Analysis

  • user interaction
    yes
  • max time kernel
    100s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 15:36

General

  • Target
    ABDownloadManager_1.10.1_windows_x64.exe
  • Size 74.3MB
  • Sample260809-s19rya1ble
  • SHA256 2ac9412de264369d1d548c307e38644bd82e5f8cfc73a180ef4ba0916efaf03c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 8 IoCs
  • Loads dropped DLL 55 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 10 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Kills process with taskkill 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 47 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ABDownloadManager_1.10.1_windows_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\ABDownloadManager_1.10.1_windows_x64.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4272
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM "ABDownloadManagerNativeMessagingHost.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:4768
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM "ABDownloadManagerCli.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2944
    • C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM "ABDownloadManager.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:1840
    • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:2616
      • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
        C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Adds Run key to start application
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        PID:2948
  • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
    "C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:2272
    • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      PID:4932
  • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
    "C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe" --background
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:3784
    • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe --background
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      PID:1592
  • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
    "C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:5080
    • C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      PID:2596
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2032
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\InitializeDeny.htm
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:764
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument C:\Users\Admin\Downloads\InitializeDeny.htm
        2⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2372
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffa1414c188,0x7ffa1414c194,0x7ffa1414c1a0
          3⤵
            PID:900
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,11585229518287990579,1726208945668158108,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
            3⤵
            • System Time Discovery
            PID:4496
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,9312256508594779957,6105519663655275103,262144 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
            3⤵
              PID:4488
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,15741878991305414321,11733835310223887901,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
              3⤵
                PID:676
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15772512843022934614,11481044161362584484,2097152 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
                3⤵
                  PID:4436
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,936308307204415066,17657196029762007271,2097152 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
                  3⤵
                    PID:3980
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,7175500595401298672,16044431195772105934,2097152 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
                    3⤵
                      PID:3644
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,8198810868493710824,14608546332825932818,2097152 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
                      3⤵
                        PID:1712
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,219242925124574562,18060676605670267580,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
                        3⤵
                          PID:2388
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,1043123843062318942,3991554742748407446,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
                          3⤵
                            PID:3504
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,15250736373480080299,8220252423670935370,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
                            3⤵
                              PID:5016
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,13020027045623342768,11084579794575057431,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
                              3⤵
                                PID:2820
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,11374788425486128834,1319493425121053507,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
                                3⤵
                                  PID:5184
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,11374788425486128834,1319493425121053507,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
                                  3⤵
                                    PID:5228
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,5252353933244653854,17106471950954032490,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
                                    3⤵
                                      PID:5424
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,15716170253698014148,11015368137443436459,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
                                      3⤵
                                        PID:5548
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,947646440742056258,13304468528444906288,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
                                        3⤵
                                          PID:5676
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,12681995073359579502,4379481913279704629,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
                                          3⤵
                                            PID:5756
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,12030455263837954171,14359297151773666212,524288 --field-trial-handle=2264,i,4107067842241755600,15663253780893418147,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
                                            3⤵
                                              PID:4436
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                          1⤵
                                            PID:2624

                                          Network

                                                MITRE ATT&CK Enterprise v16

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                ABDownloadManager.exe

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\ABDownloadManager.exe
                                                • Size 541KB
                                                • SHA256 8d0aa9f2992224f0aaf630bc9e352a0aa02c34a3835e71eafa25ecf4fc36529d
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                ABDownloadManager.cfg

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\ABDownloadManager.cfg
                                                • Size 14KB
                                                • SHA256 932c1869690077095f83a11b8e28c0862e69c3832238a9354dd5ff0aef7a274a
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                ComposeNativeTray-jvm-8e9ab16fca2146a23f5d8b1fcefd12b5.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\ComposeNativeTray-jvm-8e9ab16fca2146a23f5d8b1fcefd12b5.jar
                                                • Size 405KB
                                                • SHA256 98e2a7926324edb19a7a0e4b15fc4d30c4c69fbb44013424bc0250aa55fc12fd
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                aboutlibraries-core-jvm-225ee93bf4d2373655a49ac991ca0a7.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\aboutlibraries-core-jvm-225ee93bf4d2373655a49ac991ca0a7.jar
                                                • Size 56KB
                                                • SHA256 326cd92f7e1449f8e5ff6c17e6b7d81f5329099efd44004562cc7a98ce0e7ab3
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                animation-core-desktop-1.11.1-3ec8687bba1c875f4630e7c99d49defc.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\animation-core-desktop-1.11.1-3ec8687bba1c875f4630e7c99d49defc.jar
                                                • Size 380KB
                                                • SHA256 1b3af8d20627b01101d827f72e26dbadccc8d212c0ffc0c02ff2a6fc967a6ca8
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                animation-desktop-1.11.1-3b1636eba8fac16d053e567d9b91df8.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\animation-desktop-1.11.1-3b1636eba8fac16d053e567d9b91df8.jar
                                                • Size 403KB
                                                • SHA256 bb41c6c550a471c68c51185c3bb0458482a4e803ee074bf215adc8832e2007e1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                annotation-jvm-1.9.1-1d6a04b3b9847638d0529df8ef76a.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\annotation-jvm-1.9.1-1d6a04b3b9847638d0529df8ef76a.jar
                                                • Size 59KB
                                                • SHA256 1e343917ebf27ba96fe4dc52b1cad7fd32b738fbc6355bb6cd5b3b305d7212d0
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar
                                                • Size 28KB
                                                • SHA256 7b0f19724082cbfcbc66e5abea2b9bc92cf08a1ea11e191933ed43801eb3cd05
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                app-desktop-c4c9b5141e5ef275db6cd5666204cc6.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\app-desktop-c4c9b5141e5ef275db6cd5666204cc6.jar
                                                • Size 2.4MB
                                                • SHA256 d2f8212080dc5b4c72a35001699ef12ba75ef21026ded9efc2b2f7e3bed7840e
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                app-ee31d4f6b14653f31e4cba7cceef16d0.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\app-ee31d4f6b14653f31e4cba7cceef16d0.jar
                                                • Size 2.6MB
                                                • SHA256 745ac9449c2a4e6fe6f874ff0d46f90cdc2a8ac76d2ed330f0d3346fd1e29452
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                app-utils-e1e3d6a6d6c01227ca955b5ec7fa49.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\app-utils-e1e3d6a6d6c01227ca955b5ec7fa49.jar
                                                • Size 190KB
                                                • SHA256 bda57c7da9b8f1d7f07d5a603d8a617b61e9c66ffb55fc0096a2daf3ac26dea3
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                arrow-annotations-jvm-2.2.3-857c7f7cfc297b186c96f34ce36f1f0.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\arrow-annotations-jvm-2.2.3-857c7f7cfc297b186c96f34ce36f1f0.jar
                                                • Size 3KB
                                                • SHA256 5db812b43458d694a2d676491bdcd6eca04a44f3ae6336db3c71fce67be8e1bc
                                                • MD5 SHA1 SHA512 TLSH

                                                arrow-atomic-jvm-2.2.3-fcdd2aa54ac9ac7a64d0e0f2abce762d.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\arrow-atomic-jvm-2.2.3-fcdd2aa54ac9ac7a64d0e0f2abce762d.jar
                                                • Size 14KB
                                                • SHA256 9605a129250898db4a8e1011fb6faab1f1ade1dea290dae467eae2e60289f755
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                arrow-core-jvm-2.2.3-51f4cb361b521378e540d1a07c2ea0e4.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\arrow-core-jvm-2.2.3-51f4cb361b521378e540d1a07c2ea0e4.jar
                                                • Size 729KB
                                                • SHA256 a2d334ad01cf22cc534ff254788d1877e4df1564fd2b1101736a6c0e8d9a7a47
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                arrow-exception-utils-jvm-2.2.3-83e0edc414289b8830c47d193229a81f.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\arrow-exception-utils-jvm-2.2.3-83e0edc414289b8830c47d193229a81f.jar
                                                • Size 3KB
                                                • SHA256 1a6604e1dbe1af48a743ed1923f4754b389933c9ef3ec8aad6b7543418196796
                                                • MD5 SHA1 SHA512 TLSH

                                                arrow-optics-jvm-2.2.3-bb9a6a1e7afe01f3e2c5772f0ba9ba.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\arrow-optics-jvm-2.2.3-bb9a6a1e7afe01f3e2c5772f0ba9ba.jar
                                                • Size 259KB
                                                • SHA256 d3a99ab61599c0e87147aec2525deb608bed4404a12392bf69afaacaf030a9b7
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                atomicfu-jvm-0.28.0-70921245a0aed3c3e3d17c34ca3dbd87.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\atomicfu-jvm-0.28.0-70921245a0aed3c3e3d17c34ca3dbd87.jar
                                                • Size 47KB
                                                • SHA256 39576ec46b83412ff7a2909d24cccbba90400e91f9aa67b250309bc0872ecf52
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                auto-service-annotations-1.1.1-418feb19f713c38641702c9b933436.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\auto-service-annotations-1.1.1-418feb19f713c38641702c9b933436.jar
                                                • Size 3KB
                                                • SHA256 16a76dd00a2650568447f5d6e3a9e2c809d9a42367d56b45215cfb89731f4d24
                                                • MD5 SHA1 SHA512 TLSH

                                                auto-start-desktop-81361cb42365afff1ad3b8f2afcec1aa.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\auto-start-desktop-81361cb42365afff1ad3b8f2afcec1aa.jar
                                                • Size 17KB
                                                • SHA256 9d86afc5c143ebb6964dae5f2653886593b56cfaaf2f3caf33d72c2f25011eb9
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                back-handler-jvm-2.5.0-49963c2576ada1f4bc836dc94ba321a.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\back-handler-jvm-2.5.0-49963c2576ada1f4bc836dc94ba321a.jar
                                                • Size 21KB
                                                • SHA256 14f14c52086d1c02296c5f07eae3122103226baa922f0cb2f358e0dbfe42d1f6
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                clikt-jvm-b4c4946c8994799df86c5fda3e70faff.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\clikt-jvm-b4c4946c8994799df86c5fda3e70faff.jar
                                                • Size 512KB
                                                • SHA256 7f78049fa8159bac05ce09ddef4313248d4cad0014a744214c1150d14e3661e7
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                clikt-mordant-jvm-c297324fbc2aea7872bcf26f2ff3129c.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\clikt-mordant-jvm-c297324fbc2aea7872bcf26f2ff3129c.jar
                                                • Size 47KB
                                                • SHA256 75c330967db15a5c591fba69fc3b18ffb68271d54f90f21c1c9c52e86faeb9d6
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                collection-jvm-1.5.0-4421442c114a4f8c8fe587cf2d668237.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\collection-jvm-1.5.0-4421442c114a4f8c8fe587cf2d668237.jar
                                                • Size 857KB
                                                • SHA256 70b35924e4babcdffa37d0e575ee039c56a2d97123342624c48b603233704341
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                colormath-jvm-6a279b2713acb5c7ffb5e683bf2841.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\colormath-jvm-6a279b2713acb5c7ffb5e683bf2841.jar
                                                • Size 344KB
                                                • SHA256 59f741adfe62053066782d8b1a45afd06685a4bc64b33277e54876b993ed885c
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                commons-configuration2-2.15.1-9482ce10567d28f4d259397218bd2bb.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\commons-configuration2-2.15.1-9482ce10567d28f4d259397218bd2bb.jar
                                                • Size 672KB
                                                • SHA256 61ba5eaab8a17087042fe3d6811573bb85ccbdd6bd9d21ad464e6e20559dd1e8
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                commons-io-2.22.0-f91d54bd47c42456b4a5ae62eed85565.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\commons-io-2.22.0-f91d54bd47c42456b4a5ae62eed85565.jar
                                                • Size 594KB
                                                • SHA256 2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                commons-lang3-3.20.0-4b29562ded527aa074e1d44f8646dac5.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\commons-lang3-3.20.0-4b29562ded527aa074e1d44f8646dac5.jar
                                                • Size 697KB
                                                • SHA256 69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                commons-logging-1.3.6-feccbe8971fed954aad6528fe3ef24.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\commons-logging-1.3.6-feccbe8971fed954aad6528fe3ef24.jar
                                                • Size 72KB
                                                • SHA256 f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                commons-text-1.15.0-756b7c5438d89ac311d811c1a6d19a.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\commons-text-1.15.0-756b7c5438d89ac311d811c1a6d19a.jar
                                                • Size 258KB
                                                • SHA256 58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                compose-utils-desktop-839bb0eaf356f015c992d9c815ac367b.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\compose-utils-desktop-839bb0eaf356f015c992d9c815ac367b.jar
                                                • Size 92KB
                                                • SHA256 d141fa75dbea4a6829e498aecffee03d923372442e26c3fd02dc87036bc10211
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                config-1.4.9-c62e4875399181f2a41573ee1fb0d00.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\config-1.4.9-c62e4875399181f2a41573ee1fb0d00.jar
                                                • Size 290KB
                                                • SHA256 47d13e3196c84f2a8ccd014ae563738c3da5b7406b38e03505ec0601a2f4fc37
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                config-8c9bf9b0b998c4c8d55f210f495bcb.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\config-8c9bf9b0b998c4c8d55f210f495bcb.jar
                                                • Size 56KB
                                                • SHA256 5688ed340d4d7d4480e16a313e33e21d40fed0472e32165338f0e9137a08ab95
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                contracts-desktop-64df2aba6e5f9612fef4d7917888c99.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\contracts-desktop-64df2aba6e5f9612fef4d7917888c99.jar
                                                • Size 8KB
                                                • SHA256 45bf3ada415100ae078ad50755f55c4123451ea3b1d1ef2c4e36bddc2a98a213
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                core-common-2.2.0-2212d240dfe1e8a7598ee117ccc316d.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\core-common-2.2.0-2212d240dfe1e8a7598ee117ccc316d.jar
                                                • Size 11KB
                                                • SHA256 65308a06b1c00ee186cb9e19321383f043b993813f1522c47f4a3e3303bdba41
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                core-desktop-9dc8119fe7ed8113de3036d565258595.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\core-desktop-9dc8119fe7ed8113de3036d565258595.jar
                                                • Size 751KB
                                                • SHA256 5ca3fd332233392b6b2b87b2c695573ad979247887f6e733a27dfeed0572f6c7
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                core-jvm-0.7.5-a9ce3af0d2bba1496360aa1d3adc24.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\core-jvm-0.7.5-a9ce3af0d2bba1496360aa1d3adc24.jar
                                                • Size 14KB
                                                • SHA256 f495b798c9246d6689d6b98898970af2efa07846012b651f810f94067df98a1b
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                datastore-core-jvm-1.2.1-68bd30a82462b130b953a7a0ade6b318.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\datastore-core-jvm-1.2.1-68bd30a82462b130b953a7a0ade6b318.jar
                                                • Size 166KB
                                                • SHA256 dd2d080fc16eb0bea1e02e5551d43496fb9e5177855c5b72c6aaf6e16ab1c5c1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                datastore-core-okio-jvm-1.2.1-38c87b659b5e43255f87474fab30457f.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\datastore-core-okio-jvm-1.2.1-38c87b659b5e43255f87474fab30457f.jar
                                                • Size 31KB
                                                • SHA256 7ade6239a67674834f5724428e772c4176229ed30be253ac7e52082a2907ee05
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                datastore-jvm-1.2.1-64873d5cfe3f83e57d1a8ba9fd633d48.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\datastore-jvm-1.2.1-64873d5cfe3f83e57d1a8ba9fd633d48.jar
                                                • Size 5KB
                                                • SHA256 1ce3073ce9cf1b21afdef04b3116ea002709ec2cfd0f57e0652ef90526345220
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                dbus-java-core-5.1.0-b66229671c554b122f095de5734826b.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\dbus-java-core-5.1.0-b66229671c554b122f095de5734826b.jar
                                                • Size 344KB
                                                • SHA256 cf01cb7d335af6ae25fcd58bd2f1ac9a8465acd529670668a3a3902fd8c1c9cf
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                dbus-java-transport-native-unixsocket-5.1.0-bb2d9654fc687fd138f17b540ce3f58.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\dbus-java-transport-native-unixsocket-5.1.0-bb2d9654fc687fd138f17b540ce3f58.jar
                                                • Size 7KB
                                                • SHA256 276cb9cf2075b62a4a0e001756b8c6f8ab4125f1554128b758b1b80b849ca2ee
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                decompose-jvm-3.5.0-cbfe8a638c49382da906d3ae0af17.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\decompose-jvm-3.5.0-cbfe8a638c49382da906d3ae0af17.jar
                                                • Size 426KB
                                                • SHA256 c5705755794b6620b33f49e38b5ca0b33d5b66ca58d697f1915b16e95225ebff
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                delight-rhino-sandbox-0.2.2-a256ed4facf2bd3f14e49ccc80b1.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\delight-rhino-sandbox-0.2.2-a256ed4facf2bd3f14e49ccc80b1.jar
                                                • Size 26KB
                                                • SHA256 3cd23f59013acaaacee96733a4e84cf82e902d20cf680db25ddad6f7c9791928
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                extensions-compose-jvm-3.5.0-31518fc6f97ca556c426d56b43c4f84.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\extensions-compose-jvm-3.5.0-31518fc6f97ca556c426d56b43c4f84.jar
                                                • Size 311KB
                                                • SHA256 61ceb4bcfc95a800c08fbbdf5001d44f2d8ea1441afbb478d9871d0c97ac76de
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                fastscroller-core-jvm-213bc8352c4ee596af794ce3a44e6ba.jar

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\app\fastscroller-core-jvm-213bc8352c4ee596af794ce3a44e6ba.jar
                                                • Size 66KB
                                                • SHA256 25e77bba88be49a95a84e39d20bfd1ef42bac61aeaa861457387c6c4a6d2830f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                VCRUNTIME140.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\VCRUNTIME140.dll
                                                • Size 121KB
                                                • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                java.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\java.dll
                                                • Size 107KB
                                                • SHA256 32fe0084d8ff33843edc0d4c8c2ec60cf1d5348c1ef762230fc23258da5b9083
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                jimage.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\jimage.dll
                                                • Size 23KB
                                                • SHA256 5af01ad8e9b7db8c89789f40c9c5ca67a35da91841d463bc8b97096e4574b825
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                jli.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\jli.dll
                                                • Size 72KB
                                                • SHA256 672bdbddc5211ba57a689c369b08a7e971c6000e18e0faee0d8b826e67b5ee0d
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                msvcp140.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\msvcp140.dll
                                                • Size 544KB
                                                • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                jvm.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\server\jvm.dll
                                                • Size 14.8MB
                                                • SHA256 2f6d8c8fbb68559e1a3d2e8e191086996d4bfdfc9370a9a5b840be86dd3e29c9
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                vcruntime140_1.dll

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\bin\vcruntime140_1.dll
                                                • Size 48KB
                                                • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                ADDITIONAL_LICENSE_INFO

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\legal\java.net.http\ADDITIONAL_LICENSE_INFO
                                                • Size 49B
                                                • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
                                                • MD5 SHA1 SHA512

                                                ASSEMBLY_EXCEPTION

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\legal\java.net.http\ASSEMBLY_EXCEPTION
                                                • Size 44B
                                                • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
                                                • MD5 SHA1 SHA512

                                                LICENSE

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\legal\java.net.http\LICENSE
                                                • Size 33B
                                                • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                • MD5 SHA1 SHA512

                                                README.JAVASE

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\legal\java.net.http\README.JAVASE
                                                • Size 39B
                                                • SHA256 a599d79ec20f64079704f1ed4588d5c725ff798824f7d22838a5fb7bd0b01ddb
                                                • MD5 SHA1 SHA512

                                                jvm.cfg

                                                • Path C:\Users\Admin\AppData\Local\ABDownloadManager\runtime\lib\jvm.cfg
                                                • Size 29B
                                                • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                                                • MD5 SHA1 SHA512

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 5f21c2484e331c61ddff52b46cbf8498513b5234757c8746e10ae54e51e27f41
                                                • MD5 SHA1 SHA512 TLSH

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
                                                • MD5 SHA1 SHA512 TLSH

                                                BookmarkMergedSurfaceOrdering

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                • Size 6B
                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                • MD5 SHA1 SHA512

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                • Size 3KB
                                                • SHA256 6bb55500475d48fdc49f633aa45fac63a4739dd413634aca57bc42321d4c9fbf
                                                • MD5 SHA1 SHA512 TLSH

                                                SiteList-Enterprise.json

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                • Size 2B
                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                • MD5 SHA1 SHA512

                                                Edge Profile.ico

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                • Size 70KB
                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                • Size 1KB
                                                • SHA256 66bd72851e360a2a885d26c7acd60767701e839d002eb9a0c088a93f9591027b
                                                • MD5 SHA1 SHA512 TLSH

                                                SCT Auditing Pending Reports

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                • Size 2B
                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                • MD5 SHA1 SHA512

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                • Size 11KB
                                                • SHA256 85c4671d3bf898b5e02294a3c7e0a3ab0e200daf847f16d5657d4704ca850b37
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Secure Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                • Size 32KB
                                                • SHA256 0a04d82db3f50b7d33272d14cd8ad4083adab806b7782e3ff48d09839a23b040
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                sync_diagnostic.log

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                • Size 4KB
                                                • SHA256 187175091a1ed91920f5124cb9feb3c5d289edf0bcaf993bd7f7d38210e3b66f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 24KB
                                                • SHA256 1e176a5672ce334e26d6f6e2c0b140364c6f5e03734df579104b574e009b5a40
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 8KB
                                                • SHA256 30bd24de01283617ac66391dc2dc07773010567c1112f65ef215d6dc5b3b19c3
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 8KB
                                                • SHA256 8c518e5992f88c5d17189f097f4b04b7e81b2f04a95ddbac86dc494662d96629
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                data_1

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                • Size 264KB
                                                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                • MD5 SHA1 SHA512 SSDEEP

                                                87440c73-3378-4632-bed6-867024e8cd40.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\87440c73-3378-4632-bed6-867024e8cd40.tmp
                                                • Size 13B
                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                • MD5 SHA1 SHA512

                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                • Size 2KB
                                                • SHA256 01bfbb4858ab98a746ef0fad9ae362cdfce605e770522f8a8fbe767ddb3aca43
                                                • MD5 SHA1 SHA512 TLSH

                                                2b8d0d5b-0e85-45c5-9b18-10ff58b8b8d2.tmp

                                                • Path C:\Users\Admin\AppData\Local\Temp\2b8d0d5b-0e85-45c5-9b18-10ff58b8b8d2.tmp
                                                • Size 10KB
                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                79d63a3d-a585-4612-a6d6-409f6b1a81fa.tmp

                                                • Path C:\Users\Admin\AppData\Local\Temp\79d63a3d-a585-4612-a6d6-409f6b1a81fa.tmp
                                                • Size 1B
                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                • MD5 SHA1 SHA512

                                                jna6835140478063978417.dll

                                                • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna6835140478063978417.dll
                                                • Size 267KB
                                                • SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                System.dll

                                                • Path C:\Users\Admin\AppData\Local\Temp\nsmA15E.tmp\System.dll
                                                • Size 12KB
                                                • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                modern-wizard.bmp

                                                • Path C:\Users\Admin\AppData\Local\Temp\nsmA15E.tmp\modern-wizard.bmp
                                                • Size 150KB
                                                • SHA256 07ba216513791a1174b56432480a3cb0152591e12fe32d61424f5b6f62adf7b5
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                nsDialogs.dll

                                                • Path C:\Users\Admin\AppData\Local\Temp\nsmA15E.tmp\nsDialogs.dll
                                                • Size 9KB
                                                • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                6e8d9b63-68bd-4396-ad86-59f22c9eb9ff.tmp

                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2372_1281068318\6e8d9b63-68bd-4396-ad86-59f22c9eb9ff.tmp
                                                • Size 153KB
                                                • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                content_new.js

                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2372_705696202\CRX_INSTALL\content_new.js
                                                • Size 10KB
                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                tray_icon_11271744265273701898.ico

                                                • Path C:\Users\Admin\AppData\Local\Temp\tray_icon_11271744265273701898.ico
                                                • Size 1KB
                                                • SHA256 c39e2ad9f72929912b3181f55e299145398d2f0a65755b18171d07d1f01d5495
                                                • MD5 SHA1 SHA512 TLSH

                                                WinTray.dll

                                                • Path C:\Users\Admin\AppData\Local\composetray\native\win32-x86-64\WinTray.dll
                                                • Size 22KB
                                                • SHA256 160734faa38e576c02d5d9320eb288576004ed3935e3c212923180beca60550c
                                                • MD5 SHA1 SHA512 SSDEEP TLSH