711d8d338e2ab5826ee33ad3c6825ed35b7c8ae571968d06e4709091e1ab6ef1

Analysis

max time kernel
149s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-31_0564e675bf8479fc05b3fe76e232d065_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Size 15.8MB
Sample260801-al4chatfmc
SHA256 711d8d338e2ab5826ee33ad3c6825ed35b7c8ae571968d06e4709091e1ab6ef1
MD5 0564e675bf8479fc05b3fe76e232d065
SHA1 fa48fa4e0f87c172d52ebac5f32135448585397d
SHA512 f1539f51cb15a9ae4239d2c5e90ac6f4d48fca89f2dfd5772d48245f27ca75faaae40541eed08032899988958b770977b0f057f562a798cd9c67574155e23dec
SSDEEP 393216:KcuTUDCPLRBfx78crLhdzxb26z7GUhgcm:KcuADGLXfx78gLXxbj7zh
TLSH
T1A4F6C043ECA545A8C0AA9335C9A39253BA757C494B3163D72B50F7382FB7BD0BA79700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_728374117\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_728374117\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_341767113\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_91121995\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_728374117\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_91121995\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_435026839\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_435026839\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4528_728374117\llm_user_input_extractor_config.json	msedge.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3176	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300172397525842"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{0FC32133-F75F-4F66-9BA5-95F66FE2A973}	msedge.exe

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
4872	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4528	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4744 wrote to memory of 4872	4744	2026-07-31_0564e675bf8479fc05b3fe76e232d065_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe	89
PID 4744 wrote to memory of 4528	4744	2026-07-31_0564e675bf8479fc05b3fe76e232d065_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe	91
PID 4528 wrote to memory of 1932	4528	msedge.exe	92
PID 4528 wrote to memory of 6004	4528	msedge.exe	93
PID 4528 wrote to memory of 3176	4528	msedge.exe	94
PID 4528 wrote to memory of 6004	4528	msedge.exe	93
PID 4528 wrote to memory of 6004	4528	msedge.exe	93
PID 4528 wrote to memory of 1872	4528	msedge.exe	95
PID 4528 wrote to memory of 1872	4528	msedge.exe	95
PID 4528 wrote to memory of 2116	4528	msedge.exe	96
PID 4528 wrote to memory of 2116	4528	msedge.exe	96
PID 4528 wrote to memory of 2116	4528	msedge.exe	96
PID 4528 wrote to memory of 2708	4528	msedge.exe	97
PID 4528 wrote to memory of 2708	4528	msedge.exe	97
PID 4528 wrote to memory of 2708	4528	msedge.exe	97
PID 4528 wrote to memory of 3796	4528	msedge.exe	98
PID 4528 wrote to memory of 3796	4528	msedge.exe	98
PID 4528 wrote to memory of 3796	4528	msedge.exe	98
PID 4528 wrote to memory of 4488	4528	msedge.exe	99
PID 4528 wrote to memory of 1336	4528	msedge.exe	104
PID 4528 wrote to memory of 4488	4528	msedge.exe	99
PID 4528 wrote to memory of 4488	4528	msedge.exe	99
PID 4528 wrote to memory of 4304	4528	msedge.exe	105
PID 4528 wrote to memory of 1336	4528	msedge.exe	104
PID 4528 wrote to memory of 1336	4528	msedge.exe	104
PID 4528 wrote to memory of 4304	4528	msedge.exe	105
PID 4528 wrote to memory of 4304	4528	msedge.exe	105
PID 4528 wrote to memory of 1704	4528	msedge.exe	107
PID 4528 wrote to memory of 3428	4528	msedge.exe	102
PID 4528 wrote to memory of 2644	4528	msedge.exe	103
PID 4528 wrote to memory of 3500	4528	msedge.exe	100
PID 4528 wrote to memory of 808	4528	msedge.exe	106
PID 4528 wrote to memory of 3712	4528	msedge.exe	101
PID 4528 wrote to memory of 1704	4528	msedge.exe	107
PID 4528 wrote to memory of 1704	4528	msedge.exe	107
PID 4528 wrote to memory of 3428	4528	msedge.exe	102
PID 4528 wrote to memory of 3428	4528	msedge.exe	102
PID 4528 wrote to memory of 2644	4528	msedge.exe	103
PID 4528 wrote to memory of 2644	4528	msedge.exe	103
PID 4528 wrote to memory of 3500	4528	msedge.exe	100
PID 4528 wrote to memory of 3500	4528	msedge.exe	100
PID 4528 wrote to memory of 808	4528	msedge.exe	106
PID 4528 wrote to memory of 808	4528	msedge.exe	106
PID 4528 wrote to memory of 3712	4528	msedge.exe	101
PID 4528 wrote to memory of 3712	4528	msedge.exe	101
PID 4528 wrote to memory of 2420	4528	msedge.exe	108
PID 4528 wrote to memory of 2420	4528	msedge.exe	108
PID 4528 wrote to memory of 4040	4528	msedge.exe	109
PID 4528 wrote to memory of 4040	4528	msedge.exe	109
PID 4528 wrote to memory of 2852	4528	msedge.exe	111
PID 4528 wrote to memory of 2524	4528	msedge.exe	113
PID 4528 wrote to memory of 3076	4528	msedge.exe	114
PID 4528 wrote to memory of 2404	4528	msedge.exe	115
PID 4528 wrote to memory of 1648	4528	msedge.exe	116
PID 4528 wrote to memory of 1648	4528	msedge.exe	116
PID 4528 wrote to memory of 4356	4528	msedge.exe	120
PID 4528 wrote to memory of 4356	4528	msedge.exe	120
PID 4528 wrote to memory of 1132	4528	msedge.exe	121
PID 4528 wrote to memory of 1132	4528	msedge.exe	121
PID 4528 wrote to memory of 2824	4528	msedge.exe	122
PID 4528 wrote to memory of 2824	4528	msedge.exe	122
PID 4528 wrote to memory of 3300	4528	msedge.exe	123
PID 4528 wrote to memory of 5828	4528	msedge.exe	124
PID 4528 wrote to memory of 5828	4528	msedge.exe	124

C:\Users\Admin\AppData\Local\Temp\2026-07-31_0564e675bf8479fc05b3fe76e232d065_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_0564e675bf8479fc05b3fe76e232d065_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4744
- C:\Windows\system32\reg.exe
  reg.exe query HKLM\SOFTWARE\Microsoft\Cryptography /v MachineGuid
  2⤵
  - Modifies registry key
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --app=http://127.0.0.1:49846/?desktop_session=PCS-NATIVE-4744-1785543634686600100 --no-first-run --no-default-browser-check --disable-sync --disable-translate --disable-extensions --disable-background-mode --disable-session-crashed-bubble --hide-crash-restore-bubble --user-data-dir=C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000 --window-position=-32000,-32000 --window-size=1400,880 --high-dpi-support=1 --force-device-scale-factor=1
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x2c4,0x7ff8d062c188,0x7ff8d062c194,0x7ff8d062c1a0
    3⤵
    PID:1932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,5067231536874754998,4240333735808576893,262144 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,6256088543465780091,2558954938777739912,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2712,i,29234098696747529,1472940004400719003,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13
    3⤵
    PID:1872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,17307917657420723043,9387003008555064651,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:2116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,4126075865306224240,11445107624634152212,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
    3⤵
    PID:2708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,17092901527305951632,10943144305394428270,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
    3⤵
    PID:3796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4444,i,11174270435299132237,10605265116265812589,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:9
    3⤵
    PID:4488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4448,i,2360744839914795848,862918066875959513,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
    3⤵
    PID:3500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,17441832550733593264,5627905103966744777,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:9
    3⤵
    PID:3712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4344,i,17606311029133949357,4198789380863276817,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=1568 /prefetch:1
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4412,i,1982343496954530853,13103399511259690994,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
    3⤵
    PID:2644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4368,i,2981885366747088459,15443682946694692875,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:9
    3⤵
    PID:1336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4468,i,14677522788211297124,12085499503003049916,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:9
    3⤵
    PID:4304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4484,i,1263333626770312945,8746268124171201320,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
    3⤵
    PID:808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --force-device-scale-factor=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4488,i,8324023012258877959,8936053533924177940,2097152 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:9
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,7627120353220867351,4526808061540754602,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,14029870452255623454,3361316613166149052,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
    3⤵
    PID:4040
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,9251318939234387963,7535389940898037254,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
    3⤵
    PID:3580
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,9251318939234387963,7535389940898037254,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
    3⤵
    PID:2852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,11862736170416478783,4255792453550522097,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
    3⤵
    PID:2524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,6434517518551606250,13600184720356149673,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
    3⤵
    PID:3076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,8996051490744779109,5147962189561575436,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
    3⤵
    PID:2404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,13373648666034290087,6379697570726109999,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
    3⤵
    PID:1648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,10592809545191855224,28206301813294122,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:14
    3⤵
    PID:4356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,2513727984646853987,18393651141434064011,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
    3⤵
    PID:1132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=828,i,5410257212599645946,976959804063236908,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:14
    3⤵
    PID:2824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5348,i,18018496640072821432,8325986853005879817,262144 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7124,i,7600514287821767595,12704632605665883249,524288 --field-trial-handle=2304,i,1836992435987109228,2272757096348648830,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:14
    3⤵
    PID:5828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Crashpad\settings.dat
Size 280B
SHA256 8b5b7607bb6f83a3e401fb966fde35c411a015101f6aa1c414f1e572b8d3a795
MD5 95bb1b2aad06b3ee0a56df612f8255b8
SHA1 e6d67f2c909b854a2ce460424ae013add027a594
SHA512 e2e8d8979d0eccdd97e5d21aba0fdc892269fd59527642c4f98519099c958e23f4152ce0cddc9e4e946362169c43b5203218654f958ed2b0d995f8ff725aead3
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Crashpad\settings.dat
Size 280B
SHA256 ddc9fde374570fcfd6c804b1bdf7e97be06bbd43ffe5c34bc48eb74f2c528abd
MD5 710a9e78b849d764b96c934d334041fa
SHA1 2de8ef2c088beee122854f684fc8be5bd3c84b0a
SHA512 7700d2ea7413554f5c81f6bd3efc21ac830bcd8c31be8df92c9763ff08c0f1a0df931f0be1cd838966782e557b22265470f9bcf81d201bfc54d01a7ae8e681a5
TLSH
T11AD022B23B232820C230A03B80228320C0A3CA030CCB28000A03C2080FC32000B2F2E3
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 a0f6e2b94420c0c09f193c4bfb95d8b86e5cd1535ad031ec761fc43a5e93edee
MD5 e9b7e9682662c1d3c55d325701a2eb23
SHA1 99da24a280e672b2c2d65074da0ed9cf56df8e33
SHA512 081251f28ec088d7a4a29b0886472f5df90abe7e843b0847d8829c0900ce22c3ffbe02117ae953238924ea81b86f7387b99cb611e3db42218e9da579282cf063
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 eb09ef28d5179b0df415752c1ffc75e544c03a0393da06f4194982c6fa2fc030
MD5 5422e4e090c29920f3136198d75e4da6
SHA1 753f3ffce1d2375246875e0e41c1f84ec56e4c90
SHA512 7fca010c9290532634b8759b65a6f332222c2dcc2d7f4aeae42d5929ed810144d987b65239310f81cdf418ee45ec5106471abee734bdebfbc2a9157415d5742b
TLSH
T144F0C26072C6AC94CF31177C1C80AC9D3E2F9976914767EFE6CAE064481F2F75640895
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

5297f6cf-c955-4578-a270-f269bb29970a.tmp

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Network\5297f6cf-c955-4578-a270-f269bb29970a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Network\Network Persistent State
Size 1KB
SHA256 58a7e3bdb571bb8c541fec571ef4e9f85887118036402a039fddfb72108cd41f
MD5 896fff4b355d53ebd0314cd07dccc8d1
SHA1 de36df8d6610035b7538f7eafa35c8c910929bb7
SHA512 8e986ffc421f8915005eac97ae01d3bdfdd305e590ed025071737f7db6fa33bf0f296801006cf4cdebbd2136f51d3d39cae574745867da39a87ab6fd73f70c05
TLSH
T1C5219BF3C3E585AE8E1156F09A14AE2BDE2D0602432C7D5985D4EF6793F34B5E002A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Preferences
Size 9KB
SHA256 09c3fa9e23768c3c1d666890fb637e610bc7d51dfe82f857f3790ad890cb60e5
MD5 e41f38995420674f8b4447a4d31c7e17
SHA1 1c4d0a9ee66ce2eb33528b4bf25df502909bbac3
SHA512 88f0d4f3bf24c5f510515b832a69890c20416b8bf2b6ead5454a205fde861a05eff3617739f73511ae94212d35dd858a1f3857e3bff3aef2c32e65664dfe5790
SSDEEP 192:sxRq6RFK/fTsEoYFIQpwF/gb+WNjgX/dfk1a+9J:sxRTbK/fTsEoYDM/ck/WIW
TLSH
T1D912C7566D28A9774CCBE60AB625BF23E3F65062A0C50E58EBFCD51C04E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Preferences
Size 8KB
SHA256 99fddbbe68d153f30a24532fc443d01cbc7aaccfc0c731204e76eebcf32058c6
MD5 13a207ed24712bad712ae2fe74b3a3e1
SHA1 5ecba6bc4fe6b605506275bbe8795f6de14b4a6b
SHA512 2b8b00497f7cd957c825ada9575570d2a64f84c1c1fc9f1b2e01a439af87e93ddecb8a98ab0358839e87fde644bd172cc21ecc70dfad206d7f95612bfb5c14c4
SSDEEP 192:sxRq6RlK/fTsEYFIQpwF/gb+WNjgX/dfkWa+nJ:sxRTPK/fTsEYDM/ck/WJo
TLSH
T11702C6456E28A9774CCBE60DBA65BE13E3F65021A1D40E58EBFCD51C04E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Preferences
Size 9KB
SHA256 b9127590e7fee01b0e9b5fa6c8070d9f506f02f13adaacab5957b071cb3e4b23
MD5 c80861b6a6b990b489327c42db56c71a
SHA1 5203efee3279e2fbd4cdf510c84813360abcd8aa
SHA512 dc444ba6a89e1ae924e82bbc5731f64a5c695175876ac46112a160b72c866b684d13ec0c83b5c5bec2e4f10e24231410952bd5f65d5da5327744340c114e73d2
SSDEEP 192:sxRq6RFK/fTsEoYFIQpWF/gb+WNjgX/dfkLa+9J:sxRTbK/fTsEoYDa/ck/WeW
TLSH
T1E812D7466D28A9778CCBE60EB625BF23E3F6506290D50E58EBFCD51C04E67CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe598795.TMP

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Preferences~RFe598795.TMP
Size 8KB
SHA256 1536b041826f7bfceb8fc3a8aeef516b7d5b6b02fe2924fcb842fd14f0a0a87c
MD5 f0796bad30e5f15cb7d08e5c43d18a12
SHA1 768b6def82ac7d863d02992a2f06469abd177a95
SHA512 d64864758e716d2e4f663099957803ccc8b5bc8985cc3f33c9ca2912b72a230181308dd87f1584301bf3b610190bbc93690ceb3516038b1a047164c5cb741340
SSDEEP 192:sxRq6RlK/fTsaYFIQpwF/gb+WNjgX/dfkWa+nJ:sxRTPK/fTsaYDM/ck/WJo
TLSH
T14902D7456E28A9778CCBE20DBA65BE13E3F61021A1D50E58EBFCD51C04E67CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 e537a9455a2ffab1fe72397cb336f223414d3823e2f24c72c75d5504f380496c
MD5 b16b27afd9c529e4d2c41f8b07442ec6
SHA1 096cde4b8dabc79efe6f6cb24c10a4f075e89b1d
SHA512 93e6e5fdfd591ac80d08c9c590a656b4c0de3f58b1784cbfc8d03c71fd328d630bba23a682b98d1151f6dca0a5975f3efb957313014ebf2a981ec02b86f2a427
TLSH
T1FEA002A629D85841C94503BC79920A6D26584C51E107631B41E044E9F95B2F05229000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598e5b.TMP

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index~RFe598e5b.TMP
Size 48B
SHA256 5b05fe0a6528bd37984040b6f91785ff23b147adb26d8e1ff047ed8c6a04323d
MD5 d86808a760353558419eae16c7859e1a
SHA1 b495b6ecff1ba922a20ec5ded8e4777325cb9887
SHA512 e016bebd19821f7dfd6f8397e76c6ad3bfbecffb8d98c8c93cf72bc715b10bf7e20bfacf78b955c8fd5f39faa2019f78cd1ada2744803f72be0771044d3a7c8d
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

b4903802-5fbf-4ab7-8118-45512747a7cd.tmp

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Default\b4903802-5fbf-4ab7-8118-45512747a7cd.tmp
Size 24KB
SHA256 c972be34edcaf8fe1f15fd7c3c427770b8b86951ca773a59b5e8e14c972f1fbe
MD5 0c86e756ff8ff858ecd464d439038c0d
SHA1 25781be03c681f599804924ff6609d950ca9e0a3
SHA512 20c615f510673cc92ba61eb35b37dd8ca0d2ee150645c18450f26ae322da8a4ca36510829a8d2272da1f3c41035f8aa7c608c9c1d6c528d6f7e7205d77c05c2b
SSDEEP 768:fw95hMWD8UfYO8F1+UoAYDCx9Tuqh0VfUC9xbog/OVJ3gvNrorK:fw95hMWD8UfYOu1jagQvmu
TLSH
T17FB2EA2F600CCB7E9F841A9EEC567F9A6E6801CB56548D4047FED94C03C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a259a.TMP

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Edge Cloud Config\OperationConfig~RFe5a259a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 6KB
SHA256 a1ddf877deca40eb6d0ec43f951399778ef1a0c5b0dfc1ded1215e93f7c39a47
MD5 ba31e8a88d6f2c357552197c832649bf
SHA1 8baa399cb035194e6e21cdc4f01da8ebcbb2b1a6
SHA512 eeb841497c4100c7d3ca3692b8388b3a28ac601fbba7d6d71a5f0d68098b6c0ba3d9c6e77c8bb1226b057d581d870961716ffb0c6528e837bf648856ca45f036
SSDEEP 96:uuu5rgq8NkfnJQvmxfDOekDzm078Frh/cInURoDotoJ5/CDDBnKaCjH+vqw6jZTV:uucrL8NICyAHsooDUusdnKaCmaTjoqvf
TLSH
T117D1C6716834AD678AF68E45B54A3A13DFF42077D0A63F98DADC9A1C05DB3CD130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 7KB
SHA256 75482f962bf13f831f436a8fe7cf4b34a3607f01bb0727ea071b28aae58cd4b6
MD5 7d177431a09a8a645d9af307380dc67c
SHA1 0f390aefb91ca19e1c62e49963c5f5cf50a4f582
SHA512 02394d55f5e4f9f6bad8a241aa862bf5946afd8e1f3598fed4228c4b98ad554dddac73cdfcb6be6f2731a433c8d961f53262f0c0d82d294b38382875665aafdb
SSDEEP 192:uuirL8NICmVAHsooDUusdnKaCmaTjoqvSA8c:nG8NICm6KaxBAjec
TLSH
T118F1E776A870AD638AF68D06F54A3A139FB4606BD0A52EA8DDDDAB0D05C73CD1306C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 3KB
SHA256 4d1f7c2ba8f1843da8d07a3ef706597b5e06e4bc1954ac3c6e530151b69da111
MD5 f7d93a45ba2b8fae023d1a8abcfba610
SHA1 81f6a01b6c01bf16405295f28b5d9f98b20ba963
SHA512 2550cd00954e0491a554a35fcaeb1c3b116f6a74e1abaa0c443987ad7a75f4e0fd4e8d679ba620b6cd36a555bd17ee032a792b1cbceb019186944fe45d06c582
TLSH
T10381B5716824BCB7C7F24E56B58A7A238FB430A7D1723F94DDC9661804D768C1309837
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 4KB
SHA256 086816f480b31121ff1918f3c2175322c3738e8b882daac19a8e308d46d53da0
MD5 73bcc5df91b40ace9d113912aba51c38
SHA1 f82ec0ffbb6bac3989fad57d73ca72aee08d544b
SHA512 42be933fa33708c3e9d8db2a071f99a4f69b710cf3107a6995ec25dbb2478cee9741bcebb732a10a13bc6aad5215d3b3e3be1456303d560d38b401dc3061a3fc
SSDEEP 96:bqGNkfOQsFfDOer058Frh/cInURoDotov/JDRBOI+vqwjsyjo0eUn6uEmWq4a:+GN2WvooDUwRnK4yjoqvL
TLSH
T11FA1A4756834BC678BF29E46B58A3A139FE43137E0A63F98D9DC2A1C05D77C81305827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 25KB
SHA256 962e0a0626b483c34a124a6603146be8361959a9675e965c1cebb978fa480150
MD5 26c6e1d91ca840e16b47df3bc947eecc
SHA1 bfe0b10ff4799e78d3486432258b99e84ddcb14f
SHA512 97b5290821b129c29207933468bd60734590b5f58c823b3bc299edf61a228c5c2c95312904bf9fe8c43087f7e4d0eabada601c0d2df01d050c361ec2049bfdf0
SSDEEP 384:nNiFiZcIX8NJ8TUNTUlIVAKexIDfpSAj7TKwBODNZOCb:EFQXowg2ISAvewBKZOc
TLSH
T128C282F598E39637E9AE4B83A73D6D468EBCD153B0985994FB895D0CCC821BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State
Size 14KB
SHA256 3d684892a6999308737311424cc9bd87329aedd670ba7db3613e096c93988d86
MD5 25e3a8b99247ae996994027e9e219346
SHA1 c63174a68bcf2c3b99c3fa1d3d3eecbfbc764541
SHA512 65b84b5ed4f3294bde961599db4a689636187b082e66f57b20018ba4a61d08f0cf7b7808179a1bf2002be18bbfc663419c2dd20f2ab271f25a199c8fa4d3e272
SSDEEP 192:uuirm+xasuheOwQxMG8NICnAHsooDUusdnKaCmaTjoqvt/LKwBwngWTF8INZslbe:nzZcIh8NICAKaxBAj7TKwBODNZOCb
TLSH
T127626EB168346D739AFADD05F94966078FF8A477E0A53E98D9EDEB1D00937881306C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5939d3.TMP

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\Local State~RFe5939d3.TMP
Size 1KB
SHA256 bb04f5cafbd0d05540276b0e465ac4bb068c458187f04fa44da23c1da6aa611f
MD5 79ea10fa28f5ccaa997a7b1fff6d1d1a
SHA1 80c2ad7cd8f30db9f2d8eae3ae0cfa1b300d85bd
SHA512 c891a94e1415a5bc0fb8ebc8dd2f446265f409dafc844c3cbd0742433323284a557985fc312986541392fd1354d5be2935eddddfb2799e9550b09c8fc3bcb184
TLSH
T1D6319570B8257C73ECE14946E689BF774F70207291672F8C91DD960802E37CC421993B
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

774bfb57-3468-4646-8ca8-f6f1ffb917a7.tmp

Path C:\Users\Admin\AppData\Local\PantherChannelStudio\NativeSurfaceV840\session-4744-1785543634677868000\extensions_crx_cache\774bfb57-3468-4646-8ca8-f6f1ffb917a7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

6KTBKZLCIR15TJ9J9JE5.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6KTBKZLCIR15TJ9J9JE5.temp
Size 4KB
SHA256 359a994dc4d688cedc96c2963ae647310ae6565bbdae3c31fddaa7898200cb55
MD5 9b186eb5b3e60d97892bcd2357e279df
SHA1 72e17515b5f7fde5679eb78555b9dca0033bd569
SHA512 52a56bc2c00adfdc12cc62659a08f8a6b7f6517d21d8b43d0a5c960356f192918d59998919f1309114be7801a2f4de6043a6a3935e1888d25aa0ad9a84a94003
SSDEEP 48:M1gdO0n5XTiV4cJ9zCYtvCz0dLXuHfj8pE8gdO0n5XTiV4cJ9zBYtvCz3gdLXuHG:Me5DeJCYLu786D5DeJBYeIum
TLSH
T12F91CB119FE60D06F3F7AE7295B267127A37FD0A5A148A4E008546091C73A048ABAFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download