Overview

overview

6

Static

static

5

zen.installer.exe

windows10-2004-x64

5

zen.installer.exe

windows11-ltsc_2024-x64

6

out.exe

windows10-2004-x64

out.exe

windows11-ltsc_2024-x64

Analysis

  • max time kernel
    71s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 22:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    zen.installer.exe
  • Size 90.2MB
  • Sample260705-17d8lsby3j
  • SHA256 3b0056c395e6da3f80e245e43f37fc9fc97e333570580585ea0285a10f7bc219
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywaretrojanupx

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 25 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks whether UAC is enabled 1 TTPs 3 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 31 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Control Panel 3 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 1 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 24 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 19 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\zen.installer.exe
    "C:\Users\Admin\AppData\Local\Temp\zen.installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5760
    • C:\Users\Admin\AppData\Local\Temp\7zS086217D8\setup.exe
      .\setup.exe
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:4196
      • C:\Windows\system32\regsvr32.exe
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Zen Browser\AccessibleMarshal.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:1216
      • C:\Program Files\Zen Browser\maintenanceservice_installer.exe
        "C:\Program Files\Zen Browser\maintenanceservice_installer.exe"
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3608
        • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe
          "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe" install
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:3512
      • C:\Program Files\Zen Browser\default-browser-agent.exe
        "C:\Program Files\Zen Browser\default-browser-agent.exe" register-task F0DC299D809B9700
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1512
        • C:\Program Files\Zen Browser\zen.exe
          "C:\Program Files\Zen Browser\zen.exe" --backgroundtask defaultagent register-task F0DC299D809B9700
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:2600
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" --backgroundtask defaultagent register-task F0DC299D809B9700
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Checks whether UAC is enabled
            • Checks processor information in registry
            • Modifies Control Panel
            PID:1968
      • C:\Program Files\Zen Browser\zen.exe
        "C:\Program Files\Zen Browser\zen.exe" --backgroundtask install
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:2968
        • C:\Program Files\Zen Browser\zen.exe
          "C:\Program Files\Zen Browser\zen.exe" --backgroundtask install
          4⤵
          • Checks system information in the registry
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks whether UAC is enabled
          • Checks processor information in registry
          • Modifies Control Panel
          PID:3284
      • C:\Program Files\Zen Browser\zen.exe
        "C:\Program Files\Zen Browser\zen.exe" -first-startup
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:1908
        • C:\Program Files\Zen Browser\zen.exe
          "C:\Program Files\Zen Browser\zen.exe" -first-startup
          4⤵
          • Adds Run key to start application
          • Checks system information in the registry
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • Checks processor information in registry
          • Modifies Control Panel
          • Modifies data under HKEY_USERS
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:2096
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -parentBuildID 20260702090218 -prefsHandle 2624:26847 -prefMapHandle 2628:300447 -ipcHandle 2660 -initialChannelId {b6adaa64-12f7-4a62-8d89-ecb5d27b9f79} -parentPid 2096 -appDir "C:\Program Files\Zen Browser\browser" - 1 gpu
            5⤵
            • Executes dropped EXE
            PID:4140
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -parentBuildID 20260702090218 -prefsHandle 2880:26847 -prefMapHandle 2864:300447 -ipcHandle 2904 -initialChannelId {58e2d763-d9a2-4997-8967-fbcf31c74bb0} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 2 socket
            5⤵
            • Executes dropped EXE
            PID:5852
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 2160:26878 -prefMapHandle 2164:300447 -jsInitHandle 3540:156120 -parentBuildID 20260702090218 -ipcHandle 2084 -initialChannelId {ab6fd524-ed31-4d83-a8e4-ed2b3ef5ce0c} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 3 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:1100
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -parentBuildID 20260702090218 -prefsHandle 2208:27554 -prefMapHandle 3584:300447 -ipcHandle 3664 -initialChannelId {36a8a699-b21c-4661-b031-a0e3bffb0bab} -parentPid 2096 -appDir "C:\Program Files\Zen Browser\browser" - 4 rdd
            5⤵
            • Executes dropped EXE
            PID:1980
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 4012:27849 -prefMapHandle 4016:300447 -jsInitHandle 4020:156120 -parentBuildID 20260702090218 -ipcHandle 3600 -initialChannelId {b2070e1b-24cd-4ebe-b43b-de361bb31ba2} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 5 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:2712
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 3564:27908 -prefMapHandle 1664:300447 -jsInitHandle 3528:156120 -parentBuildID 20260702090218 -ipcHandle 2080 -initialChannelId {82a4d6c8-07af-40e3-8158-b1f7d13dc1c4} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 6 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:3576
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 2100:27908 -prefMapHandle 4644:300447 -jsInitHandle 4648:156120 -parentBuildID 20260702090218 -ipcHandle 4716 -initialChannelId {09b4b3b1-f5f4-442d-be4a-c0ac955217f6} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 7 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:1528
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 4740:27908 -prefMapHandle 4724:300447 -jsInitHandle 4836:156120 -parentBuildID 20260702090218 -ipcHandle 4912 -initialChannelId {dbb1df23-4b5e-49ab-9982-59a73b9ab455} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 8 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:1264
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 5600:30924 -prefMapHandle 5604:300447 -jsInitHandle 5608:156120 -parentBuildID 20260702090218 -ipcHandle 5072 -initialChannelId {a4a3eab3-a23f-45f0-870e-ea0406464f14} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 9 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:5712
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -parentBuildID 20260702090218 -sandboxingKind 0 -prefsHandle 5944:44295 -prefMapHandle 6264:300447 -ipcHandle 6284 -initialChannelId {6226e674-39aa-4a42-b17a-fb9a3a1a12cd} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 10 utility
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:3436
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 6588:42561 -prefMapHandle 5968:300447 -jsInitHandle 4624:156120 -parentBuildID 20260702090218 -ipcHandle 4844 -initialChannelId {31b4b5f3-5901-4175-bab2-d2bf1d07abd7} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 11 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:7232
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 5956:42561 -prefMapHandle 5960:300447 -jsInitHandle 3548:156120 -parentBuildID 20260702090218 -ipcHandle 5736 -initialChannelId {e890d89d-037e-4b6a-a84d-873874669562} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 12 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:4500
          • C:\Program Files\Zen Browser\zen.exe
            "C:\Program Files\Zen Browser\zen.exe" -contentproc -isForBrowser -prefsHandle 5828:42561 -prefMapHandle 3036:300447 -jsInitHandle 3136:156120 -parentBuildID 20260702090218 -ipcHandle 5728 -initialChannelId {4b531d0e-f5aa-4b0b-aaed-294963b29c68} -parentPid 2096 -win32kLockedDown -appDir "C:\Program Files\Zen Browser\browser" - 13 tab
            5⤵
            • Executes dropped EXE
            • Checks processor information in registry
            PID:1140
  • C:\Program Files\Zen Browser\zen.exe
    "C:\Program Files\Zen Browser\zen.exe" -os-autostart
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:7564
    • C:\Program Files\Zen Browser\zen.exe
      "C:\Program Files\Zen Browser\zen.exe" -os-autostart
      2⤵
      • Executes dropped EXE
      • Checks processor information in registry
      PID:7580
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:4184
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:6604
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:7116
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:7128

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        shortcuts_log.ini
        • Path C:\Program Files\Zen Browser\uninstall\shortcuts_log.ini
        • Size 198B
        • SHA256 5fbda59442223c5d2fc4779c116f314fc4ee448ab786e102f570aa5de4336cbc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Zen Private Browsing.lnk
        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zen Private Browsing.lnk
        • Size 1KB
        • SHA256 eafb094c1b7cbebc1e0d61e688081fd057152dc76cd68998ed30c01cc2e76c23
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Zen Private Browsing.lnk
        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zen Private Browsing.lnk
        • Size 1KB
        • SHA256 b538dad57fb29cffb5937eb2a07313329ed4d5f4afe2dd368b0ef879814e9d76
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Zen.lnk
        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zen.lnk
        • Size 922B
        • SHA256 c0f79f3ef7ba3c7bc9c22cc9ea6a453d2d59e80cc6f30e447ce2f251345bab82
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ~en.tmp
        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\~en.tmp
        • Size 1020B
        • SHA256 8aac7a70165be4f87bd29a305de58e58e55600baa6621fa65b92941d91d1d32a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        update-config.json
        • Path C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\F0DC299D809B9700\update-config.json
        • Size 78B
        • SHA256 3f7b3252ef3b6217ad78adb7007738601ce1eebca69f55990b64bf254bd4fc63
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 595B
        • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AccessibleMarshal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\AccessibleMarshal.dll
        • Size 30KB
        • SHA256 121d214ac9edab1b0a1576d3a5378b792a0e907ed249602999980e3b8f7524dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CoreMessagingXP.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\CoreMessagingXP.dll
        • Size 1018KB
        • SHA256 00d82aa7714f919ed2e5065f3ef6a69b15e1e1045c1efd06a129d712a46a4d4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallationDirLayout.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\InstallationDirLayout.dll
        • Size 19KB
        • SHA256 2dfd02283bbf8516b1a04f9b6d6bfafa2f42a37d29f745c767ab0afcae2e9613
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.InputStateManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.InputStateManager.dll
        • Size 438KB
        • SHA256 a08f280bab63b9c39ce453d7748aee8a430f5e321a1950d49b74661a713c606a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Internal.FrameworkUdk.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.Internal.FrameworkUdk.dll
        • Size 998KB
        • SHA256 b587ad20a4a74aead6aa2fedcea9ebd875be8de55dc8bf944d45da71664fd65a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Composition.OSSupport.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.UI.Composition.OSSupport.dll
        • Size 66KB
        • SHA256 139fff68254ecfab1143957b9abad102a8c4edcadd1325cb1296f1facda2a1e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Input.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.UI.Input.dll
        • Size 1.6MB
        • SHA256 4d3f81b9b14db075c77be4b37ea3659aff0869ee949f7c312018fad1ab7d817a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Windowing.Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.UI.Windowing.Core.dll
        • Size 530KB
        • SHA256 230fa9253c78bc06fba0acb6c3dac1c12860fd6dcb2c339777b9d64ad8fec2ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Windowing.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\Microsoft.UI.Windowing.dll
        • Size 538KB
        • SHA256 47442c240eec887fa80f1fc759db1c11633d44e11af18c8e32746cc7157a66c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        application.ini
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\application.ini
        • Size 636B
        • SHA256 ae6c007aeb744d9156dfbfddbae381f91ce8178b923dfeb04a3e6307dc1b759f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PrivateBrowsing_150.png
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\browser\VisualElements\PrivateBrowsing_150.png
        • Size 9KB
        • SHA256 2ee22aa49d12fa9146274dc5a03793fc45bb632bb341799542516fb17c142371
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PrivateBrowsing_70.png
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\browser\VisualElements\PrivateBrowsing_70.png
        • Size 4KB
        • SHA256 c348fb831e245763f6c1ca74e769599daf4b88d6b2487144a5a8a58c7172d9e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VisualElements_70.png
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\browser\VisualElements\VisualElements_70.png
        • Size 102KB
        • SHA256 68e5025e6835c0142272276dba9a3f2ad8cbe6f6ad8c425882befd3146a9f7f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default-browser-agent.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\default-browser-agent.exe
        • Size 31KB
        • SHA256 39b2ab550b979b43fa93ea55a5de373dd2cef7138f1c87e62517a4cadc46637c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        channel-prefs.js
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\defaults\pref\channel-prefs.js
        • Size 429B
        • SHA256 7d9d37eff1dc4e59a6437026602f1953ef58ee46ff3d81dbb8e13b0fd0bec86b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dependentlibs.list
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\dependentlibs.list
        • Size 55B
        • SHA256 612e53338b53449be39f2e9086e15edc7bb3e7aa56c9d65a9d53b9eb3c3cc77d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\dxcompiler.dll
        • Size 23.2MB
        • SHA256 1e807e2e482052409a96904b9fc8a600c487a74498849cc7f0e72877a3f8dd78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        firefox.VisualElementsManifest.xml
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\firefox.VisualElementsManifest.xml
        • Size 557B
        • SHA256 dded8c3942e2d8eca65838e55379b1da5765c2dd6183dd5c3530c9976cb25a86
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TwemojiMozilla.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\fonts\TwemojiMozilla.ttf
        • Size 1.4MB
        • SHA256 6d90152ee0d29e82fe2a87793af5aa4b7ad13e6538360889e141e81ed299ee8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        freebl3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\freebl3.dll
        • Size 1.2MB
        • SHA256 c9dd2697b0efb5de8bc0fd0080d5f192f42e147fe1d0d84b1803a8ed0694aea0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gkcodecs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\gkcodecs.dll
        • Size 10.5MB
        • SHA256 599d1fcc553756183c67b8c5d623943b698d33448ccc40d67459a1fdb854f977
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clearkey.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\gmp-clearkey\0.1\clearkey.dll
        • Size 111KB
        • SHA256 c28f7683b2920ea009364d1c6f9f576085e1996c9e94ae29184c6e1a053b4193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\gmp-clearkey\0.1\manifest.json
        • Size 229B
        • SHA256 ef47e83036753b53f59d079fef62bfedc749abdbcdb0fe16f448d9920f11114c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        InstallationDirLayout.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\installation_dir_layout\versioned\InstallationDirLayout.dll
        • Size 19KB
        • SHA256 b38ec234a87508efb903ee7cc18052b9a2e04fd191906efb7b5e994ba7741c7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lgpllibs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\lgpllibs.dll
        • Size 161KB
        • SHA256 ea783c3adfe9bb31b7f8272db407cd57eb989f9446597833da43dd66ff185223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\libEGL.dll
        • Size 58KB
        • SHA256 7f4971b446d9487ee0254484cffd0ea28ae6e248252f53daf9efb1b8438b6279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\libGLESv2.dll
        • Size 4.9MB
        • SHA256 4febbaded2eb8a3e61918c19704eb28e25f88f7287298cf5be087dc0ed263423
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        maintenanceservice.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\maintenanceservice.exe
        • Size 267KB
        • SHA256 6f689ba4e1a831b6a7fc5052231d29695163e6b666a3ae0b2792558aff123459
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        maintenanceservice_installer.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\maintenanceservice_installer.exe
        • Size 181KB
        • SHA256 ab03cd35cf73e250bf141f23cee3c8bd746962445df5e56c330657b481a84a4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        marshal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\marshal.dll
        • Size 494KB
        • SHA256 b9cd8e3cc49dc51ad25f1610b418a26a02905995d9744b72467141f712078bb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mozavcodec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\mozavcodec.dll
        • Size 3.9MB
        • SHA256 1906a34be242e1b1bee22184db87c641df496da2dce7b79dcf6b99615f1c21f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mozavutil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\mozavutil.dll
        • Size 590KB
        • SHA256 8c59f55115bd3f9b6cabad1cad0fbbc1f69b11f0a8173b996f3ca853b3471717
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mozglue.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\mozglue.dll
        • Size 705KB
        • SHA256 af6112c9306ea647ec0b8aae320fd9996f7df42b96931b057d67b29a8e0e79cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mozinference.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\mozinference.dll
        • Size 2.2MB
        • SHA256 975804de88246c8089ab4922d4604fc0b5ec63597fc9f29e8b0554fbf81739b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\msvcp140.dll
        • Size 530KB
        • SHA256 f3ee3aa7b355359a616ae5f8c8871420c72efe3af79fe6f577871d8b3056337d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_atomic_wait.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\msvcp140_atomic_wait.dll
        • Size 37KB
        • SHA256 90791767a188b565e136da53588cf5443a1b0c86b67ed5a6a51665db3dff889c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nmhproxy.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\nmhproxy.exe
        • Size 654KB
        • SHA256 94ee5de6769e3d7cf2447436794791722cd66998dbcafd73c35727f0b223333f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notificationserver.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\notificationserver.dll
        • Size 59KB
        • SHA256 5cd25c53f5a331a56e663b85da4d3e0e8e70f97106f8b3a10243dbfdfc62a336
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nss3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\nss3.dll
        • Size 3.0MB
        • SHA256 688dc04be6063384e3e3c23813dbac20aa62b08055bb40c7df315160e386a039
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onnxruntime.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\onnxruntime.dll
        • Size 9.3MB
        • SHA256 b599ebdf8cf762cdd8f1c9d634a54ceb50ceafa9d57d3556aae7a9b89bb720f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pingsender.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\pingsender.exe
        • Size 78KB
        • SHA256 6c820717f7713c20276ab62fdf456637aaf02c9bec440109737bd8cc612392ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        platform.ini
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\platform.ini
        • Size 158B
        • SHA256 cf2bd309dd835f4ec46c679216e4c8f87fdb8af422d2154203716358461a6b56
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        plugin-container.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\plugin-container.exe
        • Size 138KB
        • SHA256 ebe0756743fd121dec4f447855d66594e07f26b005a286644f2c5df3bd32d3ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        precomplete
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\precomplete
        • Size 1KB
        • SHA256 fff279de7ebeea76df77587f28ab0da2ccd17117321d03a3608963dd09dacd9b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        private_browsing.VisualElementsManifest.xml
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\private_browsing.VisualElementsManifest.xml
        • Size 559B
        • SHA256 9ea86a18d41112e25b17454044ac29b458f508d9814700a6f4c0f9370678f3ae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        private_browsing.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\private_browsing.exe
        • Size 132KB
        • SHA256 6c5ca7e12f53b777e038571a1b81ce11f742e2c0c55e6f6714acd665fda13412
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        removed-files
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\removed-files
        • Size 16B
        • SHA256 52523da24287c4d459131c2e4818a713a732765e06e9bbba1cf353888ba34f9f
        • MD5 SHA1 SHA512
        Submit Download

        softokn3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\softokn3.dll
        • Size 344KB
        • SHA256 936a8de8a44028770ce0ed1c8bb69d924ce86f41cb518a9f9c29333961dc1c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        helper.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\uninstall\helper.exe
        • Size 1.4MB
        • SHA256 1cdbb0b9e9cd0b2a3eb57499e7c55f2e19b188086a10d070ea3b0e56be0ef951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        update-settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\update-settings.ini
        • Size 116B
        • SHA256 17224c6040c70203f9228f35c345ba7f72e3be84ddbada6fb8f971c701e87e30
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        updater.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\updater.exe
        • Size 989KB
        • SHA256 00dcf85fb52c6a0855eaf7ba39f21ef1525a4ff5d3c422e9426d41f5647b3f87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        updater.ini
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\updater.ini
        • Size 1KB
        • SHA256 a6d81b46188b52069c2582dfc6b4d682bb722c2436cf5f531fe6ed0c94952c9d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\vcruntime140.dll
        • Size 110KB
        • SHA256 6b7cbaedc4be00d09e780ea67dead9899416bbe9b29057ddad8d4ceaacacb196
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\vcruntime140_1.dll
        • Size 36KB
        • SHA256 e61c4b65470606d9f135247b699e99354f38cdce185f3689262ef1f8440eab3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zen.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\core\zen.exe
        • Size 863KB
        • SHA256 3f5677a811d23a1782090aed57b1ebc36914cbd3df024145f95f32e4878de879
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Users\Admin\AppData\Local\Temp\7zS086217D8\setup.exe
        • Size 1.0MB
        • SHA256 460ffe364a15c9894908b5867eac0c8755e9755011c0fa9c6ef66d0865cb89cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bc000f71-30c5-489d-904b-b17cabe60bde.zip
        • Path C:\Users\Admin\AppData\Local\Temp\bc000f71-30c5-489d-904b-b17cabe60bde.zip
        • Size 3.7MB
        • SHA256 fa4bb42248df1a52130e8be56d582f50e1ab0bdc25c23f6d9f7e828a1f4045a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AccessControl.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\AccessControl.dll
        • Size 21KB
        • SHA256 ef4b548b27a6edab3bcb25cff0598918c645795850d62f232909dee851e04c6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ApplicationID.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\ApplicationID.dll
        • Size 55KB
        • SHA256 a9dad9fdaae93d10dc2ee346b231913445e731049554b8bb1506827e46f8a44e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CityHash.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\CityHash.dll
        • Size 53KB
        • SHA256 c299a0a71bf57eb241868158b4fcfe839d15d5ba607e1bdc5499fdf67b334a14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallOptions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\InstallOptions.dll
        • Size 25KB
        • SHA256 c34f095e200db420ce9af5489c3e392be285e43c3f4c9fbe34686b1f0a1531ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ServicesHelper.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\ServicesHelper.dll
        • Size 14KB
        • SHA256 d6f6758adac2c073bec481e8de762af3a5574789bce3f43de02356afc9911e0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShellLink.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\ShellLink.dll
        • Size 14KB
        • SHA256 5f6f414b412c72b10f49eb92af1d368ede531b58fb200d539fd2b45e371612db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\System.dll
        • Size 22KB
        • SHA256 b711c4f17690421c9dc8ddb9ed5a9ddc539b3a28f11e19c851e25dcfc7701c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\UAC.dll
        • Size 28KB
        • SHA256 ec6a56d981892bf251df1439bea425a5f6c7e1c7312d44bedd5e2957f270338c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UserInfo.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\UserInfo.dll
        • Size 14KB
        • SHA256 c6c413108539f141bea3f679e0e2ef705898c51ec7c2607f478a865fc5e2e2df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        components.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\components.ini
        • Size 602B
        • SHA256 f1505640e352a1748d1cdbc6eafc0ab21b0de520c6ea6b750d6eeb41b868dfe3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        extensions.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\extensions.ini
        • Size 630B
        • SHA256 0723b5d0c55354754b2084b712854c39ca089b1d883de067ac3c20935808397d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 dd3e3a7f10cadf6101e354bf528e673c357f708cc810f03a7c0028d3daa20749
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 b9be9b1f827590cb94462c0f34dddd16989fdc8bde5dda7eac07c800f1761894
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        liteFirewallW.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\liteFirewallW.dll
        • Size 92KB
        • SHA256 c0a12e651085aa2488796b474a5ca3bc70c22f1fd98ef854049b8d72987e478d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-header.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\modern-header.bmp
        • Size 25KB
        • SHA256 689ea80105f4e61ffc73062516c7d7053f92bae0c700c0673c3a9b445345df1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-wizard.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\modern-wizard.bmp
        • Size 201KB
        • SHA256 c03931e6f022e29943d410030595712a29285c1130537d552a7804845a07eca7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\nsExec.dll
        • Size 17KB
        • SHA256 7fb626aa05bee1095633a75aeb7895ebd816a98e0aa1581a0154e4c196de5391
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsJSON.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\nsJSON.dll
        • Size 33KB
        • SHA256 705f4947fb94254c4e5084e6a962045f6a4e790dfc1ecf59cd0fc3feb38bcbbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        options.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\options.ini
        • Size 1KB
        • SHA256 fba4cfe357d29168de21e4718f15f070d08fc0241bf771d5ac9f6373979de176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        options.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\options.ini
        • Size 1KB
        • SHA256 2ca78e578f8b50ff1076a7122c91846fdc8e252f433ff5ecc6307865adce9b58
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        options.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\options.ini
        • Size 1KB
        • SHA256 3d0ba6cac146c94b049d99f6e4faf4b61408b3808a3022dccadd2c04f1cc1f98
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        shortcuts.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\shortcuts.ini
        • Size 680B
        • SHA256 d0f7b8c2c29636f98462eebb68d639b0d6f93b015f9e8d117553d87ae684cc7d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        summary.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscD741.tmp\summary.ini
        • Size 810B
        • SHA256 1c9674434b5de548fad17e785d5da6d1b9e08c2d1bca379efdda13a3a9c3f0d7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        remote-settings-startup-bundle-
        • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
        • Size 544KB
        • SHA256 86f95de33a360444653a765dce16a79ef6134aaa04bc7800c804ded0235442ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tmpaddon
        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
        • Size 23KB
        • SHA256 98d20fde58130fa34aadfdf731c7a3b7d63ee8472abe375516f69876f308c10e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tmpaddon-1
        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
        • Size 502KB
        • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        9512A4488B00CC053350DAC32D417B4A35C11513
        • Path C:\Users\Admin\AppData\Local\zen\Profiles\6rauppii.Default (release)\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
        • Size 17KB
        • SHA256 626262daa8bbe5a2662cef59a14369d1182112045f9498d7fab99a6857d73079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        data.safe.bin
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.bin
        • Size 82B
        • SHA256 b9382d692c3cab8780b86342e5fff6ce78d5b62969767fb57643f4f3b700fc49
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.bin
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.bin
        • Size 82B
        • SHA256 84e58efe7002b3979bd085be539f0b77c4e4088cf36871d2064b955cf8e49c41
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.tmp
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.tmp
        • Size 82B
        • SHA256 9934d47707fb909b6149196f695ca44da83dca6280ef5cf374ce80d3267f4e75
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.tmp
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.tmp
        • Size 82B
        • SHA256 39447608973367d2f9deccd6b21b3bf4bda73b7405d0d153845b180a5ceae6ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.tmp
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.tmp
        • Size 82B
        • SHA256 ab3444dda5066eb5063be04eb18906e6f558b01ec92f80aab38e2a9ead5b7a84
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.tmp
        • Path C:\Users\Admin\AppData\Roaming\zen\Background Tasks Profiles\wa10dp4g.MozillaBackgroundTask-F0DC299D809B9700-defaultagent\datareporting\glean\db\data.safe.tmp
        • Size 82B
        • SHA256 0c6c1246ff1fcbf1ac16dfe53be24ee7891de62a4bfedeeb632faa7caee262a8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AlternateServices.bin
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\AlternateServices.bin
        • Size 8KB
        • SHA256 e59a257dc2494cc5ba1de8de0f79c5a6e9aac8dc391f20b43880a3d8ee6adb2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        data.safe.bin
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\datareporting\glean\db\data.safe.bin
        • Size 2KB
        • SHA256 512c255e5b86bc7d2abd8c8f7d41250cd621953260117e9dee199191a5b3362f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data.safe.tmp
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\datareporting\glean\db\data.safe.tmp
        • Size 286B
        • SHA256 5f40d174abe03650c3a46ed96ad0f0ab974866ecad7d9afed17556cd1899e48e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        38e553d3-d91a-4113-9bfe-ddc506e7fefa
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\datareporting\glean\pending_pings\38e553d3-d91a-4113-9bfe-ddc506e7fefa
        • Size 755B
        • SHA256 ae07162c2a8e7f9bff6c15cbf741b1ba8eb0cfa1f916b2d043cc6c57d1f21561
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        extensions.json
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\extensions.json
        • Size 14KB
        • SHA256 2e7296d580a932277fb6506c206c9ac8b3ad8830da1e8c952d0dac329af7a99c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extensions.json
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\extensions.json
        • Size 8KB
        • SHA256 2b05c6a230c7d21975d71ad4f7cdd63f3efdd75b78e7505a88d2c0b4c9edb308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gmpopenh264.dll
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
        • Size 1.1MB
        • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gmpopenh264.info
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\gmp-gmpopenh264\2.6.0\gmpopenh264.info
        • Size 116B
        • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\gmp-widevinecdm\4.10.3050.0\manifest.json
        • Size 1002B
        • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        widevinecdm.dll
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
        • Size 21.6MB
        • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prefs-1.js
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\prefs-1.js
        • Size 7KB
        • SHA256 203988f7de0466e4ffcf8e19688ee8cfa564eee3aff3d679088e80560d730094
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prefs-1.js
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\prefs-1.js
        • Size 8KB
        • SHA256 7724d35b4c8633a6e2e6f6a4adc4ccd8548d1caa29ccf3bdfeca17f2c94c0afb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prefs.js
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\prefs.js
        • Size 1KB
        • SHA256 5a27cba6ad369ac79dd87e040a125ed4cf97c46de121650b0cfe604a5e2e4ed8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prefs.js
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\prefs.js
        • Size 4KB
        • SHA256 348ef5225ce4e282368c2cd9c875379030172a4afacc4e3b91d10001967e069a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        recovery.baklz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\sessionstore-backups\recovery.baklz4
        • Size 1KB
        • SHA256 2cd839dab145a0a6130cb39df7f4f1e02baf358dc34559d87314e8a5425fffd5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        recovery.baklz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\sessionstore-backups\recovery.baklz4
        • Size 3KB
        • SHA256 d53b82bb99a39262985333effe10f468f0a1cbd6bb55c2dd1b1e12f8da1b8314
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        recovery.jsonlz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\sessionstore-backups\recovery.jsonlz4
        • Size 3KB
        • SHA256 4cef9b37acbf7b6df1a9ac52fc76388b6091b073f9eb0c0f3b747bde4f8a20a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        2918063365piupsah.sqlite
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\2918063365piupsah.sqlite
        • Size 48KB
        • SHA256 eda8fb244794b8bd6d12c4f29fff9d86952909992536da0b527efb9cd1c457e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        3870112724rsegmnoittet-es.sqlite
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
        • Size 56KB
        • SHA256 996b23c272347d67c8577c633588467b9b7c9d7254db143400d698bf48683fdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        3870112724rsegmnoittet-es.sqlite
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
        • Size 5.8MB
        • SHA256 04cf8a2b0381444e4a14a255f3f6cf7f87d505252c8e35be874655f4df17864d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        3870112724rsegmnoittet-es.sqlite
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
        • Size 15.2MB
        • SHA256 e26217337a25437fa68abe572b0d29724c6005c25e55c37e633fdf7d7340f35d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        3870112724rsegmnoittet-es.sqlite
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
        • Size 15.2MB
        • SHA256 fb55211def369195c55ec6eef2ed8aa25d4bf1145a4bcba60ca79b8ae7a885bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        3870112724rsegmnoittet-es.sqlite-wal
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
        • Size 192KB
        • SHA256 582c0572ef89183e3d5c03a6479c67ce02e18f81a1a9278d797599a5078e6afd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zen-live-folders.jsonlz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\zen-live-folders.jsonlz4
        • Size 15B
        • SHA256 0dd22af73bf7560a8bc72ee90aba611c1241c2054d488f75d90a4afc27309efb
        • MD5 SHA1 SHA512
        Submit Download

        zen-sessions.jsonlz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\zen-sessions.jsonlz4
        • Size 586B
        • SHA256 532a29f0d8eae06fefe6396fdceff016a0fd700ef18581ab4a802ff80e00014b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        zen-sessions.jsonlz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\zen-sessions.jsonlz4
        • Size 67B
        • SHA256 5b27446baebf992ca17236242e518229d1fc54378bfb375db81b62b4f7864c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        zen-sessions.jsonlz4
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\zen-sessions.jsonlz4
        • Size 2KB
        • SHA256 279fdca8e540339c1cbe0a20acb1410e4bd2688f8f6039ae8f814820e613c654
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        zen-themes.json
        • Path C:\Users\Admin\AppData\Roaming\zen\Profiles\6rauppii.Default (release)\zen-themes.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512
        Submit Download

        Zen.lnk
        • Path C:\Users\Public\Desktop\Zen.lnk
        • Size 910B
        • SHA256 d4275b2d9239f5a7b49529003178acb149de6fca9730d35346f555108493763b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Zen.lnk
        • Path C:\Users\Public\Desktop\Zen.lnk
        • Size 1008B
        • SHA256 b5dde30eadb248947dbca4aa1c6e2287d3b5c05be71d2cb69b0bd24779b858b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2096-2533-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8218-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8233-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8230-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8226-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8221-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-2987-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-2554-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-2490-0x0000023638A90000-0x0000023638AA0000-memory.dmp
        Download

        memory/2096-2480-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-8210-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/2096-6688-0x000002361F780000-0x000002361F836000-memory.dmp
        Download

        memory/5760-381-0x0000000000400000-0x0000000000446000-memory.dmp
        Download

        memory/5760-0-0x0000000000400000-0x0000000000446000-memory.dmp
        Download

        memory/7116-2658-0x00000276801E0000-0x00000276802E0000-memory.dmp
        Download

        memory/7116-2694-0x0000027681D40000-0x0000027681D60000-memory.dmp
        Download

        memory/7116-2684-0x00000276819E0000-0x0000027681A00000-memory.dmp
        Download

        memory/7116-2686-0x0000027681EF0000-0x0000027681FF0000-memory.dmp
        Download

        memory/7116-2710-0x00000276942A0000-0x00000276942C0000-memory.dmp
        Download