Overview

overview

10

Static

static

3

pumb_payme...94.pdf

windows10-2004-x64

10

pumb_payme...94.pdf

windows11-ltsc_2024-x64

3

Resubmissions

10/09/2026, 11:15

260910-ncnscascla10

10/09/2026, 11:08

260910-m8jylabl7y4

Analysis

  • user interaction
    yes
  • max time kernel
    750s
  • max time network
    753s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 11:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pumb_payment_order_10.09.2026-10494.pdf
  • Size 989KB
  • Sample260910-ncnscascla
  • SHA256 77c844c2b39bb7b9d9bcc4fc618675696aa01b8d52625247a330f950e001d8bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwarebackdoordefense_evasiondiscoveryruratpersistencespywaretrojan

Malware Config

Signatures

  • Family: RuRAT

    RuRAT is a remote admin tool sold as legitimate software but regularly abused in malicious phishing campaigns.

    trojanbackdoorrurat
  • Contacts a large (1025) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 12 IoCs
  • Badlisted process makes network request 3 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 13 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 20 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 52 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 56 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 58 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 53 IoCs
  • Suspicious use of SendNotifyMessage 35 IoCs
  • Suspicious use of SetWindowsHookEx 60 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\pumb_payment_order_10.09.2026-10494.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2652
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://lon1.digitaloceanspaces.com/pumb.digital/payments/pumb_payment_order_10.09.2026.498065.rar
      2⤵
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4220
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7fffe815c188,0x7fffe815c194,0x7fffe815c1a0
        3⤵
          PID:2068
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,13750343056524493041,16338819465651422410,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3
          3⤵
          • System Time Discovery
          PID:3520
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,10877509903116614231,2477165537622122839,262144 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
          3⤵
            PID:4596
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,7241281337701801800,14796826870565026694,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
            3⤵
              PID:2756
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,4896894254951332972,14567192263215993528,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
              3⤵
                PID:3848
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,13335297695255298942,11909339803353007205,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
                3⤵
                  PID:3928
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,3000203260321449878,10682215674132755396,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                  3⤵
                    PID:4612
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,8295885513637837461,11620199070002516503,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
                    3⤵
                      PID:608
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,13325107965601732271,9417263128554208204,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
                      3⤵
                        PID:3548
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,4877419363615249536,7236657279017019741,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
                        3⤵
                          PID:3284
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,17216202726859264531,18155955950011076179,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
                          3⤵
                            PID:1668
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,18345728813692372226,6772851109522776318,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
                            3⤵
                              PID:3384
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5860,i,5816339537221309858,8076214800329358026,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
                              3⤵
                                PID:3372
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,16006495531289479438,2204497996958118271,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                3⤵
                                  PID:4360
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,3159502465285978565,14164824318523558663,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
                                  3⤵
                                    PID:5180
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,980723486889275832,3216509153287547974,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
                                    3⤵
                                      PID:5188
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6792,i,13932738886314720285,10730370559085258403,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
                                      3⤵
                                        PID:5208
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,980723486889275832,3216509153287547974,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
                                        3⤵
                                          PID:5276
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,9020932193950112170,10851723371064182092,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
                                          3⤵
                                            PID:5716
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,3748479850988159771,18416476908365323947,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                                            3⤵
                                              PID:6016
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,450093883522287911,2384183839185397825,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
                                              3⤵
                                                PID:4856
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,4874861486458423166,9760992578503286120,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
                                                3⤵
                                                  PID:4604
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,200744370674188548,5436620578909499153,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
                                                  3⤵
                                                    PID:4360
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6568,i,9708804277519239797,7507736462575624896,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
                                                    3⤵
                                                      PID:4188
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4512,i,18353538926304551056,7698086694688359390,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
                                                      3⤵
                                                        PID:4460
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6696,i,7051587890219048245,994516274498847440,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
                                                        3⤵
                                                          PID:4172
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7444,i,10452206206764674735,17543445333060781342,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:1
                                                          3⤵
                                                            PID:752
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7668,i,5612661894842496688,17653445813541028108,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:8
                                                            3⤵
                                                            • Modifies registry class
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:1176
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4288,i,3347000602418896687,15651023675749344717,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:1
                                                            3⤵
                                                              PID:5808
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7556,i,13167921330835774191,6667027413490000652,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
                                                              3⤵
                                                                PID:5468
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7660,i,13498255762938667350,13230309468946876306,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:1
                                                                3⤵
                                                                  PID:6100
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7684,i,125846643422848526,3805496352138938714,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:1
                                                                  3⤵
                                                                    PID:6136
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7744,i,5408668340988775259,7579348324770657081,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:1
                                                                    3⤵
                                                                      PID:3804
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8132,i,2312055727034540717,868808341598355356,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8168 /prefetch:1
                                                                      3⤵
                                                                        PID:2432
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8808,i,7173122494932644474,11951527235054300785,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8816 /prefetch:8
                                                                        3⤵
                                                                          PID:1400
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8276,i,9641710797365398004,9812081197176518808,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:8
                                                                          3⤵
                                                                            PID:5916
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8824,i,2131278605382749257,9310093200435237339,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8568 /prefetch:8
                                                                            3⤵
                                                                              PID:4172
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8728,i,14538030860220674255,15488395231046973248,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:1
                                                                              3⤵
                                                                                PID:2268
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8556,i,13909845426790101509,16149683015012163375,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8424 /prefetch:1
                                                                                3⤵
                                                                                  PID:4616
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8832,i,18103878507327442125,5599815002958716874,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:1
                                                                                  3⤵
                                                                                    PID:2184
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8864,i,15257273309210902003,10954934908423184686,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8968 /prefetch:1
                                                                                    3⤵
                                                                                      PID:5888
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8736,i,12859132920774782558,12827826338704183584,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9104 /prefetch:1
                                                                                      3⤵
                                                                                        PID:5272
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8636,i,524833222531167406,9399753509029517965,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=8676 /prefetch:1
                                                                                        3⤵
                                                                                          PID:5908
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9472,i,17933678154430050099,13416461105665737819,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9300 /prefetch:1
                                                                                          3⤵
                                                                                            PID:5388
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9460,i,7443403130274751020,8705116950769491861,2097152 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9508 /prefetch:1
                                                                                            3⤵
                                                                                              PID:3380
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9728,i,6234022358053329057,10032492159997947800,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:8
                                                                                              3⤵
                                                                                              • Modifies registry class
                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                              PID:6148
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10232,i,17308697796420138750,27985870119700466,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:8
                                                                                              3⤵
                                                                                                PID:6740
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9704,i,10646589100868747915,11350015113950309996,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:8
                                                                                                3⤵
                                                                                                  PID:7044
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,11743185910817666284,1533397203334992562,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:8
                                                                                                  3⤵
                                                                                                    PID:6488
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=888,i,12746193185758324796,5298268559293573878,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
                                                                                                    3⤵
                                                                                                      PID:6556
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7216,i,2045798483205461385,19891387109533584,262144 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9748 /prefetch:8
                                                                                                      3⤵
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:5984
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,4168212210954378782,6601980531169888383,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
                                                                                                      3⤵
                                                                                                        PID:9604
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,6361303997512108507,13593157973925088836,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
                                                                                                        3⤵
                                                                                                          PID:9760
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,13669049424598998839,720957755441487522,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
                                                                                                          3⤵
                                                                                                            PID:2880
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,6340040598910531106,13648329332302528440,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
                                                                                                            3⤵
                                                                                                              PID:8676
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,5791053265012033016,1556428729632439655,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
                                                                                                              3⤵
                                                                                                                PID:6840
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,7958561269872215479,9373066917297607108,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
                                                                                                                3⤵
                                                                                                                  PID:9372
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9732,i,5141891895320388682,12275749609144750748,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
                                                                                                                  3⤵
                                                                                                                    PID:5216
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8608,i,18162803251091677412,7693973213158924433,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9724 /prefetch:8
                                                                                                                    3⤵
                                                                                                                      PID:10400
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,4922538193642835201,10059581667775147028,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
                                                                                                                      3⤵
                                                                                                                        PID:7948
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10136,i,4994696727014180096,14311749513083404323,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=10052 /prefetch:8
                                                                                                                        3⤵
                                                                                                                          PID:4280
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10096,i,9607642216599429473,87362287128854704,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9724 /prefetch:8
                                                                                                                          3⤵
                                                                                                                            PID:10152
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,1201523121223215781,15157432986783732244,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
                                                                                                                            3⤵
                                                                                                                              PID:4548
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9724,i,1677336204097145172,10447497991015671176,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:8
                                                                                                                              3⤵
                                                                                                                                PID:5408
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,11800973089959548293,11729108049365142899,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:8
                                                                                                                                3⤵
                                                                                                                                  PID:8040
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,14090069875204407747,15483387164463096699,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
                                                                                                                                  3⤵
                                                                                                                                    PID:10100
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,7058460134711178237,822822584203164335,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
                                                                                                                                    3⤵
                                                                                                                                      PID:11164
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7872,i,14491224438068148347,11328752548048102862,524288 --field-trial-handle=2104,i,2684542325739177512,12451825985237105051,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
                                                                                                                                      3⤵
                                                                                                                                        PID:2656
                                                                                                                                    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                      "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
                                                                                                                                      2⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                      PID:3556
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=DC94CA78E7F5D26EEF7D2F881CB219F7 --mojo-platform-channel-handle=1728 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:4704
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=AA0B80C4B6E14945C17A094B1C252C85 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=AA0B80C4B6E14945C17A094B1C252C85 --renderer-client-id=2 --mojo-platform-channel-handle=1720 --allow-no-sandbox-job /prefetch:1
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:2236
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=5D20C76CFF2C7C92E410B865C63ADAF1 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=5D20C76CFF2C7C92E410B865C63ADAF1 --renderer-client-id=4 --mojo-platform-channel-handle=2300 --allow-no-sandbox-job /prefetch:1
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:5288
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=E18AC39245D8AB973545A97DE9A8007C --mojo-platform-channel-handle=2336 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:5432
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=243D4D5BDFA7EAE9B5DB02C31C76BC15 --mojo-platform-channel-handle=2748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:5888
                                                                                                                                      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
                                                                                                                                        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=7FA7EE767F4BB6A8FEE8EAABD9628FE0 --mojo-platform-channel-handle=2432 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:6108
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                    1⤵
                                                                                                                                      PID:1832
                                                                                                                                    • C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe
                                                                                                                                      "C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe"
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:7120
                                                                                                                                      • C:\Windows\system32\msiexec.exe
                                                                                                                                        "C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\3ca3e2fc12ac2aa3.msi" /qn /norestart
                                                                                                                                        2⤵
                                                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                                                        PID:6388
                                                                                                                                    • C:\Windows\system32\msiexec.exe
                                                                                                                                      C:\Windows\system32\msiexec.exe /V
                                                                                                                                      1⤵
                                                                                                                                      • Badlisted process makes network request
                                                                                                                                      • Enumerates connected drives
                                                                                                                                      • Drops file in Program Files directory
                                                                                                                                      • Drops file in Windows directory
                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                      • Modifies registry class
                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                      PID:6408
                                                                                                                                      • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                        C:\Windows\syswow64\MsiExec.exe -Embedding 7B467C5C2310FC8A04A8794E5CA65030
                                                                                                                                        2⤵
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:6288
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe" -msi_copy "C:\Users\Admin\AppData\Local\Temp\3ca3e2fc12ac2aa3.msi"
                                                                                                                                        2⤵
                                                                                                                                        • Checks computer location settings
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:4900
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" /silentinstall
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:6636
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" -firewall
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:6600
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" /start
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:6800
                                                                                                                                    • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                      "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" -service
                                                                                                                                      1⤵
                                                                                                                                      • Checks computer location settings
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:2888
                                                                                                                                    • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                      "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" -service
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • Drops file in System32 directory
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                      • Modifies system certificate store
                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:6824
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe"
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:1096
                                                                                                                                        • C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe
                                                                                                                                          "C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe" /tray
                                                                                                                                          3⤵
                                                                                                                                          • Checks computer location settings
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Loads dropped DLL
                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                          PID:6248
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe" /tray
                                                                                                                                        2⤵
                                                                                                                                        • Checks computer location settings
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                                        • Suspicious use of SendNotifyMessage
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:6016
                                                                                                                                      • C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                        "C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe" -firewall
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:9588
                                                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                      1⤵
                                                                                                                                        PID:2372
                                                                                                                                      • C:\Windows\system32\mmc.exe
                                                                                                                                        "C:\Windows\system32\mmc.exe" "C:\Windows\system32\taskschd.msc" /s
                                                                                                                                        1⤵
                                                                                                                                        • Drops file in System32 directory
                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                        PID:10220
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                                        1⤵
                                                                                                                                        • Checks processor information in registry
                                                                                                                                        • Enumerates system info in registry
                                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                                        • Modifies registry class
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                                        • Suspicious use of SendNotifyMessage
                                                                                                                                        PID:6988
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0xf4,0xf8,0x124,0x7fffe5a0c728,0x7fffe5a0c734,0x7fffe5a0c740
                                                                                                                                          2⤵
                                                                                                                                            PID:4148
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,7615966010601094006,10886060080497904996,262144 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
                                                                                                                                            2⤵
                                                                                                                                              PID:8804
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,16015901775079644082,14710525136302835601,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2324 /prefetch:3
                                                                                                                                              2⤵
                                                                                                                                              • System Time Discovery
                                                                                                                                              PID:7336
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,11637644728693230538,17179769540007297438,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2416 /prefetch:8
                                                                                                                                              2⤵
                                                                                                                                                PID:10156
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,11090753903522273171,3730329408193834547,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:1668
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3440,i,12597712210979845757,14320451990010337517,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:5180
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,1502846552548283759,4279028111867570252,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5236
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,15016455138372750449,6581595293223177542,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:4820
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,2282101572683978334,4794305363965393259,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:9208
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5884,i,17830001315020510006,10699361328006130396,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5600 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:11108
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3248,i,729833165518382240,12488416355190421733,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3472 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:10352
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3672,i,9324855641074562746,15800391035852862845,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:10472
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6044,i,12583372062036606213,7188318745836054634,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3588 /prefetch:8
                                                                                                                                                                2⤵
                                                                                                                                                                • Modifies registry class
                                                                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                PID:10516
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5788,i,3627575496260773860,4697213146484441209,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3560 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:10668
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6196,i,14606081597568896826,12562572282759720252,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:10936
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6044,i,6993228611840001825,14092745109532847637,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6088 /prefetch:8
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:9640
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,748036393488211359,14731295410618065065,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6880 /prefetch:8
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:4480
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,15541887863723119104,1059024487271316596,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6764 /prefetch:8
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:7720
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4592,i,7231902059343132307,7854515572826571251,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:4468
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4636,i,967588525679875385,16604441037891911736,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6884 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:8444
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6204,i,14781643509386224524,11434906305050898961,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:1856
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4456,i,12869789712840944644,10722047410431427152,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3640 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:9476
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3652,i,3926743624076965661,5186175954760205682,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4516 /prefetch:8
                                                                                                                                                                                  2⤵
                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                  PID:7372
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6236,i,10537483635295602682,10306445132157575098,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3968 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:7592
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3672,i,8526998089241433173,18259769030361516625,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6228 /prefetch:8
                                                                                                                                                                                    2⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:11012
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4212,i,3315680061740327599,16571210939026484304,262144 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5168 /prefetch:8
                                                                                                                                                                                    2⤵
                                                                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                    PID:4544
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3672,i,6459927629109802113,6574479907062051294,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:8
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:6236
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7060,i,14378977133045882506,13880237260180475598,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7084 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:3936
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6828,i,8292732986441794851,6819451935126378910,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:2340
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6088,i,17946076213117517035,1241152935084570279,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3444 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:5612
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5840,i,1881898928739016604,243735990283946698,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4464 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:10388
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7096,i,8097978302044239803,14909999492165158314,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6828 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:6232
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7144,i,10137732345558789102,14948944274902535061,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6228 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:7816
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6076,i,12626780774090611013,569979048409470871,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:6904
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3480,i,3502949063957444688,4881786348172218751,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1148 /prefetch:8
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:9116
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4568,i,18347208292943561179,3448697973922506558,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6176 /prefetch:8
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:10992
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6660,i,5192364309495118257,2630444526451470157,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3580 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:3248
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=3980,i,15989649600464817773,5738748833504591150,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:9868
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6556,i,16075893657107179452,1830306856139296406,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6536 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7184
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=3692,i,300121859887816601,16743612166117218800,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:3276
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6648,i,15062784946809297550,3084767607222248971,524288 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6756 /prefetch:8
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                PID:8652
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6120,i,16849061169142650314,18392220322308350093,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:4008
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=3692,i,275398996191948889,13211298432550380487,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3564 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:9592
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=6600,i,12826525473088087677,10865722304115894051,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4592 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:8708
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7476,i,4325786797079858219,15352225070163228745,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7444 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:1200
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7772,i,17983699326514897512,7740961439608682478,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7764 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:8484
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=3132,i,11397525083848924335,8833766015881096210,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=868 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:10716
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=8016,i,15167045818784395195,14554938561637921286,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8060 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:5700
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=3624,i,1381193851094092699,14534161203414366118,2097152 --field-trial-handle=1996,i,1669491252927821492,9431923856083975436,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:9876
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                PID:3712
                                                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                  PID:7920
                                                                                                                                                                                                                                • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\Desktop\AddUse.pdf"
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                  • Checks processor information in registry
                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                  PID:10396
                                                                                                                                                                                                                                • C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe"
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:7964
                                                                                                                                                                                                                                  • C:\Windows\system32\msiexec.exe
                                                                                                                                                                                                                                    "C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\5b9997eb7996f38d.msi" /qn /norestart
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                    • Enumerates connected drives
                                                                                                                                                                                                                                    PID:6320
                                                                                                                                                                                                                                • C:\Windows\system32\msiexec.exe
                                                                                                                                                                                                                                  C:\Windows\system32\msiexec.exe /V
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                  • Enumerates connected drives
                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                  PID:6392

                                                                                                                                                                                                                                Network

                                                                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                                                      e59529e.rbs
                                                                                                                                                                                                                                      • Path C:\Config.Msi\e59529e.rbs
                                                                                                                                                                                                                                      • Size 731KB
                                                                                                                                                                                                                                      • SHA256 392fcadc39878c8b0f8c2dc03f6e943ed436ecbc6169f9b2ff6207c2f891989f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      EULA.rtf
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\EULA.rtf
                                                                                                                                                                                                                                      • Size 63KB
                                                                                                                                                                                                                                      • SHA256 ff89e44b7e6b7c8c9a84c67e40bde6491f851b0e6e4143ac8f665538eec11e87
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Privacy_policy.rtf
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\Privacy_policy.rtf
                                                                                                                                                                                                                                      • Size 139KB
                                                                                                                                                                                                                                      • SHA256 1fcb0c18d74b4157752a5776ca47bf31f893453b4bcb82ba67b402769d054c26
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      eventmsg.dll
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\eventmsg.dll
                                                                                                                                                                                                                                      • Size 57KB
                                                                                                                                                                                                                                      • SHA256 badd947460e6ac9ef7d9abc286054b5b73e17ab5694f827f26d56203974f1ea2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      libasset32.dll
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\libasset32.dll
                                                                                                                                                                                                                                      • Size 9.4MB
                                                                                                                                                                                                                                      • SHA256 299b3f5e49d3303e0a4793fee52a1165c340a560729115f1a4d421d6f0416fa5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      libcodec32.dll
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\libcodec32.dll
                                                                                                                                                                                                                                      • Size 5.9MB
                                                                                                                                                                                                                                      • SHA256 a4a53244ea6bafa55c6f1c4b13da9a6a77e758842593e51b01b34dc137465930
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      licenses.txt
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\licenses.txt
                                                                                                                                                                                                                                      • Size 19KB
                                                                                                                                                                                                                                      • SHA256 4ef24da2e7933364af0c7918207927283d0b7664c615b888cc80843d7a62faa4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      rfusclient.exe
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\rfusclient.exe
                                                                                                                                                                                                                                      • Size 17.0MB
                                                                                                                                                                                                                                      • SHA256 e4b203c315f44799e4945c3b95501b9bf5480bda5ff596dadbfebdb39996020a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      rutserv.exe
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\rutserv.exe
                                                                                                                                                                                                                                      • Size 21.7MB
                                                                                                                                                                                                                                      • SHA256 6fc8237bbb1cb778bf7735fd92963cd1f95acd44e7c987c40e9349ed5be85327
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      vp8decoder.dll
                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Remote Utilities - Host\vp8decoder.dll
                                                                                                                                                                                                                                      • Size 384KB
                                                                                                                                                                                                                                      • SHA256 851093c801f9f2f3ba670ff2c14c0a673b17efd72731c28a49ca3dcb64b57718
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1004799659\manifest.json
                                                                                                                                                                                                                                      • Size 238B
                                                                                                                                                                                                                                      • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      LICENSE
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1007631815\LICENSE
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1007631815\manifest.json
                                                                                                                                                                                                                                      • Size 78B
                                                                                                                                                                                                                                      • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1009035960\manifest.json
                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                      • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_108084361\manifest.json
                                                                                                                                                                                                                                      • Size 119B
                                                                                                                                                                                                                                      • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_173131310\manifest.json
                                                                                                                                                                                                                                      • Size 135B
                                                                                                                                                                                                                                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1792054674\manifest.json
                                                                                                                                                                                                                                      • Size 135B
                                                                                                                                                                                                                                      • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1957160862\manifest.json
                                                                                                                                                                                                                                      • Size 165B
                                                                                                                                                                                                                                      • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_1984704038\manifest.json
                                                                                                                                                                                                                                      • Size 113B
                                                                                                                                                                                                                                      • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_2133781384\manifest.json
                                                                                                                                                                                                                                      • Size 160B
                                                                                                                                                                                                                                      • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_518996080\manifest.json
                                                                                                                                                                                                                                      • Size 177B
                                                                                                                                                                                                                                      • SHA256 45365e90d3acff2e5fb10c9b757b61c676642330dc7017716633d829d8ef60d3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_805732062\manifest.json
                                                                                                                                                                                                                                      • Size 165B
                                                                                                                                                                                                                                      • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_892056002\manifest.json
                                                                                                                                                                                                                                      • Size 85B
                                                                                                                                                                                                                                      • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4220_900126582\manifest.json
                                                                                                                                                                                                                                      • Size 43B
                                                                                                                                                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      ReaderMessages
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                      • Size 36KB
                                                                                                                                                                                                                                      • SHA256 b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      ReaderMessages
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                      • Size 56KB
                                                                                                                                                                                                                                      • SHA256 111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      ReaderMessages
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                                                                                                                                                                      • Size 64KB
                                                                                                                                                                                                                                      • SHA256 4e9ce42a288afc3102c5377bb836a07a7d0c2d5faafc7af99b2bd13d5845cfe5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      SharedDataEvents
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                      • SHA256 d087f38988b8825480c82c0fe6203603df4978d35f59e29654b7824118acbacc
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      BrowsingTopicsState
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                      • Size 414B
                                                                                                                                                                                                                                      • SHA256 f9e16702f6e1f97dcfdaa6d7d5a92ec94606b786eab46ee2c91dd680d7cf17ce
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000005
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                                                                                                                                                                                                      • Size 73KB
                                                                                                                                                                                                                                      • SHA256 fb9acea2fa7074cb3fdebf730adefc33c50367f8797af574901352caa814d779
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000007
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                                                      • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000009
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                                                                                                                                                                      • Size 87KB
                                                                                                                                                                                                                                      • SHA256 38106711a3306af02257ac9e26038b6aa8b9445672d9e8a48de7ce96be1524ff
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00000b
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                                                                                                                                                                                      • Size 437KB
                                                                                                                                                                                                                                      • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00000d
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
                                                                                                                                                                                                                                      • Size 519KB
                                                                                                                                                                                                                                      • SHA256 97a6c462b322b5f6b16b8b4851bf36db8278e3a04888eaf6755926c3a8e68666
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000012
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                      • SHA256 85841de62d766bdce85c481086a2a9dab58aa299f188ec97ad8eb9b594b2e474
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000027
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                                                                                                                                                                                                      • Size 62KB
                                                                                                                                                                                                                                      • SHA256 29e3c6c1aec37ac2af49f0a0318d6a4c0653e8e26ef8b3ee91b923073dd3c197
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00002b
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                                                                                                      • Size 158KB
                                                                                                                                                                                                                                      • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00002c
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
                                                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                                                      • SHA256 b7582acf1f182c6a66e203cd6eee889d409cd05ff4950975128a32fc3e0c0418
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000057
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                                                                                                                                                      • Size 119KB
                                                                                                                                                                                                                                      • SHA256 44fc984b209524016918c328be0d6a7f8b6e01342adae493f08c8ea7c59a34c0
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000060
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000060
                                                                                                                                                                                                                                      • Size 63KB
                                                                                                                                                                                                                                      • SHA256 2aa31f7db7485bbe1aefedbf6a990c734dcba6afd3c2f7c47df55fe1f4046697
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000062
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000062
                                                                                                                                                                                                                                      • Size 50KB
                                                                                                                                                                                                                                      • SHA256 b67dc89870bc7eafd97bbbcfde7b04a88849a5927cf53d2895ae9924da91ab8d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000063
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063
                                                                                                                                                                                                                                      • Size 60KB
                                                                                                                                                                                                                                      • SHA256 aeb4d22ffd608b06ad97f74b64a8df781ea9d5657cd11464e05c31cfa3b5a97a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000075
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                                                                                                                      • Size 30KB
                                                                                                                                                                                                                                      • SHA256 cb844161d5e18ea1c4ec05f4f061b5b332a72438447271e74674b9dfef8e8ffe
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_000078
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
                                                                                                                                                                                                                                      • Size 52KB
                                                                                                                                                                                                                                      • SHA256 b0e52c6f71ab254dfdaa108982e93fd9ec2274a1b012ec438671c3c79fecb9d7
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00007a
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
                                                                                                                                                                                                                                      • Size 373KB
                                                                                                                                                                                                                                      • SHA256 87f59d53ee5f80d4e743ef0aa46039e83f4f54d5f878ca4f81f213592bc02dba
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_00008a
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                                                                                                                                                                      • Size 89KB
                                                                                                                                                                                                                                      • SHA256 a37dc922eab8d9d09fbaddf09f48e7d1260aa0724bfdcb19b8e68c33dbb4c943
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000b5
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b5
                                                                                                                                                                                                                                      • Size 73KB
                                                                                                                                                                                                                                      • SHA256 f3d2fda12260ccf193da50e70fe5efb8b89d3c5d4e246eaa053f2cbf4fb07ca4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000c6
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                                                                                                                                                                                      • Size 47KB
                                                                                                                                                                                                                                      • SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000cb
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                      • SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000cc
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 adb8949e4b3ef7657771e33c93acac92c8fdda08304ad8ae83c5361534929750
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000d0
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                                                                                                                                                      • Size 42KB
                                                                                                                                                                                                                                      • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000d1
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                                                                                                      • Size 23KB
                                                                                                                                                                                                                                      • SHA256 09ea40210be4eb1e3917e149854af1465c3916110a412fa89f55b485e93f857b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000d5
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d5
                                                                                                                                                                                                                                      • Size 114KB
                                                                                                                                                                                                                                      • SHA256 4cb01c79311b23fcbded8443281e980796843419ea7d7a3fe9713a6a4530567a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      1fd94f7443a75762_0
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1fd94f7443a75762_0
                                                                                                                                                                                                                                      • Size 307KB
                                                                                                                                                                                                                                      • SHA256 bd3d7ada731a0a6f761018e33738a05b28094da8c1fdf4fc97d6109459dab5ba
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      fe8b7ca011cc9644_0
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                                                                                                      • Size 301B
                                                                                                                                                                                                                                      • SHA256 286334d35123be60a0c6a5cd658bcf179601fb4e2fc6ed906ee15eb4f39bdfb0
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      temp-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                      • Size 7KB
                                                                                                                                                                                                                                      • SHA256 d132c9d75e446d1293fe00b18cf8dd21bda080d676e7c3f4738bc6bad0b6480d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 d258e1fc6162b63a9f097bc0934b736ecb8052b9391f8736d154e8689b036f2e
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 9602e49afd649eff27cd75eebfcea40d4dd2275a74bfd5abf8ff3791b8a66eb3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 7KB
                                                                                                                                                                                                                                      • SHA256 62b6bcd9325450528d9940295308438d1e5f615a0e3fe4298ac69336ef7cd82f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                      • SHA256 0c5bd9767183e2f5902c15a537455eef557534d1ec69dd9d2e6c18b46e5d2243
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                      • SHA256 99e34b7ebb9166b48d339c5cd527928bd5920f60912029cd84707488d51e8930
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                      • SHA256 9131af01534a8268100ed84472e9e1ae0a7066ec351ce53e750c0d668f7a31d5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 39KB
                                                                                                                                                                                                                                      • SHA256 15b6790cdccff60a5604647e2e50246db5b71deafd6044d2cb8c2177a84806b5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                      • SHA256 9dc122c4096520ea62a4bbff763a6ce438e9552c1a018f3887db5728e57825a2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 41KB
                                                                                                                                                                                                                                      • SHA256 6239a337be65b1a89ccdda5c03411677c9de6d49520875715564cf87318a6aa2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                      • SHA256 28d16bcf38550e71d0a87e119fc1a43f42a303aa838cd4d3361c5e744e89fb3b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                                                      • SHA256 f49c8ed83e6ff679bad46bfd66624134ba79165616e5a581b1cfb1c0b25c0c20
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                      • SHA256 aad270cdaf79cfa4b1359c73af517a11326948fae02704634f367d42a56e75ad
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                      • SHA256 fc6309e12d46ac9aed89bc78a6fcd3d707a1951a5eb52a5391a897276a10cfd1
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                      • SHA256 e3a84e7aec672cd103c7a64a3bfeb3e4337d6e61026eb9bdaf314bba2172c27d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 97fd2fba43ef1c5f517af46a48033e9e00bf83c807ec57825ab59629f00e6adf
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 4af30abadee1d0bf7a1d3c686d2ee34fff273882e10a820a437261c3930674ec
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 f5f2dc5c76d89864b6e5ef28cbf036f1ae04fde8b9f1554b7c644d3635266f58
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 e748e365c3d1dd0595efb3baad5e9dd85e1fab6c586b6c48d554d74a56523184
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                      • SHA256 747c42d721cfc56d3c0966f0d3718d286475bbffa43a2b199b8c79be88514984
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 47a6318f0322b08247fbed9ee315880cd7c668d266ce6f8c0125a1e723ebe14f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 7f1c7df62cfa9d499464e56018cbbee4e978fa723bc07fb9c7f4766bc940484c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                      • SHA256 e6c1346a9236732cf0c9888e4b9c394c23523ac9a4a27691aeb8aab2c8fed0b4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 ef1090a743319097dafd5303d22986852b7ce7aed72ccf19c378886892453e0d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                      • SHA256 4525ef5c28206ec682b6cdae6b931d9119c573ca659804d27ee22162c3cb10e2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                                                      • SHA256 2705a787c1075b0413a84f88be151671f9ac45b7e2661c652d820078133b287d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                      • SHA256 d8a706a504b6db15ba68c6cd4a5341df738ffedd8331b2d359a9e9b77e5dbca6
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                                                      • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 120B
                                                                                                                                                                                                                                      • SHA256 19decbe751f899011c3261bf2669afcb6b9d861a6d4f209a20171b972a4fa4fd
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 144B
                                                                                                                                                                                                                                      • SHA256 be8f311d913f11fa6bba45fda2f9c87e5f7638e466e049f304a6c8b3a7a8867d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index~RFe5bf00a.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bf00a.TMP
                                                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                                                      • SHA256 959cab732076ad2a330d88799345c23db980335d6ce0b931c1779b2278c8a796
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      1fe41a3c396e09a5_0
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\1fe41a3c396e09a5_0
                                                                                                                                                                                                                                      • Size 1023KB
                                                                                                                                                                                                                                      • SHA256 48988b590e6521b80cce6b1d8e5104ea9af7e0b19571c0d6dbe101aa3f577509
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      ef160ac596b2f787_0
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\ef160ac596b2f787_0
                                                                                                                                                                                                                                      • Size 255KB
                                                                                                                                                                                                                                      • SHA256 079d2460ae824a361bd37db4cec6f49e1998abdd7cd048901086f7d87cca1a43
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                                                      • SHA256 e75fb092bf01c209324f5936dca596902196a7409e7ce8d54af22be497420613
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                                                                                      • Size 234B
                                                                                                                                                                                                                                      • SHA256 dc4cb4f393b2ca7a0a8dcbf492f1ac07f69c0e5544f9440b090e2f597da0df37
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                                                                                      • Size 234B
                                                                                                                                                                                                                                      • SHA256 cb0f68dccfbdfad879447076aaeb6a14001406d1a937ebeaca772eef5fc4dfff
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                                                                                      • Size 150B
                                                                                                                                                                                                                                      • SHA256 8adfaa2972a7a14dc9bc351f8171e75bf4fdff5d3fcd8770526b641e0ba8a35c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt~RFe612b93.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe612b93.TMP
                                                                                                                                                                                                                                      • Size 157B
                                                                                                                                                                                                                                      • SHA256 f74236564fe2bb5b45a745d7b73782d58607496519dbf95f1ce85cb157104759
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 242KB
                                                                                                                                                                                                                                      • SHA256 8bc2e93e2ac42f2aca05598ef629b380880622bdb9e05e3e70d427a6eed42f41
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 115KB
                                                                                                                                                                                                                                      • SHA256 82ecb9792754be0c4196da9c2a80f13bcc099bff742c1703b7416ee2e6ba261d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 243KB
                                                                                                                                                                                                                                      • SHA256 c1e77a8bda3169b46ae5a30e59a082f20d1370628d886c897ba424d7c6437a12
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 242KB
                                                                                                                                                                                                                                      • SHA256 70a380bd612b1659dcc23c9c97d0111c0e77c5d31f865bc6da91be91f7fb0774
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 243KB
                                                                                                                                                                                                                                      • SHA256 51c966122e5557d6c94844545da82de0272c228b515155a0f9e996a0dd43807f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 243KB
                                                                                                                                                                                                                                      • SHA256 cf545b5990a25599435c9a5b6b87672bba680166db85edf4c29bef65edb16b51
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 243KB
                                                                                                                                                                                                                                      • SHA256 b7a2b71d4b4d89913af479c4423d60e0e4fa4fde8eb8d38e081f9c481af20412
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 325KB
                                                                                                                                                                                                                                      • SHA256 215b9335b4a08334e4acb0072bbd0681d0ccde7dd3b9a1fc863a8fcb0803f80a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                      • Size 243KB
                                                                                                                                                                                                                                      • SHA256 ec9ab67d62f4fb25acdeee36b993494bc4d4592331cfbb982c9428bae0a06917
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      blocklist
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                      • Size 105KB
                                                                                                                                                                                                                                      • SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      protocols.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      autofill_bypass_cache_forms.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                                                                                                      • Size 161B
                                                                                                                                                                                                                                      • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      edge_autofill_global_block_list.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                                                                      • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      v1FieldTypes.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                                                                                                      • Size 509KB
                                                                                                                                                                                                                                      • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      crl-set
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                                                      • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                                                      • SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                                                      • SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      LOG.old
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                                                                      • SHA256 59956ad3711a39431b95e0055fb8bd5d9cd3135f9db8c15972f45224121ffc5e
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      LOG.old
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                                                                      • SHA256 856d00f962d6d103569cd46c6011b7f72f690dba9d7bbfca86b9b016f19baf41
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                      • Size 6B
                                                                                                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000e2
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
                                                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                                                      • SHA256 c77e240e6fecc593b97236479f9c43e54886bd47075ccc0bdbe42322e8081869
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      f_0000e3
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e3
                                                                                                                                                                                                                                      • Size 88KB
                                                                                                                                                                                                                                      • SHA256 652a51694c5b13f8c4d4fc79dbf9d019e2c8511db3270a752e4177c15a57fd53
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 7KB
                                                                                                                                                                                                                                      • SHA256 2d875351d092c4ecaf1936e469661232c1848f2a5151b956fe7ccc20f8671833
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index~RFe591c87.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591c87.TMP
                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                      • SHA256 7e82a8437cb6aa8ce25624610afdf72f85f98999ba66023f3f6700f4df75c98f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      SiteList-Enterprise.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Edge Profile.ico
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                      • Size 70KB
                                                                                                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      CURRENT
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
                                                                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001
                                                                                                                                                                                                                                      • Size 41B
                                                                                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                      • Size 23B
                                                                                                                                                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 24KB
                                                                                                                                                                                                                                      • SHA256 93f448b7cd37837868545d03fc363b6f7c01293b2ef1181b998a65c7fe1e7c5c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                                                      • SHA256 af6d2085987495745979ef7478347aecc978f92f2a0c7979d009f8dfe57981d4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 111B
                                                                                                                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                      • Size 25KB
                                                                                                                                                                                                                                      • SHA256 03df8f5baa7e3e9bc83321c8bb3a1f40dcf880183c20791258ab9e3ef3172db3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Sdch Dictionaries
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                      • Size 211B
                                                                                                                                                                                                                                      • SHA256 7f23db939ebe1e9cc7e3ef0fd2f88397f44a6edcc7ed8f818f0ad28c379573d9
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Sdch Dictionaries~RFe58c186.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58c186.TMP
                                                                                                                                                                                                                                      • Size 40B
                                                                                                                                                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                      • SHA256 9e53b70cdb0f317c4113fa5f918c83c80910c6c4876a11e9f771e67f9242bae3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 24KB
                                                                                                                                                                                                                                      • SHA256 808343d6f4ff9f785efbcdd493411dff5fc67b6e2c9e7102503e8731e72f5c0c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                                                      • SHA256 fbefacfa38f1afd5f893b6252f322c5bf15651754787853d2d2473662b874f43
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                      • Size 23KB
                                                                                                                                                                                                                                      • SHA256 3a75a9e284a25303c8b5e6a3074b0f14c59aaf76c26478349eb856d3ffb5f791
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                      • Size 35KB
                                                                                                                                                                                                                                      • SHA256 ed0f292c54a4334b844b054dffbdbcb05a900e0f8d3027c6103bb414fc6723bf
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\70599668-79a8-4baa-bc5b-42404e70b9c9\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                      • SHA256 85fcdda8684e6f78371aeb0e603702f2ef40ab5d9153ac9adf813ad7c2028288
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                      • SHA256 98a2695555cee67153778ce8b7b94a9d2a22c167ec9c47ce095eeebf23ec3a3c
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index~RFe590507.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe590507.TMP
                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                      • SHA256 fde4bb3d2b934f3cc486882e982794ae2321ca5b5bd80e376cb5c5e9bf338045
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b8c30ab0-dff7-4a90-ba32-68c301934c24\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                      • SHA256 3bd11921f182b33855dbb733c1daa1e659d93c4a55e8bba988576ccafa3327d6
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index~RFe58e3e3.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b8c30ab0-dff7-4a90-ba32-68c301934c24\index-dir\the-real-index~RFe58e3e3.TMP
                                                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                                                      • SHA256 0a5508fd450a553ada3c1afcaa4036de1a4c5acb42c4f61182cd3befd1ad129b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                      • Size 481B
                                                                                                                                                                                                                                      • SHA256 08a005d67f11409819e67ab6ceba49e2656175c2b1649f4adabd924532b9c21a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                      • Size 476B
                                                                                                                                                                                                                                      • SHA256 33c705d06418e2f50d86aa0658d0762fbede41fdbcc1ad474854a978ee991fb4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                      • SHA256 31e01907218df0d3ac6757c1586df40d39373692b39d8dce062c25504f001faa
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      the-real-index~RFe590064.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590064.TMP
                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                      • SHA256 fd1dc4905bf109a8b568a73793310627d8e91c2779f5f4612788a7acd2c0627d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      sync_diagnostic.log
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                      • Size 7KB
                                                                                                                                                                                                                                      • SHA256 41b697433e53dd1d84ec2dbdacaf6aaaf5bea4f0d22fec4c1bd16860ec5f72df
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      domain_actions.dll
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
                                                                                                                                                                                                                                      • Size 82KB
                                                                                                                                                                                                                                      • SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      OperationConfig
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      OperationConfig~RFe593f13.TMP
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593f13.TMP
                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      office_endpoints_list.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                      • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 ab1671cc5fc4312f9276525a4801193e666ea584543c195a397df7a2363430fd
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                      • SHA256 582c99668013ea1947136ac9a7c48b49c0c1be0d18a2119dcae941ff372856a2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 d41be426babe5cce973f5b263d2567132c45d2bd20a9845e516f3e3b16726e8d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 3e06d03c4f2941f173716ffe7886d0313e419a47888825b81cf6552bc2a11cca
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 29KB
                                                                                                                                                                                                                                      • SHA256 fc3d459707b1643e484c173c225db4d513e50e247354f07424db82c9b05d5aae
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 c7f39f1980d5e61355f9cb8cc92e8d039d21057f42ef0285aca392df11a03bf4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                                                      • SHA256 3475a6f03c77632d9dd6152d946988c42c5efa4c63327fc0c7b87ad6ad30d304
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                      • SHA256 73d7d1e95e45f58a7db2685ddf20bbe4354de70a71e5ed3907a033fae4ed56c2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      safety_tips.pb
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                                                                                                      • Size 163KB
                                                                                                                                                                                                                                      • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      typosquatting_list.pb
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                      • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      keys.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                      • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      nav_config.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                      • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 372B
                                                                                                                                                                                                                                      • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 732B
                                                                                                                                                                                                                                      • SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 132B
                                                                                                                                                                                                                                      • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 252B
                                                                                                                                                                                                                                      • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 a1c77989fba5da5b15e6b586f2ad6a8250047f9d6591f5e2a33207ea766cba48
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 ce012fdb8d369cb3d3e3dd4350534b012960cbfaab1295aa7f74df9e444fdf49
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 612B
                                                                                                                                                                                                                                      • SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 972B
                                                                                                                                                                                                                                      • SHA256 ff2333c17048bfeb6f6976f16f4e5f8a88fd57126a97a8d900daac20c2ed6d2b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 852B
                                                                                                                                                                                                                                      • SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 492B
                                                                                                                                                                                                                                      • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 daa704ae58dac475370bea2bc4f2d004c2d26bbcdb85f70132b75038897ee2b2
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 49d123bf2473c05a20f7a392fbc09922b1156717b461bf3f184aabd930cfd6ac
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                      • SHA256 340cdb1ea8958f214ddd84236212066e3ae3362c0efc98a906c9064b4fca0265
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      70175d31-e108-4ebd-b334-d65689401713.tmp
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\70175d31-e108-4ebd-b334-d65689401713.tmp
                                                                                                                                                                                                                                      • Size 13B
                                                                                                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                      • SHA256 f57b29a8ea76be66eaf20ce53dc48b9cb2f7d6165530f91931c8ccc53d3d4060
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      3ca3e2fc12ac2aa3.msi
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\3ca3e2fc12ac2aa3.msi
                                                                                                                                                                                                                                      • Size 27.9MB
                                                                                                                                                                                                                                      • SHA256 4a726c14ad0479c2fb240f480c1443445badfa7122c6b18c9a376900f76d2e36
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      802c320e-3008-4d98-bfc1-ccebf4356395.tmp
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\802c320e-3008-4d98-bfc1-ccebf4356395.tmp
                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      84dd3eb5-0adb-401c-9e2b-b799a2a359d9.tmp
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\84dd3eb5-0adb-401c-9e2b-b799a2a359d9.tmp
                                                                                                                                                                                                                                      • Size 1B
                                                                                                                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      content_new.js
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4220_1242504697\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      4d872d73-f165-4eea-82dc-8888dd54c08f.tmp
                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4220_1588092920\4d872d73-f165-4eea-82dc-8888dd54c08f.tmp
                                                                                                                                                                                                                                      • Size 157KB
                                                                                                                                                                                                                                      • SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      pumb_payment_order_10.09.2026.pdf.exe
                                                                                                                                                                                                                                      • Path C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe
                                                                                                                                                                                                                                      • Size 29.0MB
                                                                                                                                                                                                                                      • SHA256 8e7dff8e12405414f1ada932036651085970738ff34f4a03fa8eba8a4550a3e1
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      pumb_payment_order_10.09.2026.pdf.exe.crswap
                                                                                                                                                                                                                                      • Path C:\Users\Admin\Desktop\pumb_payment_order_10.09.2026.pdf.exe.crswap
                                                                                                                                                                                                                                      • Size 4.0MB
                                                                                                                                                                                                                                      • SHA256 063781376307ac6f0ab765b5c4faf5f9a04a5635b7dee25023e322e724c7f180
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      pumb_payment_order_10.09.2026.498065.rar
                                                                                                                                                                                                                                      • Path C:\Users\Admin\Downloads\pumb_payment_order_10.09.2026.498065.rar
                                                                                                                                                                                                                                      • Size 29.0MB
                                                                                                                                                                                                                                      • SHA256 0c87f5a1388ec53879302b603e7a0db558b5eebbd8f2f5a3dc88d1e6e1a79952
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      MSI5B74.tmp
                                                                                                                                                                                                                                      • Path C:\Windows\Installer\MSI5B74.tmp
                                                                                                                                                                                                                                      • Size 165KB
                                                                                                                                                                                                                                      • SHA256 1f6f0d9f136bc170cfbc48a1015113947087ac27aed1e3e91673ffc91b9f390b
                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                      memory/1096-1764-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/1096-1763-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/2652-1518-0x000000000B8C0000-0x000000000BFB2000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/2888-1714-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/2888-1715-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/4900-1663-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/4900-1664-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2121-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1887-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2530-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2508-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1783-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2563-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1766-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2031-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1827-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1807-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1845-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1879-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2237-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1965-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2475-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1765-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1895-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2459-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2400-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1925-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-2258-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1957-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6016-1949-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6248-1759-0x0000000000760000-0x0000000001915000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6248-1760-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6600-1716-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6600-1713-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6636-1711-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6636-1712-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6800-1727-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6800-1728-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1815-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1803-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2105-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2233-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2027-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2254-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1961-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1761-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1953-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1762-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1945-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2383-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1921-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1779-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2455-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1891-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2471-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1883-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2504-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1875-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2625-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2551-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-2519-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/6824-1841-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/9588-1848-0x000000006D280000-0x000000006D9B6000-memory.dmp
                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                      memory/9588-1847-0x00000000002A0000-0x0000000001920000-memory.dmp
                                                                                                                                                                                                                                      Download