hxxps://retr[.]ac/

Analysis

user interaction
yes
max time kernel
147s
max time network
419s
platform
windows11-21h2_x64
resource
win11-20260513-es
resource tags

arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
08/09/2026, 02:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://retr.ac/
Sample260908-cl2vsabm71

Score

7^/10

defense_evasion discovery phishing ransomware spyware trojan

Malware Config

Signatures

A potential corporate email address has been identified in the URL 1 IoCs

phishing

description	flow	ioc	pid	Process	stream
Email address	211	[email protected]	5808	msedge.exe	3

Executes dropped EXE 1 IoCs

pid	Process
5020	retrac.exe

Loads dropped DLL 1 IoCs

pid	Process
2120	MsiExec.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	retrac.exe

Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
422	discord.com
88	discord.com
89	discord.com
91	discord.com
98	discord.com
108	discord.com
336	discord.com
368	discord.com

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Retrac\retrac.exe	msiexec.exe
File created	C:\Program Files\Retrac\Uninstall Retrac.lnk	msiexec.exe

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\~DF71EEB13AD65E72D5.TMP	msiexec.exe
File created	C:\Windows\Installer\{2B412EEC-4109-4D4E-A042-2CD347432CD3}\ProductIcon	msiexec.exe
File opened for modification	C:\Windows\Installer\e59da59.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDBDF.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\{2B412EEC-4109-4D4E-A042-2CD347432CD3}\ProductIcon	msiexec.exe
File created	C:\Windows\Installer\e59da5b.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF274713AFE01682E3.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF75A8DC1AD6B30622.TMP	msiexec.exe
File created	C:\Windows\Installer\e59da59.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFF6984C2FC7E14575.TMP	msiexec.exe
File created	C:\Windows\Installer\SourceHash{2B412EEC-4109-4D4E-A042-2CD347432CD3}	msiexec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	retrac.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	retrac.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3264	chrome.exe
5808	msedge.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333070552784438"	chrome.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 53 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\ProductIcon = "C:\\Windows\\Installer\\{2B412EEC-4109-4D4E-A042-2CD347432CD3}\\ProductIcon"	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\ = "URL:launcher.retrac.site protocol"	retrac.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\URL Protocol	retrac.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\DefaultIcon\ = "C:\\Program Files\\Retrac\\retrac.exe,0"	retrac.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\shell	retrac.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\shell\open	retrac.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-125073035-2952146151-721812867-1000\{27C8CA35-4DEE-425F-BC72-A3CA80BB8FA0}	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\ProductName = "Retrac"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\Version = "50331657"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\DefaultIcon	retrac.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-125073035-2952146151-721812867-1000\{61735E0A-A947-4B9A-B403-4A08CB2B8620}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\retrac\shell\open\command	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\shell\open\command	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\URL Protocol	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\CEE214B29014E4D40A24C23D7434C23D\MainProgram	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\CEE214B29014E4D40A24C23D7434C23D\Environment = "MainProgram"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D39F67BF21D37C75581F63A03A3CC6BF	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\shell\open\command	retrac.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac\shell\open\command\ = "\"C:\\Program Files\\Retrac\\retrac.exe\" \"%1\""	retrac.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\shell	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\CEE214B29014E4D40A24C23D7434C23D\ShortcutsFeature = "MainProgram"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\PackageName = "Retrac_3.0.9_x64_en-US.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\DefaultIcon\ = "\"C:\\PROGRA~1\\Retrac\\retrac.exe\",0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\shell\open	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\shell\open\command\ = "\"C:\\PROGRA~1\\Retrac\\retrac.exe\" \"%1\""	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\Language = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D39F67BF21D37C75581F63A03A3CC6BF\CEE214B29014E4D40A24C23D7434C23D	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\Net\1 = "C:\\Users\\Admin\\Downloads\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\retrac	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\retrac\ = "URL: protocol"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\retrac\DefaultIcon	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\PackageCode = "A4C83CD460CAC744DA544CF3E1F1B387"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\AuthorizedLUAApp = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\DeploymentFlags = "3"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\Downloads\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-125073035-2952146151-721812867-1000\{8B9C4BDD-D8C0-42FC-B5D4-97848118AC2F}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\CEE214B29014E4D40A24C23D7434C23D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\CEE214B29014E4D40A24C23D7434C23D\External	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\CEE214B29014E4D40A24C23D7434C23D\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\retrac	retrac.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	retrac.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Retrac_3.0.9_x64_en-US.msi:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 52 IoCs

pid	Process
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
4012	msiexec.exe
4012	msiexec.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5028	chrome.exe
5028	chrome.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe
5020	retrac.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3104	msedgewebview2.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe
5424	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe
Token: SeShutdownPrivilege	3908	chrome.exe
Token: SeCreatePagefilePrivilege	3908	chrome.exe

Suspicious use of FindShellTrayWindow 57 IoCs

pid	Process
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
2964	msiexec.exe
2964	msiexec.exe
5020	retrac.exe
5424	msedge.exe
5424	msedge.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe
3908	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3908 wrote to memory of 4884	3908	chrome.exe	80
PID 3908 wrote to memory of 3264	3908	chrome.exe	81
PID 3908 wrote to memory of 4180	3908	chrome.exe	82
PID 3908 wrote to memory of 4180	3908	chrome.exe	82
PID 3908 wrote to memory of 1156	3908	chrome.exe	84
PID 3908 wrote to memory of 1156	3908	chrome.exe	84
PID 3908 wrote to memory of 3988	3908	chrome.exe	85
PID 3908 wrote to memory of 3988	3908	chrome.exe	85
PID 3908 wrote to memory of 4812	3908	chrome.exe	86
PID 3908 wrote to memory of 4812	3908	chrome.exe	86
PID 3908 wrote to memory of 2176	3908	chrome.exe	87
PID 3908 wrote to memory of 2176	3908	chrome.exe	87
PID 3908 wrote to memory of 1312	3908	chrome.exe	89
PID 3908 wrote to memory of 1312	3908	chrome.exe	89
PID 3908 wrote to memory of 2580	3908	chrome.exe	90
PID 3908 wrote to memory of 488	3908	chrome.exe	91
PID 3908 wrote to memory of 488	3908	chrome.exe	91
PID 3908 wrote to memory of 4564	3908	chrome.exe	92
PID 3908 wrote to memory of 4564	3908	chrome.exe	92
PID 3908 wrote to memory of 3940	3908	chrome.exe	93
PID 3908 wrote to memory of 3880	3908	chrome.exe	95
PID 3908 wrote to memory of 832	3908	chrome.exe	96
PID 3908 wrote to memory of 4184	3908	chrome.exe	97
PID 3908 wrote to memory of 1228	3908	chrome.exe	98
PID 3908 wrote to memory of 2964	3908	chrome.exe	99
PID 4012 wrote to memory of 2120	4012	msiexec.exe	101
PID 4012 wrote to memory of 4104	4012	msiexec.exe	105
PID 2964 wrote to memory of 5020	2964	msiexec.exe	108
PID 5020 wrote to memory of 3104	5020	retrac.exe	109
PID 3104 wrote to memory of 3772	3104	msedgewebview2.exe	110
PID 3104 wrote to memory of 3412	3104	msedgewebview2.exe	111
PID 3104 wrote to memory of 3412	3104	msedgewebview2.exe	111
PID 3104 wrote to memory of 3412	3104	msedgewebview2.exe	111
PID 3104 wrote to memory of 5128	3104	msedgewebview2.exe	112
PID 3104 wrote to memory of 5188	3104	msedgewebview2.exe	113
PID 3104 wrote to memory of 5188	3104	msedgewebview2.exe	113
PID 3104 wrote to memory of 5380	3104	msedgewebview2.exe	114
PID 3104 wrote to memory of 5380	3104	msedgewebview2.exe	114
PID 3104 wrote to memory of 5380	3104	msedgewebview2.exe	114
PID 5020 wrote to memory of 5424	5020	retrac.exe	115
PID 5424 wrote to memory of 5516	5424	msedge.exe	116
PID 5424 wrote to memory of 5808	5424	msedge.exe	117
PID 5424 wrote to memory of 5840	5424	msedge.exe	118
PID 5424 wrote to memory of 5840	5424	msedge.exe	118
PID 5424 wrote to memory of 5840	5424	msedge.exe	118
PID 5424 wrote to memory of 5832	5424	msedge.exe	119
PID 5424 wrote to memory of 5832	5424	msedge.exe	119
PID 5424 wrote to memory of 5300	5424	msedge.exe	121
PID 5424 wrote to memory of 5448	5424	msedge.exe	122
PID 5424 wrote to memory of 5300	5424	msedge.exe	121
PID 5424 wrote to memory of 5300	5424	msedge.exe	121
PID 5424 wrote to memory of 5448	5424	msedge.exe	122
PID 5424 wrote to memory of 5448	5424	msedge.exe	122
PID 5424 wrote to memory of 5536	5424	msedge.exe	123
PID 5424 wrote to memory of 5536	5424	msedge.exe	123
PID 5424 wrote to memory of 5536	5424	msedge.exe	123
PID 5424 wrote to memory of 5552	5424	msedge.exe	124
PID 5424 wrote to memory of 5552	5424	msedge.exe	124
PID 5424 wrote to memory of 5552	5424	msedge.exe	124
PID 5424 wrote to memory of 5572	5424	msedge.exe	125
PID 5424 wrote to memory of 5572	5424	msedge.exe	125
PID 5424 wrote to memory of 5572	5424	msedge.exe	125
PID 5424 wrote to memory of 5544	5424	msedge.exe	126
PID 5424 wrote to memory of 5544	5424	msedge.exe	126

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://retr.ac/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8cde3c728,0x7ff8cde3c734,0x7ff8cde3c740
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,11292109377102399216,13537344728657101883,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2060 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,10214360206468036527,11125537880055188974,262144 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,9291458965367289635,13764716288100053543,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2640 /prefetch:13
  2⤵
  PID:1156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,3344479789079213244,11833066895233123139,2097152 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3148,i,10309094568063393579,15649783086104441327,2097152 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4276,i,9101340739084725176,9355071527055188671,2097152 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4288 /prefetch:9
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3124,i,10116189129307242756,16154173885450962156,2097152 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4976,i,10849338703314518810,8271969473747755980,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  - Modifies registry class
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4944,i,2617080392231081603,14009975066727360290,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:12
  2⤵
  PID:488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5172,i,1706169363921482009,13764605272470555330,2097152 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5980,i,5120560037636494131,1130042200638916164,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6212,i,9706538862632099625,2992974074582181578,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6176,i,22216946323214774,3129998602061272378,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,9416547887388157519,4403295033606376322,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:14
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6000,i,17737670766486878796,12585717820567545135,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:1228
- C:\Windows\System32\msiexec.exe
  "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\Retrac_3.0.9_x64_en-US.msi"
  2⤵
  - Enumerates connected drives
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2964
- - C:\Program Files\Retrac\retrac.exe
    "C:\Program Files\Retrac\retrac.exe"
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Modifies trusted root certificate store through registry
    - Modifies registry class
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5020
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=es-ES --mojo-named-platform-channel-pipe=5020.3416.1663863186675061954
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:3104
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x174,0x7ff8b405b078,0x7ff8b405b084,0x7ff8b405b090
        5⤵
        
        PID:3772
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1700 /prefetch:2
        5⤵
        
        PID:3412
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:11
        5⤵
        
        PID:5128
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1888,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:13
        5⤵
        
        PID:5188
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2984,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:1
        5⤵
        
        PID:5380
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4680,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:12
        5⤵
        
        PID:1756
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2080,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:1
        5⤵
        
        PID:6724
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=6220,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:10
        5⤵
        
        PID:7216
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView" --webview-exe-name=retrac.exe --webview-exe-version=3.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5544,i,14973690862538617487,7576954017367812515,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
        5⤵
        
        PID:6152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://oauth-service-prod.retr.ac/oauth/authorise?client_id=01K5FQWCFHYHK3PNW357RE9YRZ&response_type=code&redirect_uri=retrac%3A%2F%2Fcallback
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:5424
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2bc,0x368,0x7ff8b825c188,0x7ff8b825c194,0x7ff8b825c1a0
        5⤵
        
        PID:5516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,731322195342260426,3629188825793121626,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
        5⤵
        A potential corporate email address has been identified in the URL
        System Time Discovery
        
        PID:5808
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,349072178243908154,5520828895682690286,262144 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=1836 /prefetch:2
        5⤵
        
        PID:5840
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,10886545839009589265,6434078600036756926,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:13
        5⤵
        
        PID:5832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,14570195015937295526,7339764552883409376,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
        5⤵
        
        PID:5300
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,9480075089428033851,1821254093405206988,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
        5⤵
        
        PID:5448
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,16572456622252446995,9936343603137587976,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
        5⤵
        
        PID:5536
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4104,i,17034462728636961735,2209394039986694930,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:9
        5⤵
        
        PID:5552
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4124,i,9869854921755760248,3862097432668508356,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
        5⤵
        
        PID:5572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4136,i,28704411360390891,10398891522295554495,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:9
        5⤵
        
        PID:5544
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,8807235025784450347,5204633287262109180,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
        5⤵
        
        PID:6160
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5620,i,7492260925073739318,16593680165975892199,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
        5⤵
        
        PID:6384
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,2029217427616537607,14022275277957598559,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
        5⤵
        
        PID:6576
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,4047953678146829753,5925055584911250498,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
        5⤵
        
        PID:6584
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,8612907365731380711,4484996559903331392,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
        5⤵
        Modifies registry class
        
        PID:7100
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,12687612150848370991,182306678843073009,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:12
        5⤵
        
        PID:7108
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,11541346888621017957,12096553080084009084,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:14
        5⤵
        
        PID:7404
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
        
        cookie_exporter.exe --cookie-json=1128
        6⤵
        
        PID:7552
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,11039554099712954506,18139335974458236281,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
        5⤵
        
        PID:7428
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,11039554099712954506,18139335974458236281,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:14
        5⤵
        
        PID:7476
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,3251252249986832330,4746645530535839431,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
        5⤵
        
        PID:7968
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,17781263976994210085,3729999680260849106,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
        5⤵
        
        PID:7072
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,1569209858328418611,6062728446168387307,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:14
        5⤵
        
        PID:6920
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7048,i,486492403405082824,541024033534488230,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:14
        5⤵
        
        PID:6812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7300,i,8863812958770113708,17712816097491729985,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:14
        5⤵
        
        PID:7268
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4940,i,7907775034876910197,9522756711651318778,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
        5⤵
        
        PID:5376
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7316,i,1674571919974590133,5948825820116020261,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:14
        5⤵
        
        PID:6764
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6884,i,2878829018611215447,8794093379564464266,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
        5⤵
        
        PID:8036
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7312,i,8593753606482983849,16260228594206940765,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:1
        5⤵
        
        PID:8016
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7648,i,10304433363478687224,8361090082865428056,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
        5⤵
        
        PID:6748
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7768,i,16296377347248698001,10229567522309859907,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:1
        5⤵
        
        PID:6496
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7620,i,18365321635164718463,2126359031844358732,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:1
        5⤵
        
        PID:7692
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8028,i,5353401663466653992,7280529545515509789,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:14
        5⤵
        
        PID:4548
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8032,i,18079771816718678991,14883614414510263921,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:14
        5⤵
        
        PID:7800
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8036,i,16748212702470267030,15297569300006788532,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:14
        5⤵
        
        PID:7816
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7740,i,8514787335458002420,13700488379683845336,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:1
        5⤵
        
        PID:3032
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7780,i,11111255572302573531,15010347663498190083,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
        5⤵
        
        PID:7668
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7848,i,17042540473803981160,17271174603112481550,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:14
        5⤵
        
        PID:7464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7896,i,1360131704739574813,15734437677892889641,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:1
        5⤵
        
        PID:7484
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8360,i,10870728465390710067,4737542369025009772,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8336 /prefetch:1
        5⤵
        
        PID:6616
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=6388,i,10625233525936252225,1183127912514995149,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8480 /prefetch:1
        5⤵
        
        PID:7148
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8500,i,7244414392701960465,277401324522678015,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
        5⤵
        
        PID:2444
    - - C:\Program Files\Retrac\retrac.exe
        
        "C:\Program Files\Retrac\retrac.exe" "retrac://callback/?code=01M1ZCNJ6BR4XFYTZTHN4DJGJ1"
        5⤵
        
        PID:7172
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8468,i,6612611668213680799,11140149962355849348,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:1
        5⤵
        
        PID:1200
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8032,i,10967436500161413600,16383125200422441444,262144 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:10
        5⤵
        
        PID:7772
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=3748,i,11068719309582020137,11301330920363965793,2097152 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
        5⤵
        
        PID:7704
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,4222231486775006838,1741074952284475805,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
        5⤵
        
        PID:6580
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,759675330267410464,5286535447677904768,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:14
        5⤵
        
        PID:1792
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,10964617545370505856,3141923668744808564,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
        5⤵
        
        PID:4668
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,15120250795650110968,16947697670966493321,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
        5⤵
        
        PID:7800
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,12612136187834054922,1161852894086933867,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=7600 /prefetch:14
        5⤵
        
        PID:1084
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,2967215771438042387,9421111013746971106,524288 --field-trial-handle=2124,i,16039220822153070380,13556685849820436970,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
        5⤵
        
        PID:7880
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://oauth-service-prod.retr.ac/oauth/authorise?client_id=01K5FQWCFHYHK3PNW357RE9YRZ&response_type=code&redirect_uri=retrac%3A%2F%2Fcallback
      4⤵
      PID:7220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6808,i,9428653233969607784,3523444084897085043,262144 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1064,i,12805108652208971139,7784227707863167063,524288 --field-trial-handle=2028,i,13024518439898012729,10805690081476454499,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:4020

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3312

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2884

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding C5787954E9AF45061C9CF88FE6D3287A C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2120
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:4104

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:4828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:784

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc WATCHDOG WATCHDOG-20260908-0314.dmp
1⤵
PID:6888

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1424

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:3684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e59da5a.rbs

Path C:\Config.Msi\e59da5a.rbs
Size 10KB
SHA256 c2365b624203009bcebcb85c670be6bc12ef3fdf2e57bd808a083fcb39fce775
MD5 c6bf0793124720e86e478e8b21e84c3f
SHA1 f79066dd47e1d4f31111eaf5fa2218e35fd49a91
SHA512 dfd70d95b1ed1141bcc855726f0ad8e2ab3b3265bc3c7e615913eb615693e08d3ab8320885bbaf98cc06039c4fb25b427c52329f2685d33aa85f4d48e8174e59
SSDEEP 96:ymTTxf79CR9R9hxm9N9A7px4BhCPHqQUc4r4COTl2TUc4r4CgjjW7vhjTl2sjn5W:zhZ47DMHZCCv7PG77PuuzoX3WOiigpBq
TLSH
T19A22FD42F70085D2E8931B38C7072B213FA7D684C358624B46CDEC34EE57BD66B6999A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

retrac.exe

Path C:\Program Files\Retrac\retrac.exe
Size 26.0MB
SHA256 8e659b326afa58276d95ae143af18786f3c47f9e45fa9f4bc9afdfcd10f99aef
MD5 274a0ba53a9c1bf4af8843978c680dd5
SHA1 b3006ef8c220ffa04308b4d58a8415c2b41e2d08
SHA512 3fccdcc36f31e161e19dcec092d2a8b9962e0cdbc94131d72548f396e4256043739574434ac0a4eb81743a926562d1e068e755d164c8bf0b905b197fdf9d31bf
SSDEEP 393216:+9hw3R8Vay7mii8lYMXKOsPAdaB+ld9qOwcB2U5:+9hr8y7NlIpPetxrp
TLSH
T17C575A207B9AA96CD19AC474834B4A725A7130DB1F35B9FF448492393F6DBF42F38258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Retrac.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Retrac\Retrac.lnk
Size 1KB
SHA256 eae6122928d8e3bdeb28877425936c026ba59121e14d40a2de9386967e9a688d
MD5 ac11c460742e81fd0f84fdd827cc5b70
SHA1 caa9c925a6ae639dac2628ea681088910cabbce0
SHA512 9cd6905387d4a5281334632b33ef467e9d5b7c73d0c6c4c8dd89d98b6b98786b8b079f65c4f8f7369e7e77e8d44219716deabd7b7962679c2dce47903eebb867
TLSH
T18941A00497D6071AF273867A19FA5A219A32BC02D9358F2F42D9058A0974911A95CF77
MD5 SHA1 SHA512 TLSH

Submit Download

Retrac.lnk~RFe59dd47.TMP

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Retrac\Retrac.lnk~RFe59dd47.TMP
Size 1KB
SHA256 fb30f80fabd9bec74346558f4b7017de59f9223d6eecafa26dfa2eae3e380665
MD5 1c906e201eb179bca319d1bc55e28623
SHA1 7cf99d330a6b4f98766f3739c3d38a80351afb39
SHA512 1a7d7c853dba3ffa1ec500bf044c07f12fc1f384b43dd94849facd64889e34f537b836cccc6f0f94dea54641d69265764f3603711ab2c66ae12e84421d8308a0
TLSH
T12E41AF1497D6071BF363827A19FA5A219B32FC02D6358F2F42E5058A0534911E55CF77
MD5 SHA1 SHA512 TLSH

Submit Download

616AD1AB067CFD351D6C0EF6F3E12F40

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\616AD1AB067CFD351D6C0EF6F3E12F40
Size 1KB
SHA256 87651ff247f3aa5be64d8470aeba7d6c2208e7a710f638868ab13166bc1d5469
MD5 ad65ed072f3e6c68ee0bed2e7f0034aa
SHA1 7f1ae6aeaeadca99b66def439d0300be02c9efa0
SHA512 6e1d69339b2dfbf8727905ccedac1ae7ab27b38d47f05a178307c676f2b7b79ae0732da8a994100c46d6fe137a7cc71776597660a8de0e0995e54aeb16df0818
TLSH
T190112007051477639A496E31ED8ADC279EF2A38681D1E817C30089822962EC82FC80FA
MD5 SHA1 SHA512 TLSH

Submit Download

8EC9B1D0ABBD7F98B401D425828828CE_B989BB1CBF9ED0A18C88CA75EE4B928E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_B989BB1CBF9ED0A18C88CA75EE4B928E
Size 727B
SHA256 ad83504daf268ff8bda8671a2a652827155b01fbbde35ade370bc503ad1f1a97
MD5 75850a480d8475d7b4a0f6046fd0cf60
SHA1 2092f286f45a5bb94a817301c72b1e1289e7191b
SHA512 7d3fc0c4c87d1f89c86cb996cef4d94726c70a81bb2113b0248a4402bad0b4881fcc6171f37d12299ecaf8556bf5f08c0afd04cdec04de07a1a2cf35489b16e6
TLSH
T1EE0199D9902C418A2B094E43DE49EB5D73A0C0F16ECE039DF65B518CC68F74C139A6A4
MD5 SHA1 SHA512 TLSH

Submit Download

C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
Size 727B
SHA256 80c8166ad38504c5c70b3bab46928f25cd49bcab8f30b9ce4dd52d414c8e174d
MD5 4c9638aa37e435c2070111049a16c89e
SHA1 e4cb3448aeb17dde3789162218244c8695b2afad
SHA512 1a29539a655294b0caf756ceb2ecf9406c5616d71efc3627ccbcbb9db66456e0f4a68d197d70b2fe532aa6380194749ed22c884efcab87c655461d4fd8b93c9b
TLSH
T1ED01600394C88F5038311C67E74EC2763237A80E2A85837BBCB4D6CE13823D41A03D40
MD5 SHA1 SHA512 TLSH

Submit Download

616AD1AB067CFD351D6C0EF6F3E12F40

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\616AD1AB067CFD351D6C0EF6F3E12F40
Size 252B
SHA256 20632687baa049a93262f12e6d5852932be10a3e9ecdd737239c1e6f7032fcc7
MD5 ad93974f635ea622995b9cf23c5d9cef
SHA1 39c40487b4e697bcf93dbca41c6009020da9b6e5
SHA512 7ae49d95a92b5a88fc8ecc1ada70b252e438395447f5b0e196a03957500266954249e4dba4f0c6ea79613ae82ddaf414c5e97a2fc89313667ee6ce2357e30c2b
TLSH
T1E8D0C92067E90211F176597B9FA08542EB28B52AD8468B194B724D0E183EF514C31B4A
MD5 SHA1 SHA512 TLSH

Submit Download

8EC9B1D0ABBD7F98B401D425828828CE_B989BB1CBF9ED0A18C88CA75EE4B928E

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_B989BB1CBF9ED0A18C88CA75EE4B928E
Size 408B
SHA256 194db5d4bb204c132ef99b057d111e754da8997459987f0c2a6a1a8d08b66101
MD5 784877facaf43063b251e80c5385eb61
SHA1 b27c1eb9529c6ab3708ace64259d77d0a53bff92
SHA512 b8ef2c15008077ade08ee579dc5edb9c75cc226a7cd9d91fac88f96bdb401c346bf90ab73611497786e773c6ec9bfee3ac0bbb9e278cf7e6869458242f656c67
TLSH
T10EE0C03032F8161DF0F4D83503F5AE325D9EF20A4611C3751A506706A73EE004CA1628
MD5 SHA1 SHA512 TLSH

Submit Download

C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
Size 412B
SHA256 684e55c6d1b2805c7164a39bff1a874e3d07684ddcb23eac6b6937a3b3db894e
MD5 49126acc65c761c8e9653722fa439448
SHA1 75d0c6c8bbed77efa9c7575c99c6c27b11dfc3cf
SHA512 3f656e0ab73e443e506ae15f2493a98388b81f264f062b6a7d1ce59da3d85ab1b3733942a50a791fe7fde6a29ba937e2bbc72acfbb4869d952b2910424cdf7a3
TLSH
T129E0682C26AB701EF0608D3686F9A1722A48F311140083BD0AE14309B70EE005D519F4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 676f4fa10bf53d87e821e85a2ae79f4bbdf109eb7984d55fe8851f46edacf0a0
MD5 f42bdfaba87e4f0bd80c53bf264c095a
SHA1 f4aae008373158ec7a6acaf5034fc0a176459224
SHA512 6a362d11584da89e12c18f6f00be8886b9c7a6960004829210c7e54121f05b7fa3f5ebdf623c89dae58c3ee676fc7b64aad6d14c456a57039fe5284ba7b4f572
TLSH
T14FE02BE9C812EC3718FD175C20540706F7A413672A818A1F3F3C51198F7173B418686C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 136KB
SHA256 da46d44ef6e8d29c404fbc24bc8cd92f0bb2e779f888ffa69ddb5c071ce30026
MD5 97c27e37676f932ccdd047e537a62cca
SHA1 9ced19e470d784b75ea1a04a8ef678455254a73c
SHA512 50092459185efef84c6d9d4319d8d844bf0cdfdd609525c64fe7a2729951bd106e1d94be2a50b15e27205897a23630c2ee73eb48e3d0e0e0e9125f0ee4722b5c
SSDEEP 3072:2bZT95AhGPEZDLlHs9R/Wsz8PirPAjL76AJ0fpvCbk36rT:kZTHAh/lsxs+Yj6FfpsrT
TLSH
T1EBD3133563E666210606B18C45B81EA941F79DD5B19FEC1B8FC2D24A518C47F3DDF0B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 f8cd60817b8bd307f75aa597f129eb1980484d21d6185bfb7e95d0dfb2a938bf
MD5 8fa72aa6aab164bfaa2eae9322348ad2
SHA1 adb275aab3c53d32172ea566b62175643efefa7c
SHA512 67fa4c478c5db5553770c487186d5e54e66bc550fd81204f72d6ecd01f3e1ba66706ddb9955c98be44b9928b6f3798051285e6a1a4bb92b25b151cb5f013b3b0
TLSH
T160D0129094C450C2D7B557F750A144417630195E2BB2D95641B8D06863D97D9AC03065
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 e73ce9df28f5e2bf0a92f54958e9e982e1f39f6956a48e48f3730bb799155b79
MD5 3644740c58028883759fbd391186e428
SHA1 d77a8314f7e0ba91891a4b0b9947bb89addc5695
SHA512 e9fcffcc8f97359c1427959a244f4ab804343181b0db22039efe6648b38eb12c09b8fb0b343b5ee456ec9e29d1999537b46b4d7ae8f2382790066f4aa2d9a854
SSDEEP 96:Dq4VHFEeeG4aIaEdsJOJVJ8JIJ1JfrWOJ/J3Iu81PJyJeJ/VkEaxL:Dqa6eeG4aIaEdCE/ymffrWEh3IB1Rw0c
TLSH
T12DB1DEF7C3E48A7D890166F1AE256F1BCE5E091913683C5689E8AE0B57F2437D210A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 2b377515ca3ea508ed2963e61bbe9a244fd67f3ba6002ae37c3ed7577b3d26fe
MD5 81d55bc91d6b38441a1114e7f40cf42c
SHA1 2b9ba3d82af1356a1c6b52002a66ad116f8149ac
SHA512 52712b3da21f86ec71cd929798d6d9e2ec237a97e1b417a4579f348b13008752df3a9f2033b71482a3ad60732f33bdf3b1faf786bf3f2a95e816b6ce2fe0c4de
SSDEEP 96:Dq4VHFEeeOaIaEdsJOJVJ8JIJ1JfrWOJ/J3Iu81PJyJeJ/4czkEg:Dqa6eeOaIaEdCE/ymffrWEh3IB1Rw0A9
TLSH
T1DFB1FEF7C3E48A7D890162F5AE146F1BCE5E0919536C3C5689E8AE0F67F2436D210A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6081511162b7930191b1ef7a997d80b5402d87a6998b0b57d0d9416ceff45326
MD5 fa2c075c06807d968f752c34af588340
SHA1 9e65d4e97a435621d63ceaea60751c112f3c9108
SHA512 e26f54a07dd29920fcbbf930c2ed3419c63f497cb77da5cb258d771d23691fbb906176b2aa1b400870b23910d9e3cb914ce402a1281e8b5657b1f43e3f028c00
SSDEEP 96:Dq4VHFEeeOaIaEdsJOJVJ8JIJ1JfrMJkEWOJ/J3Iu81PJyJ1JoJ/p:Dqa6eeOaIaEdCE/ymffriRWEh3IB1Rwa
TLSH
T1B1A1EEF7C3E48A7D890162F5AE156F1BCE5E0919136C3C5689F8AE0B67F2436D210A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6179e0ed7f4f6cda89bea92653cc3e6ec9cf8179fc0612b83145824193b79bf3
MD5 900b9966297a1e81a492cbc67c30029f
SHA1 2f01def02b6f79df020321294a11bae6e896f3fa
SHA512 2b34c756bf7effef1c0532310927df6a208ca0287a8939d939f0d836d4c68c2ce6c499bd5c59f85efdaea3d70ef8df088abbf3547f7a9e4d28901154a910a66f
SSDEEP 384:4RtUidYv2bVF7xy1Cyo3D4Xahrwmy252GaRvU:4UiCv2bVF7xy1CyoTrrwg52JZU
TLSH
T11552D62AA9106D3B5DDAD319FA657763E7F6106125D01E84EBFC8A2C05E7ACC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 45a0bedc32f355844f3944b3cb9d528fd096742b85781cbab35ed45751190ede
MD5 cae27665a15e75d977b3117883cf0bf3
SHA1 ecb9edd2a59fda4075f53917f188b90f651bf114
SHA512 16b3a9246b51e7eb425d00131edcf036b81ec60d918765a85f48a8ffb553e95eba86a993764397d55d445763fbc60152bd47cce90abe942eea34b0994729c37c
SSDEEP 384:4RtUidYv2bVF7xy1CyouDUXphrwmy2G2GatvU:4UiCv2bVF7xy1Cyo4CrwgG2JNU
TLSH
T1DA52D62AA9106D3B5DDAD319FA617763E7F6102125D01E84EBFCCA2C05E79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 45a79cf5ca222b7d53d8efdcec00f60658812a5a502f28100628997b1a9e65f6
MD5 99c7c2c9fc648af381a9aaa48a7a22e4
SHA1 3acef982d8c510ab8bdbbbfa2c5df63c032c3a6c
SHA512 0cfb863dd6e9e28143e86b05d7bffe3a0677caf63212a42afbaec2407c4cf5facb6d30fcc6d0fb69c0db07d9722b1d777a567a8789a7be727ae58f4706ce54d6
SSDEEP 384:4RtUidYv2bVF7xy1Cyo/DUXphrwmy2xb2GaO5U:4UiCv2bVF7xy1CyobCrwgxb2J6U
TLSH
T12252C52AAA106D3B5DDBD329FA617763D7F6106225D01E84EBFC892C05E79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 f01b2ce782f75620a9b68c26ea48c15bdfe2071cfbb4abdad3b2fc0aeb37f473
MD5 e9df109d7622fe0226f061fc7515ade5
SHA1 9c4f2653cbef1d3fab991c99f27282cac6763347
SHA512 dbb2aaa2e540699ab3361601f7cd294a07a5289b529fcb42c56bbe9bd18ce5d45f85a364d5f8138354fb0864b1be752cd3bfdd5ed7de66c36b9758d786b52e03
SSDEEP 384:8mjoj7KxkXqKf/pUZNCgVLH2HfgslTg97pLILc2juvXODof+ErU3i4SH1twv2lPY:8Goj7KxkXqKf/pUZNCgVLH2HfgsZg972
TLSH
T1797208676C4C9E770F94CACCD8277B4F9DB5014B65EAC46483FA982503D5ACF210A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 eced384189f61ee8b79ba2356c8f8ffde302168f4f879449498f281f37ac8fab
MD5 19fa50a1fc8507f5f7d179a037bd7cab
SHA1 c5686eb1be68f04157b6e21fd0c5daf72b8a3217
SHA512 2e346d4f8be217f7f20a18ee3f57618480b8b31ae655d74eb582dfb978236b1e75f4b3f7f854459140800ad6c7346a36d17de1389874ce9a14650f6f34d1ca9c
TLSH
T196B0121080025101C05742B0214324DC72257F14DA0B170143F8B973C8391628034051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5915b1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5915b1.TMP
Size 96B
SHA256 d72c37fa783dffdd8deb2197aa0cfa6e52a820f19178f0e6721242dd7bb64713
MD5 2da89147ad0adcfc24bf4a251b7c9306
SHA1 efca9ad7f79ffdf12487a7bf5b6f974295ff6588
SHA512 f5ca38c5329f2866169587ae03c360055876816d4593bf976511a868e139f274d20934dfe667371989cf05b5d807715e5940e96e5cd5035f5039f7a7922c2d77
TLSH
T184B02200C0822203C00203B0208A80C8B220CF28CB238B0382F08AA3EC3C2F2002A020
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 147B
SHA256 ec9f5a03f066126684a41b71693f882be992a149a05fae64bf8db67b0af4afe0
MD5 6222f279a0263cea445486c4e1ff18ee
SHA1 3c52835f40f49a053a51aba16ba0d1d4f6d47c6c
SHA512 392fbcad3c9308176ce64309314e3fe7d2aca4d9f462bdea77f874412e2f3a814a607e329152055d1068f6c76be67fb100ff1dc9e884a6daf6358c71a9148846
TLSH
T191C09BE31811B68F4B34F9E4341DB71FD60BD6CC8CD4DDE4D4485146743C5539545575
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 231B
SHA256 e3b9e97002e61c8773ac36b37fa09c56180c1e0582755fef4a4a6e033d373706
MD5 6f7c84fdb1bd26d98892433a2b42e57c
SHA1 f7a6b971283a06147b7a32975b471ee07edf5604
SHA512 426f6410b5dd1e03bf5f8689b952d54730133f01ef1c71fe620d317f5d2d4aa506b5d54b54e83907083c0ce29ac771aab003ab095de6c32d19abd515b6506c80
TLSH
T1D0D0A7D24532A5471630A9942458714FC217AD888CE0C9D488457352B87C323D0015B4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe591042.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe591042.TMP
Size 154B
SHA256 a1675e87b837ad49511b7956c024220c654b2d34d5d18c8ff89a8180ed70a5b5
MD5 4413b43be6e9785c5e2036aabb0bd8a4
SHA1 49f3c23612def3aabf53da23ee81c74da63c77c8
SHA512 082a292557f16fba39772bc3d9f8a4728e0a01bcb6d71258336dd939f6b75101211c8e13348207e06ece603433257461368e7ac8fa90003d730a1f743a44d7d1
TLSH
T143C02BE30820528B0B30B4E0302CB30FC20BCDCC8CC0CDE4D4097102303C513D148534
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8be986f2e3e82030924e6ea62727cea34602f2202ff0373b8e95fd6063f92068
MD5 3868d555b045e96809276257990dc26e
SHA1 1e3aaa6618a0c8cb5b267135469c4037eaf50eff
SHA512 64a4dc037ec227454afcf1c242672f14a459d49ecfb2f41b77c480981295dd84bdd0c7a0a3e571f25457e3bacc83a320fbca9d88c4fa32abdfe6dd7d5c00c08e
SSDEEP 3072:XGGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:Xxm7Rkm1tYpBeh2BAoi
TLSH
T1A5C312379E75E83659B9BB1EB44E0A1F1EF14DA3C920DE52C8D45B0423EA7CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8530a1b330437b5786f6538c4954d2d70bdf077dfa5941a54ad438f5a78446e9
MD5 71a0d9e3f3cc27d396fa0078ecc26d7e
SHA1 fe0b1802bda829243bd98dbad883e6508a450faa
SHA512 87440ce0cf49f6d0b152dccbd4b9370676564be078535870890e40907c4a11d11f7228f089cf4d96dd4d7e8f9747094eecb2d0bee3942100e32dce8c4209cf3c
SSDEEP 3072:z9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:zUm7Rkm1tYpBeh2BAoi
TLSH
T146C312379D74AC375DB9BB1EB04E0E1F1EF149A7D824EE52C8D85A0423E9BCC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 52961041101106c5ac6f90ef6d0261924d728c1649aab4ba99c4d1bd7cbd4445
MD5 aa43cde2067beb5f4018bc72851ac52a
SHA1 b2c0dfca28bf73f6c51901e2c8263a85fcb08956
SHA512 0fe2a56d05f7ca3acb7afd947290189c7405a45c997d67bc92f825e59ded58c844b926c93ddba28e16604d10d042f684872bbed9b8ced29fcb201102cb92990d
SSDEEP 3072:f9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:fUm7Rkm1tYpBeh2BAoi
TLSH
T16BC312379D74AC375DB9BB1E708E0E1F1EF149A6C824EE52C8D85A0823E97CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 c6dd664fc1474e7a1ec93307b42f297011a373b5ba5360eaf7129f0d376bb228
MD5 8b30c577600042de2727d0267bb0e462
SHA1 98ade9ff212d76c6a0f38df9a7d613a5e8f12b3c
SHA512 cce53b5e9780da1aac551d8546ca248fbf3146fe114b88969bbe85f2ce11f11c5496664d2a9343ced8f212937415db1663743bf08faa19bd6d606a592ce6409e
SSDEEP 3072:jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:am7Rkm1tYpBeh2BAoi
TLSH
T170C312375E71E9365979AB0EB48E0B1F2EF149A6C830DE92C8D85A0437E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 20e4888241bffbf4ff7f525cb71c7b7d7f4060643a134b595e6fac243921dbe7
MD5 ad93677698e01014b517ff543770aec0
SHA1 055f61a067466517f2495f892db56e67b53e7fad
SHA512 307f604d853522018c6cc7e127ee0c6a83ec4f00f858589e02b77b125d913aa9b51fac6b22c7484f0710784f47159ca999f23e2da2ecdce835d7353d702a6ea8
SSDEEP 3072:4GGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:4xm7Rkm1tYpBeh2BAoi
TLSH
T177C312379E75E83659B9BB1EB44E0A1F1EF14DA3C920DE52C8D45B0823EA7CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 940cbc9ecbe8080b4f78231e8ea559e5f25ba4586d9b9c7484580010ea141f8b
MD5 7b136c46d44a9c4f8f42a3893196bfa2
SHA1 65e92a8f631d018328a7c2cd1ea9b52d24fb05ed
SHA512 06b71e8d2ad9deb7c9ad47e7b7fc808b8513e4cd6ba4c5e561fab3aec9e937d3990c50625c22f7f7a281e06579a42d4a615f255576af4efa3a9daab503cc1a59
TLSH
T1E7D022233A8CA800D2A78130C016C30002A900E068178A01F2A4C82C442B0E063CD183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3d6022b8b09d410224e6f49ce6c5693abe531fcaf66bb13ef03126afd2691fe0
MD5 57d5bda89a3ce0cec5e5ba7de9f0b14b
SHA1 f3acef3d86afcfd0b7d491c8c55dd0679342b314
SHA512 b3100104fdba74d8ec0cde3847c8629b3f4d7d2f4eb07a7e44b61ece266b201daf1b4c4f2922da6731aa7e1518a90a163383bcb9d2738a6f78d052f8141237c8
TLSH
T1D4D012237A9CA410D2A78131D017D71556A910E468575A45F2A4C86D556B0A467CD187
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 563B
SHA256 0833b92fea6d030f13e84eacd7d1f9951871fe06d43522079521325eb6fc059c
MD5 5bccfa32640452925ec4072db0c6f7b6
SHA1 2296fd71b96676bacb9c7c44ff9f0d351f01c308
SHA512 17c59749a7a7ad83d00731337b40d735a546e56c02fdaded773ca07be4395799fd9f7d959103d738f20da93c698ef613c7cfddbc6d65a70ab45dce148a823f90
TLSH
T1EFF08195B6D4C3D98207604FA7656708D0F0FF05DEFDCE9A2309748D74114109B55BEA
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 29KB
SHA256 fb87ecedecd618ae0c850bc24ea1c2e2a80d7afa13e11ba8a9cf2c70f4c83174
MD5 c949372827410f46fe209b5559eda118
SHA1 9393983dc16872729b5584f09bf30d7cbfd11d62
SHA512 b9eab096b72c9d3dea6f6d5233e2ab4452c24a6a3dd37d3015d6b55a7b9d7b27a610c05677baf036e4260dd2d954bf653aef89546a8e402f3d4350b8b4b8e898
SSDEEP 768:DbycXVvVKCMPYcRyCNHSbzyNnbRNgZbX8Txzf/:Xz9KL7yaySNnbRqZYX
TLSH
T119D2F1E23D91B0AD88B5D7EDFF108B06932476CC1D8DE261CE292AF1BA740D9B9110B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 32KB
SHA256 88f48a9fc58f3115832ac36c50913a39ca0426f401e309d7330e2579f6e3ef94
MD5 0fe4df9533cf3c5946276a5acbf7600c
SHA1 f963e2089e6fa08f07ccc7a5812bb385fd8d5a12
SHA512 f61703037e1dc134445b0346570c83bb9081b352ebdb6b248585a2f51b2c8f765e7e5afc74e8fd9953764db36f74b7d9e5297818f9b0a4a3ef25e43feb10a3a2
SSDEEP 768:QhPzj0K7BfegprLAY7Vo3f4qOTUTGIHAcQAL9PW:Q5j06fHj7VgQzIHAcDPW
TLSH
T1DCE2F1DD62464550F2A2D2C16A6C3669838E05B04F7F24E68624FECEA362CF1DFE1806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 68KB
SHA256 7ba1a577f1cf3f61e00a07be4ed2c3f31279564602de7ce7ec04300457b4103d
MD5 7cf68818675236bc469b6f2ab666303c
SHA1 69e7edea8d9c00b656e756607937a95ef3b52fc3
SHA512 bc1d24e347e1fae6c230f81284b9bac80529b56e7fe7bb3f872003aa4ef88e11a7dcd6f00f174c7dbfdb7854b96a278e37f761b91ba2008823088da7d02eea7d
SSDEEP 1536:/I0x7AIm/p0MGtDtiP/aJ4PsOSjQ58y5lm:/IkHEstiPfP/l58ym
TLSH
T18863023B82D03D032DAC60B67ED7AA99B54C66F21D5A7324009C182D733ED462DD63BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 73KB
SHA256 f1341224f3167985262e5b89a2091ba11a46a7d114ff941f986b74401ba3b97b
MD5 007d8192fdeef67a8189496307c3ce26
SHA1 6c467972d3f28ab9d21314e7b79179f4f4a07ad0
SHA512 08a4ff63e41ec0993cd478122524937c6a7d0de1372073f7cb51f820a27ee98f01f35eca460c1195e1423502615606c329a237e59e649e1bab8d4ad6d72cbc89
SSDEEP 1536:T+5B1ReEFNEjfyi4e9HFlO7IXJNoeyPJMF2+OCMoVdDrfdw0Ax:u1ReEFGjfyKllO7IXJNoZPJMQp0f3G
TLSH
T1237312A8BEBD408241B71C70BE7DF691E06C5D11421D650833E37298B6BA1B6BF81C5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 163KB
SHA256 c77c21b99f39658fbd8ac2acc4a4287973f03c7f36bc19f27d6738a4961de3e8
MD5 120fe2927bf535d1ee7b8528059c08ed
SHA1 3398914e565124e8ba747dbb35ca1e72da515800
SHA512 62e50b7b6820b809d5b9889f0b91dc750ca6110abad8447de4d4f604076385c708e364c949eec8141733ff16df02f85323fae01731d6ea4fe0b02d946af12803
SSDEEP 3072:K7c3ngXhwvLmKHnyi68pAFEX29eBusAyuizY+yIUJBqGA8FCzKj4wqPelbJ:X3ahwvLmKHn2yAFEXA41JGYzGqWld
TLSH
T11DF312612F8CD40837CFF071D7E674E2DAC552BCA87741BAAA22476143ECF6A85D41B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 198KB
SHA256 a1acf0cc20d83803a2ba7a4deedfc9cba1af7a949ecc8423db8fc10a603758f4
MD5 6c3c31b9216715cb068da0310f4ce378
SHA1 5ce1d8369332fc38b8be045eec7bb8d47c84ab65
SHA512 83c4c467ffc022308dfaede9ee798f37e20f132a87f5682b473c95a5b513b42bc2dd90355c691ef817dbfb239b98be901ee41f61fac7ca236e8f4ed4ca56aa06
SSDEEP 3072:29P3DwlbAw6804qIf84Folsi6CpsSlmShclRozI6+boHEzFWLjKV5:294AwxqOWlsi6Klmbox2JMA5
TLSH
T15B1423B39E7163C00872A310D9F58F02CCE7D079F58A69369A52B4EDF3E3625189B15B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 16KB
SHA256 1ab1f7d8d46cd53c210a74463956d61721efe1982353b36bbdb24cf7e5577b71
MD5 6afda3f6de919bff1d05c738bc18319f
SHA1 fe25caf0c57da9bb223993aa3b3a9b1a50eb8b5c
SHA512 9f66b58f10e4efeb755bdd590f4b97ef27972882faa8a0024afb9ed85a4787008bf7090efae2049ce32856cf112e74c8ba146d685d9a9f6ecbee2dfdaf3d5f61
SSDEEP 384:m1L/7rBqjRskI+n8d9vv43CtA0nTiMfj4a:4qak8ddvRG0nxfD
TLSH
T11A72D0BBE0C4DD53810958335A71E6B16116BAA4E2D5D5E133F4014D2F12F139BCAB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 109KB
SHA256 39d361751bdd0f3c0f3a14481d11d2d7b1fea6a52130f52af6e38304a207ecd0
MD5 033045a6e5bd4fcf427b105d8f0d1cc7
SHA1 0c1a22228c747891f611ea9739c0d7cb7a1b9dc4
SHA512 db0ab3fe557743a141e557e6f1a3af631e1095bef0744bee255356a6c1e738ef0cc0def1eafeec2db323d962866f23c1a174d55a0835a1cb23f850eceef0ab24
SSDEEP 3072:Uso8MHLiZYWBN/V50t3U9oURxznY2kELyIhmsmMVe:cfr2YWBN/T0tOrKCWMA
TLSH
T1FDB31277BF801837541499F0A8DFA718E2D8AA52FEC4DF1992C6CB1A63F801923C557E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 335KB
SHA256 a4a94cac93b1079c28ef2bca7d8ca68c14e29f2646af2fa3d6a277bd1c4c6aa9
MD5 cd3ed79c9253f6ff23c42d5175b27457
SHA1 3adeaa424102fd63a9e4d52b7382d3b46fcbf5ff
SHA512 3e30609e0dc21cdc6463fe205ea244c5d4c31b244e86cb5e8a6965554ef4e6e05f48b4eed9a202bc721a4e9f5c7a0068c1ba75d29ead984b1558b95de8e68904
SSDEEP 6144:jhwbtk1CkV747Lgao0rCHBlqnN84F7KKhCnDGJB2GNMfoXq3MXFIYMMbUZ:jKbt8FV743gao0aBS+gKdCJDefoac1Dw
TLSH
T179742302C830E5A6837FC675701011FF67049A33E56F056EAF51AFA967D7AD20ABBC24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 62KB
SHA256 2aeb4d1239aafb0ea3a79ba588130bade41a14854ff3398156b2aeaded179406
MD5 d6b0efba33d5225a7d12b4c3586009cd
SHA1 c7bb51093a3d54aea8cf09ffca0d117f55e83cee
SHA512 b7adc8a73ca3f156557ec49b1966ace8b40be1c21a892e4926a0b4c53b1b58823142139b12f8b83dc669700387b9a2b5631c0bb152c5383dff7555ca35b5ac61
SSDEEP 1536:Ylv3Q9uYzZPWKWzEMHOYUZQCnz5RnN9z3cy:YlxENRWHhA5RN9zL
TLSH
T12753026D26402EE93DF90881749FDFCFCD75E99922742D03C1144A7B20126B7EEBAB16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 3.0MB
SHA256 73ab9d13d497577da8e0fb811e89c5789da1ce6b3c4a18c16e16154c2a1c7361
MD5 b090f80113a52cbeb49eb9bd714b9e79
SHA1 425cd91bd3b19673136e1b349664e16a2aaec8b2
SHA512 b5079da69f1b5191185a1388d67bd659ab18450376181efe97129059b30be9d6f46e8cf16b6d4f127b38963477ca1bdcf8a800a17c2cc1e4fe7c86907caa6bc6
SSDEEP 98304:DwTbNe5P063eEGYO4ZwmMSev4NkgW9A06YZc7QGrC4:qcP0mLb5wmxeLgwTZ2Trv
TLSH
T107E533E2F97FE72670A1D1B86E0C498222F71E0083995179AD244E9D5CB72CA37FF245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 405KB
SHA256 107a2297e0d085021960c1190a9439d2f39818729f9ae7218a745f736a09afd1
MD5 77c88327e463f929dc85219353c4ab95
SHA1 6dd3dc9ebb9347953fde8d945842f4d99eb2dd15
SHA512 8d5845c58457b1a3899768623e7f048e5dd944834cc91ee054e35dce7d6cfaf91328e36e888c54f487bfb869b13079b450f584f430f22b36acc2497c1764bd2f
SSDEEP 12288:axUZGCH34QUKXwE9+bxhqKQZbkAqit2ef0/:W6/P3p94XHQZbkA/2sw
TLSH
T15F942309F470AA6BFCE43B59504DECA1EDA31B0495049ED3AC8AFB7912DD147311BAE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 37KB
SHA256 8e401b056dc1eb48d44a01407ceb54372bbc44797d3259069ce96a96dfd8c104
MD5 3d6549bf2f38372c054eafb93fa358a9
SHA1 e7a50f91c7ec5d5d896b55fa964f57ee47e11a1b
SHA512 4bde638a4111b0d056464ce4fd45861208d1669c117e2632768acd620fcd924ab6384b3133e4baf7d537872166eb50ca48899b3909d9dbf2a111a7713322fad4
SSDEEP 768:YLYEgWfC/zlP948Q4NxhBiMwYatzdYZyXSihSZ9ia6UBJlly12m9U:YLYEszTFQyxfiMwYmxYZ1p9ia6U7r4U
TLSH
T17C03F2A4977838297C5335AC14A12A4FF94104FE67EDF4FDF206251418C36269857FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 442KB
SHA256 692a246a01e3697d1d11772270b9cc859fa9fca9a698a3a10887ffe20b4bd753
MD5 66f1c4c0c7fb362314f828e9a07bc167
SHA1 eb39f80da92fab105036f8bbd70db1ac4da85ce2
SHA512 0174dd2669dbbe7274238966133a08457ce80911e367def61f77e6eac77b1610124d918ab708e7bd3fdefa053524bba951fd473d8285740bbe8d12f9da0b06a1
SSDEEP 12288:LMiGc3vXNY/Z5ymGuSg3FqaO7pMjdmShDccfTIXY5BJYmVF:LMiyAlg3FlO7C33fUI5cE
TLSH
T19BA423CAF93B900580BA08B472DCCA16C908F505FD954FA85B46B77B4ABC39E7236357
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 20KB
SHA256 043893eb762761f28ca6b64ab44db175977312e209c79b9b3c99ce57b9366c20
MD5 506db04b3ac4da3d90354f3e8562e351
SHA1 abc7f76876317bfd81d7b9d56d4a159d4e6e69eb
SHA512 906b1cdaa69afce02b688d462dd4e4c507d75a835e0104e3b379efd8feb1247512b532ee695fcfc37d821801e17c0e505afcdff3a4dec78f6227c4345e747f24
SSDEEP 384:Gz7/guCcuHhR0PJJE7sa6B1+/hAltDpMyCbBImXOTRLNVDtFoI3llgkRNymzN6pO:+YuCcEhRqoK+5ennCb0ThfgWbf
TLSH
T11F92E227CCDC02E6769C277790FBE9719325D266DE5132636AA408F12B213E8E661D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 38KB
SHA256 440ad8b1449985479bc37265e9912bbf2bf56fe9ffd14709358a8e9c2d5f8e5b
MD5 7f63813838e283aea62f1a68ef1732c2
SHA1 c855806cb7c3cc1d29546e3e6446732197e25e93
SHA512 aaea9683eb6c4a24107fc0576eb68e9002adb0c58d3b2c88b3f78d833eb24cecdd9ff5c20dabe7438506a44913870a1254416e2c86ec9acbbcc545bf40ea6d48
SSDEEP 768:RtWd6RsrMjeX+oUMPzo4niAVyynUFTyEatQHzV2h2TzpLJD5JoswdZB:/y6RsbDRzookyncNMQHzAALRovL
TLSH
T1FB03028CF413FEE931468F269BB700857442C457F997A72A30F5BD02D98B6286214FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 38KB
SHA256 ae99aaede2f373187a4fe442a2cb0ab9c2945efbab01cf33e01be517c0c4f813
MD5 71d3e9dc2bcb8e91225ba9fab588c8f2
SHA1 d7e38ee4c245f64b78eb18e6ecd7b9f53b3254a8
SHA512 deda05ebd575d413aa2277876991ecc2ea238907390753485ba1b487ede2f432363c46daad5f3f240eaaf8d3258150829a3ae3d2d9c420ea59567cfd440361a6
SSDEEP 768:90TMDBOLlFMKbQDweRs+mkq4oY+VT6p+0t5LMXTkfm7s/U2Uq:6TppGKMDwtN4orTAHjMDja
TLSH
T17103023ECBD95DEDE717731B5C822B05683C2B18D0BD9C498995A2D04ADBD01F8CB2CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 72KB
SHA256 d7badf0bdda03df48eaaa50db3618e4e5b9acb6dcafaadef31eddcaa200fcf69
MD5 0407dea5217f688b95f298d73e75e6d8
SHA1 d11e6d4015965f7fa3a81da9df4d9db41f80dd26
SHA512 d5de8d6e6e9ab4a7a4b0b63f2394822781f9143fabb2f0e4df5764fc0b0eaa89d5f57762854f710335078a9af817b9748bcd19259291aa304df5345e79037832
SSDEEP 1536:5hV2BMScgqnf7CB4xit8dCsCEfVDf4JNwZbIhULqQWABPJXviXzIIk9+22me:5+3fqnqaWYN/VJbRq2BPJXviXz7k8p
TLSH
T14E73123981659A058F0BCD1803DC3C91A0FF636A6D5ADA78EECF467DF7893A1011E41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 40KB
SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
MD5 63f4bf4c9e4b2f5ac4b1c8a9f4a6d20a
SHA1 40d033d0f716458228ff5ae4c623b3eebd7e8f1f
SHA512 ca748a2e7f54c22bea5b6b586082ca9be3eaf1ee199fe56c7245229ee4f73d99778beb019d8eb33f2aff1800a3233a31d506274259cd791dcf82a994120143a2
SSDEEP 768:rQ0uU6UEmqopa8oTvB6vf26ER+musSjAPWL9f3+dvZDNiS+Hfkae76gpGnueZG:rQ0mUha8Hvf/mutjsU/Ux8S+/5e7FGI
TLSH
T18513F292D7F44C509F5DF2D163086CA1A77A2CF5A388529CB5E08F22A49457D018EFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 409KB
SHA256 7481b444adbaae4f7a79174b175946fa4336f6baf026ccd4df590112712f6b60
MD5 66037a123614fcddbadbff1c63f466b8
SHA1 3566e363b0cd701ae364e4a6727ba57d619ad4db
SHA512 f9906e983519b12ef3da4d544c3ceab9695215cb7ea0a1c7486cc16c9e075526bf63558a31ffaf1d8e5176cee9902535975ea8f1ac897b56e19abdb847b228ff
SSDEEP 6144:G2T5/P8VpjUC5Hor5v1Y6jxnMcYdVCUUBWOLDIE2anufvM+txgpf3ra7fpoEhO7s:G2T5Mm1Y6GwdBWi25fvM+7wf3rGfWKs+
TLSH
T1D394233DBB1A3C5430523C72A9816A9F483563B3579D3E66A918CCE428F5F37582533E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 205KB
SHA256 09a4e73ed06f96f8ef04d57d1d44eaf57f4de4c778d14872750ba852762d9d77
MD5 b6ade5fa37ecd492073be0cb4cf8a314
SHA1 5641e733e4792db4197bd53a8358e255f0fe0855
SHA512 e4a3956b96b154507b47c6ec63cbdde9f0cf1419a7d669dd00abd60f6ae6ff7e42c9a6247297fdd4c0df49fab1e0218938836827c7aa34e6d55a080359052246
SSDEEP 6144:2+nw3O9aN9v14ryaW8RHZcDbsXRurDr7r37xl:2+rIbN4rhKDbss3nX
TLSH
T1C424233E21668FFA9B5B5F4D24447D26D2EC7A7E898804716B9C4783BB57E2301C03B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 59KB
SHA256 75839f394be15448c134eee83b5119036e8e920087d917fb41894f27a3616fc3
MD5 d394bbcf25ca8b1735bd56827c06daea
SHA1 98daaca64529fc837f3ae52007d626026fbe6dc3
SHA512 65e0c71b5860e54a5fe547e655e5c2baeb379bfc7815dcbd5715ac257eb9cbfd7fc4193ed5ac7b28c4ec739b83706fd144807109522d5505b9a2a398703bc8b9
SSDEEP 1536:98b0TtO4Y83CT/AAxdrtS35KRiTja61/Nt:98b0RY83BAxdA5eYd
TLSH
T15343021A5F325A8AB5F9176CEEC3CFA202CCD590CF69418D72D8595422177DB5B231C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
Size 53KB
SHA256 351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a
MD5 1e2d4737305eea41ee9198e3fd3f59c2
SHA1 abff05d701173ab7eae355be60ad30cf7f63536b
SHA512 469723131222dec7ea745b528fe62586da62d02505b6904a4b97157259dd37c26bf0d7012538ec6ab999c4a82d44f97ad7a1bc526cea9e8ee1cd30ff218fbce8
SSDEEP 768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad
TLSH
T1354302A0446EF3CA3E6FFD7D9F225D5124E22A354838CAF6103721793F58B959CC1A88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fc
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 24KB
SHA256 c37cfe7f49f192cebf92125cd07217f24271c29ad7f4e6431f4521fc197476ed
MD5 7aa3dfe02fa3e45c31c732bbd0d42517
SHA1 b330559c9e38e1b063afb2a881a6a619aa364c69
SHA512 02ead3865567af89fda059864b80f541cc95dfdfec75d62b1f16bd91a21eb04cfa630839bc3be18a479f441cd6146972e5a282af0613d31891e8048a5b8cd13a
SSDEEP 384:NvU42SyEwODyyxlG616A789DhqEVVuOaJZwGkkQlXF6BxcLC:FU49ykpx77Ch1jZWZY14P
TLSH
T115B2B7515E5747C1FFB482B39AD1744B30B5628D1D3F8E12A5BBEA3AAA353701C224EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5d57a8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5d57a8.TMP
Size 3KB
SHA256 6b3d5515a36bf18107388897f8ad709a344a7f1267a6dd58f16d5f7553db92fa
MD5 449cd97f04bda758975877ce98cbac72
SHA1 5760784f0ec49132cb09eeff80840ccfb246ac5a
SHA512 d04b14a5209022170e91e7a6bc4cc0434e33d883d3ffb9741f8171b532feb69029d338571c976217543c6250051bbd9088fd0aacbcbb51ebd21040c5d0e3398a
TLSH
T12F712C301BA3495BF3551231BFD0618D31B3A4822A0FAED01DB3BD77FAE67284921D26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 8609b30e713f285bfc0e92e8cfcd6e4385524fe15394a6cb5ebe9246fc28ec4d
MD5 1ca7ccaa4cb7004c2fa0e6b87a059423
SHA1 775ae334f32bec4861af79dbe0335b92cd552d1a
SHA512 7348f957033e057f3bc61e73da0631e7d10268698c76d0ce1c0dae263c7e2a9274f0b793ee8470cf7212a2e9bb8107a12a36df2de339f2cd37fc3e120d58c8e1
TLSH
T15AB0015AC91240D3E27657B211E656663B3148AA834319C98CF0A875A5563A09A29485
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mail.google.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 1405f3c346d97d90c29e9886f8e136154bf940a3d69a84e0201d121269543d23
MD5 ab5e8ec5e8bfaebf70d68dfb41c4d4a9
SHA1 7a62e096a2f582ddd1f90c0f50531c40f682e892
SHA512 0c56f636c25a6634c275b04f4c88b148b2eba163b3a7b87e3503f6c36a422228473f139c90c9bb94b996a1b393aca77c784745cf726128bf0ba6441d0c492d80
SSDEEP 384:DiJJoz++J/dhQ0pZRqjNIEBeCj9Aapi8NovrrQt57THdnUcoyIAkJR0P4+/lwLY+:JZJ
TLSH
T13B62ACF7C7D9822DC91156F4AB15AF1FCE2D0914432C3C2AC8E4AE5B93E2471E26179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 37ab776d86521b5f3fc7bb9c1f05dbbe4b107aca1127e3b99cdb0a897f081385
MD5 08ca8aa8589b13578975c6ce4ecb9bd1
SHA1 1524f86ad3476e303b4d9dac5fe33e94ee983a4f
SHA512 ec8949aba2b8f4bd4c538150e324b1c4042c3bc221981f9b9926d1ddb38223028b0bc71a58fa8de605d4369ca4e118682b7bb9ace5bf79a093c89e401f66fbc2
TLSH
T1EBD02223174132BAE6BC3E81F06AEC8FC72B21600883DEE894D09CA829314ED5627348
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1a2ab3a6e14e6931182c4188bd5747482cd8477a386a9047c8e11becacfed80e
MD5 188fc694eff56bc5905c777e7f406839
SHA1 e6095ce6102b8916a80f984438883071885e530e
SHA512 c7748d3a754ad145ea3cdbff12067c7d80adbf18ff79eacfdd1c52ded58f5e86b0b341596ba2537ccd1d66c598ff2fd4e53b9f073deb03bed5aa6ac9722a3b0a
SSDEEP 192:sxZD/ywFaKOMl8MNZ/flsZBJTWUbEIupnk/W6+WNzKZXY0YKyUCIg5+J:sxZDX1Z/flsZBFNUk/bgX5+M
TLSH
T105520905AA34A977CCCFD319FA45BB53D6F5146392940E48AAFCDA1C05E67ED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 4710cadab295494deb50445bc9ad61d6900d617b16341028da76d14b1c6c04a3
MD5 4c351acfcaebb471f267e36658219b8c
SHA1 305bce91ec784a2821a48e5a586c9a4adf5b5628
SHA512 37ea8d6324bda63ebb7be805368aeaba0f847907c92080affd58adeadce3c550d5c0b3d03b6a433ae3978908a79f4506347fcdff6f68612dd374068fa84bf1dc
SSDEEP 384:sxZkXqOmzZ/flsZOFNPEMj4cllblEp354j/eX/qCdZa:s86OmzZ/fMOjEGlblEjsevXdZa
TLSH
T1FBA2E94365208977CDDBC319F821BF26E2F9246799958E4CABFCD91C04EAAFD2102C57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 053a7ae980dff533b338357233b80fb47f1c457506f2571fdb67f091e4327bf7
MD5 29d6c66806698b9526db1e92da41fba7
SHA1 4ec38f4fd04dd834081dde731f2675f44f24e7e3
SHA512 27197d81a658bc0e764e3c0de0b8fd7bffc959820b57af6c8ed2d50e99a0ae1c6a1fccd87677ca98497f3008c09481ba628aab45140b2cc624c33badb576f861
SSDEEP 192:zZD/ywFaKOMl8MNZ/flszBrEupnk/W6+WNzLI/Y0YZNCIgyJ:zZDX1Z/flszBLk/bg/5TO
TLSH
T15B420A11AB346977CCCBD219FA51BB53D2F51573A6940E489AFC9A1C01E66EC2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 e74108edfbe6fd793db77e3b03b1a9109fb4431f1274a9eb5bf1310bbdb1a3b4
MD5 9ba867092b3625feec1e517f4e4cdc1a
SHA1 88d9bae37480cc737b142059058cf344cfcbf849
SHA512 b88c05f70893e193a5e35b4b99669d00645ba7ec0c78b8dde1a09e224223623644b881bce87885f767e67676e8ef14b4e4b1757d010b788eb70e4349405c0149
SSDEEP 384:sxZkXEmzZ/flsZOFNPEMj4cllblE9354j/eX/qCdZa:s8UmzZ/fMOjEGlblEfsevXdZa
TLSH
T1E492E84365208977CDDBC319F821BF26D6F5246799958E4CABFCC91C04EAAFD2102C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 7bc5cf108f58d9763a519095c1fcadb6e87ba0dbf8dea9f090aef0d7ed16ad15
MD5 89ace14fb49f8a46ae9ea646c2242247
SHA1 b67dd3f94bfeff41821e9435113e3d4c17004d65
SHA512 b20af7290c22e56916922c83235d09510301128455ad955558d3b58ea529ea0c4a12aaa3143949ff050f71fdd22512f5af88ae9e026d51e23cc743c7f48376e8
SSDEEP 384:sxZhXEmzZ/flsZOFNhMj4plbe9354j/eX/dCSZa:sZUmzZ/fMOlLlbefsevESZa
TLSH
T12C92E84365208977CDDBC358F921BF26D6F82463D9958E4CABFCC91C04EAAED2102C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 672c2a3b5905970bedc4dc74f8c12e63343b1c2039856e090e4b7a803f725acc
MD5 705cbc1747d77234cca38249b856b082
SHA1 50f78141c486f1deb97f6a0623ef50013d671d3e
SHA512 5f3d0c161e6c4f1ad88f6185407da2469be6fcde3db704ca71d66efed0ce83994c15e47bcf93f0568bbef3ed7fd3cebd2e4d421b68eef4f6df03ba2c5e5e47b5
SSDEEP 384:sxZhXpmzZ/flsZOFNejdW/bdU/4j/5xJZa:sZZmzZ/fMOT/bd6s5zZa
TLSH
T17482085266209977CCDBC319FD21BF63D6F92463D9454E4CAAFCC91C04EA6ED221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 bc6c380e2ea87c1aa2e281f113f1778ea13a768347d004c34f1f41d1abac7aec
MD5 c2ddc604759a1482fa951c39362a8b16
SHA1 d78828728a7e1467149534141dd839d8f449b930
SHA512 6a6a638dd0d6c1ed46fa3d5f7b9e01c172f32dd2d40ce03b4278ca9cfad236a3a44b9960bcb2c7188a4cce1fd346387451a003fe52251886adb19cc5879e8c01
SSDEEP 768:tul1j83r2YmWRmeKQDC8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3MALl/C80/R+rocH:tul1j83r2YmWRmeKQDCu1jaKMALpCN/M
TLSH
T12CE22B3B640CCB7E4F844E5CEC266F966ED801CBAA684D5447EE894C03C77EB512A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d5b195f-a7bb-432b-ac5b-777b666b77bf\index-dir\the-real-index
Size 96B
SHA256 9f98d30f927e35c4bd9fe06a44f1c134ae84f5fbad268d01a99e9344add7af20
MD5 fe72bd2831887d59b7d2ebf4377fb71d
SHA1 65143cf272c4dc5bd38aebba268fcb0523a4b6aa
SHA512 8127ec32d2d980f261a067a7605bb0f1dce89d42d7293783d4476d1dfd67c02bde133d94b5d3055f70edc2963e8b20444535dea2f9b3294f0770d7acafa904a0
TLSH
T18AB01231404A410DD03052F012454158A7102C510523060209D80099A8302007A0E888
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d5b195f-a7bb-432b-ac5b-777b666b77bf\index-dir\the-real-index
Size 72B
SHA256 c6263d0a07715f36ca36268c90ac08f6fe4d1b5152ad0c54682afb5108ae8f74
MD5 9edaadd59ab9667813c1a4aba8c51672
SHA1 6840d9cb8111964e8281303c5ae7a1f865e7011a
SHA512 af9634caf0c54a588096d9b99807fd954260db141e0562cc45f294093b80e493638fd0b659f78a30e3ef16e8ff9acab634e0881abde47ad654d76fb9deab53b6
TLSH
T1BBA002F682861049D138CA70138B42596760DE565D231747ADB948579C701947E46454
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5caf23.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d5b195f-a7bb-432b-ac5b-777b666b77bf\index-dir\the-real-index~RFe5caf23.TMP
Size 48B
SHA256 d8c2b7ccb8ee002806fcec3803d415acaf625f51b096d968838afe738f20e107
MD5 e843ef8e102b8640bde9e123ad234f9c
SHA1 8f518896e6e296b3bc969753ccb6996490a08fb4
SHA512 c1e80400c786cb84ec8b5ec45b878c017b1310ccd0acfe24e6fc0a824f9ad9e70777b91534e8819d58155d81d5924ff7a8263002ca32ecbdb644315874f15a1b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\650dfd07-c887-4e02-aeb7-c5dba222e40a\index-dir\the-real-index
Size 72B
SHA256 7aacc33d9e7b00a1e623477daedb6b7f28c3ec1373339c85bb16bca4c68fe3c0
MD5 695e118a9cf224f8d8bb06cf51880f2f
SHA1 41cb1710f23043012c545eba46732a9fdd6b32da
SHA512 02d352d138e5f9d683eef86be5c14988556202b863b7b435f693a8070e38869d79e94a6c0df045a98413d44a791555185e457ec6dce2201db0400604bc3552f3
TLSH
T155A0022015894503CC751E70138113D66372DD3F1747534B45B3448ABEA0E4D9E71610
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b38f76fc-0bdb-4056-95ec-6b53c77ee934\index-dir\the-real-index
Size 3KB
SHA256 780c80094a89a08def67c912ba77bbe1873663eef337cfea20009559a31bb775
MD5 8c7ceb95502de639003d4bbc774d9423
SHA1 8326b9aa5a6e065fdb9fcc6e8fcffd34992b13de
SHA512 9622c7696e8c0ae168a4cca3288de64eeae87f69b4a3ce53874613af39a0c474395866330ddd672a435d504d212d17ecbab0d7be59a7cfc27aef3c4ea830a22e
TLSH
T18751D84E0D170F6ACDAC567214B90441337869CC13B8290BA6FE9238F8C3728ADD9B69
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b38f76fc-0bdb-4056-95ec-6b53c77ee934\index-dir\the-real-index
Size 1KB
SHA256 733b494bdd9f376646d46c087e765b5aaa1476af5b883f482713836c5a622c91
MD5 4446de967862b360fd6a8447862b802c
SHA1 03abbf881461c693084131512d2a776152a3c1f0
SHA512 17cbd92f1cb297df6db7c898107dc1b043060c0aeadf366f45f7ddb8396d7ec669354e45396a696a789eda0ee0373eea7a46dc496cddf56076a33661cc1d4fd8
TLSH
T13531638E8E90CD9FF89444B71572B4FC72B489CC4721A7535C7C2132BE2235A1A4B0EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a67f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b38f76fc-0bdb-4056-95ec-6b53c77ee934\index-dir\the-real-index~RFe5a67f3.TMP
Size 1KB
SHA256 b278c701c99eff075c4f5d7c97dd4d53b343b31641bd373d9c8e8a85edd964f8
MD5 4b37aaea6492773a59fee37535f6335e
SHA1 4c1bc3cf20631131bcfa92951fed0c1466140ac5
SHA512 ea4e3f3e921870d461602180f63567947f4ca1c4e60a5c2bf53882e76114cc6fbfbefd78d732ba11fb1e1afa2d019e99f91616e2a40f9cdb49cc1a855e59bbce
TLSH
T10E31235A4A808E1AF884507709A6A4B8737689408321B793987C6239ED21BAE1E5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\db051936-6c70-47c1-b269-fb19c118fa19\index-dir\the-real-index
Size 96B
SHA256 bf26f71f44761af45f4db07ca3b695b448dc115cfd43af62c49a63c6810b5987
MD5 ff6744fcc0fb2780da298d15c0384a2c
SHA1 794ad01886cb05086b563b6aaf5e1fb510631b37
SHA512 d56f975e9bf39c02dd6d2d1d0c328b2a0c6d4190abc0e77c8c8adb00a03b4869ac28e83e6d9771c719a9c6b713208d36658bef51f1321f9eb4a3153a991c21f7
TLSH
T134B0041D11445303D01517F555D7055533315F5113111717F1D457F5CD517477DC544D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\db051936-6c70-47c1-b269-fb19c118fa19\index-dir\the-real-index
Size 96B
SHA256 6338ef57d71aaaf9d3e7956ab6cb285ceca5d4145a123e01234eb721607ba275
MD5 c7d53dd553b442e2c91ee037ac69165b
SHA1 bba8c1f945a451a5a5ef130ccbc1c2c3437d75b8
SHA512 4f5ff91a0e1515bafcfbdeff4a55f1837b371847f6ebf1f246f4048dddf438427afe4df287526f2d23794c1b7bed62fb64669012f5d882a7734d9af2a3558fb2
TLSH
T150B0220222000003C02A22B20AF20C023B00CC00A320830BB2C202F2CCB2080CE2208C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f31ffae6-e395-4b6e-8fe7-cc6ac70b9f22\index-dir\the-real-index
Size 72B
SHA256 e312e40f9bd84faf0e629f9b102e93e81e5cf34c632509794017a27d06a6be2b
MD5 31eb97debd455dc01c3a87123293934b
SHA1 fcbcb45d8f794d3ace19a056c9b1ae1d41e5696f
SHA512 2c0a441d39eeaf9a9d5107337bedb20c17b7c134dc0dea58481bcc9f5f1a8d5b536582b89cd40568549ed0d9f5ea16301825bc263f774f95d1cade04f8e3cea2
TLSH
T190A0026D06420765F31846713161915433145DB077D58A9782B1A068AEF4660954744C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d24e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f31ffae6-e395-4b6e-8fe7-cc6ac70b9f22\index-dir\the-real-index~RFe5d24e0.TMP
Size 48B
SHA256 c51823b80b5a5bdd6c72cd179b6aed6476c6bde94d51b08394e276aa30a3144b
MD5 8850acb2b17bf376daac38bdc6cf5c8c
SHA1 aa2b37623e27706781bed8159190d428a67e90a1
SHA512 8d7a1d5d6368c15abcc156c1f79bad5574ffed8dfccec0b86cd73bef56126fd40a46c71f43e24efc36e344d5d39b997f767fde86c6bd2d102e85e23f01656309
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 516B
SHA256 640ba0028e1ec7518f23b72190935312ca90d5bd5ae2b15c21e24ec32f8c2868
MD5 7a16727308ca05ebfc5a7220a03bebc1
SHA1 62d9040cdd1cf32590119a3e2c736cae5d07a0f7
SHA512 22b55dce9ffd1257de251b8c43109137eeebc3e2b8bb48c8c9c8f3bd724037bb00c3fbcc36aa6a0c1ae88896d32f58c164ca6ed4b8ce18e0ceb12b3ecf7ad5c0
TLSH
T16BF02EF22EE75C14BCAE87EA143004A5415D7D48CD04BC9F639B96C75172351202EE72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 52850327d000e69564c3dc1f77759101cc21b31cffc6c2a1960e013d6f89697f
MD5 f07fe83e1e57133c87843aba94ecda9a
SHA1 ad40f482e9a12580fc67a4822578a4a12b7859c0
SHA512 423c648b2dcf5dadfb176b73c5a20a96aae5fa4168b30598f098aa49c4889b45b5d59998c64bd226cdc79dc847f5d2c210377c5338865eb65b8bdee6a8a85f0c
TLSH
T1A7F04CF22FF75C14F8EED7E7107104A541597D08C904BD9F265BA6C752B2350106EE72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 fa20b8bb0159a63d4c4256bb1dc6723f4c6ec0ed4a42abe2b4fed88fa3855a6b
MD5 45e2714db86a76690f6222daa4feab62
SHA1 2897c643fbb3eecb04e4591db5f1a74d190c268a
SHA512 cb0f5683ab725e6c87cdb8a26a962e4dc5d49a1fd6a9a9df032300fa31fbc979e8cf243d52bdcf7435c651614f9e06a231e9b3d6300c4dba5ec6f3fcb433bcd8
TLSH
T14AF028F22EF75C14B9AE97EA107104A541587D48C808BD5F265BB68751B2351102EE72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 01ac8b578445d4bbb67605acc50aedc31519ecaa3164f3648dd847a9f08637f5
MD5 5b4152ffc740c40e74a56e3047d449dc
SHA1 ab67b24c02a7837b76c41385865804cf3e28362a
SHA512 5a55d5c8bcbbaa6683a6235dc4930730d11eaee5ffdc9bb0ddf82b232b810c573f9a6f743a714e180d80b3d2d449b1bd06305668019cfcf38eb2465d1d3af7ee
TLSH
T195F02EF22EF75C14BC6E97E6543044A5815D7D04CD04BC5F279BA7C72572391202EE72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 1ad3d33d3331c08dffdf3eebf03c7611851b2f1d3bceb0dfbd65071705bd5c4a
MD5 ca627766b8562e38b6f5d6783f9ae99c
SHA1 31b98f91c14174c10e2f180890b18d4635ba9ace
SHA512 107b28e31604e18c1b32416b05870d89a5d4e6123740d13db8100854e4a29b1737fda3c01b206b046dcb6a049e7d81c11ec9634e3a1c53a01e9e449edbe23e1f
TLSH
T1B5E0C0F32DEB9C24ECAF83D60030005101493904C9047C9F326B87C72171390302ED31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\7005f551-0b44-4517-b5fd-65ade647efc2\index-dir\the-real-index
Size 72B
SHA256 57b5b4aaaeae811632a65641844ee0c27c302c3fcfd128e33589080be391ec59
MD5 c83008f7bb3a077b5ab661b4b1e8aff6
SHA1 ebeedeeea6edfec1d1a6e751b47fa05f41a4e941
SHA512 80b3271978073bf8f670979392ec2f98f1144ed7febbf1b0223905c7128c548eebfd394e3e552e81ac2f54b2d55c51ad4e2fcff12e38229350da7bd66c787049
TLSH
T155A00254D3C00D49D4348AB029C621743E1698601116728A44B08149ECF95508127544
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c4231.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\7005f551-0b44-4517-b5fd-65ade647efc2\index-dir\the-real-index~RFe5c4231.TMP
Size 48B
SHA256 ff624002f5a79da7112b3f1a72c2501cf0eb89e31d8d8f6fbd61baa423610f42
MD5 4e29034b7945901aae9d5faa3b520f0f
SHA1 9425cd386d6b8aafba47611542c23526248f771d
SHA512 b94ef86d467812a16e66018279ddbfccee0c383efb6b33a83e38f3ace86267dfcc224721869aec610deda2fa7b84dd72c07322512f7a5f599d495268be767d80
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\a8890c88-92ed-439d-8624-bf06e0cb1a93\index-dir\the-real-index
Size 11KB
SHA256 797d3a49dfb8b927469b4d520e7aa2d3474c4cf71daab8d0590dda1ee6136a57
MD5 27e57a4d0f20bbcc9f6d8409ebd0b11c
SHA1 29d2f62a817054934e72f2f3981b16db4c0470ce
SHA512 2be80816d780229c5f70c3e3c8d655acd18c6494f3a92b2441b505d5cc24ee7fe4c25b2b3c9bf66422ee36d5043506ab7099eacee7e4ec3b862b349ebe31f718
SSDEEP 192:J7BBHVTKVJIdUFy1ESEocIqZkww5tDbhOyafb5c:PBHcVJIqs1EZNIqZtEDbhzci
TLSH
T15242811CE2768B4ADAB5483E348304A00A780514FCBA69E35FA3F175749B4943E7B9FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5e74b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\a8890c88-92ed-439d-8624-bf06e0cb1a93\index-dir\the-real-index~RFe5e74b1.TMP
Size 48B
SHA256 07042a50e4052187a140ec762a664b5cf6d125e383d0628ae1026ec88e52e774
MD5 b2303f64034aa67b9c3da6218402d2ce
SHA1 07f43310200fb0e23ff8332a7e8926e5700a86a1
SHA512 547e2817cad564ae8836768e91827e97c69908dd734f48d0519fd32af2a338e7f3885275df613abfee5179875840b2b8e85d34e1e8ca18489211c540f9c0002b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c0e11348-a34a-49a8-9eb7-80ffe9b24536\index-dir\the-real-index
Size 120B
SHA256 df1c15cbb082ec3fd6bcc5a7f03cf2fa6d7ccd640c4d13b113179d514fabe746
MD5 74fd62d4e8838d1cc4f14ba620cb9e4f
SHA1 93e9c55297ee32be59f105aa9f6f67c4288e816d
SHA512 d384356ae8edb511e456d3329b9e4aa36197fa8a763bd30ae347f656b41bd001405fe69dc5b0d1b334668215a7165e98c78a1de103441f66805a28f051ef64f0
TLSH
T178B01275F3C07FC3C46F2F7011020010A5008C182182035340F461F4BC2D75C9E90784
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c2988.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c0e11348-a34a-49a8-9eb7-80ffe9b24536\index-dir\the-real-index~RFe5c2988.TMP
Size 48B
SHA256 2e192ee12716ff69d96211e8bda13e4f1101d39c086d794fa9e91b5dc0f86b47
MD5 9fe2f2dfcaf496dbfdce23db32d611d8
SHA1 17bae8b8618d27c89b3200a5bfc50ace43aaee99
SHA512 078cc6402adab9a870189047733b61191a17a81be9a58f3783df4eea9df81ef51e2d6e67294cd118dd4adfe5e256f3e8e99c4dca51651f28cb08980a550bef76
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\e3ce4cd2-4d97-4b46-aead-0ca89f1f37b5\index-dir\the-real-index
Size 144B
SHA256 e69b3e322821d6a0c37531af50c2f4ea0551c3d377236c118e3bb47559945f2e
MD5 db3ee79b9f17005795960ecd2460408f
SHA1 1500c573c5258049e424ee45ea3f1f0264490c25
SHA512 7eb97aec0122f5edaf9087d831863506c0d942c39f0811c9704648593d6c3cfd90f3e399352fd6e0cea4b17bba0ea98e747f6516d0b77dc7a86d7c89cfe4742e
TLSH
T18DC01256ADE43A0BCEAF447A2D32608927021DDD4C0D164990FFB9FD9DB00B65B03211
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c18bf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\e3ce4cd2-4d97-4b46-aead-0ca89f1f37b5\index-dir\the-real-index~RFe5c18bf.TMP
Size 48B
SHA256 ee4cb92cc74c6754bd31d3ce957deda5185ce879247c014e159595e5485921cb
MD5 c9c92d168dde3c0d7c956bf8e609822e
SHA1 25a60d5c1fae23d5adf9482c5152923e7dd69d02
SHA512 e144426f65f56b221d6b581dc5463cebaf9dadb7bb13a4186119c6955fb193ac8451b680c0deda63603486562a68b431d95ba22ec4d3ed6bd84b6e2f093ac1ac
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Size 646B
SHA256 13883b951570dacb557742960131f5053b3ecf29cfbe23b73ee87d3f4d1d0515
MD5 20c120bc109ef20a78bd72fde150c0c7
SHA1 622f46ee66a8006d2c3c9b24570baa57484dd190
SHA512 beb5623a4a50429faf4b1de24c4baff0852c5b889e001729b3461ebbb7175a8e547b4230b4ea76a8d0470b4d698de7bf40cf829008ea560325d910cbb0b4a9c3
TLSH
T147F078DE4D681228C3B19F5D3CA8E22A8E6324519C74BF0C45360D3658D9CE0E4F6EB8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Size 450B
SHA256 ca2eb7090089aefc83ec13fc473877e680a07260bf6b43f81365f93dab767255
MD5 15c1f5827a497b0bc34b27e5fdf6e5bc
SHA1 86730ec38d12b26995dd72d1cd390332b9c98dd3
SHA512 a3c68d275b4612040eca179396649bf5f852e6378ffdc35b67cdcc7564df6b9e0c5e94405b55df518f84ce55be14d797a8a86c36fbbba419a459ac563cb4bde6
TLSH
T1B8F05CDE1869137887709F4E7858D25A5F672C20DCA07F0841322D2218E1CE0D4B6EB8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Size 542B
SHA256 ac0e0da8f088a1c555eeb06f1e45a80a72126c302168772d7cb660ad2e78e4e9
MD5 a9e4c69cc1e2df3a9b915a5ae97d516c
SHA1 8d303e90717199b1e6716bae273c609df9ec4289
SHA512 9f5cc878e31ebd56c8cf82c696c2ecbdbcec72e3f56ac885b26ab6fbed24d37c327f1b4e0a0561c1008fdf560724c1fe5d0ac6ca2418f5172d10a5e9b6fa6bbe
TLSH
T1D1F024DE186C136887B19F4E3858E26A9E2328119CA07F0805352E3558E5CE0E4FAEF8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Size 651B
SHA256 62bc42488d986cc887c75ab89379e855bca6e6ae04b5ff2949462fcfefd84abd
MD5 c822dd3e37d108e28e79ec6675c4f93c
SHA1 814c1ca8790d7f79ff4d7ce1263fffff26eacb75
SHA512 b4d0f851c45cdfa701fdc04fc7cb80f70ab3d7f50399e9ed51c3e55fd9df7cb7d5acd6c68caf7ebd081f4244f561c63abda729abe679fa33bb78aab04f47374b
TLSH
T1BBF07DDE4D681228D3B19F5D3C68E22A8E6328519C74BF0C4536293258E5CE0E4F6DB4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5bd5cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt~RFe5bd5cb.TMP
Size 261B
SHA256 9e5cfdaf120906340bf069229252fb9902081d6b33e953b00260d3642dda5d53
MD5 9061b8e495c8d7444c4c8e5b10870520
SHA1 5c029a03857ae92e9fd7bb3e880dfbb9ea444702
SHA512 0a55ae88c31d5fd69507634d5cc7966794cefe7b89eec86bea88c56ab0858e51f434dc42f07bca5b4c6af7a8f34b6b7c997000e404293930edfaaeab37779918
TLSH
T1A2D02BDF1834022482704B4C3868E24E8B271910AC557F0881323C2204E0CE1D077EF8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\42b81eea-312a-4a5e-8a9b-ef5c66cdb6fb\index-dir\the-real-index
Size 72B
SHA256 c9fdf84045b27bb1f4488760db1755804c1be159ced831cddcc7606b1ff8c664
MD5 d8ff026ab90095c44d8742bdb469c185
SHA1 3460c04c5a6a527ea9c9059778fb0f8ee2a3aa3a
SHA512 4157a4b6c8a1dab68a784a0c5d914ce00fb4dd377e3757f31bd989aa5cf7ac073357079e3a1db138e2a752c330ddcc21b25dd31bb9d0db2ff1aad744e9b64b98
TLSH
T181A00454C1400547C534DFF1747741553F114C174335035371F0504FFC503C45503040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b82aa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\42b81eea-312a-4a5e-8a9b-ef5c66cdb6fb\index-dir\the-real-index~RFe5b82aa.TMP
Size 48B
SHA256 fdd3edfa4131aa02adbf9886ea8fc1d523381e688e38369962ea44cf0bddea0b
MD5 c9cddf3fcfd0d9a8927e3c1343859ef4
SHA1 420f075cef003cc6962c19130257e1533b0ea13b
SHA512 31728d88aee3fb9131797603ba8e871c47fe0ec2938f70523bb5e5d44b97e326e618212b0852f17e07a4d2a9482eb682adda77fc3124f57f671adfda7f86d1f2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\8f91247f-f118-44f4-b20f-02b56c6d45b4\index-dir\the-real-index
Size 72B
SHA256 603177a907a7b5588b27f5da176067a2283581bc5632084190a2752865f4b695
MD5 51511afc092b854ad7fb62a2c8d647ff
SHA1 e1c3b2507bc6db813f774818bb7615809abdbcd4
SHA512 0df7486a85f21eb4d637644a150f4ea2d0f22a96a543bf6e88d9a3aa8ce2626e32c8b69d8a3029a58f3bd5b760d3b6f59db8b7771e1c22aa20bc5145fd9192a4
TLSH
T1B1A00261EE91951AD0A64BF0156101C43320CDED0951E3114FFAC54CC95EA91C9D5496
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5bb245.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\8f91247f-f118-44f4-b20f-02b56c6d45b4\index-dir\the-real-index~RFe5bb245.TMP
Size 48B
SHA256 88bb251246585d578cf9ead5e0ea9f783a5d06465e4348bf7bb33c8b621066f1
MD5 c4e83ce480d2b6e454566a1f038d750d
SHA1 5d29e93a5e36474536bb49aa67270587f1960302
SHA512 b2a0e063460e0095deab192fff631976f3dcfabf232f78f49e89a0fc5f465e5ea012543328735cf19cc4e6e214850ed523757a0b7e31e6987b2f06e7ed3b0c9b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 2eff6c22946f8e3abe348a2d0b996f2734541112e4a14b89d660b234abf7ec4f
MD5 85369fc6b2ca24d11f1d11ad416d90e5
SHA1 15f979e0400b46324b7aefca668eb39e87e95e2e
SHA512 00bb5bae0f453d61791e84b8318398cc357cccd110b72ed26191763dfc652752d699782032156b707f2efb91321d1f43543d5a477e6c00b9849bf224cb7af4ed
TLSH
T108D0A757B014C6E2D7BA4B861511212A46243C9418C4A94CE40215A6C45DF93A212FD7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 be9246d709c7d2b431d561b0cdd9ed3876cb548aa1ca2c9f06e20a9f90486de9
MD5 f6435d9001c1497210d5e7f0934df160
SHA1 d086c022db1053afcb124ccc944f93cc6b61f6f3
SHA512 af8a260c2a750c510e1c400f67ee8d83ff8230b7300df7e0649fef836e244896a4a7d32122bb27e2f7af8fdec4a922ea5be5ea20cd972b6f30f30e7448ad5362
TLSH
T1BED0A767A11085E2D7B64B851511112A5A342C9914C5A949E412559780ADF83B212FDB
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 e7705e53616cfaff9a8b1249278ce73f040b1081264aa2056c5831ef227bdef1
MD5 a5f47e40f43cae354ad1519a5022812d
SHA1 d96ccaa5147c5e4373af180bf37d7604073111db
SHA512 58d094c659d8b1143061590637370c263fee8e071f43b3047435bd78899143f77db3987a1c0e6233a49922b3ac8e78fb4bf2bb14db69f4abdd91472414a1ada2
TLSH
T173D0A757F11185E2D76607861521116A46743C9418C4A84CE903356A947DF83E321F97
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a2174.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5a2174.TMP
Size 138B
SHA256 1fcfd30d1bc5d27c44bdd717f8c57990ffa896f496b2329730a293ccc3cc4e00
MD5 9f4283bed956281fedc631e707dff087
SHA1 bd8be45bc9467ee7d7d59043abd65a0ec776156b
SHA512 716a0c066919427297b9b6002ff37998573642b33ac12155dc47bb28d05aed9d78a5db1ecd1357460c76d9dbee32c36f0afa368e5e8331d573923dc8a9ae087b
TLSH
T1D2C02B73B0004673872103800232501C8B083CCC0C81A44D741334661038F33B302FDA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 4ce916790ee74a24ab3f356537c9babef506cedb08a7c0aa0864b667e67d31e3
MD5 2bb846d0b5b75726cbfca37034970de0
SHA1 771ecfc77c8ef7270b32494d8100792df4ecd427
SHA512 1dc23e638fa31534d7b2e25e740841cd3a34c888211996df6c3c4526d570d20707900007aa300df4e19567ab4fb252c4f988c8103aad77a6e1c53bd30e7064ed
TLSH
T1F5B0244C4C0411C1D474037D40C7014434151CF0170D331045FCD374C4333000077100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 c6729b22bef350143a4befb64754706a7cfd6fd472e55ad2154d99a59529bc64
MD5 0cf82536418ce9067dfa115e5579d778
SHA1 e5a5b08b9819d67f487bfd92dedca05d6b3d987e
SHA512 4f1d9f95bb2655ad1eabdd45cb6d64df1505d98064fbbb35e161b9cf895b22255a2802b3f25c423b7c1ee8835ae131f781b66d55b759535cb1b11f0e4d635f29
TLSH
T1B0A002118954D185C91203F4E0E682886210889D0605225DE1FCD254C8512505292345
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5abf2b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5abf2b.TMP
Size 48B
SHA256 2356b76f23ca60fb6acb77a0dd606ceff215f39634f05f3aa67be110af830f70
MD5 e6957d156c65c160d0591cc51a154523
SHA1 ae57f60a1b1656ddcb9fdad842af9a7a2571532e
SHA512 51e13ddc6795cc217acee2f393147baa30e848485a983765236b64c42e928ae3a2639490eb16553f1dfb644fcb9c25a687cf9f78162d705b61258d2697823e59
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 78cdd938c41f010094d608fc3e1e7bc327097d85cca7708d0007ffaa706a914d
MD5 112818e06be67764402c0be24107d2ea
SHA1 90ebaf68a2da8132e8c1c53cebcdc867cb7b0910
SHA512 f4e6c860d380b5cf97e0dbef280feb636f4d95aa9f76aaa768ec9f4cd723f276cee3575233f4d1ed785c4e726f4f039b6922fc5799c868e7de5932bc23b46d90
SSDEEP 48:KkUIHKtecXyZ5wl5vnnup3+1IcZuKXbPbuzx+GGrJvyZulo0+kQvpoXmIcsvKX+z:KkUgKtemyaMKLyS2FeKuoq
TLSH
T185917C16B0B722413C7EA5089254873A4A4272F33574E6EB3BA841B20DB7E145FFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65c8dac5-41cf-4186-8648-7e944fe57f33.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\65c8dac5-41cf-4186-8648-7e944fe57f33.tmp
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0f2e9363462905caecad71ef6bf5145d25542ba0086d0c6736f36803f1ec9781
MD5 64c9d8244b48e9dcbdb236183c6f359c
SHA1 8f1c017c07a5bc6b9ea326013271f896290a7461
SHA512 08a0fbdf0d878965a13e7d90af0bd0a638217fbed66f3a6e3d2666fcf9bd962f4a8c0bf53a78744393ec4b9f7c6940a1725cafbbc342ce472225d0b2e4b4ed71
SSDEEP 192:zhqL8NcVQn+n5RIkQmiU1gti4gX5zPr2v+FdEgR1VSukXNtwKgqbHBQMZIeme:zhI8NcV2eRFMNgX532MdEg0ukDwYh88
TLSH
T1AF422A706879AC3799EBB515F09732535FB820BB98C86F94D6E89B1D008A6DC130ED27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6996aa69f43bde37143d9161a52b38acc851b78e50a2a44460527613db323bc9
MD5 fdc9a9cfcd39ee34e1843b0a52b424dd
SHA1 8f1a9de3779b6060f0f0ef2605c0ac05113e9228
SHA512 8b0c4f7c9aa7cfc64a9abff65757e6881a08fb77b64f574f321ffd1508d66f5617be678716ca5eca676e77ee93692e9e912299b1deae32ab0fec181c80814e35
SSDEEP 384:nhJZcIh8NcG2eRF0NgX532MdEg0ukDwYhsa+VYNGFoP:Hh6YSZqukDfhhgkSU
TLSH
T129827D716D74AC7788EBF242F58736535FF860BB99C8AE44D2E89B1C049569C130AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 31b8e60eb9ac22bcfb5afd54cd3ca1acca1ac7fa007ff205a7cc75b43acb43ae
MD5 f38313a23bcb1c0e59ee8dd9820569bb
SHA1 a9079bd520dd6046e832f0e1fbff1ccc5f04cad0
SHA512 69ddd55205f6623426b953e813c9cabc2093f361d7cdc36721558e603be4e9f847e1484505d845a61cb81afd0902fdd095db2de20fe64401a3dfe8f1047a7c76
SSDEEP 384:nDo67FvZcI08NP8TUNTUlIlGTieREkVdDfYQX532MdEg0ukewYhsa+VYNGFoP:hFn0cwgupcgZqukefhhgkSU
TLSH
T10BD2B4F198D79936D8AE9383A77E6E429EBCD063B4889984F7C45D0CCC421BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 093199283033f14f3993e4e3ea0d73573e0442e23ca616604995c8735ce054eb
MD5 ed073ca07870a5c8e1da0dca9a2a0a26
SHA1 e2d57eaa7532cba647e118353e1e8c92ed9d650c
SHA512 a7e1bc4b9964994dc6244b709cb2faab0e0711d54b97c02fc9253f7f1985e66f5e8c47001046ccdfb9cd840643b111fd052109a383c4eb6bce450a2386fa529b
SSDEEP 384:nrJZcIh8NcGTieRRCBgX532MdEg0ukDwYhsa+VYNGFoP:dhsC+ZqukDfhhgkSU
TLSH
T1B6827D716D74AC7788EBF246F58732535FF860BB99C8AE44D2E8DB1C009569C130AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 698aaaadce694e6ec93da65974d3c233795ef14f2a5dec6280b667901a69bedf
MD5 b7920f959aaa8df4af78b00049ae1a59
SHA1 b8e262b182d52150c22879d335de486f17d0076f
SHA512 4133f5903b4fca7078705b2ba319b549da847b6401f3c6e317afbf106384bca75ea0ca08050743c6f21601c8747e5f6556f8468b3d250cbfe35bd592d4a60ce6
SSDEEP 384:nDo67FiZcI38NU8TUNTUlIlGTieRRbhdDfYQX532MdEg0ukowYhsa+VYNGFoP:hFQ3xwgubAgZqukofhhgkSU
TLSH
T139B21971D8A4DE7BACFB9782F64676879EF410A789CC9DC4D6D89E0C00876DD130AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 77e67120aa8cf33e0bc0e4bf0bc09f0b6e755d8c2ee6d4563685967437129db1
MD5 78f10d7d5a748b3817ccaf8faa4f0700
SHA1 10498962373e868144cd712581b05ee8dc494e4b
SHA512 e98f196decfe168b92e03bd8334b7d99cffef917efb1057c65285ae26c144f4fabe0ce60c31bf11152f3696537ef67878d048eb2035b0c80a2ae6651153ec180
SSDEEP 192:6GN46i5fQmiUyAd2O7X5zPr2v+FdEgR+aj6SnU6:6GN462h3sO7X532MdEg1BnU6
TLSH
T1FB02C735ADB87C77CEA3AE45B48237235FE4112BD9D86F94DAEC2B1C009769C1346827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3e5f4b4e8c363a82c80b8452851001e8e70f354cdfeec8a7e3fb0d4c16edaf2
MD5 7b97714cbe57f194273e1f35eed498c6
SHA1 bae0ff504d73bc915fb415ddc38bb9bc09daa4f6
SHA512 6a89c1323eeeb4629f6659d60a96b7da07fe5f496e35b63c61cde8cd52942aadc115cc9cee0321748c10916d3ef609fd07530d9895c2328a6ca50c8b79d54a90
SSDEEP 192:DoGNN6i5LQmiUyw2P7X5zPr2v+FdEgR1VSuk6GQwKgqbHBU6:DoGNN629mP7X532MdEg0ukUwYhU6
TLSH
T1E912E830A8A9EC275DD7B555F0C732A35FE4207BDD88AF94E6E85B1C048669C234EC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b8bb9701b66b79f6e51f7652495ae95a26690ce4a04a44ae42121942f69b1cde
MD5 4d673a56dbf7454c10d00c5566f7b9fe
SHA1 ec1f3c7b5e8d3c122ee8662c749d6dd61d13046e
SHA512 db5a8f6078f638ef1d26c48b89fe8eee71b20b7b3dcb052126df5f66cf8561725aef866efd8a84aadecebe08d453fb7d06b70b31e1972b77f79297f329c652bd
TLSH
T189E04842D30000BEC07E033010871B302BE2D02002E203078A2142283C363443F34EC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3d9c2522680c67f770e84b5c7960b867d15747d760252b7d4517e992c2f80cd8
MD5 ffef68efb4a98cc1ef2540611cebe7f7
SHA1 d687932054aa514cb7806c438d44b37f0fc91f3f
SHA512 06db4aa672e5a9b439c908b8059be2da8a059e99a9d97ad5a325d8b99dfdd3663fe22f324fea5491b2d8590459c90586de415bdc5f2c143ccf88d662b998ea0e
TLSH
T1D6E00242D30000AEC03A533044831B342FA3C02002A213479E30026C3C313043F249D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a1fed6bf07f476b691d8fc8938adabc12fac7f1fa92f330ca09bc604faae62b4
MD5 4c3c1b88c0123f135ebc4fd3d4e7789b
SHA1 5638ef3fb32ac2aeb2258212317c35aee47f94eb
SHA512 c09da5024552d5a55a91d23ce702e97837a1105b65c4c5551795899c54517b6ebf7bb57a80babd71c042912d32775d6a48fd85e056b54fd6b26b1a96efb767cd
TLSH
T136E00142D70000BEC43A533044831B342BA2C05006A213479A2002683C313042F349D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 341f88476afe5efc43148fd2c8e4bd23cd0fd4e78f9b73a82230fa75aeb653f0
MD5 5dd24ab06fadab1e9bccdca99dbdec7c
SHA1 dce54063aa0f68b1510a4dcad9798cfd02b883b9
SHA512 74ba19d1e4934d4224790a4f6eb0beae1d1ea2bf460b1f2db47a9b2de501f2ec7e0a709dde04648f14bbdddc4b75f78b26bbf19b51c114b4914016a1389619bd
TLSH
T1A7E00182D70004BEC43A533054C32B343BF2C06006B3134B9E2112757C327042F34ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 92c1d52be09e65adca151d5fbf63966570840acec5b5f01cc022998a5525323e
MD5 68ae796b606d4a66578e089b9c47b38b
SHA1 1bbf22180023e4995ffbdcba3b930e8404dd9a56
SHA512 42b212d899c13e60c0e37fb110c998e5ee37c012e39f4a79079a26be24cbb16c09a2c3bb3aadcb09361afd275de2c4a65faeccaaa89ddf361b0f7cfe81fbd4e4
TLSH
T11FE00992D71005FEC43E533014C32B343BE2D0600AE2138B9E2216697D667192F74EC4
MD5 SHA1 SHA512 TLSH

Submit Download

8736f607-8534-47d4-a66d-9b5a8a44192d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8736f607-8534-47d4-a66d-9b5a8a44192d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

1ac2890d-e482-40e8-bd3a-0ac3b8200ea0.tmp

Path C:\Users\Admin\AppData\Local\Temp\1ac2890d-e482-40e8-bd3a-0ac3b8200ea0.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3aff56a3-411f-42d3-b664-10c0a5c3d335.tmp

Path C:\Users\Admin\AppData\Local\Temp\3aff56a3-411f-42d3-b664-10c0a5c3d335.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

MSI9745.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI9745.tmp
Size 132KB
SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
MD5 cfbb8568bd3711a97e6124c56fcfa8d9
SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
TLSH
T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5424_1465593027\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00a443b1-578f-434d-b0c4-bd4a268a7791.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5424_1895190526\00a443b1-578f-434d-b0c4-bd4a268a7791.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 580bfebeac515af0954cc08abb281f6a5c943f4cfbfad15a627724ccc837c9fc
MD5 163146d4603e2f5b8a6bfe9aab56131c
SHA1 1440822e1ccfb385a817ba77ab5a85e9f839148d
SHA512 a73925c7db76df7cb6c0cbe985c8c7a614d40c4c2d78f4ca5112baf182a99db24616fdfd1828e3972335685d2e086a473322b3124636a6317e4039145adf6909
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 dd7d8e698e9dffa848a809e1d54867d6c04dd3fabbf59f8ba61a5afd217fde2f
MD5 e87c4271593c07c7b80b7994ca494468
SHA1 2ac17b2f7b2eda8979b194fe5cc0f071ba286b3b
SHA512 0c483cbf4c932a135f3f15565a29a61a7126554f3a91fb460ec9f7861595801efcf6c0675b362f4a7ea9e3e5f2ff838349e517e6a92bc9b3ea9c6029e43a6daf
TLSH
T1D3D0123732114138C01064330046A1484404C10F410D41166438862F1A040500D0AC81
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Cache\Cache_Data\f_000001
Size 71KB
SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
MD5 4b73e2ff3024784eca66d2120a9bcb22
SHA1 2870bcb8ece10145e089262bb6634d18ac85bec6
SHA512 9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a
SSDEEP 1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH
TLSH
T1F0630245820BA35EE09D4A79D27481F61FC2CB5C2BBF5C27538289AB5F57DBF6410134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Cache\Cache_Data\f_000009
Size 1024KB
SHA256 45baa127d5e3fff1b36b901063a202b601ef7baf88035ac2c5eeb86862a5655b
MD5 a3801bbb9795ad975475f0f43fcfd1ca
SHA1 9f5f0695698fca98a1859579e1faeda5148b8fa4
SHA512 0e083d62574d74fbbc491b031f6581433085e9e88a155b5ea85ac61bfde230e7b952ab34a67131f78b524510f47b749dc11eb34222ac195d585b54120b862a4a
SSDEEP 24576:NBKRsbpL/aNQy6ey/Fw5RC5K0xuRhgwfX258C6RZye3Z:NBKRkpL/aNQy6nFJ5Nuj258C6Z
TLSH
T17D25331CD40B4529BE7B11A63629931E3E7A3109BAF406F7B8E412D8BCB0757F23D616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 1fe952190a29104b4d02175000fb3bd09e7e065db9d5eb558a7f4e9ee7555280
MD5 c2e099fec111d5f8363e274d86498aca
SHA1 ef79da5a78147db970ad43905bf6e49fd48999b6
SHA512 d5c4e1fb53216206a9471ee345bd1a34d5a941d959b1f8e1e5563aa327e36b103c7eb4bedcb3e71db62ce48441d9b7ac15885761336a224706ce096a03f8f55d
TLSH
T151B0125C03401881C334DA7630C140A031381C001133040045B1D235515B3634004205
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 67665d36efc73c5f244fc4bd23fc95c7d99484962310a2d8ca51f474f60e77ac
MD5 b6cefe249a75e438ec7b339e0fe57c1c
SHA1 d76ef60dc1fb4119b0ad4d35f2e1b09bd08faf4d
SHA512 99ac04f91f2c0f84e5d5a19657c27b63605e8e56838c2ce922e261fcf1fac3a7f0697d1834a1629d3aab8723858b1e456b7fc74a36dbcefed61ebf00605a4c72
TLSH
T139A00254434428AFC671EB7175D20385363A5C600307260945B1D26EE9A83815512118
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a499d.TMP

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a499d.TMP
Size 48B
SHA256 a32abff2b657304fb9ac31340f976d070603e2303aa6745d281daff383796423
MD5 51956e38eb15352cab2c5eeca571754e
SHA1 be3f1be4bd6b562128c3aa13cb88bd43739576c6
SHA512 34af75a72d914aff5845623600035acdc96b585bcd77760eab6b4c0623c7b13ac68d4fd8648262fd8d4a12dc9633cad175b8e8af932b5ca3df62335dc0fc5775
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 a3b3d76ebc5f0ce74ebf952b42b026f12f284247ebb8823cc9eb038a9a5e053f
MD5 61c0fbdf06c9813b1dd08896725c12ff
SHA1 c41ac3709b35a71b33bff5e1b03c7f4771ef1c69
SHA512 cf546b77e126da30ca4ad860fc99c4c6acba52cc73e562af0960257149d5c593e6cb0b3f1c2650c025621183c7e2eec9b89aeea3f01f998f886ca7634446ccec
TLSH
T184518FA2C3E4C7BD895166F43B307817CD2D091992283D2BCDEBEFEA67D1071D22124A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 74b49860f458a5d3a08d1e48a18606781270e770220bcdaaf516c8a1acaf39da
MD5 12fde1d1f0044929bac1a67e9c6806f6
SHA1 4143dd37a9a77b5f008990ca897f984f13c51639
SHA512 5032516cb386f01cf36c100ddedb34ff4c257374df3ffc79a17381d06fa05d7ff767a16c93d461ff8c3b78e491506895119112537f48e9a221f798e2b0b4bb68
TLSH
T1760182A6C3D4C6BD4A4127E437347813CD2E051592242D27DDE9EBDA57D1475D21064F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5b3564.TMP

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Network\Network Persistent State~RFe5b3564.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Network\TransportSecurity
Size 523B
SHA256 ae5f5b706a4815dac7de5ec829616dd5e24e88b3c106fd4821fc2bbbd70c1975
MD5 9e36f299bfd5369bfb4a8031fbbadbfc
SHA1 f0ee49e6c881b1ad23dd70706760a43d542efd08
SHA512 0785941e8d5dec32ca53343746ab6b483603f0d86aaf83986417e0d564366077b0014fb73e53bc20b75cafed009d6d8d771ad26ada2dfab3e5dd6711ef3cdc0c
TLSH
T193F059E386FFF57B202C5E733C447C191B3AB13150A5A8E4DA93517C20606F32507572
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5bcddc.TMP

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Network\TransportSecurity~RFe5bcddc.TMP
Size 356B
SHA256 01bae544ac90e67df4b974590974af8c571b1e9d17ea6694f892d41f93921817
MD5 e24ccb36896069545eea50c250d6a66b
SHA1 4efb1d58de74f72c298c80ab158ee32109d731e3
SHA512 55de1f75fa4eceed728fe31cae5e34c695004a3baf410bd97701dfdf58c4268d48a4eb87b07d7cc8ddd178801d862b834bb4a4628fa88e49f876a65f00743427
TLSH
T121E0C0D2817EE177103D4B2328447C262B36B034105174E4E593A67C30A04A32512272
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 50d519bc6e70e6a9fd27a00bd55ab86238fe5b81416f9efe47c3031dd3d8389c
MD5 10ea59fe54464422130454fa072b38fa
SHA1 b42bd4cb4e44f073326ad57693bb3f2901959598
SHA512 8cf309dd581dd9813e829480731459161b9ee46e4c4c2d45937b95c5ec03ca8f7a1c426b344fea39958a419b414c8ff6fed25a66ba2608b93d5cc980500bc145
SSDEEP 192:st+0e6Cf3C8paE+y/S+WiTPtqY2aMOT+MQ:stbe6CLiy/VpqTgvQ
TLSH
T111E1AA429F286D778CCBE719BA35BB12E6F5206161D44F98EBFC851C09D66CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 e08178f31dfea9b9838502120456795ebeac779eac9fde59b81d947b7b5fb356
MD5 02b678cd0c1566f7b80cf6fc1d210d28
SHA1 785ec49a2aa522aa0650b0ec42b95a572563baa3
SHA512 d870da1340532576e1366c227e540eaeab647f5cf78db793ff1e657fa3041f5bc6fc9473b6275305e527e2e9474a1b7bf20217911ab489fcf4112e5be22d7949
SSDEEP 192:st+0q6Cf3C8paE+y/S+WiTsaWY2aMuT+MQ:stbq6CLiy/VVWTAvQ
TLSH
T173E1BB429F2869778CCBE719BA35BB12E2F5205165D44E98DBFCC51C09D66CC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 d39426090abff2d5ba2aa5cbac239ed3c497b1d5b23ec5d9d96caf1b410cfde0
MD5 09ad54ab62624649c74d2fcaea64e20a
SHA1 54a3021020151e8e29b20f79f3a912a9957f7368
SHA512 6afe3b45b017cbbe9a40b0a772f9f85abe1f09a2042f3a5363ae2461b87a8ccfaa27bdfc31571aac8265fcd22b06ee525813ee63d19cd24e2b7cbf18a416304a
SSDEEP 192:st+0e6Cf3C8paE+o/S+WiTcYIY2aMeT+MQ:stbe6CLf/VHITwvQ
TLSH
T104E1B9025F286D774CCBE719BA35BB12E2F9206265D44E98EBFC851C09D66CC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 744e1b8ab66c92134922f4440684bf86ff5df8c579e0a2cf20dd8f80d5103a30
MD5 2f0a8f8866d3c1e7c09d1342ea1b2809
SHA1 d7bdbda295e2f07d7501d1cf0e204f5f5bddddba
SHA512 eda58842f90caddc36fb25d2ba692483eba4163b6771cd1b81633fad33e6ec3c18f8300a89be442497e78f621d08b51901e59b66c92c2983a1eea89523a21810
SSDEEP 192:st+0Y6Cf3C8paE+y/S+WiTkI1wY2aMvT+MQ:stbY6CLiy/VwWwT7vQ
TLSH
T193E1BA029F286D778CCBE719BA35BB12E2F9206165D44E98EBFC861C09D65CC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 6cbd92389fb83a133634fb2a498679a14e111c4e58d0af7ba1bc3bd41c1c9b81
MD5 72cccc5bfdeb49cb25dca21cee40ab53
SHA1 37381227438e0cf6e802afb391ce2f262a35049c
SHA512 8e9f1431653d985bd0c6015ad11fb325a15915c749bd15813a953d639fd4ea649bc0db8d5c5e34255aaa5019328dd684c9de14ebbdd70d63ee9a4fbf0019ad86
SSDEEP 192:st+0YQCf3C8paE+y/S+WiTkI1wY2aMMT+MO:stbYQCLiy/VwWwTuvO
TLSH
T128D1BB029F28697B4CCBE71DBA35BB12D6F9206165D44E98EBFD851C08D65CC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences
Size 6KB
SHA256 0049625961ca51bb912fb0eee3675e59451a6e2a70a536d603bd83afa60c3d46
MD5 583097e5e8874b050ae8282bb645acee
SHA1 2ad5d13e6c3d6641883c14d27d2aa1594f02797b
SHA512 fc3f955e81cf1787ba365e157c197a0730087165c9afbf4fc451291f141a723b611c026b55ac62e7569f7a5e7f6d01291c349e8259e74a9057b9ce9e8dfb3b86
SSDEEP 192:st+0e6CfqC8paE+o/S+WiTcYIY/FMeT+MQ:stbe6C2f/VHISJvQ
TLSH
T17AE1CA025F286D774CCBE719BA35BB12E2F9206261D40E58EBFC851C09D66CD630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a4344.TMP

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Preferences~RFe5a4344.TMP
Size 6KB
SHA256 bb782fba5d1ad21484a713bc539b3543418257b5b250a3f831d77b62f1816aab
MD5 da9574f1ca192893ad7727128aaab87a
SHA1 b144724bcc2c86588eef3cc3e7366aed780cb4f4
SHA512 f7ea9509de88a59081394579ec7976be4394286f5e79bc7c5b9909ee4efdf96ed112efc011c3d5cece368f27ee9a372027b39129891aaec697380f0bc00d5a19
SSDEEP 192:r+0YQCfJC8paE+y/S+WiTkI1wY2aMZT+MO:rbYQCBiy/VwWwTdvO
TLSH
T17AD1A9025F68A97B4CCBE719BA35FB16D2F9206165D44E98EBFC851C08D65CC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\Site Characteristics Database\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 1KB
SHA256 0e05b3014e7491f20007d1642871fdd9b2efeebf7b02641c4479ddf626f7e048
MD5 747f6bf07eceb4425dd8d33cf9995803
SHA1 fd962ef8da703ff914d1c509101ba6de36452a3a
SHA512 d8a0c2983a0c6353b27b5db5776a01e4838bb57753433d9108b537439f4df512187c98c8ff39590818b1cc960e18877648277d2d05243059eff7f17724975061
TLSH
T14D3177B3F454AF7389895796F28236471F21506FD2908E48E5DE0F1902DF2DD4A3AD23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 17KB
SHA256 151b88ead38f983d2625c5e00a4af896a591301f8c2f02c7ebdf96454e8106af
MD5 c617d83a6c8277c36085a767550f3804
SHA1 f0b268dac919b04fc567dcea63b3439850caf578
SHA512 0fb2816a2ff1edba9d2decc7901c1faf7d04690d19a03ceb39b7a637108a290affff380681273012b3b7b05ed626343792ff273b9d0bfe5b6e4ae2a5ba7f2631
SSDEEP 384:zb+aQikB+z/xvxjg/qhEmNgCC3rlOlx/z2U/9zq:2/UxvxjgC+nrI/z2U/Fq
TLSH
T1A1828D3AE429AE3358F7A641B649278BCBB5556291C16EE88DED2F0D06C73DC0706D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 17KB
SHA256 75168028fdd22758b33a332c78563cba4d8b9b440f7d40de4dd5bdbc15ec2215
MD5 a2c5acaa7e1e17f355c6770b7b12ce9f
SHA1 beb8e424bb8aa59561c128582eb3a1b6f62b39ae
SHA512 556368257dd1161769ddf2febd8c23e4624e727face94ed5b692700819936c5b99b85331b59f88a154b381db3a77f0f4abc308ccd2f8f97fbade405d7815e12a
SSDEEP 384:ze+aQikB+z/xvxjg/qhESNgCC3UPOlx/z2U/9zq:9/UxvxjgC+DUO/z2U/Fq
TLSH
T116828D3AE429AF3358F7A641B609279BCBB5556291C16EE88DED2F0D06C73DC0707D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 17KB
SHA256 08495304a1e174fdf4ebd9a13e6ce8c5c05d4d9a1fc7e219b212750a2a807b04
MD5 8dc43178619ec1b315f5770e9cfaae5f
SHA1 0e2e001f31423de03b877fa39bb7f98d6d2c1289
SHA512 3ff290fcb09220ab04dc299d6313433849b8dd18cbb5fceb0226574a25c6cf99c5d31e4afaff71466a8aca53c0c566cdbe7a44b33420d50efa6063d941f54411
SSDEEP 384:z/+aQikB+z/xvxjg/qhEyNgCJ3UPOlx/z2U/9zq:a/UxvxjgC+EUO/z2U/Fq
TLSH
T12B828E3AE429AF3358F7A641B609278BCBB555A291C15EE48DED2F0D06C73DC0707D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 17KB
SHA256 e2bdc1d1eb13bb26b543cefe88b07ad66c3b069526c04f3915b98c94dd06e143
MD5 da70dc677ac64a5aa8997e954c2dd8ea
SHA1 1f6755f12cb17c139da370a270006c78cdb524b7
SHA512 1684c956a22a8a6d9e0f22ba6becbdcfc09e71055128aee6adcb2b89755f39e676ce964a24530e872f8269b352901b5779c2585c6523e924b2722d753b73584a
SSDEEP 384:zz+aQikB+z/xvxjg/qhEmNbCV3rlOlx/z2U/9zq:2/UxvxjgC+brI/z2U/Fq
TLSH
T173828E3AE469AF3398F7E641B609278BCBB5556291C15EE88DED2F0D06C73DC0706D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 16KB
SHA256 e197f42bab4ddc63bda27cf1fa677f1083557d4294c6723c6dd2727908dfa8a7
MD5 b169d68df1944f749c6fb465fb6b89a4
SHA1 73b729f039c6ba76f7b11bb4077cdfe4264f8556
SHA512 6c7ce97c40eae4cacd39ac740e2e9033aa069233f23d2edc49de46820f5466199083eaf699ef26cfe283708fc2a019c0fccb42f8de0443ee6fcb7d64d90d9af4
SSDEEP 384:z6+aQikB+z/xvxjg/qhEeNbVk3rlsz2U/9zq:x/UxvxjgC+Zr+z2U/Fq
TLSH
T186729F37A56D6E3395F7E905B95C174BCBB554A291C16EB88AED2F0903CB3E80312D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 2KB
SHA256 4070841e1c0b91061b058caa5513a35d9cd4e4a8fd0b568720b773b3a801e69e
MD5 4ff1c60644d61026d593d88aa5dc7134
SHA1 07f98ecde535b94336e43d1df593ea1429e52348
SHA512 f63e6ff33d8eb21ac3eef51457866cbde4239111678b8d430792a0871ba9368d16bf9df47635a5bb93f0f02a1cf765d1e24e499c272b5f7115ff4b88e30a4a5f
TLSH
T19351D7B3B804AF3789A64A48F9463B129B3660A6D6D12F50DADD0F1C01DF2AD1322C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 3KB
SHA256 b6b97410759151f87cec1e8ab71e4cf6ea8141a2e9a3b1e13f10db7b5cb00b46
MD5 a1bc4e9ae82aa1f371211fd0cf7a8c9a
SHA1 f4ebda1cb48a3c9dd51fb4a21c6be8a46cfae65c
SHA512 78cf1fd46db2048a323318550a70ffa103c57a3735e26a2e7d990ddf637b556943d7cfb2f0603a314463fa57e2f91a89f7f1822d38ac09759235846c31115f45
TLSH
T19A71C572B864EA374DE69A44F8853B06B7A55027E1D03F98DAED0F1D01DB3D81352C07
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State
Size 4KB
SHA256 dd3b4637fe4558ee6db3d89f13c874284e0bb1cb69657ac17721abb4fe7f855e
MD5 94f251a6676d4f41dc890c6fd9e2cf3c
SHA1 5a438e01ab1e94ef68060a884680f5171e75eeaf
SHA512 9f05cf7382348d7cd9fd82633173c2dda393c87256c8fb91f465dfef568621d910eeac457b55cbd8f48f77792f1fe40fde9294f28770690c77aae7e8108d1223
SSDEEP 96:zu9FNkCEVfCJ02f8Frh/cInURoDotoDD5ntzD1B+ZEZ6OJ3ZBHZmTAldla:zWFNbVJUooDUctHL+ZE55uK8
TLSH
T11B91A472A538AA374DF6DA49F8853B02A7A55027E1D0BF98D9EC0F1D02DB2DD1312D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59f11d.TMP

Path C:\Users\Admin\AppData\Local\launcher.retrac.site\EBWebView\Local State~RFe59f11d.TMP
Size 1KB
SHA256 3bb8b56c73e12d15bef700abe27b4c789de1185d0fa7bb45510bffc477dc5db4
MD5 788f7be98a80f58a2ad6e988094809ae
SHA1 9aa2ddf1df2a6fc323e79c456cd69c6a677b8648
SHA512 ab4eb200f2cfd524a8cd27232fae54b94d038f472115a8a570eac35ad66f29903270f3ce33284453dd1e958302c6c31ebd698ecaf9e324fc34f16e20fc2aac62
TLSH
T1DF2181B3E488AE7785894A95F282724A1F60506FD2808F08E5DE0B1902DF5ED4B3BD23
MD5 SHA1 SHA512 TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 b4a56efd022a7dd39515b20c56517d7df609b34c28f0cb60f706521fce8ab78c
MD5 131fb432d0ccf338859c71bf6c4119e0
SHA1 addced682a308f4677f460f65aaa06c68d568e00
SHA512 7c22a4dbe126dc13a740f32a781af535c45197c28f99f2694da76e0c0a065c53d52f5f2f5ff468d3bff34c4b5b1d40b045af0e07e1b9b07209bce5ee3c47d01d
SSDEEP 48:Kj6dOCmNkbYzKJ9zMYXdDzXXulkz/SFxDWj6dOCmNkbYzKJ9zYYjpdDzXXulkz/r:PYz0JMmzHumz/SFxYz0JYEzHumz/S0
TLSH
T18EA1CD4447D70656F2F7DBB244B36AA19A77BC86BA454B9E40C242040C73B407DB8FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 bae04a3e63aa2e2cc4782e8be33bcc5abcee0e0c6ea94d404349dcce3b0af202
MD5 0692aba7376cddbcb57bbd2a37d4f390
SHA1 b055dfe537a7ce6028050d7fbb2a53a81a483eb3
SHA512 c6a37f96dc2bd985039502366b1902ec6fdeb94946f28456fb5950489e7eb3ae619becb8b063d2fd3940e879fd0f6d8719d6b58059ec9242048b05d89d042d7d
SSDEEP 48:wSj6dOCmwfkcYzKJ9zMYXdDzXXulkz/SFxDxTj6dOCmNkbYzKJ9zYYjpdDzXXulW:wFYz0JMmzHumz/SFnGYz0JYEzHumz/S0
TLSH
T111A1ED4446D60656F2F7DAB244B376619A37B886BA454BDE40C242040C73B447DB8FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Retrac_3.0.9_x64_en-US.msi:Zone.Identifier

Path C:\Users\Admin\Downloads\Retrac_3.0.9_x64_en-US.msi:Zone.Identifier
Size 133B
SHA256 ec814d0c7cd010cf30f450063e6cdd6272db723eb6863225093c32cb2a5c2ec6
MD5 5959779fe94274b6dbee041cefa30564
SHA1 d6343f29f5aee4144c4f73e91ac2e96e7f3dbc5e
SHA512 8a8413667489852b4b157c5071567c9af904039745166f073e04817fcf705e30756ebe29294c444a54ed29a37f0054a26643e82029864e43f33a1048ee218e59
TLSH
T11EC02BD3C4840400010122D93A8AF5BDB4072C04C8450010FB401083A48C0F4A476102
MD5 SHA1 SHA512 TLSH

Submit Download

Sin confirmar 730171.crdownload

Path C:\Users\Admin\Downloads\Sin confirmar 730171.crdownload
Size 14.4MB
SHA256 7ef021039fcc397f9cf378e995c448c4312f1f0ea13d05020d6f55a7749d12af
MD5 2b940d52c3090f57c5cb6065884792f8
SHA1 d33dacf38d0ef6de6af065e73e91806ee384da72
SHA512 dcb767833910252fe75546d370215dd15da9d0066be728db14592ab431612a42ae129b861529831fb1ea244aa3dc54e0c3e8ec049d6395b86436b6cb20ee24e7
SSDEEP 393216:hc6EI0Zn4/BgpsCIPRKeow3ujYOqXgTzkRNcIqP:+K0ZsqpEPweoTjYmkRKI
TLSH
T152E6330B7C859F20C8261D3786B7DB28076DBD206616F6633299B469FFF17C099328D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3104_1179299275\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3104_1179299275\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5424_219403230\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.6MB
SHA256 eeb182e531bd6206499c963303e8155deba4ccb113c14462149f3d0f858c14a4
MD5 f4df665a9a6247541754c1f0ee7e6b4b
SHA1 ef47b3bf96106f82b86d9830aec86e18df0ac1a9
SHA512 c730eeb4ea0ddde6c0341b12c00fa75f1bb1fb0128c2f565993bf853967cd1221676d4d360c721d7b8cc5c2e982846972f70bbc32d9599a6a4b65b6261fd6215
SSDEEP 24576:G2gmSp1QdoO/vvTLaWxOBk3afqpaA4Fr22CN3JEBYK6YktF046AWrMr2x:X
TLSH
T12E47C22436F92210E7F79E3CA8F06A234A3E7D5B9C15DE8D45451B4E0921FB0E872F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{6be7cec3-c5f6-4146-a996-37b2b52b0c5e}_OnDiskSnapshotProp

Path \??\Volume{b99e3a64-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{6be7cec3-c5f6-4146-a996-37b2b52b0c5e}_OnDiskSnapshotProp
Size 6KB
SHA256 588da2d0dfd82ba0e8b4d972eef84b6384c32095b7b45c736b4ecc909eac742a
MD5 3c9ca0068ce7c6eff984e641f68d82a4
SHA1 9628067cfc1a5254becd808175c9f13ae39a983a
SHA512 96c88661e4cd5e67722d21532d2f0967494257fe0ef0698a11b4c78fdbf6e9e12f691344d649b878fa3e4146268e35860a6dd6dab7eb05bdc1f50ff1f6ebbbf2
SSDEEP 96:FkVt3vc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:mNb++ZVm
TLSH
T1BAD178085AE54321E2B3AB3129F54557A877B911EF33CB8E0198638E6670A10F935F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3412-297-0x00007FF8DC600000-0x00007FF8DC601000-memory.dmp

Download

memory/5380-309-0x00007FF8DC600000-0x00007FF8DC601000-memory.dmp

Download

memory/7216-5215-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5218-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5206-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5216-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5217-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5219-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5214-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5207-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5213-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download

memory/7216-5208-0x0000022C3EC50000-0x0000022C3EC51000-memory.dmp

Download