Overview

overview

8

Static

static

1

URLScan

urlscan

http://goggle.com

windows10-2004-x64

8

Analysis

  • geolocation tags

    asiadelhiinindia
  • user interaction
    yes
  • max time kernel
    504s
  • max time network
    505s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/08/2026, 16:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://goggle.com
  • Sample260815-vb61vsgg95
Score
8/10
adwaredefense_evasiondiscoveryransomwarespywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 10 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 9 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 6 IoCs
  • Modifies registry class 48 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 34 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://goggle.com
    1⤵
    • Checks SCSI registry key(s)
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1252
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa062ac188,0x7ffa062ac194,0x7ffa062ac1a0
      2⤵
        PID:3176
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,7934380249108801767,5599878424844837769,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3620
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,14870453249857819370,1790739958673884128,262144 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
        2⤵
          PID:3860
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,7305615171290028350,5247410184866778126,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:8
          2⤵
            PID:4028
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3360,i,12849118011313018168,6916928808599229267,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
            2⤵
              PID:2064
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3364,i,12533201934037477808,2642113201922279488,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
              2⤵
                PID:3052
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,5714023529682809831,14706910075530812827,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
                2⤵
                  PID:3452
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,10633410580682613833,11559123840310285554,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
                  2⤵
                    PID:2292
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4648,i,6451550788574774524,17113123157583371131,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:1
                    2⤵
                      PID:3748
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,5465194888502426809,18412615918965427163,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
                      2⤵
                        PID:2260
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,13433339180629998813,12704620215090586167,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
                        2⤵
                          PID:2620
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11063052798101789830,3624973633269230932,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
                          2⤵
                            PID:2484
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11063052798101789830,3624973633269230932,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
                            2⤵
                              PID:2052
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6212,i,6402983014817035526,726281748101889583,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
                              2⤵
                                PID:944
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,5683402082019387278,1408991015786057862,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
                                2⤵
                                  PID:3396
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,8988976852296322507,668275965198849890,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
                                  2⤵
                                    PID:4244
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,16615142791146807904,4376150027977093183,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
                                    2⤵
                                      PID:436
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4988,i,18397567213449734300,12564487185363388890,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:1
                                      2⤵
                                        PID:2572
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,14785138735866162894,3901225829244736893,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
                                        2⤵
                                          PID:4072
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6612,i,6823258631287960012,5783433975219606077,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
                                          2⤵
                                            PID:408
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,4372147948057624266,17903060545207040926,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
                                            2⤵
                                              PID:3804
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7028,i,8106819202737207828,1417116499878426010,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
                                              2⤵
                                                PID:3396
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7116,i,18293265177904657634,2790311901740683542,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:1
                                                2⤵
                                                  PID:620
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5144,i,7961170313232415549,3276574612553036385,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:1
                                                  2⤵
                                                    PID:1012
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3632,i,14700875261539862706,14279116408981494492,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
                                                    2⤵
                                                      PID:4952
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,9935715130848955592,16686162082038041407,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                                                      2⤵
                                                        PID:3452
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,9935715130848955592,16686162082038041407,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                                                        2⤵
                                                          PID:3848
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,16252930766192601844,12512938701224344034,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:8
                                                          2⤵
                                                            PID:552
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7136,i,12732991279549809835,12620250065302659490,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
                                                            2⤵
                                                              PID:1180
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7616,i,7044126759433622524,443733345444964240,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:8
                                                              2⤵
                                                                PID:3584
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7676,i,5766389777183604347,8033684129376511093,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:1
                                                                2⤵
                                                                  PID:2336
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7984,i,10614620221043132923,15161767677680580706,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
                                                                  2⤵
                                                                    PID:5240
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7860,i,10019610209803372029,16654068977731067207,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:1
                                                                    2⤵
                                                                      PID:5252
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8436,i,11036011307630905094,1793849175889903204,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=8476 /prefetch:1
                                                                      2⤵
                                                                        PID:5764
                                                                      • C:\Windows\System32\msiexec.exe
                                                                        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\jjsploit_8.18.4_x64_en-US.msi"
                                                                        2⤵
                                                                        • Enumerates connected drives
                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:5904
                                                                      • C:\Windows\System32\msiexec.exe
                                                                        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\jjsploit_8.18.4_x64_en-US.msi"
                                                                        2⤵
                                                                        • Enumerates connected drives
                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:6068
                                                                        • C:\Program Files\jjsploit\jjsploit.exe
                                                                          "C:\Program Files\jjsploit\jjsploit.exe"
                                                                          3⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Checks whether UAC is enabled
                                                                          • Modifies trusted root certificate store through registry
                                                                          • Modifies system certificate store
                                                                          • Suspicious use of FindShellTrayWindow
                                                                          PID:4920
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4920.3728.704732597892802363
                                                                            4⤵
                                                                            • Drops file in Program Files directory
                                                                            • Enumerates system info in registry
                                                                            • Modifies data under HKEY_USERS
                                                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                            PID:3068
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffa00beb078,0x7ffa00beb084,0x7ffa00beb090
                                                                              5⤵
                                                                                PID:216
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1668,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
                                                                                5⤵
                                                                                  PID:5660
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
                                                                                  5⤵
                                                                                    PID:5352
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
                                                                                    5⤵
                                                                                      PID:4336
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3644,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
                                                                                      5⤵
                                                                                        PID:6080
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4620,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
                                                                                        5⤵
                                                                                          PID:1992
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4500,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
                                                                                          5⤵
                                                                                            PID:4976
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4628,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:8
                                                                                            5⤵
                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                            PID:208
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3744,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8
                                                                                            5⤵
                                                                                              PID:5164
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3708,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
                                                                                              5⤵
                                                                                                PID:5940
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4524,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
                                                                                                5⤵
                                                                                                  PID:5972
                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4844,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:8
                                                                                                  5⤵
                                                                                                    PID:4620
                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.18.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4936,i,6876549767993018607,7684850198581283368,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
                                                                                                    5⤵
                                                                                                      PID:5000
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,1605271138153825507,13078837786010525597,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:2876
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7264,i,16814225692186658888,16432334922098267846,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:6116
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7008,i,18332412381921519438,14294509462073085565,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:812
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7252,i,765383690434050325,15776420811281696031,262144 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8
                                                                                                      2⤵
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:1204
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6324,i,1404301891493144132,4490590923261357514,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:3356
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8060,i,10699438700576812658,17601999134682442516,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:4884
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7812,i,8840192266458741338,13411676087485490018,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=8712 /prefetch:8
                                                                                                          2⤵
                                                                                                            PID:5252
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8744,i,8920759912319213818,14932150598671739596,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:8
                                                                                                            2⤵
                                                                                                              PID:364
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8656,i,13269087016769108954,4381093091286762838,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=9028 /prefetch:8
                                                                                                              2⤵
                                                                                                                PID:5844
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7648,i,7521107803187521844,17959429403925193760,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:8
                                                                                                                2⤵
                                                                                                                • Modifies registry class
                                                                                                                PID:960
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7548,i,12505248268213287593,3321129527930266665,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:3036
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,4167992838648838906,7030001321550571763,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=1056 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:5380
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=1532,i,7257460636318288272,1554336363237717184,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:464
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8504,i,6959311030665646195,2353846238288067696,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
                                                                                                                      2⤵
                                                                                                                        PID:4740
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8400,i,15700513650860619310,12840491705061057403,2097152 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:3788
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8512,i,196495239808482550,4112614610368412541,524288 --field-trial-handle=2512,i,18427227693649349775,6946833372664897577,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
                                                                                                                          2⤵
                                                                                                                            PID:5940
                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe
                                                                                                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe"
                                                                                                                            2⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            PID:1708
                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe
                                                                                                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe"
                                                                                                                            2⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            PID:4352
                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe
                                                                                                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe"
                                                                                                                            2⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Checks whether UAC is enabled
                                                                                                                            • Drops file in Program Files directory
                                                                                                                            • Enumerates system info in registry
                                                                                                                            • Modifies Internet Explorer settings
                                                                                                                            • Modifies registry class
                                                                                                                            PID:2056
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                          1⤵
                                                                                                                            PID:1456
                                                                                                                          • C:\Windows\system32\msiexec.exe
                                                                                                                            C:\Windows\system32\msiexec.exe /V
                                                                                                                            1⤵
                                                                                                                            • Enumerates connected drives
                                                                                                                            • Drops file in Windows directory
                                                                                                                            • Modifies data under HKEY_USERS
                                                                                                                            • Modifies registry class
                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                            PID:6024
                                                                                                                            • C:\Windows\syswow64\MsiExec.exe
                                                                                                                              C:\Windows\syswow64\MsiExec.exe -Embedding 0F0A4461BCFDBC225391DA3767E44705 C
                                                                                                                              2⤵
                                                                                                                              • Loads dropped DLL
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:4256
                                                                                                                            • C:\Windows\system32\srtasks.exe
                                                                                                                              C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                                                                              2⤵
                                                                                                                                PID:4100
                                                                                                                            • C:\Windows\system32\vssvc.exe
                                                                                                                              C:\Windows\system32\vssvc.exe
                                                                                                                              1⤵
                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                              PID:5124

                                                                                                                            Network

                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                  Replay Monitor

                                                                                                                                  Loading Replay Monitor...

                                                                                                                                  Downloads

                                                                                                                                  e59f68c.rbs
                                                                                                                                  • Path C:\Config.Msi\e59f68c.rbs
                                                                                                                                  • Size 20KB
                                                                                                                                  • SHA256 1fa3527a21dd0e922b874c53e580cbe1032bd09dbf6c40d8c1fadcce1acde0e1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RobloxStudioInstaller.exe
                                                                                                                                  • Path C:\Program Files\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                                                                  • Size 9.7MB
                                                                                                                                  • SHA256 f2f9ad7aba372d43ca50ee83601d00d1701321edb932a6c31c5ba67d96c107f4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1234900978\manifest.json
                                                                                                                                  • Size 43B
                                                                                                                                  • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1252491797\manifest.json
                                                                                                                                  • Size 116B
                                                                                                                                  • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  hyph-as.hyb
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1467555022\hyph-as.hyb
                                                                                                                                  • Size 703B
                                                                                                                                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  hyph-hi.hyb
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1467555022\hyph-hi.hyb
                                                                                                                                  • Size 687B
                                                                                                                                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  hyph-nb.hyb
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1467555022\hyph-nb.hyb
                                                                                                                                  • Size 141KB
                                                                                                                                  • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1467555022\manifest.json
                                                                                                                                  • Size 82B
                                                                                                                                  • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_1796774385\manifest.json
                                                                                                                                  • Size 76B
                                                                                                                                  • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_2140845378\manifest.json
                                                                                                                                  • Size 78B
                                                                                                                                  • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.fingerprint
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_250410250\manifest.fingerprint
                                                                                                                                  • Size 66B
                                                                                                                                  • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_250410250\manifest.json
                                                                                                                                  • Size 135B
                                                                                                                                  • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  manifest.json
                                                                                                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3068_979361367\manifest.json
                                                                                                                                  • Size 113B
                                                                                                                                  • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  jjsploit.exe
                                                                                                                                  • Path C:\Program Files\jjsploit\jjsploit.exe
                                                                                                                                  • Size 17.6MB
                                                                                                                                  • SHA256 bb8da5fea36720a6a3b33543742f6c04a9bbbb394e97e8cd7af0cb24873a0f7c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  jjsploit.lnk
                                                                                                                                  • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jjsploit\jjsploit.lnk
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 4853fa9780c8244e28103e0375f6ee2d031eb7738900fd67b39c84507d4317e6
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  jjsploit.lnk~RFe59fea9.TMP
                                                                                                                                  • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jjsploit\jjsploit.lnk~RFe59fea9.TMP
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 536c625b2b9992be13296522a27255df070287ebd446720bc0f9b75213426693
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  blocklist
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                  • Size 105KB
                                                                                                                                  • SHA256 416537d5becea53a7c07d47e3d22673cb50daabf00e6e0967f57baef645377f1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  settings.dat
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  settings.dat
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  LOG.old
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                  • Size 334B
                                                                                                                                  • SHA256 c40ab1a6c5fb8309a20cffe2074f9896009bd990cc7867a8edebfe2fa976cd29
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  LOG.old
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                  • Size 352B
                                                                                                                                  • SHA256 ba22d0d1b789c6167fbecc3a9919ac014b4d98fd808cb7fdfb7a4be353d6543a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  MANIFEST-000001
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                  • Size 158B
                                                                                                                                  • SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  BookmarkMergedSurfaceOrdering
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                  • Size 6B
                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  f_000089
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                                                                                  • Size 203KB
                                                                                                                                  • SHA256 757b571d4f291d3c7aee167d6e196d65bbca7ef70f09f3248c316464236ba1c2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000091
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                                                                                  • Size 256KB
                                                                                                                                  • SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000095
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                                                                  • Size 256KB
                                                                                                                                  • SHA256 69c3df0acfa9b94fad710cd600e6d092b54a3848415a3c7b9d178cf9600c58bf
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000ac
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                                                                                                  • Size 51KB
                                                                                                                                  • SHA256 6fb14facebbdac5a03ae898f2c3329bdfc211c7b9390f37c37736711d4306db5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000b6
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                                                                                                  • Size 60KB
                                                                                                                                  • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000b7
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                                                                                                                  • Size 68KB
                                                                                                                                  • SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000b8
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000b9
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                                                                                                                  • Size 37KB
                                                                                                                                  • SHA256 c77d8c5ee52f8e184fabdd66e2898ac8a2aa927143b0d9d8a93cd065f2dfdbfc
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000ba
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                                                                                                                  • Size 65KB
                                                                                                                                  • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_0000bb
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                                                                                                                  • Size 38KB
                                                                                                                                  • SHA256 3370f2e33b0f3a2dae282f78a6bda56adacc76aaf06c7b388db4fda41b90b92c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000112
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
                                                                                                                                  • Size 17KB
                                                                                                                                  • SHA256 b18b21ba47f9e4ff56e48ec43dde8ab75a5f1fb0d660e0f5d6f05f856490a001
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000116
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 d0308f450e0f952a06aedef05e216825cffc88cd550476f11e1750f21ff66d49
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000117
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000117
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 0d35f6a69c5d9203a8034ecda259472c559e3e504ec43871b9e6f49e1a579a7b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000119
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000119
                                                                                                                                  • Size 95KB
                                                                                                                                  • SHA256 6578b51b5199271f7edd42f73e1322d3c9241e15970eedd03fc488316aee9a85
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  f_000150
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000150
                                                                                                                                  • Size 51KB
                                                                                                                                  • SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  temp-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 498c8f26cd32636012899e574568d81dc5fa51e47207fd1762d43808a3dd961f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  temp-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                  • Size 11KB
                                                                                                                                  • SHA256 d0f4bfacedb2bd57762c0d466b40d13c04398ac16945e22e9bc9139af7f8ee97
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 950752511cba5e770c126fe633fb474aead5df484d15f23d852c9d4cf0a56476
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 6d0321f704289f19e987fbd134e4b85ff66993d93d1f08159843a92d891c495c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 3857f10d784d3719fc466432a96442f69b12738351dc891926746ea827953125
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe5894e8.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5894e8.TMP
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 64481d6dd241568b97035cfb1dc72c152d13363de1553caddf4e4d084012e719
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  SiteList-Enterprise.json
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  Edge Profile.ico
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                  • Size 70KB
                                                                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  CURRENT
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                  • Size 16B
                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  MANIFEST-000001
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                  • Size 23B
                                                                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  000004.log
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000004.log
                                                                                                                                  • Size 118KB
                                                                                                                                  • SHA256 c81e82b8c38fd5940086bfe51934dd939ece838fb82850c5bd641f0469f451d7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  000005.ldb
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000005.ldb
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 dc3530bfe54343283c68a0c7e3eba93c7213652d8bed5e55615f4398dd818cae
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  LOG
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
                                                                                                                                  • Size 671B
                                                                                                                                  • SHA256 5ca9719d9f3c67163072a47a5387b8c624fab6ce11747ab23d44b11560935d8b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  MANIFEST-000001
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                  • Size 100B
                                                                                                                                  • SHA256 1b5782b03a058fb8e1b7b67d6d37b40aa3c5288c07b26e436372b6dd81c4fffe
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 3658139caa2291f7401a8dcc871aecfbdd3011cb8d16243884327e6d279a9506
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 d2b67db0a9f94e30e67f45ebd6ff94b6fe6e51531ab7b6986fb08bc01e22079d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 493069a690f84dadc32ef441e80ef60347ae363f8d62a2fc6b2bcdb7c4d345ee
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                  • Size 111B
                                                                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  SCT Auditing Pending Reports
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  Sdch Dictionaries
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                  • Size 210B
                                                                                                                                  • SHA256 ec0fc5f525de8fefccbe333033c946db9dc8a98f1e229819c4f87e42e2aebc64
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Sdch Dictionaries
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                  • Size 210B
                                                                                                                                  • SHA256 18eb30b67c08e5f5b8266be16c6f92373e0d05a4550b6eb28fef25375cd4af1c
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Sdch Dictionaries~RFe597872.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe597872.TMP
                                                                                                                                  • Size 40B
                                                                                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 3c6981f5d02624c180b773ba0e88e92cfc5fbf8d507b5d14767494fc4c38b4d9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 17KB
                                                                                                                                  • SHA256 7738cd7e3b3c3668a622631a0774f9247c1e61a801b0caad51f72832c1189a31
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 5f418e5ef3734471d52c10a5c2234a1df5144915fc1e895958c99935ec019f9b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 b52120928657cb1f2eb7d23f1eb0d7a4ce54aa0287091062db50d3c8845d34d0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 5ecc0de0d43c20bd408ca9e799d5ce5784b37b03b548d99dc93f4c919559971c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 bf883bdab1210a9adeda43fb71a30bf8d21898b2f841e73ca8ef97faa11e857f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 c76e384fe68b9d2c787455af313d2b145ed98d20e111f6a1ee7494abaee183e4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Secure Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                  • Size 30KB
                                                                                                                                  • SHA256 b3a7cedf640c6449b5667b813864c60e05ce2a304a4321ffb83cee29bd692d76
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 4884b218f2afb07171f791ef7ac2e0291b37d77a9dd37b85231fa151ac330e0f
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 2ed17a4f8a42baf089343f525c099aa0cf4e1e10e8e6530ebbb42e0c9786dbf0
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe591dcf.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe591dcf.TMP
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 f4cd027fa21b3237220260f36eaaef529e751b97b2769feffac8738f60f27d50
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ce4f60c-035e-483d-8d2e-b9cc10742643\index-dir\the-real-index
                                                                                                                                  • Size 96B
                                                                                                                                  • SHA256 cebe2ae8f7d4bdc1cd3bbc9faff38e1bf13a0a49188da37de139210de9f9f297
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe5a3b64.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ce4f60c-035e-483d-8d2e-b9cc10742643\index-dir\the-real-index~RFe5a3b64.TMP
                                                                                                                                  • Size 48B
                                                                                                                                  • SHA256 32ab3c1133dfebe5837e1ad99db1141aa8009c88ff43d2341cea04b09d7ce4a1
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3c00c727-a42d-4dda-8781-27462a00dc28\index-dir\the-real-index
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 3a590af3f5c06c767d4a672ed456aee5e8c133294cc1b212091d9c285df4e99b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\529deaf1-850b-495b-be59-1b50e221fa1b\index-dir\the-real-index
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 9be83f6647a3a737690656ac87e0265b400fa612ad572d44b20c151ff02a8da6
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe5a3b74.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\529deaf1-850b-495b-be59-1b50e221fa1b\index-dir\the-real-index~RFe5a3b74.TMP
                                                                                                                                  • Size 48B
                                                                                                                                  • SHA256 5543690a8658369bebdc40c434895b019fa8d1de31947af4978e32e53ff487db
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  623cd082b6202da0_0
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\623cd082b6202da0_0
                                                                                                                                  • Size 60KB
                                                                                                                                  • SHA256 defd555879e1b4f608d19c355eea6426222a5802e325d9f872b4f3d107fa5eb6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 8ffcdaf79d034dd3e35b95632c2aa1225bde7b2a9266395e6518ca792bf1ef67
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 4911ba20e3e627dea2c5bcc79967e269e9590c5778035b359b0b9b6898fcaad3
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
                                                                                                                                  • Size 72B
                                                                                                                                  • SHA256 549f33522a35921321816ab9f893c4990e174a08a956017480838041dc1e11da
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  index.txt
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                  • Size 371B
                                                                                                                                  • SHA256 05ca31d85afb8302e3de80e3b12b528086a22e284e2ab7cd5823cdc4f065e094
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  index.txt
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                  • Size 519B
                                                                                                                                  • SHA256 bc085d5eff41c26a1e7fe10dae14df9bfdd66329b51903770643ec41f4347e7d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  index.txt
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                  • Size 624B
                                                                                                                                  • SHA256 c7a770b3282e079d8947af8d581f395b3a4cb4a717be7f1b9c68473567f1acb0
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  index.txt
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                  • Size 619B
                                                                                                                                  • SHA256 8351c4eeaf236caeec425eb2958e89b07b05d45c10ac87d3b8d61829b9662ef7
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                  • Size 96B
                                                                                                                                  • SHA256 28e111cef64ee58cf4464bf25ddfa97b6cadd9c540c6d2a113f107240bc3bb3d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe599d8e.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe599d8e.TMP
                                                                                                                                  • Size 48B
                                                                                                                                  • SHA256 cf7cd206a1892b74db7f81d82e72096c931cd587de06c9eafe5bf71770ada5eb
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  sync_diagnostic.log
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                  • Size 4KB
                                                                                                                                  • SHA256 38874863a99095358ee033f5084d3180ab2d07df7964b2819fa48c975736add6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  OperationConfig
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  OperationConfig~RFe593723.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593723.TMP
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 32a8e27ecb274583e7351fa8ca268fe8e41ce31d9d99f0b382682a2dcf57a8ad
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 c4cf0e98d012c046ba75dd88adf481aeb1ed4b19d07892bda19cf0e83eab0a20
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 695c0b7f7bf9424ae69c85bcd325c83b6d18353aca42837c0de795e4e62b27b3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 aaebcf6dc8091c22d5ce61e797092c4f7dab3644c2b5d34b55d61eed60beb612
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 ef52973a82d26502b171759f35e1c82cfeead964004278a3cb1b6f70e6521a36
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 0aa8a207c9418bc161e458c45c03bd7b93deb11b1255e419207ef92140453178
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 28KB
                                                                                                                                  • SHA256 06b65fcc0a2bd87c077b877b055acb98869b5b8e9c4e7ba990582e1914574e41
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 19KB
                                                                                                                                  • SHA256 3f1a3c0831cd42973c1693f4c39564b426939be9b6f91f698c9d4f37852ebaee
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 1a889b551d1f59aa30c86d73c09c91549d8a5149462872ee0321b5fd7ee87146
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 7710fb94a3f379c3cf41a734e2e25ca5f02972185ddcacb767279ff594fd072a
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 4bba8c60b91ee2ce17e15cd0aae494028536dc7a00be9a01c157ab3f1ba1557d
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 31af2e8cfd559eb7dcb31c39099d8ee51d286c0f6aeb2dd7d16f575ff01c4379
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 be477222575fa1bc0fa684f1312adb436509ba3d872041faf14127994de3d1dc
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 a7c6a51410210db21c16a0384a03cfa4f9d1262b3d17ab66b8ef2af0d6bc3cc9
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 deb09dd42d1606642742c448246b07e586af3bdbf64154c096026113d7ae5370
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 581dce2c79f618dfcb07034c4f100e51b021d1730c28f13d3e6697e58ad57128
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RevisitationBloomfilter~RFe59553a.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59553a.TMP
                                                                                                                                  • Size 392B
                                                                                                                                  • SHA256 1a7a8aa0a4a8283163f4900c9f617f484c355c96fd80f2e7770f5a368dbd7040
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  96604c03-ea82-474f-b5e0-5f0dc45bf925.tmp
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\96604c03-ea82-474f-b5e0-5f0dc45bf925.tmp
                                                                                                                                  • Size 13B
                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 072e8b12a5fb013acee6b45808bdfcf93441b615a5c4f2f7e154568db1b80efd
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  MSIB368.tmp
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MSIB368.tmp
                                                                                                                                  • Size 132KB
                                                                                                                                  • SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  protocols.json
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  crl-set
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  settings.dat
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 f2cfbd52c74efe4f2724880360208492d89f7a348ecb4f306c25c97acdb47bbd
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  settings.dat
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 4a75b78a54569e59820120a6b82bfa9839cf04a9c5631a51780b6333dd7eb8c4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  throttle_store.dat
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                  • Size 20B
                                                                                                                                  • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  37944770-3fa9-4fa5-b3fb-f2ddeaf7e090.tmp
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\37944770-3fa9-4fa5-b3fb-f2ddeaf7e090.tmp
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 c16da82f57ed51e02b8926f733a0cf33d7432708d51ab9604801eec187450652
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 144B
                                                                                                                                  • SHA256 f5a8dea52e6adca6845629ba9d4783817fd58b1bc96de7ed3d24cfedbe200640
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 144B
                                                                                                                                  • SHA256 990b38e441e9a4f5ef8974a3d8ee0a713002d7cbd9358833236a5fd3826d2221
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  the-real-index~RFe5b127b.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5b127b.TMP
                                                                                                                                  • Size 48B
                                                                                                                                  • SHA256 7773cf3c092aed1ad58a20c3f678f11133b49069cdec5b2949a443e1f982e568
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  data_1
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\DawnGraphiteCache\data_1
                                                                                                                                  • Size 264KB
                                                                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                  Submit Download

                                                                                                                                  data_0
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\DawnWebGPUCache\data_0
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                  Submit Download

                                                                                                                                  data_2
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\DawnWebGPUCache\data_2
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                  Submit Download

                                                                                                                                  data_3
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\DawnWebGPUCache\data_3
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                  Submit Download

                                                                                                                                  MANIFEST-000001
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                                                                  • Size 41B
                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Network\Network Persistent State
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 af73184de8b4d6edb5569d8bf1f40abf192093f462c2ba111b33566de79cfa53
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Network\Network Persistent State
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 55aa7c6ea7927fa4cf831567900e410f3eedb5c98fd6eea6ac4fe5c1d0c5ec39
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Network Persistent State~RFe5bc919.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Network\Network Persistent State~RFe5bc919.TMP
                                                                                                                                  • Size 59B
                                                                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Preferences
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Preferences
                                                                                                                                  • Size 7KB
                                                                                                                                  • SHA256 a8f92ae76ff89dbf42435c27d446e3093b8dcf36306e47b50b4950fbfc20ac96
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  index
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Shared Dictionary\cache\index
                                                                                                                                  • Size 24B
                                                                                                                                  • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 0549cba13821c3bca05fe6af045a032738ac799668ac531d78a8d1ae14dfcbb1
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 67656ec7682214f143e426a4bc77309b295774eee51739ca83c41eb872b62f48
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 16KB
                                                                                                                                  • SHA256 bd6a1dca7b017f4e03ae936548717afb94dc066c903f70ed9dd5bb01e4964ca2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 16KB
                                                                                                                                  • SHA256 8a5bb8cd4ec26618be2de663e56189d7231a3fc8aba739e03ae9e471c7e7fe4e
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 16KB
                                                                                                                                  • SHA256 37abf61df517d3b67e4195b086a662965814c9817bc1dc025acb041fe0087660
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 5e3bd143abbe34e2e51fd2ba235a6c63924d77528bd6547ad180bc21025b97ec
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 338ade25593d3b43cca60092afc747f78171900d9ee092ee04f9a841c979c33b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Local State~RFe5ab085.TMP
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State~RFe5ab085.TMP
                                                                                                                                  • Size 1KB
                                                                                                                                  • SHA256 ba7ebb8ad4e419c0bece291f9d1a5f2180cb84984da9499177749f3be15b4ba2
                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                  Submit Download

                                                                                                                                  Filtering Rules
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                                                                  • Size 2.1MB
                                                                                                                                  • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  LICENSE
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                                                  • Size 24KB
                                                                                                                                  • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  keys.json
                                                                                                                                  • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  default.dic
                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                  Submit Download

                                                                                                                                  ccba5a5986c77e43.customDestinations-ms
                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 dfcaccfb9a601ffbf23bfa7e408bd19064f825ddbb2f732c2fa23bc9d6ad69c0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  WRD.dll
                                                                                                                                  • Path C:\Users\Admin\Documents\jjsploit\WRD.dll
                                                                                                                                  • Size 2.3MB
                                                                                                                                  • SHA256 dc1077e410ec3cc59a7847e33f0bda758c60c209e99ef9c7b1fce1436f721190
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  libcrypto-3-x64.dll
                                                                                                                                  • Path C:\Users\Admin\Documents\jjsploit\libcrypto-3-x64.dll
                                                                                                                                  • Size 4.5MB
                                                                                                                                  • SHA256 03ec9292dcdfda520638490e11baeefff5ab1b6eb22feb90a22fc771272ce116
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  libssl-3-x64.dll
                                                                                                                                  • Path C:\Users\Admin\Documents\jjsploit\libssl-3-x64.dll
                                                                                                                                  • Size 802KB
                                                                                                                                  • SHA256 0bda7daeb4040c722b8c287dfd2307c9b8228576db1dbbbaac901c35cc8dc62b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  RobloxPlayerInstaller-YC3J44YXV4.exe
                                                                                                                                  • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-YC3J44YXV4.exe
                                                                                                                                  • Size 13.0MB
                                                                                                                                  • SHA256 2d9372b6f31b6d0c12b13b23fe0e28d556d86c97277d6a9d13cac2c8cf49f1e1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  jjsploit_8.18.4_x64_en-US.msi
                                                                                                                                  • Path C:\Users\Admin\Downloads\jjsploit_8.18.4_x64_en-US.msi
                                                                                                                                  • Size 6.0MB
                                                                                                                                  • SHA256 ea003af9543a0300e61e0e4df3ed6347fc4eb89fa79a110467581be59f9780c5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  metadata-2
                                                                                                                                  • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
                                                                                                                                  • Size 24.1MB
                                                                                                                                  • SHA256 1800a025de32e6028e4471b2ff0548a43b69c386912127d1a350616a373b1823
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  {78657b51-a29b-4371-b99f-7d09314a2f84}_OnDiskSnapshotProp
                                                                                                                                  • Path \??\Volume{73216430-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{78657b51-a29b-4371-b99f-7d09314a2f84}_OnDiskSnapshotProp
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 fa43f7ccef51e854a76f3788f2ec0238031e7bae97d34397182c7d7fb5e52e56
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                  Submit Download

                                                                                                                                  memory/208-3698-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3753-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3747-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3748-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3697-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3751-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3749-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3699-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3752-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/208-3750-0x000002A506120000-0x000002A506121000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/4336-2219-0x00007FFA20EA0000-0x00007FFA20EA1000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/4336-2220-0x00007FFA20EE0000-0x00007FFA20EE1000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/5660-2193-0x00007FFA201C0000-0x00007FFA201C1000-memory.dmp
                                                                                                                                  Download

                                                                                                                                  memory/6080-2294-0x00007FFA201C0000-0x00007FFA201C1000-memory.dmp
                                                                                                                                  Download