Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/07/2026, 15:00

General

  • Target
    FLTAH Translator.exe
  • Size 2.3MB
  • Sample260710-sdmnwsbv7m
  • SHA256 25afcd31af3bab193d5fc81c37eca14caac6bb072878383edcde94f7edec3a9a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 61 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FLTAH Translator.exe
    "C:\Users\Admin\AppData\Local\Temp\FLTAH Translator.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=2420.3404.10415042289263525893
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:456
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x118,0x7ffa638fb078,0x7ffa638fb084,0x7ffa638fb090
        3⤵
          PID:4456
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:2
          3⤵
            PID:3588
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1372,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
            3⤵
              PID:2680
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
              3⤵
                PID:3120
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3588,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
                3⤵
                  PID:1460
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4688,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
                  3⤵
                    PID:4704
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1216,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
                    3⤵
                      PID:4776
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4552,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:8
                      3⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:3516
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView" --webview-exe-name="FLTAH Translator.exe" --webview-exe-version=1.3.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4560,i,4171299416332209372,16283758751937740079,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
                      3⤵
                        PID:2092

                  Network

                        MITRE ATT&CK Enterprise v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        manifest.fingerprint

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_421113627\manifest.fingerprint
                        • Size 66B
                        • SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
                        • MD5 SHA1 SHA512 TLSH

                        manifest.json

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_421113627\manifest.json
                        • Size 135B
                        • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                        • MD5 SHA1 SHA512 TLSH

                        hyph-as.hyb

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_868443431\hyph-as.hyb
                        • Size 703B
                        • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                        • MD5 SHA1 SHA512 TLSH

                        hyph-hi.hyb

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_868443431\hyph-hi.hyb
                        • Size 687B
                        • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                        • MD5 SHA1 SHA512 TLSH

                        hyph-nb.hyb

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_868443431\hyph-nb.hyb
                        • Size 141KB
                        • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        manifest.json

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping456_868443431\manifest.json
                        • Size 82B
                        • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                        • MD5 SHA1 SHA512 TLSH

                        04aa46b3b65c546972010d734260a9fe.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\04aa46b3b65c546972010d734260a9fe.jpg
                        • Size 170KB
                        • SHA256 43eec3826a87b05849d53d811de07c80d480267028309dc4edc84de023bb84fc
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        1d4a1c66b67c83754ee3a616521f5709.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\1d4a1c66b67c83754ee3a616521f5709.jpg
                        • Size 36KB
                        • SHA256 d7b1185e16d2eabc9d0e192147abdb049cb2d3131bc1511ef80c4637130a8857
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        240cd6e510b13f9928ead4d34b2d2d41.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\240cd6e510b13f9928ead4d34b2d2d41.jpg
                        • Size 208KB
                        • SHA256 4d32135229f887844b97d8b256c40120569104a7e140da9c2d8b1bc0b6227228
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        33b74300652786af7cbc30e6d4abc52c.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\33b74300652786af7cbc30e6d4abc52c.jpg
                        • Size 222KB
                        • SHA256 7fc79b0266ebe1fe58899c3edeaa2acd518832df4f6a4e3af9e7234474a6cce5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        33f313994842b6f62ecac8d59ab47756.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\33f313994842b6f62ecac8d59ab47756.jpg
                        • Size 53KB
                        • SHA256 cbf14bb1c6eb51ae89ef6b6a71f991eb5de4c02ad587b5a0b6d4eb8fbf26765e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        362d34dac1ab0c9c9ed8288145d4ca77.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\362d34dac1ab0c9c9ed8288145d4ca77.jpg
                        • Size 36KB
                        • SHA256 f0c6f874b9a3b520819c66dc0c3b68f50286f5c94177e94ab57bc51bacb3fdc5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        3eedd7e3f68640bd61a98df8274cf8fc.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\3eedd7e3f68640bd61a98df8274cf8fc.jpg
                        • Size 111KB
                        • SHA256 7c263007c3cc9586541338a756564a6f673b9cdba5a62cad2b1780b718150e93
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        43f5b569033e71465ff7f1a22c168f3e.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\43f5b569033e71465ff7f1a22c168f3e.jpg
                        • Size 99KB
                        • SHA256 266429b0ecd375a422180d4413a377eaea5c2454641249d7a1ad59c3421245f2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        471e5fe231246f581a36dc565bc5d436.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\471e5fe231246f581a36dc565bc5d436.jpg
                        • Size 124KB
                        • SHA256 35e0205ddcec3c74399bcf8553abf1c6cec15e3a092b54b12a13d7c48fb23884
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        49211f69fdcc860abe0a1d5f6efb3847.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\49211f69fdcc860abe0a1d5f6efb3847.jpg
                        • Size 98KB
                        • SHA256 fe5ddda83303284c31c012ff7c735cef359384460339c3219d64ea621b9d460f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        49ae23c469e76c7d81cb982ac3d19644.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\49ae23c469e76c7d81cb982ac3d19644.jpg
                        • Size 50KB
                        • SHA256 d6dd36695e2e1dae76f8c0e340211c49f5fa739d1118a4a4413cfc1e76e67344
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        5e8344257cebcac966e5a61502204f60.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\5e8344257cebcac966e5a61502204f60.jpg
                        • Size 48KB
                        • SHA256 2fd99f4497ef87ccf6b7799c24963e8554c1af8064a196adc35803640b97e7eb
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        5f4a5937f7d9931c50b76d3298a47ad9.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\5f4a5937f7d9931c50b76d3298a47ad9.jpg
                        • Size 136KB
                        • SHA256 d45fad062c009134fb6a0a925e41a9df076c20f98770cbd459cb8bc3d7429188
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        62adcb38a1ea907f2f3a8ee3fd05d48c.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\62adcb38a1ea907f2f3a8ee3fd05d48c.png
                        • Size 211KB
                        • SHA256 fbffc9216c6e29168e533a284000fae7a92f3c6838c112be574c5cab8fcc90b1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        688da038815afe4d257968e6e4dab9dd.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\688da038815afe4d257968e6e4dab9dd.jpg
                        • Size 115KB
                        • SHA256 19947264d3c047a55788cdb3caccafc31c4e609d7c4bf66d5ad8ccdce24c29e2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        6cc93394afd8c74a2563194a145558d0.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\6cc93394afd8c74a2563194a145558d0.jpg
                        • Size 40KB
                        • SHA256 d867ba532148c556e5125dfa5abbef96479b8dce79e9afa01b00695c9bd7a80b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        6ed02bc48baba4151fc377476736ba78.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\6ed02bc48baba4151fc377476736ba78.jpg
                        • Size 184KB
                        • SHA256 ad41a743681a4ce9536bcb32a011021c8967ffb564fbb9b4941a855c64083415
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        6f57c91809a8d3775313c33d6745e562.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\6f57c91809a8d3775313c33d6745e562.jpg
                        • Size 45KB
                        • SHA256 d53f154105eb48839bd04b7042fb76a4327e54b5044be901d43a4fa7e92bf4ed
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        75aafe7b9e9af804e4bf374ab402ab58.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\75aafe7b9e9af804e4bf374ab402ab58.jpg
                        • Size 105KB
                        • SHA256 e1bcc1e45a267b8a070c47c6223600f3845e2f73b72c2ed7570d771dfe40fd59
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        8adf55e12f622a185e58decfce8ac4ab.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\8adf55e12f622a185e58decfce8ac4ab.jpg
                        • Size 134KB
                        • SHA256 a229ab20e803ccf15c35474424c76773574305b1ebb6f302f055d8a584ddc5ab
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        8d635610f5972867ec41e4e294b62e62.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\8d635610f5972867ec41e4e294b62e62.png
                        • Size 178KB
                        • SHA256 381a05f8ad36cba1dedd6514313398b415031e0769df987578ec95cf55c52ec5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        94b92d97c748f45fbbc5c5f4f3daf61f.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\94b92d97c748f45fbbc5c5f4f3daf61f.jpg
                        • Size 151KB
                        • SHA256 42d4796ca36e15038d6ae307c4b546d93e6c3154dc4161d908ce915d35149188
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        9740a61899e017985aae02482ac36fab.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\9740a61899e017985aae02482ac36fab.jpg
                        • Size 201KB
                        • SHA256 90fdc99135cd72216a73a7c1c32a87690d01c698381e5abb62fd7d8a13eaea21
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        97ddfe21bee3a23f8eddea603e94cdca.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\97ddfe21bee3a23f8eddea603e94cdca.jpg
                        • Size 48KB
                        • SHA256 d61fb1c66f160446f75b5d66735fe041a6c07e0720d4cb188c6bd4b75ced6fdf
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        9d0488bb003db020493173bd980f3394.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\9d0488bb003db020493173bd980f3394.jpg
                        • Size 211KB
                        • SHA256 bf902e307ddea5de8e1c9c771f650c4672945938d3d868eb1449a83652db39d0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        a89aa0368434f754d2ed17aca80a31c8.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\a89aa0368434f754d2ed17aca80a31c8.jpg
                        • Size 184KB
                        • SHA256 1574bbf3698b605e64bd54ec82aa4373a5b15d57420e9f6d71d77c14ac81ee9b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        aa38c512ed23b86cbd1b18ff9454de3f.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\aa38c512ed23b86cbd1b18ff9454de3f.jpg
                        • Size 149KB
                        • SHA256 87e36df1a083b7b45dbe278b8701c757dfde3141740289624e022b9f56c81da2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        ab86060235653c9fef7eba3487e04cdf.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\ab86060235653c9fef7eba3487e04cdf.jpg
                        • Size 143KB
                        • SHA256 7150060376f411599e34cc0a070bdaa12c7f3f834dc6a4fad4e2515e19217e04
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        adccd555f8083870e561c547ecc153cb.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\adccd555f8083870e561c547ecc153cb.jpg
                        • Size 48KB
                        • SHA256 eefb4021ec39a2af9eb79e2cb8a2489123ba9c52b75d50179b6a8dee8844cd0d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        afa8f95060b2358a7f1e67a19f20a011.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\afa8f95060b2358a7f1e67a19f20a011.jpg
                        • Size 33KB
                        • SHA256 c8d2c95d73db35c5d5ac1845843f3191120961fa8b57d4dd3693b909e4e96576
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        b19de091223b1d5b5e15e6679a17a48e.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\b19de091223b1d5b5e15e6679a17a48e.png
                        • Size 198KB
                        • SHA256 d9413cd7c9b2494a16c8b9bda1931750ee94df54f8b3b5c5ecb455c2d900047b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        c5982ed38d08ca52bab6ec4eabe46077.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\c5982ed38d08ca52bab6ec4eabe46077.jpg
                        • Size 28KB
                        • SHA256 b00e81230968aca51699bdf5f43458ec7a911b1fc78ef32cae39643e482988c1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        cdbbf5bf7eacec0ac5b65ca5f5fccb7d.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\cdbbf5bf7eacec0ac5b65ca5f5fccb7d.png
                        • Size 223KB
                        • SHA256 90e5a7925cb200b078a6c48a6a8aaf1541b4def5b3b664c7d30aa3a7f94112e6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        cee37ce5227c7bc553d07ed5117ca5f7.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\cee37ce5227c7bc553d07ed5117ca5f7.png
                        • Size 170KB
                        • SHA256 df3fa1f1ea389c62fdb258d2d22d30d48f833e587454a59607847a2bb8ce23cd
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        cf87105c26d3899f9e79326c83d9312e.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\cf87105c26d3899f9e79326c83d9312e.jpg
                        • Size 131KB
                        • SHA256 499dc6246f1ef403f16d489b2dc2310f667c611139c61629e4ecd77d069f0e97
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        d037bff02f067af0752f4b641f9dbab5.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\d037bff02f067af0752f4b641f9dbab5.jpg
                        • Size 106KB
                        • SHA256 33b7d85ddc44f163e25b2a3f4baa9adf250a94932e1402662421a57e997a0f18
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        d21683b6caf3b97d62326d58ca9e7221.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\d21683b6caf3b97d62326d58ca9e7221.jpg
                        • Size 38KB
                        • SHA256 f1ec994e8f858848c8b8c68fa1c44f291f415ad6cbd21b13c182cc4f54a75eb4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        d2e60c15176469d87cbd549cfa78990a.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\d2e60c15176469d87cbd549cfa78990a.jpg
                        • Size 167KB
                        • SHA256 6506b31a028362ce906031b04460e9d808f2321b809837654be89457eef16dcb
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        e4811df43a578f8ec3fccb445e29da59.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\e4811df43a578f8ec3fccb445e29da59.jpg
                        • Size 37KB
                        • SHA256 f2f0c95c6b383c16a3d4e446c68800f1a36e4760eb3f25ee9302a5de85bbae94
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        e7f42470d19b8ab0db7b6e639644da09.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\e7f42470d19b8ab0db7b6e639644da09.png
                        • Size 221KB
                        • SHA256 1ab39a80bb5520b4b9dcf51880d73f149ca16445a9c5b6713ff84f1d0e60e380
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        f184d002e59c779e4201674707c27945.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\f184d002e59c779e4201674707c27945.jpg
                        • Size 177KB
                        • SHA256 97e19d48d65034baa0d480c967f28a954d101c49bfeefb09737857fd8094113e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        f9895bbd01c97650dd84b83be7492755.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\f9895bbd01c97650dd84b83be7492755.png
                        • Size 124KB
                        • SHA256 00ccdd72aa060e3a5b7f6d10443ff570511f34bb94697df92f948b7482f6c33e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        fadd5703dab724bc87cc4bb78d2bc0ac.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\fadd5703dab724bc87cc4bb78d2bc0ac.jpg
                        • Size 58KB
                        • SHA256 b318bc7b0dd2d479eaf2e99727ff2fff8d9503763248db3f2c7d4f311cda0f70
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        fd5681538d0a61cce8586766e9a28674.png

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\fd5681538d0a61cce8586766e9a28674.png
                        • Size 260KB
                        • SHA256 26e09abaa16a2db8ee436ee7601c18e5765b2e5ae3e2da0faf8abd8be8c9c8a7
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        fd74a405925017017d913e213547d2c5.jpg

                        • Path C:\Users\Admin\AppData\Local\Temp\Cache\GameImages\fd74a405925017017d913e213547d2c5.jpg
                        • Size 123KB
                        • SHA256 c8c39d4239b4efd42c3a9f96186811e4134b5df8a5c1be29fbfb54f4dff867c5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        095eccc2-9fe8-4852-ab71-b26b94a1679b.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\095eccc2-9fe8-4852-ab71-b26b94a1679b.tmp
                        • Size 16KB
                        • SHA256 44de967d09144a4e553650da6210c08c2363c4a52ba1767eaca5cebc5b3c1b99
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        protocols.json

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                        • Size 3KB
                        • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                        • MD5 SHA1 SHA512 TLSH

                        settings.dat

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Crashpad\settings.dat
                        • Size 280B
                        • SHA256 5949b271f262d61fa7e444f13a3a63e740d05530ba367de6d5313706f5b118d7
                        • MD5 SHA1 SHA512 TLSH

                        settings.dat

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Crashpad\settings.dat
                        • Size 280B
                        • SHA256 c60f2496b68d9b7349c955d7636bf53b8f045fed5bbabe26b3a020f080481b86
                        • MD5 SHA1 SHA512

                        throttle_store.dat

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Crashpad\throttle_store.dat
                        • Size 20B
                        • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                        • MD5 SHA1 SHA512

                        the-real-index

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                        • Size 48B
                        • SHA256 a15a4ed3e634045c5b8b0ce870a3fc0f49b7f03e15cefc9876b7556b8ca3c405
                        • MD5 SHA1 SHA512

                        the-real-index

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                        • Size 96B
                        • SHA256 775a6ec756342a57833e2bdfa7f89ff2a0ec18a123821b23de930716d03876e1
                        • MD5 SHA1 SHA512 TLSH

                        data_0

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\DawnWebGPUCache\data_0
                        • Size 8KB
                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                        • MD5 SHA1 SHA512 SSDEEP

                        data_1

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\DawnWebGPUCache\data_1
                        • Size 264KB
                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                        • MD5 SHA1 SHA512 SSDEEP

                        data_2

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\DawnWebGPUCache\data_2
                        • Size 8KB
                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                        • MD5 SHA1 SHA512 SSDEEP

                        data_3

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\DawnWebGPUCache\data_3
                        • Size 8KB
                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                        • MD5 SHA1 SHA512 SSDEEP

                        index

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\DawnWebGPUCache\index
                        • Size 256KB
                        • SHA256 39bff495981479a3e29c4efcd9dca099c6db1d9f5470e81907c2a55e47cf97e1
                        • MD5 SHA1 SHA512 SSDEEP

                        MANIFEST-000001

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Extension Rules\MANIFEST-000001
                        • Size 41B
                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                        • MD5 SHA1 SHA512

                        98366506-d8e8-4ba3-af21-6ceab2185d45.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\98366506-d8e8-4ba3-af21-6ceab2185d45.tmp
                        • Size 2B
                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                        • MD5 SHA1 SHA512

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\Network Persistent State
                        • Size 1KB
                        • SHA256 6f531dd1ef95109b83918f75d371c4835a14e8574c3d3a7b6f556079d3ac9b91
                        • MD5 SHA1 SHA512 TLSH

                        Network Persistent State~RFe598023.TMP

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\Network Persistent State~RFe598023.TMP
                        • Size 59B
                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                        • MD5 SHA1 SHA512 TLSH

                        TransportSecurity

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\TransportSecurity
                        • Size 523B
                        • SHA256 fa0bd28ebf363b61dca308b718e96116cbb181db95499e0246e85f513182429f
                        • MD5 SHA1 SHA512 TLSH

                        TransportSecurity

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\TransportSecurity
                        • Size 523B
                        • SHA256 68a6a2e19bbc2020c776a280dd2e8887fe07a495de66ceee5bb19fb718f5484f
                        • MD5 SHA1 SHA512 TLSH

                        TransportSecurity~RFe58e9ce.TMP

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Network\TransportSecurity~RFe58e9ce.TMP
                        • Size 523B
                        • SHA256 063233ea1ebd87800e55113d5c3d6606c95f3a4c8ccd8032cc5394b7098d65c5
                        • MD5 SHA1 SHA512 TLSH

                        Preferences

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Preferences
                        • Size 6KB
                        • SHA256 d61fc0c4a84434872b693b545118393aa26ec71a1047e5e75f0b00a452400c2d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Preferences~RFe5908ff.TMP

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Preferences~RFe5908ff.TMP
                        • Size 6KB
                        • SHA256 7d1db100efb3e183dd617e63170c3c016ce399ca0cd897584300408c3444c761
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        CURRENT

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Default\Sync Data\LevelDB\CURRENT
                        • Size 16B
                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                        • MD5 SHA1 SHA512

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Local State
                        • Size 1KB
                        • SHA256 72a9a79bf7cddb89d536c0ef8813a9c622895ee81b4897c4e96297415a438fcc
                        • MD5 SHA1 SHA512 TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Local State
                        • Size 2KB
                        • SHA256 fd7e49d3d5bb6c8219ba602f4d4fae492c8a1fcb2749d80ffc9aa54839151b6a
                        • MD5 SHA1 SHA512 TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Local State
                        • Size 3KB
                        • SHA256 2ea742e3125f62af3e7b9eb32494f91c6bd389cab031e5d04eba6e6a5638f47a
                        • MD5 SHA1 SHA512 TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Local State
                        • Size 17KB
                        • SHA256 ef652c1262750201deb40db2d26661910c3f3d86d9ac278288062586c855c4f1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Local State~RFe5869d1.TMP

                        • Path C:\Users\Admin\AppData\Local\Temp\WebView2Data\EBWebView\Local State~RFe5869d1.TMP
                        • Size 1KB
                        • SHA256 b0fdf8caed0848f01bc97916513989982f050de9bd0c68aaade0f06a43758742
                        • MD5 SHA1 SHA512 TLSH

                        memory/1460-130-0x00007FFA7FA50000-0x00007FFA7FA51000-memory.dmp

                        memory/3120-76-0x00007FFA7EF40000-0x00007FFA7EF41000-memory.dmp

                        memory/3120-75-0x00007FFA7EB90000-0x00007FFA7EB91000-memory.dmp

                        memory/3516-1177-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1178-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1179-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1183-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1184-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1189-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1188-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1187-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1186-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3516-1185-0x000001FD59150000-0x000001FD59151000-memory.dmp

                        memory/3588-25-0x00007FFA7FA50000-0x00007FFA7FA51000-memory.dmp