hxxps://www[.]mediafire[.]com/file/7nf77rfwokgb7y6/%F0%9D%9F%8E%F0%9D%90%8F%F0%9D%90%84%F0%9D%90%8D_%F0%9D%90%92%F0%9D%90%84%F0%9D%90%93%F0%9D%90%94%F0%9D%90%8F[.]zip/file

Analysis

user interaction
yes
max time kernel
285s
max time network
287s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 12:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/7nf77rfwokgb7y6/%F0%9D%9F%8E%F0%9D%90%8F%F0%9D%90%84%F0%9D%90%8D_%F0%9D%90%92%F0%9D%90%84%F0%9D%90%93%F0%9D%90%94%F0%9D%90%8F.zip/file
Sample260718-p52eksft6y

Score

10^/10

discovery spyware stealer

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 6816 created 3260	6816	Setup.exe	56

Executes dropped EXE 2 IoCs

pid	Process
6816	Setup.exe
10140	Setup.exe

Loads dropped DLL 4 IoCs

pid	Process
6816	Setup.exe
6816	Setup.exe
10140	Setup.exe
10140	Setup.exe

Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs

pid	Process
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
10140	Setup.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4636	msedge.exe
17296	chrome.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288529480334598"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{82509AFC-8C6B-4468-B498-B80A1D4852C7}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
6816	Setup.exe
2620	msedge.exe
2620	msedge.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
17068	chrome.exe
17068	chrome.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe
6816	Setup.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
9452	taskmgr.exe

Suspicious behavior: MapViewOfSection 2 IoCs

pid	Process
6816	Setup.exe
6816	Setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

description	pid	Process
Token: SeRestorePrivilege	988	7zG.exe
Token: 35	988	7zG.exe
Token: SeSecurityPrivilege	988	7zG.exe
Token: SeSecurityPrivilege	988	7zG.exe
Token: SeRestorePrivilege	5460	7zG.exe
Token: 35	5460	7zG.exe
Token: SeSecurityPrivilege	5460	7zG.exe
Token: SeSecurityPrivilege	5460	7zG.exe
Token: SeDebugPrivilege	9452	taskmgr.exe
Token: SeSystemProfilePrivilege	9452	taskmgr.exe
Token: SeCreateGlobalPrivilege	9452	taskmgr.exe
Token: 33	9452	taskmgr.exe
Token: SeIncBasePriorityPrivilege	9452	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
988	7zG.exe
5460	7zG.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe
17068	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe
9452	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3660 wrote to memory of 3956	3660	msedge.exe	88
PID 3660 wrote to memory of 4636	3660	msedge.exe	89
PID 3660 wrote to memory of 2540	3660	msedge.exe	90
PID 3660 wrote to memory of 2540	3660	msedge.exe	90
PID 3660 wrote to memory of 2540	3660	msedge.exe	90
PID 3660 wrote to memory of 4280	3660	msedge.exe	91
PID 3660 wrote to memory of 4280	3660	msedge.exe	91
PID 3660 wrote to memory of 656	3660	msedge.exe	93
PID 3660 wrote to memory of 4972	3660	msedge.exe	94
PID 3660 wrote to memory of 656	3660	msedge.exe	93
PID 3660 wrote to memory of 656	3660	msedge.exe	93
PID 3660 wrote to memory of 4972	3660	msedge.exe	94
PID 3660 wrote to memory of 4972	3660	msedge.exe	94
PID 3660 wrote to memory of 3344	3660	msedge.exe	95
PID 3660 wrote to memory of 2988	3660	msedge.exe	96
PID 3660 wrote to memory of 3344	3660	msedge.exe	95
PID 3660 wrote to memory of 3344	3660	msedge.exe	95
PID 3660 wrote to memory of 2988	3660	msedge.exe	96
PID 3660 wrote to memory of 2988	3660	msedge.exe	96
PID 3660 wrote to memory of 3252	3660	msedge.exe	98
PID 3660 wrote to memory of 3252	3660	msedge.exe	98
PID 3660 wrote to memory of 3252	3660	msedge.exe	98
PID 3660 wrote to memory of 1992	3660	msedge.exe	99
PID 3660 wrote to memory of 1992	3660	msedge.exe	99
PID 3660 wrote to memory of 1992	3660	msedge.exe	99
PID 3660 wrote to memory of 4676	3660	msedge.exe	101
PID 3660 wrote to memory of 1808	3660	msedge.exe	102
PID 3660 wrote to memory of 4676	3660	msedge.exe	101
PID 3660 wrote to memory of 1808	3660	msedge.exe	102
PID 3660 wrote to memory of 4020	3660	msedge.exe	103
PID 3660 wrote to memory of 4020	3660	msedge.exe	103
PID 3660 wrote to memory of 4020	3660	msedge.exe	103
PID 3660 wrote to memory of 4356	3660	msedge.exe	105
PID 3660 wrote to memory of 984	3660	msedge.exe	111
PID 3660 wrote to memory of 984	3660	msedge.exe	111
PID 3660 wrote to memory of 984	3660	msedge.exe	111
PID 3660 wrote to memory of 804	3660	msedge.exe	112
PID 3660 wrote to memory of 804	3660	msedge.exe	112
PID 3660 wrote to memory of 804	3660	msedge.exe	112
PID 3660 wrote to memory of 3720	3660	msedge.exe	113
PID 3660 wrote to memory of 3720	3660	msedge.exe	113
PID 3660 wrote to memory of 3720	3660	msedge.exe	113
PID 3660 wrote to memory of 3796	3660	msedge.exe	114
PID 3660 wrote to memory of 3796	3660	msedge.exe	114
PID 3660 wrote to memory of 3796	3660	msedge.exe	114
PID 3660 wrote to memory of 652	3660	msedge.exe	115
PID 3660 wrote to memory of 652	3660	msedge.exe	115
PID 3660 wrote to memory of 652	3660	msedge.exe	115
PID 3660 wrote to memory of 1540	3660	msedge.exe	116
PID 3660 wrote to memory of 1540	3660	msedge.exe	116
PID 3660 wrote to memory of 1540	3660	msedge.exe	116
PID 3660 wrote to memory of 5200	3660	msedge.exe	118
PID 3660 wrote to memory of 5200	3660	msedge.exe	118
PID 3660 wrote to memory of 5200	3660	msedge.exe	118
PID 3660 wrote to memory of 5284	3660	msedge.exe	119
PID 3660 wrote to memory of 5292	3660	msedge.exe	120
PID 3660 wrote to memory of 5284	3660	msedge.exe	119
PID 3660 wrote to memory of 5292	3660	msedge.exe	120
PID 3660 wrote to memory of 5292	3660	msedge.exe	120
PID 3660 wrote to memory of 5368	3660	msedge.exe	121
PID 3660 wrote to memory of 5368	3660	msedge.exe	121
PID 3660 wrote to memory of 5368	3660	msedge.exe	121
PID 3660 wrote to memory of 5384	3660	msedge.exe	123
PID 3660 wrote to memory of 6016	3660	msedge.exe	127

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/7nf77rfwokgb7y6/%F0%9D%9F%8E%F0%9D%90%8F%F0%9D%90%84%F0%9D%90%8D_%F0%9D%90%92%F0%9D%90%84%F0%9D%90%93%F0%9D%90%94%F0%9D%90%8F.zip/file
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbd12cc188,0x7ffbd12cc194,0x7ffbd12cc1a0
    3⤵
    PID:3956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,2059737390828178223,2492723892636046860,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,13686835943142132347,4171610575499362438,262144 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
    3⤵
    PID:2540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,11625404362746224218,2308480806393566588,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8434660628245535313,742206282719654856,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
    3⤵
    PID:656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,15293623233844752392,5371351865679936355,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
    3⤵
    PID:4972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,12927225785255110833,7479593726933572033,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
    3⤵
    PID:3344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,288460942244838827,6568433878162673223,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
    3⤵
    PID:2988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5016,i,7999943155512896034,13382690630821067680,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:1
    3⤵
    PID:3252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5268,i,7747629928336163520,10950910309116888207,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
    3⤵
    PID:1992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,17895060838181148248,4781665244410194484,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
    3⤵
    PID:4676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,12453069795811033388,5280167509142351569,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
    3⤵
    PID:1808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5952,i,8005280032291312290,2015719672827350276,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:1
    3⤵
    PID:4020
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,12029640992997488116,1473282727915422470,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,12029640992997488116,1473282727915422470,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
    3⤵
    PID:4356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5340,i,9826720087604729171,2961223163242263027,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
    3⤵
    PID:984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3580,i,15708247037459323601,2532531981242673735,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
    3⤵
    PID:804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6892,i,14716146592032718447,5504102328637781864,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
    3⤵
    PID:3720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7000,i,6788434778559885270,16946145879145372441,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:1
    3⤵
    PID:3796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7128,i,8158852132918686905,12711147871147208880,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:1
    3⤵
    PID:652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7284,i,13937248361723020906,8077453472056423322,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
    3⤵
    PID:1540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7608,i,2128713823414580957,2209839823833925874,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
    3⤵
    PID:5200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7752,i,7060309513870145691,7607440672329924493,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
    3⤵
    PID:5284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7804,i,16023518161650868789,3413108985271990883,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1
    3⤵
    PID:5292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5276,i,11871623604327857589,16203701504114244016,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
    3⤵
    PID:5368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,16327197370436594854,1658638744187401422,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:8
    3⤵
    PID:5384
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7416,i,1373952086399896320,1167149449746997716,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
    3⤵
    PID:6008
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7416,i,1373952086399896320,1167149449746997716,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
    3⤵
    PID:6016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7052,i,69578626039710009,13047529244301209319,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:8
    3⤵
    PID:5700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,3151605252330784551,6207533106656524702,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,18268624367614570362,15281906364442140410,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:8
    3⤵
    PID:5712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7076,i,9507072231605689942,15630992061588444463,2097152 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
    3⤵
    PID:3984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,2591436490621682828,10008793217686753499,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7996 /prefetch:8
    3⤵
    PID:5348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7036,i,5596121003891084483,6099359448995949531,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:8
    3⤵
    PID:5956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,16347657360364905234,3269471569496731397,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
    3⤵
    PID:6092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6720,i,11220975395606719322,229985453892088544,262144 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,5367573056482459697,13778292637620580057,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:8
    3⤵
    PID:9736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6984,i,1934182642283200737,11951527180457823085,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:8
    3⤵
    PID:9744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,9857524056327937738,5700672461928072062,524288 --field-trial-handle=2184,i,3071361646414603172,3848277082921732160,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
    3⤵
    PID:9852
- C:\Program Files\7-Zip\7zG.exe
  "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\" -spe -an -ai#7zMap19114:100:7zEvent6316
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:988
- C:\Program Files\7-Zip\7zG.exe
  "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\" -spe -an -ai#7zMap4277:112:7zEvent18693
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:5460
- C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setup.exe
  "C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setup.exe"
  2⤵
  - Suspicious use of NtCreateUserProcessOtherParentProcess
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: MapViewOfSection
  PID:6816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-first-run --disable-fre --no-default-browser-check --disable-background-networking --disable-sync --disable-gpu --mute-audio --new-window
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  PID:17068
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbceb3c728,0x7ffbceb3c734,0x7ffbceb3c740
    3⤵
    PID:17084
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1704,i,7326703719286872215,2145380623096921500,262144 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1872 /prefetch:2
    3⤵
    PID:17288
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=1516,i,6532631574476246981,4277973867335867596,524288 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2020 /prefetch:3
    3⤵
    - System Time Discovery
    PID:17296
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=2316,i,5871210237061426194,2573817560540714818,524288 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2488 /prefetch:8
    3⤵
    PID:17380
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3096,i,6383201277376224986,12608942291769186294,2097152 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3112 /prefetch:1
    3⤵
    PID:2060
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3116,i,10221452365098041632,8660823997822147631,2097152 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3124 /prefetch:1
    3⤵
    PID:3172
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4124,i,18233438578660776118,2730927514898691517,2097152 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4160 /prefetch:2
    3⤵
    PID:4980
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4552,i,13897586005674687235,2574361852279405347,2097152 --field-trial-handle=1876,i,15606296533195756658,13425036348523246644,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4596 /prefetch:1
    3⤵
    PID:5000
- C:\Windows\system32\taskmgr.exe
  "C:\Windows\system32\taskmgr.exe" /4
  2⤵
  - Checks SCSI registry key(s)
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SendNotifyMessage
  PID:9452
- C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setup.exe
  "C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  PID:10140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1388

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5640

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:17308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ab6528b423aec7a116322b07bd87bf49a21bf2264b2f90a9a961ff0608ad96cf
MD5 2c4aefab05e6d86fc65d35800c65b6c7
SHA1 528b997869d44fae9a88821841f7fe4ec0e83752
SHA512 39b7773ce5cc680ac714612d8e020ff45e07c21d4e7f38b9c7fb677d79024052950adb48799a02be1b77d6d902701205f63d05bb419e4eaeab3f8c65a5400b3d
SSDEEP 3072:AqGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Cm7Rkm1tYpBeh2BAog
TLSH
T144C3023B5D75EC3B5CB5A74EB08E0B1E2EF149B6C920DE9288D85A0437F97CD0A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8b98c8b6b381e81c2bbf54b9caa68f2c18c9e88f35c3a0ec4606ce6913bec6fb
MD5 63bf6d0df9b19fddac83abae873ac109
SHA1 5dd25151b771fd9586d645e48a09c3c90206c6bb
SHA512 e66a1dca651cf59894f7ab0cd8a741d4d6514106675ff2869a2da724d152ec5ba25cd4d2730c51475df230cad415588165a556047cfbef5d2717e3e00337d474
TLSH
T11ED0A720773978C2D2291071E4224B4076AD54B6215A82466254840D5C7A4C696CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 2bf068dcfd9564d73eca859de79043d20c3f7bf06136984c81efe26dff2fdc25
MD5 fe33b02b17ef4629249ee99d4eb82bb2
SHA1 927134cb27890fbe1f64aa1908f7d803cfb4264c
SHA512 bede35b6d76ccd3aada11edd9dd2952614f0e8e8e86a47d827fc1488ad63b83d8ce02adcfb8a92eed1862efaf4e7903845790e444152753d5bdc1382829fbefb
TLSH
T1C2E0268516E8C26E93C5B54B91BC570D82C13A0EB2CC6F0E1B049898B001AC0A3C3690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 5b3cda3f3599a539a2b1567395a5b8b8ca1c78114d2b9e81b8f05c094ba9ef0d
MD5 e921c057d62cd4c30959653e2c69881b
SHA1 cb124aad4c5b6cf8c69b6c05ff3bb4e5fd2e0194
SHA512 ff80ccaf8ebd8cb953e488ba5b46cdaaadc90243ee739533b4669f56d0c51d737c9ba2f9000b0588c2453691c84d2b2f3407ce6cdc749d452e2a7abd33afc83c
TLSH
T144E0264533E4CEF60783BB87805DA32C4392BA49FA9E8F5E32867C9C284048853BA4D0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 15468e787f4a376b6a6709f1a22204b7f8c6b1d25e5ba01d2d0806e721f1b7c8
MD5 2840fd48cf7bf64a611767bb33537a65
SHA1 c8ccb7904343970bdd2fd219dd402bd3092d7ab4
SHA512 2fc61008e688707faab973be85b99144666ca6d215cc894861343ede5aa2509a60a081462edf70e54b1e8f58e879d8bf86e82c1dd1b3c3231090f59189608c3e
SSDEEP 96:W2kL/W8hyltkDw3TApMlWjtTf1cbaeC+S4Myfwz:UL/nEltkDwDA6lWltGQ+Nhfwz
TLSH
T109B1EEF722750499EB1DE9B070E2559B3D32B9F9FC9F2E4A80E09934B5C3BA44D07129
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592adf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592adf.TMP
Size 3KB
SHA256 c91da7c42db9b3b87c8fb7bc9a6301238f87f068830318b82139484181f37bc8
MD5 4d0d2b0be67e46f094a0bab288072fc3
SHA1 1b7df1ddd503c8b281b1af75348b4ab8489ed01e
SHA512 e3216c10bf760b6a83228dbedbf1ab8cca70b2236cfdd089061d929053161ec2105544df8145918534f7c0e72bd5fd7227c0648bef0771a1b75e69979876e46d
TLSH
T19571B6F54279489DFB69DCB070F181023531B9F9FCAF2E9680D0EA387A92354990B13C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 92ebdff3edddb6f01d883cb05ebc34cc69234a1d4ff9ad7ab3936f96b8d697d0
MD5 79a51d64a5be91bf8af575270c24fd68
SHA1 466da2c7dce8c1b5e2e1f2c76d91b88a4f97cf8f
SHA512 4f68c69c80d1c7bc533e38f21fb7d261d8b117bbeff736e207545491e4eeabca6e602199485e162d4884dba5c0c3859391d147e847db811dd2ea8072edd30695
SSDEEP 384:D02PPw7xCo9UHt7mReukG8DpUJUBeDEBmPRZJ5yOyk4qYm4H59sLAY+YpYvdixSy:44ACQgNxKb21/2NLjXxu7Ird
TLSH
T14CA289F783E5D52E891117F85A14AE1BCF1D1725432C3C2688D5EE8BE3E2432E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d4e8847043c0d170c13f041a7e9a2f760877dd97939411709e570e083801d0ec
MD5 96dadf7eebffe7ec87869d2c3ca9dbb4
SHA1 e6c83aa9e6d6f788b262b48f88aeadeda0147d09
SHA512 91fb7df7926e0ead49ebd125329ca861e673638f8088c986eab59b8a78d2ce97ab8e6882c9ad5d0389ed75351ea63b2bc9b4b9ecbdd2bb146011a1940d10a070
SSDEEP 192:sxZvRAyM/jK1Ml8MkB/fJs02pwYIdp8CHW6+WNmrx/YzPfsDU8IgrJ:sxZvSMB/fJs02pqfHbg/AMx9
TLSH
T15E52D6566A34997BCCDBD209BA55BB93D6F50472D2901E44AAFCCA0C00E7BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0f9b275dfb506f6943124f218780fa187b18bf9dbead3015fa57a9f0913bf86d
MD5 938816478ddccd11ae84a6a4a16bfd40
SHA1 ded8ff40d76d8507847c7eae95ccb35f89b1e914
SHA512 36f39b411a9cf1ea84aa893aed69451caf32095ed956da5a565a1299df9557c4d13b732f839d18c5f0eb742eb9d725c80180e37912f670c9afaa0b71ff19da27
SSDEEP 192:sxZvRAyM/jK1Ml8UQydB/fJsZ24uYIdpbnA/yZHW6+WNX08Prx/YzvVDA8Ig5ZJ:sxZvSq6B/fJsZ244hHbZ/4Nd
TLSH
T14462C556AA344977DCDBD219B941BB93E6F64472D2901E44AAFCCA0C00E7BED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a988b6942a4075ee7bc4f90fb228341cd44b72eb5997859ba2e6d76ae5e2841
MD5 7c21e8966bfb8335e5c7ddc1824fe70c
SHA1 8d3264b944d2a93ac10f7f591a9cded4ee59a558
SHA512 dc4bfaf5de66cc82ea3cc89754659974b16e37845b9b4b3e39d859508dae094c7b8f12f104e84b474a4e6d40f5521a4facf91797d903c70c693f826d83ce7927
SSDEEP 192:sxZvRAyM/jK1Ml8MdB/fJsZ2puYIdpVnA/yZHW6+WNX08Prx/YzPgDU8Ig57J:sxZvS1B/fJsZ2p4rHbZ/7xb
TLSH
T1D062C556AA34597BCCDBC209F941BB93D6F64472D2901E44AAFC8A0C04E7BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 13344645e857c8239938a26916791af792c4d1c12ce0bf2a0d8ea4dab3637fb8
MD5 a452ec27c60009f0279a911774f3a278
SHA1 3ce0aa61906c292d9971a487148fd97152cc064d
SHA512 a92c9c621a37a1cc3d0279984db0ebdc41b30c9af69b63aa95005c5d2793b18275766ad926162018dd98656e9ca21d07d70196d7029ac4d9b28eefa99660b7ae
SSDEEP 768:1wW7kf0Wvqina8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjeroIq0TYn:1wW7kf0Wvqinau1jaa5LA3j1Ln
TLSH
T1E8E2FB3B680CCB7E4F841E5CEC266F966ED801CB66988D544BFA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 11f9502ac86ba32711f0d3f8027d05e363e038ad3cf8b6bce9130740bd70a8c8
MD5 2802e2b828c32fdbc3885f2f7039ce9b
SHA1 ae290e6379870038701f5b320d64f38af95599bd
SHA512 04a9ec7bcea83d69d83189126fc33809a5ef450df8c76deefe7071466a29918220e28a9c7f0e3fce747c5521ceaac3314259569217393f0cedc82d155d77ab11
TLSH
T1C3A0025876410515D100077531D7C15A3322FC2552C1021270D5884F9D506454141505
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 88399d1c1e7b3d716ae5e6f207b5b5220396009812a32f754fbb59fba7d4810d
MD5 b482388f4cd3a7395deac4b0ea99e33c
SHA1 9cf1acd7e0271d89ba875b0d4c0b5cd66e5418c9
SHA512 0fe9ccdf963946c5822d194ef6d308448bd21e9b0d9e4fab19e6bd17b69e631f185dc70e8da6ba9a29afd5a72a65f01c3f8fd7b5a3e23ba336ee14b185b8d6b7
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTenI1K0k4Py1zIhKM4MYgIS:KIbCKcenWK0kymzuKM4jgV
TLSH
T1D0914302317A068138BE2849A2669A77AF4271633814A9FF3BB410611E77F590DFFCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 af1cc490ca8fae2d2892b003c3532fb77c096ffb69b59f3dc670bec8944fd07a
MD5 72f4a117b3bfa9de715b8f778d9fd7ed
SHA1 48b020456b2d3a969afbd6c13be603d623cebdd4
SHA512 783c58aa59c59024cf05141d34dfacb6c67a707a43cdd3c6008dfc22625457f34e677f26a99a24a47f4099f11d2da04ad347f0ce59e20353ae315ac9f18a4a97
SSDEEP 192:P+xWiHfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxNfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1A024730A7B747001EDE6DD725CB080771A3CB16ECF22A6915DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595ae8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595ae8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8dd1470a18199b7c87ded373c31895b82bb8953fc551b05a5705a17e6ecc28ef
MD5 f281143e289ee20d2f77a8cfacee2f54
SHA1 38b429cf155061143962ecc6248aefb8477c1108
SHA512 5f03370e52157cfc1ea7c877938b8556350646f95312a7f1c554d9622b27e4bcc68ffa6aaa277fcf62794c7b53e1f3a0933c8af0fc14e02e8a6a44fd27371d98
SSDEEP 384:otNn/s3n9SfsNVEDUbJZytdKR+29GpOObjI9G6w7lp:oj+9Uk3Kwlop29Mv
TLSH
T1BE929D365C255E3A5AA2A155F44B3B175FF9817BA3C53F84E2ECAF0D01DB2AC530281A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 081f55c50f4de8582fa89562d35ff5121f0ac388d919c00e88c10ef4c47ee9ab
MD5 143c70c9f6e66e107372dbcfd96a5368
SHA1 30299cc187a64e5bc0442f5cd0c2132ade2cc7a1
SHA512 e15a3fc9a6343db3b36037c6c4bf72bccad8044f41300affe74a6b59c59457b9c2ea902ce5b4cf3ca838a47b3df764756bfa7fdefbf5275cc837c01b2e7c3f91
SSDEEP 384:RiF6tNn/s3n9SNAsNE8TUNTUlIlnUbGb/++O6ItdKR+29ypOObjI9G6w7lp:4F6j+9V3wgCO++O6wwlsp29Mv
TLSH
T1FAC23AF248D7893AD96E5743F77E2E069EBCC167B5846A40B3D89A0CCC971BFD202815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 399dc59f84708d6b8ebd769aab79b5e57f771b822d4206a824eab16809815ad9
MD5 8799927a3fdfc98542618faf7cff9be2
SHA1 22eaff8f159a94702f07c5b42de2cc8bf1da08af
SHA512 1ed328950c5e224114949074c9d96a6f2655e91291c649fd658b778900b0637e5927fd6099dac39424805435caaa057ffd177816de9b601e86850185dc6785f6
SSDEEP 384:otNn/s3n9SEsNVGUbwbE6ItdKR+29QpOObjI9G6w7lp:oj+97Ab6wwlep29Mv
TLSH
T109929D355C255E3A59A2A155F44B3B176FF9817BA3C53F84E2ECAF0D01DB2AC530281A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 048bef6052c4bc64af5731cabb3d4f351545f0d7b6292cb6a271513bbc478933
MD5 e37e2be0fe91187490c47e045fd2c253
SHA1 5bdd2907aae6e32b639e21b70d6a9073159459f2
SHA512 6f0f35ac7f5c1a3318729dd79e334c9294dccc3c08ddc25f42d345b1a3b9e562a0f7e1c205e0ce21cf07dc644cccc7b340deb201ed67507a69b9909e4f817f85
SSDEEP 384:RiF6tNn/s3n9SNAsNv8TUNTUlIlnUbGb/++O6ItdKR+29BpOObjI9G6w7lp:4F6j+9VWwgCO++O6wwlzp29Mv
TLSH
T1ADC23AF248D7893AD96E5743F77E2E069EBCC167B5846A40B3D89A0CCC971BFD202815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0ecac6a4d0f43ecb50c7a05021c947b301bc91a62e4cf3621c0c44cc121abd51
MD5 05735ba88405660d67ab026e006ec578
SHA1 95c8d783b170e5ec49818de44e543f6fdad6e5d6
SHA512 7175cf9d6f27fba00a7bf5a35bb664c9cc5a60665d19bca966ba4cd8e403b925d6c2a023cca402af81e2944d315702fb1c4495cdc2990095ff9996fedcd6df2a
SSDEEP 192:MONw64BLQmiUyVAu5GBPKp/+FdG7BGc+29YWwMFqhU6:MONw6e9zuOdKR+29+pU6
TLSH
T168122B35A8649C2B5EA2B545F48736035FA9412BEBC97B40E6DC6B1C01EF79C230681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c9c3293d8764b83ed49581e32e11b3b0391742fca7dbdfbcd6108b89fb6e4dba
MD5 19bc991eacc7d8b7445280f08fd8c214
SHA1 8b808d9b902d094a0c8505d4bea9a82de64c169b
SHA512 5f0f4ffb967908ebbb8a2db7a0a1fce8d42ee05e120fbdc30489783dfa9d45cd4b5beb063490d98ffce6ae107b0c5d61bb80de7b61534f2c1dd6a7bc04b5eac9
SSDEEP 384:otNn/s3n9SMsNVnUbGbE6ItdKR+29QpOObjI9G6w7lp:oj+9XJ56wwlep29Mv
TLSH
T117929D355C255E2B59A2A155F44B3B17AFF8817B93C92F84E2ECAF0D01DB2AC530281A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a09564f5eca9a6580f08a6ae0b52dae84367755f43ea074af030171b61dd55f
MD5 c37fd7da191f6c800d4521bdeedc46f3
SHA1 7b74c3fa389ab174e338a2454e627638931bd602
SHA512 d06d3401fea8c1b22cb463245416038795af3e61da036177c1e1bb17d305c21393726eddc7afcba5ed3fdeb50308452ba3f30bd3c637be6226c5150429f55d35
SSDEEP 192:MONG64BAQmiUys1AW5GBPKp/+FdG7BvaDMrCdU6:MONG6eADGWOdKC7dU6
TLSH
T11A02EB39AC786C7B9EA2AE45F5863B175FD8113BE6D52B44E6E85B0C01D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

405b0199-ee20-4814-acf6-f040aae7e7f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\405b0199-ee20-4814-acf6-f040aae7e7f5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2cfd213255b1855a170aa9f4ad8ab30704b51f7237c449124adb9d8716266181
MD5 b727c82c63c6c89fd93ad4238f59d2c9
SHA1 9d1228174f16a3dcb65dfef2d3a0a3bf739422e3
SHA512 fbbd53b89cdb0db365e6a1837d4f34b1f3611602de521ab8f3006a2f70422c314605f741f6cbb0e8b680c5f4ddd07651d30a566ac9cde585d5cc06750ddac670
TLSH
T1C8412659A6FA1104F3B7AF56ABF6A96D487E7C372F07D09E00110D4E4662A00C972B37
MD5 SHA1 SHA512 TLSH

Submit Download

𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Size 33.2MB
SHA256 9cded7a24980831220acd7f2edf2a52d37e4bb2eb09814454bd0e4f28967455e
MD5 b35c68634dad9a8b2168f97d5d772b90
SHA1 af3da357aacb45dc2fbee98b89cfb9e3bea721ee
SHA512 09b196d1b81a38d7821c56ea8938f55d07430240b6d19849601c3a1dbdb5ce1561cf3643590a81452616193acbfa44c6a17ab4c562f05712b07d0aba95a80241
SSDEEP 786432:JuzFGbm9BoVqYvNr/eKezNxpyJnUsPZXJp6r4cPwFg4ae:Gt9qdr/eKezofZX+m/
TLSH
T1397733337D98E119B19393B7E7038632892E6F3049F4C26D75CA196095A4FAEEE4C4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SETUP.zip

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP.zip
Size 34.2MB
SHA256 520a7d9fb7c2b9a8a8cc5b6de8b63e5f904e21e6264e4613838214f6d1c9be00
MD5 6f7a0cffdca376416621204c26cbf9f0
SHA1 facb3e73735f5f1eab74744f97af53d73f7f5638
SHA512 4f277eeb6f94de4d9e079c44e47a4a009627c31ca52faf4ce93c9e22ab0d39609bbed7128173f9084258703b499d723157400f110ea9333ecdda16ee174dd8ff
SSDEEP 786432:0MrR5xNmoi3Pv1BbToi7ufLjk0Mjm0VtEnL4HSiZHMswlbyUoRYFmwCM:0ERtbKRQLam0rULQSiZHMb3oRihCM
TLSH
T10A773325F4293261F88DC6B405B01AA813E4BD71037F27D42274B56FCA67F6C9F69A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.exe

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setup.exe
Size 94KB
SHA256 8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
MD5 eba77a34e9b8aa78fce520d1431fc68b
SHA1 215105e2640cd6da8adc1ea9ddafeb08c4d50f9b
SHA512 fa66a42dd71fc862c218777b572f143144a7de0c5d8630061a554e6ebb9ad4557d810e7ca75598254231cb41dec2391c49a362206b8275742b5a5b92ee33417f
SSDEEP 1536:ZaakYDoIhIxHHWMpdPa5wiE21M8kJIGFvb1Cw3/73sJxy+C:FDpSwMpdCq/IM8uIGfN/73sJTC
TLSH
T1A593D541E62DBDDDE508D4310A75E0F25E24EC3176C0A51EA7F37F0629726A3F90A93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\VCRUNTIME140.dll
Size 88KB
SHA256 bf33857f46e56ea7930c1eea25c5f7175a6aaa3df36bf8301a785e6ca726a0b9
MD5 c33386a6e67be415a24d9c431ffd42ac
SHA1 f2f23860916471bdc332b3bd3e88deef64d4432b
SHA512 bc6d5e908bfaa7a35a8f2e01912412b9460604ea19fd27ee5c6f1a05eb0180a07bf7bc26d430326afc9b81d7f19fb1899e6245196a37710c3e5346d0bc2b4c98
SSDEEP 1536:EbiyVUrqIQsn1xtg6RxkkBGCGHDWbWXaecbGasQLvBrzU6LzNa:eiyLyt/xcRjWaXaecbGzurJBa
TLSH
T100937E5235E482B2DDAF04F0D97AEB076A3DA6900FF129F76B949949DE617C0D73020B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Armoury-icon_w.ico

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\ROG Strix Impact\Resource_P303\ProArt\Image\Armoury-icon_w.ico
Size 31KB
SHA256 4e552e98bf4be2ea01226d768618b1729adcc0c379fb9738c3140eb006b3edda
MD5 d2275f878cc4efcc7d31d8d1fe8eeac3
SHA1 3ccddd5a7e6154cff47faddb18a7b13876626eba
SHA512 86f3a0548a49e6f73267619d0ae8bd082347a810e3da188e8e7041f5bc0bd2ec941383aedc23eecc8defb7ea353ef517e08b9e234c6e6d3c6f5526b0caa813ee
SSDEEP 768:O6ZfVKf2NUi3ex2gJpls4XhW4iFydcP2VxVf2kBGGNgx5:OSfVtNUi3T60YdceV7b45
TLSH
T148E2F2AD59240304B5A5699B1304C0AD8E7F81A6382B05FD96C4CB79D7CBB7C423BB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

277x8_progressbar_bg.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\ROG Strix Impact\Resource_P303\ProgressBar\277x8_progressbar_bg.png
Size 216B
SHA256 ba68471b40385872e582f48b70f660d2f3932edf9ce97c728a5b1706251036d3
MD5 f8443384fff95add59e0cc6dae3b6b6a
SHA1 ca3e3b60c7165ff711e45ccd1b09bc8e6d528aa1
SHA512 b24cc24e4be732411e8f574cab23d6bf4be192509a6486e3fa0f217435c612cba44e0606ef55976636e4ad935ae943ca1d06cf02abc70b780e7e1eebe195a8f7
TLSH
T169D02292F25CAD68C3AE6A32437F43307EB0C2421301290EB84C883A0CCC1C4C2DA6C2
MD5 SHA1 SHA512 TLSH

Submit Download

btm_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\ROG Strix Impact\Resource_P303\TUF\Button\btm_n.png
Size 1KB
SHA256 8152b21aea3413266491bb0345f3d96fc5b4aaef7b97199f228391541d3c576d
MD5 e4ff69256d9ff1f6c46bdc6e3620ecd3
SHA1 474b3c48d8d5b92d9127ad89e8218b7efa534f6d
SHA512 f3002678cea7239809e7d9aefa777e313bdfafad1f18955772231e4ff540936636d3259d622673df70ab40148dfc9e2d43b364bc72ae2c9f3c6049206ce44a3e
TLSH
T17F210B0432B66CA9CFBD9A73E5068774D825410D42C2A5D402F478260DAC9C4869FACB
MD5 SHA1 SHA512 TLSH

Submit Download

btm_un.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\ROG Strix Impact\Resource_P303\TUF\Button\btm_un.png
Size 887B
SHA256 ada21b9b3dc5e39d01d0db5d99e8469ad57bfc2215b94a7028641e609a833977
MD5 bf60b6c31844768d459fe5f242aa195c
SHA1 79d391401ee751d2e8b83bc0cec9e83949bd9538
SHA512 9955029b175d128b6f3f6e68c8f6d7006bbfba0cc9a6d8c22b9f31d9b10d33afd54ea6cd22536f8aba836b90376e4f4cfaafb6432850a27356f897cf8b400bc7
TLSH
T1AD1163B12D7F7D6DE2762F388743076324148058A898B24A107B59B6C11D9C3AA85292
MD5 SHA1 SHA512 TLSH

Submit Download

update_bg.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\ROG Strix Impact\Resource_P303\TUF\Image\update_bg.png
Size 32KB
SHA256 8a8f134077d95cf943395179d0f36f9d42df7da49ac2f98fe6c34df09836c507
MD5 7f3c0a58b6202b1bf4e412bdce492b3c
SHA1 d44e76e58845c07cc54dfaf23161bd3934391a5c
SHA512 883c4526a4b89c1dc60dc54d8f0d6a6b2e440e36ab0612fd8266d992e598e662c7beeba7b013466e77e33897f67902dd284b2d80774aa0bc2a845f478a19eda7
SSDEEP 768:P4gHrwOGdYN0w63A1NLdDfTv8lCwToRXsfUBQ0KcztNT:PJrGKyLcNRfL8lCwTKKcztl
TLSH
T1A8E2F2FC43257F1699330AFD9A89D9003573F8B4009FA24AD0A65A2B5ECD830704AF37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main_s_bg.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING M3\Resource_P305\Image\main_s_bg.png
Size 40KB
SHA256 30b20f65227d35103c704589913d661e15c517616e64e131ca81fea3184e4786
MD5 b6f5ba141b3555c671f8f614ee3c7931
SHA1 42d252396263f7bba3c3835838d43c3f16e3875d
SHA512 4146bf868c6dbd385ee918c5ce4853f1e0d1b5246cda49bc0ba74ec6b9e85f3cb9fa3f187cb661dfe605cc14797478be54618424905000a58ad70dd9bc724bf3
SSDEEP 768:qF0FjL2W96g+RlIyCkfAjNXbrbOlKxSL0mbv1jJcQWk9Em/gVS7I/:q2RLRU9RrC0AxrrbHxSL3bLRwxVS72
TLSH
T11D13F2BFBE010D9668F4AFB464B75503329DB300FBC2085369D92DD784D039E981FA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

English.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\English.ini
Size 754B
SHA256 92d20b332101a0c0582da41d0bd7d3dec07b35905b2a91976be4d118bb7c8ca5
MD5 e929ef91fbeaf14e8a5600e389362435
SHA1 2a9e0d996044b1b2d82660e2640d2181a061ede8
SHA512 4bb2e6cf4df1a7de1e50df0d75c300898803fd99a9f903bbf81eb7b81049945dd246851e159006d5d7b6c097da68c2fc2f5ee3028d469ac274706706ccf3f594
TLSH
T1F401C45223F88119FAF77A106F7855218A3A7D76E939C35C449140AEAEF1F108E36773
MD5 SHA1 SHA512 TLSH

Submit Download

French.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\French.ini
Size 800B
SHA256 27e87089f9972e259bd56849d9bb26f3f26c9becb82aaa59232e668e6f1253e5
MD5 b607030784dfabf6bbdce474278bd4e5
SHA1 e5a07b9aeb0ef02a115024fd6421016b32a92bdd
SHA512 f0ca9032528978051a3c80e5054e4f33819cfb406841eb9a63a8c140d236474aad2029de1bec2a600359b3dbc53d1238eaa42b046a43c8dfa2eb4b8570517ebc
TLSH
T1F401E86263F84105F7F77B42AE7861144A3B3D6AE939C21C4680408FAEB5B108D76B73
MD5 SHA1 SHA512 TLSH

Submit Download

Geman.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Geman.ini
Size 890B
SHA256 5445f89dc794a12692202f0d81ac64c660d87eee325a7e6e65e1a5f293a3267c
MD5 0005a941167395f083dbad0c71541c5c
SHA1 b567f2a7c9f0f1eaff409f6cd232ddbc62d596b9
SHA512 7e4736cfe7231f0999c114d254cb35e92fa5a8c6223abcb0e0aff2d88333603d82fff718768b759f46ae161da15d92c5958d082703f30a95f9918ae916c73abc
TLSH
T18711E96113E8890DFBF77F006F7402954A37BCA6AC7AD21C1540115D99B1A40CA32733
MD5 SHA1 SHA512 TLSH

Submit Download

Italian.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Italian.ini
Size 878B
SHA256 7f23089c4485c9082a7ff131be56afa2f2466f6ab92d5b2713b25fd22fc7c5d7
MD5 bcb61a71847844cc73f6397ad71a1aa8
SHA1 f6132d40e574bed5b83ad7b24ad72aee9f051439
SHA512 b362f5565d40e84dde507ac4514614f6254f66db2a619e6e35412108b7e28dcc08d5fd425097c95a6aa23c2f37994ad894800d117afd7edfc66c4e85d6e0ea6a
TLSH
T1EC114F5223F8510DFAF7BB00AF3C5255893FBEAAA839D26C0491108E6AB1F104971733
MD5 SHA1 SHA512 TLSH

Submit Download

Japanese.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Japanese.ini
Size 618B
SHA256 4a170536df8b86fca98d18c13264f51f6a6ba2f43a6ed4b0ac4ae2c51183bb8c
MD5 6b458450fe12d0bc5162c6436a477484
SHA1 3f6ceb7c1c5becce05666e98f08320f8ef269d85
SHA512 58369af122b759f00e33c436e7d7cff26a8a1b5922a4f5e3eeeb5bd06c24c78141f0175e61eb6ca61ada2e8c8dd8770cd428fbfe2a2bb14b2f663f6aa549c0a2
TLSH
T1CCF06DA922F84108FAF33A116A7C9850463BBDAAD979D36C5144004EB9B1F008B76BB7
MD5 SHA1 SHA512 TLSH

Submit Download

Korean.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Korean.ini
Size 634B
SHA256 31dc816bfc627cb479a6b91bbf3ccf24ca9a5e34f087589cd05a5a68f5267408
MD5 d0e6a9f71dd76f28124df06c55a6f3cc
SHA1 1ba7d522e0571ad1d0206f0b2bb37c8322973fc3
SHA512 9fd5ada255a075f5af3fe9ed8ad2389030f3b7bd6bcd496058a0c5699cc62dedba0ebc7ab44082997b3da324993cab87e9e6eb2baa3624e65b994b1c64c0be8c
TLSH
T1A1F0F66226F88014FAF3BB029B79559042377C69E936C3AC5050005EAFB1F008E33777
MD5 SHA1 SHA512 TLSH

Submit Download

Portuguese.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Portuguese.ini
Size 838B
SHA256 4670bc5c622f1fe2086d05ddcb26477402a1a47d9a5fc9b8ee66853fdd4459ee
MD5 d72cf5e08f062dd3b20b45c4e79b46b7
SHA1 1dcc386ae4d1e6ae3873e703fbfba357fee575c9
SHA512 8ae7fb5d9723e9662404b777f626b18e7c0f1583f4ff599cee2111d825e7d95e037c11d1f0621e177b3cf98d0055a00e23d10f2e93d33f693d936e0de429fbc7
TLSH
T15A01122223F82218FAF7BB566F3855658D3B7C66AC39C25C5040006E6EF0B008A3A733
MD5 SHA1 SHA512 TLSH

Submit Download

Russian.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Russian.ini
Size 770B
SHA256 e8b77861054f911eb4e7500f7e89a98557d1b8e00fd2bbb68c012874a2fdcdaf
MD5 40cf84a5ab156a4e83edcbf10a0c2daa
SHA1 1b1badd3c14d8fb709ae435820da571b9f64a0cc
SHA512 e27b7fcd20b5358e41c811ab6c7a17dca53d0bf34acdebd93172c3314f8e5d81f90615824441ebfb4e4d2991cfc4acbf3a269f79b627d177cbe60e53fffe71b5
TLSH
T1A901D40F52F88140BAF377101F3A04D301277E119A3AC29C908F1C5965A4B242636767
MD5 SHA1 SHA512 TLSH

Submit Download

Simplified Chinese.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Simplified Chinese.ini
Size 570B
SHA256 d843fc93e91a1c44274955693977f828216a7eb5db6c180f4d0cf76affeb14b9
MD5 c13ce54b0623de89683d4654be8da389
SHA1 00c69e9652a24167f39a44766072437cfaeef3c1
SHA512 5e51009caedb950b1152b3307618f460a7f59181b367ad5c708aa4846519c8fdeaf2d768a1991a069c050b30c726265fb18c65fd2c9dc4063d809b1f77c4977a
TLSH
T18DF05E1122FC4109FAF77A105F7895514A7B79BBAA39C34C4492055AAEA0F108A3B7B3
MD5 SHA1 SHA512 TLSH

Submit Download

Spanish.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Spanish.ini
Size 846B
SHA256 3a51955bf961177d79b96d159f67642136addb7729de395dd0f8335ce816592d
MD5 2db8e26b6622f47b7b4e8d79136a6a3e
SHA1 4a822f9362f34f55368f7b693966e3d4bf4249d1
SHA512 88b13bf45e2b17422a133b1a224d040d748bfe93bd48c848fb348e16a990b2380d9f4714ab4cb928dba8b8f22b42522a9ed4481d99e4654289a3811c1cf04488
TLSH
T17E01045122F8A10AFAF37B08AE3866654E3BBD66A839D25C5181405F9DB0F008E36733
MD5 SHA1 SHA512 TLSH

Submit Download

Traditional Chinese.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Traditional Chinese.ini
Size 572B
SHA256 11810de4b40dcbe2824b263b64933e5a3045f1a0fe1aba84225c4c42f6c44784
MD5 4bb7849d8b2b5454fa4c848f5732a7df
SHA1 624d937d89125999d11ad46847a6cbcd7045c4f7
SHA512 202e825a4798833981b602f26fc59264b00a6e8c7fdedf82a0b8153cc8d5ea2ad165175a3ddbf3f0cdeaaec746a8b59cc6a6b1e72b109d8af354291a9b9876c7
TLSH
T166F0E25113F84204FAF37A419F785551467A7DBBAA3DC34C40C4005EAEB0B008A3B773
MD5 SHA1 SHA512 TLSH

Submit Download

Turkish.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\MultiLang_P305\Turkish.ini
Size 810B
SHA256 2ae0de45cf20e1068de4f09fb34efbac5758141f31b91f2236e5c4ff0f19d4c5
MD5 5bef20fbe4f9f2e20c944a2f92303bc3
SHA1 c955043d313c48cbedd2465dd4076bd83728a76d
SHA512 ae768f7c9c5e4d89ceaa6c46b13622b78128c3062acd71d53ce5661d75a1cdc81df8b69c20767b6bf2b336ee816524047e4808842208ccf5b6b7891a9f0fc591
TLSH
T1A0016D4913EC4409B9F33B00AE7954628B7B7CBAAE39D30F1141115A9DB0B904D36B73
MD5 SHA1 SHA512 TLSH

Submit Download

btm_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ASUS\Button\btm_d.png
Size 1KB
SHA256 6241791f6f0e98dd19e0785de94f60ecea1b87931a306d11cb0095143de97fb1
MD5 9a8e0dc127e68c82a091bab85a979644
SHA1 63a90ac2a44c0d84460e0cebec857b037d7a3082
SHA512 1133c2b9aae315efa52d8fbb1a70f29604e98e1cba434e8957cb6ca637cbcc7b19ed7bb46526dbc043195ba84ef7c21d2a78eadbcc30b1584d4ea53a6dba05df
TLSH
T1D431C8929B553E78C466A338AB32B7DD4BD234E57151F21952099C3AE29328908D71C6
MD5 SHA1 SHA512 TLSH

Submit Download

btm_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ASUS\Button\btm_o.png
Size 1KB
SHA256 971048f45383fb9dd27b66db66ad257014c762881e170c5d8e28d1f6c199d779
MD5 7a8f83227369588b4525d11184199834
SHA1 ad4996d2cd0c2c145fa0b73e898cee85a2908052
SHA512 b2bd5dfb1eae1f7396b64847b043b3d95f4bfe2af1818e5a0ba17fc8f28c70f7a797296ce0edc72fd833a080523319c06827590caeda78530cc58540c77ecfa1
TLSH
T1263129B9BF18DFCBE2A916E1DB4713649C89464C9C808CDCD062C024CEFA34E4847934
MD5 SHA1 SHA512 TLSH

Submit Download

1x8_progressbar_red.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ASUS\ProgressBar\1x8_progressbar_red.png
Size 159B
SHA256 d983b43ca7ee007e5f8189269201ebb29c68a2d960b2eaaae47080971de00a04
MD5 ee5faf993b958943434ef66bf4e69228
SHA1 75dc852123c353de3494c7768d332807843f67e3
SHA512 2ab596808e42ec7742cc036d7cc93582b81a6a13ca3feff04a09f229893a4a05f14c0f6de8ded57c03262769e709ef1ff761091f3d29adf3d771e4ef8a9cdf14
TLSH
T10CC02BC2AB5CBC18C3DD2A31536A8360FC72C1120306304D954184254C923400EEB3C4
MD5 SHA1 SHA512 TLSH

Submit Download

bigbtm_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\bigbtm_d.png
Size 491B
SHA256 bbecb90ba28d96e290526b05407fdc187ee88170746d985bdb8a37f3a7c3d2a8
MD5 68d1c9ed18b80f7a742e7c2ffba599d7
SHA1 ada24c84b19260f891c6097ac6815fb226d09f0b
SHA512 de9ef6885d49e11e62176178ae000c5e836d37fea0129b4c425ca4817d13f4562c651b5c8f32bf49aba0c030ae273c887cba1abde2afc9f0f0b59a07cf022f8f
TLSH
T1C1F0544F0231D08C2714411F1F501023D477ED3A6E40F60956609B2ED44C12DED537C1
MD5 SHA1 SHA512 TLSH

Submit Download

bigbtm_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\bigbtm_n.png
Size 527B
SHA256 cf4da00bc1c691a31e52edb794dda4cf1b4584c29ef1069706affd1e25da971c
MD5 9657443f2650f6cec97259016ea6db43
SHA1 158b4a6fc5a3e4343d1fb9b22c294e189163a58a
SHA512 6594ca269adab1f463ef189b8697193c15c979850ef306bcfbcfea6b9855f221f8675612f5eab6dceb8ee07fa27f64fcfec5fb52de88d021125498ad29bf9b88
TLSH
T10BF075280A2D17B3463AF32AE32583E1E501CB089B39522D4EDD087B772FC0D212340B
MD5 SHA1 SHA512 TLSH

Submit Download

bigbtm_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\bigbtm_o.png
Size 532B
SHA256 be15798f603aab615eaada81e3f3ad40093d3a42260246daf87df0415063f648
MD5 9af315a1a3bf5e7b80a4ac155b22ee9d
SHA1 31861fd3f4357b4c52bc0ad3845d40c34835d247
SHA512 a7f14dcf952e54f973546ea6612fabc8025f6762eea1775ed358073778a928ca45f98f7ddaca1aa72f86cda385c767527beecffc8cfcf2380bcde139524eecf8
TLSH
T18CF02067FB30E476EB6B997D216902748ED2225821D5810E7C8C4466E00A1E8C99EED3
MD5 SHA1 SHA512 TLSH

Submit Download

bigbtm_un.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\bigbtm_un.png
Size 527B
SHA256 a831a54efa9be0f6777780801da918cc6b321b225ac890c82de1da1dc4fd3131
MD5 4365f6c80b2dd64b0c394b078f93532f
SHA1 650f219dfeab1d0e0d985172deeada5582eecf55
SHA512 0c88be798948ceb132c0e8415e577fd8b44c860a2f51d41ca741a092bdf26adf7f045610ab4ca77adb91382f9b87beb25fb50d9858790fe66a9c19e90a08f6b0
TLSH
T13FF00EB787158A778D39CB3B3E65642F9B21B0892148C60485BE18FA928A19C244FE0F
MD5 SHA1 SHA512 TLSH

Submit Download

blue.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\blue.png
Size 204B
SHA256 2b45ea833e9dd925e61282d7cf4f345de3f179f67913d8bccc1ed367677bc758
MD5 b6952d5d8dbad84ae27fbec35f3d0c0e
SHA1 c48447783d448732728b994847e32d8904f8a80e
SHA512 338b6d45bc5c848b63bcda3c5400a10aff35ca620167f228bb3fdacbd3865807337cfe8f03985a970d85ee083212e5f8f9482cb6b241b890e78ab6693662be59
TLSH
T16FD022D293487C9DC60619BAA3AB888AFDB70297553E4E48E4BBE00C16307AC6384201
MD5 SHA1 SHA512 TLSH

Submit Download

btm_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btm_d.png
Size 1KB
SHA256 7c77c81bc4ec7c4beb67ed1bdb7dfbf2d39cf62a34089f689b7da7753baf0fe1
MD5 bd628ae65b73abd88623ef023ea20884
SHA1 865e72e412f894b7a6ad4cd7c98104f00920dd5d
SHA512 ecbc6d4c3f64e896265d2eed4ef27ecf64a7d21459299f6933656afae6fa327113175b0dd4f3cb3650fbddd38b0c74d76b98310b961750c7616b0c2d028dd9e7
TLSH
T1AF31DAE1939FAC35DD957CF6138484D73860805C4262B1E7D88D22FDCE9985DB514B94
MD5 SHA1 SHA512 TLSH

Submit Download

btm_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btm_o.png
Size 1KB
SHA256 d08e7a36e2c7a54001ab655dd3b7e9b0ca6be0da259680e247a33cc15e6a6181
MD5 74d378537cb0cd1fd7e9f858b3094da9
SHA1 af004f1809ec39cfcaf87e931c4c128898d779a8
SHA512 436cf9754594b3b97759811acab1de80c1a2b51bc0befe120341c794368beb7352a3f565acac17aea0bf8a1d56c94c365a33409b52bffae037205d00202f126d
TLSH
T1EB314CF5196C54C7DF5E2EB18302D14CBC32E0AC7F307725C4FCA4B15425ED56641106
MD5 SHA1 SHA512 TLSH

Submit Download

btn_big_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btn_big_d.png
Size 492B
SHA256 12a44d38cedcecb0286c2921f88a5cd8842282276f523b0fe99e386dc71ac207
MD5 7c473cd0a3846b07c6c511e882e5484a
SHA1 7ef524ba21a2dd026893f89893fa7464733eba2f
SHA512 1be669f523300b654b6107302d8bd07ca079cf01eac163a592ec24ddff7833e5aa69f4d967ca693eba6d8f738242d4bf4f909effc463af6ee0cd725de2a6850a
TLSH
T124F005914B6A4580D751553325AA1DDE8E3432009C3A978CED985805FE5ABD43380DC2
MD5 SHA1 SHA512 TLSH

Submit Download

btn_big_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btn_big_n.png
Size 472B
SHA256 8cdcc2a0d49e642aa9de03f4125006094f61852f94bf515a074fc222532c8898
MD5 f7ed0b3bd41d6e88a6410c7bdaa7b349
SHA1 7120caa68e345057d45c6688dfe26a2270eb85d6
SHA512 cadc9ce845a8ea2d0c731a486d1fea1b699f74fac130f10ec2aade2537be8fdaa7440b8faaeee7ea7796988ea0dea9d452b8730c05d995dc11ea5dbcd5ba74b1
TLSH
T1C6F05CC3076191A016EA1E7F2B223EBC68B00B7FA289330DCCE5C741014E8BE438A704
MD5 SHA1 SHA512 TLSH

Submit Download

btn_big_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btn_big_o.png
Size 1022B
SHA256 30bc8da45a47dec7fa1b3f7651a70c0adce6bb8ed845d85e95695dbbf60c95b0
MD5 25e1f322306870369ec4b891f7284a12
SHA1 50920b681cb7d8d96b39d0ae5d9c8a1807de316f
SHA512 f597db7d17704e0101fdf98bafca88589e3eda3d7d6087720eee510845f0f459e8ac117a0f2070582a47cc3c7be2f72b7dce2dc1d17b11a475c75cf72d8e7834
TLSH
T14511A8ECAE32A9DA48DF44BCCB35D47011567536025F82006ED89AA1E49BB54C09B10D
MD5 SHA1 SHA512 TLSH

Submit Download

btn_s_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btn_s_d.png
Size 297B
SHA256 e30d0d5cd4bb04beb53bfcd145f3538147a0967c1b6ff5aa0933620d915f0f0e
MD5 d34dcdaa13ac491498a2cc55aa196f3d
SHA1 265cad7b70347c0d012be80644b16503aaa91a0a
SHA512 9818ec33975104e2fdaeec024829244cec636e5285c910c414d20380ae8dadb353ac13a5acaa5f26d00711a61daa2f35e570e8c2ca5c74cd06f3870399ad4383
TLSH
T1CEE07DC2CA1148186F0C053ED01FC4487C106124C1A66047199BD5289E61617D58856D
MD5 SHA1 SHA512 TLSH

Submit Download

btn_s_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\btn_s_n.png
Size 297B
SHA256 11c0a5af5935a28de5be7f6c276ccd0b10de7de955c465799747a1cac60f3522
MD5 09024ca4b265cd02b262f2c3044829f1
SHA1 1e161e35d04b3d289d0e2d74c06073c44691bbb2
SHA512 00abe3a63138df0b562297e9689c8074cd18a03e03f43db3800652c159fc366d7e1babc5494b496755e056ad45fb5f303f45c51e31a034ff26f5af2ace6696f2
TLSH
T1A3E0EBC2F3E23D2A43EF002E0A60682024A7759A8809EF552C00AC23C49304486A5B32
MD5 SHA1 SHA512 TLSH

Submit Download

close_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\close_d.png
Size 1KB
SHA256 3ec0f375c82cf5c36a9574fec3ef60c3bf51c13ad24f1ff88be815f2f412f51e
MD5 671e62556c8d0225948320d5df114669
SHA1 ef95819b69b9a4dce4af9411d132c33ac0b89ab0
SHA512 375a451d403aea4b9e35c3f70648c42772427c022f0e2dad28c711ec9c02d75a77c77a39f9d0b207c7dbbca15016d4afbf52b6997b876b4c9643cb243e66d5dc
TLSH
T15F21D8DD49E50F754616612AC02E96A296B2B09F2E10C4AFC0DF8F02807B32F49846DF
MD5 SHA1 SHA512 TLSH

Submit Download

close_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\close_n.png
Size 470B
SHA256 7ef5793627c51a01223a6307dd0a4c108cc1bc812c0296824facb81fabcf896f
MD5 39e7dce0a86f0819cc00c01168d1b066
SHA1 5f9e783c0a13adcd137fa1e13a14a834239c3e58
SHA512 420ebbe175db7abd2a62684cc1764cf5125b2a816b25b0d6b472a314bafcb97de495da6fd5b1c039fb79e47e7a0a04fcad60a7c6ddf53b27306f97d8426509e2
TLSH
T1B0F0D4875FC10E2C4569E116A552576165BB9600F15C099C550AB573266FF448D7CD40
MD5 SHA1 SHA512 TLSH

Submit Download

close_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\close_o.png
Size 1KB
SHA256 ca7a9d09217beca8e5f3936c4f673c9792b2653084a3cd310c6f52ae61c12d48
MD5 d2e07f7d894ee2175a732b9d75cc7aeb
SHA1 5a4b656a6026a9444b95efe74db1fb78863af94c
SHA512 b46e1c90e62230b6b3e3b4058be0706b2fc5289f20adae4353bd9aedb6d2a4993aed62fe521ab0f281d27473b794f730b50090a086eab033124c4a082eb173b5
TLSH
T18931E9A36630FF251F5A2F71FAE2D4E4FD46961D119B33BC53C21202820C0196E81A29
MD5 SHA1 SHA512 TLSH

Submit Download

green.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\green.png
Size 204B
SHA256 dd203d8bd7c1577f5836e07475db9e08cdc477d5209765aa5d39528637174a77
MD5 bc946dba5abfc3d1505f5119e235d1e6
SHA1 ca36c6caedf6f92841739eb35a38e3f0377cf873
SHA512 508bbc92009f013ecb6b98fac31c8fcd919d824d0649e58125e229e457499bf73a41c829788a7a5b12e82a273f3ddb491b1aafcfa7aa6e12c62d62761138713f
TLSH
T1ABD022D6A304BD9DC50669BA235F0487F9B70297093E5D08A8BBE0082B207ACA296641
MD5 SHA1 SHA512 TLSH

Submit Download

link_profile_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\link_profile_d.png
Size 791B
SHA256 a8651ed8596149b47f330ae2c5d42fd88b6dc579a44ef16d7da9e9d8549ca7d1
MD5 3d19b2b32e4e9037e2774102561f3865
SHA1 599fd62db8f70f1135dbb0a510300fd5deb5bc08
SHA512 cda6e41d48716d1ce25141f91139afc5ad4c2e245b82762fd817eb35598d39bb511ff7163b09d2c27a9257435608a96ea132cb6dbabfd432448ab06b487b9de4
TLSH
T1300141A1DB7009F2C8E01CF5063A8626D478C481D1F601AA0C505CAD39A4A87B1FCA62
MD5 SHA1 SHA512 TLSH

Submit Download

link_profile_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\link_profile_n.png
Size 1KB
SHA256 b7c4bd85e49a76417801a69eea161294db96c2e99fb8ed92b6a7cd3fd44afbc1
MD5 3d9f5bb27adaa4d90694d865b3ac7f25
SHA1 2b68f86e823e9eb2c83703c876f621b4236206d3
SHA512 6ad72731eabf895a4207e8507fec501cac97075b4bd5feba5ef3196587317c599944f16f89c0b7e48c65730721d637c69428d7cf53824d238e6ee3fd57c6add3
TLSH
T1DF2196E9D7437538D328986B6E6804515E7832418B9D38BE03A988AA4D9BD81A6D8247
MD5 SHA1 SHA512 TLSH

Submit Download

red.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Button\red.png
Size 204B
SHA256 3c7983b8ea0af9d1ca577c58564a41cdf805fb530bf1af9aadba1db66e8bbc8c
MD5 e047163fc8ff07539ab84a3d80aeea58
SHA1 5fc34407c393f593c4fd8b847978076277d95b16
SHA512 7e70e8d4a32d43fc1414cc3e60b0246eb0faaadf5f735498f131c7a5565101261a891db2c2874a7ba3345f02e1ccfdb2cf952a26ec852aa6ab5c15924dee8cf3
TLSH
T1EAD022D283087C99C54A15BA639B408AFDF702AB063F6D08E8BAE00816307AC5284201
MD5 SHA1 SHA512 TLSH

Submit Download

popup_bg.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Image\popup_bg.png
Size 5KB
SHA256 515c3ce3ea1c0e882fe7dc6bc3edf9b9e828f4d62ebcd32b2b0cd6197e02ccbb
MD5 f02eb627026b9e61a3b12e7e39062bfb
SHA1 85a4e3b8a8ce6d46f598c722427c15e8935605d5
SHA512 64c2ce44953cdce3ee9a1f20fe4ede44b47636f55ec900569b7b87c092155dcfaadfba0143950c6fa823e2feec3bd53819cdebacc8912653706f4d5408732d3d
SSDEEP 96:WBD33M3MPAJkHuyzaIhJammmmmmmmkV69V69V69V69V69V69V69V69V69V69V69Q:a3M3MP4kHueUmmmmmmmmkV69V69V69Vq
TLSH
T1D2C10485C3374301EE357ED3C0FAFB62AD48585E37865D8C2E35B2D0A9154DABAAD06C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading_mask.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\Mask\loading_mask.png
Size 3KB
SHA256 dc18b37469e0ed0e9b73dc940a066c2ee2798faacdfe66701ba5732dc64ff2e4
MD5 0f54b02f6d6f010ff363e64738b1382a
SHA1 d25e646ff4996db2855d769faa8a6a08ab238c6b
SHA512 97681a5a1a09a4a282d48b68204d85a24740b00c07901039914a7f117f3ee898896eb25e1de026ea15b0bf20f66f2a39de8129742f79009388fa8103625a7f9b
TLSH
T12C71D38CFF4AF6C31D786842D4F1383A050225808DAFB7F6584DA2DD8ED03526CEA08A
MD5 SHA1 SHA512 TLSH

Submit Download

btm_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\Button\btm_d.png
Size 1KB
SHA256 c1e3d0a25c46518d726aba79cc43f1081ce928dccc14ff3961746757858d7c31
MD5 c50f701872b25d1ecb0017badfd8a8b0
SHA1 f7f139fb2144649dd585e6cd18db41a539151728
SHA512 fac31bec6483f6238c006691f88268314a7979061aa0a41f4980749989f5d750cd66fea0dc54edb01ef4b4f26c5e7a4a9040c9738ea9239d86fc7e0f776f5568
TLSH
T19811A813BDCF791CCE085F73BD0183162C58C75162CA928AE065CC7ECD164497775959
MD5 SHA1 SHA512 TLSH

Submit Download

btm_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\Button\btm_n.png
Size 1KB
SHA256 bc198ca5af1d90a1817b5648bc79449c8f9b3b2d3b5e6fa0d5318e3e980ba151
MD5 c2600622b257523075de279e75a816fa
SHA1 1f2fad1302f4258acea10cc5a3dca17fb570a4d7
SHA512 ccf6a2eaa86d1aac5dea5a6626fb2065eced0fe9f14f4592eece431fec0d093266a5ce19ea8be98f122e9cd2b1aaa6370c14dc29487b09edd8aae587e7bdb01a
TLSH
T17311B9DE5238DF24F6D71E7482DFC6B05820C27B96614248E4402D740AFE44C8978301
MD5 SHA1 SHA512 TLSH

Submit Download

btm_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\Button\btm_o.png
Size 913B
SHA256 d93f470d6e611df8f73d14ca6e410863abc180d74f845295e6c083f056f477ec
MD5 a82a08d75c227c4003bf00307378b35d
SHA1 e578e32cfd571856915d9610b239571937f40371
SHA512 c775f5982cdeedf637ac62072bbeffee1aa3cfa8f62f772a50a985f7117051d561a27ad25be7c1b7ba6a32d3071b0a1ec63ad24e839ecbab78b7bb83f76acae1
TLSH
T14B11B7E413117E7EC40D47B6070B40B1ACAB67612719330CD5BC84D5F5B4FB095C1231
MD5 SHA1 SHA512 TLSH

Submit Download

btm_un.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\Button\btm_un.png
Size 915B
SHA256 726ddcd6a5f40aaca85dfb53ffb6597c81f6b20b0ba22d8696e6a723ea19dfff
MD5 5260afe2656db22bd6d7e1bffbdf9755
SHA1 9081a7d3097f993159083e6896171c886104ee01
SHA512 358f4ba9f7ed8d77c2b92dd44254209192a81827da54ffcf6ef374b8e3902f43891b48ab4be70e1aed35f88b6969e38df21a932bce9288678a8d37b88b217472
TLSH
T1251167D0A554757CF8B7B738079F91230E2E66E036103102B43660A3C240EC983D6343
MD5 SHA1 SHA512 TLSH

Submit Download

update_bg.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\Image\update_bg.png
Size 41KB
SHA256 bdf413754ad0701008f287f7c733c9844bc11eae4467f2dd461a8444329d7e5b
MD5 3989f3cc4ac7e02dd164b6c8ff33b1c9
SHA1 88181e92737425c6c41fa74db2e67121e93d5460
SHA512 8dbb6f42afcec9c40b4f3391b8d4047d76a3ba9e2b602812fef7ac3e42407f3a5cac1e8e31fb92a67e7aadfbd7a0b74f5bc99cc1386f2a9147e8f01b7a262366
SSDEEP 768:lI9wRa3b/2I7TuKye2ELnoILHaE2eauv3uU1WJsDBNwLS+4jZex:q9wRa3f7TrhnoIjaXeauv3uU8JsDBNUT
TLSH
T1FC130168E6D1B669D49973F6826E3521C5C376F8C7C11E680A4771EE1F3B2C0D884A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1x8_progressbar_red.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProArt\ProgressBar\1x8_progressbar_red.png
Size 159B
SHA256 702218bdec6b5b8f3beafff9e1e4a760e904b92ca39a132a507c6f492d99b9d5
MD5 50a20ec45ae020ae629ccbf2eb4d28ae
SHA1 6c2f1e195794f019d207e026ad0671ab371a878b
SHA512 cefcf1010b1016fe6111ade692ba414e766bea1c48d6df1140d50fa949342ea3258eea876284fe7bcd0ef25031d051796c7525b3d91b6c65a6945ed28e219652
TLSH
T173C02BC2679CBC34C7CC2B35A2328310FC34C4124301340A958044314DA22C1499F384
MD5 SHA1 SHA512 TLSH

Submit Download

1x8_progressbar_red.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\ProgressBar\1x8_progressbar_red.png
Size 159B
SHA256 c635a5eb96fdb985ef77d68400f9bdabe82f5aa9cb68184b279112156ba519a4
MD5 c846342427d62dbc02da5163c976b169
SHA1 263c43a05308961715cdd99c69b1a21301e30599
SHA512 da2eadef7b33d7cf44668154749f09759d2e8a2b30b9435810ec80cfb2a38203833b0d8e5ca41ac312f050e74d954776065bdc474fc46f6251bb65e46f3d8304
TLSH
T1ADC02BC25B9C7D14C3CE3D325652D3207C30C0250306740BD580877A0CC738009AE380
MD5 SHA1 SHA512 TLSH

Submit Download

btm_d.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\TUF\Button\btm_d.png
Size 1KB
SHA256 52754a34a0736eb1f5c4ed88118e88fd51942dc4bb4998db9c242d04c1390f70
MD5 c9166c02bbd4cbf9b74939fabace41c1
SHA1 8777412c87cfb1c898b9af92b27eca53c127067e
SHA512 8a7d6f457f779870ff0fdc34c2ae850ed9997ba502995c54c06184fbb97050aefd4d0541cdd8b0b92d78b2c01c35ccd5a2f37895a37e4d3df052d8175cd9d811
TLSH
T1A3310CF12FA755A45EA04E3A6E9DC335DCA1EDA1049DB504F803F451DD65CA04445AE0
MD5 SHA1 SHA512 TLSH

Submit Download

btm_o.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\TUF\Button\btm_o.png
Size 1KB
SHA256 307d5fe530e5cc3f6d009064268df51336e45f1d108f81568585059bfaab484d
MD5 aa5874e046c2e7fb3f76188ccc98cedd
SHA1 4eb0a81b6ba30a8232a770572823f74309ebe506
SHA512 17d11a5c3eaece2fca5f4e9643ccf186abcca2d0ebd1baae279ab98b01edea9a1cfad99952445152651a6a8cdec79c48f711ad430b21592d65880fa355121604
TLSH
T1C331E778137528E8FCF63A3C045A4752A933014D9686BA5B0A1D6236B462E22F03B5AE
MD5 SHA1 SHA512 TLSH

Submit Download

1x8_progressbar_red.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\TUF\ProgressBar\1x8_progressbar_red.png
Size 159B
SHA256 2898d218b2f49289d4ff8eeb59e8f7d4dacd882e2c0ed4797d608aef6b7fdc95
MD5 f965cb725292a22a18307abc8078b6e4
SHA1 1b3bb533ae64879503bc767a9e8ea621ef4ecbd6
SHA512 0474eeba060f15f1736251e8611a0f44c82518ac5cb6464de00b5bc8c3be0734573337ef63130463085b0c1581a2e17985e7e1aeb281d8e063f2341b346d9a50
TLSH
T1C2C02BC2779CBD54C3CE2A3252664360BC75C19603113149A54648210C8634407DB3C0
MD5 SHA1 SHA512 TLSH

Submit Download

textfield_s_n.png

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\ShareFromArmouryIII\Mouse\TUF GAMING P308\Resource_P305\TextBox\textfield_s_n.png
Size 303B
SHA256 0eef853c7b910ec773b7f6270b2523c6a2116a882a711cd3dd9aa94ae51a4aec
MD5 dfb5cd86deb60fd711184fefcaa74cc9
SHA1 ee8b7fdb1685d92570e04ae4d021f667f6f1fafe
SHA512 7ae8d724f1fbdcadeb6e2047796118caea1cdf90cc615fdc077928119b6839ef7eafcd79277ad308510797f3e99fe65da328a2a1122c9201ce5f12ab1b42d9c0
TLSH
T166E0E7D742671074C67D153B559F13F0441063A443D3C10D5D9C7012493C32D301D2AB
MD5 SHA1 SHA512 TLSH

Submit Download

style.ini

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\dll\SwAgent\Theme\TUF\style.ini
Size 120B
SHA256 eef646966a29a6c853fb559b8740d04a873aae9f4f3cd6726b994a086f835ce6
MD5 b59faf9bf3622446fbe209025f993bec
SHA1 60292112cc166b6abf85c66054281c20537bbe4f
SHA512 374435faaa3f76587e016cb0213973efed9f133ef89aa9aa809fbe226b1909ec7cf673ff3f120c65e7c133b8627c87752902170612f3cb308ef6f7d7bef756e9
TLSH
T1CFB092F77A184C07A592868A82BD0012F827E08E94C00E61472ACCB2B52012ED92320A
MD5 SHA1 SHA512 TLSH

Submit Download

msasn1.dll

Path C:\Users\Admin\Downloads\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\msasn1.dll
Size 591KB
SHA256 d024389ea83cbe26774761b3a3348f5af5f07d193a660012dc830fd5bdeb6c57
MD5 350eefe00ea81442b1ef557b39d3fd40
SHA1 8ad05671f0922d444645be102c30a5e67beb3a8d
SHA512 19373b18536c9e2276e5d0950b8313a21df2b0974699eb3c5828a082aae6e4a9669ce5e77494dc4f22a97c6279119f78267a2546f6428a1742a355613aec50ab
SSDEEP 12288:0e+522PoGosfqetj5z49t1MYEq+uxfrZEhP6Vl62:0eL2PV7fb9zkONAxfWhCVM2
TLSH
T100D42356664E4DB4CC9638F06B7EF5BA843C1A01532094D343E3C9FA9C28FD2763659E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/6816-2432-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2397-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-1404-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-1402-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-1401-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-1418-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2411-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2488-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2481-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2474-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2467-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2460-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2453-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2446-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2439-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2537-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2530-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2574-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2569-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2562-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2555-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2544-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2523-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2516-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2509-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2502-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2495-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-1410-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2425-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2418-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2404-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-1406-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2390-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2383-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2376-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2369-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2362-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2355-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2353-0x0000000000AC0000-0x0000000000AEE000-memory.dmp

Download

memory/6816-2350-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2347-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2344-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2342-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2341-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2584-0x000000007F050000-0x000000007F056000-memory.dmp

Download

memory/6816-2597-0x000000007F070000-0x000000007F071000-memory.dmp

Download

memory/6816-2599-0x0000000000AF0000-0x0000000000AF6000-memory.dmp

Download

memory/6816-2598-0x0000000000BD0000-0x0000000000BD3000-memory.dmp

Download

memory/6816-2614-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2613-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2612-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2611-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2610-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2609-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2608-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2607-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2606-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2605-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-1399-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-1396-0x000000007EEC0000-0x000000007EEC1000-memory.dmp

Download

memory/6816-2604-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2603-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2602-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download

memory/6816-2601-0x0000000000C20000-0x0000000000C21000-memory.dmp

Download