad35299021dc15551e779111
TLSH
T1E551D8CD8D875B6BF89C56B300B6048433B80ACC179446236CBC563A7E5766D1D5E3D4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 8326d59b5a5e65ed20bc6e7d10030791d382262cf8c63f425e236804d5f1e88c
MD5 db54de1fbe9f0a5e72e82dd6f1fa9e0c
SHA1 c8e6060eaa8a35dcf90c2729af9b57257372eeb5
SHA512 b8de3150db4c1ceffb7c75b119aa2739bedaca348ee5dfcc86ee488499c9f1fc943b8029e93d6a54f5591f1d21c5d2658e14bdf170e48184597cd22e5c4d2770
TLSH
T1CAF05C732DE71410FCBFD3D574319CA1020579688960ED5F105BF2DB90B0B50A44DC76
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 6e563442146cce48bc74199a4728a46d74f33634b2661fffc191000682f05dce
MD5 80c45dc90aa9b5e1837649fedabd907a
SHA1 918ebe67112a3426fd52e73376834be4789cae68
SHA512 6fa3f13ff79729cc4c81cbb2f180f1c0d324867ae56e0c5ad11c9b748ed0d5c5fddbc441e313fe8807145810ee80cd6d5c5b27e6971658d3f1b567084d605cec
TLSH
T197B02282C02C0823C800233CC0CAB0883A200C3203033222C0E0E0FCE830380E02320A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6d7783be2615ec4266df36384f3b01a0ff681e678dd47a46d02f6f9d149cb823
MD5 b9a87499d4490143e5fd963f58f469de
SHA1 cbc1b9d8467575ed30a186650e7eaa465683b230
SHA512 31d39cc7dd720662ef812e2a4f3c4831c9522e17a0d8112320f8fafe4777526d91b2e9735ac97a5b25333bbeca524de3165e31d474c9e09618e6e6330592abc2
TLSH
T1E2A00227C6595129C85016795447526077604919030D971285D5E7D8FD91180516915A
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 71dee96c2bee79fb887d17fa85008ae8956be9ec6672b0e1aef2e4427ae03b57
MD5 5c1081fa3c099979b0fc27c518ac08f0
SHA1 7303fb897334ba37fa927a4096279f56af81d393
SHA512 5bb3f820f108991f2dfb803f71ef846f1a0571d6948f23f67ecbbaa1ddd636a519cae4998114bc322f193847c7f72575b30053acb34f651ab6d88ef4d0391406
SSDEEP 192:ANtDrpn3F2E9FHwgRBL3WDfSZXGjRXzjN:AzD9n17lw8BrWLSJGdXPN
TLSH
T1BEC22B11713B02813E7E298E9595B46F62C230A33198B52B3BF914664F6BE20DDFDDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 148B
SHA256 e0fed9ab11e311922c90b5f8173b06185396cb7ff3aa0ea8d3146d85426bc399
MD5 ca115f9221f718093fb969472bcf6264
SHA1 91145c60ed6ea3ec1db4ad55d5f615f07cc0f961
SHA512 b061e945f13cef67cd7de814ce6080bac89e921c172d56db7954c461781ee31fb4c3923609c971b2e4e855b2a8e9d218e83869417213b496cdaba44082b360c1
TLSH
T122C09BFB8552894736749FF93034B71DD51BD54E4CD1CCF8D4458046657DA234C52934
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5830ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5830ee.TMP
Size 155B
SHA256 dbb877fc5e576990bacc64351ef876bae2e03f0102155e3d46ce92775ce9e0e4
MD5 3c8ca89ddc0b8c7c9da5d274cfc649d7
SHA1 3b2d10f21ddec4159696781721d3aedccd767a45
SHA512 9b81be614e7073f4c31693c52b1e38dfedb6f63dc82e292219aa7230f789404bff16c55d703a2208cd91919c730528f7a28e259625450963b016b033568679f6
TLSH
T12BC08CFB40214943277059E62030B20CC527CC0E4CC0CCF8840AB0462138A238801824
MD5 SHA1 SHA512 TLSH

Submit Download

f08ac34f-b9bb-4922-920f-63e9eea9d475.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f08ac34f-b9bb-4922-920f-63e9eea9d475.tmp
Size 16KB
SHA256 e5fec9a5ddb47df39f07f3ea4d9d9dc794a3be5b665e85325556cb716bcebb24
MD5 de8a9795345348417f73a7d29c3b2074
SHA1 51b257dcf581dfeeaafccb71ec453f8f7bc62a05
SHA512 3fa85e9e0610481327e2c5d8361bc4c640b651397aaa0637b3b1e8304466b5fff9b244b02f0037f633f867bf674fe3b729976139d1aedbe62b726d8b8ee808dd
SSDEEP 384:sxZ219tkMnk/fH2sx8xvV9k5hWlxHbnv0xl/eHdyrHX83VqMdG7jR:sIfk/fz8bHbQNUm
TLSH
T19E72C8166638597BCDD7D21AFA45BB53D6F9152392904E44AAFCCB0C00E6AED2107C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
Size 145KB
SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
MD5 370210ebc9e63f6f39a4185846435533
SHA1 17b63f65390d236465b6952953a7df4cbc6fce1e
SHA512 e594ebf58d19f6d9e7024f98107c738142c6cc2504a0ba89e13f8f771c6a600427e75951ccbfe105983c21b735dcde6e6e173f4da37745c4de51bb9f5e86b989
SSDEEP 3072:7PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEI/tLZjUd6mG:LX1aI5aZoKzMJ07NI/leBG
TLSH
T105E3F1108EC41FACDFA8291C70BE0B1D63E1C79D84676585E773FE0AAFAB90462275C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ce2ddc1b2aefb3c2a62ba6b4851c56a73bc9df6c996cb0ca173afdb7503b444a
MD5 1d1fd30005d51c79ef087803caa7a1a8
SHA1 fbc55d1ffafebc40ceb84d5a1f2bbc6466303c0e
SHA512 7f70e6204b94e67a68a07dd37653902c0e097027f426b5bb76d4a34560debc46624150725490b291f8d1ea5497c9bb1a1d9a9c43908ecc0805744abfa652e289
SSDEEP 384:nPiFavqMg3sNa8TUNTUlIm2TJvuxOiMXEVNLq4fqz86a5WRYV/Vw1mRoCe0KrN18:aFayv3jwgzmxl8zWsRYk1m2/028
TLSH
T1E3C24A36E858D9ABEDE78FC9E74A7A07DEE00167C99C4AD8CAD81E1D00D719E1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 2e702904d237f947d6066b3edded6dcf354dbb1170c98e2fa13d3f576e73404b
MD5 d18f0caee9904c5576890393557ab0b1
SHA1 73c1341b0125e8f17c39263d6b3113fbaa72dd6f
SHA512 b336993742aae8c64a0b5a4669e46c71f0fc8547f5e2b7306c8c42b28880e7ec2090c2b44aa6db82f1848fd8cae5a4fef7acbcb8c3843dc495e9474540380f3f
SSDEEP 768:giF6cpm3GwgQJsmxRTMztnihkoFYS/EJk:gym3vJsSZhkoaQ
TLSH
T1B4E2A1F5A8DB8976E8AE8B8BA73D2D029DBCC153B5884994F7C50D0CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 4249d0966b893c5922c5aca67ae0c197034759a980b300d326a2585864cc1383
MD5 b0a0dd1236d4b5e3e0bb49ae86383f6b
SHA1 253c2b1e0a71f25235609a1ad38a91bf703c320c
SHA512 16b51649ac6ce213cc882da3da4d2621f386605715c2498f2f163ca142e56647e4b9a639f9356606fbc9828a4deea74509e267bf2ace3076c4c1a9b02ea1fa10
SSDEEP 768:giFvcpN3DwgQJHmxR/WOztQihkoFYS/EJk:gTN3eJHS5hkoaQ
TLSH
T1C8E2A1F5A8DB8976E8AE8B87A77D2D029DBCC153B5884994F7850E0CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 94705bd5bea61a32190422a62dd4377677924d58c54ca5c6a1bbb9d180ab2a45
MD5 d4db2097caa950c50b71a57cca7ddf21
SHA1 4518fc93edfe6d91220b08921bb30fa447f3616a
SHA512 895ddd21f0a8b3181a23e34fe634a997104ecae688375e20cea551ee2f59e0ccd1ee8c7b2d1f5f59f7fd02db4328bf0cb2661279949a948141c0d30b2edb5f7b
SSDEEP 768:giFAcpR3DwgQJHmxRLWhztkihkoFYS/EJk:g4R3eJHSihkoaQ
TLSH
T104E2A1F5A8DB8977E8AE4B87A73D2D029DBCC153B5884994F7850D0CCC961BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 d1349d1a1639d221d64719d4af75ccf567d17e2a041012c2cc05d958f0976740
MD5 b79eb45bb22689cc92f49a335b333fb0
SHA1 e708d3e14c47d120331d24a2f8dc6acc0838596d
SHA512 0354b698fb57593fca8bd380196aebbd8845930c7923f0df8ca0a805ff9f1922d465ce1bb6f89f2c71d5e8973e28c6fc9e7577294729d8b5a4a2d8f07174232d
SSDEEP 768:giF/cpm3DwgQJsmxRcrztQihkoFYS/EJk:gRm3eJsSQhkoaQ
TLSH
T117E2A1F5A8DB8976E8AE8B8BA77D2D029DBCC153B5884994F7C50D0CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0457739dff277dc2eb377e93fee89fc993d2b1dd8afe67ba30dcfc0c93aa7fa3
MD5 8b37ef7408a0c6036bf7bb8b6e374d99
SHA1 cf5402b84303bc364d718ec5e928fa67f2053207
SHA512 75303180e1433e32dca1598bb64c2dafd50e5f8c5529dbae8645ac9864599a2394fd69f68b854b2dedb1b3bb8de29f94096e138567665a98336f6a4cf389fbe7
SSDEEP 384:nJdiFavqMg3sNXP8TUNTUlIm2TJvuxO1WMgLVIJq4fqz86xv5QRYV/Vw1mRoCe0X:yFayv32wgzmxHrztviRYk1m2/028
TLSH
T1F1C24A36E858DDABEDE78FD9E74A7A07DEE00167C58C4AD8DAD80E1D009719E130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 1ac9d01a3a48fbfe3f9ed7c60646f601586b1485f10cb90708f5ae5a87d022df
MD5 4032408503fa8aaa31b0af80427fd6dc
SHA1 1ee36682881ce337c25a65235ef1639c10539ee3
SHA512 ec880fd4e15e783b4ee10dfb7d639e045cc8a5a1712538550ff99cd90bc74fd87aa68d9256d74a43fb29db387cd415ccdfc671ed43de837121056310c653bf98
SSDEEP 768:giFWcpU3DwgQJHmxRSWHztJihkoFYS/EJk:gCU3eJHSMhkoaQ
TLSH
T1C6E2A1F5A8DB8976E8AE8B87A73D2D429DBCC053B5884994F7850D0CCC861BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 840317313efbb6a4f2892daa939cdc804bb0218ab6dd2e322eaee3cdc9c2d0ba
MD5 aa83da203f58dc1f65897c6e067fe514
SHA1 c3b7588e45e344f66470fda7229e8033a3e10fc2
SHA512 65654447a644fb82909aab29ea1feb67a52faac2f0c7ef4ac4d579c833219df5f5f93138c1703ff1078119d0e29e126fd49b892c26ed0f9aa6f25ff0a690f2d3
SSDEEP 384:nYdiF/CcmyWCc3sNHP8TUNTUlI4uKJATJvuxO81XVM7UVTIsq4fqz86xr5QhkP+V:TF6cpc3GwgQJsmxRFMztrihkoFYS/EJk
TLSH
T159C25C36E898D9A7ECE78FC9F74A7547EEE00163858849D4CAD90E1D00D71DE174BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 53aa0df8c5a13b918a3ba5cca512fecbafe5806d9e4f722604b3c5c1a57b2a93
MD5 9356880ee633586091fcd1c2226315f2
SHA1 897b36c23765796e279a848e41c4524a6303393f
SHA512 b2cb63f7ee86164b675b2e75fba64022d71149ce92a51c64979146d0c1fa8e98616b4edc18c07963dc6e76d457900c40620e0975e5cbfb3ba38045aee01ed576
SSDEEP 384:nwdiF9CcmyWCJh3sNDP8TUNTUlI4CKJATJvuxO81XbM7UVTIsq4fqz86xr5QhkPi:rFccpn3mwgkJsmxRfMztrihkoFYS/EJk
TLSH
T1F9C26C36E898D9A7ECE78FC9F74A7547EEE00163858849D8CAD90E1D00D71DE134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e81bf6b78c1f9100b4807d531226706da336e720e2f666d99a6b81d4cf45a537
MD5 47af2f51135d2dbc9f19fcb9d1d66350
SHA1 590fe17c342473311d50bb4aeace5e5cbd8ea318
SHA512 832853a1194a5fda144dc98707ec0f9eefe7f6e0f8a1623f50d74286ca91ae3db7617a2166f82336fe01f78da4f22429a4da2f6e471a93a3406d6afec71a2d8d
TLSH
T1BFE00102270041BFD07847B044971B206AE3803002B206050A2001681D222412E30FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d1f425b13fd15ab9d4e57e83577cc687700d0c416058a2c93311d8db79f5daa1
MD5 bf030eb3744d7b815268d3abd4a05a2f
SHA1 75fbe083ee5548d8952af3d9969bf99d6fcd3c69
SHA512 1962ffa462aef24be4e52a22e34b2d5f6a478b62e164c459cc0be0a39cb54ce9730ab03b9bd671b6d8c20244958f93eef9474a534ac0929de4a05427cf5a7754
TLSH
T116E00202270041AFC07847F044971B302AE3C03002A302050A2001681D313413F209C4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5994b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5994b4.TMP
Size 392B
SHA256 a29992fe7aa91c1a7fde951a28687e6b75270c933a4f6b630d9e8e17fca8354f
MD5 3ca157f0aaf21d20366f0f5560495d92
SHA1 00086d133b5a0a0043a6a3305c92961503518768
SHA512 33af582c390cc58bed5d92a41e9f6f433d093d273b8f56783d2bc1cd8c3a53340cd8bae322c383726f8f90dc2d6a9e90477ba3c9d00ec2b13b1de8727e41244d
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 1ae664c15a93aef512d0c2c7257ac7f222b42353faddf29432305d765bf2047a
MD5 3d5f98e9ad2e798cddde8dce0d395f3c
SHA1 a0f5f27e7c8488b808fc86d51c2243c787b57f1e
SHA512 54c4a1bbe67f9c0d0f359263c03388083d56c68b4f84f548ae0b90314482cd43309eac4351da6f6a529ec8b5a6d2baf1f3ec3b276e178929e52c783399638110
TLSH
T1374140E14C3D2AC1D4BD0E3E756738FC91DCC729F9A4347E2820DA84067A60E248443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 25a83eaa9e3056b15fc489f0665db5368cad1387d7d48cb6bd1bcaf9025b0728
MD5 e2d32a54b256a673362b08303ef015ec
SHA1 f65e4c526e4d7da4d47eba68e5259a0221de983f
SHA512 c191f51a70a241b40c3161383d8ce6057a68ed3ac03d99d91524e2f225c5b8fda5281fe8169b1a150b052af62d055f7d07d5d154f381225d2d066d48ee10d6d4
TLSH
T1E0412FE14C3D2AC1D4BD0E6E785B38FC95DCC729F9A4307D6864DA84067964E248443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 592c92883c2e0f836956dfc1a5b3256103a59d6eeb733162949434b2018b3ac4
MD5 8f1a247bb476ff74c065e078b8d72636
SHA1 545139e17d71be6bdd0e4a9afb05fb21761bb0a0
SHA512 cb44048977efebda0e9f761a2b0eed5dd04721784ecea253366c90fcfa5e0eae8383df7dd02e7ed067d6d572543ee50bfabb71fdd50a4a4f7fc988ce881f5a5e
TLSH
T1A8411EE14C3D2AC1D4BD0E6E689B38FC95E8C729F5A4747D6864DA98067960E248442F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 c36c1b21c9562373a88df3b377a0efc037964d0e9ff27aa5e36d32f067888600
MD5 a8af2c4c1059519577f3749ec7b4aa20
SHA1 1e19aad19e5e0392496fd92b2a27b1db6d70a89c
SHA512 f83307ff0c00bf3667247447334fb76388cc2a98201ef7a737563bece7cc9dd13007f7d15faafbaee89782781abe6ba5657cf1d42ab0be2f04f50973ed1194a2
TLSH
T136411ED14C3D66D1D8FD0E2DA45778FC91D8C729F5B474BE6824DA840639A0E604142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 7fdd4fc0d4c39da4dc8351ff2914c0fc85a9ae5137a87f6efa2a5f97ca58cc3f
MD5 53f9b3f03676052dde15767aeec4b4c7
SHA1 86653e76be4782b1e302adeb2a85c54566da6d61
SHA512 07e319e82ef0224658446c0f51e1a977f1d66e773edf84ee282c5c3850a14de4ac99f20099fd09ee21fd45bafa5ef5859d3f5dd2bdb70a480e754e954185e2af
TLSH
T1F941FCE14C3D2AD1D4FD0E2E64A738FD92D8C729F9A4747D6824DA84067964E244543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 2d54890a57d05415cd7c26b3e8250f18013390c7eedce93ae7281bb1609e3d5a
MD5 c595b50ce3cbfc43245b479bca946ebe
SHA1 629421b4887c283fe9b623c60e759d8b24d7d731
SHA512 f23603e2376e9e83f6bb84afa3c8a97f73c9b4f4623d9a02d699ca346a31dd5d8a854e30fe54a76284c5339adf024604d5f8b896e025c134b49a6ff371e116b6
TLSH
T1A2412FE14C3C2AC1D4BD0E3E749B38FC95E8C729F5A4707D2864DA94077964E258443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 93c20eb98d61902da044939606e687e39234985cda6d9a3aa8c6d6a0335c8516
MD5 148d45ac0500343365a26af9eb1073d8
SHA1 a108c6ed1be8c4de355fab28967bb644f7615292
SHA512 34b0c404f0f03cdbb3c5f6f9ed593990b43d4641ddfcfd07b4568f89239c984177338aba5d705a92d0a3832c958568f4f55cf8aa6f2e2cf9a3a97833c0f4cd9d
TLSH
T1C4413A5CA6F91148B3B77E1A6BF2A95D447F79732F07D49E00110D8F0A62A40C9B2737
MD5 SHA1 SHA512 TLSH

Submit Download

ContentI3.exe

Path C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
Size 3.8MB
SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
MD5 bf6eed6cdc17a0130189a33a55ef5209
SHA1 e337f5a0931f69c464f162385f1330b4d27b372f
SHA512 90d23fd84007343e85f9fc003cf826b112fd930216a24d8c1488468443ae2a4b0c3cc2426b91c81a8228e125050e922fce05672e010e65247709fc4a7b856f1d
SSDEEP 98304:QOlxyx1rYP44YaQqtGeIEAGoZXvFYfyCu:QOS7dqtGeIhGQXNYfRu
TLSH
T119166C02F6408039FAD201FAC3B64978EE789F141389A1D383D5B8F96B765D2783675B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file.txt

Path C:\Users\Admin\AppData\Local\file.txt
Size 58B
SHA256 078081446bdff06fe2a4e088d06e8dbd7af8dad903ab72ea6c05c87fae845a6f
MD5 c9bdf2b492f163d70da261fffc4c6de8
SHA1 6adc2438170167f36597a8728104b5494cc0673f
SHA512 1b4caa0db6bb2c54a96b788cde8870af8fcd318fe7e3316a33cfd5ba5ecefbea034a7a2f25e7eea9393a121c2c9237f74805d05373b403ca0a6dd51cf58ddc92
TLSH
T1B3A002655591549A8E06C65C3690584024524143056EE275CF208605470775371E7146
MD5 SHA1 SHA512 TLSH

Submit Download

Vega X Windows.txt

Path C:\Users\Admin\Downloads\Vega X Windows.txt
Size 981B
SHA256 0452f6f2e31339197904bc47b3094dd9defa77cf50e11733f09449a81a717256
MD5 c6b8f693be589f6765249afe4682c2ef
SHA1 0a9f279f3bf1c8b68f6dedd651dfc4b400d4554c
SHA512 1d3f03411d2316e04fbcbd1dfe82350239d90ab85c9987f49d29fd1d6b0f6230742a0b0808f33575f77bce435098c65117e31685952463314a11ca8587ac8324
TLSH
T15B11544F7237D15404C99191F43B9AD6FB174178A36095ADB8AE902C7328364E4E698F
MD5 SHA1 SHA512 TLSH

Submit Download

Vega X Windows_46828071.exe

Path C:\Users\Admin\Downloads\Vega X Windows_46828071.exe
Size 583KB
SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
MD5 7392e839c67ba537093c55353be265ba
SHA1 7c9bce283d6eb9b49dcdcc850e66e0148dc30d71
SHA512 07ccf85180c1d63cc03f9d0ff986d0c704f1ac7719e6f7bec56d32f397eb4400a623a19954914b1d391270ce0b08226ee48f92462c7ec2b6ee29500a36ca0617
SSDEEP 12288:w7yjhihTaVWs+OfaOp0XWgWasfMJo7WLrc7SrnTGf0TRz4hTB2eLsHjlsGk8y:yyjz99asfnyNrnTe0TShhLijlsGJy
TLSH
T132D49E123592C036C5B111B01929EFA690BEBD344F7245DBA7D41B2EDB346F26F31A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Vega X v3.0.zip

Path C:\Users\Admin\Downloads\Vega X v3.0.zip
Size 42.9MB
SHA256 992057e88c9e6bab5cfa15460ba7a8dfaedb56f25f32887820bdc38ec4e314bd
MD5 e6ee01480cf9daf82e34d03f840581d6
SHA1 dc1330733028c6c3151fb6f08d2b3c2c64d47238
SHA512 9accec551e191b23f9e23ce117ed01fb5687e7cbe038424e53ec59df0ff2b27e39a566c2a4014e0e4d8abe387673f96826a1a76b09c4a4014f276337ea6b4b29
SSDEEP 786432:4PTe86gkO5epGZ+xIiv8dkY5hocZylJNDjECrbE4/qeNepSH+0oVa5:4PTe86g9epZubtejEcv/oSe85
TLSH
T1CBA733A9A2F00653CF9F3137B7CBA5450D9D87D109A25D1225BC22C3ACC69D9378B26F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Vega X.exe

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\Vega X.exe
Size 7.2MB
SHA256 1acdda320ad99299ea5bf4b19365d7ef5ba9de0d8310c6fd0bf8675d9472b732
MD5 8217036f012362723ec05e0e8ee837ea
SHA1 6756f87a3c29e1909a1e71c0c294f46c8a31c816
SHA512 9a6f747d4966a86591f82586ba55b8694f0e10ec7d1a412702aa6fe926fe4c9eb75c8eb94d70f442b780e8a25e89e72d9164f3e4ac9ad0e483b76193c6c72615
SSDEEP 196608:6G2zS/1s5VlKYNRSWsQPQJvCvHm9EVi9RXUykSI:6GsEqV8QwxQjHmuiTEykS
TLSH
T12E76DF03E7129319D9561E3A4E97CBB47773BC412B12A306BB282BDAC48B1B80D5F7D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Vega X.exe.config

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\Vega X.exe.config
Size 189B
SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
MD5 9dbad5517b46f41dbb0d8780b20ab87e
SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
TLSH
T17CC080454054BD274D334B1357518539EFB073A36424140CF42FA7560F3114D4657377
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\index.js
Size 1KB
SHA256 59187b7dd261b62ab29db2cdf47836264c2642e5cbacfaee65baac75b3b5d9ee
MD5 f5ffbeaca7c8514998ed52050d3f3455
SHA1 0165439414c96f71fb3505c1f1c1fcbb1323efbc
SHA512 fafea80a27dba7cdee9bb599ea6ddca8ea8eaca2ec26b0cf60ddb928dafa86e0d1dadf004fb42627d7825d29442e5078a3b889af855f14e019ee111af4d70288
TLSH
T12C21ACE26DEA10654A78EABA5A027007F714D433E2509204FBBC96D52FF1D9994A0FE8
MD5 SHA1 SHA512 TLSH

Submit Download

reduce.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\async\reduce.js
Size 4KB
SHA256 f1e4594194164d2504946c85c8e983346b25f9be8239178defec27e912b56c21
MD5 724bb52915e1158b4dff6f26ef4baf72
SHA1 ad0aa6a0ac5576433051167524923e6aa794c96a
SHA512 657c3dec82c5c6c34accdbc9d96e2be59a592e60241960810f10a662f5305c21dcef8cf006fcdefb0d48d30ccdd30d9dd6c263c089a88591f18a83a2f390eaaa
SSDEEP 96:y6Kcr3mvLCw7I20odkC2z2yS4NBsBMV30scZ2OFbnkhdQ70M:y6KcOLfdkC2zpNBsBI3zo2skhK70M
TLSH
T11AA11E0A3DF6277A5466B134460F01C16314C05F11AEE14E308EABB57F82CA557DAFF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\body-parser\index.js
Size 2KB
SHA256 9c6c900e7e85fb599c62d9b9e4dfd2ea2f61d119dce5ed69ac3a8da828819241
MD5 b9e991c0e57c4d5adde68a2f4f063bc7
SHA1 0cb6b9eb7b310c37e5950bbcaf672943657c94b5
SHA512 3bbd31eed55c32435b01fe7356d39749e95f8f49222115ada841e751ad36227e6f427efdc4e8bad36d8ccd37c2e92c01fa67c24c23f52023df8c1e1be1a3b4f6
TLSH
T17E515349656C7523820B4ABC8C6FA092E5A98703112DD8B5B9E8D7F9BF1404C81DBEFC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\body-parser\package.json
Size 1KB
SHA256 039dbc6b0e8ccdefcc06d618aea4da08d3fca7489dcbed6404827be29d41314f
MD5 fdd15e03ca10273d11b7d5cac72a3726
SHA1 170d11520bacb15023b6d3ddc1086db02c17c40e
SHA512 6f68d8b588a630cc6092dd5bd6c743541f3386ce7f22dd500b71dd73d752621e977b4e3b8bf67653a74ad8cd7d9e654be5c162bd2180254572bb0895c4006cde
TLSH
T14731DF20C4C51CB322D4A5ED6C6921C22040444B4E82FD0DF765035C8F4D6EFA17AAFC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\depd\index.js
Size 10KB
SHA256 4d587a5662e20a7bb9bfe6555afe5987e1b80303a819b447394f37a93297ee91
MD5 002a1f3e813cc05d9e3cc011f6601628
SHA1 1690c27457637ec234d6b7658f1b96e547a0eb99
SHA512 ea1ad9bcf09a73a10dd1fd8a66daac12f87725e16ad27e7beff6d9fda937579976cd5d7ed6439c4122b16178c3ffdf410d6c7a54918f94bc98fa7950adf3bd54
SSDEEP 192:vpe1221Fdc5jXmXUApvcvcBGtXY/KQYbUY/rRgrNoYo8GVHXWVhVO:vpe191Lc5G0k//YsNIVHXWVhVO
TLSH
T133327555AEE071011693B175728FF35176E8D50B013C9BA2F5DCC3A13F4C8A982ABEE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\depd\package.json
Size 1KB
SHA256 5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99
MD5 7f0a9d228c79f0ee4b89fc6117f1c687
SHA1 3c10082c1464a6f589aa10cda88285e780ebf857
SHA512 7bdd7259bcb8d79aa41777f03d3a3f8a29b60c2d25104072edba9febeb813e12ef78d31573637702decddbaa97d8fec263bc413bd27dd660ded17d644458cbc2
TLSH
T13B21FD20D4680CA35AC8499478A89AC1359105474E52BC0DF72E135D8F8E5BFE0FEABC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\express\index.js
Size 224B
SHA256 4d2f5afc192178c5b0dc418d2da5826d52a8b6998771b011aede7fdba9118140
MD5 866e37a4d9fb8799d5415d32ac413465
SHA1 3f41478fdab31acabab8fa1d26126483a141ffb6
SHA512 766d2e202dd5e520ac227e28e3c359cca183605c52b4e4c95c69825c929356cea772723a9af491a3662d3c26f7209e89cc3a7af76f75165c104492dc6728accc
TLSH
T1C1D0A7CF2D1C751A9250CBD3E404C58EC14590B41B57F473A27842E0980044810C1D59
MD5 SHA1 SHA512 TLSH

Submit Download

application.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\express\lib\application.js
Size 14KB
SHA256 5901b32f609ba349351bf7406dbdc0c4c57b77ce6f7215ea67ccca5ac2a28e88
MD5 15cf9c2f48c7ba6583c59d28908e3e27
SHA1 19c7718f6a3d0f9dcd4ca692c19718ec29aae092
SHA512 c063277a59b83dffc085116769475ec5cce1c47c167b9bd2246e8bda04f0ebc2773b5f06e3b44fc5ed057e043f6d33e77741f34d15e22542134e3865574a29be
SSDEEP 384:uJPZeLhzIZrg8ZanN45ysF9qug+2O/e8JH+nBGMiksrf:DL2Zrg8ZanN45ysF9qug+ZQ2
TLSH
T1F562B76835E9311104AB63FDC65F5381622AC01B222FF5AC799DE2E81F948B44725FF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

express.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\express\lib\express.js
Size 2KB
SHA256 2f25585c03c3050779c8f5f00597f8653f4fb8a97448ef8ef8cb21e65ba4d15d
MD5 d467bc485eddf6d38278bc6b1dc16389
SHA1 e233882de62eb095b3cae0b2956e8776e6af3d6a
SHA512 2add66b4f2e8ce463449ca8f2eac19363844b6ab159a41b42163028c57f07a4245ebefe759a6f90e8685b5bd239c969fe99366eff89378cb8b92b8a703dacd61
TLSH
T1954165D7B58472A947737AFD462EE0816CA682E920DAF47784EC83F82DC400D86E5D95
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\express\package.json
Size 2KB
SHA256 2cd424f19ed994070c827b5448a3bc5fbee955bbbe81aff28204d8c5a5a89ebb
MD5 6b157f15e22e6ad2de88252cb9750c15
SHA1 cb2b42eac53dcd670f3b5e556c9365c33b13fa6c
SHA512 0c48e555b22b74e7beb84306cb5bede961b8a4f20c9096d7f7f10d71b403af02fabea611b5a7fd24852fdf6f5a7bc24a4cf459da3eaf1391a95807ca5bb99508
TLSH
T10D51FD30D9590D7316C1A6A9387C55427258840B9F41B95CF319131CCF8EAEF71BABBE
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\finalhandler\index.js
Size 6KB
SHA256 96900b458b12085ea16f228151439d9a7bae6b5d45248e355ad617f4dc213540
MD5 d50e9637775204f194d629000189f69c
SHA1 50d1a1725cb273b0a8e30433dabc43d65f55169b
SHA512 563a8375e3ab7936162a9d209800f8b41c416c1500fe24de817871c3e5489e8faf5a4dcb7fb239f697a8736432356e60ecf1578d0aafc0de80d6e0ae90c34aad
SSDEEP 192:vMlJv4mtdenb3bGxSEhkhcC76QM6clzM8ilkv958nu4dEljyIYo4:vMom56hnw8
TLSH
T16DD1538439C770090F539071E08BBE267C998423632FAA81F4AD676A6FC44F8C795ED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\finalhandler\package.json
Size 1KB
SHA256 243d853d4386c4132508ae9a99e5176b25be7f5cb6967bc1bab241f20e937e72
MD5 3d09ac571e0b6eaf8fdb9806118b6d30
SHA1 eb758bb6a7d3e4f32f0fa2f941265678539e74f1
SHA512 0207cf364e3eac974cae61ec68fe3975fd1f1eb6150f51293ce67f62dbb0f27a3d9c193101ef282dcd099fc653ca73cd3c875c18e5e266964038e3334697b5b4
TLSH
T1DE219820C4891DA3A2D895EE681921C3305149439E42BD0CF779131C8F4F6EF70BAAFE
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\has-flag\license
Size 1KB
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
TLSH
T1EC11931D7254136318BA13A069696CC4B32BB11F79AF6B8418AEF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

.nycrc

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\has-property-descriptors\.nycrc
Size 139B
SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
MD5 d0104f79f0b4f03bbcd3b287fa04cf8c
SHA1 54f9d7adf8943cb07f821435bb269eb4ba40ccc2
SHA512 daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6
TLSH
T170C09B65E43F596B255D119CBD4CD5C7155415E1C1CD8F097D156661C31DB64004F541
MD5 SHA1 SHA512 TLSH

Submit Download

.nycrc

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\hasown\.nycrc
Size 216B
SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
MD5 c2ab942102236f987048d0d84d73d960
SHA1 95462172699187ac02eaec6074024b26e6d71cff
SHA512 e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479
TLSH
T12ED0A710F03A051561DD629C7D4DB057051404A2818A8625AC712260CB78A10104B941
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\merge-descriptors\index.js
Size 1KB
SHA256 88564234b9eeb2f0fe2cc5d03f617a97eb4802f126bdd21aa223c3c87c02531c
MD5 b4d3859e603602c87a45682862055af0
SHA1 e95cb1c14d70be457eba2ce61b2f4e90a13b21b1
SHA512 b17bb8c8b652f27d8037ed60f28b0d19a68e77bcc45d1e2be7dd304c942f6e85570e9720011f983fb8783d670eb66c0c3174d5fd90690b2aa79c2b402adcd00a
TLSH
T1F2211045BDD8F06206D285F4B86DF507F648C1AB2239FAD1B3D58BE41E401A149E0CE6
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\merge-descriptors\package.json
Size 931B
SHA256 45ebe570483c48b6460767fc4a0bb69e4dee4bf4becc645b0e0627172a30a580
MD5 570e06d8ce0167e07a32ba70fdd56795
SHA1 39dc652dfa419d46d6fed0835444c603c57077f8
SHA512 9c8ddf41b3207016935affce00108d87f176a9e473a01f03f1110456397c88ee2fbaf34f9e497e6cbff2b65c4f4c7f254a5129b4c1eaa2b85fbebffb8fe43777
TLSH
T1B2119065DC65AC2319C45170BC76D4423585484F4E287E2FBB4E021C4F4D57BE4B766C
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\node_modules\vary\LICENSE
Size 1KB
SHA256 bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400
MD5 13babc4f212ce635d68da544339c962b
SHA1 4881ad2ec8eb2470a7049421047c6d076f48f1de
SHA512 40e30174433408e0e2ed46d24373b12def47f545d9183b7bce28d4ddd8c8bb528075c7f20e118f37661db9f1bba358999d81a14425eb3e0a4a20865dfcb53182
TLSH
T14511630E7251437318961370557A6C85B26B729FBEAF2A84646EF384233B46CA4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\files\package.json
Size 74B
SHA256 da2d8deb94c0feb9d9361328547ea759a321b327603c9ed979a380e101e07ab5
MD5 8dc3623ffc6ec2d5466b2e1cb71db8a6
SHA1 73a92128597c915b346762d6c513937154cd2990
SHA512 7175780a814493e0e2a18cdb0c544b7e53129ed6c6cecd68f32a279458e4302bd3851895f6d9d53d06062094855a1137b4aa114a62f63671b0e0f5c732890269
TLSH
T1BEA02410C400DD1340C775C00C3C04C704D1F403444CCC7451C4015C470401F05FC0CC
MD5 SHA1 SHA512 TLSH

Submit Download

text.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\text.js
Size 15KB
SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
MD5 ed6ed7ab5bd5bcb2a254821e233cdd8c
SHA1 59dc6ff551a34f3d4cceb0c88231a386e82d9922
SHA512 2148714b1ab87965f0a71c03aa0a60789c1d9dada5b4ba005b186081b8d191f196a3043964c21e0a33eb45262cc11071d4b658753a42fe91f1fcbee2507fd1c8
SSDEEP 192:4uyCa20qNgG/kFBEKT4BlvFuTMS8Z4wZQZotVNZl8b2vKO9XuLYRfTAkCwtU1kIj:4ng4LYVNn8b8K+eLWD7GxuzDdVW
TLSH
T15162B3BC008846963D2DE0D4AF64EAD6299D4B4A240CD3365F9BFC3772CA4F4ED994E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\text.js
Size 14KB
SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
MD5 b25fe69acc9d8eb982b37d758746e913
SHA1 782e46467828dfe227704d09830298ae86e52127
SHA512 99c93da8c70a5ff47a237e0422aba91209680b1413cdecf6339616d12d2d69e1796527596e8859bf505451fc47b6a00302e8a50e1cd0d806da23b5608e82abd4
SSDEEP 96:49tOjllm4Uh4zutkZyhRA4JUraRFsw7ZpqsFRatj9Fnkz+jmS0WVJK4m1io++Qdm:4bzTgMU4GgawCZleT038n
TLSH
T11252BF708521BE6674B2001B9D541B1FF0A8954BE962EF37979CF19EB345231CAC36F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@npmcli\map-workspaces\LICENSE.md
Size 818B
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74
TLSH
T14301128A62E62A9055D19F956DA2B89E61CCF0673903681430B4E24CDA7704AC07E414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@npmcli\metavuln-calculator\LICENSE
Size 754B
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16
TLSH
T1DC01208FB2E52AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBB780F98AB404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@sigstore\sign\LICENSE
Size 11KB
SHA256 7b0ce3425a26fdba501cb13508af096ade77e4036dd2bd8849031ddecf64f7c9
MD5 dfc1b916d4555a69859202f8bd8ad40c
SHA1 fc22b6ee39814d22e77fe6386c883a58ecac6465
SHA512 1fbe6bb1f60c8932e4dcb927fc8c8131b9c73afd824ecbabc2045e7af07b35a4155a0f8ad3103bf25f192b6d59282bfc927aead3cb7aaeb954e1b6dbd68369fa
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8cHfH2:kOu9b01DY/rGBt+dc+aclkT8cH+
TLSH
T1B932722BBA4903771AF20162AB4764CEF31EA03F37591525315CC1682F7B96183FB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fetch.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\@sigstore\sign\dist\types\fetch.js
Size 79B
SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
MD5 24563705cc4bb54fccd88e52bc96c711
SHA1 871fa42907b821246de04785a532297500372fc7
SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
TLSH
T1C4A01201A934C5F1038000C44525E0C1A0C10432006528A55BA84D65440088C5050001
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\ansi-styles\license
Size 1KB
SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
MD5 b862aeb7e1d01452e0f07403591e5a55
SHA1 b8765be74fea9525d978661759be8c11bab5e60e
SHA512 885369fe9b8cb0af1107ee92b52c6a353da7cf75bc86abb622e2b637c81e9c5ffe36b0ac74e11cfb66a7a126b606fe7a27e91f3f4338954c847ed2280af76a5f
TLSH
T1A821961E72551363186613E069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\clean-stack\license
Size 1KB
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3
TLSH
T18521961D72551363186613A069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\cross-spawn\node_modules\which\LICENSE
Size 780B
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38
TLSH
T1D501418FB2A12A8414D09B643DA1EC8971C9F03B3C43AA153074E258C7BB80F947A400
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE-MIT.txt

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\emoji-regex\LICENSE-MIT.txt
Size 1KB
SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
MD5 e0be9e751faf84fbb7c61c63af745e32
SHA1 48e53e2b46d48cc6ea16f03ab1ecb69a86f5db0b
SHA512 6686277ceafd63dc89b17315c43134098cd131d16c7d42fad82cee5b7c78e4aa1f7cb199db352b9e54adb3f09dc77b1dc6665a5667c4ab8b3639fa254e20ecce
TLSH
T1D211895FB261137B1C66139069A4AC85B36B715BBDFF2384345DF244231A468D9F7C04
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\gauge\node_modules\ansi-regex\index.js
Size 360B
SHA256 4c603af42ee01f6fa43775a6162f6dbbcca897bc2912d19db2974992190363cf
MD5 a20c210b6e40f32c74581046a72637fa
SHA1 ff290036409fd67472b634e36afca346db5c2ffc
SHA512 0cd4fbdf682b6e3e735ee390c463ffa9aa5dd22d38ab312a0731676e95bac37dab9f0d638d8f9c1ab6cdafd15f04ea2864c8702e82f18ca70f86dbb03549ce4d
TLSH
T1D5E068094842155EC8C1328A2D714C748749BF242DA28216C634FE0E5D0A04F23EC62E
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\gauge\node_modules\ansi-regex\package.json
Size 896B
SHA256 a1b5721b315f84a5e2e28f3209eb92831537eb778e9e978502696e6235d71644
MD5 f7fb47cf242d265b2497e3a6ac213617
SHA1 1a09448abf0524c9342c5723b60ba3810af10326
SHA512 6118a9b8efa277e46c065a097a4c9f18623ebee5cd6c170015bc40a222e2ffd2e6e72ce2c3c259a79698901a5f04b4b6b1980541e136ac1ecfb08f23513cd2a7
TLSH
T1F511BD3BF9E2B0EB19CC96C43076C1A21C2C005FE28CCF2E7E9A2D2CC1D44A5215BA50
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\gauge\node_modules\strip-ansi\index.js
Size 158B
SHA256 ee7638c432f16042a7c64c40b4bf326e44b7d6d9b7add19806637240c246a6a6
MD5 3f03b6fe5c918ae1b49ed36f4581762f
SHA1 1dc3afa3b08728017bdff8105d7424fc8951902f
SHA512 b271511f7fd29719d06dbd162ac5259355c682675316aa4c8c513f30f8c390974948a4c02f383a43757c66c2247047f80dc88c2ebf261d9b3dfe0138f1a3c7d7
TLSH
T1DFC08C562075A5472C1340C4F0E859401583C4B03AB8A2F1FECB15A6609947E0670A6A
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\gauge\node_modules\strip-ansi\package.json
Size 852B
SHA256 dec16b172e99984a3c913a9ec30d854da58467ae1fbde1b43a1d8f9562b80ed8
MD5 d59bf9acae68d3368565b2c4302d1c82
SHA1 dc8dd3a6928631b912f6dbb9471b43e9a15117ae
SHA512 b74620e60f75f889654c57c5a8c3a1a69d003523f78a539085ab521c599e905c0038e958533d6a38643d6ecee3dfed97190e595f1309d775fd41e29487162a5f
TLSH
T15D014537B9E230AB09DC92C064B2C5A21C38005FE108CE7E3ED52D38D1D45A620ABB10
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\libnpmpack\LICENSE
Size 730B
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013
TLSH
T1C001D08FA2D12AD454D59F643DA1BD4861C9F17B7D43AB043074E358DB7744F986A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\libnpmversion\LICENSE
Size 763B
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce
TLSH
T14701F18FB2A16A9454D19B653DA1ED8961CDF0373D43AA143075E258C77780FA46A404
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minimatch\dist\cjs\package.json
Size 28B
SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
MD5 56368b3e2b84dac2c9ed38b5c4329ec2
SHA1 f67c4acef5973c256c47998b20b5165ab7629ed4
SHA512 d662bff3885118e607079fcbeedb27368589bc0ee89f90b9281723fa08bda65e5a08d9640da188773193c0076ec0a5c92624673a6a961490be163e2553d6f482
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minimatch\dist\mjs\package.json
Size 26B
SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
MD5 2324363c71f28a5b7e946a38dc2d9293
SHA1 7eda542849fb3a4a7b4ba8a7745887adcade1673
SHA512 7437cf8f337d2562a4046246fbfcc5e9949f475a1435e94efbc4b6a55880050077d72692cbc3413e0ccd8f36adf9956a6cc633a2adc85fbff6c4aa2b8edac677
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minipass-json-stream\node_modules\minipass\LICENSE
Size 802B
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764
TLSH
T15F01128FB295269419D09B943DA1AC8961C9F0773D43AE153074E248C7AB40EA47A404
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minipass-json-stream\node_modules\minipass\index.js
Size 16KB
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3
SSDEEP 384:PjFrIA8zJ08TEcGpIuqbI0WXsJY+cHK+34x2WkFUasBq7BmDWC:PjFrIKf8JKjV0DJ
TLSH
T196722F552B9E61229373B77ADD47900FE722141B393F5014B8AC46D02FB99B48B38EF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minipass-json-stream\node_modules\minipass\package.json
Size 1KB
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a
TLSH
T1AB217927DD589D7715B52760A8781603F2635B2F20348C0B75F6012E9FB392B0099BAC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minipass\dist\commonjs\package.json
Size 19B
SHA256 fa6944a20ca5e6fbaf98fd202eb8c7004d5b4ab786e36b9ed02ee31dbe196c9f
MD5 95b08bc3062cdc4b0334fa9be037e557
SHA1 a6e024bc66f013d9565542250aef50091391801d
SHA512 65c66458abe2101032cdd1b50ca6e643e0c368d09dfa6cc7006b33ed815e106bb20f9aff118181807e7df9f5d4d8d9796709b1ec9a7e04544231636fdf8fdf42
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\minipass\dist\esm\package.json
Size 17B
SHA256 6dc1b06d6b093e9cccb20bee06a93836eee0420ae26803ca2ce4065d82f070d1
MD5 6138da8f9bd4f861c6157689d96b6d64
SHA1 ee2833a41c28830d75b2f3327075286c915ed0dd
SHA512 0a3f1cb1522c6e7595186a9a54ed073ffa590b26c7d31b0877f19c925f847037e9f972066bfed62609b190eb2bc21ff7b31514e08c3de64780fef5982cbb21f2
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\npm-audit-report\LICENSE
Size 771B
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b
TLSH
T15F01259A62E56DF46DD19F806DF1B98D70CCF076BC47A91530A8E258C7B704F88AE414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\read-package-json-fast\LICENSE
Size 771B
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778
TLSH
T14801F18FB2D52A9454D19B653DA1EC8961C9F0773D43AA0530B4E248C7AB40F95BA404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\tuf-js\LICENSE
Size 1KB
SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
MD5 dfee32877d06166fae6096f9359e68aa
SHA1 28a83f15648b5088399a0dd3aac207d192bba5f0
SHA512 ed9b0514e9f8a2204d6900f5b5a6065272b91d70b076c91ec8e101a3288c83f19b139210da6de526e269fc85469708478dfec8664e9c3131408af3818ef128cc
TLSH
T1A711631E735903621C9257A055A9ECC5F12BB14A7E6B1985346DF209132A458C6FF8A4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\commservice\node\node_modules\npm\node_modules\wide-align\LICENSE
Size 766B
SHA256 1b94c9898885c681c1e0ebbf96494e49662842f88ac1e4dd8ffad0ac047108ae
MD5 9ea8c9dc7d5714c61dfdaedcc774fb69
SHA1 5ea7b44b36946359b3200e48de240fe957ee70f1
SHA512 0401c416464818fcaadd6e156ce92c28448e990765ddb7d0097b0c30ea9c8a5d862a53a94fd4a0adb502db1e3abe445c08f18e6fcccbb9f70fcbab273a938e60
TLSH
T10901258FB1912AD454E1ABA43DA1AD4861CDF03B7D43AB043479F34CDB7B44FD869904
MD5 SHA1 SHA512 TLSH

Submit Download

highlighter.xshd

Path C:\Users\Admin\Downloads\Vega X v3.0\Vega X Dev Mode\bin\highlighter.xshd
Size 2KB
SHA256 3cc2a95bace48ff65e3f52a32a103d470664ef08a889ccc6800f1ad6313cd5bb
MD5 d22ed55ff32e348f759d316a258f9313
SHA1 7bbf8c0e31762a43120f3c51460f97437abddf94
SHA512 3daaec64ed31e3d0009d731f0eb124df3fb753de8c45c6610dc57578898f687c6e6d594986a2049302c222db4177fa2f31d5d21d51f1a2bba9552d54816fee62
TLSH
T1AB512018E5CE890F07F5021EE926B88BFFA185DB110111087DAD425FBF3695780CB62B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3344-681-0x0000000007F50000-0x000000000838C000-memory.dmp

Download

memory/3344-1421-0x0000000007F50000-0x000000000838C000-memory.dmp

Download

memory/6400-7717-0x0000000006520000-0x000000000653E000-memory.dmp

Download

memory/6400-7715-0x00000000057B0000-0x0000000005826000-memory.dmp

Download

memory/6400-7709-0x0000000009E10000-0x0000000009E48000-memory.dmp

Download

memory/6400-7708-0x0000000009DC0000-0x0000000009DC8000-memory.dmp

Download

memory/6400-7713-0x0000000005700000-0x0000000005710000-memory.dmp

Download

memory/6400-7706-0x0000000009580000-0x000000000961E000-memory.dmp

Download

memory/6400-7705-0x0000000008A80000-0x0000000008B3A000-memory.dmp

Download

memory/6400-7704-0x00000000079C0000-0x00000000082EC000-memory.dmp

Download

memory/6400-7703-0x0000000000360000-0x0000000000AA0000-memory.dmp

Download

memory/6400-7721-0x0000000007650000-0x00000000076E2000-memory.dmp

Download

memory/6400-7716-0x0000000005930000-0x0000000005952000-memory.dmp

Download

memory/6400-7710-0x0000000009DD0000-0x0000000009DDE000-memory.dmp

Download

memory/6400-7714-0x0000000005640000-0x00000000056F2000-memory.dmp

Download

memory/6400-7718-0x0000000006B00000-0x0000000006C86000-memory.dmp

Download

memory/6400-7719-0x00000000083E0000-0x00000000084B3000-memory.dmp

Download

memory/6400-7761-0x00000000083E0000-0x00000000084B3000-memory.dmp

Download

memory/6400-7720-0x00000000107C0000-0x0000000010D64000-memory.dmp

Download

memory/6400-7778-0x00000000083E0000-0x00000000084B3000-memory.dmp

Download

memory/6400-7779-0x0000000007830000-0x000000000788E000-memory.dmp

Download

memory/6400-7789-0x00000000083E0000-0x00000000084B3000-memory.dmp

Download

memory/6400-7790-0x0000000007830000-0x000000000788E000-memory.dmp

Download