d380806ee7fd4a6c40396f9fa6ab60ee4f21b29ff9b469b40e14dd421cfb681f

Analysis

user interaction
yes
max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 11:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Upload Patcher - Kay x Kaz (Cracked By Xyzwon)/Upload Patcher - Kay x Kaz (audio multichunk Method).exe
Size 746KB
Sample260816-m4h6hawdng
SHA256 d380806ee7fd4a6c40396f9fa6ab60ee4f21b29ff9b469b40e14dd421cfb681f
MD5 e0659b04c1ac574dcf3f14894726a82e
SHA1 53eb3d1c62e33a30cbb16638831791438b6705eb
SHA512 a811f231c504116c20c26c74e1271e8edc36f37a259463a843a06f92c04cf02c2d4c59f0e18c833daed35c1088a734c62766360992164a31357e8bc508cd8231
SSDEEP 12288:Gs4inp4n/nYM0jHDshsfs8Z8yVlbrl0P/ZUsZpbGPbdbvmb4ATtfbJbkIbnbzMkZ:Gsen/nYM0jHDshMs8Z/VlzIM2
TLSH
T102F46DD8AB5700F4D06595788D72C702E663FCC973668EFB16FE7AB20B164909D3A603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Upload Patcher - Kay x Kaz (audio multichunk Method).exe

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
1	api.ipify.org

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe
1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4196	msedgewebview2.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1560 wrote to memory of 4196	1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe	89
PID 4196 wrote to memory of 5556	4196	msedgewebview2.exe	90
PID 4196 wrote to memory of 1936	4196	msedgewebview2.exe	92
PID 4196 wrote to memory of 1936	4196	msedgewebview2.exe	92
PID 4196 wrote to memory of 1936	4196	msedgewebview2.exe	92
PID 4196 wrote to memory of 1936	4196	msedgewebview2.exe	92
PID 4196 wrote to memory of 1288	4196	msedgewebview2.exe	93
PID 4196 wrote to memory of 1476	4196	msedgewebview2.exe	94
PID 4196 wrote to memory of 1476	4196	msedgewebview2.exe	94
PID 4196 wrote to memory of 1476	4196	msedgewebview2.exe	94
PID 4196 wrote to memory of 2772	4196	msedgewebview2.exe	95
PID 4196 wrote to memory of 2772	4196	msedgewebview2.exe	95
PID 4196 wrote to memory of 2772	4196	msedgewebview2.exe	95
PID 4196 wrote to memory of 2772	4196	msedgewebview2.exe	95
PID 4196 wrote to memory of 2772	4196	msedgewebview2.exe	95
PID 4196 wrote to memory of 5460	4196	msedgewebview2.exe	96
PID 4196 wrote to memory of 5460	4196	msedgewebview2.exe	96
PID 4196 wrote to memory of 5460	4196	msedgewebview2.exe	96
PID 1560 wrote to memory of 1604	1560	Upload Patcher - Kay x Kaz (audio multichunk Method).exe	97
PID 4196 wrote to memory of 5104	4196	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe
"C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe"
1⤵
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1560
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1560.4492.17375216523910988858 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4196
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" /prefetch:4 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffe5fd85fd8,0x7ffe5fd85fe4,0x7ffe5fd85ff0
    3⤵
    PID:5556
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
    3⤵
    PID:1936
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2052 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
    3⤵
    PID:1288
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
    3⤵
    PID:1476
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3544 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac /prefetch:1
    3⤵
    PID:2772
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4300 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
    3⤵
    PID:5460
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView" --webview-exe-name="Upload Patcher - Kay x Kaz (audio multichunk Method).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4456 --field-trial-handle=1776,i,10874954853029318141,1671031146028866990,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:491b6eb9ba8bff668c72860077d9be660ce051ac
    3⤵
    PID:5104
- C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\ffmpeg.exe
  "C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\ffmpeg.exe" -y -i "C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\demo_original.mp4" -vf scale=480:-2 -r 24 -c:v libx264 -b:v 500k -an -movflags +faststart C:\Users\Admin\AppData\Roaming\KayxeKaz\demo_compressed.mp4
  2⤵
  PID:1604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 19dff1825dfd636b5797a5efe8f0b0d3297319a90e381322cd758d557b07ac74
MD5 0301abc9ffaa837e2b1501c88acc322b
SHA1 97e9d31b9a321e64f7dddc9f22f1d7f78884b798
SHA512 1516759ba4c463cf20e764e49861df408f376d908135e0fec89fbad731385f3e5e41b31048c46ed9c5ab27c1cf547d74549c6dbe80d0360d25fbd766a4d94db3
TLSH
T12FD02B127100BC70C4F020330002B0CB7614C80E52652103687FCA3D2F130D50D03860
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b28b96658059694b646737da25a91d05cfd7f9f8f9577c8091896647de1e527b
MD5 5d33fd7024397e6607582e90296f7c3d
SHA1 57b8e9c149802c9096309dd4585d4587354f5f75
SHA512 f7044bd1bb51b9f1fdc982896a7ae56835bdb7302be8bcc8e7e904b83c45e5946d7668f055f476f04d7b4aece3f1d063ce9c787c40a1cc2154e9f8c71e6795c4
TLSH
T1D8D02B127200A970C0E020330002B0CB7710C40E52691102287FCA3C3F110A50D038A1
MD5 SHA1 SHA512 TLSH

Submit Download

14ac8a3a-1238-4177-909d-229bcade066d.tmp

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\14ac8a3a-1238-4177-909d-229bcade066d.tmp
Size 9KB
SHA256 2f30cffc0374b49d7f5fc2e3f789a2615b4d77d602b0fa9b287cd2617988214e
MD5 12fadf59ed439db956da59527199598f
SHA1 8c77f709cdcc15bc5f148dfc4decbccaf66540f4
SHA512 0bc667cbbf39f48f51037ac818e2c57fa6bf90473321111927c462280f3a70364db362ee21899a73020b29489f19a8c7896d8304c09e996c7cfa847ad473f4be
SSDEEP 192:Wtv3s9lr6oP3oR2tf7gmbWCyd54JSooOznC2Qoug2nm:WNs99OZbgjm92
TLSH
T1011209F3092C89366F486AEDEC39BDC6D89A029F85CD1C0596D3C64806C3BED31D98D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29961643-8222-4c21-98fd-db9a8103d242.tmp

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\29961643-8222-4c21-98fd-db9a8103d242.tmp
Size 11KB
SHA256 2aa6148acbd5fdfec239ee48a6d9ff52b9eb48779a23c1b213efa71314eab432
MD5 7f9dc5f795ad7a20a2af026fe8d24f0e
SHA1 52dcf953881f2e7971649210e2660793feb91541
SHA512 74b7f1d6dc3c8a78d6bbb49d965b44df8f23bfa2b34ff91ea1befe13068d1823b1d56d4a78a16fc7bcb1f1b4b7904519b33226c0a0161ee06cc01a12ce9a65c1
SSDEEP 96:sa2R5J4LmJ7yb+2by9BSnpfMqwwWEbhKD6hkVuN7963Fx+WVoMPkSNm+uecI+jlP:sxR5mSWmbsVQoNc33+WNZWjzCto13GM7
TLSH
T1EF32971A6925A83B6CC7E518FA667B92D3F9203374C55E0CABFC493C15DBACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 198B
SHA256 5ec16b0ba880ab904d9257c428fe665c57c2ae610aefdb0cb874d7e46d646461
MD5 4564c1018572ddeec5fb3fae5747387f
SHA1 9ece4c1b4351a44387399eac1a2d286e93e41d5e
SHA512 867519a4294cf81830fe8969358b13c5b32d945bbeba6981352f844bf2bea45183650d2b02459618f4d144e8fc2d11c8cabc20cc17b5f55361b10ca864d0b4e9
TLSH
T173D0120A94603AEE07478798152CB837C2FF44C7428DCA69DD3C7B5E53B51AD9C24C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 413B
SHA256 ba09c243f15dfbf0c3a8dd2b7668166237494f9645e724bd7e4fc3117bd9f8ad
MD5 9f681a741b817cc4fb8afc07c9a7a23b
SHA1 c4cc5458c11eada0ace2c25d80bee649f92302de
SHA512 1d5b83282fe7953e2204c248c758fee6c5b5da7010c82812649347d5c3c5e9767032e54ee6db8735af25e3c16ab2e2d0f743318568cd237a7b7685573b26146f
TLSH
T109E0A346C4D03E7D064253E435283533E2EB048542195D59E9ECAB0F53F50BC4514C07
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Default\Preferences
Size 11KB
SHA256 775a776dc51b960890676825213c1bb742b8df13e4ff5781ad20d11e9d7d26c8
MD5 acc324d21eacea881f656cdb83d968e7
SHA1 990ae35709b82e24529196d5cec73046fc9423e3
SHA512 be7204d0c74c2e2dbcf9883b44f6d294dbc1eea6eb9654ddacba56d535233f2486f75fe587a428eb0307cbf846c8503ff98e95c493bde7557b8eccdffb359e19
SSDEEP 96:sa2R5J4LmJ7yblG2by9BSnpfMqwwWEbhKD6hkVuN7963Fx+WVoMPkSNm+uecI+jF:sxR5mSWAbsVQoNc33+WNZWjzCto13GM7
TLSH
T11F32871A6925A83B6CC7E518FA667B92D3F9603374C55E0C9BFC493C15DB9CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 14KB
SHA256 4c0f600d5d67fddff4b3600b34cbc4d25da02dd809bd2fd1a68482a45a7f5b66
MD5 70191a545feba29f7db5a9596f27bef1
SHA1 f1976a60add613ebb0a61e92441e7bb3fc32831b
SHA512 90a9c84c333855e5651493acaa8f98e903aeba3ad25b0ad4d7c26c634617c7a38201093b2912bd28a564bb261008a1c28af7529618cf3e6882627789f1bb90bb
SSDEEP 192:zGd+xasuheOwQxMxzNTENRChYEmiUaoQ3PrvFOR0gtmr0QinzDu9rP+guU:zSZcIOzNoNKIG3DvFDgUgQSfuN+gZ
TLSH
T140524B3A9C34A47B89EFBB46364F6612ADE5517BD1744ED4CAE80F0C40B7289A303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Upload Patcher - Kay x Kaz (Cracked By Xyzwon)\Upload Patcher - Kay x Kaz (audio multichunk Method).exe.WebView2\EBWebView\Local State
Size 19KB
SHA256 9040aff11caf3502662aa83d97b89e477a595ec710d1f2637010308fc1b76b07
MD5 378a7e865f90a9e00dbde59fcdaee1c6
SHA1 5443fedd716d30357bf98ac053086a2927b668d4
SHA512 e0cc07824072a82dc8a441cd27e95b6447f27723f0dbdd215cbaf4f6dda39917d47b1e251583b08fa669b46b4e87e27da23d2461d214abe83f13bc6290d2c8f0
SSDEEP 384:zY+aQikB+z/xvxjg/qhEPzNoWFpSy9HFiKAVdpBqg9zD:7/UxvxjgC+Pe+DiKUBqgFD
TLSH
T1D9928E26E479AD63A8F39A45774E6787EAF4946341851EE8CCE85F0D01C72DD1307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

demo_compressed.mp4

Path C:\Users\Admin\AppData\Roaming\KayxeKaz\demo_compressed.mp4
Size 710KB
SHA256 3444b38da767a69ce20116901cb6474d905aafaa0c79f5f87c755d07a075a2f1
MD5 4647f52d5d63e99d4df3ff9a9debad5b
SHA1 048eeeadb70198eb72f8dc47c8e1ef7352eedf71
SHA512 9cf7e17c7b1a758ce381395efa1e7cf6026c93dc7619ad52cdb6696726b3959d51d5fc11cea4236f2765aee2501214c44263e96b15694e3f23b6e95bb4aa21cd
SSDEEP 12288:FcBAgRsgC8sQ/ihLBReb/oW9DVyYOACTKCOzWoNXU0l9AH4dpcj:Fce+s6ERejoW9DFakRNXwHWuj
TLSH
T1DBF4231A0314DD1FF56D12BA42FC5A42BCA78834C12F239769739B38CADAF9C2F84419
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1604-123-0x00007FF6B4D30000-0x00007FF6B5D30000-memory.dmp

Download

memory/1936-115-0x0000017E1E110000-0x0000017E1E1B8000-memory.dmp

Download

memory/1936-36-0x00007FFE81BB0000-0x00007FFE81BB1000-memory.dmp

Download

memory/2772-46-0x00007FFE81BB0000-0x00007FFE81BB1000-memory.dmp

Download

memory/5104-198-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-196-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-202-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-206-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-205-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-207-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-204-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download

memory/5104-203-0x000002A282FA0000-0x000002A282FA1000-memory.dmp

Download