hxxps://github[.]com/Alishahryar1/free-claude-code

Analysis

user interaction
yes
max time kernel
899s
max time network
901s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
27/07/2026, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Alishahryar1/free-claude-code
Sample260727-eav9zavere

Score

10^/10

discovery execution

Malware Config

Extracted

Language

Deobfuscated

Source

URLs

exe.dropper
https://downloads.claude.ai/claude-code-releases

Signatures

Badlisted process makes network request 14 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
93	1384	powershell.exe
95	1384	powershell.exe
97	1384	powershell.exe
100	6108	powershell.exe
143	1384	powershell.exe
147	1384	powershell.exe
149	5740	powershell.exe
151	5740	powershell.exe
153	5740	powershell.exe
156	1384	powershell.exe
196	1384	powershell.exe
198	1384	powershell.exe
199	1384	powershell.exe
201	1384	powershell.exe

Checks computer location settings 2 TTPs 7 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	node.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	node.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	claude-2.1.220-win32-x64.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	claude.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	node.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	node.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000\Control Panel\International\Geo\Nation	node.exe

Executes dropped EXE 15 IoCs

pid	Process
2444	claude-2.1.220-win32-x64.exe
6064	claude.exe
3872	codex.exe
5856	codex.exe
4516	node.exe
5840	node.exe
4424	node.exe
3464	node.exe
5032	node.exe
6028	node.exe
6100	node.exe
1724	node.exe
3356	node.exe
4404	node.exe
2448	node.exe

Loads dropped DLL 2 IoCs

pid	Process
4404	node.exe
2448	node.exe

Contacts third-party web service commonly abused for C2 1 TTPs 12 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
47	camo.githubusercontent.com
49	camo.githubusercontent.com
52	raw.githubusercontent.com
92	raw.githubusercontent.com
45	camo.githubusercontent.com
53	raw.githubusercontent.com
93	raw.githubusercontent.com
123	raw.githubusercontent.com
42	camo.githubusercontent.com
43	camo.githubusercontent.com
44	camo.githubusercontent.com
46	camo.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
6108	powershell.exe
5740	powershell.exe
2452	powershell.exe
984	powershell.exe

Executes a command shell one-liner 1 TTPs 10 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2556	cmd.exe
4460	cmd.exe
4688	cmd.exe
5208	cmd.exe
3580	cmd.exe
6016	cmd.exe
2788	cmd.exe
6004	cmd.exe
1812	cmd.exe
4924	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4872	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295975153307504"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1131776342-1023621610-2767477260-1000\{D7667295-A460-474A-8563-A5E52851ECA9}	msedge.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
4304	reg.exe
4840	reg.exe

Suspicious behavior: EnumeratesProcesses 23 IoCs

pid	Process
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
1384	powershell.exe
6108	powershell.exe
6108	powershell.exe
6108	powershell.exe
5740	powershell.exe
5740	powershell.exe
5740	powershell.exe
5976	msedge.exe
5976	msedge.exe
2452	powershell.exe
2452	powershell.exe
2452	powershell.exe
984	powershell.exe
984	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe

Suspicious use of AdjustPrivilegeToken 47 IoCs

description	pid	Process
Token: SeDebugPrivilege	1384	powershell.exe
Token: SeDebugPrivilege	6108	powershell.exe
Token: SeDebugPrivilege	5740	powershell.exe
Token: SeDebugPrivilege	2452	powershell.exe
Token: SeDebugPrivilege	984	powershell.exe
Token: SeIncreaseQuotaPrivilege	2452	powershell.exe
Token: SeSecurityPrivilege	2452	powershell.exe
Token: SeTakeOwnershipPrivilege	2452	powershell.exe
Token: SeLoadDriverPrivilege	2452	powershell.exe
Token: SeSystemProfilePrivilege	2452	powershell.exe
Token: SeSystemtimePrivilege	2452	powershell.exe
Token: SeProfSingleProcessPrivilege	2452	powershell.exe
Token: SeIncBasePriorityPrivilege	2452	powershell.exe
Token: SeCreatePagefilePrivilege	2452	powershell.exe
Token: SeBackupPrivilege	2452	powershell.exe
Token: SeRestorePrivilege	2452	powershell.exe
Token: SeShutdownPrivilege	2452	powershell.exe
Token: SeDebugPrivilege	2452	powershell.exe
Token: SeSystemEnvironmentPrivilege	2452	powershell.exe
Token: SeRemoteShutdownPrivilege	2452	powershell.exe
Token: SeUndockPrivilege	2452	powershell.exe
Token: SeManageVolumePrivilege	2452	powershell.exe
Token: 33	2452	powershell.exe
Token: 34	2452	powershell.exe
Token: 35	2452	powershell.exe
Token: 36	2452	powershell.exe
Token: SeIncreaseQuotaPrivilege	2452	powershell.exe
Token: SeSecurityPrivilege	2452	powershell.exe
Token: SeTakeOwnershipPrivilege	2452	powershell.exe
Token: SeLoadDriverPrivilege	2452	powershell.exe
Token: SeSystemProfilePrivilege	2452	powershell.exe
Token: SeSystemtimePrivilege	2452	powershell.exe
Token: SeProfSingleProcessPrivilege	2452	powershell.exe
Token: SeIncBasePriorityPrivilege	2452	powershell.exe
Token: SeCreatePagefilePrivilege	2452	powershell.exe
Token: SeBackupPrivilege	2452	powershell.exe
Token: SeRestorePrivilege	2452	powershell.exe
Token: SeShutdownPrivilege	2452	powershell.exe
Token: SeDebugPrivilege	2452	powershell.exe
Token: SeSystemEnvironmentPrivilege	2452	powershell.exe
Token: SeRemoteShutdownPrivilege	2452	powershell.exe
Token: SeUndockPrivilege	2452	powershell.exe
Token: SeManageVolumePrivilege	2452	powershell.exe
Token: 33	2452	powershell.exe
Token: 34	2452	powershell.exe
Token: 35	2452	powershell.exe
Token: 36	2452	powershell.exe

Suspicious use of FindShellTrayWindow 57 IoCs

pid	Process
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe

Suspicious use of SendNotifyMessage 56 IoCs

pid	Process
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe
4692	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4692 wrote to memory of 4748	4692	msedge.exe	82
PID 4692 wrote to memory of 4872	4692	msedge.exe	83
PID 4692 wrote to memory of 1104	4692	msedge.exe	84
PID 4692 wrote to memory of 1104	4692	msedge.exe	84
PID 4692 wrote to memory of 1104	4692	msedge.exe	84
PID 4692 wrote to memory of 4616	4692	msedge.exe	85
PID 4692 wrote to memory of 4616	4692	msedge.exe	85
PID 4692 wrote to memory of 2812	4692	msedge.exe	87
PID 4692 wrote to memory of 2184	4692	msedge.exe	88
PID 4692 wrote to memory of 2812	4692	msedge.exe	87
PID 4692 wrote to memory of 2812	4692	msedge.exe	87
PID 4692 wrote to memory of 2184	4692	msedge.exe	88
PID 4692 wrote to memory of 2184	4692	msedge.exe	88
PID 4692 wrote to memory of 1060	4692	msedge.exe	91
PID 4692 wrote to memory of 1060	4692	msedge.exe	91
PID 4692 wrote to memory of 5232	4692	msedge.exe	92
PID 4692 wrote to memory of 5232	4692	msedge.exe	92
PID 4692 wrote to memory of 3240	4692	msedge.exe	94
PID 1384 wrote to memory of 6108	1384	powershell.exe	113
PID 4692 wrote to memory of 4540	4692	msedge.exe	115
PID 4692 wrote to memory of 3604	4692	msedge.exe	116
PID 4692 wrote to memory of 548	4692	msedge.exe	117
PID 6108 wrote to memory of 2444	6108	powershell.exe	118
PID 2444 wrote to memory of 4304	2444	claude-2.1.220-win32-x64.exe	119
PID 2444 wrote to memory of 4840	2444	claude-2.1.220-win32-x64.exe	120
PID 2444 wrote to memory of 2704	2444	claude-2.1.220-win32-x64.exe	123
PID 4692 wrote to memory of 5608	4692	msedge.exe	125
PID 4692 wrote to memory of 5608	4692	msedge.exe	125
PID 2444 wrote to memory of 5320	2444	claude-2.1.220-win32-x64.exe	127
PID 1384 wrote to memory of 6064	1384	powershell.exe	129
PID 1384 wrote to memory of 5740	1384	powershell.exe	130
PID 5740 wrote to memory of 4508	5740	powershell.exe	131
PID 4692 wrote to memory of 5976	4692	msedge.exe	132
PID 5740 wrote to memory of 3872	5740	powershell.exe	133
PID 1384 wrote to memory of 5856	1384	powershell.exe	134
PID 1384 wrote to memory of 2452	1384	powershell.exe	135
PID 2452 wrote to memory of 872	2452	powershell.exe	136
PID 872 wrote to memory of 444	872	csc.exe	137
PID 2452 wrote to memory of 3276	2452	powershell.exe	138
PID 2452 wrote to memory of 3456	2452	powershell.exe	139
PID 4692 wrote to memory of 1728	4692	msedge.exe	140
PID 4692 wrote to memory of 1728	4692	msedge.exe	140
PID 2452 wrote to memory of 316	2452	powershell.exe	141
PID 316 wrote to memory of 1116	316	csc.exe	142
PID 2452 wrote to memory of 4516	2452	powershell.exe	143
PID 2452 wrote to memory of 2556	2452	powershell.exe	144
PID 2556 wrote to memory of 3580	2556	cmd.exe	145
PID 3580 wrote to memory of 5840	3580	cmd.exe	146
PID 2556 wrote to memory of 4424	2556	cmd.exe	147
PID 4692 wrote to memory of 960	4692	msedge.exe	148
PID 4692 wrote to memory of 960	4692	msedge.exe	148
PID 4692 wrote to memory of 688	4692	msedge.exe	149
PID 4692 wrote to memory of 688	4692	msedge.exe	149
PID 2452 wrote to memory of 984	2452	powershell.exe	150
PID 984 wrote to memory of 6016	984	powershell.exe	152
PID 6016 wrote to memory of 4460	6016	cmd.exe	153
PID 4460 wrote to memory of 3464	4460	cmd.exe	154
PID 6016 wrote to memory of 5032	6016	cmd.exe	155
PID 2452 wrote to memory of 4688	2452	powershell.exe	156
PID 4688 wrote to memory of 2788	4688	cmd.exe	157
PID 2788 wrote to memory of 6028	2788	cmd.exe	158
PID 4688 wrote to memory of 6100	4688	cmd.exe	159
PID 1384 wrote to memory of 5208	1384	powershell.exe	161
PID 5208 wrote to memory of 6004	5208	cmd.exe	162

cURL User-Agent 2 IoCs

Uses User-Agent string associated with cURL utility.

description	flow	ioc
HTTP User-Agent header	158	curl/8.7.1
HTTP User-Agent header	165	curl/8.7.1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Alishahryar1/free-claude-code
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ff8651ec188,0x7ff8651ec194,0x7ff8651ec1a0
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,15005132414921080739,4560503284744961816,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,9821491661643087649,9729331883959913316,262144 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,7968001473398423125,10724634154755423589,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,14316486817866745488,13223371173654321645,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,12019885634819533313,2523322288888643430,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,7259266404599782724,9573052670188320322,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,15859941299746909785,17250666953760683332,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,9032954142328422600,7063562370324604093,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,9032954142328422600,7063562370324604093,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=772,i,16265202709666337816,13116528189815214254,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=768,i,12328249107836494770,11942915042295274820,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,18345600930460014423,5989650908674944874,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,10411491473101053369,2691726495466875848,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2184,i,1558504098329402192,5867779627993255622,262144 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,2481639877588188197,16844988402169233625,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,11290793297115831287,13063156241925354049,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3864,i,3998323571012962862,16399413623542876722,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3364,i,15486253664651654893,1912259728933588958,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6284,i,12392811885019293026,7360419284488000289,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3424,i,18060922037034415683,8255065489157775490,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,9453400804510094982,8976633002598520529,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6900,i,3474717878143400731,6775300229578419613,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6648,i,15337129943600006762,246593109971462688,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7144,i,7141737512400371608,16134128811134844507,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6616,i,2252917911391451122,10333495970365736349,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3632,i,9157745787422648914,2168317136948984120,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6780,i,639093206564209164,5787739106491859334,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7272,i,17974020019851058386,4838832990687771204,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7752,i,6801933908027927639,665449141793004469,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7916,i,10045683218205122988,16052436863188995314,2097152 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8120,i,16033363600632233803,6639412170841732886,524288 --field-trial-handle=2208,i,1598755630664323534,9198072462528094841,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:5244

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3000

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
1⤵
- Badlisted process makes network request
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1384
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File C:\Users\Admin\AppData\Local\Temp\fcc-install-b9f94767507b4c46966702aca8f6143d.ps1
  2⤵
  - Badlisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:6108
- - C:\Users\Admin\.claude\downloads\claude-2.1.220-win32-x64.exe
    "C:\Users\Admin\.claude\downloads\claude-2.1.220-win32-x64.exe" install latest
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:2444
  - - C:\Windows\System32\reg.exe
      C:\Windows\System32\reg.exe query HKLM\SOFTWARE\Policies\ClaudeCode /v Settings
      4⤵
      Modifies registry key
      PID:4304
  - - C:\Windows\System32\reg.exe
      C:\Windows\System32\reg.exe query HKCU\SOFTWARE\Policies\ClaudeCode /v Settings
      4⤵
      Modifies registry key
      PID:4840
  - - C:\Windows\System32\where.exe
      C:\Windows\System32\where.exe git
      4⤵
      PID:2704
  - - C:\Windows\System32\where.exe
      C:\Windows\System32\where.exe npm
      4⤵
      PID:5320
- C:\Users\Admin\.local\bin\claude.exe
  "C:\Users\Admin\.local\bin\claude.exe" --version
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  PID:6064
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File C:\Users\Admin\AppData\Local\Temp\fcc-install-aea520d96fa04643a5495765099af558.ps1
  2⤵
  - Badlisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5740
- - C:\Windows\system32\tar.exe
    "C:\Windows\system32\tar.exe" -xzf C:\Users\Admin\AppData\Local\Temp\codex-install-cd8149bf51db4abaafa58e4cc0366639\codex-package-x86_64-pc-windows-msvc.tar.gz -C C:\Users\Admin\.codex\packages\standalone\releases\.staging.0.145.0-x86_64-pc-windows-msvc.5740
    3⤵
    PID:4508
- - C:\Users\Admin\AppData\Local\Programs\OpenAI\Codex\bin\codex.exe
    "C:\Users\Admin\AppData\Local\Programs\OpenAI\Codex\bin\codex.exe" --version
    3⤵
    - Executes dropped EXE
    PID:3872
- C:\Users\Admin\AppData\Local\Programs\OpenAI\Codex\bin\codex.exe
  "C:\Users\Admin\AppData\Local\Programs\OpenAI\Codex\bin\codex.exe" --version
  2⤵
  - Executes dropped EXE
  PID:5856
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File C:\Users\Admin\AppData\Local\Temp\fcc-install-335d47a1f7ab4c608b15a48336682fad.ps1
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2452
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\t1twrjo4\t1twrjo4.cmdline"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:872
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESD4F.tmp" "c:\Users\Admin\AppData\Local\Temp\t1twrjo4\CSC9486CF6B1F94390BB3E6EDFF821868E.TMP"
      4⤵
      PID:444
- - C:\Windows\system32\curl.exe
    "C:\Windows\system32\curl.exe" -#SfLo C:\Users\Admin\AppData\Local\Temp\pi-node-2452\SHASUMS256.txt https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt
    3⤵
    PID:3276
- - C:\Windows\system32\curl.exe
    "C:\Windows\system32\curl.exe" -#SfLo C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64.zip https://nodejs.org/dist/latest-v22.x/node-v22.23.1-win-x64.zip
    3⤵
    PID:3456
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\4mxssyxe\4mxssyxe.cmdline"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:316
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES3EF.tmp" "c:\Users\Admin\AppData\Local\Temp\4mxssyxe\CSC5714CF565C3746C4978110C7DEEE2511.TMP"
      4⤵
      PID:1116
- - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
    "C:\Users\Admin\AppData\Local\pi-node\current\node.exe" --version
    3⤵
    - Executes dropped EXE
    PID:4516
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\npm.cmd" prefix -g"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2556
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c CALL "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:3580
    - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
        
        "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
        5⤵
        Executes dropped EXE
        
        PID:5840
  - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
      "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\bin\npm-cli.js" prefix -g
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:4424
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:984
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\npm.cmd" install -g --ignore-scripts --min-release-age=0 --no-fund --no-audit --loglevel=verbose --progress=false @earendil-works/pi-coding-agent"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:6016
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c CALL "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
        5⤵
        Executes a command shell one-liner
        Suspicious use of WriteProcessMemory
        
        PID:4460
      - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
        
        "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
        6⤵
        Executes dropped EXE
        
        PID:3464
    - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
        
        "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\bin\npm-cli.js" install -g --ignore-scripts --min-release-age=0 --no-fund --no-audit --loglevel=verbose --progress=false @earendil-works/pi-coding-agent
        5⤵
        Checks computer location settings
        Executes dropped EXE
        
        PID:5032
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\npm.cmd" prefix -g"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4688
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c CALL "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:2788
    - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
        
        "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
        5⤵
        Executes dropped EXE
        
        PID:6028
  - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
      "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\bin\npm-cli.js" prefix -g
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:6100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\npm.cmd" prefix -g"
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:5208
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c CALL "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
    3⤵
    - Executes a command shell one-liner
    PID:6004
  - - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
      "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\npm\bin\npm-prefix.js"
      4⤵
      Executes dropped EXE
      PID:1724
- - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
    "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\bin\npm-cli.js" prefix -g
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    PID:3356
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\pi.cmd" --help"
  2⤵
  - Executes a command shell one-liner
  PID:1812
- - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
    "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\@earendil-works\pi-coding-agent\dist\cli.js" --help
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4404
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\pi-node\current\pi.cmd" --version"
  2⤵
  - Executes a command shell one-liner
  PID:4924
- - C:\Users\Admin\AppData\Local\pi-node\current\node.exe
    "C:\Users\Admin\AppData\Local\pi-node\current\\node.exe" "C:\Users\Admin\AppData\Local\pi-node\current\\node_modules\@earendil-works\pi-coding-agent\dist\cli.js" --version
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.claude.json

Path C:\Users\Admin\.claude.json
Size 524B
SHA256 deb86ff6996d53686c8e1c69fb35e8e990ffff4ebe26fbbac493ba4fe7843019
MD5 8eb0740ebb7ab72f96f83089f095a32a
SHA1 82fdde375353dee36420cefdbafb5bbba7dfc9ba
SHA512 2fd43a68d5ec4468bbf6b058c9b27b337f6137b43ee5a9550bab5e8f4d53dc7b6d525c890ee6f0974b86b2971161ca6b60bd04e1ba5434cc9889222d714053e1
TLSH
T181F005556E22A47746D54227997D94C30578CD260111305407AF4714110FF33717F3E5
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 50B
SHA256 d852f6c54b21e8b25d3c2f76eaac9cd66d0790efe50add6111fbb6988528d2f3
MD5 0543ed0d1c615d8d9213981709e96bc6
SHA1 8e6a2291c0de1b7fb463586cdc22606b805de9a0
SHA512 1ed50bf142e6d4527c2f1c1399c048762be081870b80834c64870517794ddcf54be859f05c2193a3363711f2b66968595b0e1e3bd688fb681d1f19c9a6a3eb55
TLSH
T11D90040C51F111C744C100D0FC14C5FCCF50F51507014104551F4F0445D157735DF531
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 133B
SHA256 d850f3d39194684513c8f62af8fbabfda4509303cb463e84fe855bf5b1a63685
MD5 17c9c477b53862a6ff63ce7862edaa52
SHA1 cb1d04a9b7b2db7d5916e2317e48b373f1cb379a
SHA512 9a8c63a8cf9bb6a487651767265553fbaf52d7261992acb8bd5057e4ce4e0a4e92d7c0cb9edc76683484ccf30b3d87cf2ce33a7745d8ed442b39bd481ad01f54
TLSH
T12DC02B0A38F1388354C3D015ED1CD0870D28ED0B012050C1023EC7004225233703C154
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 430B
SHA256 71bf6b9a6315d68a44ba3de251e4b4ae3f87e5450047c208936a4897832fd336
MD5 3eb6f1ba16a37df287f29593811eb16f
SHA1 8a1d6734e7e6dc9a323e17a8555d7e6d4149c685
SHA512 da3b1faf1066b9e35b83e2b8f83555343184ca3a2b64f1ff42acc82b3236e345935831b8c06ab8997cc3b30b48b059d7abb73ad87b26a7644592bdf16c593717
TLSH
T139E0AB55B976A8B382E65617AE6D90830CB8DE2A02403099021F4B04011EB23B47F2A4
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 208B
SHA256 30b5c041f61791dce32bb509a3457ccb38cf6401aa44e5a62998f00b7208ef41
MD5 16d80269720eb2dcaf4e99e959d5c223
SHA1 74ab0f4b349cbfe1f5cabd6697244814d588edca
SHA512 3e58b24a1a1e596c35487ffbae11b8a1c959f296b687660f09082d5cd1a8b1f34d1eafefda759d3fb66aacdaa4e3cc8ae5a4192fbad62129d30330fedc9f4557
TLSH
T152D0220532A2B85302E3C10BEB0DE0870C78ED1E030120A4426FC704012DBB3313F0E8
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 283B
SHA256 452df50a51b0756be945e321ea303dff50c778463e0b2f28549bbb349a083b31
MD5 59070ac1f1f6df65256566b70382d862
SHA1 45e1d2f98d2e946a9023bbba72a2b083602e85ac
SHA512 ca0c3be5b0f9384eff5ab4166a0a1f8127f2fe5823709b8f8d68658af09b607d5f4c6a8d0747418a3a55b19eb0b1ea8ba6faa165b562b285c1dfed0b564199f1
TLSH
T1FFD02B4635A1B4A316E79007EF1D90870C78DC1E065120A8025F8B04111DB63717B1A4
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 389B
SHA256 f3ef7e8bcab1fe453f4f90d248b5b0f9a277a15b0f215fd94f34c722e13e8664
MD5 04cb09fa65f6eb82c9b95506b0a925de
SHA1 c6272b93659e026a46f032bf792707a052b2af36
SHA512 fb3dbcb71726ff2484efec4576aa2988f92d3e6832afcfba411f623abeb51b45721afc75719bcacfe078653d431f92f5e04a38478e1e52df6631fc3db0a5b78c
TLSH
T140E068013AB6A8B382E75657AE5D948709B8DD1E06402099021F9B14111EB23B57B2B4
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 169B
SHA256 02c64b0bcb9216fbb140b892daa63b76a575e0c4e8442d97ad94cbac43af63e6
MD5 658532be3a1acc52ba10724b1cd5d461
SHA1 ed9c14e827f391e8fb7db5772edff2d0412cf4b7
SHA512 8640e9a594166d3f8c3966cabee7904c09a12bdf13b6913ce82b53180285b6bdaf442f1b41154e23fb42a3282b9edda9bd3a888ac6b8a31568ad56abed2cb8c3
TLSH
T13EC08C0A36E2788356D3D05BEB1DE19B0D78EE1B02116095832FC714522AA73703E1A9
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 235B
SHA256 28387e03dfb0911dea8b1609ddab2aa4ed24969b1df9153ddf4b48272121513c
MD5 17e873516932e2b55baa41671a31dffb
SHA1 6c25e534e80da7b3134f2d00e0fdd1580e267a5a
SHA512 e24b64c4d5b1340aee02860e14d4c9bf8381d0a36b6105cc20149b899f64502a48b440d87f8c7e0d89c92b22950b75cea14e37da0ce361158f6e443f10044fe5
TLSH
T1F7D0A74532A2749316D7911BDF5D90870C74ED1E06512094035B8714411DB73713B1E8
MD5 SHA1 SHA512 TLSH

Submit Download

.claude.json

Path C:\Users\Admin\.claude.json
Size 309B
SHA256 22787116da5bc3a9a8c61255670f167028f083fbffec44caf4e9d6b6cfa117cd
MD5 2297497dce467f6a9d5c814ad2a71c4f
SHA1 dec56e6643450917060f12fe23ae35efdc917397
SHA512 244900e7d550f32897f590251df307270a7abca9fee76c255a579d28e60e847a2f34bcafa36d919a12842f1bb31fa213b6c6fbdc2ba0322f923665bf7187c1fb
TLSH
T1B5E0C24675B5B4A356E79217EF5D90874D78DD1E065020A8025F8B08121DB7371BB2B4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\.claude\settings.json
Size 37B
SHA256 c0eb33614d13cccdc2db798e2a73c82af9e6f291d8261c6b711b620a8d18648d
MD5 a303e4a792338ba1128c5d9e22677aed
SHA1 df4ade37e2674a7fb00abf44cec28295a8672968
SHA512 161773fbbdf4f8468e06dd012253b84e89832380fd6a069c0358135ce4111dfe8f7c883aa667fb7a9d972b4bab871dd2d36b38bff71af2aa8b98a03bd3b4f408
MD5 SHA1 SHA512

Submit Download

codex-package.json

Path C:\Users\Admin\.codex\packages\standalone\releases\0.145.0-x86_64-pc-windows-msvc\codex-package.json
Size 215B
SHA256 d15dd152401ec63697fb4888d3dec75a849ac85c11aa69256bccc0355e0b7ddd
MD5 c2b828db84b1d7f935ff65cb0b52fdf9
SHA1 9111da82cfbb8b035a6fc929f5754f08f07e98e4
SHA512 907971d66ad2e3aee56813d781ec6556a83a9e53eac6a63feb14a2d474196f0a9bcad8e265f0467f78384dac2ff5dbba243b27020ebbc53346c94c5c36f56f50
TLSH
T1B6D09273960546237BB09740AE394256375D0E4E63310D4FBC3B562891B236606997A8
MD5 SHA1 SHA512 TLSH

Submit Download

apply_patch.bat

Path C:\Users\Admin\.codex\tmp\arg0\codex-arg0brDa47\apply_patch.bat
Size 107B
SHA256 4fc3a19bb1729888cd9e51c7760ddf743a4681a7f6afbd584ebd45de949d43fe
MD5 3e6949637faa8b906ce86f113702053f
SHA1 1a516ee7f7c5ad6bdce40d366b7fd691750855fa
SHA512 58397847b96ffe27df5e7e21b466f485076395b5488de4d6bbe4577501407fcfe5c10bc541624890e69ff0df4476067f652ec27573e84b0ff07d2d99729f05f6
TLSH
T1A7B012739ECDD0585889840FCF5342B483BD1E8A67C4A9034DDA879C06E9B8D78CF002
MD5 SHA1 SHA512 TLSH

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 14dcae22409df129f037dcac4cddfca0c1d1943c30b15cc3e6cd3d687190d9a4
MD5 75bfe3ad515a48f713dbd3506d5a9e10
SHA1 6a3b3367ea210604b7510ec800f4573dfff6c827
SHA512 e804cb837044fcdf3f35cb4e51cbf7e9807842b1a7072516c05069bf42290a3f176370baabfadde3ebb65b4d1254a8b6a87473e2259784879212807070c0c557
TLSH
T19E71DC313275B0D4C95A7F07192819C063BF8395FA98AF5CB65C521ED92740B9B222F3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8365d8597d396643eb3cb27ae8751c52f3b1ae3e25576cd2bd50becbaaae5ffd
MD5 b16e94a14013394e81faaffb1edb0866
SHA1 095be96d92aca0f788caa8c464e88fe0093428bb
SHA512 d08bfded37a6166d23fc97a47902156684e9e48ea9630c13d74b30f201e0b1cbdefd310a06a35543c33ad6c261585c043ccdbbaf6a515ba32c8540521104e42a
TLSH
T12CD022223B4AB000E2AB4132E2228740236908A128824604A218C86C4EA00C022C22C6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 c3bc749fa191d1f952a4ded22fdc3aa26ec1d04c689f789dc95d8882ed7740b8
MD5 5f6322b8a7ad1bbe435eaf60ab4ef28c
SHA1 306db4c4981a0e0111c19f84baa71d236de68d7c
SHA512 b86f6ebff82c0986e56e855ecad41b23e9a1d89c4d4bdf4b1d32bda3426b0b5d069c4386d9aa0692e4ad3535d9328bac15233a72f309767e436f31f64695dae7
TLSH
T14BE026060BDDE1B64201A457CCC4935EE110792EB28D5AB932BCF09C3402084EB75C94
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 92afd1c0ec9ed1cfe59feb742c5b064028ff75bba7d81d72ad4463ed787fb615
MD5 c9a927769a5eee0213b5de8b8293af8c
SHA1 720919327f89a562151d156b8a71a1f141aaedb5
SHA512 6f765f4def303358ffe265820deca24d4f8f9eaa8e7f1f106224211ac3f7ebb728ed500ab3bb0a5de77e0b8a601a0f704b35bcef333aa4ef77f3655992f7bddf
TLSH
T1D8E0268907C8E29F9204744745A8430C82803A2A97C87B6A274AEC9876860D4F7B35A0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 ae99fdfc3fbac7deff206af98556f3993f1c3f40fe1176939f3effc93833bc8d
MD5 9683ee0effa2bfca240118d3a9a92e68
SHA1 7f5846f3cd2adc8fd0788f67733e1a66a9a4502d
SHA512 063dd8a1a4838b395fcd50939ca3e5b24ac72a8407ffd4463838b0b2ee5bb8d41938609e4216ead91f6f1a45a694113987c815ba88fb7d83f6eb6cc2fa33d737
TLSH
T194D02B9AFDEC9E5ED7E41ABD5BA5B4000A4802A2840B9B1300747EC03495AF01E25030
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3f695a21e59055f0ba5ac147f1eea97333583902bc91123a217d06c5dc15db0b
MD5 7d842605ffecebe1ebf4f207d2b9fd64
SHA1 05b1afa935534f02f056747344c39e4e3a36d593
SHA512 b0408e6902d5fdb14ad2dfbfac5b7849a08f7fc562f498e88c7be6e4424a43708f9284ac9b5e23dba9df5fe17e7c7865c528e6860f9b556fc9aa1cc2d7550e1f
TLSH
T121E02BAAC931BC2B18FA0B9820905B05FA5423172780854F7B3D93098FB527B02C78AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 83KB
SHA256 b9cf829054644112cad26f89076f408cecf4260bc41ecf58632fd3b5d6fe9425
MD5 4f54fcea847826f6726a8a9f7c263fbe
SHA1 ffe769144e3f5a7aab2896c851d0ce1188d246fc
SHA512 997b7c85ad425a1206c08ce75e2634395ca28f18d0f93a8b31d55318c1d87f60b9d129dd6cf27901249ca47fa7a245d3d4fbd95b35d0010dce2480b49a755950
SSDEEP 1536:Nly7os2TXdq2GQFT99Qu+Kb5+z9xhWhJk4dMrXy4kR/HAvVlOINPDreRnL9ST7s:NSIMMRAo+z9xhMKrXyTolOINneNLkPs
TLSH
T14D830245A27FA80B18504EEDBFCD7ABA0F766B21D86580410D1B48D9E2A6D3D1633F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 204KB
SHA256 e07afb519a458b40e964a2395ef3ec11b6ec5ad2a65cb1d39ce615c0590a1f63
MD5 12eca9c7ebc218a4c2c1d3c4156d2037
SHA1 c899212cd696f70d943bdfe4f5546979a1fbbffb
SHA512 bd508ca04f0dde56f56bb858f6dd2b52400794dd34dc835f91bff387efb655dddf05417a3535e954fb8a20e01889512f8f5eb465329217f053377057e6e9b65d
SSDEEP 6144:O+oKpTbxjh9QgAyqsgn8EzjGGa9PER2ZfMrl35:O+omljh9QBXB8EzDkzE55
TLSH
T148142311B92F164AEF5F3532BF9D98C2D0D4C87AF0B8158D3DAD546CF9E58060AB886C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 256KB
SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
MD5 c21d5d29eb3014fdb864f388b34145ad
SHA1 85f724b019e8d04f50b336631c66f788c2b8f651
SHA512 a67da76326688dcd2de7ab513669246bdaddfda93635de9ef7db820243f3c4087e6166836f8b9cd09830873f0b375d2b720241734eb50d5cc8340d0592e9dd3b
SSDEEP 3072:aeE4Sz4c+ygjpraJ9XQu7fZ/4aUe+w3O2jD/JQw0hHyt8Vn60pGt:Qz4TyXJ9XBfZ/4aqw3O2mRyB0
TLSH
T166448C70F7C3E782CB431AB9A07C3D771FA504C562C51E1786A3AD219098B6AE71B53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 18KB
SHA256 2eed3abc7301a2c73b9ee873c6cd2fa414c0ad158667780d148f77bedfd723b6
MD5 a4a1b7ac703faa2ee9bae4aae97bd7db
SHA1 18c0792ceeb2da9e2f6948d09d432ad92edc41cf
SHA512 9fb594930a3681dc1790c1d0d01b611e4258b3519622e59b84bb8d736f481203c6f22ffa94d9444d75c075ac7b44c726d07b45e7478ed6c1b77bef405817536a
SSDEEP 384:JisZfAW5EK2gXWCaF8l6CmFANjbtcZPacjnzucWntL:YwIW5EUy8l6CmYbQLzhWl
TLSH
T1F082D16207B06256BDB3C8DF46C49F80C5CB6E97D6D720C29F811C88BFE4AF91A6D016
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 56KB
SHA256 4d4e46098cb18761a2a483237af2aae945556c4cf7311a048aeeff22cb19cfa0
MD5 93940b88cd13f942cbe65665da71b7c5
SHA1 4f5f7fcc5e136cf91d91caa34f6e7f47367beec4
SHA512 99855b58a075a5f8f0805ea35c6e5753e8da2ec703c44d0ad260560ae8142b194f5a74f1117af015b8895cace3957491af3a5c5209bf27ab91fb3fd04ca6f151
SSDEEP 768:5kh4ynCey8zit0Q5UXCHi/a6ruAflCndHmt8dYgbVo0yLnZ4s01bK2GvovpP0aq3:5kzS8O/U8i/h1dChG8dBs61iQvN0bx5
TLSH
T1094302AE24A7FFA5287C1DBA1F3D210E548699531052F98723FBB350E61FD4B343A602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 72KB
SHA256 59e803050109a2c5dd7ef1d20229e345b768103e68bac1042e2bbd4079a27479
MD5 708583fc0464147386dbf2a62f1c0b22
SHA1 714f44e97ee63067f65e4c348174f475236541c7
SHA512 4572a3e5ad0d9c7d457ef4b4fa7d119d4853e865c088c9c4a8a9e8a4f19c7db3da7d55eca3674af7e1ec5a414a86a671a1e386cb21e750cfbc2a4b7617a77668
SSDEEP 1536:8nQgmrycx4uNgX9WwvtKRVaEfows8DVnkHVm/It4aW/Ubg1cuO+6:F3x4uNI3vtKRV9dhVk1mVsU1cuOh
TLSH
T18F7302670B47CAB65F118A0DD65D00B4308EFBCD159F48BB4AC70A11BE895DB1F9E12B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 256KB
SHA256 dc1c6406f697b169763b4d2c9d04f9a085d983ded648dee6a7b9b0fc8f384c76
MD5 cd110eac717cf170ac3577e0688abfaa
SHA1 fd0d805961eb495bcba9d4b13ce66f6849be486f
SHA512 9d976d933ead9dffca80cb4557120fd0d986025ec874b52fda18a99ecd090fb99c698947aab62b7b18c8cd7a0d743fe39407457a32c39bfddba4399b532d6711
SSDEEP 6144:jrSg9Zl4ouaEN26aQiAPZf1f4KOlP+lIwx:jGZouaX6JPj3kP+lIw
TLSH
T13444E1B4F683C781EF4376F4F0AC2DA30F6606CA61E3591B49613D11A905AB5E31FA1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 256KB
SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
MD5 be569398e0e595dd2f72e1bc4cb2e4c7
SHA1 a7a59eddb0ea2dacb98ff03113480327c1805c9c
SHA512 475d255ae27e373971a32efb3c28faaa9aba5e3b6790329c211e038d1258f84b826b88aed8c7451749a608dad9aa433b9454520314c20339fe6527872bb15f61
SSDEEP 6144:oxQsrSL1TgnPaBehiQ0tlOw49YjoCrT3:eQESLNMaBeGyS7
TLSH
T14644BDB4FBC3D782CB132BBDA43D3D374BA852C561D05A0744639D26A598B26E30727E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 512KB
SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
MD5 a0355e6554046083e262e04dd1ee6199
SHA1 73f053d90ec3e9ddf235f2f79902350096be795f
SHA512 3e794941897c103033e709913af6e7057295c2e9f4587f19d1a13bcc867c86f6816d168245660195ea96ac17c833696abad4a4f034aa9dc2a45033ca09d52a11
SSDEEP 6144:aVIHGR+Y4LbXL9wD4GR9R9YsRUhovbfxGyTmSfKcKApMqdjdLi9NrMCrx4F:JU+YI9wD4GVwdVALzu9NQCo
TLSH
T1B2B423E9E1268529D30484B1BD769D0939BA3B681DEF3D4B04009A62FBEF1D0761EFD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 17KB
SHA256 66f42dcb1309f31499b2372127e0b44e5bf84becd081c361dc140bd991cfe7a6
MD5 a02978a1a3cf9ab5bce84b66d8ba9021
SHA1 6ca5c71831a0bdf5856dc22cb3581cdef038f259
SHA512 22e6a6768f37ff0d61c1b4431ecd7a36b91e0d127237147debdd2ac34439f56fb36d2a62d447371cbfc88e435cbdaefe202bffb7b466b4af3c0fefee75bb1e41
SSDEEP 384:OEftAsIC7HB7/+8xczO9dMrSBHjwzhaDeqjNBE4AJSH74HMIq+:O66shHB7/X3WzJk7CM/+
TLSH
T1A282E0104D7C12F12FC989A4734895E9495C2A6EBF2E03138698A3C48EF9F4B366154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 17KB
SHA256 17bd64c4f43d604309e87d916f9233115180c0dc0cb5a94cdda36a2add279da6
MD5 64c1bca1e5194269bb0d451eab354a00
SHA1 42a610220f8d89348e0b21e928521bdb681e7431
SHA512 fe3615a09e7e83f01412f62e2b9d6c446d238efe59cc48edde5d50729f1ff700d9772fdaf0e64ef180c068dace00abcd2e284a2effd14db90b44a18fda9a870d
SSDEEP 384:T7ua+M7O7xk0Ib68GKHk6hZ/IwuXClM3lz0EXw8OHI2D7PwwjmTT:T7uxkZb3k3elM3p0Er2PIwmTT
TLSH
T16582C0C04F7AA46E28DB99B9C436CAFC716B8553721E19A1C07B0EDCCB050B29F975C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 19KB
SHA256 27b38334127d248f760ded14a3441b6ce3972eb110f73e50e1ae76dd16b73861
MD5 6a63dd3b4bdd8e27df920cbb7df0142b
SHA1 888febdc97e6e27e637e14b0017ce8c3c1b2ea09
SHA512 d691a06e50557c66496178460c13628b215b0616759788a8386c2bbec15d6be681104db6616a0840aa4941bfbb297d6cc345724957cba12752e1c2db675a8603
SSDEEP 384:dWANsy+GeX7PyAJGEXH5K5ldwQ88WAtM99LrUIra4dPTPxfNcUpxvRKY:dLNsdGeXbjJGEXH5K7di89tMXLrjaaLD
TLSH
T12192D128BC2F1F4A57A2B2A1EB2C51825CDB9853A9D5502CCD8E25C3706F1A46B47DF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 31KB
SHA256 6fd4c09b46b120a806bc1152a994808484d31c647298ab1757c0ffa7cd002839
MD5 ff7234df21de0f35b6c517109af31c44
SHA1 3ead0e8fab08662148c41d3b808e2a18bf0f241d
SHA512 2f73e3da573ddbeb6ca898c9822acb0ca32a3ec131b6b22bf71ffc472e7758fffb31e8a865fb436c0e1bc0bd4c958765e1a0d0b53912dcc4e656b330dbd2282a
SSDEEP 768:HDGiScysQMsaaJEiCoJ0Nsy6+zxNu72oZiBVxZW:HDGiScHj7aJEiCoON56+zNogU
TLSH
T102E2F24F2A5568AB986642511522CFCB00FCD98D8583F2FC45DE67BB13CF746E00699B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 27KB
SHA256 bfecfd1d0bed797f7445c2f893d7b43ea47b0e716c57473fdda7d162227e4af2
MD5 12ce97539cd9b2f2e7ad73f993ff62ba
SHA1 d0770cfdf2510cef546a3b96161da4659d5a6900
SHA512 5e6c5771672ce2b590a29277df6fae8b6975d9c30fa53b3641f4940e8284ddc850a4d4f03436b2e25e387a980f7991b4e7c454997e758c4b80acca11a438cddd
SSDEEP 768:WJGN7ITJFisl2dNjfgjVXB6ImcG71g+/2EBXA:cG1Ari6ElfgjxB6DcaDQ
TLSH
T1A0C2E1718D1FA53D062569EB0312B27E109619887C305B66B2B7CBBBAEA8153803F4F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 31KB
SHA256 aab8564573e52b7345e4993734f7a2922501c9647a1edb3965e02cd726396379
MD5 10df2491eb5e200ff4062423753bcdec
SHA1 464376541e4cd7990eb266604e8b3a86cb460c43
SHA512 58341a210bd3cffbc482b7125d11470764c71eeb7a344465d5a0c4451325f16c632594d2cbdc95db43d250e744136ee145c3d1bdeed1a30bc480bd48bfc0f3ef
SSDEEP 768:ZAXd+yQkvjvVSui/G8Z5Zet9CWRacABbI3csaD2:Zmd+8j4ui/G+jw9CApAnsaD2
TLSH
T142E2F13B87E7F2206CD4634706B920A266F96F678E4B0C716B170C7D76AE0D4D9E9438
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 11KB
SHA256 e465d26e39d60c94a1356b796f7a0308f26af2e1487a7453302d633f5db4e665
MD5 7abc36e54fc8d54b15389ef59618a281
SHA1 36076b09ca1f908b4e2e12118280ace61380659d
SHA512 69fb652caf095a02bb35f080b0f6711e9e76f426916b14b9f06664f9bca4cb1b02b7beb11fb1b113b010983bc6909fb098214b1e0784b93524d8088d4f3bbd3a
SSDEEP 96:S7hQcXzwXzFAn+dS62tSmznle3C53/gajYC+MIjcaZlON0Z9HeLSFcy9:SVQ0zwXKw+SMlCQ3/3YCwjpY0Z5kSH
TLSH
T18132D61040861A6EDBF73D3A19FBC9547AFE8212744FDFE3116B197D3B1E3990968908
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 9c12e8217bb3d4787650918c144528fdec35d75c75a67a2f9de1f8015ad8217f
MD5 adb9ae483edc482690b2b5f2e6b2d161
SHA1 2e57a76fbd2cbd0db32eea1dc1049a7086a9b862
SHA512 34b8d328cff30011e95aeed9f2a666d5954bc9fb46d89d986dab1d04a5fa9d81263c3ea21a686045a14a4f60674a3e2a79b5bd8030ff8e00428656ad5b5bfbc2
SSDEEP 48:/DQT4pv2zd9i7Vrd6/Bly3de/68KBQ+ovpF+QsDIbashs34rx44IWRqIhtcNsB:/DQT2vMdYVg2Nefr6IxsIljDhtAg
TLSH
T1ABC10654504119ACE7F00D3E59FBC6453E3E82A1B54FDEE750A8097D3B1876E0E3D910
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 31KB
SHA256 33ad20661134c273b03c97ccb0d09f91f8cbcd026b9c5840710b1cb4e3cc6de3
MD5 d3f75c77066f7f004e39c300564037f2
SHA1 93ad6cbcb240d312e8c38c821ad6c53ce668f9ca
SHA512 889f7bd7f9da582d24bccfc7cfa1ac7c502eb3681935e1d496cadfd59b3623bc33d0c78d710938fbc74d3093a0291a5296c39eb9a180635059103e85164763d0
SSDEEP 768:JuCQ8APIyaxao4BxNlTcFk8kMkMsziArBAZDITrAlMGWGkd0+f:rA1NVc23BAdI/F
TLSH
T190E27962B5F8120AF27B5FBBA8B61BA14C7ABE562D04D85E5860214D4C71F40CD73F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 345B
SHA256 d3b3b3f8aa341da0fc5da0b95864994830c2e7fe270f7252fd20229f88bc269e
MD5 954a2b63a42239f0ef21ea3dbf64a519
SHA1 10104c553aec8e08996be227ab6f68c7c25e0d65
SHA512 7a1580d5806229dcf6c5fb1800d46c4c82f4fbd1c7e74ab5f0d504cc68a3b208ea5b57e5d8aca74d0b89ae0f4bb1ee11c1e341eb8746d1a92a0745e2bf502a70
TLSH
T177E0D87A85CAC26B515450D60534BB0D95A3660FD788AD450FDCC8147182044FA7E252
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 236f1a92118872c3ab95500fe9bf519e59c19e7c785f63513c9f8314a205b9f8
MD5 9bd8f8aeb1aec7ab61276e2f8a51b481
SHA1 85391750eed46f8a3c4b9ec8c8f2c4145f255f20
SHA512 0eb2b2839da0d2d1a8771fadc49d091a829da44fa5813f8dd6931d70bc5385cc479f1e8839de9be31c7f79716623f71f9ad8ad147c9085dd8a1b106a14165893
TLSH
T18F517AF747B1856DDB1295F0EA08EE2B8E6C0110831C78AA85E0BE57D3E3871E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 acebc6e0474a5f199280249c97ea9fbf1fad3f332311036d71ec57430309b3bb
MD5 8e163541da49c7c72e6d95ac562cf353
SHA1 4fac27353e3bae4ebbb9f2602bbb09d4e6a64488
SHA512 432089a9bcbdd202ec9547fc823ce8b58a6b995f2be6000d468b9d46ee25b3a1511292bc3e290dc5f06773150bd6f79aa713b98bc45c2531ea6bdcdc13e038d0
SSDEEP 384:D1pmbpEhIqcDey71ewQRaWgfFu9hSUaaiGi1m9mtmBmDmrE4kmgimHitz4KslJUt:yefM8QiYGuhwaaX
TLSH
T1FB828CF7C3E5852EDA2251F0AB156E1BCE1D0515536C3C1A89E4EE87A3F2472E28178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9c2d83db5e288b62c87fdf93a1878545e0925992f6ef51fd5f97ea3f179ba111
MD5 5cc4d8b70cb8fac48c0deada16d9452d
SHA1 5978e2d97e4ccb8ddcdd14d02999d39c3a777462
SHA512 eef0a6043cbffe19804c8434ce7227c11f164355c03b3e4d010ac0fbdd0ebcafd7f36b5345341c54ee1ef613cffa4c3ac9137674de09c2ff155b13ee5f1787e9
TLSH
T1CA31A0F783E4856E8A0196F0BA18AE2BCE2D0514432C3D9AC5E4AF1B93E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 41a1d2b7c8bbc1bc6d72e4657f15247e5c1f40ea1cdcb1823c1c0b8b915c7134
MD5 b941171fef1854203045b82fa205b15d
SHA1 f53f6576311c5e0a8e946a6d2b40f528b5f785e2
SHA512 3c1f4790d2fc05277d423153c3ada1311406a83cd81aa217d7f1bca57edb9c3d88d1ad3d594e9c7a3ec55759789a36bee68b1a8d1a04f17833af040412350832
TLSH
T10F31A0F783E4856E8A0196F0BA18AE2FCE2D0514432C3D9AC5E4AF1B93E3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 e5f14db550d10c15aa5962fbe8088271c16aa4437ef1f3dbe718495dec450d1b
MD5 df8c8057e75790698d9c0e5833c38f5f
SHA1 7e28de6d54bebfd3c2836e4debabc668669a24aa
SHA512 663fd9229f45742d95d0d97c40c650eefce20204c44e1f09423a9fdb565ac79ed10dab6d2ccf493e799c4c6195628a72bdf69bcf1b94e85aaafa99cfee0d6e5b
SSDEEP 384:D1lmbEhIqcDey71ewQRaWgfFu9hSIUaaiGV1m9mtmBmDmrE4mgimHitz4KslJUc4:iVeM8QiYhuhwVzd
TLSH
T12C828BF7C3E5852EDA2251F0AB156E1BCE1D0515536C3C1A89E4EE87A3F2472E28178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 de892f38a22c244d157196df9e985aeebb565c3a927e5b01a0b1aca5f3eb7ef1
MD5 4a1f66951df9cacd65d1db7ef7d98f99
SHA1 ed4575e192421823bd8182a84b114d1be68de6b3
SHA512 8a8fad89b85450ed09a7e6a02163386770a28268a6a0ece4a7f665f8a8487ac9aca76c03db1e00bab99f0bae880a2ee221f707f4b444f06e1d34cf773b0b2b17
TLSH
T15A516AF787F5856D9A1296F0BA18EE1B8E2C0510831C78A985E0BE57D3E3871E14175F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1cfdd5cb1c7907c3dc395a0b16155e1572cee25eefa177d2cea29863a75b417a
MD5 2a000c0876f58aa029f3601933afac2f
SHA1 69f8a5ef7945c28c51c18c55606a71c6def02aab
SHA512 55c640bc61338060408e91050b7a5168f6cbf506031be81f9e63a4b8f1e9bce631b9d7deab6b97b246fc6f980be4edbea9544f816064676834e25424e18596e2
TLSH
T14B517AF747B1856DDB1295F0EA08EE2B8E6C0110831C78AA85E0BE57D3E3871E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 207B
SHA256 f9539bb56b376b946c0dc8b1a42af78f762aae5311eedca1ed606e474bec712b
MD5 bec8c9b2e691346e3a0271a4afb541f2
SHA1 728d9aa4c88b49c7e16964ecc229e48cafeac3f7
SHA512 265de0ee996b2cdb05a102722b02591b0743009f087c723687d7b5093fd58135c3f034c0c57ccbaa629d1b3ed747918bfc1874359fd7ffa2107ea383944ad4e5
TLSH
T1D8D0223B6200B0F5E56CBE8250BAAC8FC72B00200802DED411D0989D16358AE8A17644
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 148a80e6394781bce175bea65a4c00ac407df750914ef1167bba9a416dd3e9fd
MD5 cc6444eb505398ee01e96a464e243bab
SHA1 0218400bad1245280a031b590df47392764f6c00
SHA512 276ca97f0a749f9bc62f66b1c496f7ae6cc7efa7604d81e65d5a8bedb386543db4b4e106c1984df735ee4c51b094577ee1c024a9342b8283475bb608f5cb222e
SSDEEP 384:sxZAni5qKm1n/fHsnh66s8qMpRiYnazAW8pZS15posJWeT+rEtxPyXHbhm4/PW6T:syigKm1n/fwh4Mnc7WeT+riCHblWY
TLSH
T1ACF20946A520C87BEAC39D19B83D7E3396AC10529A85CEDD59ECCE0C009E5FD6F0785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 d846ac054c131314bc1f8b7e2ae75a37854f7cafb92df09959092bb27d3df206
MD5 81dc608b8c7e7de1f4d8fc27e0909f40
SHA1 b18dbcaa357d5941c559442a3f6b1a0e793f4eb7
SHA512 24d579a7bba2efea9db17e77f7584be7d3bf896f838d8d04007f4e6f417a24e94bad4732498d874348f0a320d5792de8de861c5cceb8c42c3db00e312dc1ce45
SSDEEP 384:sxZAniUqKm1n/fHsnh66s8qMpRiYnazAW8pZS15posJWeT+rEtxPyXHbvCm4/bWa:syiDKm1n/fwh4Mnc7WeT+riCHbAqY
TLSH
T13903F946A520C87BEAC35D19B83D7E3396AC10529A85CEDD5AECCE0C009E5FD6F0785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 37KB
SHA256 2ca401621f14416e5f2ef277b70937d454fe658a2a65b981fdc7755b9e3ec006
MD5 91ce0b9a0d99b2248573084cfe8f3e65
SHA1 6e85df2c6fa21bbca2027c197a313b9ee6816863
SHA512 1d618175b4d5b243bc72c0ea5a29cba2142d8d6baf11dc2c8dd0ef4c15dff92184eca72b4ec45f4205260bf107a8931737ef87ad8442ae44c58663e69186a549
SSDEEP 384:sxZAnWUqA2m1n/fHsnh66s8qMpRiYnazAW8pZS15posJWeT+rEt/K9PHbvCm4/bi:syWDzm1n/fwh4Mnc7WeT+rmAHbARY
TLSH
T113030946A420C87BEAC35D19B93D7E3396AC10529685CEDD99ECCE0C009E5FD6F0785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 8435c62ef52c49e05c4497e60dcdeadc1d611ba4c5fc24128b3bc04c33e1cc81
MD5 648a914a2455fb03cb0c2b9aa1e41001
SHA1 6304cd32a5e1c27c8a317cba3d0da6c67a66f4e9
SHA512 2ef3bb8f5da45812cba20d5d1d092c69d72acb76f2a01525044e51334a4777ec395640816fbebd5619a3f49c36b70453bc3890b3993bc2aacc09d904309d6f2a
SSDEEP 192:sxZO58SRxWyMqZjK1Ml8MkBh/fhJsmhVCZtKPDzodpvOHykODHW6+WNYOZaI4/Y1:sxZO5Mn/fHsmhVEt/VHbh4/9jo
TLSH
T14B72D8166A34597BDDD7D219FA45BB53D2F91023D2904E48EAFC8A0C04E76ED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a6d84d8b8fa93e7fe446e69f51b3e6f20bf8c7f73bde4354f83b951796c375db
MD5 f7770659ed69b9e210efd27f8337d314
SHA1 d8708c84ed75c7d77296ae8461248db754f81e7e
SHA512 eeafb2800acb01fcf1890a8cb9343715ae5db2c8d79ce2e36c13b6a0564f6e6dbcb997817522aeadfdbcbff00e2f368f9e19ec19c61d405b10e84255a5d4298e
SSDEEP 192:sxZO58SRxWyMqZjK1Ml8UQJkBh/fhJsB54aCZtKPDzodpvOHykODHW6+WNYOlfa3:sxZO5qKn/fHsnvEt/VHb/YZxSa1Wo
TLSH
T10972C6166A34597BDCD7D21DFA85BB53D2F91422D2904E84AAFC8A0C04E7BED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 f921bb805a53de0f76a061c8c315ff540205a098f6b97c5ea2d2b53700dd0def
MD5 1ebf08179cf2483b91676cbe4f997195
SHA1 d1a41e02fc5ebde919b63199a73066afea977fc4
SHA512 7ce4b1b9dc8a8f69b345e86146ebe507ce81492df7230ededb960c6b29cf4c52bd08eb7b53922d81abee34fdfa6209236bd039037eadefa7d5c5c854b7d6590c
SSDEEP 192:sxZO58SRxWyMqZjK1Ml8MyBh/fhJsB54aCZtKPDzodpvOHykODHW6+WNYOcaBZYf:sxZO5an/fHsnvEt/VHbJZD8Wo
TLSH
T11972D8167A34597BDDD7D219FA45BB53D2F91022D2804E84EAFC8A0C04E7AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 f4570c9db9765b1a440a92f3d523163f77654bfe52bc0befc3e4c528d7b9b52b
MD5 2bdf3a9bcc41e27035fa22f2550619ce
SHA1 ec038115a678a0ab44d28517ce6cc4986ba6f27e
SHA512 caf5aab28fbdae88c293a176f137d418c4200a3173e0ec095a0f3ad77a97cacef0f7c784e97995ed5f46f5fcacb1584ee6ee262b5142160a3207c492bcf6ce8d
SSDEEP 384:sxZAn35qKm1n/fHsnh66s8qMpRiYnazAW8pZS15posJWeT+rEt3hqvHblm4/PWo:sy3gKm1n/fwh4Mnc7WeT+rc4HbJ5
TLSH
T103F20A06A520C87BEBC39D19B47D7E7396AC10529684CEDA55ECCE0C00EE5FD6B0785B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 651d18d7abaf1b4f4507289af79e93ffe95d6e230d9c89fe5a8aebdede26c27c
MD5 9dd7ae8c57ce3535e5c2baefe9ca8bf8
SHA1 42ae411589278d4b5e0d59c5b7cecdaffcbff912
SHA512 d3970861ce02bd450fc80ac93673893c9c190b78c5522e34d9398cded070a8ea2caf937ed0e05f9dcab65c8f17b0460350ce2b7ac68e6d0f0399bc5ac40ac43c
SSDEEP 768:+IM2tv5WvF32/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4sLl2cNV9rolDWr5ljo:+IM2tv5WvF32/u1ja1sLUcV2lqrc
TLSH
T1EED2FA3B680CCB7E4F840E9CDC265F976ED4018BA698495487FA494C03C77EB522B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1672900cc71fe9ab_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\1672900cc71fe9ab_0
Size 1.8MB
SHA256 aa06e59a4577abb9649ba645f2fd1c42ae1a424008f3d72b4b9773ed6d13f6a0
MD5 b407fe620ad430a074067e984b175edc
SHA1 6ec783668d1f2064c1d12a795fbcf0166cf94607
SHA512 692e80d0b4e1de4861b31ab3644f6195043e2485416a312fba3be7bd54b4529555b1965fb0a02089b6182d058a9b7b487b2fbe1183c2ecaa83df211742b02be5
SSDEEP 49152:qxEkm1qvxX98p9ZAMSnMaSf1QcuIcjmvVs98edFWfhnqlaPXnHjT3GE8N3MKn1cN:I/NgZ
TLSH
T142854B9AB2C6B03643DF51B5E03B6205F33D09C8580D401CF67969DB78A5A8992B7FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1672900cc71fe9ab_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\1672900cc71fe9ab_1
Size 4.1MB
SHA256 37ef9251e47059e44c817932ef82f71191810833bc247dc07f30f7e853f6269f
MD5 d782053ae3683a24e454b0ce37326581
SHA1 c620cff851e51be0a2c296d44a98831048c8fe30
SHA512 3fe23021d00265b03c591b127ba0fca65e798e1a455e99a49d9a9cef5223e9b391a58292008f57103217cb31435409c34ee02299c2c232d62532a9763de045af
SSDEEP 49152:0I4s6X0Y1ueatRt59ht59xN5dhwhmjpTjHZ1NVsaxq1A0U1gFKdNih1gr:0bVIQiRFfxq1A0U1gFKiC
TLSH
T1D8160A1213216527CE5783FF41A68B3BB37A81043FC3E71619E267296C393FB598E45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62344765313d86e6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\62344765313d86e6_0
Size 118KB
SHA256 d70fcfce5700bb15dcc68a5a31e782515894801ecb06c9213c70dcdb88da4f78
MD5 e48670949a07d50ee22a1146b6222bc2
SHA1 e32bbc19a48e3eba390ac5c1cbff8d97e31f45e1
SHA512 f92f042445ecd22afe61a13f41dc16e1782276bc328c80397dd810e5513fda092337a7e3677e866dca73254e7aef0fbc7a25ae7b4a5e593f71e1833462346508
SSDEEP 1536:LmK2WOlafVzrc0S8rOhckO8aIJYoF7mSRC+jHMK2W3fquBYOtBA3Ur9zQJGPJEKj:xOlafJu8yckvN72W3fnAQzQUj
TLSH
T110C3D689B1D3F0B507E720E4802F550BF17A98A9654E60A4E6F5F8D4AC78A4E8437F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62344765313d86e6_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\62344765313d86e6_1
Size 312KB
SHA256 82f8e1216e53b901b077132c18126fb9e031923966f2970dfd3044bace385e4c
MD5 77825df005f74662d46ce65b53925504
SHA1 64957f391c2d9d1c8d61281881f520d93d2f5f97
SHA512 8fb105e07cbd1b08923b6b6d0a82e9f34756c13427a35f96ff2702963672b4fbe064f02e0301bfe6167c0784e6aaa62aff06488817670b69a66ede3bc321026e
SSDEEP 6144:RrYGWB4Rse1OgcJIbvODJE3eLknuzxLGk1h4NU9Qu1kEb3oGWkPcinEC:2zsix6Eb/WkkiEC
TLSH
T13A64D51513A1695BCE6643FB41A78A2FB33941443F83D72926D1733A2C327F7898EC5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c65e36407de7ae26_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\c65e36407de7ae26_0
Size 408KB
SHA256 981ff90c2fe73d182e436570d7c107a268f47a9f191772fd65b7aa4f4e570fcc
MD5 fcb95c33ee9e1dd68cdafdc1eb3dcf0a
SHA1 950fc48cd0671628c76bbe99a1d069c94711f303
SHA512 7456a93cc0b06a5b8029250fbbcf02f8bd9f908b6c5afaa2025150f86e357c3cdfa4463d481d0129f103b67b109636fa92e7b522a39b739ffad8ecd1f5411b6b
SSDEEP 6144:LBAziVZbQ+bQkjakIqvuVnr/KVkpy7p+mCSZTl4wV6q:ssvIqvuDpyF+2Ylq
TLSH
T16F944C99B2D1F07643EB50E6802F1107F33A54A99C09047CB56CE8EA6FB5A8D0277F79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c65e36407de7ae26_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\c65e36407de7ae26_1
Size 998KB
SHA256 27e49601465f84c5fb1d59cd3812ca3614e542b6d807ec94897628effbcd4a0a
MD5 b6295722a758c8a5eab4c88cdd289a1e
SHA1 1c18c389275036ff6135d2f10ec3d143f019c10d
SHA512 03698a88a1826e5933489fce0c884ae9f5d94d76ffb8d23fc9dfa164f94c2edb1c28c385aeb2009eee2da63ba8adbe2aceca30e0ccf73b2567abea78a4e72228
SSDEEP 12288:+CHDYiT76+09a974DcxO6xb5riFW83cYBq99XPCz4NHFhlc3fk9dRQx:V8cuz94XxOYtrhHvHSqRQx
TLSH
T14C25F8121761652BCE6783FB41A3862BB33981043FC3D72579E663392D343F7998E91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\index-dir\the-real-index
Size 2KB
SHA256 da84e0ff5a8830873ac1c28059f3a9e2b38c62287c222e0d1504e0112525ae8b
MD5 66dff5d8587224c3c837595ecaa6e62d
SHA1 8d01001e08349b58b0d197b88e025a6d9f401822
SHA512 611ec127faef0fc0f7f679f0714ee9e10b4c70d15de26829c3b22066d4f2e3f6eda0582209f98955256bbff8cfbd9f449ec9cac15886b1b6db0cbe5ac7b34011
TLSH
T14751C70E4D861A56DDAC21F364BB00C437B1A4DD6A88DE1B75DCA134ACC366D2D5B115
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\index-dir\the-real-index
Size 2KB
SHA256 f1f203e9d1555414e6833d6574ce3a633a70a839e76f544d5f08221ed6a30e57
MD5 e6216c010d3d03a7cb92707e36352305
SHA1 d998b73152a9aba8357d1d8bb714f05ea349af86
SHA512 b7b2c8397968286fd976931bd75e28204bc17a312dd38fadc7f12a48766de2c032e6bcbfdc018824a49afab02dc18f25530ffb4b792473ecc12a9e55307f5a2a
TLSH
T18A41B48E4D44566AD9A808B304B224A437F0C9CC2754CA1368FD2236B883B9D1E1B3AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cc720.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b15da60-2b0a-45cd-8620-f9f71b059842\index-dir\the-real-index~RFe5cc720.TMP
Size 2KB
SHA256 2636ae126565cd58cb243bf0a145f5ed0ae013f51e9baec4347515ebb302c414
MD5 9cb98551ec0dcba9163d91678913fd25
SHA1 04147a7ef0a16500d9ceb6b18472f8681a4680e5
SHA512 d970d4444f41b42b2242f3cc08e79b62a8afe91223281d8427265f3c4698ef29f1511f7d72f21daf26388655d850d0e3520b6f032178474c1db11bb58faa490d
TLSH
T1A741B78A4E42862FDCA440B309D264B43339994097557F47B4FC923A7CE63AD3E5E2D4
MD5 SHA1 SHA512 TLSH

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83a2edae-fbbc-4cf6-94d9-76b665f24852\4f2277ea2139c475_0
Size 62KB
SHA256 f35241efb21ed6247ccccbc063092c8fec0e80f8f2c6444b65a464b6f195c15d
MD5 45cb4f40892551ba8a087921d2bc2c95
SHA1 db2900386ef116719a6359b18b4ff7b791897566
SHA512 4ead9c2cf66b24a6f0f4029798332e48bf4a542842f573f5a23e1253b2256f814938b0e2bb608dbe1ac0b9f58606d1a42640ce1657cfc671fd0a04e90c39208a
SSDEEP 1536:cwsp+26VuBHKut3JWWOQ7DtO/Ydsllqty2puJPQqhfuRHPwqpzGU/3:ctXgukgMgDtyYdIYXceH/3
TLSH
T190532AA7B162613587AD21D2649A7F00F22B17565444C9ECF0BC6A913F18ECB53B3BF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83a2edae-fbbc-4cf6-94d9-76b665f24852\index-dir\the-real-index
Size 72B
SHA256 0af992d2e31b40821105791edeba00367f43bb52006bee8156349655c0b202a5
MD5 e1dca7891a8661bc33723fb73f05bbab
SHA1 6b8fb9a7595228c4c8d48613eba96239b2c3988f
SHA512 3f27242b87610a7bf4b19ee4e85a5fe29adfeed5baf76c3fce276df7bed64bab40b777d381018f69bbc4d0b27312bb14bf9a6c6a7af75719949563f1893ed2a3
TLSH
T197A002331955424DC1410ABC52830164B71ADDAD01024B0941D0C459985155C4F63465
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83a2edae-fbbc-4cf6-94d9-76b665f24852\index-dir\the-real-index
Size 72B
SHA256 43b655a22a3dd24a1a4282008203f72ee53d88b1f86d9c9e93d2759f810b9018
MD5 33e75d04dee668f4dd6cafd22c1a2a05
SHA1 757fc19237158bf8d52661ef65db7cc9cac6c31a
SHA512 1829a7d10dbe2be6472c7b8eb88f345883844d4a2d4ae7be6b7c8d81db7b4b35e3445d50f4ac8e8444c8a80eb7eb5d6ed7497eff52217acfd715a3142d6ff53d
TLSH
T11CA0023301564499C11206BC534341A0335BDE1D4132534940F08455A9A39984E21544
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3c1c8e9-36d8-4625-9754-338358bcae9e\index-dir\the-real-index
Size 72B
SHA256 eceac77ae87fcb641408fe4d1045b2c3dae19fbfc6e3724cc0f93c928eb925cd
MD5 f45bab30d5f4f91d18165d7194056c79
SHA1 58b5a456a866ea2e95ec6942509f567abfc3da31
SHA512 39aaca427516aedcdfcc89fe244b3e8f9bc3cf707b099c50e1d47c52946383baa1eaa015c2394a010e74bd3fd429fbc95043331b6ece3f63c27406461b6049f5
TLSH
T187A0022901615A42F10503761086599133944F3133135685D0D45554D96D6798103049
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3c1c8e9-36d8-4625-9754-338358bcae9e\index-dir\the-real-index
Size 72B
SHA256 b5294e1974eef0582cd45d21e0297530269c71f7f3b2c0a83f7e9a522cd0d059
MD5 12516244c50651ba4d38cc7aff49c618
SHA1 1de6ef9dc291dcf83310624be7b8a3f09292c3cf
SHA512 b197c3adb092993b6fe48362b438d59a7d174a0c9ef1cfdb41a5a3ac233f9290a96c4eb70a8e9bba81c32a0400708e318b7dc29d6900b150ebee48c2a8cde004
TLSH
T187A0021919813F31D1197BF0B09612C46B5449B023510A01A3EC14D8B9611454107459
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5fba41.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3c1c8e9-36d8-4625-9754-338358bcae9e\index-dir\the-real-index~RFe5fba41.TMP
Size 48B
SHA256 26ca393803b2e1baa8afeb42507079b29584e921aae783d8da122f603826a3a1
MD5 6d04bcf94d9bb6e9d4f7d2151eedb221
SHA1 1bcd9bbbc5d06a35672951277e316f2f43a265ef
SHA512 9f78c3278b2e812a85f616afae7d2d9a53f3a89db1320570561095c3576d98ba181648426a44d231ac4cd95a23f804c42b54c9761104f020ce5b9cf54fe784a8
MD5 SHA1 SHA512

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d2eb43c7-daf1-4278-a520-20f79a71b9b1\623cd082b6202da0_0
Size 62KB
SHA256 555220a6883e83721cd19d3fe2233f39a1e9c4be35665a0280d2f20328b6d414
MD5 1622be92194fd64b21dd71e4a90b0b16
SHA1 fe035d72a1b4c7872fef9836342700b09c8b55ee
SHA512 1b06088c3b14d11153fe949273964620280da74cadd2840ed8f39184fef18a4bfc0d1e2ee9145082ed9a9e68f8a4a3fd1cd40724e5fd7cbb2d7687b5570e2567
SSDEEP 1536:Esb+66DuBHKut3JWWOQ7DtO/YdsllqtyEZsrFQsHhNRHPwqpzGe/Q:rzKukgMgDtyYdIYJi71/Q
TLSH
T135533AA7B262613587AD21D1A45ABF00F12B17561404C9ECF0BD76913B18E8B67B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d2eb43c7-daf1-4278-a520-20f79a71b9b1\index-dir\the-real-index
Size 72B
SHA256 dfe92208311c98304d214d03b91c0a83fe377d8d66d9d5a4f38a05492477087e
MD5 232bdb4dd8eb64315c842eeb4c1dfb45
SHA1 e2ad05b3682d37959a1fc1940547adbaa65e9ecd
SHA512 de5a1048f03254081dce3622a7182fb90c635a59c8c84a4d6c9a9ac1729e695a289bd1c75b5e2c557bf3bb5c0341585edbca0c65d565e093c41683a6dea36d66
TLSH
T148A002A022C02022C41323B82FAB82D56274CC610609364749E21944C958982416142D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d2eb43c7-daf1-4278-a520-20f79a71b9b1\index-dir\the-real-index
Size 72B
SHA256 1d11efb66925e70eaf222b92c110a0aa27cac6a92f1255abe2b5dfabe44f47e3
MD5 0f35276ff8d7a17fdc063a967de1ae05
SHA1 6f55b68685e3de6edeb7b276eea6e9365cd55c8a
SHA512 78baae1faa65b1e8437f67ed7d6a8715c4f4f1797cc25319f749148681a4950d3d3500cfaad8d8ea7cde257cd347e9dbf07add42a4072a583c36302369db5051
TLSH
T172A0029403817401C02216B229E705B23314CD904211232641EC05CCCCE077E464314C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d2eb43c7-daf1-4278-a520-20f79a71b9b1\index-dir\the-real-index
Size 72B
SHA256 f26c4e638b017b593629b85f7bb79f99bd9f682f1ffba3b8b43e3aee1a36199b
MD5 496b7950a1b4b5af6f5d2332f7e58b2e
SHA1 3624f515ecce3af769a0fa24f3271eadc9e58fc0
SHA512 f9621b28f40201dbc69cca24b24324668b91b25013882d0f28055d5cb274b93825c6dc9198115da654938d8dbb21ee1dcdf072bbb824ca99da30df3bf1a7352b
TLSH
T14EA0021117C4100DCC1712F55AEA12451304CA146110930740D20458DC664C54E4200C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d2eb43c7-daf1-4278-a520-20f79a71b9b1\index-dir\the-real-index
Size 72B
SHA256 86b8094c6a24a48c5352342f2417a80489a94f1048f1bc74fa9831e0461c2fdd
MD5 53190a7a03f288921847e19e4d5532d6
SHA1 46d855f3d2e3183f72de1346a50b5c4492ce13ae
SHA512 a123e98f5ed150c36f523579911557c751c69b908ebf6da643920e3fd7d4586585cd866937e7f5b08ea445c23b244ccebc5afe789bdc66e7e6f31675e1fa6c6e
TLSH
T1C9A0027033C05121C51322B866E31155A224CD1116591B2699D10C45C95C546895152C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 560703ab759de49d3ddec115b649e7af457654f57745bc23c50ad760f547caa0
MD5 9f6c3b374d071ff427b87d68408cb0a1
SHA1 102a732a48d0a4a8ba6572b3e3956f62f98c4f8f
SHA512 33bda85e8cb5284e95d883578c3ec0032af0a335976690d91d77e75b445ee5a9583d4077d607c6a2daa54e9455fedbb031e43152bd2bde156937913e93377f78
TLSH
T197F082B73EF71C24FD6BC7D5243144604549BCF48862BC5E2416BAA660B2319255DCA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 5470070bceeaa09b95ca0a7d2cdbda2207a60033b3ef271fc121c2ed924b061a
MD5 d5adba278af9333ba50172394251793a
SHA1 f5cbb49c5559b1cf2361961d5f202523121ec9f6
SHA512 0f5eec2b0260402e58a0591ab0c440469f5584d7ae688288245529a586fda2a175d7d477958df94e8b481bb0b4ffd5ba4cab3fca32367f529352ce573a425cf4
TLSH
T19BF027B72FF71C24FD6FC3D524314470420578F48861FC5F1816AAA760B2319255AC63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 a36f423713572935164287601b4b74f6108a4510cc6266f7a9b31e45481dfb8b
MD5 7e9c44a9efb66a84555120a2362f0da7
SHA1 f9636b8ca7ddce1559bf8060294ed2bce4ef1d10
SHA512 23decd9de24ef27d49d9d8c57e4ee458726bec1009d544e2fee701644e37f543437e691fb8396f424634469fa5313ec87092e5937ac8e4ad9f333aa02bec5822
TLSH
T105E0D8BB3DF71920ED6FC3D5283144A4864578F4CC517C4E6819AAE720B23053456C22
MD5 SHA1 SHA512 TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 127KB
SHA256 dc2f181706fcb7b33f919746b7e226a908c537bfeaeba23d0f7dc8a89c158456
MD5 b6eea79adb7a1c17d1720aa0f1e0a3dc
SHA1 f04c4dbf0a83596012add838896e746fd0c174da
SHA512 cc6c401cdc35dae9fde59d8975f0a2f0eed42886ead5ab556489ed4f8befc6cc8e84ec2c1096dd78c5f6f4ade3c196e1d60b2c99429364b7c0d822cc919e097e
SSDEEP 3072:1Hw59B4xPCx1C4Ue3ThL/Al51Ax0gL/JL/TL/sL/JL/eefCgZ8:1HwtthL/47Ax0gL/JL/TL/sL/JL/eyS
TLSH
T136D3AA32769D50AB0E8EBA645056B50392BD7467B8449038F244A7FC25DBFB013FBEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
Size 221KB
SHA256 76a787cdcb87993e0631767a45b93949bc16ce536821de700d08dbc873a036e5
MD5 80bc87b9d11132925fcd0895a6a237f6
SHA1 7b17c3e51214eab9767dfa6d312ad5e1d9e6e334
SHA512 8218da2b1067298ec48e04f70e6e6b51572575be0368d6efd0bf88e498422f2abd0b512bea220191f1485476f0f9715b4857adad1e70fb21033a284b7e8f2205
SSDEEP 6144:lW8Ael6hSCzfMU9yG+HnPfCVUm9J9vYre+zL/qFW9GFHqUnEqQKcGh5G9GDOL/n1:4SuQL/hU29GDOL/nL/yL/ML/lL/Lx
TLSH
T1CC242A22235521EFCE1977FA1163EA03B7B8404A7EC3D26995419334186FBF35ADBD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 77ad5fe3a9b87212ae02a614a65be7e474c47fa12b24c16b0ceaa74671bfa279
MD5 7860eae57b335b9c1b73584e30ef89b8
SHA1 768bf6accb453fb5b11b140e1b1834e4ee0a9af3
SHA512 ff51ea80831eaf16087c9e8ca3ae01fd818f9e0269c6c3d84b0a693dac28552a389920ce474dff3ce327609a9199c1912a8e0958382ed9c16effef6606e0d2cf
TLSH
T118B01245080800C1D461177410921840726868D1064502028554B1E48821B244684005
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 d57fee6034c7faf0cc77eda243b084751cd511ae9f910941efe0f87f0819383b
MD5 9203fb35b5dca5b0e56451ff2895f437
SHA1 435accd3e3828a4d0f3c03137f7f15cf75e7e59d
SHA512 55a1979d19668601ed095242b01de1b5140e7744587b26537a7f6e4c02bc1ffbed6b3128bc9655c1e335a57be84a55892c166d7d3f632d5948b0d1dd28469ad3
TLSH
T1E7A002618D6D9085CC2207F814EB5641FB6A68D94125121244D890FC9CE22A261C2B41
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5f9f85.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5f9f85.TMP
Size 48B
SHA256 c949c65a2caeea1de94b7d0ceaa6cd185389cc3bca4a5fceaafa20a5cc894339
MD5 8e2e349779e52d8328d857b6cada4612
SHA1 aad1014049fead57355497ad09872b50aabe2b75
SHA512 a6aec5dd7ec32bd1a98e5448e66bc2094b61dff0f6ca103b4f91f24ef89e4fa8b9ea77adecd2c9e29f860b5243d50c0a97f3463bab9b24adb1822eb97d917767
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 f1dfd1315f6633311963ed7cde8780e81349b0fbb1aa046af6ab62faae75ef05
MD5 78a318325443bed2c8839b794caa0e95
SHA1 b2cc737d77f0663bde875785396d8ed45fd1dad4
SHA512 ed33fc077801e89e346dbb722db6a689cae2e446681d733df7970ce5bfc1277885537d1da23eeb3ce27dff7494ecdf33255e1d9da57bc55032c85622e89a610c
SSDEEP 96:KMkAKd6OezWKEADWcKHqy6UgKhCK7+Ko8iq68K3qYKAKjai6oIKp+SaUKXquWJS3:KrFjPXY9/gfrWThFLh/DNTVl37vr
TLSH
T1A7B25F16303B12027CBD2908A796D677DD8232B33119E66F7BAC04A64E67E125DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 d8d31a2eff652ae4843a834d6cb5a89def59f47406757ef04546c91299a14d64
MD5 547c87218ed05ecae5267e1dd5453c8f
SHA1 4b2d41d8d5d8ad2372528f557c59dabf147c6a97
SHA512 e12b79b37b3d0e79ddca4982db96af441f01954e09b7d9e8209a26d3243a669aaa8c33b45f12025b5cfa492bb326d0fed89775056c6c4a0b3281c153abb108d6
SSDEEP 384:n0iF9CcmyWCb3sN38TUNTUlI4kUjn7fW/eMiBf+UGfyFJboYvt1ryyj12ty/7Igz:PFccpb3wwgwhbGfi7yyj1d
TLSH
T12CB23A36EC98CABBFCE74A99B74A3603DEE04163C6C89AE4D6DC1D4C019B1DD070B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a9bdb110fb09644899852c38ef552100c6d78589f0df6ffa6b3aebe194540064
MD5 a0e25922273d9eead4494823ef8492c2
SHA1 7c6565155bcb5cf88d511b8a80dc994f4adb443f
SHA512 b65627c96a504d5fae8dd680527d4e2e9ae9a55bc99660043ecca0888fd1ddfc68ef00d01a208ab3584c314d606072296a390c10abc6cc0b546a9fd20a4d1aa4
SSDEEP 384:ntiFXZcI+H3sN38TUNTUlI4ANn7fWzeMiBf+UGfyFJboYvt1rZmyOObjI9G6w74Q:kFfk3wwgLbGfi7Zmy29M4Q
TLSH
T13FD25B36EC54CABBFDE78A95B78A3603DEE04163C6CC9AD4E5D85E4C009759D430B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 6e676ad9450288242b673e541f0bc90ade3828ab5203bc6901d64ec8ca8b03c4
MD5 1417d45f9144e985f13bf063c4aae35e
SHA1 849cf4c52042a5c1026e3afd095926a8f0067914
SHA512 5adcb1a1d7576dcba657218e2a53f67bdd1d0d17a60fe6151720d216b53ad80bdc28a035e155353da94542c2b2fa13749bf6a52dce39a3c80a39abfb6844cc11
SSDEEP 384:nJiF9CcmyWCs3sNK8TUNTUlImkrn7fWmlmiBf+UGfyFJboYvoPe4KV8p0/Lpty/0:gFccps3Bwg/FGfiEPI8p0/LL
TLSH
T1A8B25B36EC58CABBEDE74F99B74A7603EEE0116786D899E4DAD85D0D00971DC030B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 775a56a76ac7ac85f65d6acba6238e6a2bf2d644db915ab8af1a65175d8c332c
MD5 08dd131134e3c2d0dd1b53a495c50377
SHA1 3ac1c818407d0ef0a95223bf529cab7a86368068
SHA512 b8e3ea75541985a5f418633d165a34dd8e9a6bf1ebe226edfa5c6b056494ad208759c9db988db2e584789f0b86df672a302a63d92f73f1aa8b2164c2c28c2033
SSDEEP 384:nfiF0CcmyWCE3sN38TUNTUlI4AAn7fWweMiBf+UGfyFJboYvt1ryyOObjI9G6w7v:qF/cpE3wwglbGfi7yy29M4I
TLSH
T13FD25C36EC54CAB7FCE74A95B75A3603DEE04167C68C9AD4D6DC5E0C019B1DD430B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 1a23f2d705ad1061638c6877c3c43dfdbafe90eba9d53e2135d8e67e8c9db727
MD5 01cdfd5d8bb41a289031958f17a83af7
SHA1 af157e40430209079de1ea338175e17bf16539b8
SHA512 b0b0e96bedd5cd2deb5b2db36df8b1c7ce5980805220d840f7560743872f947e42ad6999f62faf8a1a05703b60049d8a0b9fb2a9595d4690d2d344892be286cd
SSDEEP 384:nsiF9CcmyWCs3sN78TUNTUlImkrn7fWDWpiBf+UGfyFJboYvt1rcye4KV8p0/LpB:XFccps3AwgjkGfi7cyI8p0/LL
TLSH
T1F6C25C36EC54CABBFCE64B99B78A3603DEE04167C68C9AE4DADC5D0D009B19D470B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 532cccf2367d90528a6655f503f1258ad88f818b6ae39bd38533e8db8e32c3cc
MD5 80024baa37db590fb45e80c0306db76f
SHA1 970f6e2cb727e111a352f1c29a4a1d6173124c9c
SHA512 2c71f2e1fa6d9e4704222be7b4e8a711f0a0c5f57f1a3959c037dfe80fda4f953c230aac012ad7c57c0c50d18426de357dce269d766dca204f8766246c2e058c
SSDEEP 384:nfiFjCcmyWCT3sN38TUNTUlI4ASn7fW4eMiBf+UGfyFJboYvt1ryyj12ty/7Igz:qF2cpT3wwg7bGfi7yyj1d
TLSH
T14FB23B76EC94CABBFCE74A99B75A3603DEE04163C6C89AE4D6DC1D4C019B1DD070B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 10422b2a0c495af5fd0b97c5089bf8cdd66295f53fbec90f75044bb1e736a6c6
MD5 8d48e5f306cbd741eda8ef4c9d828860
SHA1 dd95737126c54b47faecc446455c07261921d8a9
SHA512 1c60f274694e3bf60ea5690640e824de7c2163bf309b5fac20966db76eb3fbe81db524ee0fd893d63bb63e96a7407b08e1dcd56b51445cf3139b746efd0393db
SSDEEP 384:ntiF1ZcI+z3sNLM8TUNTUlI4ANn7fWfnMiBf+UGfyFJboYvt1rteyOObjI9G6w73:kFNA3gMwg+bGfi7tey29M4Q
TLSH
T12BF2D5F2A8D78577E8AE4B97A77D2D029AFCC153B6885584B3D85D0CCC961BFC306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 97aefa063c634d2ce583d41e3d0afffe307c3c1e3c4a685a7ad3726019a55622
MD5 aab304175b02abdb28dc7ea5ec5ed9dd
SHA1 c2b6cfe7b3c1d50ae41174079f88046026e9e617
SHA512 cc4f206c07c2f902fd852eba194bdc29ca736d25c4b45b38f33aa2bab1352a22d9aa10c321d6df36f202481e361bec18cb63fb2f6d79a829f331c88572c5aafc
SSDEEP 384:n0iFJCcmyWCD3sN38TUNTUlI4AUjn7fWReMiBf+UGfyFJboYvt1ryyj12ty/7Igz:PFQcpD3wwg8fbGfi7yyj1d
TLSH
T149B23B36EC98CABBFCE74A99B75A3603DEE04163C6C89AE4D6DC5D4C019B1DD070B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 bb32608ab4cc9520416fe7492aef4aac9819368e4854ba1c746014e3bc4feb8c
MD5 28f2df1001e0c32f882f1c2b9b960263
SHA1 238b670886705095e44359257caa9c98b8102713
SHA512 54070c9d52de73081164eedd006d1c7f3fb6a9575a51d3fe75f7f1514d121b22e666e6c6e15e3d5e1e35ea52ca6e33cf93437ca07fe8f28e8a5270c431f9dc01
SSDEEP 384:ntiFPZcI+z3sNLM8TUNTUlI4ANn7fW0bnMiBf+UGfyFJboYvt1rtkyOObjI9G6wz:kFHA3gMwgdbGfi7tky29M4Q
TLSH
T138F2D4F2A8D78577E8AE4B97A77D2D029AFCC153B6885584B3C85D0CCC961BFC306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 32ad6593ca153d415a8a8cc9c7e8bbce754ad4eb07ff9719bbab959c191f9df2
MD5 9aead39a1bc37def1bba104293b9e0fa
SHA1 fb23bac19919ca2248203233519846e8ec05ed74
SHA512 5f8b3bd0cc22a10e0796d0f673b4308d0c20abfa94d4cc34c3129e7d30be414c668716be7b83bbaa32b97e070e77f92b174142ff8c092950f06768e994a3ceb2
TLSH
T156E00122931415BFC838033A01C39B2027F2902117B7074A6A2451767C233282E30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b6f3966f35d718a86ef8c9805e093340e5110db608c2c8a9f7fca5230183f5a9
MD5 613c166ac34b5e454fd5f0a7b12039a4
SHA1 354f92fe3bc5f95a39738ac6a30f2a61d6bef47e
SHA512 e92f690324db4b0bcefe6299753f509ff5ec221f30286c68051a9b67839d9fab5a836a43ef7314756ec5df4c4a3bbfc2007484eca8d82338b65efebb8af09825
TLSH
T1C6E00913930426BFD828033A0597AB213BF290221BB6574B6E25067A7D633283F30FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2d74a96d0739040af202d14d56281092254d9566e4d41c20d551897271c1a551
MD5 49c8ffe8c1be9859ecf4ef1a40581476
SHA1 344a2f8335d4ab6507ca48841ecda3aee3019a9d
SHA512 092f739314ae226c40a68190b838249c40e620d200b4c810524bac772608e3cd4e75a1c070c786fab46f9ce79527aca923a27c2801cdb93d254861dedc9f5aa6
TLSH
T183E00912920426BFC828033A05879B202BF290211BB6564A6A64027A7C633283E30F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5fd29b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5fd29b.TMP
Size 392B
SHA256 cdcf6bf0802ef6df79ed5c921c3c867a93f5981fdffcb7bf067be25a60366667
MD5 d92ea0ff99dbc36ab17451e7b0ef4c9a
SHA1 7ef04fe2437a8297f5bd6890b51ee11da03314ae
SHA512 00744eec4c9a40b58085a8d0e290a77a17c94f2d00373125c63a473a66cc97442c26a8c0c45e4858db3addf5610472ec1d600ab22823cef6d9f4632d0509b7ae
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 60b6c4bc4149a7c7388147ce4e7e76127339eab09072b47837c47798ac900392
MD5 f3e6d813f1b3b8047d6d5fb8498f553e
SHA1 6c3b0eaf53edfa95e06d1e32f6e51e968c2fbbbc
SHA512 105804b453ae309223587f5d8553e418ff6c6f75b38d35e0b402ee6cd47e8d6ff7b3b0afed55e66959fef017080d82184b9ac80acac36f59675a024cb31302dc
TLSH
T1C641295CAAFA1108B3B76F5A9BF6A46E447E7D372E06D45D01010E8F0A23B00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

ModuleAnalysisCache

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
Size 54KB
SHA256 4599eb5279609089be68bb8607b7ac55ad85f8a8e5a7608d73726acef90f27f4
MD5 00d4d95c2807512f0d7fdd2606a1f102
SHA1 4fd46889d57c58893f16685246479f5bc1277880
SHA512 7e55482cb6849b517ca9eaac724b65dfce7b63cb925d94ab86e37e7fd5637712d171b9be222c44f593498822a06eba988abd5684ca0899dbc0937041b18ad89a
SSDEEP 1536:vUsfNhfkR+jH0Mv35iFHzdyyhl3OihN9flJdFhETYoPUpRLa5Ei3j39MVvjpXKL6:vUsfNhfkR+jH0Mv3gFHzdfhEihN9flJn
TLSH
T17A433F93E9204D71E1A66F3EF15662227D34394690F8113212DC25EFA983D970B1FABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 c2d4cf58359b05d667330acdc986dca5ca0286c3515cff4761e1ff4858083516
MD5 3a3b2861aadfdda2de8ddd889b37d1be
SHA1 424ec2ea1856ebfb1050b0840da3ccdba1949756
SHA512 3ea45f4561383fa4f14052f92f25a171921a09419682b1c9cfafc6461407c29d2aec7e1feeb9a745c49ff17cf316f9f425ada750ada1515af08abbd30cba3bd5
TLSH
T18B31BB2FBFAC85D0C84D593A4098986072F593C7C4DEDEDF6EC0C104A86F588CA69A50
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 d8eea8b9572aa08f4bfe8ea99bcb2db556aae7246bc6c2d8ad3d46e0c4c9f06b
MD5 b7502b550a7ce7ef66fa03fd291986e8
SHA1 404573cb8944bb2cd460f1abc6670ecf6a63f231
SHA512 3ae522a688199111c0cad73a1083e1997c30ad83d9d7e58f37d9cf9c0321ad1bc7718ef6f46bef05ced2d71a094a7c972c23dc8104438f536f06f0397472e20b
TLSH
T1B131BB6FFF9C85C0C84D593A4088986072F5D3CBC4EEDEDF6AC5C104A52E188DB5DA60
MD5 SHA1 SHA512 TLSH

Submit Download

4mxssyxe.dll

Path C:\Users\Admin\AppData\Local\Temp\4mxssyxe\4mxssyxe.dll
Size 3KB
SHA256 225f33861d573d895aa8da77865e5759b286c9771e5048bd89e601144c2582fa
MD5 1c4a81dc4d470bc0d2006dd8f8cfa0f5
SHA1 e7d4802be4bb17deafc3c91a5f2d69a457867f31
SHA512 5f2b1ee333baec3bb26a8b2b6d03dd3c414a42e19358d13ea83ca556f0a7c0f148ea32bb662458e77bd2cac3561b02976cf62aded9ae36e71cdf232fd41fe61b
TLSH
T177511D5AA7E8062BE4B70B34EEF3471627B4F9149F73975E5D800228AC206585E32FB0
MD5 SHA1 SHA512 TLSH

Submit Download

RES3EF.tmp

Path C:\Users\Admin\AppData\Local\Temp\RES3EF.tmp
Size 1KB
SHA256 c69e2951a1c0c3fd6f4d0d205085ae5ac3733f60115f0e7237f98c235ad6bb5f
MD5 e1c016aa898484fd912531d1a5bbfc82
SHA1 8283b92d7d9c00733a6a0302943cc3d246a6f479
SHA512 cc16182eac0cc6baaebcb816fa798b83be5969c4ede756d4c4cf6801168c456a299890dae6f3c595443688000a2ac69ce97d80d66a04962ca2f50a1a6e89eb6b
TLSH
T1BA21AB0597ED070FF0B79B3269FA532FA674FD95EFA2975E844001281C41604DEB1E72
MD5 SHA1 SHA512 TLSH

Submit Download

RESD4F.tmp

Path C:\Users\Admin\AppData\Local\Temp\RESD4F.tmp
Size 1KB
SHA256 353e8d6e87bd6c6aa650be9865ebb708565fd9685b22d637c01704afc44955fc
MD5 f28b67847aaeb5eba72ea4acf99df3ce
SHA1 dd728b8282bcf99055d598abef65f5d146ce23f8
SHA512 e9df2ede7f7ce564a1168376da98f211317e680b578d53a6e35e9c436fd7e8aaced85c80fb90a7224ee5c31ae7d25d863896ffc105e7e85465cbac486e8514c5
TLSH
T10A21890553FC475BF0BB47316AFA072F9674FD64EF62939B884011282851518DEA1E72
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_3cojeviz.efk.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_3cojeviz.efk.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

fcc-install-335d47a1f7ab4c608b15a48336682fad.ps1

Path C:\Users\Admin\AppData\Local\Temp\fcc-install-335d47a1f7ab4c608b15a48336682fad.ps1
Size 32KB
SHA256 a2c1acdbf45b9527dd132674223e735ac602327fa841b42e1cfe4aabcb808c5d
MD5 e76b752c36878eba88d2fc9fc30a3537
SHA1 9312bdeb577b06684f368038170d750e8ec0fcdd
SHA512 a0b9b6c03514c5cde6e4031a6c52afe401bf1831b8fb8df6fa0e2eeb6604c7d1b8dfbae56a1b7242b599012297e42bbe4e1e6d3b91f0c56b8b388f3d4945f629
SSDEEP 384:zaFhPpYdQULK8zQLB1xQTK8zQu3sgiJWR92gE3gAEz3ci4CawFw2dwxFYBw:z2YdriJWR92gE3gAq3ci4CJw2dYEw
TLSH
T119E27415B9E1567A2BCA523F2DDB8008B6DD412B910D6D90F0EE0194FF9633C81F6AB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcc-install-aea520d96fa04643a5495765099af558.ps1

Path C:\Users\Admin\AppData\Local\Temp\fcc-install-aea520d96fa04643a5495765099af558.ps1
Size 29KB
SHA256 95923c2ac60b963c95435aaeaefeaab3cbc01559e21fce1fa501ee1f9793ac0e
MD5 59a0e29e048c05c00e099a7fff75a0ca
SHA1 d8a78c3d57afa361f52d9c249027a9df661e95aa
SHA512 43adbeb3d66802d384c62c71e4ccf1080e831aaf301540bf5af0e9ed5a23e91ad59a9ec1755b7942dce644a329712218c3a0fd5e5cc994d3b25b19b33a57800a
SSDEEP 768:kGR6dEqkjfo8hLZ8hS1PvjjyK+qjUDwv/eBYYUs:kGR6gA0npfyK+QPhs
TLSH
T1D2D2A61578F02571528627BE9CDE4018361EA01F611C5F18BCFE5784BF9A33C8BB6BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcc-install-b9f94767507b4c46966702aca8f6143d.ps1

Path C:\Users\Admin\AppData\Local\Temp\fcc-install-b9f94767507b4c46966702aca8f6143d.ps1
Size 3KB
SHA256 cd17c6b555f761d60373659824bf805e1510538226e4c7028e19d7494937a333
MD5 bcdb5ddf3b60a9cfa8f0d8803552a0dc
SHA1 b0be54fbb7d8f977763edbb84e373c3cc568c05b
SHA512 0418723fc6107785bab6cf6e831b91b25ddd5e301b17466a09682b820394b47d4b2c1123b3aedc96e407bddb4cf98248aaaea80118b5d16857f4ebf1fa3d0308
TLSH
T13961441B4371427251A1130295CFB246B3A140BF8A4D6E2479ED9704BF96A3CDBE37B7
MD5 SHA1 SHA512 TLSH

Submit Download

SHASUMS256.txt

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\SHASUMS256.txt
Size 3KB
SHA256 158f2e2c580c610b9cef2853f3444c7369b84cc23e7ad764e3c40e9d60d82ea0
MD5 a6b9b339bed676d3008be915c7cc3984
SHA1 62395093df45fb8a126aae7aac3c61650bd405d4
SHA512 b0af3f70bca1d3d9bdf594d0395f510faeac09f50e1f1d83797ead3a8cfdde26eca0bcd5e671db71a9862801663031badcce0cce84e1c62fb2ba1acc1fcf35aa
TLSH
T16471A66420411BFF92671D87DB29E942AA9F95706E327EBC47FC43C605622EA46C7C4C
MD5 SHA1 SHA512 TLSH

Submit Download

node-v22.23.1-win-x64.zip

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64.zip
Size 34.0MB
SHA256 7df0bc9375723f4a86b3aa1b7cc73342423d9677a8df4538aca31a049e309c29
MD5 75920d2950f3401b1744aa91919087d4
SHA1 99ed03a42895ccef39082d389cfbe6db40a4341a
SHA512 705623729256b546ce2f78d24ab32d8eb39b92b8630b01f4d026a80114040f6934863a50025dc6bc73628a4d74ff5e54cc3436840d181462371510701809cd92
SSDEEP 786432:dt9560v1gbFJ+6N1rslWTXQw+TU+f6p8KbGE//o:20tyz+6Hrnz0U0a8KbGEY
TLSH
T1B177239490B5197BEF9F7BBBF2C5C2A64CCE96CA1C605C72096C6ACA1C762F107C610D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\text.js
Size 15KB
SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
MD5 ed6ed7ab5bd5bcb2a254821e233cdd8c
SHA1 59dc6ff551a34f3d4cceb0c88231a386e82d9922
SHA512 2148714b1ab87965f0a71c03aa0a60789c1d9dada5b4ba005b186081b8d191f196a3043964c21e0a33eb45262cc11071d4b658753a42fe91f1fcbee2507fd1c8
SSDEEP 192:4uyCa20qNgG/kFBEKT4BlvFuTMS8Z4wZQZotVNZl8b2vKO9XuLYRfTAkCwtU1kIj:4ng4LYVNn8b8K+eLWD7GxuzDdVW
TLSH
T15162B3BC008846963D2DE0D4AF64EAD6299D4B4A240CD3365F9BFC3772CA4F4ED994E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\text.js
Size 14KB
SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
MD5 b25fe69acc9d8eb982b37d758746e913
SHA1 782e46467828dfe227704d09830298ae86e52127
SHA512 99c93da8c70a5ff47a237e0422aba91209680b1413cdecf6339616d12d2d69e1796527596e8859bf505451fc47b6a00302e8a50e1cd0d806da23b5608e82abd4
SSDEEP 96:49tOjllm4Uh4zutkZyhRA4JUraRFsw7ZpqsFRatj9Fnkz+jmS0WVJK4m1io++Qdm:4bzTgMU4GgawCZleT038n
TLSH
T11252BF708521BE6674B2001B9D541B1FF0A8954BE962EF37979CF19EB345231CAC36F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\strip-ansi\license
Size 1KB
SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
MD5 b862aeb7e1d01452e0f07403591e5a55
SHA1 b8765be74fea9525d978661759be8c11bab5e60e
SHA512 885369fe9b8cb0af1107ee92b52c6a353da7cf75bc86abb622e2b637c81e9c5ffe36b0ac74e11cfb66a7a126b606fe7a27e91f3f4338954c847ed2280af76a5f
TLSH
T1A821961E72551363186613E069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@npmcli\map-workspaces\LICENSE.md
Size 818B
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74
TLSH
T14301128A62E62A9055D19F956DA2B89E61CCF0673903681430B4E24CDA7704AC07E414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@npmcli\metavuln-calculator\LICENSE
Size 754B
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16
TLSH
T1DC01208FB2E52AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBB780F98AB404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@sigstore\protobuf-specs\LICENSE
Size 11KB
SHA256 7b0ce3425a26fdba501cb13508af096ade77e4036dd2bd8849031ddecf64f7c9
MD5 dfc1b916d4555a69859202f8bd8ad40c
SHA1 fc22b6ee39814d22e77fe6386c883a58ecac6465
SHA512 1fbe6bb1f60c8932e4dcb927fc8c8131b9c73afd824ecbabc2045e7af07b35a4155a0f8ad3103bf25f192b6d59282bfc927aead3cb7aaeb954e1b6dbd68369fa
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8cHfH2:kOu9b01DY/rGBt+dc+aclkT8cH+
TLSH
T1B932722BBA4903771AF20162AB4764CEF31EA03F37591525315CC1682F7B96183FB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fetch.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\@sigstore\sign\dist\types\fetch.js
Size 79B
SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
MD5 24563705cc4bb54fccd88e52bc96c711
SHA1 871fa42907b821246de04785a532297500372fc7
SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
TLSH
T1C4A01201A934C5F1038000C44525E0C1A0C10432006528A55BA84D65440088C5050001
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE-MIT.txt

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\emoji-regex\LICENSE-MIT.txt
Size 1KB
SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
MD5 e0be9e751faf84fbb7c61c63af745e32
SHA1 48e53e2b46d48cc6ea16f03ab1ecb69a86f5db0b
SHA512 6686277ceafd63dc89b17315c43134098cd131d16c7d42fad82cee5b7c78e4aa1f7cb199db352b9e54adb3f09dc77b1dc6665a5667c4ab8b3639fa254e20ecce
TLSH
T1D211895FB261137B1C66139069A4AC85B36B715BBDFF2384345DF244231A468D9F7C04
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\foreground-child\dist\commonjs\package.json
Size 28B
SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
MD5 56368b3e2b84dac2c9ed38b5c4329ec2
SHA1 f67c4acef5973c256c47998b20b5165ab7629ed4
SHA512 d662bff3885118e607079fcbeedb27368589bc0ee89f90b9281723fa08bda65e5a08d9640da188773193c0076ec0a5c92624673a6a961490be163e2553d6f482
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\foreground-child\dist\esm\package.json
Size 26B
SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
MD5 2324363c71f28a5b7e946a38dc2d9293
SHA1 7eda542849fb3a4a7b4ba8a7745887adcade1673
SHA512 7437cf8f337d2562a4046246fbfcc5e9949f475a1435e94efbc4b6a55880050077d72692cbc3413e0ccd8f36adf9956a6cc633a2adc85fbff6c4aa2b8edac677
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\fs-minipass\LICENSE
Size 780B
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38
TLSH
T1D501418FB2A12A8414D09B643DA1EC8971C9F03B3C43AA153074E258C7BB80F947A400
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\is-fullwidth-code-point\license
Size 1KB
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3
TLSH
T18521961D72551363186613A069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\libnpmpack\LICENSE
Size 730B
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013
TLSH
T1C001D08FA2D12AD454D59F643DA1BD4861C9F17B7D43AB043074E358DB7744F986A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\libnpmversion\LICENSE
Size 763B
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce
TLSH
T14701F18FB2A16A9454D19B653DA1ED8961CDF0373D43AA143075E258C77780FA46A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\LICENSE
Size 802B
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764
TLSH
T15F01128FB295269419D09B943DA1AC8961C9F0773D43AE153074E248C7AB40EA47A404
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\index.js
Size 16KB
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3
SSDEEP 384:PjFrIA8zJ08TEcGpIuqbI0WXsJY+cHK+34x2WkFUasBq7BmDWC:PjFrIKf8JKjV0DJ
TLSH
T196722F552B9E61229373B77ADD47900FE722141B393F5014B8AC46D02FB99B48B38EF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\package.json
Size 1KB
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a
TLSH
T1AB217927DD589D7715B52760A8781603F2635B2F20348C0B75F6012E9FB392B0099BAC
MD5 SHA1 SHA512 TLSH

Submit Download

iterator.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\yallist\iterator.js
Size 215B
SHA256 b32509c2ffe5ce62270f2e8459a87c80214ce0ae3a7f333c58b43cba92e63ff7
MD5 6b93d2839ba6ee80d663f650a6018a8a
SHA1 3bf0dc29528531bc0e7425536e734b38a1879b79
SHA512 2de621359e3ed1d2f4ae7adbb22d6f78645072d1e33aeda7d22b930dc8ed52d76a5f071da0a1ff763f189d25929596e473f0c6286c26fc25416bb24ec0c870fd
TLSH
T103D0A70D5420585181A23BAAD4675C64AC906065C08428063D8984804B2740C0F95E18
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\yallist\package.json
Size 681B
SHA256 dde09da512899f5055cd65b5aab85911ffecc22fcb9f2e38d0c1432fe94810eb
MD5 a6760e136727461110f5f8d76e485e8e
SHA1 30299d4f3c3b808f4456539a92301dda9dcd9856
SHA512 40641b223fa9df981192ad518b8144ffd783f90bf45a9ee27238d50fdb92b662eefa10742cef4ca3d2d43be6b7d3ab57bd66a4081fbd426664c874d3705f7a8b
TLSH
T18301763AD6D198B302F83B963D680103F2129B1F5028CC0B75FB441ECB236231599B6C
MD5 SHA1 SHA512 TLSH

Submit Download

yallist.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\yallist\yallist.js
Size 8KB
SHA256 f660c9e3d0def4c8156c4da5e4e2172d11dcffd97973283f36570fa9a3c31ae8
MD5 02a2f77e31521dca6ff19946c3c1c9e2
SHA1 69314e88ac1864a6a1f8c91bee5f7987d7d46a78
SHA512 bf0985d01cc8703fdb862a19d9738950f7351150d508bea43018b1affdd37f60f89000268a1c93bcfcc3bacca31647368ffea2ced0a7e0aef818832853391fa9
SSDEEP 192:C1vwDCNCubaCsA3zc6806gRRkuyhubrBP97:C6UAYtX
TLSH
T17C02E04D179D1C86E7B2777E8C2B2154FF26D81B85452943329CE0C03BB3A245AAECF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\npm-audit-report\LICENSE
Size 771B
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b
TLSH
T15F01259A62E56DF46DD19F806DF1B98D70CCF076BC47A91530A8E258C7B704F88AE414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\read-package-json-fast\LICENSE
Size 771B
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778
TLSH
T14801F18FB2D52A9454D19B653DA1EC8961C9F0773D43AA0530B4E248C7AB40F95BA404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\socks-proxy-agent\LICENSE
Size 1KB
SHA256 22427a9ca2a0ff9c27dde9e26fe6e940529aee030b342a70b435366af0fcc51b
MD5 0c336e5b6975ed55d323848908249114
SHA1 805e10789f2077ac4b21852f3e7a1f7167bcf3d2
SHA512 6372ca65a81f8e0e268ba108858cdd21ab827b551f8523dfdb38be5a933a8d24a39ed09c4a79fa6895b5341af8887ca4b8d9c4a30af9adef2b3b34155a1043e8
TLSH
T1A4219A5F72550773089613A059B55C85B25EB15B7DEB2684349DF248232A428ECFB804
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\tar\LICENSE.md
Size 1KB
SHA256 865576de51d520f97c8869b9b9f96caf8efd69b82bb6e575fc00b0964dc7a3ca
MD5 236eea678a0baae4690b3fee5f11cd6d
SHA1 0d97e894b9fe7f7a8e74bb99619e415a65726a40
SHA512 e7e720da4ec95a289fdc5acb7d9d06fbab28b15476e1eb51155e0a131a0222d5e44794bd49088230ae602173ec3c49c789b6c2e28a3146778624f4b9244c1d8a
TLSH
T1AC31E02F665E975302D041066F43A0BFF51A457D966E02F23496905833F6B2246BB8BC
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\tuf-js\node_modules\@tufjs\models\LICENSE
Size 1KB
SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
MD5 dfee32877d06166fae6096f9359e68aa
SHA1 28a83f15648b5088399a0dd3aac207d192bba5f0
SHA512 ed9b0514e9f8a2204d6900f5b5a6065272b91d70b076c91ec8e101a3288c83f19b139210da6de526e269fc85469708478dfec8664e9c3131408af3818ef128cc
TLSH
T1A711631E735903621C9257A055A9ECC5F12BB14A7E6B1985346DF209132A458C6FF8A4
MD5 SHA1 SHA512 TLSH

Submit Download

AUTHORS

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\AUTHORS
Size 207B
SHA256 0ee7b5b132cdd64923287705569f0b55e82729319e3a78571a8ce9bc9a62f98f
MD5 bfe89e5b3b70c5929f1d9c006372f387
SHA1 dcabeee6f2c06f10659ccea4730b3482cfe75acb
SHA512 6cd4ef0b1f5c345bca638267e98ec02ab808913ba6433f3659e9c7a1f9ce61850c95fa20f624cb2ccf42c26f34ecfd1a2dcf41a05bab48dab89287dc8fa1d5e9
TLSH
T1C2D022E620882086106F004130F532446F2A0133CBACC1E0E33807BA51FC432BA18A83
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\LICENSE
Size 1KB
SHA256 9874348297d23c486dfb13b9df158f3fe2f57153ddfd0513507d22f0438ea204
MD5 22f3ccd48ddf44c54ec73ce7eb06d273
SHA1 9d116bb5fb98c0c632a58eebdd973ff41a3f4bdd
SHA512 a230709643067d276776fc8be03edb2cb4be08eafbf95a4a5353947c62c505e23e402b54f9cb2e0b46d2bceb6e44c22b6c5bcc8b288beb2f1c62f26dc1ef2bcb
TLSH
T11A219A5D725607731CE613E06975A885F26F711B7DBF3688345DF248232A428D9FB804
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\index.js
Size 151B
SHA256 2eacd689c758e0aacc3fa3157b6fdc1739598f0fd7ebaca3841849940e290f8c
MD5 68be8899e939beb38a69939bedb34e35
SHA1 b80615bd00d82c8bb940a4649611e73ac629741a
SHA512 fe1debc7171edcc5ef1f67b70037335ff59446407bd1907234beb35a071310aecb0e17b455765f178588278fdccfe2d6cf268fcb7d3cb639d4ff073c8aa184fa
TLSH
T12CC08C8A1AE2F0097712E3D0CA66B421A0899230402C5122D90C839639E08C90E2BCAE
MD5 SHA1 SHA512 TLSH

Submit Download

parse.js

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\parse.js
Size 2KB
SHA256 4b435dcbc2bf9a1afa4f28f7d3fcfd33406eb08c900ac2f967c32b982f39cb0e
MD5 8be909153b2690e0586043c60dab7e9d
SHA1 4b80480eba7e42c0020ac5ab93a4eec2b9e6336e
SHA512 3dca8378b3ef0ac96baa583662a6826f677c11eb30ad817b378c3e77cc23cb8c120d5d8a5ec1ee734947f139d526bb5721f5e6c6f11b4feddac479ea23a394ba
TLSH
T18451699868821562D177B7B9EC5F980DE73214232168C1607D9C92607FB04A8CBBBFED
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\pi-node-2452\node-v22.23.1-win-x64\node_modules\npm\node_modules\yallist\LICENSE.md
Size 1KB
SHA256 a638a0768dbec922fd821d0b6cce6275231c4b57cfcddf584defce530fbfbbf5
MD5 d2d8f56ce3ffe22bb7c65a724b157d71
SHA1 afe95116aa199ddaf06f9bc666cb82b1e489497a
SHA512 1bc8e29b05053518b76f473226497804408f14df744c60bc2dd2334e989895f7d3dba84fb8b6466e63e886d4f3a4a749397dc2d5b3456f90b382ced91a886e9d
TLSH
T18F31001E664E975302D041066F43A0AFF60A45BC9B5F02F23496905833B5F2646FF8BC
MD5 SHA1 SHA512 TLSH

Submit Download

t1twrjo4.dll

Path C:\Users\Admin\AppData\Local\Temp\t1twrjo4\t1twrjo4.dll
Size 3KB
SHA256 af5cbe4f3614f46290b5db1fb3f09e6cdc61b682cdebd8236f94f733843cb16b
MD5 9a613838a70550d5f3baa1886481eca0
SHA1 443737557ed66afe34989ad7a44f68112bc731a2
SHA512 d4982203c0623a8b3c4673099c48f69dafbffa8197f1377966e8ad9f9f156b3caf643bb6847b8057b6d447ce35fcd608679ec1b4d70167cee70616fe246084df
TLSH
T16F71CE16D7E84667E4BB0B78AEF303132774FC508FA3A76E5890021D6C642284E71FB5
MD5 SHA1 SHA512 TLSH

Submit Download

npm-prefix.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\bin\npm-prefix.js
Size 864B
SHA256 673f620e40137c295f2cf057364468bf3a71653dfc0973be895ebf7a8c368c2e
MD5 92dd1b5a463374142271ff420cb473a5
SHA1 a9f946c6a8c6f273f837703acc74c367b7781a99
SHA512 5e0a6e4a9cff4b37acbece070a592a65ed044a78e1b104517eb5bb233d4398f67140b44e986e7a2de16bfb65b0ab7609e831341efea2a6f583258b6a85f70e01
TLSH
T123110017109F8AA265328ED2E78F1900F253DBEB26339041B47D9A8E8A692016033DCB
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\@npmcli\config\lib\index.js
Size 29KB
SHA256 9976a7f202a683370a170f8ab053d89cf6450c9d0596d8bed92bb762f0dca92e
MD5 a2819bc319ade96e220b81c11ba1fd62
SHA1 f711920489d12ac7704e323de4cea98009299e7d
SHA512 64b409c59d3e7df84ddd87163fb03f38d1bbed259323392685e01103ff9d2a43b456a5df5812e2bd3de61e0ae61520ccad444a92ea908a15bd871146630edd32
SSDEEP 384:u6ttZiGZUUo/9l30gXizWdbNMJzMBDwQPyvf8YTKPuIh8bpyY339B0:u6tttZUUy30gXiCFSt7QLmIhU3N+
TLSH
T18AD2E92226AE553354B36774CE873005EB17E13B3963A04C7AAD83846F75A648077FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

type-defs.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\@npmcli\config\lib\type-defs.js
Size 1KB
SHA256 5f8cab3a4133b226c653784d569a9bf3e5a2ee76ac73b9156cd58a2c72839648
MD5 8385a8a608e5cdd5a79957a6c979fb28
SHA1 d20fd55ae3664cd339245fdd26a28983baf97f2e
SHA512 3bec37444635d9cdc9a2f1224fa9160213fc4dd1234e98080c7ec825f07785ac93d4a88bf8bb4bb91470ec070da9b32acc20b111d2d3fcd15397a8e641dd6eac
TLSH
T10A3184415DA1B0410DFA47F858A1C753FAE683216211C08BF8BD12222BE2FD590BAEF0
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\@npmcli\config\package.json
Size 1KB
SHA256 c5c6c02a4531c351b9dc170010fad4ea594e3a713db8e0f0c65172cddde62aac
MD5 bdcf4bcd42e833c23b1c0241ad4ba811
SHA1 143ee61d1d5b6fa094fa5e55feb4ac44ddc80a5f
SHA512 78552fddfc948eaf8155a7ff8ea0e7087874bf597c71dcc0f74c1451b91dcb9ce8c3ef61294cff057417f127db19e6c4b50a34e9c4a500daf069f4109cc84e88
TLSH
T13F316567D8A9CE6327B5139BBC744A92F0244B2F0565D80F70F9434C0F7287302ADBA8
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\abbrev\lib\index.js
Size 1KB
SHA256 d12c4a8f9905d3518963e66d6568b0c8dd1f0c61f5b8bb5fa517fb015b3626b4
MD5 dd6841a20b86546fabef0fbc5e4f06fa
SHA1 cbad034e03057042d32137d6efbf06073dea0ae1
SHA512 4d47e762dc46be5d946b8c71a6902a9dc5e8111c04be0cc1e84af5ad74a7ccc06f7da98bc22eb6a14b115579994bc1169fb298b32c3bfacac298b9b11b874c11
TLSH
T1DD21EE7062AC051AE477B3B74987949CF57FC53730008618BA8D66901F34996C2F9EEC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\abbrev\package.json
Size 1KB
SHA256 9e129b43f1bf19aa0c01b1ac723eb2f21b14cb9ff0fd284cb5534b822083ff26
MD5 9f0f6847ae33de25a2cdff5903f17809
SHA1 8bed5a607d0a839fc747be21a874cb62361ce341
SHA512 478433fb7998d5315010862a8cd805839eb9b71bbf5ab24c8117c91e08f9a2c0e40273eb9ce773c4751b7393bd62cbe162b84268e18ae115df52def37ff89f72
TLSH
T1D6212663C4A49D632AB9536AB9644682F124471F19A4DC1B70F5024D1F7207306EDBAC
MD5 SHA1 SHA512 TLSH

Submit Download

ini.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\ini\lib\ini.js
Size 7KB
SHA256 481b00a4ebbfc83b28b97d32dccd32d7585b29b209930d4db457d91967f172ad
MD5 84b82e208b562cc8c5a48cf65e6ab0f0
SHA1 0adca343dd729beb86ebbb103f9d84e7ebbd17af
SHA512 377034e60d9d2ef3da96f23cb32f679754a67d3cd5991b1ad899f9f7c1910dcd0d9b0a1b0530046b6016896bd869a1607ef29c99949407959dcece6f9da790f5
SSDEEP 192:Q0ODCk+ZoW1ZdLSgKPiMDni6LJQqLDkUw0GIyRlQjiB4giPnU0r7ZnB2:+ih76LJJHwpWiN0rJB2
TLSH
T112E1635835952064463773F29D57A415FB7A6433B121D08879BD4AC02FB1D20A3BAFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\ini\package.json
Size 1KB
SHA256 94ebf2db52f15b5da55a809977e04f02b052abf418cb160a8d0719362295d867
MD5 5b29ab3cad80b08ec094c8201333ebe8
SHA1 dee99f05b24963959159f1f061926e9075679be8
SHA512 a6e66ade3de2cd308b1081548d2e58a87aad15baaa236c4dea73d36a946b6de352c3765d188f350c9311ebea0efc8b0068a8a7e0025e3dfdff84b737be4e475a
TLSH
T151113D53C5E99D632BB5136BBC744A42F1244B2F1565AC0B74F5134D0F7207705ADBAC
MD5 SHA1 SHA512 TLSH

Submit Download

debug.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\nopt\lib\debug.js
Size 186B
SHA256 0eda498431dfcb77febe2e79b4a63139559d3f42b21e8b81fc3879a3f6dc3c46
MD5 1d97bc3d56be902d4f63b37b05f3ad85
SHA1 ace1fd823fc44e12a25448db2b5a49e20973e506
SHA512 fb52fee500d9099339b4d60f9aaab8bf613e7387848ff6ef3d2ce513d886298ee04810fb1f2b107a317cf4e1cea60a26ff4797b9cad3b11bbc26af0852e684ee
TLSH
T124C0221256A42610C2B007433B19CA9B6CE83A2603A2A010F238624F2FC55714426CCA
MD5 SHA1 SHA512 TLSH

Submit Download

nopt-lib.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\nopt\lib\nopt-lib.js
Size 14KB
SHA256 fb1225f5af7ce00c5eca903e3ed53a450cc1891d66bc6c06fbbd29973c30cc92
MD5 7c17123abc6f7a3d291172ec70c4497d
SHA1 76004ffe635ef64380e2ba0e6d2e6aaeb0cd2588
SHA512 feff76a134dda3af0af261f916fe3ea2efd00abda41b7a7d5938130d8609d4b6c097d3efa297372ebf7f9668d76be53c2e732726567e679d67344b6e5a599550
SSDEEP 192:MoC2gi6zgKNqHO3M1iy9Env6WvT0LYxuBSvfKUdEuapGcANx33NL8D1/lENnYAKa:2tgKWOUSlvfFVVvtU+VBj
TLSH
T163623E1C3A4462A14B7363B5CD47A81AEB62C1273324E894B86C67702FB5475E27DFCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nopt.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\nopt\lib\nopt.js
Size 1KB
SHA256 d65dabbe6a6f823df2548a9e791e8a768d92368e92fdb7e9ae32fee80aac08fb
MD5 b21be1551a71384366014ff42fefdf96
SHA1 dcfda8b4daf56a502d9333db746b6c6355411e6e
SHA512 b26b036107b6f03a3fac249a8fabcfb8f1a5375a4b7e493c82662478525720177b89a539f40981330a9986f70e516be5da51b7cfbbc8e0319086c2b2fd13cbf7
TLSH
T19221B14D9A89F4F453310240EA494A83EB96C675F32034A1B03887711AE6C3D7B14BEA
MD5 SHA1 SHA512 TLSH

Submit Download

type-defs.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\nopt\lib\type-defs.js
Size 2KB
SHA256 6537bb9b4df3a1af3e14d5a99d58e75180878a3e96a4bb3bc9760b052b53c5a5
MD5 0dd63ef9ebbb7c6f5a20aaba3d799be6
SHA1 bd7d41bbdf8dce506c049cdcb339c6015fb11290
SHA512 b0f065c9749023493720f1102b7bc1b2506f449c67c57aba40aff591f6a03a8640149e9573bf0ce4a7664909b721d893b85e350fd488e6de6cb8afbb10d76bbb
TLSH
T16641A3442A6125665F729BF49CC7A607BDE79026331590BEB168989037E1FF4A038EEC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\nopt\package.json
Size 1KB
SHA256 bf4e97204670ac6527dd6da623b03fbc3145aa976e631039dfd1ebbb73d99ef8
MD5 b81bf8e6400901d6c6adabeba9931a38
SHA1 36a1de9915e7772e0bde74452e95b8c2012ec442
SHA512 971f0641705e05dbc926b3087b66cdcd5667083ba25562154700ac7cb90b5d8fce382c0ccfbd12650ed886170de1a2130a81786b7cd5e284bfec1ac52d69608f
TLSH
T10C213663C6E49DA727B913AABD644B42F1244B2B59A4AC1B70F5024D0F3647306ADFAC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\proc-log\lib\index.js
Size 3KB
SHA256 f6c7ee8376eb6720a9b5149077648a0cc74e749c928f36bf88bd4dc6728d663c
MD5 aaf4d3f519676aa3f490218a47fa6042
SHA1 9991f1ddc9b9a818dd4e9c2ad2dcd2b7c3ee7753
SHA512 4ade93ee5fd3531389e3fb7f5f2db1fb8b99c2eb1fd769cf0a5ce726d1c4cf27aab1fcfa5dbc17dfe985879f00cf032a44e5c169cb40e7d4d27462a4033d2085
TLSH
T1D071599A7CEB34499BB3F277E80F6646F9590B3711260972787C92606F3A4205260FDD
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\proc-log\package.json
Size 1KB
SHA256 25f1b2da27302598083b749278018f7bd5cf42b8632df48428e07371e6386380
MD5 b9eb984a5b149084bb675358404d83ee
SHA1 2c87199e46d74c4de3202607efde64947bdc250b
SHA512 4f3b72ffa47131f28a0ba85d9266665cad623bf72786b56054dcfa71cdac8d89b2d8be53db96dbb05d17035800fd6673f6143a567b0474748f3adeec1771dd57
TLSH
T1A2219B67C4EA8D732BB5036FBD644A82F124472F19A5EC0BB0F5025C0F7243305ADBA8
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\walk-up-path\dist\cjs\index.js
Size 474B
SHA256 4e86e409d7506477caee910cb50f5bff1dda477878da923bd3888501e1a04036
MD5 54bd6e9d21ed6021e374d34cfaa3290c
SHA1 e71ef5c7bf958f1599fce51cc98a73f849659380
SHA512 7424455a64824b7ffe72c3ed521684d7ab279b4cabb0fc018e9db04662a92af9187efe30f5a442c3418705895262de6e057858c3cda00c634df3cbc6eebb2407
TLSH
T162F02B9988B0F476C9717BFAC6574444D59780F372450855F69D05908F31C8851ACE71
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\node_modules\walk-up-path\package.json
Size 1KB
SHA256 2d43790293eb562918790e7fe2a786d86ed8e5a95b45d5e36587be0dbc8ddcd4
MD5 e6b2ad09f00a37da8012022f4b9e0461
SHA1 9af557e76ab4036536d792ca9b3c37d4720c0587
SHA512 9ea06c09a0837495bbae225d2913f55f53d5f81b4949bc1640d2cb460e3f61d4d39fbb88a959adc56ca7557870a069e1ec2a92b0c759b457731e93ecad8f9eb7
TLSH
T198419933D8D84D3702B41774E8399902F673476F12249D0B78FD126D9FB19A7018ABD8
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\pi-node\current\node_modules\npm\package.json
Size 6KB
SHA256 d81762ed2b1a3631f71a23587b5138c54cac21cac69888be93625ea34d5d40fb
MD5 5dbb9df4710d9984bc6c24bfa8a8d039
SHA1 658e721c4181edd65347628aff073a8325c1585c
SHA512 efc2acbc9d39b8a4b6e839982a885cefcadd309d87bdd3bcc8bf5fc37f51b94da4b27fded6e8cb84413877d055b7268efff9d38ebf5952d415b927959b8b80e5
SSDEEP 192:7EN84EIrUDhG5mS90BWVRgeZ20l/ZT0YbFj:7ENFEIrUtEmy8WPZ20/9
TLSH
T1B3E1FB33CD19CEA32DBA9A9EBCB44102F128935F6104D44F32B8978D4F7297B05AB725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

npm.cmd

Path C:\Users\Admin\AppData\Local\pi-node\current\npm.cmd
Size 538B
SHA256 21b46c69ad6e2f231f02a9e120f4ba6c8e75fef5a45637103002eab99f888ab8
MD5 6895fc6423c97fbf721a71333137d1ca
SHA1 e0a531a3a869f2c3bb1ea91801a8a386d6aaf73e
SHA512 0cdaa6bbeefeabf676839d88e96a096b13b9176bd936e11665ebf01e57540e131981a7bee4f113d2b5bd6858656f7cb689d29ee81d9f9e8d7f87d2d91e041ac0
TLSH
T1A0F0F6B6F8E94EECB11B0F613C76482574CBB4573C6610E6262C8514C7E46E004C235B
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

4mxssyxe.0.cs

Path \??\c:\Users\Admin\AppData\Local\Temp\4mxssyxe\4mxssyxe.0.cs
Size 360B
SHA256 38e83171dcaf201a2ab04bf88f4a956eaf3d4298e5c1dccb28a0666a5bc1c081
MD5 6f365d637700d20770b58448413a740e
SHA1 1d377c47364cfc523eb8bc62163e131f12c3685d
SHA512 dbf3dc8e4c6d37abd7033b388531abe28ef01a3c9efe9abc91535c629f904b6e1fee012bef5c29ac8f4e4f133ca961d68ca3baa41acf0dd5f8ba5b8b62064b39
TLSH
T16FE0681867B3857B869204096CA970EDBA234037227A3644B9F912118F47808BC31B11
MD5 SHA1 SHA512 TLSH

Submit Download

4mxssyxe.cmdline

Path \??\c:\Users\Admin\AppData\Local\Temp\4mxssyxe\4mxssyxe.cmdline
Size 369B
SHA256 6f48048ab9cd247ce4bb1d672247e71b7fa771be412371413d0fbe5419f9ee21
MD5 4db27398ed21589076fc558e94356e8d
SHA1 22d9394d1d7eb75bee9b386357f356126842cde1
SHA512 9963de8fc41a45f51d7de4066fa3c7ae5dd1d8218cc85f7133ab9c56025cd93cbf68976515a70d95d622013f0642e54595125e5da9db7e0b788176ebec601d38
TLSH
T1CBE0683A424EC27E02D92007716DE4AC92B2068F39893FC8E8A4441DF01740467D2761
MD5 SHA1 SHA512 TLSH

Submit Download

CSC5714CF565C3746C4978110C7DEEE2511.TMP

Path \??\c:\Users\Admin\AppData\Local\Temp\4mxssyxe\CSC5714CF565C3746C4978110C7DEEE2511.TMP
Size 652B
SHA256 46bff4ad94a0c39fb29db8cd13baa89dd8c6c4697b609a0bb09922ae330df6c4
MD5 6dda942f2fd9fc46323c08add34121f5
SHA1 3915b44ce5eaf899bd2dec4811e022120d05a579
SHA512 942055f24202043ea6c230221aad5e26149ef66716057e00861e42c757906e8ddb19a4b4e325bfd3f4f38144443d33c1f6e213ea409e41c0364d2da5515b478e
TLSH
T1FDF05E4967F8020EF4F34F31BDF6836391A8BC65DE7293ED248003292865610C972FB2
MD5 SHA1 SHA512 TLSH

Submit Download

CSC9486CF6B1F94390BB3E6EDFF821868E.TMP

Path \??\c:\Users\Admin\AppData\Local\Temp\t1twrjo4\CSC9486CF6B1F94390BB3E6EDFF821868E.TMP
Size 652B
SHA256 16dd2b0a6966513d09d0ec5e9ff8a1760f34790ac13eab3e2f1ac39166880613
MD5 85480802e5d847ba495032410c8ad6f4
SHA1 e6ddccf251aadf5f60e0b0404f12ddda2a57fecf
SHA512 08818a1e9dace1a76275e5b88aa9102d64f9e805ce2be8859fb1f1e1016a36fecec080c2b7ee6971d52542254fa423e566b7c70bb9e18297c90e243c8f63fa9c
TLSH
T1F0F05E1963F8020EF0F74B70BEF6436395A8BC64DE3293ED1440031D28646248962FB2
MD5 SHA1 SHA512 TLSH

Submit Download

t1twrjo4.0.cs

Path \??\c:\Users\Admin\AppData\Local\Temp\t1twrjo4\t1twrjo4.0.cs
Size 519B
SHA256 86e7bff9bbf4debb52c5beaaf545d54e9362ca29b81bb5bdb1804691c818e68c
MD5 4b78052bbaee2291478146d20dff1a92
SHA1 2ea7c93921515ce6f4ba26f7f074bcab33a58ff5
SHA512 159ad754646e98f5ba360662ad26a516cb39b7752676debae59496527b0dd93294cfa3209a9b31cdc3db6d0240a7bedd2e902a0075735d7827fcf5729e22675e
TLSH
T1C8F05954A7EAD332C836841D4C4AF0AEFB23E017067A2C00FBFD13124F9F1005636219
MD5 SHA1 SHA512 TLSH

Submit Download

t1twrjo4.cmdline

Path \??\c:\Users\Admin\AppData\Local\Temp\t1twrjo4\t1twrjo4.cmdline
Size 369B
SHA256 ae4b8f9a7836289c91bd534b089bec079dcd7ec8597f099908b229cc5e164a04
MD5 6ee1b945fbf44754ae68a00bcf5f1e1e
SHA1 6d8a3748bb3a2b42b631b290b56992d8b9e3ca97
SHA512 109131662749a1e831b2d068662bb3225befcc0d021cde447f724c5df28f2e03b34f660716a0966e97da6361761baf80e686c785698e5fbbb5685c82b109e4eb
TLSH
T1A7E0C02A528ECEFD01DD140B6169C4ECCE76074729C0BF8CF0C4444DE02700427F2B41
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1384-400-0x000001F8AEE40000-0x000001F8AF002000-memory.dmp

Download

memory/1384-385-0x000001F8AEBF0000-0x000001F8AEC66000-memory.dmp

Download

memory/1384-408-0x000001F8AEB70000-0x000001F8AEB7A000-memory.dmp

Download

memory/1384-376-0x000001F8AE5F0000-0x000001F8AE612000-memory.dmp

Download

memory/1384-384-0x000001F8AEB20000-0x000001F8AEB64000-memory.dmp

Download

memory/2452-5021-0x000001C7FD830000-0x000001C7FDA3A000-memory.dmp

Download

memory/2452-720-0x000001C7FCBC0000-0x000001C7FCBC8000-memory.dmp

Download

memory/2452-733-0x000001C7FCF40000-0x000001C7FCF52000-memory.dmp

Download

memory/2452-734-0x000001C7FCF20000-0x000001C7FCF2A000-memory.dmp

Download

memory/2452-4810-0x000001C7FCC70000-0x000001C7FCC78000-memory.dmp

Download

memory/2452-6540-0x000001C7FCF90000-0x000001C7FCFB4000-memory.dmp

Download

memory/2452-6539-0x000001C7FCF90000-0x000001C7FCFBA000-memory.dmp

Download

memory/2452-5020-0x000001C7FD4A0000-0x000001C7FD616000-memory.dmp

Download

memory/3240-364-0x0000014DC15B0000-0x0000014DC25B0000-memory.dmp

Download

memory/6108-420-0x000001EFF60D0000-0x000001EFF65F8000-memory.dmp

Download