Overview

overview

6

Static

static

1

hypertune-...18.exe

windows10-2004-x64

6

hypertune-...18.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    242s
  • max time network
    256s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/07/2026, 04:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    hypertune-setup-2.3.0.18.exe
  • Size 213.1MB
  • Sample260714-e6pgaset4r
  • SHA256 500f0dab319f575c883a45ad7417366b21418d7a7777545aece612aeab4b862c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryinstallerpersistenceprivilege_escalationransomwareupx

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
    defense_evasion
  • Checks computer location settings 2 TTPs 8 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 51 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 51 IoCs
  • Executes dropped EXE 21 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 23 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 8 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 24 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 44 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\hypertune-setup-2.3.0.18.exe
    "C:\Users\Admin\AppData\Local\Temp\hypertune-setup-2.3.0.18.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:516
    • C:\Users\Admin\AppData\Local\Temp\is-7KSZLTM6BZ.tmp\hypertune-setup-2.3.0.18.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-7KSZLTM6BZ.tmp\hypertune-setup-2.3.0.18.tmp" /SL5="$501BE,222168820,941568,C:\Users\Admin\AppData\Local\Temp\hypertune-setup-2.3.0.18.exe"
      2⤵
      • Downloads MZ/PE file
      • Checks computer location settings
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3004
      • C:\Program Files\dotnet\dotnet.exe
        "C:\Program Files\dotnet\dotnet.exe" --list-runtimes
        3⤵
        • System Time Discovery
        PID:4880
      • C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\dotnet60_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\dotnet60_x64.exe" /lcid 1033 /passive /norestart
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2408
        • C:\Windows\Temp\{70255356-976C-4A2A-AE5E-CEE51880318F}\.cr\dotnet60_x64.exe
          "C:\Windows\Temp\{70255356-976C-4A2A-AE5E-CEE51880318F}\.cr\dotnet60_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\dotnet60_x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=692 /lcid 1033 /passive /norestart
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:1060
          • C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\.be\dotnet-runtime-6.0.36-win-x64.exe
            "C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\.be\dotnet-runtime-6.0.36-win-x64.exe" -q -burn.elevated BurnPipe.{35E3E2D9-1990-4E55-9801-19B0E7527A6F} {1CD78288-5DE1-4342-8FE4-78DC82E6D4A3} 1060
            5⤵
            • Adds Run key to start application
            • Drops file in Program Files directory
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • System Time Discovery
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            PID:3932
      • C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\vcredist2022_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\vcredist2022_x64.exe" /passive /norestart
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:228
        • C:\Windows\Temp\{055896FB-F76C-4807-AC69-176D7543607C}\.cr\vcredist2022_x64.exe
          "C:\Windows\Temp\{055896FB-F76C-4807-AC69-176D7543607C}\.cr\vcredist2022_x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\vcredist2022_x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=692 /passive /norestart
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2784
          • C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\.be\VC_redist.x64.exe
            "C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{D141791D-C143-4EEF-9653-71C0977F1172} {04E72944-8287-4857-8DD3-657C64C52ECF} 2784
            5⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4628
            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=1112 -burn.embedded BurnPipe.{8CA519B2-FDF0-423A-878F-561BE558BA04} {C9598166-5B9E-45CB-9228-1E74407504F5} 4628
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4392
              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=516 -burn.filehandle.self=536 -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=1112 -burn.embedded BurnPipe.{8CA519B2-FDF0-423A-878F-561BE558BA04} {C9598166-5B9E-45CB-9228-1E74407504F5} 4628
                7⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:3964
                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{B22FA686-852B-4DDC-9666-E73C6A2063FE} {7A25E032-94D2-444A-BD70-7E691A0F885A} 3964
                  8⤵
                  • System Location Discovery: System Language Discovery
                  • Modifies registry class
                  PID:2176
      • C:\Windows\system32\netsh.exe
        "C:\Windows\system32\netsh.exe" advfirewall firewall show rule name="HyperTune"
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        PID:4508
      • C:\Windows\system32\netsh.exe
        "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="HyperTune" dir=out action=allow program="C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe" enable=yes profile=any
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        PID:3568
      • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe
        "C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        PID:3184
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:308
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 77F5F4A3E56C6101275906028E8B57C5
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1648
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding EE66742F13878586BE839F5A4E08575D
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4648
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding F495D604DCFBC3C67E1A702269764A09
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4784
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding FE50AEDC49DA0AD623CE563777BD66D2
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1844
  • C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe
    "C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe" /burn.runonce
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • System Time Discovery
    • Suspicious use of WriteProcessMemory
    PID:4024
    • C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe
      "C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439.log" /lcid 1033
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • System Time Discovery
      • Suspicious use of WriteProcessMemory
      PID:3880
      • C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe
        "C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439.log" /lcid 1033
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Time Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3312
        • C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe
          "C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\dotnet-runtime-6.0.36-win-x64.exe" -q -burn.elevated BurnPipe.{31F78857-C5B6-4D16-A735-AD719AC2F150} {43CCEBE4-FFDE-4FAA-B2A6-8EF37B59F351} 3312
          4⤵
          • Adds Run key to start application
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Time Discovery
          • Modifies registry class
          PID:4416
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    PID:1940
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
      PID:3804
    • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /burn.runonce
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3868
      • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
        "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260714053453.log"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2024
        • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
          "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260714053453.log"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4184
          • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
            "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{540817A1-4AEF-4076-9DE7-D2D4B2F9C889} {3F5C1B15-C2E8-48A6-8378-5D9624265C90} 4184
            4⤵
            • Adds Run key to start application
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Modifies registry class
            PID:4492
    • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe
      C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:988
      • C:\Windows\explorer.exe
        "explorer" "https://app.hypertune.gg/device-challenge?code=snDl_6-l0LO7&redirect_uri=hypertune%3a%2f%2fetojijet%2f"
        2⤵
          PID:1672
        • C:\Windows\explorer.exe
          "explorer" "https://app.hypertune.gg/device-challenge?code=VXu8U8S_3LQg&redirect_uri=hypertune%3a%2f%2fetojijet%2f"
          2⤵
            PID:5964
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe"
          1⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:2232
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe8deac728,0x7ffe8deac734,0x7ffe8deac740
            2⤵
              PID:4088
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2164,i,18088659609041838095,823250565014520558,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2196 /prefetch:3
              2⤵
              • System Time Discovery
              PID:3516
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,8067421839318694051,8211043539804015962,262144 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
              2⤵
                PID:4040
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,9673244909223747248,16697591424805344623,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2480 /prefetch:8
                2⤵
                  PID:2732
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,3391807047602290126,8146418967695770450,2097152 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
                  2⤵
                    PID:1884
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,5810709100959983594,14154003531352118291,2097152 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
                    2⤵
                      PID:1124
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,10273057159651813313,2221073636812248178,2097152 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4492 /prefetch:2
                      2⤵
                        PID:2392
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,10138442342649531791,5084324702002765121,2097152 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
                        2⤵
                          PID:1724
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,10899940687668811905,12542800862727686148,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:8
                          2⤵
                            PID:3752
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,4869800363138712165,13241372621314939803,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:8
                            2⤵
                              PID:5868
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6084,i,10456953832776256484,5360166361006336180,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6064 /prefetch:8
                              2⤵
                                PID:6456
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,12731502747818843199,10625997961185991828,524288 --field-trial-handle=2000,i,16388386474659585070,17362527390261283158,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:8
                                2⤵
                                  PID:6520
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:3492
                                • C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                  1⤵
                                    PID:4960
                                  • C:\Windows\explorer.exe
                                    C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                    1⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:4732
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://app.hypertune.gg/device-challenge?code=snDl_6-l0LO7&redirect_uri=hypertune%3a%2f%2fetojijet%2f
                                      2⤵
                                      • Suspicious use of WriteProcessMemory
                                      PID:4576
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://app.hypertune.gg/device-challenge?code=snDl_6-l0LO7&redirect_uri=hypertune%3a%2f%2fetojijet%2f
                                        3⤵
                                        • Drops file in Program Files directory
                                        • Checks processor information in registry
                                        • Enumerates system info in registry
                                        • Modifies data under HKEY_USERS
                                        • Modifies registry class
                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of WriteProcessMemory
                                        PID:3404
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffe80ebc188,0x7ffe80ebc194,0x7ffe80ebc1a0
                                          4⤵
                                            PID:4108
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,6247901068904761379,13103125837488313765,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
                                            4⤵
                                            • System Time Discovery
                                            PID:5172
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,11945417205587591025,2263863606314364940,262144 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
                                            4⤵
                                              PID:5184
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,347711023046756430,14698826210189081673,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
                                              4⤵
                                                PID:5200
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,11484856248937594312,5712264084887186207,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
                                                4⤵
                                                  PID:5412
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,15097075943715632952,16245862818064489883,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
                                                  4⤵
                                                    PID:5408
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,17433445498847789164,10599409675480704173,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
                                                    4⤵
                                                      PID:5532
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,4417675239117184968,16013987576993529511,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
                                                      4⤵
                                                        PID:5540
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,8245836483593479011,17415907424302295722,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
                                                        4⤵
                                                          PID:5828
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,1257490240502957261,1501554417586440889,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
                                                          4⤵
                                                            PID:5928
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5464,i,2580922716952938951,17935337421147186128,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:1
                                                            4⤵
                                                              PID:5440
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,11983396674582212714,15199660322458289607,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
                                                              4⤵
                                                                PID:5972
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,8337134317674156277,11752992996923143094,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
                                                                4⤵
                                                                  PID:6000
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3744,i,10813849176353253851,4132081879287237485,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:1
                                                                  4⤵
                                                                    PID:6180
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,11735159682128518105,13686021613489961351,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
                                                                    4⤵
                                                                      PID:6736
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,11735159682128518105,13686021613489961351,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
                                                                      4⤵
                                                                        PID:6748
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5144,i,11339749921905422512,5161033682636364890,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
                                                                        4⤵
                                                                          PID:5632
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,7657657711828528308,15126850584166974541,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
                                                                          4⤵
                                                                            PID:5928
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6896,i,8102284237009938743,1968304290226264093,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:8
                                                                            4⤵
                                                                              PID:6588
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7092,i,9764428721352873680,11711504083785166538,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
                                                                              4⤵
                                                                                PID:6684
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7296,i,14903492875620216283,2027577591426578956,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:8
                                                                                4⤵
                                                                                • Modifies registry class
                                                                                PID:6872
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,470117825011924346,4658331177135148588,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:8
                                                                                4⤵
                                                                                  PID:6880
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7716,i,6850899740536167273,2253214755403954615,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:8
                                                                                  4⤵
                                                                                    PID:7144
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7660,i,8812290980838932916,4509635335914865715,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:8
                                                                                    4⤵
                                                                                      PID:7152
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7784,i,10419192122188547484,12794688500614108562,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:8
                                                                                      4⤵
                                                                                        PID:6660
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,5605424664037519035,13138889841302685815,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
                                                                                        4⤵
                                                                                          PID:6808
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,3529686499921155803,7778660821813497051,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:8
                                                                                          4⤵
                                                                                            PID:6868
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,6284785701517556060,8164892925267553512,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:8
                                                                                            4⤵
                                                                                              PID:6716
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3552,i,15908736857224585215,14888181316732051261,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
                                                                                              4⤵
                                                                                                PID:5688
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3760,i,7563635992094311002,7405297604161211242,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:1
                                                                                                4⤵
                                                                                                  PID:6320
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7160,i,3563912945322557525,4386292733224866780,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:1
                                                                                                  4⤵
                                                                                                    PID:6760
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,9225156069191249996,6702675835861450738,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
                                                                                                    4⤵
                                                                                                      PID:3800
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe" "hypertune://etojijet/?code=VXu8U8S_3LQg"
                                                                                                      4⤵
                                                                                                      • Executes dropped EXE
                                                                                                      PID:7144
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7832,i,15360694713319737815,10630505934151707699,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
                                                                                                      4⤵
                                                                                                        PID:2820
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=776,i,4006579272307294314,15102964627201195531,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
                                                                                                        4⤵
                                                                                                          PID:4408
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=776,i,1165267214245571473,10843704517799283714,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:1
                                                                                                          4⤵
                                                                                                            PID:4436
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5864,i,18246308796080401562,17627504036611447762,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
                                                                                                            4⤵
                                                                                                              PID:4492
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe" "hypertune://ehuvedum/?code=srwE6fbOTMnT"
                                                                                                              4⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:6512
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,9957312157742921169,9836765643237518092,524288 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
                                                                                                              4⤵
                                                                                                                PID:2028
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5336,i,6715810762274575887,7642292330835520082,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:1
                                                                                                                4⤵
                                                                                                                  PID:6464
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4228,i,4088307990398565543,6163146157879204226,262144 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
                                                                                                                  4⤵
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:968
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7984,i,12726095985965896948,8010375358125673376,2097152 --field-trial-handle=2280,i,6030620268835463517,4870479001721932968,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
                                                                                                                  4⤵
                                                                                                                    PID:1760
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTuneLauncher.exe" "hypertune://ehuvedum/?code=El8yQlCY85L0"
                                                                                                                    4⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    PID:1280
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                              1⤵
                                                                                                                PID:5392
                                                                                                              • C:\Windows\explorer.exe
                                                                                                                C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                                                1⤵
                                                                                                                  PID:6036
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://app.hypertune.gg/device-challenge?code=VXu8U8S_3LQg&redirect_uri=hypertune%3a%2f%2fetojijet%2f
                                                                                                                    2⤵
                                                                                                                      PID:5632
                                                                                                                  • C:\Windows\system32\BackgroundTaskHost.exe
                                                                                                                    "C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
                                                                                                                    1⤵
                                                                                                                      PID:5408
                                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                      1⤵
                                                                                                                        PID:6364
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe"
                                                                                                                        1⤵
                                                                                                                        • Checks computer location settings
                                                                                                                        • Executes dropped EXE
                                                                                                                        • Modifies registry class
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:4220
                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                          "explorer" "https://app.hypertune.gg/device-challenge?code=srwE6fbOTMnT&redirect_uri=hypertune%3a%2f%2fehuvedum%2f"
                                                                                                                          2⤵
                                                                                                                            PID:7084
                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                            "explorer" "https://app.hypertune.gg/device-challenge?code=El8yQlCY85L0&redirect_uri=hypertune%3a%2f%2fehuvedum%2f"
                                                                                                                            2⤵
                                                                                                                              PID:5684
                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                            C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                                                            1⤵
                                                                                                                              PID:5868
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://app.hypertune.gg/device-challenge?code=srwE6fbOTMnT&redirect_uri=hypertune%3a%2f%2fehuvedum%2f
                                                                                                                                2⤵
                                                                                                                                  PID:2104
                                                                                                                              • C:\Windows\explorer.exe
                                                                                                                                C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                                                                1⤵
                                                                                                                                  PID:3356
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://app.hypertune.gg/device-challenge?code=El8yQlCY85L0&redirect_uri=hypertune%3a%2f%2fehuvedum%2f
                                                                                                                                    2⤵
                                                                                                                                      PID:6380

                                                                                                                                  Network

                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                        Reconnaissance

                                                                                                                                        Resource Development

                                                                                                                                        Initial Access

                                                                                                                                        Execution

                                                                                                                                        Persistence

                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                        1
                                                                                                                                        T1547

                                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                                        1
                                                                                                                                        T1547.001

                                                                                                                                        Create or Modify System Process

                                                                                                                                        1
                                                                                                                                        T1543

                                                                                                                                        Windows Service

                                                                                                                                        1
                                                                                                                                        T1543.003

                                                                                                                                        Event Triggered Execution

                                                                                                                                        1
                                                                                                                                        T1546

                                                                                                                                        Netsh Helper DLL

                                                                                                                                        1
                                                                                                                                        T1546.007

                                                                                                                                        Privilege Escalation

                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                        1
                                                                                                                                        T1547

                                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                                        1
                                                                                                                                        T1547.001

                                                                                                                                        Create or Modify System Process

                                                                                                                                        1
                                                                                                                                        T1543

                                                                                                                                        Windows Service

                                                                                                                                        1
                                                                                                                                        T1543.003

                                                                                                                                        Event Triggered Execution

                                                                                                                                        1
                                                                                                                                        T1546

                                                                                                                                        Netsh Helper DLL

                                                                                                                                        1
                                                                                                                                        T1546.007

                                                                                                                                        Defense Evasion

                                                                                                                                        Impair Defenses

                                                                                                                                        1
                                                                                                                                        T1562

                                                                                                                                        Disable or Modify System Firewall

                                                                                                                                        1
                                                                                                                                        T1562.004

                                                                                                                                        Modify Registry

                                                                                                                                        1
                                                                                                                                        T1112

                                                                                                                                        Credential Access

                                                                                                                                        Discovery

                                                                                                                                        Browser Information Discovery

                                                                                                                                        1
                                                                                                                                        T1217

                                                                                                                                        Peripheral Device Discovery

                                                                                                                                        2
                                                                                                                                        T1120

                                                                                                                                        Query Registry

                                                                                                                                        6
                                                                                                                                        T1012

                                                                                                                                        System Information Discovery

                                                                                                                                        6
                                                                                                                                        T1082

                                                                                                                                        System Location Discovery

                                                                                                                                        1
                                                                                                                                        T1614

                                                                                                                                        System Language Discovery

                                                                                                                                        1
                                                                                                                                        T1614.001

                                                                                                                                        System Time Discovery

                                                                                                                                        1
                                                                                                                                        T1124

                                                                                                                                        Lateral Movement

                                                                                                                                        Collection

                                                                                                                                        Command and Control

                                                                                                                                        Exfiltration

                                                                                                                                        Impact

                                                                                                                                        Replay Monitor

                                                                                                                                        Loading Replay Monitor...

                                                                                                                                        Downloads

                                                                                                                                        e587dd9.rbs
                                                                                                                                        • Path C:\Config.Msi\e587dd9.rbs
                                                                                                                                        • Size 56KB
                                                                                                                                        • SHA256 90e8c8f16616a2c681d81bec120077837def0d4bd4fbaf007f541ddc5adaa373
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587dde.rbs
                                                                                                                                        • Path C:\Config.Msi\e587dde.rbs
                                                                                                                                        • Size 9KB
                                                                                                                                        • SHA256 dc2f79d9977a89d9525c964131a05a1f480abe8042e2723c1f95d782fab62ced
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587de3.rbs
                                                                                                                                        • Path C:\Config.Msi\e587de3.rbs
                                                                                                                                        • Size 11KB
                                                                                                                                        • SHA256 4a8e3d1a47643f2d60f2cea53d5dc2503e0cdddf6a21ffe08657aa14a4da7590
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587de8.rbs
                                                                                                                                        • Path C:\Config.Msi\e587de8.rbs
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 81468be9dd6f46ca5e0ff83c34752cbf8ba14a85083f9be88682649f036c1891
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587dea.rbf
                                                                                                                                        • Path C:\Config.Msi\e587dea.rbf
                                                                                                                                        • Size 3B
                                                                                                                                        • SHA256 13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        e587ded.rbs
                                                                                                                                        • Path C:\Config.Msi\e587ded.rbs
                                                                                                                                        • Size 4KB
                                                                                                                                        • SHA256 2aa3c0a80a42b906b126e2b95291dddfdfbd5e64346b7254d30e0eddb7a57326
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587dee.rbf
                                                                                                                                        • Path C:\Config.Msi\e587dee.rbf
                                                                                                                                        • Size 136KB
                                                                                                                                        • SHA256 d4401f5fbdea869bb7211b00594746ef6962b7dd2bfceb749889b920070c3f9f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587df5.rbs
                                                                                                                                        • Path C:\Config.Msi\e587df5.rbs
                                                                                                                                        • Size 19KB
                                                                                                                                        • SHA256 b21eb38debfaa6f3e61ef7254ba32184dce9066063dadce7cb7df7e64f1c9a83
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587e01.rbs
                                                                                                                                        • Path C:\Config.Msi\e587e01.rbs
                                                                                                                                        • Size 19KB
                                                                                                                                        • SHA256 760823a5fab25b0f77c4bb59b69a28ca2db64c00bdfe5a2bcaad1e3581abc66b
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587e08.rbs
                                                                                                                                        • Path C:\Config.Msi\e587e08.rbs
                                                                                                                                        • Size 21KB
                                                                                                                                        • SHA256 fb3496b47998cc0da315ef09f5ae7df6359012b9fcceb32ef616756e86ed86a7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e587e17.rbs
                                                                                                                                        • Path C:\Config.Msi\e587e17.rbs
                                                                                                                                        • Size 21KB
                                                                                                                                        • SHA256 d5426c9fac24917f2178e3a3d820c1f9e5825297281aab8972902bc55685c0dd
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        manifest.json
                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3404_219024472\manifest.json
                                                                                                                                        • Size 43B
                                                                                                                                        • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        manifest.json
                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3404_577191660\manifest.json
                                                                                                                                        • Size 160B
                                                                                                                                        • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        manifest.json
                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3404_806840717\manifest.json
                                                                                                                                        • Size 135B
                                                                                                                                        • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        ThirdPartyNotices.txt
                                                                                                                                        • Path C:\Program Files\dotnet\ThirdPartyNotices.txt
                                                                                                                                        • Size 78KB
                                                                                                                                        • SHA256 d5db0ed54363e40717ae09e746dec99ad5b09223cc1273bb870703176dd226b7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        state.rsm
                                                                                                                                        • Path C:\ProgramData\Package Cache\{9d3fc73f-1cf4-412c-a1c9-d2ad28ccbd62}\state.rsm
                                                                                                                                        • Size 956B
                                                                                                                                        • SHA256 fd93f9b6ee8a6af5103487a08a02060347ec9bfbd15322e73cdc92bfc16b88f4
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        BookmarkMergedSurfaceOrdering
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                        • Size 6B
                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        BrowsingTopicsState
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                        • Size 414B
                                                                                                                                        • SHA256 5cf05a8d1cc00c3b7746d5523d749d61a59dc485bde520301ddec3dab80d6c98
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Network Persistent State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 3abff8acd9a127dac5f755a81a8fc80c3b68861d1063d5c622c6fc12879680d8
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Network Persistent State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 4953724957f9f7244f19e69699b92da0960a27446c14ffce8a76250652732bf0
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        SCT Auditing Pending Reports
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                        • Size 2B
                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        TransportSecurity
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                        • Size 523B
                                                                                                                                        • SHA256 9cc98feee4fb905d70a8b56515e5142701dd6bbfe804b454b8ddca6619006992
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                        • Size 12KB
                                                                                                                                        • SHA256 2f0bd8dcf8e39ac7cbe4e615979c305d86621c6f798c6cb22c643c7c8453d581
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Secure Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                        • Size 17KB
                                                                                                                                        • SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                        • Size 120B
                                                                                                                                        • SHA256 f5cc9d3130d1cd6f7eb55f5f91361182406b973c6f1ba2615571d2763d013945
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index~RFe5a06f6.TMP
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a06f6.TMP
                                                                                                                                        • Size 96B
                                                                                                                                        • SHA256 1d495a1391e8330939fbbf7082f7664ee01001dde3d94674929fec8c2a079f59
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                        • Size 115KB
                                                                                                                                        • SHA256 3b553c04c51e29ccfe8027c80b4ab0ad2e8a4fec2eca6ccb939d3d6f7a9a370f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                        • Size 232KB
                                                                                                                                        • SHA256 d435e2bd1ab1838a99954af01a27a553ce7dd7b419d9e6225461c23ebd970276
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                        • Size 233KB
                                                                                                                                        • SHA256 b0d35343a0d598c212f7947530887b8e5e146420715dfb2211c36f214f3b4087
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                        • Size 233KB
                                                                                                                                        • SHA256 0ab07c40a1cfca7d5cce018dd37cb9399abc16f8339350bc78239039376ca3a6
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                        • Size 232KB
                                                                                                                                        • SHA256 556163f61d6664b38e0744cf2832ea308df03747a8cf4bf51408ebcf5c38ccfa
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        data_1
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                                                                                        • Size 264KB
                                                                                                                                        • SHA256 e4cf75a8830295db9f1b16039993ef8e31ca5ab4d7021f8a1aa6e5b096a1f7a5
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        blocklist
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                        • Size 105KB
                                                                                                                                        • SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        protocols.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                        • Size 3KB
                                                                                                                                        • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        settings.dat
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                        • Size 280B
                                                                                                                                        • SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        settings.dat
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                        • Size 280B
                                                                                                                                        • SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000089
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                                                                                        • Size 47KB
                                                                                                                                        • SHA256 c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008a
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                                                                        • Size 27KB
                                                                                                                                        • SHA256 7ef38635edd0d68d390b595c3dd2f3ae55ff46e8fa6e2c4af54b2ffc766ac45d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008b
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                                                                        • Size 28KB
                                                                                                                                        • SHA256 0a27eba0276fcbd9af26cc8072eab03dfa0ae59f3a65d4ab4de3f2f3c998172d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008c
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                                                        • Size 18KB
                                                                                                                                        • SHA256 3128dbe4e187f1df799d7cb8dab1ff689a0815f20aa0b918fe2da51a467f905e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008d
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                                                                        • Size 16KB
                                                                                                                                        • SHA256 64a6aa2a6f9e7d7025acfdfc273e501c941751e6c0359975553b2472bb55943d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008e
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                                                                        • Size 20KB
                                                                                                                                        • SHA256 37b2cbe4d2504557f5c5371412c341240966a7b1630ac9b831d7fd26568ad540
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00008f
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                                                                        • Size 138KB
                                                                                                                                        • SHA256 ec204a66e773f288ee7f6e1536223c5f5cffafcf974bb4de698119619ee86c89
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000090
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                                                                                        • Size 85KB
                                                                                                                                        • SHA256 9085b9fe41f66ed957ca693fc2fcbb257ed61c415ff0c66224bd19187241e90d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000091
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                                                                                        • Size 19KB
                                                                                                                                        • SHA256 d35393d42813ee2fc5733a4423776326006dc5eafa83b6d73c6cbcf4966b6e28
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000092
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                                                                                        • Size 42KB
                                                                                                                                        • SHA256 ea88bddd84e8f4ebb6d7220c3aa30acb5f8721c7f77c9d61ad23622e57bcdd66
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000094
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                                                                                        • Size 118KB
                                                                                                                                        • SHA256 de8160d611df9a3172bba158e0c7910df22120290ad19b94d04f6f4cd6c8b22d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000095
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                                                                        • Size 46KB
                                                                                                                                        • SHA256 a0a3bbaed59372976ea6136b68d89c5d1f12804e7e9af49e6291c0f88e562a6f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_000099
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                                                        • Size 98KB
                                                                                                                                        • SHA256 8ff18c4a2606aa14865f7740c1b8f187e59103d62892351e73c9d2cee44d579d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00009a
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                                                                        • Size 56KB
                                                                                                                                        • SHA256 9701a5a7a8562bab79c7194fcc6d3a2211c20ab813c747126c450a7219a35667
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00009b
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                                                                                        • Size 77KB
                                                                                                                                        • SHA256 b53bca4bea219ba9b4d5457cfe7512e732a36c0f052c94ba36c6afca2b2cf6d7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_00009c
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                                                        • Size 24KB
                                                                                                                                        • SHA256 3096c47012a7255879304054c9d8d260fd67a0f4b3fdffae385fda6d519856e6
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        f_0000a3
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                                                        • Size 373KB
                                                                                                                                        • SHA256 a5c27d3298042314d98634f85836ab0c48cbdf572ee676981a852c3e18738d8e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 ddcc4d7a9ba81a53fd04d2a6a199ea91b4a8291ea1a5e605717360833cf7128e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        the-real-index~RFe5afeb4.TMP
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5afeb4.TMP
                                                                                                                                        • Size 3KB
                                                                                                                                        • SHA256 5d948f84fb3ca3df7818be3089c0dc453e01222c54f5e192b617b04d7be812d2
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        SiteList-Enterprise.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                        • Size 2B
                                                                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        Edge Profile.ico
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                        • Size 70KB
                                                                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        HubApps
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                        • Size 106KB
                                                                                                                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Network Persistent State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                        • Size 111B
                                                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Network Persistent State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                        • Size 10KB
                                                                                                                                        • SHA256 c815c9584de0c8ad0724e7cdb3768fd8207e32295e08db786fcb6b321ec21b9f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                        • Size 14KB
                                                                                                                                        • SHA256 533d9550bcbfaf95a29453a64c7cbad214cb8f95673ec1bd0ef05c0fe93a4045
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                        • Size 17KB
                                                                                                                                        • SHA256 d88919c32aa54e3a1382d952acba97799b05afd6014175810484c57b0c5a6fa3
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                        • Size 17KB
                                                                                                                                        • SHA256 f760af5ebca9e7041543a7efd3d04b91cc2e83a7dd2d64f9b73b614af79100c5
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                        • Size 15KB
                                                                                                                                        • SHA256 afdee527dc047097be69cf49a04eda541da806f88c426ebc26e731dad96b5a4f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Secure Preferences
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                        • Size 30KB
                                                                                                                                        • SHA256 1c2bbbca9b21dcda1be8a673cfa778b1bb5b86fa6ae1f04cabef36fa65f247b9
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        sync_diagnostic.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                        • Size 6KB
                                                                                                                                        • SHA256 269588e03e3552564b72367f7b7058c6f6ee1c46df1dfe7570ed8b0770fbc37e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        000003.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000003.log
                                                                                                                                        • Size 28KB
                                                                                                                                        • SHA256 e557de025b122ed03888125365164e2095851ebeb471af478728d812c7301e48
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        CURRENT
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\CURRENT
                                                                                                                                        • Size 16B
                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        LOG
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\LOG
                                                                                                                                        • Size 329B
                                                                                                                                        • SHA256 14581d933ace322b5a9441a91df8c06612840702e4314906194eb28a8f609eb2
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        MANIFEST-000001
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                                                                                                                        • Size 23B
                                                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        3c850516-8f9a-4f84-8172-117c076a19f0.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3c850516-8f9a-4f84-8172-117c076a19f0.tmp
                                                                                                                                        • Size 22KB
                                                                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 f9b20d12f33d3960d135dd5bb1e2eff9222985876608065d6589451daf42538a
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 30KB
                                                                                                                                        • SHA256 d9be9bbd8878488b267e31832af36cdde365afa0928ae31d51de63901c2a3ebb
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 8KB
                                                                                                                                        • SHA256 d6a47465f34bd39524cee4ea0ef0ac8ea54b57ba3b45eed3d67bc146e6072de8
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 19KB
                                                                                                                                        • SHA256 f126773ab5377afcf2f99b6936557152d1ca5f10e4323dfed7c9d98820b1f66a
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 30KB
                                                                                                                                        • SHA256 5c42f99d2fee8eeec728cb7db8c9e7f4750aa04b902dd249bb3a8464b6ae1b60
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 30KB
                                                                                                                                        • SHA256 44d143380309b79274dc9fcfe4b101e87c77f1ca9f58a54905ffd671c2eb4a53
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 25KB
                                                                                                                                        • SHA256 f3d3cddee971a8077666a39cbd46482d53dfc3e4fc6911ba13771b8c55515e12
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 19KB
                                                                                                                                        • SHA256 fab6b9a15d9d45e7eb211ada2f29f35ccadc79f684ae6c13d5b23b2c9e874aee
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Local State
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                        • Size 12KB
                                                                                                                                        • SHA256 47c7b8a01ed06964e6d459b6898142aeff17a2f392fcd1829efbbf4b0d3202aa
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        RevisitationBloomfilter
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                        • Size 392B
                                                                                                                                        • SHA256 e449e2a448bf7c1ef323a15adf88600170f8b3c4759e9cc15c1ba8374c3da8ce
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        RevisitationBloomfilter
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                        • Size 392B
                                                                                                                                        • SHA256 2bd88c3445b0a451266d2286678af7321163b93482b2790d8a2898883c5937f2
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        RevisitationBloomfilter
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                        • Size 392B
                                                                                                                                        • SHA256 c450cc10246e782a93d0a7b65544117ef7200b116391c23d2fa61b7cf0a6c7ad
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        RevisitationBloomfilter
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                        • Size 392B
                                                                                                                                        • SHA256 3ea1b3c9e33fac6092348d10f3f755e38d2f00dbcf0a42b4c8ad8ea36972373d
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        RevisitationBloomfilter~RFe5a8e86.TMP
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a8e86.TMP
                                                                                                                                        • Size 392B
                                                                                                                                        • SHA256 a12d555eb2efcc793bfd26d084a417e13d32156ca8f7d67d29317e57c05321cc
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        nav_config.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        metadata.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                        • Size 372B
                                                                                                                                        • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        metadata.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                        • Size 252B
                                                                                                                                        • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        metadata.json
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                        • Size 132B
                                                                                                                                        • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        ca5cbf5d-fbe3-4517-938f-d807192df827.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ca5cbf5d-fbe3-4517-938f-d807192df827.tmp
                                                                                                                                        • Size 13B
                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 0cc46435b9b0c883f1890186dbc36862e018f0075240d8708ed1cb86ad179f8b
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        is-HU74CMON6S.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\3p\GameDetection\is-HU74CMON6S.tmp
                                                                                                                                        • Size 1.3MB
                                                                                                                                        • SHA256 97468531d7009e36c338b47fb19e0c6bf210f013610f413c852a4cc27e84b514
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        is-EJU15OC3ZA.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\3p\Intel\IntelUltra\is-EJU15OC3ZA.tmp
                                                                                                                                        • Size 43KB
                                                                                                                                        • SHA256 5baaaeb6f9aa233e0895b8767c967af99a61e6dfe66c178a0e2b3194e354f511
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        HyperTune.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\HyperTune.exe
                                                                                                                                        • Size 260KB
                                                                                                                                        • SHA256 0300632062ab846da676c1802a26c7c27b7a8d163cf070ca40a0d577f20b8d84
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        setup.ini
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\rundata\setup.ini
                                                                                                                                        • Size 65B
                                                                                                                                        • SHA256 c0bd32c99465703618536db19873a69670d6203b9077dfd4ba3b82022b8b5838
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vault.realm.lock
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\CompReady\HyperTune\rundata\vault\vault.realm.lock
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 333639ad2d99b4adf4de43ec2eb79d5b8409c09161b030c08c1487e870d4c28b
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        85605471-41bb-4e9e-988b-a72cbbc0a944.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\85605471-41bb-4e9e-988b-a72cbbc0a944.tmp
                                                                                                                                        • Size 10KB
                                                                                                                                        • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        HWiNFO_x64_215.sys
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_215.sys
                                                                                                                                        • Size 58KB
                                                                                                                                        • SHA256 cc9d399816d0f04548545fa2cc4bb9e8d141624601ac271315cbe92f6e763a1e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_000_dotnet_runtime_6.0.36_win_x64.msi.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_000_dotnet_runtime_6.0.36_win_x64.msi.log
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 9a14f494338c50bd8d987f38f0c708bfd71cc0da9c96d9fd0cc06de29f27fcdd
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_001_dotnet_hostfxr_6.0.36_win_x64.msi.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_001_dotnet_hostfxr_6.0.36_win_x64.msi.log
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 772e1c8f7c1aa08687f0d020a4f4276578934cd08d8aca0ba6268d0d4cbd7342
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_002_dotnet_host_6.0.36_win_x64.msi.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.36_(x64)_20260714053439_002_dotnet_host_6.0.36_win_x64.msi.log
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 85a6ec9a8eeb6e9d124f45c48f46b171167ae3e2e69e63021f36f14d0241e185
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dd_vcredist_amd64_20260714053453.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260714053453.log
                                                                                                                                        • Size 12KB
                                                                                                                                        • SHA256 d9a965fc38da39bd388d962e1ccd10749a19bd9fcc863a50d3da6dec17b9d556
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dd_vcredist_amd64_20260714053453_000_vcRuntimeMinimum_x64.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260714053453_000_vcRuntimeMinimum_x64.log
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 93270755200014eb8d0aed45109c923d1b1f8d58a5c5f84d947921e1a9364bea
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dd_vcredist_amd64_20260714053453_001_vcRuntimeAdditional_x64.log
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260714053453_001_vcRuntimeAdditional_x64.log
                                                                                                                                        • Size 2KB
                                                                                                                                        • SHA256 e5a034267b6eeabf468924a4f361fd18cd3540c3db160ded328249268bc8575c
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        e8e18cab-a5ca-422e-94f0-42740317e8ad.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\e8e18cab-a5ca-422e-94f0-42740317e8ad.tmp
                                                                                                                                        • Size 1B
                                                                                                                                        • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                        Submit Download

                                                                                                                                        hypertune-setup-2.3.0.18.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\is-7KSZLTM6BZ.tmp\hypertune-setup-2.3.0.18.tmp
                                                                                                                                        • Size 4.2MB
                                                                                                                                        • SHA256 028b39229c791bd4089579f4a663ed3d24f4effeda1c6a1e462a946996e44ef7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dotnet60_x64.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\dotnet60_x64.exe
                                                                                                                                        • Size 26.8MB
                                                                                                                                        • SHA256 6bdad7bc4c41fe93d4ae7b0312b1d017cfe369d28e7e2e421f5b675f9feefe84
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vcredist2022_x64.exe
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\is-CY4771JBX0.tmp\vcredist2022_x64.exe
                                                                                                                                        • Size 17.9MB
                                                                                                                                        • SHA256 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        content_new.js
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3404_1248668446\CRX_INSTALL\content_new.js
                                                                                                                                        • Size 10KB
                                                                                                                                        • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        b989d1f1-11c6-4d7f-8ce1-8430bd461725.tmp
                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3404_841996328\b989d1f1-11c6-4d7f-8ce1-8430bd461725.tmp
                                                                                                                                        • Size 152KB
                                                                                                                                        • SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        MSI8028.tmp
                                                                                                                                        • Path C:\Windows\Installer\MSI8028.tmp
                                                                                                                                        • Size 219KB
                                                                                                                                        • SHA256 2bf33a9b9980e44d21d48f04cc6ac4eed4c68f207bd5990b7d3254a310b944ae
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        MSIA338.tmp
                                                                                                                                        • Path C:\Windows\Installer\MSIA338.tmp
                                                                                                                                        • Size 225KB
                                                                                                                                        • SHA256 3d855b58ce7da9f24f1bef8d0673ba4a97105a7fd88433de7fb4e156b4306283
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        bg.png
                                                                                                                                        • Path C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\.ba\bg.png
                                                                                                                                        • Size 4KB
                                                                                                                                        • SHA256 9095bf7b6baa0107b40a4a6d727215be077133a190f4ca9bd89a176842141e79
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        wixstdba.dll
                                                                                                                                        • Path C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\.ba\wixstdba.dll
                                                                                                                                        • Size 190KB
                                                                                                                                        • SHA256 dcea15f3710822ffc262e62ec04cc7bbbf0f33f5d1a853609fbfb65cb6a45640
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dotnet_host_6.0.36_win_x64.msi
                                                                                                                                        • Path C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\dotnet_host_6.0.36_win_x64.msi
                                                                                                                                        • Size 716KB
                                                                                                                                        • SHA256 f73830d5f64e7a920aef8ae2c101b3dea69a5feb47c10d1d6b2141235c4156ae
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dotnet_hostfxr_6.0.36_win_x64.msi
                                                                                                                                        • Path C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\dotnet_hostfxr_6.0.36_win_x64.msi
                                                                                                                                        • Size 780KB
                                                                                                                                        • SHA256 ccb99abeb554c877236697168ad75bf6fb905c986ddbdb463a8e16cf430a1c0d
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dotnet_runtime_6.0.36_win_x64.msi
                                                                                                                                        • Path C:\Windows\Temp\{040B142B-C6C6-49C1-B3FC-C0FD2AB94273}\dotnet_runtime_6.0.36_win_x64.msi
                                                                                                                                        • Size 25.9MB
                                                                                                                                        • SHA256 db92e057f649d4804d3a758aedade71a3b63991ca318077d4340e47c4bdba8e7
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vcredist2022_x64.exe
                                                                                                                                        • Path C:\Windows\Temp\{055896FB-F76C-4807-AC69-176D7543607C}\.cr\vcredist2022_x64.exe
                                                                                                                                        • Size 615KB
                                                                                                                                        • SHA256 dbcc159853d8b83c1df0a0a698127ab98e926af1b6dee86e96f541dc94b34948
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        dotnet60_x64.exe
                                                                                                                                        • Path C:\Windows\Temp\{70255356-976C-4A2A-AE5E-CEE51880318F}\.cr\dotnet60_x64.exe
                                                                                                                                        • Size 607KB
                                                                                                                                        • SHA256 5ac56fcb09a960d3ee116443c937df9bfb0f10e46474403715aef60dd3fd2587
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        thm.wxl
                                                                                                                                        • Path C:\Windows\Temp\{F3DD54DC-9A4D-437E-8375-5B7322446AD6}\.ba\1033\thm.wxl
                                                                                                                                        • Size 5KB
                                                                                                                                        • SHA256 835aa38b22480e84ccdf9f925ef2cd640e015bc2077674a6313c5175ea3db5be
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        wixstdba.dll
                                                                                                                                        • Path C:\Windows\Temp\{FBBDE993-7F0C-413F-A7FD-D3301C7C8549}\.ba\wixstdba.dll
                                                                                                                                        • Size 191KB
                                                                                                                                        • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        logo.png
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\.ba\logo.png
                                                                                                                                        • Size 1KB
                                                                                                                                        • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                        Submit Download

                                                                                                                                        wixstdba.dll
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\.ba\wixstdba.dll
                                                                                                                                        • Size 215KB
                                                                                                                                        • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        cab2C04DDC374BD96EB5C8EB8208F2C7C92
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                                                                                                                                        • Size 5.4MB
                                                                                                                                        • SHA256 19c0cdc59ae89d0491c025a966f6d40515adc2449af40f2c6c6f52e2f293ad1c
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        cab5046A8AB272BF37297BB7928664C9503
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\cab5046A8AB272BF37297BB7928664C9503
                                                                                                                                        • Size 1.0MB
                                                                                                                                        • SHA256 6e8ee73933678c55973e83366e48e948b394c7a36743a36b7224c95de979b13f
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vcRuntimeAdditional_x64
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\vcRuntimeAdditional_x64
                                                                                                                                        • Size 208KB
                                                                                                                                        • SHA256 476427800c1c958dc4e71d9a0f2f3983b2608da70835db9ee5f3b8ac387e9617
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        vcRuntimeMinimum_x64
                                                                                                                                        • Path C:\Windows\Temp\{FDC8F7D3-C5D4-4580-A8C7-97E0E2D204CF}\vcRuntimeMinimum_x64
                                                                                                                                        • Size 208KB
                                                                                                                                        • SHA256 bab5d0257e6a18a4a008e683442e3077b38172dd61af3cb1c588b46724a714e2
                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                        Submit Download

                                                                                                                                        memory/516-2459-0x0000000000710000-0x0000000000804000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/516-7-0x0000000000710000-0x0000000000804000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/516-1-0x0000000000710000-0x0000000000804000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/2176-753-0x0000000000880000-0x00000000008F7000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-1420-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-9-0x0000000001890000-0x0000000001891000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-98-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-5-0x0000000001890000-0x0000000001891000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-601-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-2447-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-2458-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-2064-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3004-8-0x00000000000D0000-0x000000000051F000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/3964-755-0x0000000000880000-0x00000000008F7000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/4220-4004-0x0000000180000000-0x000000018069C000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/4220-3962-0x0000000180000000-0x000000018069C000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/4220-4147-0x0000000180000000-0x000000018069C000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/4220-4171-0x0000000180000000-0x000000018069C000-memory.dmp
                                                                                                                                        Download

                                                                                                                                        memory/4392-756-0x0000000000880000-0x00000000008F7000-memory.dmp
                                                                                                                                        Download