Overview

overview

7

Static

static

3

ZapZap-7.1...64.exe

windows11-21h2-x64

7

ZapZap-7.1...64.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    95s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 00:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ZapZap-7.1-windows-x86_64.exe
  • Size 195.8MB
  • Sample260727-ae9wpss1ev
  • SHA256 1c9a567713d8fbe7ad520d9ee62ed582ac7f1dc3ee91e4cf2a22b3eb9ff21466
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 52 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ZapZap-7.1-windows-x86_64.exe
    "C:\Users\Admin\AppData\Local\Temp\ZapZap-7.1-windows-x86_64.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1124
    • C:\Users\Admin\AppData\Local\Temp\ZapZap-7.1-windows-x86_64.exe
      "C:\Users\Admin\AppData\Local\Temp\ZapZap-7.1-windows-x86_64.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4508
      • C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe
        "C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --webengine-locales-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6/translations\qtwebengine_locales" --webengine-resources-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6\resources" --disable-speech-api --touch-events=auto --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --field-trial-handle=4496,i,16956139593657500250,687476904348479254,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,FFmpegAllowLists,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        PID:3556
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://rtosta.com/zapzap/
        3⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:456
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x314,0x7ff841b7c188,0x7ff841b7c194,0x7ff841b7c1a0
          4⤵
            PID:4840
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,13850164218403000986,13905859217590708903,262144 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
            4⤵
              PID:5676
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,11515592167667270697,12242039104030273637,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
              4⤵
              • System Time Discovery
              PID:5544
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,11075513478776851501,1192710218528145137,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:13
              4⤵
                PID:2416
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11155756590053396885,1779588595341718665,2097152 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
                4⤵
                  PID:4904
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,18017207752207511435,8861955254561022723,2097152 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
                  4⤵
                    PID:3752
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,19278058417918487,1812601144682472732,2097152 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
                    4⤵
                      PID:3876
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,1214689005001288939,13538658193830554089,2097152 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:9
                      4⤵
                        PID:4308
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,4256712332992236864,5375620592112742741,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:14
                        4⤵
                          PID:2764
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,9395598936065268245,16878414235156812756,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:14
                          4⤵
                            PID:916
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,13087249309644632424,7992577184987177917,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
                            4⤵
                              PID:3704
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,16693160791644199970,3989218569187911827,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
                              4⤵
                                PID:4680
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,16693160791644199970,3989218569187911827,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
                                4⤵
                                  PID:4260
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,16750520153626051210,17983108915311650137,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
                                  4⤵
                                    PID:4904
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,16042215840012804367,967990378973849456,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:14
                                    4⤵
                                      PID:5532
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,14119847793120147719,13294049437319854569,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:14
                                      4⤵
                                        PID:2952
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,2255082939985791037,8199235700080205439,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:14
                                        4⤵
                                          PID:4956
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,7437904367613805778,1932614494888313288,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:14
                                          4⤵
                                            PID:5588
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,14141722812406937927,3162027780859705051,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:14
                                            4⤵
                                              PID:1252
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,14978796263480369408,16879436370648982769,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
                                              4⤵
                                                PID:4668
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,15750605405076721767,9914961308897660083,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
                                                4⤵
                                                  PID:4308
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,6293237193561317415,228894120776170346,524288 --field-trial-handle=2244,i,168302223321596240,14907564482101776329,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
                                                  4⤵
                                                    PID:3200
                                                • C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --webengine-locales-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6/translations\qtwebengine_locales" --webengine-resources-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6\resources" --disable-speech-api --touch-events=auto --disable-gpu-compositing --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=4496,i,16956139593657500250,687476904348479254,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,FFmpegAllowLists,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:1324
                                                • C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\QtWebEngineProcess.exe" --type=renderer --webengine-schemes=qrc:sV --webengine-locales-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6/translations\qtwebengine_locales" --webengine-resources-path="C:/Users/Admin/AppData/Local/Temp/_MEI11242/PyQt6/Qt6\resources" --disable-speech-api --touch-events=auto --disable-gpu-compositing --disable-blink-features=EyeDropperAPI,WebOTP,DocumentPictureInPictureAPI --video-capture-use-gpu-memory-buffer --lang=en --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4496,i,16956139593657500250,687476904348479254,262144 --enable-features=NetworkServiceInProcess2,TracingServiceInProcess --disable-features=BackgroundFetch,EyeDropper,FFmpegAllowLists,InstalledApp,WebOTP,WebPayments,WebUSB --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:1
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:3416
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                              1⤵
                                                PID:2228
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                1⤵
                                                  PID:1340
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                  1⤵
                                                    PID:3524

                                                  Network

                                                        MITRE ATT&CK Enterprise v16

                                                        Replay Monitor

                                                        Loading Replay Monitor...

                                                        Downloads

                                                        settings.dat
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                        • Size 280B
                                                        • SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        settings.dat
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                        • Size 280B
                                                        • SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                        • Size 3KB
                                                        • SHA256 0fcb7426e5cd461154c95f6ce0b866c41b7b3499dd10d8c21d9f381ea9622420
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index~RFe59fe5b.TMP
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59fe5b.TMP
                                                        • Size 3KB
                                                        • SHA256 d00622823c6bfd9a4712daf3bd3d3977cd854ebe675faf3451a33dabd6fe56b9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        SiteList-Enterprise.json
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                        • Size 2B
                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Edge Profile.ico
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                        • Size 70KB
                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Network Persistent State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                        • Size 2KB
                                                        • SHA256 d6db35c53ddf53bb1138fc418679b42dcf92729543eb1b2977a3bab9715c372f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        SCT Auditing Pending Reports
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                        • Size 2B
                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Sdch Dictionaries
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                        • Size 40B
                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Preferences
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                        • Size 11KB
                                                        • SHA256 a9e4332350f961087a0d78d8b394bdc68f626da7b4d558e45f9553f66cbf5f1a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferences
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                        • Size 12KB
                                                        • SHA256 0796ddc958d03a9eb4f249b1f410fac5f5d8469093766d715591fa5fb8ece8ca
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Preferences
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                        • Size 12KB
                                                        • SHA256 148cce3f4329bf69dc21cf2dbd10126359e1dfd184f1b5c757f416534feb0692
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Secure Preferences
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                        • Size 29KB
                                                        • SHA256 5d40bee4722fdee3412738f6dee6e48753eb362cdac4274aef4fb1382fbc39b3
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        OperationConfig
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                        • Size 22KB
                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        OperationConfig~RFe5a9878.TMP
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a9878.TMP
                                                        • Size 3KB
                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Local State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                        • Size 35KB
                                                        • SHA256 30b4efabfda3fc63a7fc429fdd95187879220560006bb7e56d29f122bea41f09
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Local State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                        • Size 44KB
                                                        • SHA256 b746ee5a261c175618f264217d8a7f91d8c4608d0e5972d8641dc9a58dc35ce8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Local State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                        • Size 35KB
                                                        • SHA256 1b0d40aab0e49ee055a0363809a99a815f498820912a4543ba138818a53579bc
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Local State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                        • Size 38KB
                                                        • SHA256 410f4161802e0d6f09de96c67abc4b7581f4ecde3f206f6827ba7ad3e4196be5
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Local State
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                        • Size 38KB
                                                        • SHA256 10a1c6cd35ba92d49e021271520eac623cec9e03a94af75e5badaa347bdf44df
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                        • Size 153KB
                                                        • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        eb23c803-148c-49f1-a227-2cf97d55e7c0.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eb23c803-148c-49f1-a227-2cf97d55e7c0.tmp
                                                        • Size 13B
                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        metadata.json~RFe59d3b1.TMP
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe59d3b1.TMP
                                                        • Size 132B
                                                        • SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        MSVCP140.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\MSVCP140.dll
                                                        • Size 544KB
                                                        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        MSVCP140_1.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\MSVCP140_1.dll
                                                        • Size 35KB
                                                        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        MSVCP140_2.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\MSVCP140_2.dll
                                                        • Size 273KB
                                                        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6Core.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6Core.dll
                                                        • Size 10.0MB
                                                        • SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6DBus.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6DBus.dll
                                                        • Size 746KB
                                                        • SHA256 278646d25ebaea9aaf02879444d4300f3b53ac26e1dfeea40f0babd23442d33a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6Gui.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6Gui.dll
                                                        • Size 9.1MB
                                                        • SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6Network.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6Network.dll
                                                        • Size 1.7MB
                                                        • SHA256 0232076731e386b6cc353bdf743d5fb17e95a3493c2d02afac984db87ed47b96
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6PrintSupport.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6PrintSupport.dll
                                                        • Size 397KB
                                                        • SHA256 67d942932865466dc8950e4f5fba831bb26ac7ed34498dac6226775b1cd8add9
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6Qml.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6Qml.dll
                                                        • Size 5.1MB
                                                        • SHA256 62ff9b3b217b625886e5e9cd48fdb6fcb29d2e88aab260ad59bf91b404b32783
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6QuickWidgets.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6QuickWidgets.dll
                                                        • Size 131KB
                                                        • SHA256 dd575c7da061d31a9669c0f739caf32bc2cf68e35e093b781078b405f03e2127
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6WebChannel.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6WebChannel.dll
                                                        • Size 249KB
                                                        • SHA256 4937032dfdaa76da982659a08483300c92f70afc41f266ecf36e306c1cded738
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6WebEngineWidgets.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6WebEngineWidgets.dll
                                                        • Size 184KB
                                                        • SHA256 1ddfa0499d8c8e4fad05fdfb64a6b59f8d79869cf3ddf1fbd27616d6b5cea1e8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        Qt6Widgets.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\Qt6Widgets.dll
                                                        • Size 6.3MB
                                                        • SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        VCRUNTIME140_1.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\bin\VCRUNTIME140_1.dll
                                                        • Size 48KB
                                                        • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        quickwindow.qmltypes
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\qml\QtQuick\Window\quickwindow.qmltypes
                                                        • Size 215B
                                                        • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        qtlocation_en.qm
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\Qt6\translations\qtlocation_en.qm
                                                        • Size 33B
                                                        • SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        QtCore.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtCore.pyd
                                                        • Size 2.5MB
                                                        • SHA256 91dd5166110b88a4f4d3acda6fe6c10ed699882dd3602328a59e9f656cc766b1
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtDBus.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtDBus.pyd
                                                        • Size 179KB
                                                        • SHA256 0d81cfaa607fb6c00df5fec3aeead12fcaa8cfb46cc9caedec09ac8f6e6eb194
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtGui.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtGui.pyd
                                                        • Size 2.2MB
                                                        • SHA256 cf5ae37fd119fb29a53f1f2cea1362fdf036d940191be45d83da0f98ce8752b8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtNetwork.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtNetwork.pyd
                                                        • Size 804KB
                                                        • SHA256 dc8a352ee9e67efa05bb7c59a266171faa0c0c40e0015fac9b31a9a6d058ec49
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtWebChannel.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtWebChannel.pyd
                                                        • Size 43KB
                                                        • SHA256 1fb65d8439490dfb1f5c6b68022107d36d3df307279f12515d3b5af26774f477
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtWebEngineWidgets.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtWebEngineWidgets.pyd
                                                        • Size 75KB
                                                        • SHA256 2c1ec7bee169a2cfb0ce56b6824b21623bf508b1fda3622b67b09790f1ef6997
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        QtWidgets.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\QtWidgets.pyd
                                                        • Size 4.8MB
                                                        • SHA256 4f81361816e94e1ae05f178085b22d5b9b19e417713b1966dd481a4017aa3b21
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sip.cp314-win_amd64.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\PyQt6\sip.cp314-win_amd64.pyd
                                                        • Size 109KB
                                                        • SHA256 61237093b5c263bb97f3e9088a5b7d60cfdda983bf6f0b4031634e8962fd9825
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        VCRUNTIME140.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\VCRUNTIME140.dll
                                                        • Size 117KB
                                                        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        _bz2.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_bz2.pyd
                                                        • Size 85KB
                                                        • SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        _ctypes.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_ctypes.pyd
                                                        • Size 139KB
                                                        • SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        _lzma.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_lzma.pyd
                                                        • Size 157KB
                                                        • SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        _zstd.pyd
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_zstd.pyd
                                                        • Size 491KB
                                                        • SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        base_library.zip
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\base_library.zip
                                                        • Size 1.3MB
                                                        • SHA256 c67276c0a42389405b543b97f833181c02ae48bf16ad4928b947578b87d4dc78
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        libffi-8.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\libffi-8.dll
                                                        • Size 38KB
                                                        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        python3.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\python3.dll
                                                        • Size 72KB
                                                        • SHA256 22c6e46d8bd563cdb072650901461ef68be2ea6cb1e80af859559d9395a27e39
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        python314.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\python314.dll
                                                        • Size 6.5MB
                                                        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ucrtbase.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\ucrtbase.dll
                                                        • Size 1.3MB
                                                        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        zapzap.mo
                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\zapzap\po\fr\LC_MESSAGES\zapzap.mo
                                                        • Size 61KB
                                                        • SHA256 991144242593abf9502a77ab353f52adf16bc22f836041aff7e5379c69e4027c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        c15a0136-5024-4ae3-8d10-176bb11c32a3.tmp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\c15a0136-5024-4ae3-8d10-176bb11c32a3.tmp
                                                        • Size 1B
                                                        • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        content_new.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir456_433508012\CRX_INSTALL\content_new.js
                                                        • Size 10KB
                                                        • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        zapzap.db
                                                        • Path C:\Users\Admin\AppData\Local\ZapZap\db\zapzap.db
                                                        • Size 12KB
                                                        • SHA256 ab779e1f3e9cd2ac55fe43b07f1a1e4701959275c7a690505769e21d8604d233
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        zapzap.db
                                                        • Path C:\Users\Admin\AppData\Local\ZapZap\db\zapzap.db
                                                        • Size 12KB
                                                        • SHA256 f8dd294e76280ca112933ad30287edd7e0a3ecd2c29c4d86bf7dc2cbd0911afc
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        data_0
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\DawnGraphiteCache\data_0
                                                        • Size 8KB
                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_2
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\DawnGraphiteCache\data_2
                                                        • Size 8KB
                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_3
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\DawnGraphiteCache\data_3
                                                        • Size 8KB
                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_1
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\DawnWebGPUCache\data_1
                                                        • Size 264KB
                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        Network Persistent State
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Network Persistent State
                                                        • Size 269B
                                                        • SHA256 e18565c48552fa4ecdbe0c88fde6c1f70fa6b1e85fc998ebd76a344ead971373
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Network Persistent State~RFe5ac3de.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Network Persistent State~RFe5ac3de.TMP
                                                        • Size 59B
                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\CacheStorage\0bf6ab7f94a21cdc9c1649f884333ec20f40a544\f743844a-fd47-41c0-9994-114608a443a5\index-dir\the-real-index
                                                        • Size 144B
                                                        • SHA256 42ca6f1d573123d827373e96eea3480f4d9c2e753b9da4c30b5379d8f3a6f3cf
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index~RFe5a12ce.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\CacheStorage\0bf6ab7f94a21cdc9c1649f884333ec20f40a544\f743844a-fd47-41c0-9994-114608a443a5\index-dir\the-real-index~RFe5a12ce.TMP
                                                        • Size 48B
                                                        • SHA256 bfb9711dfc74df92cb967144c4a54fd181e37aeaef6af002693de742732b67ae
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        index.txt
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\CacheStorage\0bf6ab7f94a21cdc9c1649f884333ec20f40a544\index.txt
                                                        • Size 280B
                                                        • SHA256 9437eaa935808809b1e9b0c186a682e15ccfa8b397f0e849383f439c075d8610
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index.txt
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\CacheStorage\0bf6ab7f94a21cdc9c1649f884333ec20f40a544\index.txt
                                                        • Size 287B
                                                        • SHA256 d08bccedda39cf32fbf70491fce608f7ac8cbd2fe07211dfceba0f9f35c35b43
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index.txt~RFe59d41f.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\CacheStorage\0bf6ab7f94a21cdc9c1649f884333ec20f40a544\index.txt~RFe59d41f.TMP
                                                        • Size 203B
                                                        • SHA256 226a32c3b483dceb4ff8f57b046f5eeddbf78f49c9c0a8f51b31be9991c47eab
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        MANIFEST-000001
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\Database\MANIFEST-000001
                                                        • Size 41B
                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        the-real-index
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\ScriptCache\index-dir\the-real-index
                                                        • Size 96B
                                                        • SHA256 50c1543be91db5977c6c8352c83dff7d884d177500b289c63d31d1ff4248c173
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        the-real-index~RFe5a230a.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a230a.TMP
                                                        • Size 48B
                                                        • SHA256 c5a3943d0665f0140aaa61c65896b9d3947d09cc2257ad68d83c952e662fdd2e
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        CURRENT
                                                        • Path C:\Users\Admin\AppData\Roaming\ZapZap\QtWebEngine\storage-whats\Session Storage\CURRENT
                                                        • Size 16B
                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        memory/1324-1999-0x00007FF842840000-0x00007FF842E8D000-memory.dmp
                                                        Download

                                                        memory/1324-2538-0x00000197610E0000-0x000001976113D000-memory.dmp
                                                        Download

                                                        memory/1324-2539-0x0000019761290000-0x000001976129A000-memory.dmp
                                                        Download

                                                        memory/3416-2137-0x00007FF842840000-0x00007FF842E8D000-memory.dmp
                                                        Download

                                                        memory/3416-2541-0x00000195332D0000-0x00000195332DA000-memory.dmp
                                                        Download

                                                        memory/3416-2540-0x0000019532EE0000-0x0000019532F3D000-memory.dmp
                                                        Download

                                                        memory/3556-2003-0x0000024C0EBE0000-0x0000024C0EBEA000-memory.dmp
                                                        Download

                                                        memory/3556-2002-0x0000024C0EA10000-0x0000024C0EA6D000-memory.dmp
                                                        Download

                                                        memory/3556-1883-0x00007FF842840000-0x00007FF842E8D000-memory.dmp
                                                        Download

                                                        memory/3556-1881-0x00007FF867D60000-0x00007FF867D61000-memory.dmp
                                                        Download

                                                        memory/3556-1882-0x00007FF866D00000-0x00007FF866D01000-memory.dmp
                                                        Download

                                                        memory/4508-1807-0x00007FF849A50000-0x00007FF849CDF000-memory.dmp
                                                        Download

                                                        memory/4508-1818-0x00007FF849810000-0x00007FF849A49000-memory.dmp
                                                        Download

                                                        memory/4508-1845-0x00007FF8217B0000-0x00007FF8227B0000-memory.dmp
                                                        Download