d380806ee7fd4a6c40396f9fa6ab60ee4f21b29ff9b469b40e14dd421cfb681f

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 11:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Upload Patcher - Kay x Kaz (Cracked By Xyzwon)/Upload Patcher - Kay x Kaz (audio multichunk Method).exe
Size 746KB
Sample260816-m4h6hawdng
SHA256 d380806ee7fd4a6c40396f9fa6ab60ee4f21b29ff9b469b40e14dd421cfb681f
MD5 e0659b04c1ac574dcf3f14894726a82e
SHA1 53eb3d1c62e33a30cbb16638831791438b6705eb
SHA512 a811f231c504116c20c26c74e1271e8edc36f37a259463a843a06f92c04cf02c2d4c59f0e18c833daed35c1088a734c62766360992164a31357e8bc508cd8231
SSDEEP 12288:Gs4inp4n/nYM0jHDshsfs8Z8yVlbrl0P/ZUsZpbGPbdbvmb4ATtfbJbkIbnbzMkZ:Gsen/nYM0jHDshMs8Z/VlzIM2
TLSH
T102F46DD8AB5700F4D06595788D72C702E663FCC973668EFB16FE7AB20B164909D3A603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Upload Patcher - Kay x Kaz (audio multichunk Method).exe

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
7	api.ipify.org
8	api.ipify.org
9	ip-api.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 17 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\female_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\ranked_dicts	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\test.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\male_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\model.markov	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\surnames.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\passwords.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4132_164083507\LICENSE	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313517853279601"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4132	msedgewebview2.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4136 wrote to memory of 4132	4136	Upload Patcher - Kay x Kaz (audio multichunk Method).exe	84
PID 4132 wrote to memory of 888	4132	msedgewebview2.exe	85
PID 4132 wrote to memory of 432	4132	msedgewebview2.exe	87
PID 4132 wrote to memory of 432	4132	msedgewebview2.exe	87
PID 4132 wrote to memory of 432	4132	msedgewebview2.exe	87
PID 4132 wrote to memory of 1452	4132	msedgewebview2.exe	88
PID 4132 wrote to memory of 2472	4132	msedgewebview2.exe	89
PID 4132 wrote to memory of 2472	4132	msedgewebview2.exe	89
PID 4132 wrote to memory of 2688	4132	msedgewebview2.exe	90
PID 4132 wrote to memory of 2688	4132	msedgewebview2.exe	90
PID 4132 wrote to memory of 2688	4132	msedgewebview2.exe	90
PID 4132 wrote to memory of 2160	4132	msedgewebview2.exe	101
PID 4132 wrote to memory of 2160	4132	msedgewebview2.exe	101
PID 4132 wrote to memory of 4608	4132	msedgewebview2.exe	104
PID 4132 wrote to memory of 4608	4132	msedgewebview2.exe	104
PID 4132 wrote to memory of 4604	4132	msedgewebview2.exe	106

C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe
"C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe"
1⤵
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4136
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4136.2400.18351093662349970662
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4132
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffc3179b078,0x7ffc3179b084,0x7ffc3179b090
    3⤵
    PID:888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2
    3⤵
    PID:432
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:3
    3⤵
    PID:1452
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2340,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
    3⤵
    PID:2472
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3752,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
    3⤵
    PID:2688
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4612,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:8
    3⤵
    PID:2160
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4052,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:8
    3⤵
    PID:4608
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4536,i,11574615659950815028,6480989981318346789,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:8
    3⤵
    PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4132_1509712377\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b28b96658059694b646737da25a91d05cfd7f9f8f9577c8091896647de1e527b
MD5 5d33fd7024397e6607582e90296f7c3d
SHA1 57b8e9c149802c9096309dd4585d4587354f5f75
SHA512 f7044bd1bb51b9f1fdc982896a7ae56835bdb7302be8bcc8e7e904b83c45e5946d7668f055f476f04d7b4aece3f1d063ce9c787c40a1cc2154e9f8c71e6795c4
TLSH
T1D8D02B127200A970C0E020330002B0CB7710C40E52691102287FCA3C3F110A50D038A1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 19dff1825dfd636b5797a5efe8f0b0d3297319a90e381322cd758d557b07ac74
MD5 0301abc9ffaa837e2b1501c88acc322b
SHA1 97e9d31b9a321e64f7dddc9f22f1d7f78884b798
SHA512 1516759ba4c463cf20e764e49861df408f376d908135e0fec89fbad731385f3e5e41b31048c46ed9c5ab27c1cf547d74549c6dbe80d0360d25fbd766a4d94db3
TLSH
T12FD02B127100BC70C4F020330002B0CB7614C80E52652103687FCA3D2F130D50D03860
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 0673a4813f0ca7bb505df2ec6ddfd2c6660443dbd460e27ca600548a57b5269a
MD5 985a8932592f80d89cfbfa31e2ff59a3
SHA1 266b1801ae0fe893d374fa6e71c2b61d8089280b
SHA512 e6503fe8056dafbd7a923ebf506b4c33f3fc9f8f614c0c1e503cd86ded9417d14c669f91b316fd5a83d255bc9ab3b4c3983fdc8d95c5bdda31a51066df6542bd
SSDEEP 3:MsEllllkEthXllkl2zEZlJh/l:/M/xT02zS/l
TLSH
T1B5440404FFC5041FD714103C4415C3505370DC50051557C335750D175CC55545C00050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 413B
SHA256 ba09c243f15dfbf0c3a8dd2b7668166237494f9645e724bd7e4fc3117bd9f8ad
MD5 9f681a741b817cc4fb8afc07c9a7a23b
SHA1 c4cc5458c11eada0ace2c25d80bee649f92302de
SHA512 1d5b83282fe7953e2204c248c758fee6c5b5da7010c82812649347d5c3c5e9767032e54ee6db8735af25e3c16ab2e2d0f743318568cd237a7b7685573b26146f
TLSH
T109E0A346C4D03E7D064253E435283533E2EB048542195D59E9ECAB0F53F50BC4514C07
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 198B
SHA256 5ec16b0ba880ab904d9257c428fe665c57c2ae610aefdb0cb874d7e46d646461
MD5 4564c1018572ddeec5fb3fae5747387f
SHA1 9ece4c1b4351a44387399eac1a2d286e93e41d5e
SHA512 867519a4294cf81830fe8969358b13c5b32d945bbeba6981352f844bf2bea45183650d2b02459618f4d144e8fc2d11c8cabc20cc17b5f55361b10ca864d0b4e9
TLSH
T173D0120A94603AEE07478798152CB837C2FF44C7428DCA69DD3C7B5E53B51AD9C24C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Preferences
Size 10KB
SHA256 67fe8a68bd920e8e97ca94596f9ce59da412e4471e552a5ae657fa5fffa7954a
MD5 faf9dfebda4d32c0cac918ad801d9e2c
SHA1 7632d2e00cf71218522fbf6c5fabdef1c354dead
SHA512 5af6a96874c8e79be635b1967c23db6fba4a387e16b932098785df643a075af437142b20b556cafbd693a551dade36c3965461fc9704eb5be94f4fec2dd0aeea
SSDEEP 192:sxRvRSSvVPgpcTs3Nc33+WNOWdDnto1pMd:sxRZSSvmHNkRJDo12d
TLSH
T1AA32761AA964A93B6CC7E518F962BBA2D3FD202365C55E4C9FFC492C05EB6CD210740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Secure Preferences
Size 9KB
SHA256 1d240f6a8c9bcfa1af2d51aab9aef2d151790594bc4819f671ac8e15cf95f8e9
MD5 9a0cda1ee84ee2bfcfce1e1178f91b17
SHA1 a021f2f3b390d2fdd0f3f941f23637bd234672e3
SHA512 33fa2dfbfa5cb35ba65dd39eb2c78be421341b3286ba476a96f4b6ab3b4bdae46d5ec9f34e441cac24588dc8d3527b702bf9b36ceec10eba6f3ae0e1e3d9b9a0
SSDEEP 192:HZ6WG2X9l4a0bP/ER2twEU/mqUVx0y3gh4WhOBnC2QpbgXnJA:5nX9aqCBlmpl
TLSH
T1CD12F9F3482C8936AF486BEDFD39BDC6D99A019F89C91D0186D2C54807C2AF931D98D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 11KB
SHA256 1f982a9619378fae0895d146ab90c96677575793a68ad4affa05d3607ba6e2d1
MD5 a18127d28ec224e314ac33140a472c06
SHA1 f57fbad8d544dd3567e1b014f47a382127586afe
SHA512 0d47709c5461551b6540d881f8d223138ff44b5b63c81b3ce6f5702edcb3e805dd72e51e681923434604ea2810fe2f2e9ec9e01e5a47090f335a2d76cde9d27f
SSDEEP 192:zMy+xasuheOwQxMxzNTENRJ6YEmiUaWhPr5FOLs4:z9ZcIOzNoNKIvD5FT4
TLSH
T10B323931E878E9B35CF79A857B863A06E9F49153969C5AE8C8E84F0D10D718D1707C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 14KB
SHA256 296d17ec1c8d976e9f6496e95f4a9d91dd83caf9c29574fb08e33e30aaa0532d
MD5 772b8c914fb2fa2188b280098fb64b47
SHA1 3b4525d5450fb334c1b2b75874e1ad2e1994990d
SHA512 8c47bfc1335ac00b33b31aad0e5710006e07c34b7eebd4c9beee4a8dd5fd8149fee3359d8341c53c3df546a3b8d676020b5255aef2b41de51ac90821998190b4
SSDEEP 192:zMd+xasuheOwQxMxzNTENRJ6YEmiUaoQ3PrvFkR7Xtmr0QinzDu9rP+guY:zsZcIOzNoNKIG3DvF4XUgQSfuN+gt
TLSH
T169523A3A9C34647B59EFBB46734E6616ADD5617BD1784ED4CAE80F0C40B7289A303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 10KB
SHA256 2cc89e95460ace010a758e40f652e79793af97f7c6ef1ae20bad784c63bb9aad
MD5 9bd12604f4445a747c53cc38ef45e564
SHA1 5d466e2abd34fd077971f611190e88a7e2cda16a
SHA512 6cd1db95116fe261b540b82d28920aaebd06c94acbf71e235fc743827b4c4c5eccc18507f6c0a9618d713594ecef342bd249e6d1bdc62e49ed2ef19f70ebd8d1
SSDEEP 192:zny+xasuheOwQxMxzNTENRJ6YEmiUhTayPV5FINka:zoZcIOzNoNKIsy95Fta
TLSH
T1BC322A31E874E9B758F396867B8A3A06F5F49153969C5FE8C8E84F0D10D72891707C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 18KB
SHA256 29d4f343ded72ed693229e4f772f105fe7cb46ea1da9a04a668c6012aa49bf5b
MD5 8308b4b827dd728d7a66109ce779a98b
SHA1 0eee1c6f1d7d2fdbf979e6777c7b221552623bfd
SHA512 04da317d9cd89123c09fe400f03c8c593b1c3ad58d674695f0998ae9ff9f47467b4e140d22caaae90cf8e1b1bc77c5079ca115d5e98f62912e0ac17ef5044553
SSDEEP 384:zv+aQikB+z/xvxjg/qhEPzNoNBIsy95Ftw9zN:a/UxvxjgC+Pe6xtwFN
TLSH
T140827D36E878BD6398F3AA45774A278BE6F454A251885EF8CCE95F0C05CB2D91307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/432-25-0x00007FFC4C140000-0x00007FFC4C141000-memory.dmp

Download

memory/432-134-0x0000025700DA0000-0x0000025700DD0000-memory.dmp

Download

memory/2472-44-0x00007FFC4CE20000-0x00007FFC4CE21000-memory.dmp

Download

memory/2472-45-0x00007FFC4B670000-0x00007FFC4B671000-memory.dmp

Download

memory/2688-81-0x00007FFC4C140000-0x00007FFC4C141000-memory.dmp

Download

memory/4604-259-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-258-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-257-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-263-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-265-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-269-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-268-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-267-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-266-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download

memory/4604-264-0x0000013F890E0000-0x0000013F890E1000-memory.dmp

Download