73f3905bc8106814ebf5cc26acc63b9588b342de8afd8edc698e10b6932f41d2

Resubmissions

31/07/2026, 12:35

260731-pssa5stwey8

31/07/2026, 12:27

260731-pmvjbashng3

Analysis

user interaction
yes
max time kernel
64s
max time network
67s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/07/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KiraMultiplayer.exe
Size 991KB
Sample260731-pmvjbashng
SHA256 73f3905bc8106814ebf5cc26acc63b9588b342de8afd8edc698e10b6932f41d2
MD5 9a0433390b0d76c35890507fd71d74ec
SHA1 c407e85f638124fa0c5dbdf8606de99f3484e0d7
SHA512 0a332963916514649963c574e816d55625b45d2f2dc8676adaf437d6fbd955cf77bacc6e79ad307bc0f777b2972fbfa1bc369c4a1edf31a9ece64b447068ac1a
SSDEEP 12288:r23OY9U2BSf+LZMaj0bjYIjFNd8EfvfpqR3yRGqRfweulINkI7jV+OtBN:kR/SaSaj8YIjdpfpqERc+5tf
TLSH
T1AE25E05533F4CA27E2FF27B4F471855067B2B442E66BE78D4C8664EE0992F819CA0723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 4 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2100	msedge.exe
4972	msedge.exe
1656	msedge.exe
228	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe
3168	KiraMultiplayer.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3168	KiraMultiplayer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
1628	msedge.exe
5072	msedge.exe
5072	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3168	KiraMultiplayer.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3168 wrote to memory of 1628	3168	KiraMultiplayer.exe	80
PID 1628 wrote to memory of 2572	1628	msedge.exe	81
PID 1628 wrote to memory of 2952	1628	msedge.exe	82
PID 1628 wrote to memory of 4972	1628	msedge.exe	83
PID 1628 wrote to memory of 2952	1628	msedge.exe	82
PID 1628 wrote to memory of 2952	1628	msedge.exe	82
PID 1628 wrote to memory of 3624	1628	msedge.exe	84
PID 1628 wrote to memory of 3624	1628	msedge.exe	84
PID 1628 wrote to memory of 4924	1628	msedge.exe	85
PID 1628 wrote to memory of 4924	1628	msedge.exe	85
PID 1628 wrote to memory of 4924	1628	msedge.exe	85
PID 1628 wrote to memory of 1732	1628	msedge.exe	86
PID 1628 wrote to memory of 1732	1628	msedge.exe	86
PID 1628 wrote to memory of 1732	1628	msedge.exe	86
PID 1628 wrote to memory of 1308	1628	msedge.exe	88
PID 1628 wrote to memory of 1308	1628	msedge.exe	88
PID 1628 wrote to memory of 1308	1628	msedge.exe	88
PID 1628 wrote to memory of 2256	1628	msedge.exe	89
PID 1628 wrote to memory of 1564	1628	msedge.exe	90
PID 1628 wrote to memory of 1440	1628	msedge.exe	91
PID 1628 wrote to memory of 1676	1628	msedge.exe	92
PID 1628 wrote to memory of 3004	1628	msedge.exe	93
PID 1628 wrote to memory of 1016	1628	msedge.exe	94
PID 1628 wrote to memory of 2256	1628	msedge.exe	89
PID 1628 wrote to memory of 2256	1628	msedge.exe	89
PID 1628 wrote to memory of 1564	1628	msedge.exe	90
PID 1628 wrote to memory of 1564	1628	msedge.exe	90
PID 1628 wrote to memory of 1440	1628	msedge.exe	91
PID 1628 wrote to memory of 3384	1628	msedge.exe	95
PID 1628 wrote to memory of 1440	1628	msedge.exe	91
PID 1628 wrote to memory of 1676	1628	msedge.exe	92
PID 1628 wrote to memory of 1676	1628	msedge.exe	92
PID 1628 wrote to memory of 3004	1628	msedge.exe	93
PID 1628 wrote to memory of 3004	1628	msedge.exe	93
PID 1628 wrote to memory of 1016	1628	msedge.exe	94
PID 1628 wrote to memory of 1016	1628	msedge.exe	94
PID 1628 wrote to memory of 3384	1628	msedge.exe	95
PID 1628 wrote to memory of 3384	1628	msedge.exe	95
PID 1628 wrote to memory of 2348	1628	msedge.exe	96
PID 1628 wrote to memory of 2348	1628	msedge.exe	96
PID 1628 wrote to memory of 2348	1628	msedge.exe	96
PID 1628 wrote to memory of 4536	1628	msedge.exe	97
PID 1628 wrote to memory of 4536	1628	msedge.exe	97
PID 1628 wrote to memory of 4536	1628	msedge.exe	97
PID 1628 wrote to memory of 968	1628	msedge.exe	98
PID 1628 wrote to memory of 968	1628	msedge.exe	98
PID 1628 wrote to memory of 912	1628	msedge.exe	99
PID 1628 wrote to memory of 912	1628	msedge.exe	99
PID 1628 wrote to memory of 3400	1628	msedge.exe	100
PID 1628 wrote to memory of 3400	1628	msedge.exe	100
PID 1628 wrote to memory of 3400	1628	msedge.exe	100
PID 1628 wrote to memory of 5072	1628	msedge.exe	101
PID 5072 wrote to memory of 764	5072	msedge.exe	102
PID 5072 wrote to memory of 1656	5072	msedge.exe	103
PID 5072 wrote to memory of 4312	5072	msedge.exe	104
PID 5072 wrote to memory of 4312	5072	msedge.exe	104
PID 5072 wrote to memory of 4312	5072	msedge.exe	104
PID 5072 wrote to memory of 4800	5072	msedge.exe	105
PID 5072 wrote to memory of 4800	5072	msedge.exe	105
PID 5072 wrote to memory of 1560	5072	msedge.exe	107
PID 5072 wrote to memory of 4764	5072	msedge.exe	108
PID 5072 wrote to memory of 1560	5072	msedge.exe	107
PID 5072 wrote to memory of 1560	5072	msedge.exe	107
PID 5072 wrote to memory of 4764	5072	msedge.exe	108

C:\Users\Admin\AppData\Local\Temp\KiraMultiplayer.exe
"C:\Users\Admin\AppData\Local\Temp\KiraMultiplayer.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --disable-sync --no-first-run --no-default-browser-check --new-window "https://www.roblox.com/home"
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x244,0x248,0x24c,0x240,0x254,0x7ffa110ac188,0x7ffa110ac194,0x7ffa110ac1a0
    3⤵
    PID:2572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,17187590594601454143,16081402764387289618,262144 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
    3⤵
    PID:2952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,15988570326431234233,12662236232815645127,524288 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,9590226430642225153,10688996140327726610,524288 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:13
    3⤵
    PID:3624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,2838718343997171160,14278399604038758521,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=1796,i,9646552893936711012,14095685247615670006,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
    3⤵
    PID:1732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4104,i,14205966307355016978,295953441423721871,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
    3⤵
    PID:1308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,7683880860349703726,8085465880312435543,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:9
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4232,i,17561923029832938491,434584917363764396,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
    3⤵
    PID:1564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4192,i,13024652824780236629,10452174268230099926,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
    3⤵
    PID:1440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4300,i,8033124555983520492,1135156689082540368,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:9
    3⤵
    PID:1676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4320,i,17358207126037425899,5771390390606653171,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
    3⤵
    PID:3004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4340,i,12235188693220768324,17283271373058654458,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:9
    3⤵
    PID:1016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4208,i,11277678163400791823,7236501373857620461,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
    3⤵
    PID:3384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4144,i,1587613272692631671,13318440856500939183,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:9
    3⤵
    PID:2348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4216,i,16374103117645933185,17649152339509162910,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:9
    3⤵
    PID:4536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,6993555479756338233,7423691756039301794,524288 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:14
    3⤵
    PID:968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,12726318830908910758,3668855197952987899,524288 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
    3⤵
    PID:912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c" --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6412,i,18221124557084830693,13889541507508935141,2097152 --field-trial-handle=2224,i,17805015108264143914,7431164622182045940,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:1
    3⤵
    PID:3400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5072
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f8,0x7ffa110ac188,0x7ffa110ac194,0x7ffa110ac1a0
      4⤵
      PID:764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,665882156864529579,7298525587083364984,524288 --field-trial-handle=2092,i,14264201213469659886,6722196055704901178,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:11
      4⤵
      System Time Discovery
      PID:1656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,16658923955181006292,15144648656380559170,262144 --field-trial-handle=2092,i,14264201213469659886,6722196055704901178,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
      4⤵
      PID:4312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,1470865956794670630,6730469955598680769,524288 --field-trial-handle=2092,i,14264201213469659886,6722196055704901178,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
      4⤵
      PID:4800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3452,i,6294177952530385562,1409929032545204229,2097152 --field-trial-handle=2092,i,14264201213469659886,6722196055704901178,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:9
      4⤵
      PID:1560
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3172,i,17861154310248384784,5766277548134708062,2097152 --field-trial-handle=2092,i,14264201213469659886,6722196055704901178,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:9
      4⤵
      PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --disable-sync --no-first-run --no-default-browser-check --new-window "https://www.roblox.com/home"
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  PID:1700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x244,0x248,0x24c,0x240,0x304,0x7ffa110ac188,0x7ffa110ac194,0x7ffa110ac1a0
    3⤵
    PID:4232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,11710866775524913540,11485256505532536055,524288 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:11
    3⤵
    - System Time Discovery
    PID:228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,11134246736167488165,10726011106183304030,262144 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
    3⤵
    PID:1568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,15687579529777827732,6126960100284409350,524288 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:13
    3⤵
    PID:4424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,14752024080653047363,421182667053662328,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
    3⤵
    PID:2240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,12693551914072129021,2098319889173586559,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:4156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4028,i,12308554053366185583,14607317386158430438,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:1
    3⤵
    PID:3220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4060,i,12915644011835667090,11944812732221761770,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:9
    3⤵
    PID:2040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4104,i,4721051361219583455,4944281035229141893,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
    3⤵
    PID:3576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4128,i,14796424109453056527,13229380212357852568,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
    3⤵
    PID:3616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4340,i,10171535823060635461,9053275294861852141,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
    3⤵
    PID:4384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4172,i,78597538176999934,7768837611368224653,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
    3⤵
    PID:1556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4324,i,7541851420579487983,9123452463026902418,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:9
    3⤵
    PID:2668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4424,i,13722150252952040948,17554040209517452754,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:9
    3⤵
    PID:4116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4636,i,2508334758418356540,14312438070914393089,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:1
    3⤵
    PID:1652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4664,i,98414947001717160,7219797776132943119,2097152 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:9
    3⤵
    PID:3620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,12171171011231378359,14417777071408674090,524288 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:14
    3⤵
    PID:5432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,9089211348554090484,15505620307928784965,524288 --field-trial-handle=2172,i,4931268678683009770,14465915433272181674,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:14
    3⤵
    PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies registry class
    PID:4908
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffa110ac188,0x7ffa110ac194,0x7ffa110ac1a0
      4⤵
      PID:2344
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,12742293201363209334,7493465412536149947,524288 --field-trial-handle=2548,i,10937216944886561240,8689402839781735721,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:11
      4⤵
      System Time Discovery
      PID:2100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1508,i,2070057200320393360,7002466839480879073,262144 --field-trial-handle=2548,i,10937216944886561240,8689402839781735721,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:2
      4⤵
      PID:5428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,2292171544984765614,15948785256412070353,524288 --field-trial-handle=2548,i,10937216944886561240,8689402839781735721,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:13
      4⤵
      PID:5932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Crashpad\settings.dat
Size 280B
SHA256 6036966b182f40c9894d2a5fbdacfd1df24a784b6440b7b7817025e790603e48
MD5 0e1f9217328d93f6af56d26db74a3123
SHA1 9c3815b54c32a5336c2a4d2689b36fd886b0eab8
SHA512 e5d3a77b97ce08706a8a310b7144a2fe42f0c578ec09701f5535985867af2022261944b79df322484f77e5a889f9acbaa8f0f995eef21071bcc25c2e1f5633a8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Crashpad\settings.dat
Size 280B
SHA256 f444309333582f7d415cbd0e890f0bab0dfb796a4a967548aa208cc0aad9b091
MD5 f544c817d10f66f99b72ee5455693052
SHA1 8aa4cb35bd237a7da59956bd8e9670a0a7a71e60
SHA512 94976d92d0dc66455828d2ddf8181a4f5f953a570e9571df139651b1e33961c20c315dd962e3e0286e4f475479add1553bd9b2b909a523d3872ba3f2ce1ab22c
TLSH
T10CD02220F30A20B0CE0A80B0E3E8338E0E00EC0832CA20080F2E88380F80288C00A38A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Crashpad\settings.dat
Size 280B
SHA256 79cb7a198dd9cd4b795e7a652b81a9184225a7801429ebd725ecd5bb94b85a14
MD5 6a8ca53d4f4114d587e934604d4db411
SHA1 aefffe514d44798d702229440bf4b98f414dcadb
SHA512 e65a5f45cbceb36e18656f3ff5f25fea631c2d23fa4a83fb8a45730dbc08136539aa41e8a4f40076f18d36e204f44d861322e2b9148ee93d2597f6d9f3ec7e28
TLSH
T13DD08020B91D74F1D7190175D39017455958595322D7620967148C1DDF74084E385BC7
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 5984f1cc3215cd2469426e4d2f12f23bfa8090ab566b2466e4030212af97449b
MD5 dbb98c4ebec0405173e23538e81c9254
SHA1 a902866f7683ceafcd80561e2ccddf4324f49929
SHA512 ddc2778f33025a912174d119f71cd73e19490e83da60df1d773c9ccc2995c20e5f7e1ec1c42ba113fec7af05215aa7edcb0968d136bd2ca6d0b39fa621194ca3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 ae8eb36642477119511bdb391d123eb1092d21a9d641109996e76df0cffe470c
MD5 b0c97cc65f4ad71f6d880c5cd46ed23c
SHA1 47b262ffa38fd1ab8c2ada20b315cd366e3a6b6b
SHA512 7524536a8ace4c2d5c432aa7523398f0944ecd24ac0fb93341109ac229041155d813bb3c8ac649a51170d9870faf8cb74e1e5ce91f1955dc2969ed6c9bf92b32
TLSH
T1B6E0A74341C134D4CF6504B01B28AC4C130487737584E3BFD5D8AC8F445F8E65551C96
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\DawnGraphiteCache\index
Size 256KB
SHA256 8d4d7f3602ece97c910f6074ae802b2661b240d633af9f0567f60c1a235fc421
MD5 b0ae56a9fae477ab75fc85a7c447109c
SHA1 c8b23a9c49e34de1e0ea406d655072b4a14e1240
SHA512 8ef113801c9554bbd9d141f7d5c02d4cfc3549223b6b81a6cac5bb777a9d4cccbecdfb148d08317f4d5762f4a73f85f0c39be0ecdf5c4707fcd1392853069cbd
SSDEEP 3:LstlNllkll/lH:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 3b82637ea2ba7edcc8034f3eb2fed4f8f6e71c8a7f604eacfcb77ce6621ae703
MD5 b2a2b06cb18a538a5df7bf78df229536
SHA1 c78b6952e7cc4194be324ef3ec5a6b33258fc164
SHA512 7fa884d9ec732e6eba237c6a8a4f354940e9e6f7bd0125a81a0ff69c57b46ce034a7c7096aaa227b2550c9b44dcada4637dd40cc95c7531c51f036ffe545e692
TLSH
T122A00212A1C5A480DB0102B023974AB117014921E50A936B53F5489CDA671E3430A804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593bc7.TMP

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index~RFe593bc7.TMP
Size 48B
SHA256 655630c8cd8647e2ec3b89f4a2bdfc5cd3e62f8a1414bcffcb7e7eebd8f640a3
MD5 6133368c20d86e6e957e6ff1ab7447d4
SHA1 f0226e131615fd4c11abfb1499d7cd98f5a11627
SHA512 97761a8b5795d781a5b9192fb028949d73b791c631370bb6f175da532ee08f74b405695e30c39e5cda9cc46e8afca52664871a7a023465306ed164805cce0b4e
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Local State
Size 4KB
SHA256 4c27a3f0db4212e2a90689cc360f87a67f376f915c47953b7970085c53178b05
MD5 dadafb6869202b232efb12eb9d6fa2d8
SHA1 a61cca6e3cc465fd74f418a97452efa3d8dcc4c1
SHA512 a711763046b424cda79b1f78a385b66d7e8675134a84fb551b1b4329c22ca48a3aca4a218e9938f9cfd7cf6b13bd524c6f8bc2fc7316a2f1979d9469fc29f91d
SSDEEP 96:dqGNk3sFf1ZbyzK1SsD3BsPZOvdZH5T0eUn2EmMkqEba:UGNoMdPbxW2ZTqUMeu
TLSH
T1179195B2A8306D338BE65E82F54A66039FB4B1F7C5916E94EFC85B1801CB69C1307C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Local State
Size 5KB
SHA256 cdcc07eb42135458eb8dde52c2a9e0db8ae5d17595bf737d0a25530602e28bc4
MD5 d6dc8800d43403108c1879842049e447
SHA1 05c6dbb53b6756d7c877e85de514b1ff841dc1d0
SHA512 a0668b11c2a690c8e74df349c37e9fb67e6072fff656c4bb5d8226a046c0d19ec6e8ad8181d53a0a12b99eeec922fb6fd463fc7930e3008791eea6eb8406db64
SSDEEP 96:dqGNkIQsFf1ZbyzK58Frh/cInURoDotovhnDQBsPZOvdZH5T0eUn2EmMkqEba:UGNEMdUooDUw9UW2ZTqUMeu
TLSH
T1F6B18476A934AD278FE29E42B48A27036FB471B7D4912F94EAC81F1D05C77881307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Local State
Size 10KB
SHA256 4fa67b548af0672c5e862a18383976448aa75e7689f4ab237a65222ee149053b
MD5 3cede6d154cb146e076e13582262bb32
SHA1 ea82bf04ff84da4ecf91df135564f38f322769eb
SHA512 502d760386b98093dfbe793bf2279d2271ddc93dcb33a37bdfc2c464d579ff918f3de8cbcfc74dc69e663bef112885fd8723f238df08f8886072a2303bcf73c6
SSDEEP 192:za8N1Nd+LtooDUaTeVZvohVeg86MG9Zrq:za8N1X+3abgzGE9Zrq
TLSH
T17232B5BE9D20593F88EEB705B50D39136D789177D5B46EA8D7881B0CC1BA69CF302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Local State
Size 10KB
SHA256 81ea31551f6e8435ac06f9f66a5d468cdad1fdedf2745d30742d051768e48021
MD5 5d2b4f8bef2520e091008f070e89b509
SHA1 da83ae23fa6f21ceab63495a64ac2abff54c9624
SHA512 062d315d327d047bb8b0180bc15df035719376c676bbac01eaae4fefc23ca2467114ade28f795a292ee709fdcfddbed4bd37af2c32805a72235ec101f4510475
SSDEEP 192:za8N1Nd+LtooDUaCeVZvohVeg86MG9Zrq:za8N1X+3NbgzGE9Zrq
TLSH
T1DA32B5BE9C205D3F88EEB705B50D39136D789177D5B46EA8D7881B0CC2BA69CF302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5935ac.TMP

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\Local State~RFe5935ac.TMP
Size 2KB
SHA256 ddfe3d55c3980fbbac8577b760da41cf76ff1cd15e563a04e9a86f3296274f57
MD5 f14b683e6ed8f750826af31637af7d5b
SHA1 b746a75afeb5578675f612d9a502393c3ef0aa25
SHA512 c90f1504a7f279f99177ca3b53c9f38b5c7247f9a69c026076980ec6f625fdfcfcacb8f28934bc98d9477c688ecdd865d187e49d4ac6e81f997f94b285c40278
TLSH
T12C4151A6ECA11E23ED474182E18D678B1D74E1F5C1815EA86BC9AF1A02D73CD131BC36
MD5 SHA1 SHA512 TLSH

Submit Download

de61b75a-fe42-4486-b055-811000c8cd16.tmp

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\038d22ae99b0461d9f53059da8cef23c\extensions_crx_cache\de61b75a-fe42-4486-b055-811000c8cd16.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Crashpad\settings.dat
Size 280B
SHA256 88bf7de3f259dde3cb5492a65bc02f327bc024ce0575ef471bae54f273f39305
MD5 1bdab7753106df3ade3c352ba13122a0
SHA1 73fcccde5a67ed2513725e1acafccf24ff566b2b
SHA512 498195201f646a8c65ddc61b0c942bf953392d27389964259ffda8194a6f5291c500b6f4bdbaf67a34df4c5aae4b0672faf611b7c25fdd663d928cdb01d7d615
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Crashpad\settings.dat
Size 280B
SHA256 c9645f0e6d2f51a63a1fffc5f404a101b80b30b1c88fed6187244bb72db7af33
MD5 14b800081c3657f952bff4bff6efcb7d
SHA1 b81f0472258b3c5c12fb04befd8eb543758fa846
SHA512 f7203173eb1b81034d54354a209294cb82b1a7aa7ff92b06b919f569ed0eff3044991c6fcc9586e30b79c9876254ed225780d8ab392ce4da308ff063cc0199a6
TLSH
T163D0220AF302038EC0C2F0332A3ECA02B203CE0F00033000A0BF2A8C382CA803C0202B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Crashpad\settings.dat
Size 280B
SHA256 27ae3705324189b35d0c419eebbad5c9cfe95c4db4a134bdbe9009dce23b8768
MD5 3034ff3158d0424a9fecea4ae7d27a5c
SHA1 4fcaca7b6a1aae9549d767062c338fd5a48416e8
SHA512 72f3c58a5db02ed7aa87f712fe7cf32e94ff83c87c2a2629816f4b4ca2d17ec48f4536d9c04057ea0059e8cf3572998c16b80862e00cfc43916a1d8d8d1df11a
TLSH
T1C5D08010FB1965D6E15551769524860175154A4B11536205B2254C0DDD3C4817E95997
MD5 SHA1 SHA512 TLSH

Submit Download

901e3138-a4d7-43d2-9d63-d24b5c6f242e.tmp

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\901e3138-a4d7-43d2-9d63-d24b5c6f242e.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 ab6df1de0d6dbfabda6fdef4c628b94e2d970ae3f77498b9c64e0c4568b696b7
MD5 db9c8f6c1b8e186dee43280e6b367467
SHA1 edb046586c2cd7fe1e999737c4e52aa6f247c297
SHA512 762fb148504e4b732dfbf1ab4dbdd10c630116a4b26a3ef970058139fa443d630adb5bd823b04c0539feb829d9528c4aebd716f8eadb0ccea50b95f7daacb703
TLSH
T141E02E6481E22080DF1200B254C8EC386001DB33B84023BBC6F6ACF6874F0EA2900F99
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59477f.TMP

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\Code Cache\js\index-dir\the-real-index~RFe59477f.TMP
Size 48B
SHA256 891d3d6ab76726f24b30dc0ef3844d88447a2dae539629183029b225395ee54a
MD5 08c61d0983a1de11c9f07edf75647e8a
SHA1 9e845800fa5c2aa2765e45c04b2b8a845dfed049
SHA512 822b779b6fba872ba0b54aad77f4b135ddb45ef2977944165e874d49d9e2b27d59559dad553e1742f08e32d58624b96498f0221f9be76697d698fbb74f318cf0
MD5 SHA1 SHA512

Submit Download

b89b1d27-0079-4689-a8d9-325aca13d210.tmp

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\DualEngine\b89b1d27-0079-4689-a8d9-325aca13d210.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 1ec9555758d64f5b742298b768fb5fbd5dbe5553c0fddeb04cb3b176e76c8cfc
MD5 4c4062d626c75112319a70ad6299c871
SHA1 d4be257389feb95c78f5b095077bc76bf23731c8
SHA512 9d8d1432bfd1b637dac4e70dbdc13b78f495d86a733a36cc61541d40dd19a9554e876618c76ef4c24c107c08181127c4d87c0aef263b0c43b21302ccccfce6e7
TLSH
T1F1A0021013C44C04C9056175129206B832089A12A426836742F108FBED771F04263911
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 2c139e678720ce41bdb3f5c506af8a1b0886572c63dd3121216e38a42e2d9a2c
MD5 4620df6689a6b61cb81df897be3e9a64
SHA1 f117af3ce5adf86c6dcb6683b5e96488481c75f6
SHA512 e6170d3c782e6f69594021a6ceaab7db019339f8bb46b331fc2d0046337fb9ed539c93a30a80019b555e0fd016589034abc70bd0b385447dbbbce4247d08a963
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Local State
Size 11KB
SHA256 fee7e39dfb558401f805c06d0c324163cff01df64e4e083988a0816f01d2228b
MD5 b233df1fae63eae68fec27c71a8a9bbb
SHA1 74ecd453c1f4bb3ff09197ef9876ea47deabd975
SHA512 39bb69640926ce4333547f45a478d05b637cc6f2145d0e3613d1ebd310448b594da8365bad50c946fb1cc5cb68a008e96ee7d9965ef85a9dde8f39b39426e0ea
SSDEEP 192:zw8NJ6YL5zooDUaNAWZOqgex8pqcDPkzXiR6hE3o1:zw8NJDTestgjJkzXFhl1
TLSH
T1C232D57D9C208D3F48AEB709B58C2A226DB8617BD4706E9CE7C45B0CC07A68CF746D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Local State
Size 11KB
SHA256 f9311534b21589e4c73b979e8780a45875a25eea3b4e4d5de7d9b306ad046c34
MD5 5c77b34bb4b8780f087316d02b4ad15d
SHA1 a0be5906ea91bcd39175ae7a5b2c74a569194ecd
SHA512 cdc5eb8b1ffb79e801ac480d6db10ae0870fb59751f05c44b4aae7ae8cf9317c29843299b79a717dee500a267218add59235a7a2b10cba1b35321777b1d35e02
SSDEEP 192:zw8NJ6YL5zooDUa8AWZOqgex8pqcDPkzXiR6hE3o1:zw8NJDTdstgjJkzXFhl1
TLSH
T13332D57D9C208D3F48AEB709758C2A226DB8617BD4706E9CE7C45B0CC07668CF746D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Local State
Size 3KB
SHA256 af9504c11d4129d69f9e934de2e243eec26c3e4b3e1d25ca8f6ef2426f69aadd
MD5 3c388952873541d1a2054e971d4460a6
SHA1 b3a6288d6793044df4189e6ad3d297a0243e71f7
SHA512 28fe4bf255570acfe74e0ea694a56983c5210d368e02d2a50822ed958032a972e171d35d76a31ef6caeb5d56e79b76317a20a174d23b48203ed960e96b393df5
TLSH
T1C781B472A8346C7BCBF15F86B54B6B03AF747167E6212E44D9C8231C04DB698130AC37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe594193.TMP

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\Local State~RFe594193.TMP
Size 1KB
SHA256 9d5682199ea64f33b5b1c7f9a522c5f0c465ba657fa7f793d2219401fa35e46a
MD5 54280d6137be8a1247c0ac1b8b16b34d
SHA1 47f494af4d776545ce240aa79705118b794c6da2
SHA512 dc7a384aa1d3e978f983cba2a7c7951aa3b8b86118cbcb798c38e7306732a4772edee7e6b5db0a624c28876f1c20ce51ea39c615d7e6bb5ba2b02a0b1ec561d0
TLSH
T15E319070E8652C37ACA1068AB28ABB533E3071B28161AA0851DD161C05EB2DC273EC3B
MD5 SHA1 SHA512 TLSH

Submit Download

a8b5a00c-1264-447c-9b07-176396204433.tmp

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\BrowserProfiles\43cccc4e6bf44959951aa46a44861a8a\a8b5a00c-1264-447c-9b07-176396204433.tmp
Size 4KB
SHA256 5700c39e7c639b804ecbfcb5dc59ffbd506c550fac319188f158a5380657026c
MD5 d5aa29296a00232fe381d866a7343f8b
SHA1 1be386a7a3fa36522e5f59b213371b331ab6f783
SHA512 1a4f713f4dfeeb2847ebf5de84687bdbdfb0b0acd9a89121c52d7418dafa4d082a0f6866db740abde3f3423929ff9f24735801d40c1c60148b0553fb290b0a73
SSDEEP 96:HqGNk4QsFf1YeVJ58Frh/cInURoDotovj3DstBrJv+Z/z0eUnFXEmiWq4a:KGNoMYPooDUwHszI/zqviL
TLSH
T1A8A1B672A434AC7B8EF29E46B58A2702BFB43137E1943F98D5D81A1C05DB3981306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profiles.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml
Size 1KB
SHA256 439d0283eb4d04f8246aeff3cebd473120380034a3c5d8141ed7a5947ec361cb
MD5 cc0b7e028c3d60ee19a97fb29cf66d9a
SHA1 8ecc653a83303b1b556f25f0939b908a7f1a3316
SHA512 a98c2b3b8c6f65c92c61235ea241e94e4f680e98a5a4eedef51f468725f081dd498fe9b7899aeeabf4f194a28f2092a7f2fd7a68b3591de675f8e56ee7eacdbc
TLSH
T13D212029C2E122371A7A837FF89206C22D21E36085860C6CB6DABF1F555B90102C7F3F
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml
Size 1KB
SHA256 bcba87b262d09df7cc5388f453d1f137897638c30e69ba95592547c1c8f54428
MD5 3a29d76c6c04d68613e74757a65f0ae6
SHA1 fb8caf4c6133875940f54e3c7fc1d992edea723c
SHA512 d076bd2838e0dc97ecdf988daecf4b746d3bfb9c8db6cafae95ee7188db97c87049f2259e1236bc6e71d6af84b4bbc7b21f1781b4a6e96bcd55c1e72ca8ea53b
TLSH
T102312C39C2D532372A3A96BAF49105C66C22D2A145470C5CF5CEBB0F1B3B40111C7B3B
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml
Size 1KB
SHA256 c1c53254afb1dddb6a64fc0773f6c3c96ea5ca41b6fe810fd14e95927472dedd
MD5 732cadf98513c37c36856f0fd8245d0b
SHA1 d27c1ce26bcade857d0b0657de6b8d644a496422
SHA512 e001765f4522b2f56f97aa250f38f00fc179cb3d37b37eb9e165d28ac360443fcb673af941cb2ee2b933560321ac0790379e37680772d453ab8235b48d2f98ea
TLSH
T11631FC76C2D635336A7A86AAF89005D5AC12D2A6454B0C1DF1DFBB0F1F77501108BB3B
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml
Size 1KB
SHA256 693b03a467f20ee8da83de210b7fa6b23550a6df8e0b4da84fa467f95e26371f
MD5 8a6bbb24508488ee704f62ff71d959b9
SHA1 b823935ecd61e6507999ac8b344bb935d40adf3e
SHA512 822295f41a109d5881dcdb8ddebce6e19570b878003f63bb31d9a3bf1436e3ad23bf494b76d82b40a5b521e584353fe60f480a8f58d97549a06de32b7f4b3be4
TLSH
T1C5210E79C2E531372A7A97BAF89105866C21D2A1854B0C6CF5DEBB1F1B7B40111C7B3B
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml
Size 1KB
SHA256 addce634e6c9ccba919aee441fc1b6b9d69e434f5f039b1ba3325cc48dd00e91
MD5 9c2098088b5b2bffe80cc4cc56f8a770
SHA1 c6b47698fcb34a7acd88d6fdba163b622d84308a
SHA512 65a81f949018ff88e92c13834ae33f5bd949e0f59004e27da8289eae9d00425648001af7644a83a1164f09add61a61af424af00e76be3282492a4564f0697b2c
TLSH
T11F31D876C2DA35336A7A9AAAF4910589AC12D2A6454B0C1DF5DFBB0F1F370011087B3B
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml.last-good

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml.last-good
Size 1KB
SHA256 19ce7faf69e99b93fc5f6770285dd9bedd6b1a49d8bcdd48e127873b06148ff5
MD5 3583cd8e3618840222222e3cbcfb1d84
SHA1 39bf3613250fee7c901a835be7b3855f278258ed
SHA512 516c94ca0786ad128d8850fb2415ad1bc96806fda70ac0710f6b42d3ea73633853c2bcdf4e3b04f22aabf4183c510b7f08e87328df28ad877fdf7490e72bd75e
TLSH
T192212329C2E0313B1A36837FF4A206C22922D36085860C6CB6D96F5F554B50512C7F3F
MD5 SHA1 SHA512 TLSH

Submit Download

profiles.xml.tmp-79fcd0f60e8e47a1b75e229bf11bd4e6

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\profiles.xml.tmp-79fcd0f60e8e47a1b75e229bf11bd4e6
Size 1KB
SHA256 2c5f1eec57d80fcd3681d777e862058eb96c47999938bd98ececc3375a623337
MD5 4b1811b63f2b3addaf90f0fc74b3ef1d
SHA1 f3b0fbd4467a750b0733a643c60192b3111e879c
SHA512 caf86803955655470ed9fa5cd764d1d5c44af6c15530aa221bc759cd85218947b9945b89485195faa8cf9d8dacdf6c54a6719ad2647c14abed46310aa04d1064
TLSH
T1F731DA76C2DA25336ABA86AAF49005D5AC12D2A6454B0C1DF5DFBB0F1F37101108BB3B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 941B
SHA256 28051adc2f560a9276d36bbe02f8ddb4ec73098b869e2902652a4975f7bacffc
MD5 faade89a9fdd74d460467e781bff127f
SHA1 f7f07d9bc27ba70f011952cc9f83c2050cab1ec2
SHA512 43b3299293f1584b574ef700e23d0bfbdecab93d04a0faf871aac606bf460fa06b94e4ec989a7b6cd81c3ed136b174a22f9d3d6bd21c1d26f54bfe846f950b68
TLSH
T12A11DC28D2E120372EB9837EB98082C66921C790814A0C7DB6A96F6F541D44612C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 942B
SHA256 70662bf5b375f2f046bf5d8e8e65683656f79deebf8f85be200199b055e99770
MD5 05f53ac8dcd0ca519dd42ef713630907
SHA1 c1b1f1a374eedfd65ec8c34eb096a3e81829ddb1
SHA512 13f39a693ae009adccd2ed08b97a737d2b7f00851f413bdc1f4150a8434fdd50f208d644f3e9a46f320f4101072cce7d784e3e548bb8449e75f765c47e4e84a4
TLSH
T1C411C069D3E520371FB9837DF99082C67925C7A0814A0C7DB6A96F6F641D44613C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 941B
SHA256 70e60039a416529a5c4c0f17162c76c28716bad1a2d63796d80a256d3fcc787a
MD5 def79fe32fa1cecf33bf2f1a41dfccfe
SHA1 4a93c7e84430a57a3b0930d956a557b2dd7b4dee
SHA512 9fad9a8ec6f3bebea608383dfb42bd9a35e3f40ca538c4c4d20d8dd50e5ea8fd1d1eb259ee6b270207f59cff433e5cba3604de74d96229bccd78a77e48802f5a
TLSH
T19A11C069D3E521371FB9837EB98082867925C790814A0C7DB6A96F6F541D44613C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 941B
SHA256 672365043780c260baec3acceccc012c35495d536a8254aae4840d0ddffabaae
MD5 8d651747d51a49e81e886216ca153b77
SHA1 5c6b988714cf2ec8ac648f0490849ddb41440090
SHA512 0dd7ad9810068a8861fcdf81b019464d1e8d68865b8e9bf13cc926ca20a0e238cdce0a7183f40774e4c637025d4311c638e6a2101c15714f98e356cfb07fb775
TLSH
T1DB11002CD3E120371FB9837EB980828A7921C790814A0C7DB6A96F6F541D44213C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 941B
SHA256 faa5b92bcd4f9d0ffc38a2278556d732b66af94a9b020193f27d27af4821e02c
MD5 7eff01311f41f659c35a86df6e953e63
SHA1 862ac50ba9317ca18a60724bec06441a762457f5
SHA512 787a152b14ed88c115f9d1a521af7b7cbb31d4e4e43d72af715331da53db90e2d1aeba570ac4cd77b24607ad2f928f9f2721ba830dda0b299c0d26845bcaa5f1
TLSH
T16C119C69D2E520371AB9837DB98082C67925C7A0814A0C7DB6A9AF6F641D44612C3B2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 941B
SHA256 80f44e891b0ef5c57185e29fa16d17d4e5ca938fbd5c6eb3b6f7f019ab97c8a0
MD5 74f87a40b0dea13b3d329273f85d684a
SHA1 0bdfce548626b82ddfd62d98ff81e55975d168f4
SHA512 ad1df891022b6c7314720681b500c171eebf06ea7889bed20fe23c005852343d8956269e21eb440a993736a26076125f20bcd7f02687c4353b58bda7cd512408
TLSH
T1CA110028D3E120371FB9837EB98082C67921C790814A0C7DB6A96F6F541D44613C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 940B
SHA256 1b6591e1d495e47f4916e81b00216aaedc228c10655ea66d80a1dd6f4471d6ed
MD5 b996b2b440a81de04a6d7332f490d93f
SHA1 47d1b66faef10636c45b4cc7c1cb0c485f087286
SHA512 87dd93fd728823a66a24642713a0c3f368500f995829c988436bb3da64a76b601eef77aa93a0f5bc5b8f8b86074315ca29432c258cca525c48f3e5fc194b51bc
TLSH
T1C1119C69D2E521371AB9837EB98082867925C790814A0C7DB6A9AF6F641D44612C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml
Size 940B
SHA256 2c92f36b692be1c526f123fbc576081b516219d37faf3cb2afeb31686dbcd4e2
MD5 c68ab794239f42af290b366106d2f331
SHA1 c8133d95885e3fab7e388adb5c943123448f1705
SHA512 9e81323ce9b0a08eca16410e66b69796574251fc1a13ae1377f745f0bd884ffc406de8e3deca9ca001989a99227b600951da3416db1d947d7f6785d61c467c87
TLSH
T15E11C06DD3E521371EB9837DB98082C67D25C790814A0C7DB6A9AF6F641D44513C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.xml.last-good

Path C:\Users\Admin\AppData\Local\KiraMultiplayer\settings.xml.last-good
Size 944B
SHA256 666132bcccf42c774ca9305781cda35587cb40eab4325335420dc71c5316a834
MD5 598852bd76630cad87cf4497ac64050e
SHA1 e9a69dc4dc46da36a77c18f8b16a60d4184304ff
SHA512 b11a84c74f7b56449394fe7c75fbd851ced696cfdcf08247f1497747c781a9f1a25e60a5ae1a6a125f76edf772714d0e51ca00c8b8926a7ddc05e592372e19f8
TLSH
T1D3119C69D3E521372EB9837EB99082C67912C790814A0C7DB6AD6F6F541E44612C3F2B
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 1c02e2feba3b2af3c045d1ed01f8a67e0923f7e357b32c434e567eef6aac4138
MD5 f05b0294ae4949feed0706bc80fa6418
SHA1 346bb7d2d99251c193652ad4ae7ef2964565b98d
SHA512 348366e162f3a037e74d0e9ff422ba7ca3e14c2b170f50bab2a4b88b29a572028e56965c332bc63cbe89de1a3467c215893ecf3cac514d786ec7ea30c08bcc05
SSDEEP 12:bHiUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:blRqxosfxWMk8xVZ4YWI30otWn
TLSH
T139257D85B34494FFC8C35A7189BD17903774F6DE5F42835B6A377A0E2E671D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4b35a6422c1c682176591bd42ebef96b0cb78607f98b3c5ee2c0e2d44e526da
MD5 63b4ddb137c55bd42461aacc1eb4cf83
SHA1 e41f99c448526208c80f1acecf1939a8e3f06728
SHA512 88b7f5970c19ff8d8362281bde3b29f3c7b018ff88c03d8ce082f66572704c79543ea528e6962172f18f1cdde2d1aaad0aca218b732ba8a673b844844d3ae585
TLSH
T125D080B23D4DB010D75B51F1F903D741121A857528536B33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2e4c78c9d4b6915833ca44ba5f9b735c9d9e0bf49d6aa045c47aaaa63f1f9359
MD5 f7389aaad82eb86ca1896ff3c7af7a86
SHA1 a7833bad037b8c94d375310ccb5bf39c3f9df83c
SHA512 cdfd274480229d612566789a9d9cdf47643a9543e303957436e5121c790936878b1b7eb452100170489121bede724239183c48208033a8c70d6070e93b3f1226
TLSH
T1E5D080B23D4DB010D75B51F1F903D741121A85752853AB33E694C54C5DB5CD813C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

509f72c1-8e5c-4291-82cd-c8f62136184b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\509f72c1-8e5c-4291-82cd-c8f62136184b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f0aa06760a36d937019959c1a4cc0f5df58e9c0fafc780f656c991e667d2ca10
MD5 e1cf79458d26cc0382c965483eb90622
SHA1 e03684109ff0d171fbbeb5a6576c1c486668097a
SHA512 55e132934c6cf559f2e31d4fe9215a1d1b1c813feb757ced7b1899641b06f25156d22748bcec46b58136c13df83704764da448130fe831bc337e454a377455af
TLSH
T1747109250F970C80F32EF531B8F4A22D3A718C2958573E5350EC7AB46632F624762CD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 af2b911aa262baf95dd72d03fab4ad63dec0286419bcccd14c5f1eb807d7fe36
MD5 349f9f49ac1826065d0debc5422cd4fe
SHA1 70c18834e351cba14a92997c995420032ab0a75d
SHA512 e1de2eaa07ef69f50b0d9c8a963a4e4289667f66713a5263bb6fba0153ba20f4a87ad68fa150e29d9b1438fc336dd33464c8cc6068925c016f3872bf80effe7e
TLSH
T13BE020D758CEC25D755474C751246F48C3D83442EAE57D471704DCC07602005F34754B
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 798B
SHA256 a2f4765271e0a5f8bec5e07531a57e188e857beba530a95151277a5ef7ae0e51
MD5 c6bda62773da4630dda4c9a8d59c7eaf
SHA1 3a052395933147b638f3fc0065bb3091dbe04870
SHA512 a7c65d02572b4c418043e605978386e87ed62546b4ee5189ad32e2687932945e5b28c4c3346cc4f0190c60a5e2064ee36a0d2727f15fbf81611556abc2465567
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 ffaf378c18138bec17533bfbdb7636c7ce17aaab8d9a73924352fb8c2582ac22
MD5 5b595d603589c0d3527c6f4efba6bf85
SHA1 28109eed90a49c086126cf030cc94e61e217cac9
SHA512 9d9e10fe840b3319a8f219ac4029a6a0947830564380d110090fa69d5f1b282219d1386cffe5678bbe20ddaecec80a864051520642a3f955d85836fddb04a362
TLSH
T1DFE0268404ECC22AE594B8D3836CF349D6D8B81BB3C83D4B270AB8607142241A38B685
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 c45d55f2ca0cd19d72895474d3f0a2736a20202e533d0707748dd1dfbd169ee4
MD5 b4f06bee7ed3bb28c5e829e2194c3d83
SHA1 5c3a08e4268f15f6aa0bbd30f810f8ffb1c41f99
SHA512 b7ebe7f60e08eb209060244f84227bb5873936965965f53af591f83520a9b8abe5e3a9a318b65c9aa3be04ca97dea9de602f328e87972670ef26c2c26c1df4f2
TLSH
T146E0DFE544DDC22A7244A48B83387748E7A1340BE6C83A862F08B981B002084A3C66C6
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ff7b7667c67b3bcc0a1ab1bdec7c70c491af47dcc580a9a8022fa4a0c231b63f
MD5 cd63b27bd6e777cbb01989d322704fb0
SHA1 1736990f9ccc1094c179967a94a43dddd095fca5
SHA512 bd1a8a3e0ec14d60d5424cf818131844f293bc0028242d82060ebba9af24bf0e6e307253e81672be128991e1a17cab205af9912ce7b328a61db9f6cdc4c13dc7
SSDEEP 96:zjmiEDWGElscLfZb9q5TNHdHW+i04BW6hfu/9EOx+WVoMfm+uecpYQj1eK+glE6I:ziuPs+fG3rpp/W6+WNGY05nxhgF
TLSH
T191F196576E24693B4CCBE11DBA26BB53E2F5502276C51E4CEAFCC61C09DA6CD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 804e7ce18f222f6e2d605aa70169b4de17d02a8c3034d19b0ed3a22ac19871e7
MD5 6195deae9dcf643d2974716341f11e6f
SHA1 2013888087830c77d4b080259ad6087cc444a78b
SHA512 33f478742c42ae9d52ffb5a6e4fce192ac8dc3ce8f1b5c22c55cc46c53ea99705638bbb16b06be9fcb10b8febd8b8424b34a645579865df7d8700e066e22e9f0
SSDEEP 96:zjmiEDWGElscLfZbDq5TNHdHW+i04BW6hfu/9EOx+WVoMfm+uecpYQj1eK+glE61:ziuPs+fk3rpp/W6+WNGY05WxhgF
TLSH
T1C3F1A7576E24693B4CCBE11DBA26BB53E2F5502276C51A4CEAFCC61C05DB6CD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 a13ea5831bd086101aa7e02710a23331fc784adbb70723afd3071a4665d2bb71
MD5 508c6f3140820e2ae3a9979a353a428c
SHA1 6f0d00a07b77d7087b07bd6a78b73536a628f966
SHA512 95e95abc8b401dd70975da7f2c815a3152d290e7a501421ae4d0de20718f91e49bbe7906a34aa139abe79801d7e5f59d7dd361ad8101584bebecade5784c9a2c
SSDEEP 768:yozdl8kZ2N1WRmsYQC08F1+UoAYDCx9Tuqh0VfUC9xbog/OV36/Ll/df0hNNroqA:yozdl8kZ2N1WRmsYQC0u1jaK6/Lpd8hg
TLSH
T133D2FB3F244CCB7E4FC00A9DEC666F976EA802C7A6584D5047FE994C02C77DA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 7c589784ed486083aaefaa2894da9d8a0d25a7d047ef75d556487f8b458a04c3
MD5 a74c48ffd61d4445a4abda697c06ce6c
SHA1 60855708354050715985121916405ad3ffc2ca9b
SHA512 dc0844429aa4f8ab14ce06caa1d4737ad3853b3c52bed8385b6cf3772c6a78aad2b3a920402ac8ed2a5cb94c7a69da903ab47e372b22dd58d217bec2bef90751
TLSH
T1F3E026A116DED27DB1D9E0C74234B34DE2E9B41FE2C83D872F04DC407182504B297582
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 d3ec2acbbbe638f6c28eec3f1270d4695428c9663a64a7b5efe1e8f7181f2853
MD5 4682f4c8ad1c12bc01ac2d7bdffb32f6
SHA1 346b4cc8903923cd6e98ace4e928170d876980d2
SHA512 a39a371f025fe4e5b2c92b3cd3dc317f6ea1bfa4873696009dd688ad5287f113fff7179e6be84a021ef43409cb7516d6ff5a6ec303b455ea1b3df50032bb43be
TLSH
T179E0D86016DDD73A72C560C74228F348D5A6B507E6C879563B18B4447606144B347541
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 ea7c8f0244d5b979cf91d2527d28d4adebf893f95ea5831564c03cb9fd659819
MD5 3c55f2936abb82c688f64212eb3a843d
SHA1 5c236d3c4417996e88aba70ce8c27dcf23efb87b
SHA512 66d7766429568999de5ec8f3dceeef818a03b96d18594db4ab3e7964c6bd479e3796c2c1ff9e33cc19eb247a185839438d495e867dfa2bafd538d0d0222aeffa
TLSH
T101E086B096DDD739A284A0D78375F74ED7F57817A7C83ACB570C5890B101144B3EB984
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5ff067f93afa7bf805ce5642ed038494aa777c15b25e11b9d52c580fb3746e71
MD5 5417f712d426d0fca94089da9c29427d
SHA1 28b377c3214262fbdbdcb07af688c8cd89d46291
SHA512 2a5f010ffdd4af11392f8bda0c4ed4c46164c71ed7877d1498fe8a726c95601dce543101d499a6c7fa14120cf99a592fde89cd0800898eefd4cd012064528ad6
SSDEEP 96:KZ4REoimSAmerTAgAKIVAqA0fx6K6YSiikKracwYKJ:06Zfo
TLSH
T104912206717A22423D3E391CC396A7174A91B1A37058B5BB7FA814B64F67E124CFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 af381744cfb577c3b5e446a550afa8ddc0e4377b8811b6b82a04e0bbf2677e50
MD5 672938ddc4590b29ac3065a1ffbc81a9
SHA1 94ab81b6d4370d20335cce774faffe536838d041
SHA512 cf25f4b1b1449e0d5c58b93e2c703171f4510a105a59fd493452b1a6a02dc922f6fdfcdc5b1d18f56be03a49734432ee684db51bbd7c19e466e007be5d273116
TLSH
T182E026A2A8CCC26FB058A0C70224A388E387B80BFAC83E8F1F00C894B045100B3CB582
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e9fa87a78d8d177b2121fd5055d562aebf6762ac7116f8696b9b4f09b86c680d
MD5 31b367fc1400c488a40aa42d5aa3be94
SHA1 036389955980c243e1cb4f6adb3203f386a69120
SHA512 2e96f8d651ce982fc86dadf5ae32320b8ca896ca4479c83f6141b4b0972c89556a5513cb3c833b039ed6f1006ebb4ac16c91c125da3f071b40f7ea6f112b5037
TLSH
T17C212852F330C159D10A8A7A643EA72A5338D806DFFCED0F54B564297EB6F140E4B2E9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 7f37310eeddfb2cd1d96ddb3916e37a71c08e2a43f9a9a22a5b63dbd7831f97e
MD5 ab62ea1d42c4cbb12443259baa40cbef
SHA1 319430e50c8aefa84148b1faadad975460a8032f
SHA512 58e2c19778453908b231fc01e3e69a7608ce69f27da1c66baa86ecc6076ec58be8a307b031ae6c3f603ec7f498ab8ea1d710f33733b0bef4ce96000e6d9e08f4
TLSH
T1D8E026A1A8CCC2AFA050A0C30264F388E397B81BFAC83E8F1F00CCA4B145141B3CF582
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 5ef056a24300df7d80d4de94080b19fbff38b8cbf0fdc6b547afc2837271cefc
MD5 d677b9b2c118573621ae39dd7ce34da2
SHA1 c3bcd3d06d2710dae032813789a101e8d5979136
SHA512 06a2afbdf41c9f42825d39377dd2633d503591a5321d9a715fbb3873aef59e2cd2a2920b8661ccf9e4e90f2f2ecdfff493cadb9b2aba0d2a922bf3bad2892c0a
SSDEEP 192:zy8No6fNE2QmiUymS7NK/GPTxkdfUYCZ/V3ABqBU9:zy8No61ESvaNK/NdfE/OUU9
TLSH
T131121A36F8A8AC3B8CA2A565F04736136E755167EB896F94C5EC2B0C01DF6986307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b55ed4eeec72f8adacc873d5254dffc9427f90edf2997f4e343d98dcc906f258
MD5 588003de8f900e3d1dd5b1628568d132
SHA1 52fd364996a97c84f53dac99cb4d9858a546445a
SHA512 56641ed7ab95b0520d420d61ce3216ee26373a5fa9c74a6b3516d75fdfbc40a0869593b59d7f848e11b91c6c3a13b0e3462a7b61369204f24d5c31ebe4079c89
SSDEEP 192:7GNp6fNNQmiUyKzHwPL/GPTxkdZV7qUkU6:7GNp61LNzQPL/NdZURU6
TLSH
T14E021A35BCB8687B8DE6AE59F48777175FA4216BEA941F44C6E81B0C00D768C2303C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 482590bb2071addb93f33e5396dc5c0b5d12282e8aefc810809de1fa351c34dd
MD5 ccf2f219ec1f89c9e1704c91f23236b7
SHA1 4531139f20740f52f307aae0807f64fe846fd06c
SHA512 a850e247fe94a57bae5e6014fdde122b50c72eb70caba51f31f4e568117bbfdfbf0bc79835e9d1b4f55ae90a8492d874fcd67dc6696ad9cc389c59867f5bebe1
SSDEEP 192:KGNn6fNaQmiUyJSwNL/GPTxkdfUYCZ/V3ZgqBU6:KGNn61WYRNL/NdfE/LrU6
TLSH
T13D121A36F8A8A83B4DE2A465F08336136E755167EB896F94C6EC3B0C01DE5986307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 8948fea2cf34a89f1b08d1d5c5305bfa11296473753e3f9870a069267248eb8b
MD5 9151e59c0d5ae1d5ff68f641e3687a77
SHA1 1519c4210bd9379c4970542e5210b74f9956462b
SHA512 594b7b9d4f9d80a79761a16c13070281a87af621dff73543016e6fdc2153e8a9e59e8edec54549108858ae74231f61e9b72ab4e0cd9c1819522432c72aaea6b9
SSDEEP 192:zy8NC6fNE2QmiUyRi7NK/GPTxkdfUYCZ/VGRKTqKU9:zy8NC61ESoKNK/NdfE/CKdU9
TLSH
T1E6122A36E8A8AC3F4CA3A565F04736136E755167EB892F94D6EC2B0C01DF598630BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 7448516eff38967eaf3e29ad32ddceeaacd300da5d12f971bc7c06a510bd16a7
MD5 96ef6394377bc46d5a1e009346c6e195
SHA1 99a412f02cbb7c4f8919d4e83082f7fec9081da5
SHA512 5839a8f2fe31e7e6bfbf12d8c294f6d0868b4785ff2f33248e0d05850ae30a970aa65dd02be6d799627a6aadbce66f746acd1de7f51d78945d9d766e49ec1101
SSDEEP 192:zy8No6fNE2QmiUyRS7NK/GPTxkdfUYCZ/V3ABqBU9:zy8No61ESoaNK/NdfE/OUU9
TLSH
T161121A36F8A8AC3B8CA2A565F04736136E755167EB896F94C6EC2B0C01DF5986307C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 5cd2c4d9f13524923046198c92213691539407e04fa520cdae9eade1bad3d91d
MD5 e9e365607374115b92e4abe4b9628101
SHA1 d5054ea9b22317dca83801eb3586017bfcc0e2a8
SHA512 a84d65ed53e43883e5ecb7848fbd48f5305a63e6975e6af480cf85532879720061106be54f2a5888ebc3569f7123081a0e6eb48ccb8d7dba3e1da1c8a3c50401
TLSH
T151A012078473800AE4144051C49C024114A4804A0219D0015060932314A40CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3168-4-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-5-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-9-0x000000001F8A0000-0x000000001F8DC000-memory.dmp

Download

memory/3168-10-0x0000000021280000-0x00000000212D0000-memory.dmp

Download

memory/3168-13-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-14-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-691-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-8-0x000000001E230000-0x000000001E242000-memory.dmp

Download

memory/3168-2-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-0-0x0000000000900000-0x00000000009FE000-memory.dmp

Download

memory/3168-1-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-23-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-80-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-89-0x000000001C530000-0x000000001C540000-memory.dmp

Download

memory/3168-1353-0x000000001C530000-0x000000001C540000-memory.dmp

Download