hxxp://tryshift[.]com

Analysis

user interaction
yes
max time kernel
162s
max time network
200s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 16:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://tryshift.com
Sample261002-vc7c1ssvbv

Score

8^/10

discovery installer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
170	996	msedge.exe

Executes dropped EXE 6 IoCs

pid	Process
5024	Shift.exe
1656	Shift.exe
2876	Shift.tmp
3864	Shift.tmp
5772	Shift.exe
5832	Shift.tmp

Loads dropped DLL 15 IoCs

pid	Process
3864	Shift.tmp
2876	Shift.tmp
2876	Shift.tmp
2876	Shift.tmp
3864	Shift.tmp
3864	Shift.tmp
2876	Shift.tmp
2876	Shift.tmp
3864	Shift.tmp
3864	Shift.tmp
5832	Shift.tmp
5832	Shift.tmp
5832	Shift.tmp
5832	Shift.tmp
5832	Shift.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Shift.tmp
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Shift.tmp
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Shift.tmp
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Shift.tmp
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Shift.tmp
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Shift.tmp

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
996	msedge.exe
5668	shift.exe

Inno Setup is an open-source installation builder for Windows applications. 9 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/files/0x000600000002364e-486.dat	innosetup
behavioral1/memory/5024-489-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/1656-492-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/1656-610-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/5024-609-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/5772-647-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/5772-790-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/1656-906-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup
behavioral1/memory/5024-3209-0x0000000000460000-0x0000000000613000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{A9BF1371-383F-41A2-AE33-6CC2CA633E7C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5764	msedge.exe
5764	msedge.exe
3864	Shift.tmp
3864	Shift.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe

Suspicious use of FindShellTrayWindow 45 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
3864	Shift.tmp

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe
1572	msedge.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 1572 wrote to memory of 4360	1572	msedge.exe	90
PID 1572 wrote to memory of 996	1572	msedge.exe	91
PID 1572 wrote to memory of 1120	1572	msedge.exe	92
PID 1572 wrote to memory of 1120	1572	msedge.exe	92
PID 1572 wrote to memory of 1120	1572	msedge.exe	92
PID 1572 wrote to memory of 4912	1572	msedge.exe	94
PID 1572 wrote to memory of 4912	1572	msedge.exe	94
PID 1572 wrote to memory of 5028	1572	msedge.exe	96
PID 1572 wrote to memory of 1240	1572	msedge.exe	97
PID 1572 wrote to memory of 5028	1572	msedge.exe	96
PID 1572 wrote to memory of 5028	1572	msedge.exe	96
PID 1572 wrote to memory of 1240	1572	msedge.exe	97
PID 1572 wrote to memory of 1240	1572	msedge.exe	97
PID 1572 wrote to memory of 4812	1572	msedge.exe	98
PID 1572 wrote to memory of 4812	1572	msedge.exe	98
PID 1572 wrote to memory of 4812	1572	msedge.exe	98
PID 1572 wrote to memory of 3420	1572	msedge.exe	99
PID 1572 wrote to memory of 3420	1572	msedge.exe	99
PID 1572 wrote to memory of 3420	1572	msedge.exe	99
PID 1572 wrote to memory of 5076	1572	msedge.exe	101
PID 1572 wrote to memory of 5076	1572	msedge.exe	101
PID 1572 wrote to memory of 5076	1572	msedge.exe	101
PID 1572 wrote to memory of 2004	1572	msedge.exe	102
PID 1572 wrote to memory of 2004	1572	msedge.exe	102
PID 1572 wrote to memory of 4756	1572	msedge.exe	103
PID 1572 wrote to memory of 4756	1572	msedge.exe	103
PID 1572 wrote to memory of 3612	1572	msedge.exe	105
PID 1572 wrote to memory of 1764	1572	msedge.exe	106
PID 1572 wrote to memory of 1764	1572	msedge.exe	106
PID 1572 wrote to memory of 1876	1572	msedge.exe	115
PID 1572 wrote to memory of 2248	1572	msedge.exe	116
PID 1572 wrote to memory of 4708	1572	msedge.exe	117
PID 1572 wrote to memory of 1716	1572	msedge.exe	126
PID 1572 wrote to memory of 1716	1572	msedge.exe	126
PID 1572 wrote to memory of 2300	1572	msedge.exe	127
PID 1572 wrote to memory of 2300	1572	msedge.exe	127
PID 1572 wrote to memory of 1228	1572	msedge.exe	128
PID 1572 wrote to memory of 1228	1572	msedge.exe	128
PID 1572 wrote to memory of 1228	1572	msedge.exe	128
PID 1572 wrote to memory of 4784	1572	msedge.exe	129
PID 1572 wrote to memory of 5024	1572	msedge.exe	132
PID 1572 wrote to memory of 1656	1572	msedge.exe	134
PID 1656 wrote to memory of 2876	1656	Shift.exe	135
PID 5024 wrote to memory of 3864	5024	Shift.exe	136
PID 5772 wrote to memory of 5832	5772	Shift.exe	139
PID 1572 wrote to memory of 5764	1572	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://tryshift.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c4,0x7fff744ac188,0x7fff744ac194,0x7fff744ac1a0
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,6460570586358715682,5299896203964038326,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,8670858257753343755,12858828046083203580,262144 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,10409666649168501304,13191206557944586449,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,13483519529982909974,3801758604863945391,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=1692,i,15920360256852117730,17882543252709780719,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,3163875285820748575,2115642792813568189,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4468,i,15232575918082184650,2665489092285575897,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5092,i,10565424723093025485,15571456876697864493,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,5163668867757351336,7622235061569860480,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,16591188926685014776,11751909891001601471,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,8379031485648950603,16951697204055097703,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,8379031485648950603,16951697204055097703,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,4563170540814810546,14219574299561744506,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,8828791476315099184,18067680163334402489,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,11807275536699910797,16456773118949543966,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,4454039495654787774,3657870987211014812,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,10540915924871818061,5106024373430765705,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,2966238360917502329,2203836500989866757,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6392,i,6798947825578137327,9160909147088985807,2097152 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,7944460847798090590,7086521487099564321,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:8
  2⤵
  PID:4784
- C:\Users\Admin\Downloads\Shift.exe
  "C:\Users\Admin\Downloads\Shift.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5024
- - C:\Users\Admin\AppData\Local\Temp\is-A3X0DAGILU.tmp\Shift.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-A3X0DAGILU.tmp\Shift.tmp" /SL5="$90058,14387139,1692672,C:\Users\Admin\Downloads\Shift.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    PID:3864
  - - C:\Windows\system32\schtasks.exe
      "C:\Windows\system32\schtasks.exe" /delete /tn ShiftLaunchTask /f
      4⤵
      PID:3612
  - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
      "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe"
      4⤵
      PID:3040
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Shift\User Data" /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\Shift\User Data" --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Shift\User Data\Crashpad" --url=https://o1334372.ingest.us.sentry.io/api/4511542579494912/minidump/?sentry_key=0310b8b1ace8011c46f23a1a632d18d0 --annotation=plat=Win64 --annotation=prod=Shift --annotation=ver=147.2.0.487 --initial-client-data=0x120,0x124,0x128,0xe8,0x12c,0x7fff5a9f98e8,0x7fff5a9f98f4,0x7fff5a9f9900
        5⤵
        
        PID:5016
      - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Shift\User Data" /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Shift\User Data\Crashpad" --url=https://o1334372.ingest.us.sentry.io/api/4511542579494912/minidump/?sentry_key=0310b8b1ace8011c46f23a1a632d18d0 --annotation=plat=Win64 --annotation=prod=Shift --annotation=ver=147.2.0.487 --initial-client-data=0x1dc,0x1e0,0x1e4,0x1b8,0x1e8,0x7ff7d9d25fa8,0x7ff7d9d25fb4,0x7ff7d9d25fc0
        6⤵
        
        PID:5424
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2104,i,6238616707156726957,12057469145214334969,524288 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2116 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5668
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,17577720455489616106,16383880297430052698,262144 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1932 /prefetch:2
        5⤵
        
        PID:5840
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2480,i,14654578580331754858,1115336652979124456,524288 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2556 /prefetch:8
        5⤵
        
        PID:4028
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3608,i,17222204252644258712,847544066821546402,2097152 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3672 /prefetch:1
        5⤵
        
        PID:888
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3636,i,15585020079267405941,17111106632657942539,2097152 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3764 /prefetch:2
        5⤵
        
        PID:5996
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4812,i,9083113722804493582,13212795557503951833,2097152 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4820 /prefetch:1
        5⤵
        
        PID:952
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5208,i,4551488624764256727,1923340236002690956,2097152 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3336 /prefetch:1
        5⤵
        
        PID:5500
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=6036,i,7007708573110802989,3526201908387514574,2097152 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=6044 /prefetch:1
        5⤵
        
        PID:4392
    - - C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
        
        "C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,16273264444627990370,5784283539617961284,524288 --field-trial-handle=1972,i,3622283799030976806,4100092097319864663,262144 --variations-seed-version --pseudonymization-salt-handle=1980,i,9360540285367485869,8138652166081843400,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=6280 /prefetch:8
        5⤵
        
        PID:4528
- C:\Users\Admin\Downloads\Shift.exe
  "C:\Users\Admin\Downloads\Shift.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1656
- - C:\Users\Admin\AppData\Local\Temp\is-S8W7CFIHAW.tmp\Shift.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-S8W7CFIHAW.tmp\Shift.tmp" /SL5="$8006C,14387139,1692672,C:\Users\Admin\Downloads\Shift.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Reads the TCP/IP host and domain name from the registry
    PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5432,i,6061505365052379100,4013923920056215606,262144 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,8065954664533980324,5170719696090150651,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=1060 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,18258503883592896534,2826012723291505725,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3284,i,1260541581487401752,9968312274294555434,524288 --field-trial-handle=2264,i,4165707348724030503,2813374780545973863,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:8
  2⤵
  PID:1548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:744

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5552

C:\Users\Admin\Downloads\Shift.exe
"C:\Users\Admin\Downloads\Shift.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5772
- C:\Users\Admin\AppData\Local\Temp\is-A9L4QGH8VX.tmp\Shift.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-A9L4QGH8VX.tmp\Shift.tmp" /SL5="$40304,14387139,1692672,C:\Users\Admin\Downloads\Shift.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  PID:5832

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5980

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4337c9e5-7a51-4bde-aeb3-f90ff312fddc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4337c9e5-7a51-4bde-aeb3-f90ff312fddc.tmp
Size 26KB
SHA256 f983049942d3584e56680d7c83b9ea4bbdf892f191c7e1885eceaffdb085260a
MD5 702fceff3268408766f6d90d44c506a2
SHA1 27c24406061e205308d90b59e352f1b931b39c54
SHA512 3e5476fbb499820fb366f36f9f4f3e10bc55f2ecd1139e63c15137cf447f84f2bde5b764fb0afe50c170a499c9642a257e2698b2750e1efb82d6d797bf693bc6
SSDEEP 384:xiFiZcIBzsN38TUNTUlIlFbK0Va7y17WczIGmh/qPelidtgOIwZOybnoT:YFQxSwg/VVU2eCmlidXsS8
TLSH
T163C22BF248E7987AD9AF9703A77E2D035D7CC167B584AA50B3D85A0CCC961BFC30A805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b340223-1057-401d-af3d-99dea809dfaf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7b340223-1057-401d-af3d-99dea809dfaf.tmp
Size 8KB
SHA256 c2d92d1b7ca0bf6d6985029379c79f61b7dd9194df58011b67ed9d2afc1cdc71
MD5 a26c5faed90672e62b334f0b577497fd
SHA1 4ac97dd627ce6dd0ed2df267cdfd1d23bb53c02c
SHA512 b4a11476043b4c8afa764011b9c233dfae05f0b973dc05d8b03b5d6eb36bee7da978f8edff901f722f34b991d96529cf748c6fda9f761df1be24353c82fecb51
SSDEEP 192:aONZ6IE7QmiUymDTPuIGmhQRx4LC7sW5U6:aONZ6DtrPuIGmh/UsWU6
TLSH
T1E302F935ECB8BCBB9EF3AE08F4877A236EA4112BE6C16F84D5D41E0D00D725C1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e0581b6-a467-468a-b3ac-63a80ce2ae81.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\5e0581b6-a467-468a-b3ac-63a80ce2ae81.tmp
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e73b391410b47c494ee7953905a0c60fd04c6bc35617583539b46b92968689a8
MD5 c67fbef7f62bf0056c3e3f786716b78a
SHA1 45f832458a5b84f29df5280a7973ebf46d014c4b
SHA512 623599849df6e275e849b53aa15de4c0c6df018ceb72805f4afbfea2a8577410fc6f21085b8473298805a9eec11bfc75b61276472cfcad39c54461995984dd1a
TLSH
T180D0C0F0CEF896F0F031343C01344142308C274122021211B432001C0C900C34265DE8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

082c18f9-2764-423e-af06-cdc5ea806d2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\082c18f9-2764-423e-af06-cdc5ea806d2d.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

137feb90-836c-4601-80b2-ef77175bfff5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\137feb90-836c-4601-80b2-ef77175bfff5.tmp
Size 10KB
SHA256 9e2f2a966bf85f66a8ce136fdc781788431560ee5c3fadc320dfe22f9a3e725b
MD5 1c673e35c83d05914fad6359a0f85a39
SHA1 0038401b27cbfaec83cd893d552ff36bdbc88942
SHA512 19cf92abf93137e79fe64955514bf8e19bde32120341bf628947ada551dba633e482fbbbe0ea797aa0b261a560ef66e7ccee2d08916eb7f96fd759ac9a1cc814
SSDEEP 192:sxZNRhnp/fasoNOZIdpicHW6+WNvgpBYap8tjIg5kJ:sxZNvp/fasoNvnHbEBQa
TLSH
T1B832C7126E38A97B8CCBE20EBA55BF53E6F9503255911E48A6FC861C04F7BDD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

196c2560-c8b9-435b-9f4f-930d9941ba3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\196c2560-c8b9-435b-9f4f-930d9941ba3f.tmp
Size 10KB
SHA256 97f15cd2b4584b3271db3c794c0895328d950585847fb63bc4283ebdd938b647
MD5 321c61541b17997c9932f164823aacb3
SHA1 7f90936f70323f51a32489e9b4f2ad8d49e10151
SHA512 39f25770241940c9f4d9d1e17fd856d9ef0a5ff3346013d2e3ab777f5bed6df85db039cc8de793c387586fb0156f3a6113a6e646522260a4289923959fd5dfe1
SSDEEP 192:sxZNRhWp/fasoNOZIdpwcHW6+WNvh2/YapLtjIgrJ:sxZNup/fasoNvlHbA/j9
TLSH
T17722B8126E38A97B4CCBD20EBA15BB53E2F9503295D45E48A6FC851C04F7BDD230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2cd4269f-c7d4-42aa-9345-23edb7e9643b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2cd4269f-c7d4-42aa-9345-23edb7e9643b.tmp
Size 10KB
SHA256 cb0105680dfefdc207d96b0ab509e5b4fcbd3766db298cc20ba99d59405215f1
MD5 749d6c25bb3d32c83ad1a2d0e9dd0713
SHA1 5e4d9ece7438f5bf4df36d332bead6cc788b7994
SHA512 6b1dab49180e7cbbaa313a4b752d279b7d74640b19708986aa1a5b3aded7b2648edb51f31fd58fa53c893d92fa0401a4b2fe838b49123e9086495dcd9d6795e8
SSDEEP 192:sxZNRhWp/fasoNOZIdpwcHW6+WNv8Q9YapZtjIg5kJ:sxZNup/fasoNvlHb39Na
TLSH
T10522C8126E38A97B8CCBE20EBA15BF53E2F9513251951E48A6FC861C14F77DD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cd38c63-7abe-4b83-944c-a9b280e1ae2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9cd38c63-7abe-4b83-944c-a9b280e1ae2a.tmp
Size 27KB
SHA256 31731f1514cabe7aa0e946405772c50a94a3135950cea12ad508efc18eab2cef
MD5 eb3d599f6eaa8c4adfd1fbed85420524
SHA1 6755400e37c8030328b86d906de26f81bd58f396
SHA512 34d9b4024c6d918c857717a48165d9c9d96f5e656feae0f4ad37f2ae682a223188d84cc4a50de07e62b3342a2f4b0584cd249d426f94736646d3cbf8868c6cf3
SSDEEP 768:B/WPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Sro4bfe0fmRp:B/WPcLKWvKeEeu1jaClLiF7J4bW0fmRp
TLSH
T1D6C2FB2B640CCB7E5FC01E9DDC5A6FA77E9802C796648D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 fc03518dd8f776ae79c2fdcfb13ec93b393ec6082828fcfe5fa17386107125aa
MD5 1606659b75fc28f45c3509e8d6951939
SHA1 1c49e094c19ba6952cfc7f57f61e6ea9a332c800
SHA512 5313ef8ca03887d2effbab98e03777d3185032356f906f9b576d8c7172ac6e8f38cc311062b56b41032d1905ae77cdc1acbaf9ec9cd50c45d54fb12eaddb8557
TLSH
T17EE020D61CC5C31D530CA8871575930DC381761FD3C0791D1704C54D740A944FA81BF0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 19KB
SHA256 ad8acdb25fae8e70074c457074588e4b439d4c961ae2b38ffa6a7646dd9441cd
MD5 3dcb57cc01f695aad1c1eb8d583be44d
SHA1 53248559e1736b2b21a280cfefe27fa53a95c612
SHA512 3034f3ba7ed307fa260e6934b2aaf8ba872441d3867489024e1246b305d428fc31bd92a52c3e60a73bc3f381b6971ef9008ee7e2adca7868d1e970983a2a781b
SSDEEP 384:GaPHcAGp1bidv1MWp8glCm2yma8g5zB7wvI6WPiQdkaPCB:GaP8AClyMWXCry9FpB7wvFDaPCB
TLSH
T13492D16441E3F7F1010FBA0A910CBFA7BEC849D1ECE675E86BB11A251D35299CEC0474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 fd651697853fe88d412c8334b32aae53ee1e949bc6dcaba0535d52dbda7a7c24
MD5 bb8a5d5f84bf5222db4fe202e419beed
SHA1 104e1686136e9b5f9852afa5f2679bca80de33f2
SHA512 82966968bd6d35b9d026b6613f3bee7e4b7cf9575784a440f94b7eaedc6d99a281f8ce86fbabe71ef8bb76f32666bcca352009ef56b74353058c399f4a5ae8b6
TLSH
T10551C8098788A961FBB41C3981F667673B3865E1DCD32E3718ACF5793F9B3851206344
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 439862d76f1bfe106dacc6531b61dd51b6ac024ddf5e4e3a1d07f70eec21cded
MD5 d97c34dab545319c12defebce2964263
SHA1 174b6c7be09955f9d69a6ad59371f3c082592110
SHA512 b4b0b0ff5fb43c10615dfdbad87ac291adc17a0b39be93594d3e421d8f6f61cc3658ea0d53a327e6ce312c469dedf6c22d0bf5cc0534abace37d4f8cf6abff0e
TLSH
T17961E6085788A961FBA49C3981E267673A3825F1EED32F3718ACF5393F9B3845305348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b6292e4ee1194dc3c44328d35d3d5a2a23a02f3b9562bcff360132b15b7863aa
MD5 86a79bb88e9b9a4cbecc5e09d5824002
SHA1 d38812d3084e5a75f8ea39a3dbd687f423ced44e
SHA512 26864612d48fdb7dbbeb28007446daaf8ddd4426f2648a0cbfab8d4defa18b17beb071f41c8aad22b8df6e0827668a30c0fb5a19a8296c41bab5552bcac68d78
TLSH
T12051CC499A88A865F7A81C7942F5A38B373869C1DDC72E371CDCF93D7F8A3865102240
MD5 SHA1 SHA512 TLSH

Submit Download

9b65da69-7dee-4861-9882-4e842184ce72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\9b65da69-7dee-4861-9882-4e842184ce72.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

14352671-b178-48fc-a668-7a56160551b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\14352671-b178-48fc-a668-7a56160551b5.tmp
Size 5KB
SHA256 96a24eda02b96ef71a3aad40513f320dc91e2abfa9db87a5997ccabd5d01b72c
MD5 e6884acbe7bff370654810acad62378d
SHA1 ed7f765d6d32b2640d782d409579567acdd54162
SHA512 a82679beaa226dc971d3aa516bf480c584a7605197ef96e4f133cdfa6999b089cabb36abf2aed2303099ff3ea5bea7b69b93e1213dd14ad394de0a91662a6600
SSDEEP 96:DLOJvJad6ghKzByCDGdGB3J/B+pspmlwxGaFGbBWD+bq1:DyJvJad6go1ykGdGB31BWspmlMGaFGbO
TLSH
T1E5B1BFF7C7E9552DC91216F09B18AD2BCE6E0915932C3D3E84D5EE0773E2472E240A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5978ed87-025d-4556-b287-f657ff320a64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5978ed87-025d-4556-b287-f657ff320a64.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8d8b0146-b533-4bdf-be0f-95a09060a567.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8d8b0146-b533-4bdf-be0f-95a09060a567.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e1cc0312-fb51-43c9-a922-7dd2f050d4ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e1cc0312-fb51-43c9-a922-7dd2f050d4ea.tmp
Size 4KB
SHA256 6eb14ebdc826d6d62e3125f767518ef5f66cadd9ab37db040dde47a376f6f5ca
MD5 aefe7ab234e12240803e3a51cc9545f6
SHA1 9a3cbbbbb7c1d7a3f567bd6fd10f827f8731f33d
SHA512 28268b8bb77354bb36e27ae694a379c2a6a0004b660b8dc6e21f4324f535658054c7ecaa36433547b7de2b49c6c9440daa3803b4b7fbffc55e83c384d77185e2
SSDEEP 96:DLOJvJad2zByCvPGbmGdGB3J/++bqz/W6B+5GszmlwQ:DyJvJad21y4PGbmGdGB31+yqrfBuGszw
TLSH
T160A19FF3C3E9552DD91216F496186D2BCE6E0915932C3D2E84D5EE0B73E2472F200A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bdbcc9a4f1a6165a013452e62fa6da36662ca3c9a66487a6dcbaf08793b7f759
MD5 5967b75cd6b32f1684071bc59c74c76e
SHA1 3b2202281a39a5b2b9298345944fac1157370f4d
SHA512 c5afbe4132b0949829f68597fc19bcd458434f7e3c2d4f520066d15e17f6cb8e529038e2c1e9e2ba9eb8d4850faaecac7184088e12563f496ea23ebfe6453ce0
SSDEEP 24:KB7EHsPITKbha1qSSpzSyXwyZPmPqE3w0gQo8GzIFqgKSThqMg1U6wSu+cHMityL:KsUITKda8/SyFFIlKGQ4XyNbIBKowEu
TLSH
T1E691E05132BA224038BD2A19D174871AB2413173361AF62F7FFC51A59E27F185DFE4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab98e3d4-1a8e-4651-af72-0ced26b32c27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab98e3d4-1a8e-4651-af72-0ced26b32c27.tmp
Size 10KB
SHA256 a4e3cc92a33ba3373ceb86072b87aaedbb5ca0c7a66a42bfbaac31e6b85304b8
MD5 4a05f0338a08472f5efe40df3aecfe1b
SHA1 37646ea32d18b145ca1bd1e8895e97e8eb3d6061
SHA512 2c174a469328540c8b579d6ad24a4864a7fb0757793e15a116c8635c46bce0a4c06bbcd8857aa2978e214460274cbbc03704549fd0bdc1664d19be9c49560dc6
SSDEEP 192:sxZNRhWp/fasoNOZIdpwcHW6+WNvgfVYapAtjIg5OJ:sxZNup/fasoNvlHbAVkA
TLSH
T11822B8126E38A97B8CCBD21EBA55BB53E2F9513291D45E48A6FC851C04F77DD230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b69d0ae4-cb55-4925-b575-037f35007225.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b69d0ae4-cb55-4925-b575-037f35007225.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0be250a-2060-4823-abd1-0e8c05d51d4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0be250a-2060-4823-abd1-0e8c05d51d4d.tmp
Size 10KB
SHA256 d010fdf70086ebbbc6c13d4ae53ff620875bfb1c992be6e770103ef57232a86a
MD5 b271db44ad0d18b954fa25a3d6389af6
SHA1 6f276606a09117211be991d2aad727d8eb5a8af9
SHA512 456637e72eca4035b0109c3bec305ddb24c8ead70f9f508e7b3094bce0251823430eb55ded480bed9b4f320eba13e667dc194263b5ea3e4ab92a30e9c9005ed0
SSDEEP 192:sxZNRhWp/fasoNOZIdpicHW6+WNvc1tYapYtjIg5kJ:sxZNup/fasoNvnHbQtMa
TLSH
T10622B8526E38A97B8CCAD21EBA55BF53E2F9603255D01E48A6FC851C04F7BDD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d40706e5-f7dc-4878-bc3e-4adf0190d711.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d40706e5-f7dc-4878-bc3e-4adf0190d711.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c1aca105-fb16-4d66-a4e4-ec06dd7875cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1aca105-fb16-4d66-a4e4-ec06dd7875cf.tmp
Size 18KB
SHA256 b6fe52413aa621dc9381d1749c9872e96ded871550e1bb4b64e0d77facc2399e
MD5 b57c0e90f26ac66e60767524ca69c66b
SHA1 ee368f2ed0ae10854d8a9af7fed5884d2e19f4a7
SHA512 21ef25e11fc29d77bee6b7c81901757c72387a77e7627c85ea3e1d7270beec99c69ec8db0129ef30c8400b85ed5fc5199c58da1708c3ac2759652c60c05127f5
SSDEEP 384:2ZcIhsNtQbK0Va7y17pczIGmh/qPRidtgOIwZOybnoT:khBVV32eCZidXsS8
TLSH
T124828E329CB86CBA6DF7E605F4873A035EB8812797C5AF94D5ED6B1C00EB198030F916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5aadaee-3541-4695-b4e9-edabd630c4f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5aadaee-3541-4695-b4e9-edabd630c4f0.tmp
Size 18KB
SHA256 6d7cc695d2432f76e0fdc8c25ff40c768fccb96b033bf04dc419fb0ee7bd15ec
MD5 476a4eecaa7869b24460b6c9d3e3fb47
SHA1 97998d805df499ba3c39c86767a6e44b311ba79f
SHA512 ad0a16219089e85ce5c7159d49927469be6256775e1303f88ec11cf73a5a616df6b27bcdec12ae045babca0f1f0c0e68a5eeae06b92d8dd50669f9696cd00936
SSDEEP 384:zZcIhsNtFbK0Va7y17pczIGmh/qPRidtgOIwZOybnoT:rhoVV32eCZidXsS8
TLSH
T170828E329CB86CBA6DF7E605F4873A035EB8812797C5AF94D5ED6B1D00EB198030F916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9814318-f9a3-48d3-b0f9-0e40f8eeaa4c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e9814318-f9a3-48d3-b0f9-0e40f8eeaa4c.tmp
Size 26KB
SHA256 4734e5da5589b54060434ba16d5d9ce314449d9cb839d1d109694b45d6431723
MD5 877e836f5ff3f7ef5c7c87cfcc5eae7a
SHA1 4ddd3477e0d6f7c7c69d433ede82f788913c89f5
SHA512 029350057f6071ad04b8cb8ab11db6faa95d1ddda683db105de6a07379de46305c9989fc252ef4a0cc5fe2c9cae0037260dd7415a1b57ca90323bbbfc5bd1d86
SSDEEP 384:xiF4ZcIBXsNc8TUNTUlIlFbK0Va7y1LWczIGmh/qPlidtgOIwZOybnoT:YFGpfwg/VVc2eCNidXsS8
TLSH
T154C22BF248E7987AD9AF9703A77D2D035D7CC167B584AA50B3D85A0CCC961BFC30A905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9bac3893-0193-479e-87c0-81b0019b6ae8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9bac3893-0193-479e-87c0-81b0019b6ae8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fe1670f1-3f08-471b-b1ba-235487521b0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fe1670f1-3f08-471b-b1ba-235487521b0e.tmp
Size 8KB
SHA256 f3ff5c6ea16be1a3479fd7355b0c19cacacfc79831596a5ce5bf3a35dd9c1fd1
MD5 0b18858aec05cb454e8bed54a7444dbc
SHA1 050865b180414266ed7fac9e1c2bca09e02ff21e
SHA512 848f583f5c8d44c056d991c2574185280c084a549c316a4cddd0dc97569790e4fedca8e71621e7663c2ac0be7e85e2f9477d3a79ce155a71d2aa4aa2498e951e
SSDEEP 192:aONg6IEEQmiUywDTMuIGmhQRx4qPNeUY27HpqsU6:aONg6DU/MuIGmh/qPDHdU6
TLSH
T1DC121936A8B8BC7B9EA3A905F48739135DA54327D7C9BF84D5DC2A0C00EF26C130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5d569d32c98be98e38106741091d4f1448e32fe6b35eff7a2682be524ac602bd
MD5 5395752aae410db9c2f21edacd062053
SHA1 1e093a422c4377f4977cf009c77e756749b499a0
SHA512 d0d5ada185655517fc01db95678a08da1073642a4cea8c0659023f0894f9eb2fccaa3858759aede8efc248f696aeb31dead2214b3c053a14b961853fff4658fa
TLSH
T19941269CA6F91148B3B76F5AABF7A96D087A7C772E0AD45E10010E4F4623A40DC71B37
MD5 SHA1 SHA512 TLSH

Submit Download

0754c091-1dfa-4ace-87b7-110034452451.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\0754c091-1dfa-4ace-87b7-110034452451.tmp
Size 3KB
SHA256 be265b9da0996293d49c433f82c7d6f37ef68c4e22d9909274dfd1716076ed81
MD5 3a85dab5e3a99dd5ead327903797a274
SHA1 74ac688c100475b0a6152c66a4d677e06f97dd91
SHA512 566a0577d909f370cd8c3bf1441d7ec1f3122878bb2a9f98a5d7b7f43a1927a3e3496c972efe7b5edb4f8df7f3ad1de8dab18544923ed3db4421dd101bb51f7a
TLSH
T1D271B63194A99E7359BB8949BA023A03EBB4513BE161A9E8E1EC0B2C15F72DC130B017
MD5 SHA1 SHA512 TLSH

Submit Download

1925acb8-3099-4458-9938-f317f344f189.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\1925acb8-3099-4458-9938-f317f344f189.tmp
Size 3KB
SHA256 44ece620fe414637283e6fdb8aaf5ffa6f22ef60b842e2751cd57bf686e65e6f
MD5 076fc91c9566fb0ffbf0d8377fc82385
SHA1 402c78941f7dd603c922ae0655f8d1dfda7d357d
SHA512 9214919440777f2f03d7fec3b8161e039a516649d70b4d7d458d4e4698c664a11695f05da63fb1534e05f1fdb06be9654fa06d2552bcb77cb1bba4c41e8b6278
TLSH
T18571C63594A99E7359BB8946F9023A03EFB4512BE061ADE8E0FC0A2C05F72DC030B007
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Shift\User Data\Crashpad\settings.dat
Size 40B
SHA256 dcfe9939de6b7d63d61eaa2a4784bdccbfc3481eb2421e7c6ec84d7f07608d18
MD5 fafae97a909f9614f43c6d36ed7fad1b
SHA1 f8e65a24d2d8c2bd80b08325ce4f2c05ec9f3e49
SHA512 ddc9ef986b2be5f86d9184a14f4bfcbbfca52ec57cf601dd87189f51f08b1a8923057c20e5e1b140e50c873f6fc2db9525bf19e1362ea4005e6cb002af2271dd
MD5 SHA1 SHA512

Submit Download

0f7c02fa-da55-4239-80ca-d982c1b0cb3c.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\0f7c02fa-da55-4239-80ca-d982c1b0cb3c.tmp
Size 199KB
SHA256 d5b9a0bce0d3852b521362d929b1d263435024af37b1a0b268522867d7f82069
MD5 7631e052c956d1b7b6d82a4b77e07b32
SHA1 3fb8c065a5958530aefe557fb948b7763d490bc5
SHA512 8ff112b01ff881c5a9979ba680ac4eb1e2268cb7018151869531e2b311e08a6bb94d38f9d7b955fa5b527a6899b96f6d23949a48fbe6c4806acd0c05c03f82b9
SSDEEP 6144:GCau10mmV5Gh3EX/4pSrA67ad01A+z8TNsaXi4:G+10mt3EXApSrA6pz0NLXi4
TLSH
T14614B0E57277CB0EC3A618B472F1D36212ACA3D9D55B064393F2DB2D269EDCD8318192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a89d42c-9714-41fd-b9a0-4c1c1a3a532b.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\1a89d42c-9714-41fd-b9a0-4c1c1a3a532b.tmp
Size 11KB
SHA256 eb56ede30803f7a09bd745ce0cf93028c21cb876e7b37a954ce7167d7446cd26
MD5 545955bb5be8c689fad02eff6f728f4f
SHA1 faa375d464819e723e98d4a952d9789f6055042e
SHA512 1280788d3176722f0323a80d327347c713d2f1ae9b010cfb3ad6104635c5a9605bcf8b97b8ac06dca31b26370226cb5685a5dc9ab427cd53734cbcbed3e10f84
SSDEEP 192:zR3IGeH8v7sKtBy7zHKb+WNO6G+iILyIsn2bgAG:zR4tHo8PW3CAG
TLSH
T15C32B62EA914657F6CDBD21AEA213792E3F5103130946D8CE6FC893C25E76CD232B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

671c0f32-284c-4eaa-8b59-0179d04be9aa.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\671c0f32-284c-4eaa-8b59-0179d04be9aa.tmp
Size 11KB
SHA256 289e8fb8c23343c9a26f967e64bb0424ee9971b6d5df715e674af5f344d55085
MD5 289bbd8295a53543d21c0f10b5e6891a
SHA1 f18e75c6275e53fa65a7c47a4d4760ff4f615b77
SHA512 4bdb062c9e11e40411ef5935fda02a3e1cb8b7cef0e3516f6d47fe4a4a6a10a4c9e6007151e2dc269747f6e37b7712585de448bb36cc72475b1ce67ddb0c55ee
SSDEEP 192:zR3IGiH8v7sKtBy7zHKb+WNO6G+XCLyIsn2bgAo:zR4xHo8PW3lAo
TLSH
T1CD32B62E6914A57F6CDBD21AEA213792E3F5002134956D8CE6FC893C24E76CD232F41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8936d0f6-df0d-4b96-b50a-96fccdbb82b8.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\8936d0f6-df0d-4b96-b50a-96fccdbb82b8.tmp
Size 14KB
SHA256 ecd60cedcc89d2660e3df7d03cc9020250aa0f6fc68114ba8cfb29642ecdf331
MD5 29fd42cb05a093374966180766fe9cc2
SHA1 8beb4d34d9f73093ac32e5b8b1dae5b187c94526
SHA512 ab13411ba8d5994ab3cb5733f8f30341b4590fb8d8b08d3ab53586b529974ec75423243808a0dd3d8089e3139334a48ce7e771bd8cbf1169ae243799e7b07c04
SSDEEP 192:RsC+kPlVZkKGCri0vo3GcZVb0oR3zgptlkW5UQBeKUDt/sjLA0J3OPmuwN6taYPN:OC5PlT1GCu0vo3tYDXnO17Ba1FMtL2G
TLSH
T1E9622AF25C2DCA731F5DA9EDAD3AF753E9A6021562CC98146AF7445C02C3B4A231B1D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rules.fbs

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\DNR Extension Rules\mofjdkplmlofiadhjjcacadmghmaglna\rules.fbs
Size 843B
SHA256 71e7961fd64b022957f22dccfbcbbf9b68dab0719b9e6c603cb1f474fa6feb21
MD5 1acf697110d4a204fdb07f5e2ae9940c
SHA1 29ad928e915cd72ebb3c95f91abbf44cda1d2913
SHA512 84bb2954aa5f8a4725f7551c0179812007c27383d905d0f5ee94cb277e82c686c991bc42d520e88638db1acd4ae99759efdf517928bd463696b54f13607e7148
TLSH
T125013042FD00877AE13D973089FF6662E2A57EC597E6210D6400A319364097147BBFE6
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Preferences
Size 10KB
SHA256 663115775daf319e6c330cb17043e0fc653a7b2005d33e4311376d953bff585b
MD5 78d9ea1cfea1cf0977352e214a465e19
SHA1 45d4795162b5a81e7dc3d270f97f87a6b86f2497
SHA512 0f0ab5290010ae767deb5587b69d9c3d153ff891bd7a4f56768cc742906150ddc2473f326e319519e442f30a01ed8299bd442c246ea02c7433ecb5a829addbbc
SSDEEP 192:zR3IGUHXv7AKt97zHKb+WNOxCLyIsn2bgA0:zR4lH/VPWQA0
TLSH
T14022B62EA914657F6CDBD21AEA313792E3F5102130956D8CE6FC893C25E79CD232B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Secure Preferences
Size 13KB
SHA256 971b98e05b771846031ee69b628e2d02034e6f0a6a2201cc540f63c61516f59e
MD5 6ee18c4cc3196f3beae2b62214c8fc91
SHA1 a6ba74ffdc40426aaca9b0af272b55f06c0cbc52
SHA512 de641d84710c855bce8db2d305a03baab723d6fa6bb23cd0adaad172c4b475e815538c1a960c8a6b1fb1c6b28dab6bd3fbb1e81dab9cf18dfc90ed88f184c117
SSDEEP 192:RsC+kPlVZvGCri0HGrQu0+3yzgp2lAzZJtQdelMqOA9kKaRzQJP8bkiQGHYPx79A:OC5PlTvGCu0HBLaz5KG199s/Adknx
TLSH
T145523CF29C2D9A772F5EA968FD3BF783C9A5025992CC5D0466F7444C028378923176D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot-new.baf

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Cache\No_Vary_Search\snapshot-new.baf
Size 20B
SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
MD5 7177cd1b3e21f48a23cb47dc11b36f7b
SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 770af7238f2ef87d22b073e977bbbbc96695273c01d57c3198bca0cc72c40c9f
MD5 1376320d36b0d16a0b716a4b0b3b7227
SHA1 28bcd02361c7ad2e09e2e006001618b730c9cc7c
SHA512 7d8b9725f06677da4ab3a9e65ee897425de9a40b348043819284afd557e6131ab60ac91f24031ad72ca47dd77227b81f324a2c4323577d267842d063383e17eb
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Code Cache\js\index-dir\temp-index
Size 288B
SHA256 bcbcf0e4b920e428f9c12b421ac9e747ec470bd47f313481d5b83b0b746e020c
MD5 4d85062ec53e839b6c59b507e9b64742
SHA1 038e3decfbf0dcfe6b1cbb66cfbd0b2e73868e31
SHA512 268b371c9e96214125a1d0f80cbae90af3a9daaad0d254d5f75580d0baf0260aac765836e4aab830f225057d8a260c2fe6a835159e9cb08fa73836d0ff01c1df
TLSH
T1D4D0229E2BC00C21FF0480B2B1D20CF92BF6383069900BE7A5C12000BD436CB8CE2B91
MD5 SHA1 SHA512 TLSH

Submit Download

531214d9-fa54-46ee-bef2-5dc5d5e809f7.tmp

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Network\531214d9-fa54-46ee-bef2-5dc5d5e809f7.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Service Worker\ScriptCache\index-dir\temp-index
Size 192B
SHA256 b200a3d5ea362050cfd36dc343e996ba87793cc8656c5fe95be8d1da1ec66693
MD5 e2b0415399c9c158a593f7030c119f41
SHA1 9d4dfe9d5467b3e28836ea49df95fed1ead4774e
SHA512 1473c802cce7fa5199f3d6758020a46467fd5bdb7807600ced7d6a43a1ff26d51e73ee4e2902ae1c37359074974421ce1f1c31fcdfcbbad06289d0915b23bc30
TLSH
T1B4C02B01CD0DA480C00007F07461C0CC3330DA7DE011039F03B4D275DCB80111857163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Storage\ext\mofjdkplmlofiadhjjcacadmghmaglna\def\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 217ecbb0109048dbfd14c08989ab82f26601dad0923720e0ab1eced62f782b2c
MD5 dc5ce1f52f12f379fefe87783601ec2e
SHA1 7f8b04f481d78d9806825ffd325f80abc9362ac7
SHA512 df6fe2d28e1494a85a4e591fbf93c279dc99949f5472459070f759c9153c0628f51a893fc5ececd78b13a0a49050942e005f8c4bad0b0b4d224cedcab9a1a831
TLSH
T188A0021643809254C20417B02816D3881250B9ABC4001323B6D013479CA04508D55144
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Shift\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Shift\User Data\Local State
Size 1KB
SHA256 c5552859c39b0667994bfe2384a90b10e0b1a2f54bc1d61af9e210b7eb7c6215
MD5 8b3fc2c994c336746d68924fad1c7fb4
SHA1 f4bdbe306c0a192869c3e9972949848877039466
SHA512 debdd5a59ec2b1138b9b70d56632418acf22ca10b0abe963d3a62f6983cae88ffcdbf42433467d5217b8c73960d20d7470afa91c49889b7a3254b3bca9fd2243
TLSH
T15F21B6B3C888B6B3EED82DD6BA9276431F25613762204958A1DC022421F72DC2A1F836
MD5 SHA1 SHA512 TLSH

Submit Download

config.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\.configurations\config.json
Size 6KB
SHA256 0f08ffdae6e516ef85a1040614db9a0f608b63f4828a093e887bfe71a6f11413
MD5 081e040a597696496ff2388f016fce47
SHA1 411f3375be98bbb24ecd3225aeac32d20895bd1f
SHA512 04bd0248ba0e2b66652640aba890a68c4ca7f6e0284373625df204e952cafcfaa66027dd2aa6790b0a230ca37ff0b6c9a4abf7427d0c7080b18d1b71eb6b5be9
SSDEEP 96:0A7sGuz+47lDqqCY91zuq+YaAougcqHcOCWsGqJzbXibPSzn:0+Szt7lW8nJ0RpJHMhxOrSzn
TLSH
T152E1C72331940EB376ACC6ACE841701A7B78E46B999974ED21F4550C0D67F37129F8B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install-info.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\.configurations\install-info.json
Size 526B
SHA256 7e4c9f709c656b91a967870242b87020a2e6eb2b7b47f9db2789a6ea9babb97f
MD5 30354a70fb38d5db61da9286a7fc5958
SHA1 389f68df96ce56f71369087f58fa0a39517973d5
SHA512 65f1b79f89ab0927f5d3ecfa500c64681abc098ad3966721bd7456d61b02df422c84e752d886315f5ecd132fc6b44587950f4ae32553ea732acdd52497ed1089
TLSH
T1E4F00E0B4A2EAAFBEBEAA3A8108325D623991CAA76006404D1878D0A14AF115130B10B
MD5 SHA1 SHA512 TLSH

Submit Download

147.2.0.487.manifest

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\147.2.0.487.manifest
Size 221B
SHA256 af005ab8066849ee71d2b1fcd2729059d1db7a9d7b1138e72669c0edd6cda729
MD5 1f04eff716ce0fa68efe8c47d8cb741a
SHA1 7f2788520077770f1259969dd54a0617c99efa78
SHA512 712002ebf4c373b97ff25e154e6594c9b787734726d089af0f9217d72406d74bd3be42aa26566dda27eddcc7c6ff31a352d1abf9d713fd8b466562b827c0e68f
TLSH
T116D023214486324E7B3141107C6D75505118D77305CAD11C32FC7C5BAB6751491436B5
MD5 SHA1 SHA512 TLSH

Submit Download

external_extensions.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Extensions\external_extensions.json
Size 99B
SHA256 a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6
MD5 280a9277b0e605e905d7f18b6148eeb7
SHA1 fcaf575897048f55b422a6dbeba943b5d550a908
SHA512 f31635bc74f9a4b0cf07be2aabab4ec883a6b8e9ac3701b27ebad6b0ca7a88c77699e69118db0ff55b37f73fb759b8f4271e6a5defbe44aab1f6981fb1179b07
TLSH
T1B8B012054DAD01600D5E50FAB0CDA2ACB304F81C6334003439CB2065A203E5A54274C7
MD5 SHA1 SHA512 TLSH

Submit Download

iwa-key-distribution.pb

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\IwaKeyDistribution\iwa-key-distribution.pb
Size 2KB
SHA256 dd0906858e00463ba28c47b1c45f1c21010d11b9bec289fc314f28905396086d
MD5 f8cdac19c2772c139a904ee6b3145011
SHA1 6107199d78aecc567b2991a787673ad98d4ee9ae
SHA512 8661ebcb474b0afac3263da0340acbac4379716f59a852fdd9acd1d40854e31282c71e7fde660002a52d8d2a93d62194d6bb436c0f281bc9074483fa78a3d966
TLSH
T1C54140128716EC09DA6F4BA78B425A11F05538233C3D84AB97DE0B73EBC5372437386A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\IwaKeyDistribution\manifest.json
Size 115B
SHA256 14ec5487b2b65a37a98fb0335957bde082b3ee12afe5b8b94d9968bf0ffefae6
MD5 4fac3f556eda4e889fcb25ddded0cbe0
SHA1 995999b592a3527c1679bad20d2d93a0051474a5
SHA512 9ad6cc8d349b9a76e14c012013f293a8e120693a2f6c348df06a02fab4fd015f27a8443d849fd3227772a98bcee9824dc63ee6909fc410df0e9d76c1d677b043
TLSH
T1B9B09B315C415D3214D01F1412E5434257613D071411641559D7140665CC136557231E
MD5 SHA1 SHA512 TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\af.pak
Size 537KB
SHA256 7f665f7131f4e2a808d3294d61ad3470d1a90f36c6c85533f0798574dfb46a7b
MD5 0439bf1b250ee1b5cab95be81faa75d5
SHA1 33da612650d8e6734fb378fb8fb6851e6e976ca3
SHA512 71f479e10f867bb2dcb9840bc6ef608d084e2469a8d8477d2320e5007e74595d4577bccb21aed86b6a6a57512b63e153bce1c76ce431e41cb58858763db1f6e7
SSDEEP 12288:3utDly+waCyvvKNYECJNlmUhb5TH2JynjX+4RSALukzozvp1s2x5+9Dva2Fq2O2D:3uZlZwaCyvvKNYECJNlzb5TH2JynjX+i
TLSH
T162C41B0BE784233D05A03296BA0945B7FF5CA16CC775B2BAEDAD82350562EFC117E1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af_FEMININE.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\af_FEMININE.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\am.pak
Size 827KB
SHA256 d0b8a6749bed2b8ee3197e6ac8376ae0274fb23d9a746ade21779abce4c1bdb3
MD5 2e50cfc35901f08af6c3b7858a81edf0
SHA1 a2ea9a4fad9861774c59509b6e3ef218b5c84c89
SHA512 ba7a325b7a2957dc99693f0db6af5988adcf82ed2d7d83780d8177592bb738ef30c9e4fb9907886dc91bcb3e68525d9c7e2d731495215fb3c1e13627d6aedf12
SSDEEP 24576:5LInlbaCO4hTCKTypVxj7FdfYuzncXg5vshwUFKB:+kD
TLSH
T14C05EC157EF9F7170F8E8A1994320E4EA5A4AD0652812C38D35AD3FC2B2DF1B4DDE219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ar.pak
Size 911KB
SHA256 b8d160fb9df20811b7a4fe25116262184188478316288bd92726bc383f07c95c
MD5 689af0ba75d90418e8e81d60ed943122
SHA1 f4029f5f1d609a804fa004a15d16fb51c161ef8f
SHA512 2615ff86ce0ec84e7476b1f6ea2bb360b889f7831858bcee02f9cb3b00e8b3d618c804c84551eb23dd518869b70700a0abe73fdd51d3c185b1bcafd33488be07
SSDEEP 12288:BGPe+CQZBKaCe3GSQdwjdi5dEGk47Sl4NGuqUui:F1QOaCz
TLSH
T15B15ACE21B2984720B92DF0FD1E23668E972BD23DB4BFD3124934A2156D7513E74E638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\bg.pak
Size 941KB
SHA256 d0beba0d88158dc84158e480cf6d99256b0e3578db7c96b4bdbd05a9c01f107c
MD5 cc18a80a7868a3f83204bb660e5eb86b
SHA1 87eb594c4a49130ef5f0a3b4bad07ac6139f444a
SHA512 e62ae39cd88f8e097b59dbc05584556b11472138e3bb782ba9c892997536f4f089a6f4c8e1ff0e3ad1716abda6056da91a9b560d422916bcc504a249632a2082
SSDEEP 24576:UPMocaCYW9l+LYAgCzQkECNUiVb6IsUvNw3p2KNUZVDZqvs7Qu2Vxu9uA2uZw0v5:Fo5W9l+LYAmuUiVb6IsUvC3pXUZVDZqq
TLSH
T17B2546A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\bn.pak
Size 1.2MB
SHA256 3ae507824d05547da8f11ce98504308bc41cd21c8acc1a9a3527835bce4145fe
MD5 460666657458b277fcaafaa176f8e40b
SHA1 d3b67b531f4f85fd3e7a644d9775f11d2c7ec3b2
SHA512 9755bbf2854c293feef413d46338fdb561a4efcf4784e8032ad28e7e3d79e0065729974b09eba841714bf6537ae505db2f16dc5cd15e93c33a58cb1dc0f8a662
SSDEEP 3072:B6R0aZmbP6SDMdxHsLM4aC9peKw6IiC34Bb2x8lAm+s:B6Rc76n9sJaCPeKwxiCIBbQs
TLSH
T19B4522209C6E91B2A8C5DDC9434C6330D523AE979BA1F74DDC17A14938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ca.pak
Size 603KB
SHA256 196d528763a82a5ee9bc595e875cde11a51608b9d2c70d742d38251d04b0ef15
MD5 5617bf8f815490fa30c1611ba3473f81
SHA1 1b0e852b6ed331081c91e01f866decab8c76c5ce
SHA512 28fe06cc527dd39ab06c3bd50b36c331f0a5ddeecf1d864b75c41c9737ffe1019be70e0f9f168568dd7da42fb76795c9377676e72f83ff41d64df1c52305bce6
SSDEEP 12288:9VE1g7q9aCnHi7BpwN1WxnuZlUSQB8wEI6d2H2D6PC4IqgqkX3Ti/YdGuwNaA1EN:svaCI8NjHUTaMQRQyNlH
TLSH
T1ACD419239BC83B774493330ABB46C253B49CA9847707D294F8AF1A1A12C8BDCD777695
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\cs.pak
Size 610KB
SHA256 5648fb594d033d8b756776fc8e966067b1a943dd0515276d7c9eebe2b7b62cf7
MD5 1db85981fd6c57470de42f5225f77923
SHA1 ca28012911269ec6bb60105aaeb1515001027505
SHA512 38a8fce32910c258ec4a56b1b9638e786a0437c1bfb1a74dc2dc5d4ea8b5348579cbb72691c0d7c6c11912ed6d6cd5b327a2a3376d422d9c05bbc8e330fb2d9c
SSDEEP 6144:JBianOKGxrXs/3Iosb91aCOuEqu3QZRAuv5NZ8c0JSBdM8Qvs6:LNC5Xa3IoKaCZJ1F5NZ8c0JSw
TLSH
T1FED44B1FEB927426488012487FBA4128BD2EC314076F95AB3C8F989526717BECFF5D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\da.pak
Size 563KB
SHA256 817cbb3e9007f9a192aec646a34e95cc871f6f362fee09b24736029d92596e15
MD5 7fe6d7307f3324b2ae50ec5571e8c100
SHA1 2927981b6a9b8de66ebbe935cfd2d69bc46c84ef
SHA512 77af00a63afa54c04f902574a86c75037c30bff4644a043e4f95c6a9e92e85bb2c290c42897494ca54ae5a7d9fb7983d8db3cf667e71b5816c708f88fdee8f9c
SSDEEP 6144:Af4/jl1Xl1of7BJbKDvC6zVWm0daC7nIk2AE2eFwnwDNJwF8OzYpGHFL2FfpxOQ+:Af4/jr07BJbKDvsaCQY88Fib+
TLSH
T1B5C44A4BDD9C732F89A90664F6018DA7EF6D943CC689124F34DC903946DBDA093BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\de.pak
Size 603KB
SHA256 6a5c12e2c474a771497bdef4040420379d928c5ca85ea6c7a09d98b5d2c9805e
MD5 01e6d7c49a54f312814c7bb9cc12c0f1
SHA1 a38c5db3c5e859661493b6e3a23a79586df7fc14
SHA512 06740d1be682efbe916db1d8d02f6a2e11e79cb2b8c02fc99bc11c527bedf5a5c87d1782a4e3f6e201841982801409eeb61e234217a7dc988bd9b2727ba8bf64
SSDEEP 6144:W7XRePNwZUzN/vAaCW8gwXBwwCU8pI1e9SKa70PFXTLcK3MjpCP:W0NwZSuaC1gw569SssPCP
TLSH
T1A4D42A07AADF224FC64273613701CCB77B29E26FC347225794EDD02A624B5F683AD526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\el.pak
Size 1.0MB
SHA256 a98a3afce33629984ee3d8c53a2fefd12e6bfa8345455c4cb4f8634c2dac9b83
MD5 937ae1d0c03e40b9a1562eb224077536
SHA1 d1577e366684126a34f4e84526cde37730e37004
SHA512 5f6596de104f4e0552afe5cec5d803aa19b16b0e40bec6da8b002dbe20ee6c8017bfb2cb0da000191b1ab9697ae6ccf259febdf09be6ac78b5091da60253f77a
SSDEEP 24576:7NgZ2fvaCCVm7s25SmgL00Wi/M8yjcHvpVZxJhIWYNQlF52+q3903opzKovLWT3k:7NgZ2f6Q7s25SmgL00Wi/M8yjcHvpVZw
TLSH
T15C25DFEFB0582DEE8046950785D8B07C3BC66D6CE749CBD86229CB60BDF90719622D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\en-GB.pak
Size 493KB
SHA256 7779614e0364c1a66c2ae362df91ba4c9fad215a8369b23c26c6918047c3c6ee
MD5 3a0f0dccc32590aa86f84069fe8ca9e8
SHA1 a96c4fc519f19fceb3f42cbd29e76bba1c4e0b2c
SHA512 9f02803f2cafadf361640ad9b6451b4ea375999babfc49fa8472729b81e1111aad9ba30b8a919c2cb12a44db32346e6bb5b8faf072f74c3e6c17bb08c0038640
SSDEEP 6144:R3lnwYurtcJ3VBvxmaCQE3eEgC5WhMf9N1+ZWfaYvTTWRze:DnwDC3nkaCyMb1+Zc
TLSH
T1F1B42C1FF7442266059322A27B49A562FF32D06C635716A63CBD801C33727A9C37B7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\en-US.pak
Size 498KB
SHA256 f5d1efafe1d0d08dcac894e678c4f0d6a6e90b62c8a2b39243dc383cfb723e3a
MD5 ca5dcfadccb361dccb9902d7fcd7173b
SHA1 168163d87949a415833a8180dcee711badbab4c9
SHA512 d7186b9125cdc2f006973231ff87ee9b07d5d4e7ff1269d8f37592357fa5e50b844fa1bdb1d41b1d6d8d3b394ee2077badc14679cb3933887cfc2f08a001439f
SSDEEP 6144:cgacRC0YP9Mq40aCbOEPD603Mf9H1kVIfaYfcmOWZ/34wP:ccYD9MEaClM51kVbwP
TLSH
T16CB42C1FF7482266059322A27F099562FF36D06DA35612953CBD402C33737AAC27B7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\es-419.pak
Size 592KB
SHA256 a0d60bca5e5eb752ccbcfa166652c5d7a867ddf5fcc9df49202d1c8038facb6f
MD5 2b0777435f2f1f9b649a1ea3cc712b2e
SHA1 a2e00e0cb514042ec5984daf20327788c9595e49
SHA512 41ae2876ed5cf4253c26c735413be42a15dbbf06424995a54d52c9e367f948cbd43d8fd8dca345429bd61a7a3302d0029652f332542527f479dfb3ca0cb08ce3
SSDEEP 6144:ujXS8rXcoR9vk0xAEaC2SuYpDTocG1qaJXMLzhx5Em68K:2SYMoLtaC2g7aJkwZ
TLSH
T18BD41A26AAC82B5300E36348B743D753F9A49545B009C29BF8EF866562DCF8CC937ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\es.pak
Size 588KB
SHA256 6cc4f37763e75380fb00401eaa3ff54d81f14bd1c4534f554ac6ac7b7bc9cd3a
MD5 38c343c87c2174fe9fb20605a33cdc06
SHA1 9a61a7e757c5de9d9fed149eeae0a82268f9696a
SHA512 4bc8c48e8d8057608cb808e236a14d5905903495e6fe0fc76bfeb2eb6a24f57a03797ef531caff8f161285eff86048b773622c0e5bfc475bdfffd168990ec1b1
SSDEEP 6144:YLylpVM126HaCNWIyg+d+fNLbN+qN8jKSBuvCC/O4k8+6PZP5i:YLylpVmaCsItpTN8jKJqmOYo
TLSH
T121D42A26A6CC1B6340E36345B743C753F9A4D449B40DC29BE8EF866952D8BCCC92BEC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\et.pak
Size 545KB
SHA256 b07d1a66f02a549399bb27cecbd94538e027c718edaec13f0fd5433ed3241aa7
MD5 ab1c7e852ec3d2617a602317077ba370
SHA1 91ca3632027d13900eb48d285d65a548a9723b6b
SHA512 0746346833b307f9edc3cdd1ed516c003d59b6baebb1e232631b086db4c9ea1c0e031c2b5fb6d1a3c27878d760752bf21f41ac3a17a6ef693c85d5ae7d98d215
SSDEEP 6144:1yBLbLKmxeMdbniraCsr+QIyA0qnFaWHwvh/8aeSiiYhhuAxMuaiGzPQhq:UBlYMVQaCC4nFaWPh0Mq
TLSH
T17AC43C02A27D7317542022F5E627AD33EC9EE2D870010AD6789B4919B1FEFCC75B6B58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\fa.pak
Size 843KB
SHA256 18e86c85047f623a423309537fd04d6785b4567e6ed95e34fe121e0ed9aa80d2
MD5 8a6a4ecb87dabe116f23670dd88ed08a
SHA1 4fbaaa09364aeda66c93fdb2d577706ca8b071e4
SHA512 20f2c720ff7102582e4f267af6d7ca7e1ec13bd2e08f8e0fdd69b96d9799feaa0c03d69a264bf33e1ae530a46592a609a61ef5813813d4890a4ce5c211096b6a
SSDEEP 24576:BIKC8u313uyqoz+sTbNaCZkfBQlMBHE7tJo0c2wSpTPDleMXLRyegKMGJ5VPmOKE:KKG
TLSH
T1CF05E2956AAC96B25746CA0341E33834C773EF12D349FE40BCB1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\fi.pak
Size 549KB
SHA256 2ad3531beb98676e88c4cc476b161366d00a7963f6ac1cc7e3628479f036b772
MD5 3aadba2cbe186aefd773b90af4195c26
SHA1 7e25a82297de530fafc43bb0621a6057242ad5a3
SHA512 1cc011079ca9282d678af8925d4a4a6fe454ed9f1ebed9340a9e28696b36364fa58db93dc05bd9b5d482b5155bd2d8e23fa19302e9c07d63450a0f55583543db
SSDEEP 6144:ijGgSW19xQcpaCIQomSDYegxRws0dYhOERHgLL3lUZHaCM7EMSliwA8HSXHwds:m197aCyDlUZbWOs
TLSH
T190C48F525208D32237C0929E7DB0943AFAF5E29C8C1A49D5F847C6D846F66CCBD7236E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\fil.pak
Size 613KB
SHA256 d7adc1a691926f122a77dc0384c048bbc4815dfcc84556c4e24f1226794d204e
MD5 c07c62209572438a3946873a776de091
SHA1 983f0204ffe4332087e92be5750dacd1bb45f2f9
SHA512 527edb4609e10294089504eefecf128349c206e0776dbe896322c5cad06cf74517447baecb63e31d249bf408b9bc5e7e803a61675e5a497058dbf240c9009fdb
SSDEEP 6144:2XyVQ5JzkCuWaCyDQ3yaaJnpS8hVlZ5u4h/o8FA3XmM:MyK5/aCAc
TLSH
T128D4D81673042744DBC362E562A0682F7AF560B83F82686E1FFF22577BA7CD5D231186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\fr.pak
Size 634KB
SHA256 4d31a9254c9425a4f99101444720adfc48b284be163be1b066201ba77c20b377
MD5 4141f9a9530d8677a4acd3a878a910a7
SHA1 83e083cfcc88e52fd437bb91ab179be92b43bc90
SHA512 e4531a520dc3c57008387a0f29a6dbe95ab4d8245388b93649a2cd5cbbe348c5a59b882359621f7ec7f14002acb53331153e74eee648a5827e72dadac1d3fde1
SSDEEP 12288:CAQ7CfsKnFZLNaCWBd4g5gVPcm8LvzvhoxKJYnY78jwRwNDFfmmxdM0n9doEQOKJ:JfTFaCBVXVc
TLSH
T1A8D4F81FBAC4318719C213A7FB16D663ED34C208F216D344E89E4195139A9ECD3AF6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\gu.pak
Size 1.1MB
SHA256 98d146ddbd888d1035dc636672d3e37d577eb3864d141bddc3d434b8e1ad8078
MD5 326f0016f8193fddbb4a3d9e82dfef58
SHA1 da2d799278e2c9a03ee0882ebe5b611829abacd8
SHA512 baf8f1456ede5760fc58688eb39585ca70df4ae5977cf7830246779239722fd2ff4e2d5ce7817e8d9152dca2061e7b0fbf7a89b992f6478057ab9f4e6709ac7f
SSDEEP 3072:Q2Zb6WBg2G7cxuBNo6jZ4rljAwREJKVMjNiT7llj63rhpiULQi5Nea6AraCiVxAJ:A6hOBFjarIKSaCq0sWJsZ10sn/M
TLSH
T144454AD1D3B8F03119DA9F7E819E512096699343D57E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\he.pak
Size 753KB
SHA256 b8e00826a4308f0f6d3572d5089315b55705827e43e6dabd91d68057de3c8f52
MD5 95ff5097509f513f834eeb6eb5d050d4
SHA1 7791af32d10aea5ee730aba33e2deceab4270270
SHA512 75ad1547648ca9c285f1ea82b705eaeec26606ed75568ad90cd46400000d0c859875ce435f1ff4837ed6a73cc9c185291d2f0930b88b4e31170bde0f5e4527aa
SSDEEP 12288:8YUH9ShBEhwyaCHT8ujrvyzpfUfjiSAcXcPeQCajJ6hk4p605iumbadRB8s2tmP:JhBCaCv
TLSH
T12DF4B9C4B2E452255131BAC39F95FA286FF2CAB52CA33512CB08526CAD774F4BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\hi.pak
Size 1.2MB
SHA256 acf6972adaae7d2feb4e9a946862f70c5ddae49b7c59a90e0f6fcb655af97546
MD5 5da770150fd61cfcce3375107294d2b0
SHA1 76784cd854eb5544a786c110bc6e15061066503e
SHA512 959ae00f50029889c28043115cd399065c8f945d910cf788e2ff4b81941eb0af1b6d68f48d1450346730f06a1f6f33d61b222a7de4e3571c4ce19cd1dd05cac8
SSDEEP 3072:B38HlzbAH2MdoWfgVRpg/mEOBVV/B50ZV1d1LigQb9rtSaCEiRqkBomyBm6CELmd:uHpbAnPYPpomEy0mUaC4/GKrfa
TLSH
T11045360CEBBEF3B55DEC3C9A32890D37D5AD3674A3E5421348D5B3DB9444CB8446A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\hr.pak
Size 594KB
SHA256 b47507d730144e0006269833188735cfd58a8679ded99772891c413ad8a3c6cf
MD5 5f5f5f6cc2a09eac6cdbe3a35d60fcb5
SHA1 92e7d8cbca18d6565841be56afcf83629a07f291
SHA512 c8e74b9ed28724a0e56e3f6af918bafcca31706d833c4713df6ea0280bb27af8e86a09e226fab020f5b45b6c01898a1ea48b2d7011aa3c087d757750a7dd711f
SSDEEP 3072:WZNfzE1cHz7rYLJ+SFEuS3zIO5a/V08L3xKnNaCodMwVy6ybeyP3XvKbOG/pieCe:e41qYLY++8hqaClJbDrjvsZ49qZ5P
TLSH
T1DCD43B3DBAB2670A0893B246EFA643547DBD48DCE12687B77C4F522D0113F4CABB9149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\hu.pak
Size 631KB
SHA256 fe361603a66be1adb949acd3ca8ce93f519a604b65a850d16de5bf5ded4dc684
MD5 aa239ce8b9ca1052462933abe999b5d8
SHA1 9d51c77808c6bc4b1af7e34448dcbc6846eab743
SHA512 e848c8bc203ee13de0ec36468622fe9df3518a75d392ce8d47162ccdca9c2e0265b1bcb241b2d5ef87ee974e0a4881cbc0dd7d008bf23d392fa852453682b149
SSDEEP 6144:w9/yyjxWNFgQjhOaCP1Nx5XlH2SEBBfAotZuu85k78nZ498BHOJPSxKao/AMHjD1:w95WNqNaCVYAK85i8PySgRlzSG
TLSH
T14ED46D779375604AB8A8279778643F55A92E841B5B3F22FB3CC7842C30A17CD4D9389E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\id.pak
Size 533KB
SHA256 92da687b4b4628bf28247f90a749926e1929b0876cb97938e776f5eee93aac1e
MD5 34ef0c7e75f664f1c2d929326fe549fc
SHA1 b1d7897d568123c2a9552d0fc9d3c166a25bd2c2
SHA512 fd86109a3c825f663e5b9ca4f7acbd547706a252f0848bdb488201a9e438cf508b4689c7eba1f928679bd8f45f350d64ac72fe610b8731b06c856a91a2060417
SSDEEP 6144:N5nuwyUlVzk4mSNXMaCp0dnMWw+ffEDTFjlFcem4PVjXxzq9hBsnfl1yH8q:DusvEaCWdRwJTFjlF5meV1X4L
TLSH
T109C41A672ACC300D494402D5F2DDA91E7CDE233BAF06636E5E788F7056767A86326BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\it.pak
Size 587KB
SHA256 ae534d52c9e248b1ed01d855d8759451366513ccddcdfed7b2b6a1b6f763a498
MD5 03daa74c43986598385af85d0b70f9d1
SHA1 af522ab534b51af5f2c86242aee5e373cb2004ed
SHA512 686975fda7e9684442135802d9cbdb2cfb5e2276301df245d5313994d18da25eca070ee314f973a903b12fc4edf7bedf4a85136bd55d833feb262e9d0c635a8c
SSDEEP 6144:4u1zEIaiYIl/aCy2PSmmCfss61NtIhOKa1UKrdcrtqpzSj9f3w0HpRmVRavkV8xL:X1JaCNw8SLai+mj2
TLSH
T11FD43A3BA5C9311259933355E611F095FF7AF8CCBA46621C999B021C23CFF84E2BDA46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ja.pak
Size 693KB
SHA256 6b3e86e062220012f16a7812a5fee4be79673b971537c5feffba2f15b76710ff
MD5 b15e5f2c13baa9fa10b4c926ea0de671
SHA1 8f759c9df57a605c87b05a2467b2e53214b76a4d
SHA512 59b3c3955e84a8bb54f16c9b855f429355b2a8c7fab96d9f7c39204637cd1918314fa2c7fd01b45fb140c5637a9dd955441cc2a014831961364cae99c27682d6
SSDEEP 6144:dSWcmq10PDBEIFbtaCXZvIRxVeN7bMvd07vMhVL:oWc5aEq5aCx8xkNwd07vMT
TLSH
T146E47F7CE3C968369D6152A22C4E36E17616EC5BFCA3363A142DC034BE707CEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\kn.pak
Size 1.3MB
SHA256 b2c76bfe0321d6cab347a11ec04675c66b5cb77e07b05eb436514d7162cb4415
MD5 b18496d9308b26579919e5d291fc7226
SHA1 8332a07cd45b6fb7b1f50a333748cd8dd4cce955
SHA512 1a5dc5ee7ae8a28f237a2b3df910a0b94c2cc12b85dce7c2c0b9b2280be958513b79f8d94ef3d008ea1fa1ed6247637d8f30832ee363d0ac5009af60e522330f
SSDEEP 12288:kxtajgO2oaCceN0eJSlRobR2DWI7A44VBc199b:kxw3laC7g
TLSH
T10455ED18ADBA7D311BD5106B24EC643EDFF16BD28CAA07D2F4DDD7802C62C6A90865DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ko.pak
Size 594KB
SHA256 8f53bcc840b79307269f659e66ae0bf83c5f6caf44282ba784ee8f290203be0e
MD5 3d1fa632e007148cd652794e90cd58fe
SHA1 206420f36c3b352f71f460c9cd0469a4a9888faf
SHA512 2ec96911fa660efb96222e40becd3b6190e66fc7f030f2878d338cd95bd947e758ab649bf113a63d5bd266e958022eb911ea2690d2544a5ea291663b2cef660a
SSDEEP 12288:YhGExDXaCAkyM1WNiPszcbifYj4ZGRyzDHIp1iY3KxlSqGRG2LhwUPE/t8SkUVrs:XExDXaC0Id2Y5D7
TLSH
T1D1D4E9F239DF33C911939982AEF4FA199392D976B7430294FC44CE44DE205C7458AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\lt.pak
Size 637KB
SHA256 a8e11d80fae4d47aedfd124878322a637cd1a24f61e3c1dc1445bfc8f7c75bf6
MD5 13cc1f1ec44c7e19905590d5ea165d86
SHA1 3712d3b7df73c75d292402a1e18e30dc16141f04
SHA512 09579d15b2d556ef9f70d913b88dcec7797cf91abef562fca66e988165519590636f318b968fa25d14d9716092033bb42a79b360d1920e3bc1222a841276787d
SSDEEP 6144:xwpWMz4MNPTaCh/5PDK2GgAY+qk6UrvZqFZ3Mb29UfrEI8I06S+2ItZ:xwUlMaCp5r4PL5BBqsHO6SUZ
TLSH
T1E3D44C016AD7BEFB964033C941A48EB4EEB990009767A961F86EC34FC47BB452674F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\lv.pak
Size 636KB
SHA256 590ba4cc405ef3eaa21e63ca66b26689cb1f91bf084117f08fdd3bb97945c27e
MD5 9884ed6ca03a6a0ae50012894bb9fe38
SHA1 ff75c8dcb38196776be54c8ba40abf02a018bd27
SHA512 dc4a9d99f4fcdcb15d0e6f1001e32d9cc36451993e63300e009fa8c779d699a676032762bf3b53059091aaba95f97fa90d586f8485d3092232761ef4028730e4
SSDEEP 6144:LOfrd32iABwAwJg428cC7iaC8/un6K69NbY4PrS36svaXiFzQxmOnaFBx3Vz319y:LstxABwTJFiaC8pB9m36HaQcvhlxuGu
TLSH
T1FFD45B559BCA9F664D915DCA7336D133BDCCD700AE0BE212EC7D8B29520F124227AEE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ml.pak
Size 1.3MB
SHA256 35ab995ee4a19f0388325becabb8236d882af32dde6e71fac5a276e7015c8804
MD5 6182f7689fc8cabb0591a69b9bb16586
SHA1 36ee4ee0092e3cd45135945f7cdf61d6cc0822a2
SHA512 a4adbf9b725a0f85e27f011a1706d966180088d08efc29aa42840e7ef2a9d50eb7cf5edde288e7e6919728b7bbcb9e5b7ed246508d646c3f2d2c260580ea21a6
SSDEEP 24576:tliaCUt/oZAuuxyYl+9y9XBkx/9tV1KfijHPBZzX2s+v2viVa38/m/3O:tN
TLSH
T15255CF1BA036CD3B0FD012167B4E2FABDD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\mr.pak
Size 1.1MB
SHA256 b8fab9db8e31f790cdc2fb284190d343f49b8a812286e5d92bca77e4a2f39555
MD5 7116ba449fc4a411036435d09109d120
SHA1 090775f9769bd754f32589df09844574c9e7ec76
SHA512 9ceb51c698c52474bfa4052111e2c711d0a1b420ef81d290c7a179fb9e11f745fbc775ecc41f19aabbdd4c61b862e9ac8d9c689e38be617d91e0dd944b34be48
SSDEEP 3072:LDDqaUeNpb90pR2hVQcBd9aC4rjZniWUVsbw+FHJAl7wFRyGRW/9dNjoEn+6HCle:3mQZW2htFaConiWU6YXvMEQVfVQZ
TLSH
T11545F34DF77AF3685DACBC8E36544D3BD8FD21B1C3E9925608E2B3A74884CB4015D6A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ms.pak
Size 556KB
SHA256 fab8f0b0365858b552278599e81f9940025d706e8d75682f31fdb4e2013c0d14
MD5 6b0e536641109e47e56ab0f96be7633d
SHA1 f7ec9335b1271b6ce0e0609df4fd6639a21a7ab2
SHA512 1b6a9d85436ecd0519b2a0e219e55d9049b9c2be5042f7c76e8142b4fabe0cde03f626c20774ee339b3e0d40cd49de7d372be0366c03b0a297a6b8828fcf947a
SSDEEP 6144:N2EIqY6MaC1FwOSqiFWhHuqwAsKDJMkxijd:0EeaCPwSvHuqwAzM5
TLSH
T197C4E6079FDD3119485413D9E2DAA92B7CDD3332B3066B2B5DB48FB0026A7E53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\nb.pak
Size 539KB
SHA256 e93f6c9d14944d056c402850e784d802999950c41bc514c6c170bbb71841dce9
MD5 2444424e5b71e5c81742c6993716ac07
SHA1 08e577d51e347ca0a5485bca7fe9d7078c8cb056
SHA512 c17323b0ec13944340e65f29a414bb439721131190116a571fcba7cff1c45f90fcff77a1bcb3f2f1f89b59609c23d780ed12a4a686e140573affcf93a6dbe51a
SSDEEP 12288:ih6cUrDJ1ufaCQ9QjT/Op7fIjNSwt2s4Qs/ohkh:00DOfaCrH5Swt2sJ5A
TLSH
T1D0C42B83EA4AB32AF65013A4F4198557EF7D942CCE99069B64DCC12E0DD3EF492BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\nl.pak
Size 559KB
SHA256 fee637561d0697da8a9dad12b76e35c7faa5e509efda32dfe39b0a6406f6bfa0
MD5 b840e12be30df596039b92a6baca1993
SHA1 71c7cd20eabf6b2c4dfc2f499f5082b50e450413
SHA512 857500dbb9ea356ebc3fd5c6cadf26344c9408855f772d6a0818085a2c191c555bbbc5303d923a4c37d6fbddfcb9b35a4acaa95a8591f4b5d67f0b06cb621c3e
SSDEEP 6144:idMAIwNpOoxaCV7sQgQ3CHEF0zwoo4HYzsC/TlmoC:gMCpDaCVYQgMF4wD4HYzf/TlmoC
TLSH
T1D4C42C07A94D353E58C07345FA098FBBBF2AD22CC26DE67DA8DDC1380553F98826D589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\pl.pak
Size 615KB
SHA256 9922bce13c0578ebb67f74e0ef650a8acc1f4fa960e70a876d52e7bd55e54d7e
MD5 1f76d2c49d73a5fe2ac5ec1c13a4f5dd
SHA1 9215cc3788392303fd241bbb8eff3e74edd9270e
SHA512 be5a9ae4a0e0926a7638a0b44947a0cb68c091c87be403bea0a1e51f72def8b833f8cb53a81a92e31ad87abda16dcaee07eaa433668349575589b6f47dd03940
SSDEEP 12288:ffeGUwaCdmfQfuzSJQWbCjgPye3mVUMOMqmx1QhmaO5olpIzme:HelwaCdUjJOMn1Qh+b
TLSH
T187D46D0E56D9964F8CF004E5F6E70B7CBCEDC818A10AC35BB46F412962571DECABE588
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\pt-BR.pak
Size 580KB
SHA256 cbd3042f759f178e390db9da89c7dfe9d7fb9c0bce197fc6f095f90a4531eb71
MD5 ae05dc7ea01fe034476ff984c6302610
SHA1 d0f4c87c5e9c911f9d18529a0ec4447a50cf7c0e
SHA512 35765933a9bbf959bf15eb98d38895d98d0a483e65e5f9cdeb8bf9284edf18a7bbe4a22140fce9acebeea2ad5ed50a6c7feac4bd4c67766212c437156bda8c65
SSDEEP 6144:LO6nYBiKVnzTHfXs6iaCbf0NBXBLsR8HBjSqjHJPr6im:LdYBiWzT6aC4v9I
TLSH
T1CAC42D2E6EC92362042263517B4ADB03F9885645FD0BC6C7ECEF4B05A3D9E80DA37B55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\pt-PT.pak
Size 585KB
SHA256 bfd36b61702cc118506934bbfc8ad448e3b22653530bc9fb329f494fdd2d1956
MD5 7910edc6f2d48de10773f8e9d325d02f
SHA1 9b9da08be5f47c91e1b969c2634770d192225ab9
SHA512 ea7d54f9c5aec04b9917b3736abac36ed85e07de2a9e91a5d72e1ec3bec3fc094f56f7bc705f3c663a2f27523a59b7e8a4def777d82d6e6c0380cdac2fa70623
SSDEEP 6144:L/T19nIAl8ZaCKuISieJVJJxh6/w9g0wTEfxv82a3sEx:TB9n3uaCMxw8H1
TLSH
T122D41B196ACA2326052323417B0ADB03FAC86655B90BC787E9EF0B0572DDF94D377B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ro.pak
Size 604KB
SHA256 8366ff017f5e993c5c29aa82f8af7503f62a11e806958852f64717c1a4c80a1c
MD5 d9debe65e36327df2b19896db78ba5d4
SHA1 fcb27cc27749e36568889ac1d0d0d394506489b2
SHA512 d3d657f9f4ee8ff69e989a1ccf4e4002e2bc606bb5e21ca8d1aa1af50f17ca2704cc28b746b1d7bfac4b5671820ca02298f19c43dc4ebd7f78faa9ddb15d754f
SSDEEP 6144:zLhjywVfJg1nuIcuCJEaCMwM9LAjivgml14XwjG5nOE5AWVy2rytQyER:x2wlJQrc+aCm9LP3lCA055ZR
TLSH
T138D44C23A2C83A93195122A1B77624D3FC8E505CB646D2CD74DEC97C11C99DBC62EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ru.pak
Size 953KB
SHA256 9f826ab5880fea3461e0ad3a287cdac707c6f9a7249e03e44190e06f8b34545e
MD5 70022a06ae91440a0aa8f8ed350614d5
SHA1 7d4e669d621e851b107a730be1fb15a7a48a780f
SHA512 a1070ddc782444bc387eef32237e96d2251136f07f364e5183169676efaddf2f33d244aa90a1c9a3dd05368286c3b600f0bca952c533092968425299083101e6
SSDEEP 12288://b1jfQPRo4YufzSaC/kTESYHHO3j/dqXN2htzMHpXLY2vaUGmhE2mo8mjPxEDny://5haC9EgD6xIJ
TLSH
T1C7259861669E64DE1101F01BDD08BE0D7CEB44FE3FABA36219642D7E35F2024C67E61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\sk.pak
Size 620KB
SHA256 7d215d335c00c3100d1a1e3c7b572f27d8f736af6201d2f1ace9c57b3924ce2a
MD5 94030702fdf53458bea0b6d4a82c61b5
SHA1 c78a474605c81887e9f6ac6b9e0c7d9043798a64
SHA512 e53dd00ee310211cbb355766c09167bfc03209ffa8a355806ffd7298a0927a153ed69a45933bf63ef910236e24356238b282c9867dc1d2b4dd69db68cd40af96
SSDEEP 6144:IZPCADdl/UGaCtpJ7Ucv6iOAmc0AiwsfaWRnxDeQhukTjsxtjJ6cyGa:IZllnaCtz79OAX0AijnxdhukTjsxt9fY
TLSH
T1DDD46D2FDBE6241B8DD90208EFE66110FD7E8550864FA1E6A80F324715F27EDCA78E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\sl.pak
Size 599KB
SHA256 30a7a358d07ee75b9d66f8270e6dc7778188f0ed3746842351db13bceb2b94a8
MD5 8bcbecf2fa943465758febec1c497cf8
SHA1 4c4989410d87caac1bd4120fc914c6d943a741bf
SHA512 3a55f2ba256fd8c9bf1b0d7c965d4efb677c6934f03110580b037f746aae46012303bbea8e370905f91c84ac78a8729b799b386604884effca73cac0f4809c92
SSDEEP 6144:E90JSXzNoDLKSiMaCFSzNtcBA+nnbmNjrir1cMGiu5ZD8DfnC9KKvEUup/vgNi/7:E90k2aCFktcBxcb8zBgNi/fzf5x
TLSH
T1FDD43C39BA975A0F0CA672CAFEA206107FEC044CD24796A1FC8F336D901167C677E599
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\sr.pak
Size 888KB
SHA256 2cb84e94c924fab716a862f99eeade588edfbf21d5a1064ba5366eac775c1405
MD5 29e8a44f0a0359571f0968ead7b1cfaf
SHA1 7efc4fb827c12a47e163c5d24ad48b889ee57056
SHA512 ea45025851885f0271f50b10ab0ac0fbe6198dda6a3965202c3e744e4c50bf999101297668d1e686d54129ffc888d05696e460a5bd0f3b0bc93869e3e51e4e18
SSDEEP 12288:88pDaCOviZmI87dePCdi4lJZIzhidxz37Ter/k/G:1pDaCO/u
TLSH
T1C21599A19B9E64DB0901F41BD808BE493DEF41FE3FAB575211601DBD34E10B887BA25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\sv.pak
Size 544KB
SHA256 b0b79981ae4e90f72eb627e10c3fcfdb63fa6cd593d64f01b8eac488cf4bd82c
MD5 76f3e87c326f96d878391cf00118fce6
SHA1 1caef9321746f303343f0b22010b0f9f2c9216bf
SHA512 011cd3f65fec9e1788fff0d03b416c9384f6d5d4fabb3a88eea1d46fc7fed84353c72b49abd87bf5d783b0bd7bb095a4eee0bcdf761063ae83f8d3896c670c67
SSDEEP 6144:Q6zFMGCyY7aCXdykUOBh1tXyalcEcrhRtGGrJSO7LHWWR6fty2obSy:Q6zaGPGaCXkj3N
TLSH
T1EDC42B078610F526FA72230DBA08111B5EBDD15CA3E3858E78DD883DAE97D9845FF24B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\sw.pak
Size 571KB
SHA256 0473b1ef37598556c222d7fef133c32e6f2c4677ad65696c8d8e716a5b67c048
MD5 442a441e4935153353205e499c8843bd
SHA1 79c743886c22c2db65e266ba10e2300f902c2c5a
SHA512 682250d8863bc4100fc171b496175ee2a7ddf91fb929e04abaed7d5e7c88727d39279ff100de4f38a0538ce36bdcd8bf97db3b4ca25402a922a9e74c72a1b8e8
SSDEEP 12288:eQnrJ0HFbaC5d9zGIF5gmedqUJ+J6eWaPoKuG+A5SLVIHFBVbkiqhqKsEgPlWoiY:T2aCrFkisY
TLSH
T19FC409629871E1195233218503D9FE732BECEC5C192B1D936A4BBF0F128F58C57ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ta.pak
Size 1.3MB
SHA256 0c8aa2b1da6ef4245c279cc63824f09064c0b8c7a3251deb29aa082b2b63c6c7
MD5 59da980acddc9d1c01360b7ad19e5830
SHA1 86d0bc9a8bc54d056949f14b140048249e057f59
SHA512 180109a2181ce0ddf1a7e51795e887c38fa4f93c4ad6c107297f4ec6d944414f52cddd3b100fe154d9e47d538bb94afcfc8b0be499025a10bbc5769b00fbfa32
SSDEEP 6144:2TAf+vjrlVPg8FAxaC5kzzBoG9+ctRktm1vYpiMyfpn:KA2maCQoG+tm1vYpiMyR
TLSH
T167553ECE923EEE890F93288F0319576912986155C07BE3A67C766E1198ECC9DCF3427D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\te.pak
Size 1.2MB
SHA256 799b249a2a8532133ed493497ed7e6f474cd88fc572b5d3c7a09c23a6a45bb5e
MD5 e88791210dc7d9eef75f477ceb160668
SHA1 17ada4df32e0af5afe26bad9d968cfecefbf9173
SHA512 ef32329e9bb2bba06562943493f27977fbbb56d09a4f41ca93d4fbfe08803279dd2fce1ce7b2d89505f72ae0ac3c669f12b026a9945429d7997ebfbe87083f22
SSDEEP 12288:3BOk/7MZKN3602+aCIN3p1FOwhn/tsjzgrbxJGCtH86MPoK6QBhR29Xyeqzd9Li9:3VzaCA/
TLSH
T1EE55C2023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\th.pak
Size 1.1MB
SHA256 050a16e6edbc15101e0031b457df7c9ab289a0f02896d4b35de2b4e02ed9666c
MD5 099e4b085c52a2efd53093df15258048
SHA1 6be4995878c3c538de6e46f37a88081be9ba64a7
SHA512 be74fe57a3dbb3f5458f6b4e4d92133e7ad7cac322c6e648443a18325de83e34c6de6ceba2d01c546656f851f828fe4cdf6378e6ccf60da1eb85a37c15b04cae
SSDEEP 12288:YMNHGN9LyZYACzPMwo7aCFskJUsEOs5eXxpbDFzS6Sud2mKmp/c5UmJJJu8RUb5Q:xlhaCy/
TLSH
T1C6356D737247D99479441B5B262A77896B39EE693F73F8E00089215A73F071AC432EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\tr.pak
Size 578KB
SHA256 048364035276b41d9c99c9377b63596164a572df6a674bea8235ecbb850e9d8c
MD5 10ab1d587c681cbef0bccf6ea7446b67
SHA1 e052de6570b1c1ac4c7d4cce6922b8f71d96d5f3
SHA512 f2e807abe73743dcfbcc51e9fba9ce9d02e3d3355159d77c2c0fa2e1f43b8df4d5d31cc8cebaa25452c14f1997049c90f3f44609e73925cd574e14e92a03b34a
SSDEEP 12288:+cjjADUBgaCb971EHz6sgwhqlZFmvGbcDf:xjMaCb/hcj
TLSH
T123C41B4278EF341CCB74378BD6E94626FD9F0666B332E446AA1A8639775538303B760C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\uk.pak
Size 956KB
SHA256 d6c73aa7047841c178737958cde8b92a0167e3513c63187644e647b4201c3a35
MD5 57fe0ead1266e5c924c4506a9366e6d1
SHA1 572ecfab7784a85d99e8cbc786b818bae06d7455
SHA512 201d313fd4252bfa0d8c48d64d2be5e7c37484802cdb0e72cbfa9df63310f4ff0d321a4f71cc82782c0414c130926fd307e2e622cd3fad506c49c81a17eb3387
SSDEEP 12288:b4Bkyez0PpFfaCjkke3dVYjeNsSr+jDnupd/JnuxSUihzNn8lA6QOk8huaLNiXI5:bOC0/faCwxvaUm
TLSH
T17525B9A19AAD54DF0102F06BE94C7A0D7DA740FE7FA7471625A53DBF29F2024863C31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\ur.pak
Size 832KB
SHA256 66932f90b8cdea01b9cd4d550e2844a3b099c001b017be37911bce0311902872
MD5 fe5671276cda612bb295f4e99beb17c0
SHA1 2370e6ddec069013a6f5c2046983f560dd443a6c
SHA512 5aeb5a01f9c73cf1bbd24f40e398bb1c355c917e7e2cc9b30207bf13232a78ac1933caeaaa26f1bc13a53914ee9f81adc303282f2c302cb2976f9f11fdabfb82
SSDEEP 12288:OXa5BVGWaCp18PLiNqtdQ9JPIyVqRsNU0yOMQYrGNjwadcJKwUjco/9NjjFpXPHP:OYBVNaC37Z
TLSH
T1A30510D2A6AC92B35A21991790D33C34CB735F13D34BF281F96246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\vi.pak
Size 678KB
SHA256 6be3619f0c4d09b64a43511c73acfd3d380aa7d918a8fe6b031ffbae4a92fbd7
MD5 90bdf0ae2ecadfeeaa202cd89309a9db
SHA1 a6750373f019d42c1e4b6019a51548509dcbe9f4
SHA512 05dc7cc4ef49991240a3ed9468f3ef19fe2a6b0575d30c20dfe4d6d4ecf1606e9dc1b5e2839a6313b03f0ce5a40379a3edd9a321dc22522710cd8189c345a985
SSDEEP 12288:cu+fE1B1+csaCr69Z8DgbV05SVtu7Hrd+PK2ZiGroINduAtEkiOm0ze3Qdq:cumUz+csaCbMVg7L4159Xekir0zvdq
TLSH
T1EAE4A61217D4302680AD153EC5CE540D7FDAE42FE7C18FE17FF82978A6221A45F25AAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\zh-CN.pak
Size 502KB
SHA256 56123e98008597ed1a57c7ee682a6622063dae5bd7c6f4d68f1b03c353688d3a
MD5 d23e7576e4d05772259d5cb38f17c320
SHA1 8ede7d5ae87e52cbfd7aa20f53dcd983f11c8d49
SHA512 cbb22116bf1a532d94fb91fb01444c6c405fba02fbed57575c6716cca0a5ab4653f590731dc206f5e4320118c6dbe9be873dbe2301be8c59635610e8e9aaef38
SSDEEP 6144:2LtVD1o/TNm//icykaC1AU7e7Dbe3C7Veuk2K6UiDML2FBbWEE2lb:2Rt1o/ZYlaC1AU7sbeC7VeZyXDMoBSpO
TLSH
T124B49EAA51ED79ED044220E13B2961397C40F10BF76B9B657DE244DC1BA1FDE432BA0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\Locales\zh-TW.pak
Size 498KB
SHA256 b3e26ea9786b7bd802325283ced01e0fffefcb84dfe8bcec9ba340c690b9678e
MD5 0c3456b7a03b992549f944890bd8baee
SHA1 751755314b878be4b56b4df91d0e2568af02765a
SHA512 3d2244333d6cccf435be49838d07d86f93a664f8f811841d604912b7cb4548e473e6fd957dd10c827d81dc1c5cdc71eec9bd7d7323a15c39ac58419f4a7b42da
SSDEEP 6144:bvL7CTwOncyn+4kogaCcKJX+yb2qunKpNZoODLYdydFXJYZoT3:f7QcO+taCR++gKpNCPaFCO
TLSH
T196B48E6B09FFABEF0901F484B7CD563BBD5BB42CDE372236BC8908981E356984572149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\MEIPreload\manifest.json
Size 238B
SHA256 44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2
MD5 442699c95b20a60470421c6a4d29960f
SHA1 c7317f2d2414c991c21205ba3c68a187b997e3c1
SHA512 c89cf089f7feeb80c6ded11f1fce84287abe8216a6e05723d1a7faf567c501c043cd1246ff8dbee1240d2d79c41b698ef4cc3459589e68e5bfc5bed7fc3a150b
TLSH
T127D0A7633841CD770198AA993D31AC0A73BB3F0B58429C1722B3100D80D5BB6206575F
MD5 SHA1 SHA512 TLSH

Submit Download

preloaded_data.pb

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\MEIPreload\preloaded_data.pb
Size 8KB
SHA256 c6070a157b4e28d16fbccbd233e93846ddb070c85e1a1bc64469b7a5f1424fad
MD5 d5e4c2634eff8a9b3faf432bf406d6d1
SHA1 a691f5c9877079193c1f7dfb16dbc30bb0372ec9
SHA512 b264e28ac8f111df01c553445aadc7bcdb3f32a38a1a19d3f9d458270dfeaf80efa7144407bd999892022af9dde9dbf8a0e19e7212720e1c6511ea9125afb166
SSDEEP 192:bTOpyeS7AOv6EVp/m3FPKk15jjKVcOmQppXavFbeLfzrLyp:bTOk7AdEugo5jjK+5QppXaBebzrLyp
TLSH
T177029EA4A364287B0D3921C74860A75D3BB2EFAED6D67C98CB190B015413D4C3C25F6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\PrivacySandboxAttestationsPreloaded\manifest.json
Size 122B
SHA256 51c311a4ba03140bcd1c827f8d93dba50cadda736925903b26e95609275dbffd
MD5 31c3d9d18dce3f1e88374c0f1b052692
SHA1 8c9bf4993e317a9051db7fe4da8c8465e9cb3856
SHA512 e29fc312fa85c3ce6778d60d6964ddc49147664f313cfcdb0372989de353e173813d03d018bef98e728fe4ee812c12cae4f05c86fc12eecac8bf834a70fa68a3
TLSH
T1BFB092B56D05A2B628C403650A7683D79BB25D927823BD34A7071441216963A6277A1D
MD5 SHA1 SHA512 TLSH

Submit Download

privacy-sandbox-attestations.dat

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\PrivacySandboxAttestationsPreloaded\privacy-sandbox-attestations.dat
Size 7KB
SHA256 59e345dc13aedee9ea46b92e58300ecaca944aaea9384c7af885400ac2ae8806
MD5 a7c66938d6cc94376aab30709ab6efd3
SHA1 32414678955f5d7c9ad3a12f320451ab8b026c5d
SHA512 760c5ddc2ca64c116735c78b241a027631ceefe5d79c1dfbbf9d34fa623373fa41ec1ef811392fe3f14cf248b09cac44b9892946f74aeea578cf1838a72e7504
SSDEEP 192:I+0f6YueVE96ihN6FbpKslltKvYqiXgbT7pSzgWMBWfJXz:R0f6Yud4c6FdKAavYqiXg/7pSzgtmD
TLSH
T110F155FF213071144F5101CBB257BACFEA57421C8EEECAE9D7A0C5A622C52B5A9C3395
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Logo.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\VisualElements\Logo.png
Size 20KB
SHA256 3fa8d63e8f3b6db6ef2d4e2f19be360bbdb9a632993b4527aabb982677030575
MD5 8af9abb298fd3ec288dc2ca044301e24
SHA1 f940654240488e9956275bb14df9c3c3bf378282
SHA512 76af1f0cfe8ce1c4eb4be9e3695953c2ba54a6149c70d6e82b7cedcda8d0440a8241cb2d126f6bf4db53e195aeca294276d90ce6c67eb7bc62bae6f0d74253f3
SSDEEP 384:k58hQxsqeENEGTuqtNbpSRiXdCwO1u/T1/B9zXW4lPMt/lDd7yiY+:k6OxsZBQNSRsCfWT1vz5lEt/9duiY+
TLSH
T11692F116C3AF78C859DCFCACCB6F1526B0EDC76E8C64202602099229CF95C1D9353A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogo.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\VisualElements\SmallLogo.png
Size 14KB
SHA256 593e6375a4df7bf48dcfe58e61fe11488aeeeb215bb18698cc4b192f0f57003c
MD5 8011e1f730800daeb9f0382066158e60
SHA1 e9f17b6eb8288e3af85238e933874686a436c323
SHA512 d318ebc2caaf6ea72e627ce0bd99ad42d24517eee0a777b8f75ebff10dc6e5eae3fa48661935177916afb7ca8200ebb9da810681acd5fa87b562c3d244e024a8
SSDEEP 384:RIPYU3gt01BFX1XiNZ5c//3DH+Q8LLpGlAhexcofP:SPYU3gqFX1SNATX8LLU/cm
TLSH
T17352D09AF6B0543BAA1E52CC9C03B57F789F7BD11E8D1E11A800A60B194F743EA314CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adblock.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\adblock.dll
Size 2.8MB
SHA256 aa27f6d193ffd8709bc778cb4421d002caa6f7451cdff68527a2c21454c1e92c
MD5 adae264a4ea0d3a233ccab3bbe803226
SHA1 8747d364cd527c09025f456147cd7fac950a1ed8
SHA512 e58381995ebfc4fbfdf6516bc12c619152bb3834ccbc645aa82a6f095ed6e8459f06dc0a4fd9745f6428073a06158506223c1ab6398af86b315215f197fb62ed
SSDEEP 49152:APcU5B8Iyt7+RUNS0U70t8PwfEA6YIootj12e7kDjXWM4:AOvotj12DDjXWM4
TLSH
T1FED52812BE9659ADC19EC474824706721B32B4CA0B31BAFF11C45A393F6ABF01B7C759
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eventlog_provider.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\eventlog_provider.dll
Size 17KB
SHA256 57c684e2067ded9cab94de0a9a01fe426653cff8942aa1a253865d03f33cbc46
MD5 1daa9d8421ea8fb9aba72b4307b1eb12
SHA1 f52dafbb0a324f075f5e31e593de55c4b7f857fd
SHA512 9b87efcfb64517f80c756c022f96f5a79e1e735220d8bd2a902065fff45ee0e274b36717b231a400ce34abf5c4e57a597d5d52d234dab284546e377a9573fbd6
SSDEEP 192:Nyqq9kE7JNcpPIKA1+DvgPUTugY8nVhjX78WzP7pDA+cdmL4pUQrNyyRVS:NykEspwKOrPlkPjLrA+gmL4nNymVS
TLSH
T166823A535AB01801ED979F3474F99A33AEB0B6E46BA081C71621C2084F913D67FB91BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\icudtl.dat
Size 10.3MB
SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
MD5 5bfd3eefca4b5ef2d1a869396390a7de
SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
TLSH
T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\libEGL.dll
Size 504KB
SHA256 f8523cbbdfcacffb57125485f86d683e25d2c63c0767081474b2e75f4a5f6c23
MD5 a521432272ccae5976b38d5d5419db54
SHA1 e5ad181e7c033f42603bf3a5277f49cf5e787220
SHA512 c80551035053d9fc3fb129426326620af0d7993dd2825d1530c1cc3f511019f9ba1cac47670f1b0cd60515be9df9f9433908dd957812fc3caa69c8d34b4579e1
SSDEEP 6144:7ilMNXsLbnCxd5lW/v4nyDcAfP1HUAfWzgyxh+XWI3:7iIXkCD8v4nyDcAftUAfCgyxhFI3
TLSH
T160B48E15B2E949A9D07AC1348B438547EBB178520F21F5EF03E0A2792F77BE45B7A321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\libGLESv2.dll
Size 7.5MB
SHA256 dd7a6396de71144270d2dc45f42cbe4f3522e2851d88771060da123063902da0
MD5 0e55f31a77fff7ab1d9175ef0cddfa81
SHA1 9c6793b0efd573e1a588aa2f5bebbe98cd1dbe3d
SHA512 5d2678347ca939edf7148dacf3c2e35d199029bc5742841c487d410031eee9a70740afbde8826d6a00e161af0f269cf0790c876e10e0c75fa2109c9728ca2c80
SSDEEP 49152:iQBHdu0ardIT7/8VGQOEIQF1W9InjW3dlQI1UoKxwSnnLIDAYm7bWzPbzIiiZp84:pw0Ma8VE9bvxUbWTIOVKqnEl8APQUT/
TLSH
T100866C13F29240DDC01DD2B89757A227F774B8450724B2CF2A9867162F7AFE0AB7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification_helper.exe

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\notification_helper.exe
Size 2.5MB
SHA256 cf049f917cebac41139aa97add9c22f8fd5400d99d6ae30e827a87f4f85e19c1
MD5 cae1592ccc747414870df5fbb5ec1604
SHA1 1f82652218ea4232c4bf999102d59105905c5d01
SHA512 9844bc4f3f83f63564a4e1c058a2eab7bb4ef0f2c2a299128be6262083b56f2f5ae5124d4e0849f9a60e6fc47f249cdd99a58a2fa82b40cf262278cdae5fe43b
SSDEEP 49152:GL/bq87wuWxXsgTYiME8HbMetFSxcRstlzUMNaktZTzPf6nD/:GTUVxXpHMEaGVzfP8/
TLSH
T1B4C56C13F2D901E8C01DD179875A9232FAA1BC450B35B6DF0A9076561FFAEE46B3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources.pak
Size 14.0MB
SHA256 963c7805c90ca4de29f8c42cefe0454b7ed368c4f18364b087cbbd8953996d81
MD5 a5d4a0c469bba748d77111c60c4e0faf
SHA1 6c9c94678ac78da4dbba7cea20392312ffebcd76
SHA512 5e4f28fb54e81edc0ac0b30518770a43ab40559d94d3a52b01025268c251c07ed8004127420a748100b3127ec8a61d65b795af3abd5882a43ba399505382f182
SSDEEP 196608:cXfLF1gP0J7d64NhCADH1Y1Wjwo/sBRnVXv8gfiY1EEKWZkrnPFp1YM0qy34tUb:cXTzc0NhpMWjHsTV/8gn7Zkr1UhoUb
TLSH
T126E60246F798972BCE2703B78142A77F3738854A7F47630B2054D3391C6BBE66E88919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ai-summary-icon.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\ai-summary-icon.svg
Size 429B
SHA256 77405e4db5f2519a993594e184c445e6bd4107692f631d41c7d9898f9643fa00
MD5 c948a13fc098faf0c94c212883247d47
SHA1 79a156db84d9175384742b62a620d3d8a5d9bf24
SHA512 e478ddd3640f57b35d80710460c0f3398c87fd963aab025824e85ebb4f6b506c3f60204ecb020ca85d15f1a588c98ba8d369bad4a694f95d1f967cf7435c3c45
TLSH
T11FE0AB6CA7F4C9D8E6260742D2363331303720621BBF5544E43B673DDF1608C88294E4
MD5 SHA1 SHA512 TLSH

Submit Download

amazon-favicon.ico

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\amazon-favicon.ico
Size 17KB
SHA256 17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09
MD5 ca6619b86c2f6e6068b69ba3aaddb7e4
SHA1 c44a1bb9d14385334eb851fbb0afb19d961c1ee7
SHA512 30f8f8618bfbcd57925411e6860a10b6ad9a60f2a6b08d35c870ea3f4cec4692596a937ff1457ceff5847d5da2b86ceba0200706625e28c56a2455e6a8c121d3
SSDEEP 192:9dLhJ6/f2dh+xQLeZ10TLwhwOHae6nmErcglsIZS3F:3jaOdhQQu0TLwaOHEr6IZ
TLSH
T1AE72F191AD68C084C37EF432DD69DEAB66467DE2B6C26C071FB53F86F23821E7901106
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-types.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\app-types.json
Size 3.6MB
SHA256 6ff3c4efbbbb6456fd8fcf00b6c83a40e4bad80556473b0c699dbdad096d5d48
MD5 ccb1d0b0bfa9f5fe356709d0453fc636
SHA1 a19638449f5899a26632dbab5af0d8b986936caa
SHA512 665276eed7cb6373aa28802e8e25d2a2d720e28810480212a8a7fd6e9ca906b946ac4f505e02de8b55773429228286fac3201985620c31d765896382b48c83cd
SSDEEP 24576:i3X5q93x/K+nOFsExm3N1iY+izPyOrzdl7n/n9iKQSuXL1RJ:i3X5MdKPFBxm3NkKzPyOrzdl7d4L1RJ
TLSH
T15D0656BA43B5502B6BA60ECD390F7B44EA67604EB941EEC9B531D74C1A828D3163F347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2JEC6RPE.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\2JEC6RPE.svg
Size 4.6MB
SHA256 974976404ad2cf3e4e5d04cf778ef8a436026e4dee4924bb304397171915c540
MD5 3d0d251d8added10198e4284915e38a9
SHA1 95e448583594689728339fb6331a49d6dc74d315
SHA512 c45bc194436079d3962f6033975492e5d5bbfc7435995c1ec2e1c2e47a29b6ca153ddab7cf14afba82500d35b9a66f35d87f48f8e02ceed7c0ca4f23babec9f1
SSDEEP 49152:k+qsMrw3may4XUfCXL04emdl2JFqfggaTzWoZjXetrmtBJ20R3bVwM6cWPH72:e
TLSH
T1562622760D2EBFAE633008A9D2171E291DE518EFD208DACF61CD6AF9D3165504E2ED70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3TlqQL-K.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\3TlqQL-K.css
Size 395KB
SHA256 2a8f47e23f543191a880447143fc55fffc3f26c38d980d2b884c9f00dc76a81f
MD5 f579040f76d7c18a3b20120320f111be
SHA1 cb08116044080e68c26b2077a34153371f750a8a
SHA512 6e891ba3c1caca9f25728eed5ded64ec1f3420d237c12b2514ab37d012a9ae90ba957d6ead8e32c5fa872802c93c7e1ab4487a5345835e597d4a869873721f54
SSDEEP 1536:LOrVmnyUc95lMCMkKso5KadCEV3pIxpIjATr6GmJkjezPGrKFTfPygbzctALr9sK:dyxwNfPyotiLA3JHSFB+2Y4iBr
TLSH
T15184C9706200763CBC379279AAADBE4DA118DD41DE1318EFF916625A4ECF6F30133A59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9DC61kO8.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\9DC61kO8.js
Size 5KB
SHA256 f4b1349750a424c70d902145f163fb1b4fdac9fff601feb7ff6a2a03f48049c8
MD5 2adaa2d151ab82b108be86e06d1bb798
SHA1 91973230388a9a6c5d95aa911b3f5a1c91a19fae
SHA512 5e3d541cd258819238bfb07ff04bdc81dc017b568ce91377fe7be63ff60a8a6f608990de0551d07858ea02e4d4a0dfb211813b87256da01e4c89c728d91d356b
SSDEEP 96:SphGVXkHPnLSLhe6QBR+OoyX0i2v8RD8KzRMIetPabM2kdzBMw1EzI+XY10Amrj:S6VXKPLGePgOvK85rkPSM2kkIRe
TLSH
T1FCC1DAD2B110BB7BEF6174CDA2BB9C4A36191B00A51860D2D07C5C691762201F63FFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B0OJeMaW.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\B0OJeMaW.png
Size 1.0MB
SHA256 2522cf84072b589281fea789c693c77e9faf3fb1314ba20ac4a86a7ec1df4c45
MD5 746ad00cad0aedbc5a2da3f3a585076b
SHA1 e74372ea1f326ee9e6bb53920489e0e37aeeb30c
SHA512 60b0bca5bd96d34bb4adaeee88c0dfb3868213d7e152f24b49e4cf36dfe81a70aec6210132bc756f71acac8f85dba6f46cc46146a99274a3956bcd49a3ec0770
SSDEEP 24576:nZF0FQzfFk9lWtcw5kerPyp6jHRArltJCtGHqI9swX8BO5CUSSepX:nZF0FQRxzke6sHRwCtSd8BoMNd
TLSH
T171253345784CA00ECFD478D3E7CF9AFEEA66838491449041629CC7597E7B9AB1F42CE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BD7cvbmv.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\BD7cvbmv.js
Size 80KB
SHA256 22a1924cb87e953baec69f4f60c0c4ac870c2dad1c35f485acc68078b1b1a35a
MD5 654707ca50abcdc55c33cf51f849f967
SHA1 26026076db97a85a6506b99297aa7f189c0230b3
SHA512 104450510a050275127e0a3b22ae012d92b35c9929a82a46b8e4cf930e48ae8f35f3c17d94b566e7147a622681383e06d6de6a4899e1874189c4421fec9cc230
SSDEEP 1536:hYeMxdfmVpK4PGDedlRsxCrtA2fubrUtdXfgXVW0C:haXmVpK6aMOwubYn+k
TLSH
T14B8385C836D7B01683A72875082F198BF1BEBD606C8C9540E174E1EC7D7859EA2B7E1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BQSCSQT2.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\BQSCSQT2.js
Size 5KB
SHA256 8f49841fadb214683d0342e7b9be0fb27f42801d8e4a943663a2656b217d9386
MD5 50f2c3aa4022cca24136b46aebf857ed
SHA1 036d69c7d35eb63822611b2b0cad4a1c2ae87391
SHA512 d6e34b54ff59e157229968d20a950248d497679ac86c40385ae5fc5b1a4a5d65e2a281ecfd925d8ed1b3ebe18f06d703ae749b1256d1c708422378a62eee4ab8
SSDEEP 96:Yvl7/7Z6fetaUVeHUOhm3frjEIu4pbCrAcI1tnFk7eON2wistkALfxkJAMEm+Mhp:Y9DggaLUlHe44GF+N2wi9qJkwmF
TLSH
T1B2B1C6E832E1B534D77E0AA945760006B1B6AE013C4F5B90F92C8E573C158B7627BF6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlNDD6KS.ttf

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\BlNDD6KS.ttf
Size 134KB
SHA256 5dd4720ae4e3848e8ca860703f0c8138a9a3aa599c2e7f6305a558af223a9d3b
MD5 bfe1cc9bbe6d9992ffbf4333439a3996
SHA1 826f70d8436f5dc7c58585b24cbfddafffcedaf4
SHA512 d88c9e67ca4e2c1ca6ba637ed65054039f848f3c056ac5c271558087af87f52241bcd49bbd64077be79845b760b503948651d043555f7401bf38ca4c333f0518
SSDEEP 3072:zRjzw8GjE/0UZB4wgWEut8caQVA4mWgKzNeOs/x/:zRj+jE/HjoIdzFvsN
TLSH
T1D6D31752E7034B46E8461B3857733BB39331EB6F6B1A5306495CBD69AC923FC881C2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BtwHBorj.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\BtwHBorj.css
Size 145KB
SHA256 76aa48ffab58b92ee5c5c96ba1fb886bd4dbee52a750d3e5c06fb313300bd38c
MD5 31e42ea0fb0b108a6284e7b77abb2a7e
SHA1 43a8ae9a91e0b9fa5dc78b39bc00dbadde55556f
SHA512 d2bb59d96d0feee811b3214b6651621a47c5a2946797bf358693753877feab9e0d517b53a46a5271469110ccf2e845445d741cb0ad54c3b82ba0f37753902ccc
SSDEEP 768:oR10hCSUdzB8d2ALHwFvRcgMeQaE43G/JoxCEVWEpPb1UubiKEK9718jDfTGBwCt:JCQy7MjhEgEpPb1NtcjOLfh
TLSH
T1D9E3D8A9B6409ABCBAF7529C5E4B9D9DA72CFA91FF123DDA7040D24801CD7E2103711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

COvnDS-l.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\COvnDS-l.png
Size 877KB
SHA256 5fcc31e4ffb9c4bfa98e6dc77e71c8f11d0e42bfc036138e1d26dd52c90e51dd
MD5 223bb9fd22034052d67b9a2ee1bb3abb
SHA1 807e321cf3224e1b3277e572c294ca76e5d278dc
SHA512 e418704192c76d3a7b8f6d2f64305f61c5dcf1948689e16beb0ddfc92aee96e49a895e98dc4e98288222b65f818a1b0543e45f8cf32dc62825cef66d82e79631
SSDEEP 12288:0vpavvXND6efU/rzNdDIXK5veqZ0WtjuAO7GDjz0AOPY3Q586+O9hvIrb1zWgB3w:u8j0IXK5veSjPo+QAO6Q58u9hqb1zr9W
TLSH
T1FF1523C661A0598CFA4B7C37EFE22E4ED6D61058DA0ECD7C64B1E362814DF617C42E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CVBU7e8c.ttf

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\CVBU7e8c.ttf
Size 145KB
SHA256 7bc3b18ac53fc4fd6ab7abc177e04e3a674b2ae7d69cf209691c406c659ab747
MD5 ddc3608169fb6c35c8c369f4857e7798
SHA1 031a700c7e59dd082d8e317808842b28f09040e3
SHA512 8ad4a83690c100e1514c0d5a48f4d59eb61d17ef6a72936839363cab135eed7bc307200f8776b0e756c7a9e4d3407e941e34ca59c9e35ab79c46bcfa365b346f
SSDEEP 3072:lCoy0Hw8SmSg4HdarF/xtI4JUA4sB+2MMg6ppEi+Uy8e1JoP:lJyFmSHktl5Q2MoeJoP
TLSH
T15AE33903F2878346D8621B3A93B26F975335BA28DF09971FA64DBE35AC873F54C06614
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ctu_cYeA.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\Ctu_cYeA.css
Size 33KB
SHA256 23e1fbd791cad7be9ebd590a03dbbb5fc2a2340a25a7b59a1818843fd3de0d65
MD5 e103de2791a2bdf4b10b5281eab15513
SHA1 d1f8051a9acb69fc700cacfb4fdd6425be3dd59a
SHA512 c22e40284554a78e8172de2c2b88fa987a0f1a986d73cc9d7eb8b75c5eb576d3bf8ef86667db1f9503ede9c374f129b23fa1594f3205700b46689dfef08618bc
SSDEEP 384:2ehenw4L3huGddbnvI4gtjek7l0nZ3ix14/zwEn5/ugeH1abrTW6a+L:2hhRuGoZGk1Khq6aA
TLSH
T16BE225A86262E63C7C3257BBD659F78D600455498B32CDFEEC71E12506CB7F30922A8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D7STN7Cf.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\D7STN7Cf.png
Size 1.8MB
SHA256 d1f4537294a9b3cfc8f6ab7a0e5e783df51673f66814feb59999012e62eb955e
MD5 b7e5d99529507636e37500b173a10e61
SHA1 b65ca8d1cd57197991bf1f1707e66f233ae7f34b
SHA512 4b291c79e114c9057e4d89343b7f5e407f7f7e388a2ba5bc5d1027d562ce3fa3966087a9d011e5dea8ec91b62c39db211cc73880748a8fe2234d6852836d9875
SSDEEP 49152:brS/holTd0zkg2qtC7UtdLQagub7jp0cK:fS/wd0Arq1t5Q9uFXK
TLSH
T1F68533CFE4BF8BBA1118D251D68B666BBF3EE9F122189654006750D314623DFEB93071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DJWpGtxK.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DJWpGtxK.js
Size 506KB
SHA256 1492a613bac9ffd8ab82503436505a338094a71f805979218ec344914d26418a
MD5 a1129482b70da9955fea06a8be18d6ad
SHA1 74266216f0caa78e70a236fc071cd1d4db6ce0a0
SHA512 47a24be1903e5936079f9201422b234b21018c92ff5c426dcb028141a1b582d677f239d8e6ae8671ce1cf02c36640ece12f3c63a83b8e720d891465ff41a6dd2
SSDEEP 12288:HxB1K0n7qsiViIX4+7SQ8HNd3msdQMXCCTdHJrvankC7XKcW6ghl4Jx6KITmIvSV:HvZ7tNd3m0XFHJ7ankC76cQl4Jx6KITs
TLSH
T1CDB48DC13648213656EBB9E5C9AF320472351E04FC099462F5BEC88E1EF6249B177F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DTtl9VO1.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DTtl9VO1.png
Size 115KB
SHA256 8574c9f8b95a59b5c9d365da7d3406c952f0cda751d3af07656dc17c8cfc05bc
MD5 c558cd3be269938e7dfddb40805f743e
SHA1 1f1768cafd7959af10d8a8e5f66059ede4ecac38
SHA512 c37be0c928b868258b669795afae2958124c54693e6d5e2858a4078ef938972a086c67a48b37fa2d228842275a39f702cea228a515f72b98723fa372ffb5efd1
SSDEEP 3072:cTymB58ONq5yogjF/AG5OGm0VpWmQ28GpwQLu+3uPJs+W:wz58SMreosOGZV0V2zy+z3uPy+W
TLSH
T109C3019CE6F9F00E8CCF05BB97A22F977773059B81A1484D8FA8BA6D0B51CBC1251587
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DUXvmpZD.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DUXvmpZD.js
Size 926B
SHA256 9540a370fd609780dca3f23be0b2074eaab167cb2393fdf13ce2cf388a2ae3e3
MD5 36ab6c8c5438b7cf1ebcc5962d202925
SHA1 cabd1ce31172d663de166cd6126a8df5ba6b1229
SHA512 96c4be21bfbc0cd216bba1f1db22473e7e654dd9cdf0946b99b52f5d9690be4a317a247e62dc02dbbb09e6b1e68a7c7e1f08018a30cc0614ab29e2137660739a
TLSH
T14B1163DD16B42F7A787255EEED37148021901003B29C4E95A67CC32FF35768A970664B
MD5 SHA1 SHA512 TLSH

Submit Download

DUt5MPOs.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DUt5MPOs.js
Size 4.1MB
SHA256 7365d378cdefe4c2e3ff0cc97c296fcf0128a29ee86b68b14f93129f44ad7b15
MD5 a75ebb08ff5fa8216487426f3b9b5fd7
SHA1 1fd90ea7cec3f287c9c5772ca12ff5e50815ce89
SHA512 4222f3347ea66c546288e47d95e4cd7cd8b4aa132112377f2c3c98e6f096383a07825ef30c302fb7294193abf82701e0213115872f8d1d65a0b65308a8b12d4e
SSDEEP 49152:czupSj0S7qDOZqylbLsFsJmep0erLnEUeppTtRF2IOHay2aqoGWyP099JvWKt7Y2:quvOZqW4RNVeCKVBvrPBLpfQQMNmb
TLSH
T1F5166C8C33642C7D4AC742DDBAAB190DE1FC15763408C460F39ED9F82668AD4716BBE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DYkVHwgk.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DYkVHwgk.js
Size 415KB
SHA256 08da1a7dc111081d5d14dedd6d6b19b3453e656bfb606e0e9c5f0f6868159e27
MD5 2a058c8f8d57e58587ccce2a087832d9
SHA1 b0e223f7025b096e0e8dd88b66bc047cc830e98c
SHA512 2555a4e122cbb66ea780709e53580568064116cd4e3d51044dff3f7f8d36cfc93f2b8d34643c06f2ec5c4b5add3852b095c0c84f19bb53bbab82400ce9541626
SSDEEP 12288:/PqTS5R1khc6jWdCYwUxLIPxxVf8Nxta+wf:XqTS5RGhlqYYfxQxxVfixta9
TLSH
T1CD942AE23295243676E985D76CB40102E7257891784AC86CF56CDCDF289BCC632BDF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DqMpT_PL.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\DqMpT_PL.png
Size 1.8MB
SHA256 8bafa9d0cfc3624a2005c7255f802642258226fee825dc7f8b8eb9f1f293ab88
MD5 616dfd4273f4c1bf9d44cd3c56e3aa08
SHA1 5740d1957b47ef1d844378cc7cec975663ab5cbc
SHA512 be2abf9f1106a9ab657c39feeeb1dff37746a8913ed03b2fc41eac06f009ec9867995e9df4ad36cf15b715b0844806f8bfdffc7f169cdc6c360e92a7ec42d1ed
SSDEEP 24576:NWB+Iop3yfhM/86dYNLWvuFSNcTtZeUMW0dOZuun8w0BauzbKmdBmeY:ABtwyZM/TONWMSmTtvMAuun8wU/KKm5
TLSH
T19A853319B0DB6B538F50C17265AC58FA507C2ACB27CAAAEDCE79CCD2C4381BF46B0554
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JNz42uZF.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\JNz42uZF.css
Size 1.2MB
SHA256 ca8f2b631362a80654df300841344256273cb925a25e578d7ac9b37294ce82a7
MD5 38d06edd53148db3caf5f30dacb0bf4a
SHA1 acae640e849dacd96a2b07e597d35583f54f3796
SHA512 97f4ff40a7e702ee5833f8db6e638297069ea327ef35bdc3271aa23e58d152d0cc397f4186229793ccad17b32310917f9af1610f45d50df9f38bc8138f411aca
SSDEEP 24576:D9X7reykpdTL6YuLK1pchx3E+7/BDUcEnZlgMWoe0qwqFmeFJcx4E:D9XXc6YUhx3E+j4ZWMWb06E
TLSH
T14D558D310607FDE52FAE4B4096053E885D3C5C63B66C95ACFBC615A270E9178CE3F8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iDqQPrd3.mjs

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\iDqQPrd3.mjs
Size 1.2MB
SHA256 52fadd5b81b6abd1eb665bab0c3749a8ad6a293fcb6ee9d9e0309f29d4f82619
MD5 84a3a561235b6c4abe1f41fdcf547791
SHA1 106d9b02c39be7c6ccc5d696576538a25616db96
SHA512 c154b8fa29f846c85124e703ec491c8ca8bacd30d154fd8a1dd0183f6aa8913e40d64314db4f476f6904256a86f0c978a1b8df43e2199953370df2d82e2d49ec
SSDEEP 24576:621tWgWLNNaPs0saLRQsT9oNEa2IZC7VF+qf/ET44aR/2Q0HorXEzZSftgVwGrHd:62jWgWLNNaPs0saLWsT9oNEtIZYqqf/S
TLSH
T162455DE13378549782D68AD700631202E179F51BB50C886DFABCDDDB696A8C311BBB3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tJcSzzNT.png

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\tJcSzzNT.png
Size 3.1MB
SHA256 994f9210f9e9515f2a2059fad59e4ff582edd2222db9ff30b38a226e7214c2c3
MD5 f16eeb2b598d56aaa22eca88f08c0116
SHA1 65525b9f0272434d3c4111907943632d087a4aea
SHA512 c6283d5fd20e31ca854089baeb48035ab7cbf607e7bd846a79383e6e3465c4ccb53af8c18aa421c81c900ffd56efa18bba3b89f92236694a8e4e34853dab32bb
SSDEEP 98304:CJI7GsYWr8Ok7f4OpO5LIPFsfF/jNnhO543SvROsFe:CUGKr8h7Qp5LfF/vOiw4
TLSH
T197E533470E69475737678AAD72762121F1F938B4D82BEEF21265F00A42EC5E1D0F8EE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vLDLfys7.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\assets\vLDLfys7.css
Size 7KB
SHA256 b3384f16d764d07c8b742b1c1abed7e9b07415e2fbb6b83bb05cb86233075919
MD5 7e6828afbd322acd86b1d9ec4b821285
SHA1 b29d2170dd09d63434b888d6f61fe557d3757c24
SHA512 f9a481fad08565e7699df17c43e86ca3a4091d839f925a19ea9ed5ce691c658bdcc6cfcff10704864e0b12a8ae8293a41fb6316d5d10b0b2bb49e9b45834011e
SSDEEP 192:n5lPNq9sa+fA2s2jdcUqD0eBiB3wiki376PX5cah7:/cjFDujah7
TLSH
T19FF105D9E1D9216C2AE1A0152CD917865FDB9C81F621C9BA7337824D7FCAB5000BAF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

browser.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\browser.js
Size 11.8MB
SHA256 2c01091de5d3659fd7c8bf3be094ed22a26e53f718fe04572509fa9201e1cd10
MD5 36980b9d636711e6d23c3b91dd7a8695
SHA1 b498b8077f256f2348deaca589278cc4afa5fe9d
SHA512 5f6425b41c00ebf1705a511486d9bd877eaa201a1dd48d2c7eb01eee2d0327f1d1b74a2714fa2c58d113ee8a2ae7557affe030a5ce555a9c16e103c530262d0a
SSDEEP 49152:w2vP7sz+xWccIInEn4C8x8Q8qnjp9NlZ5gm2T5gGMcfpN2/kUw+VeHcgone5Tqzg:dxCbjrM
TLSH
T1FAC6127E7249BBF6778144ED642B10443D294963B40888ECF2EC85EE1258E59367BFBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

community-emissions-graphic.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\community-emissions-graphic.svg
Size 32KB
SHA256 77d3c8b6f8d34eb70983f2dd882eef033fbea87ca8b5dceb636cbbb4988871be
MD5 487ba73270f8f21a1c93cf3d6943e9a2
SHA1 aee1552af0748460e353fd9389f511225390e3e8
SHA512 f238a571735a2d5455bae63446b1cf46452914cb5b13d9c4a4ff0996af7b187cec0e9864def5d8604c248abaaef8fd2f23e21471b0bb17223b0be2e7386be949
SSDEEP 384:J/bP2hiH11SQU5MGmKpDRwyDsO7rLE/ObQ/M5pS9E4dunfmJBmlcw0yYHAUYRxty:5XST5bT7DsIZ5cE4OefQYHZY4
TLSH
T1ECE2C7EE2BB459E4EC85D3E3FF0154AD301A91FBAA858F24C25D5F68384186CDC16EC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

customize-layout-illustration.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\customize-layout-illustration.svg
Size 75KB
SHA256 eb0971e4a7ac9ba9308e3c561a9425c6aa3ad10de1f4cd39010ee5e37e8ea63a
MD5 e3a60b9832c5861ea9aea5611665bfe0
SHA1 d381357992a0073d4b6b953b62b442fc7488fca7
SHA512 b49dc33b10359b363e2b7c08042e0543a203e3037e570b2299fea6f6f8c5de594991e8bf1d293cf89feaa75f91245d318b5563d97f9cab057b8a11f5bf95bb0e
SSDEEP 768:0kvQAbZCCnqzzcxQ6TRpoSn4K9Rmn0usYw3FAw7pGsycmiueCMhkrKCT4Qj9+kWc:0k/bbnD9oFgujmF+JeC4krKGT542
TLSH
T13373F8A427F8D3DCB95A5339862934A45E1E70FB7314406DFA1E1D244F0A49EEAEF0D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\f.js
Size 18KB
SHA256 bcc307060c45ad8426f7434b5a437be1f1afe59a1c23659f791121f9ba285cb8
MD5 007a62a7223a78ca5ab73a4c2ff0ef82
SHA1 2d5cec34b70e48e184c0b3269e5b445dca42cccb
SHA512 db96cb0530cbdc338cb119a5494174ba10a5059c00600fcd000b036912d44f6ae3549b2284f137de57d371b9482d0223bd967d174d5f07a3181446c766f7dab4
SSDEEP 384:zia+bImUNrevKrGavUoL/DvUBFykLapwaQypgbZPxpeXCMKP7ZHECnhdzL/Y9ycp:zia+bImUNreyhUoLrGykLk3r6ZPPeXzj
TLSH
T1E2920BE135A3B0715BE900EDE4718365B2A21175300E94E0F2BD8CFB56A6E9B5271F3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folder-mini.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\folder-mini.svg
Size 810B
SHA256 d09077e84b52b4e74d48e2e876766a8ca2ddd73a75e5d9aeedf813a0c6f1a90f
MD5 cc160eff6bf2654d893d5a04fe37bdf4
SHA1 78fa2aa60c812328416c0657398f037ba29abc5f
SHA512 e11d0d02f65a1935ca3b3dc507a1e36faa868f45e3c26bc34617ac0cc5bcd6fec0ffa5277d2e78f516bbf4a60d37b59be2e41427a9210c841f5554591026fa5d
TLSH
T12801287473FC48ECB5160316C274326885A341A7132D4558B0BD73FAEB54949EAB39E8
MD5 SHA1 SHA512 TLSH

Submit Download

hermesSDK.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\hermesSDK.css
Size 54KB
SHA256 059c0acb3cdd44db3654f8311058fec245971e312867ec5ea50ca39be410a3e6
MD5 3df0654b1a423875e0aa74e9e29f5791
SHA1 207839c9cb36f326ff415da52cdd73a05b295cc7
SHA512 216a3c89b1ab0f6b79ab0033135eba906d962f373e6e88200ff61b694e2a3bb90864b293a43ccde1c382e079c5718d97ee81bd07697f0677137b59d449a03030
SSDEEP 768:cxaM2kfiXy7WwSBWNdYIAGKEMzXK2vA5ys:ifiXfb4dYIAGKEMzXK2v5s
TLSH
T12043958AEE6311357E27A2A85FDB53C57221D0038825CD3FBECC21D68F862F93995359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hermesSDK.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\hermesSDK.js
Size 1.2MB
SHA256 566f4dad8416001d55b32b12462564087e9ee6e9ccb992741370942bab24da3a
MD5 1edaa0d43bd3b415f7e71af258ff8fd5
SHA1 ae4bf63cf7ed57a325857af60e267bef588728c6
SHA512 de09323b7ad3df44bd99f387494b3f68d0e7f7128b12496186431c9c0ce3f2b29e150cd560909f0f94af9cd502c1344360b830d40f88d95599efc5d7b48c4b9a
SSDEEP 24576:ZMbWIw9G+Fx2nJ7+I358kiBzRtJp1QNXjEwITiU26LQ14B6a4q2sLzDK6VK6nDwd:iRElyCgWtBzRtJp1QNXjEwITiU26LQ1r
TLSH
T1DB556C8896F31931466761AE5E8F61017674500B3908EC68FF8C97981FDE86C81FBBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\index.html
Size 1KB
SHA256 d976d7cba92d74d02a47b0876e83e24b58b25c1794d23bcfe76e538542dcd5e7
MD5 815262d5a32e3f623b5dc1464bd8c69a
SHA1 04cddc3469f6e7208ff82d64c83e781e9c879e5d
SHA512 af8bb14ad36af6eff8d4dfa1bd3b7837c6ab71b3bf9d846613bfd00c18135873c4eb8c686137be3aaf27f698bd34b4884a2e5f4be2dee9c1518246945e160a14
TLSH
T13821480865F0480632202B49ADC1E918ADC2B70B815DDA5871BFA0BD9F00F978E97D39
MD5 SHA1 SHA512 TLSH

Submit Download

ChromeWebStore.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\ChromeWebStore.js
Size 3KB
SHA256 bde5f34e4c3831e000e2926b8d7f9f8434a1e4d1d50ddf04f85c2aa9a11a8a54
MD5 d872450140c5a591b7cabc69506165e9
SHA1 72da99ba4a65f1b2066bf8daa5b918e70dbff67d
SHA512 b386283afa917c3f16297d1bd2e62e117c3b659e0ab5f35fe41df58f4963b1dd94f63d7384bb5d9582a72523a3ce95eca6cb8f3b66fda58630e717c2a99ff5f8
TLSH
T1BF71114830530567A6A3A99BCCCF50603DB4702BE1196A6774CF442C6BE52F4A7F27FA
MD5 SHA1 SHA512 TLSH

Submit Download

ChromeWebStorePromoHide.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\ChromeWebStorePromoHide.js
Size 1KB
SHA256 f84d906ef2e3ee06d00b033c980bd53ed7a88ed1612f83bdfe9fe852303f3d36
MD5 8122341caf20f443282aee4ca6401f81
SHA1 9ceadb34a3be6b768af2b1ac9e482eb6d67f086e
SHA512 7371f7bcc574003c87aaded9d34b723bf697a0a3221078a9fa9993023c218b2a0c1f152b2fef2844b6cf31e2ebe431c93e40aab0c01e72cf0abdc60b28787c71
TLSH
T12A31EC1E94F005B90B0B14A39C1A71A1FBBC02CFA2A719E2790D06282F41E31575EDFA
MD5 SHA1 SHA512 TLSH

Submit Download

ChromiumWebUiPages.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\ChromiumWebUiPages.js
Size 1KB
SHA256 4ab205173b66b2a6cde90f66cffbd74d77dccf53b9847a6d0faf671ff25788e0
MD5 fc2d51688bdc5791fef1ec092cbb29ee
SHA1 2f8fd7eff2e4fb61c47b3a17e97c050b644116f9
SHA512 61ffcf999588378549eb696c3b442eea64def022af3f0e15a183c0fc6a93f37f57297577e10415cadefc96144924725178c753516154d26a4b3c4b0980fa81e0
TLSH
T1B9117BB92BFC442099C329312D4E92A1EA2661EBD02AED4F378DCBE00F00F55595FB60
MD5 SHA1 SHA512 TLSH

Submit Download

CustomContentPrint.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\CustomContentPrint.js
Size 1KB
SHA256 f47b2d2958e79c39067b8b83cab3b519b31f2d0295c6af112130a32b793f0edc
MD5 ec0fc70af2999e0085a3d0c7242d9a3b
SHA1 382f951b42f03431a57a61596da0637673e55d21
SHA512 3e342742bc22cadddf6892f86ccc60672008f690c1c89c3731957dc4ffb23ae92975093de76c6a2e782bee2f01ee794e939cfeea2cdcf0ef9bf8fbc540e4293c
TLSH
T1C3216AEA06B249A2135728AD88DF6000B123D80775B9B979BDEC92844FC067895D23E8
MD5 SHA1 SHA512 TLSH

Submit Download

DisableZoom.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\DisableZoom.js
Size 905B
SHA256 c093a7815d656543eee12f210ccc06e2784e50b5dc4e07fb9b8bdb76ed28e9ee
MD5 e4c9163c86db9fc2602a978f7490fab5
SHA1 cdd292f3477b84e400c65a4844a833d572974056
SHA512 4c0c6d83e6d0b948d561e47d9226546c7a96d1c0c87d5a353d30a933b8c66c756819364cddf9d21c2a84cfa2e4f35cf1a742dfe88c9a69e4dbfe6582ce8e2907
TLSH
T1AD118C1596ED41F30757A2340D9EE7333322406B80590E6979984FB87F850B24733F94
MD5 SHA1 SHA512 TLSH

Submit Download

JsonLdTypeDetection.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\JsonLdTypeDetection.js
Size 4KB
SHA256 eaa3bb8d5dd809ca7233d40882be49e19b895fbe5a498db3fcceee41f621f484
MD5 3da7a4f08c19642ec9bd8fb27d97a24e
SHA1 4088d0687a54108cd8a889dda3bc4957e85fab3c
SHA512 5b7d0507f58b8aa4183cb6f852c7625bff62f46eaa86a68d53168f3d75ab9e01ffa54fe8cb8c8c786de79eb8ee530a5ca5f59e579964683f6f863d2135246c3f
SSDEEP 96:a66BjG/c34VfFIGcH9udmM5BfRBDaZ/xS:aJBj6oYfFOH9qjfbaZ/xS
TLSH
T17C8121A0F9F04461478B34BE8DEB21D57130901FB229EEAEBE8C96B45F448784572F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KnowledgeBaseFormInjection.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\KnowledgeBaseFormInjection.js
Size 1KB
SHA256 4b78f6beefe7a1acaf17480a9b94e2c96832bcac4cc5d7705256bc1bd34c874a
MD5 fee4bd18e0dfbd3745fe2b06fdd342e3
SHA1 70b5a0daf5ebe251b6e16d5fed18c7ccda8f6ee3
SHA512 f1539bb536958460b405a5e8d70655676fdf946cd75565b11c71a8d1b0e99a0887409fd0ad553ae545fa54ef5558c746f4a1111e8bd016f9aba9fac58c6a6b8b
TLSH
T18131BFB136F6D49103D3307A59EF1141F439C017241A3A9ABA5CC5D89F19FE41AB2BBB
MD5 SHA1 SHA512 TLSH

Submit Download

Onboarding.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\Onboarding.js
Size 1020B
SHA256 a2ca669a79e962c3c2fb13d30a0d6763ebb2f36bfa003f23e95449b0be091fc1
MD5 3da7d8198ba823cd00fb755e276a79ba
SHA1 5cf320e1f9206312d4770f3c542dcfb268f133f8
SHA512 7489363c114bace1ced3348d56729413ede8ddc6cebf69f50d99ad4bfea4f16f8e8664e7fa6ce2725c1f970b1dbe35daef77003d30fd35a1840e110e6ffc3e00
TLSH
T18911BA8945F89623439332229FAB32023339A14B010978A47ECC92F49F444B689BEBB1
MD5 SHA1 SHA512 TLSH

Submit Download

PaymentSuccessPage.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\PaymentSuccessPage.js
Size 2KB
SHA256 85a911a1def32ea6c95f9b79a24870bbbbed83ad15bcbc97d5c0096073bfe2b8
MD5 550bac50999e08718c9a3a66240bd54e
SHA1 df304662daf4d517d8e0d7b6148c5532c6a6a3be
SHA512 3617a38e2e183364fec5b7113d5df31f38511536ae6bcc122934baca93cd7ee1b9603e85efe8f2f0f22215e66d9207afd056b174c50943ef77d60bbdb449ec42
TLSH
T1C341EEA951F45025261375603C9F3901B339B20B282B6C29BE5CC2A4DF46E72BDDBBD5
MD5 SHA1 SHA512 TLSH

Submit Download

ShiftPage.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\ShiftPage.js
Size 992B
SHA256 18a8d324d9afe4a21b0b83e8f51175216fadb32e23044929ea50e5b815fee370
MD5 56b76b0ded4048de461e82e6f5ddf70a
SHA1 8f567f10a061f5823032380938b9c35231511510
SHA512 842e42677d8bebe6d5082c86c5ce414031dc4512a00b8bdc5420809b58233efcb058f02fba9dbcf102f8be1dc02d8e2bac9cc501d81a770c7abc0ec0fc91ce31
TLSH
T17211999D18F48421225735162EEF36013739B14B100A3DE87EADC2B4EF189B698A6FA0
MD5 SHA1 SHA512 TLSH

Submit Download

StructuredDataDetection.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\StructuredDataDetection.js
Size 2KB
SHA256 039927ac6cfb2df01cfbf120cff64389f4c004c557d28a9bfc1734104165f08d
MD5 0fc407dd3a5048c2f033deae0fd77721
SHA1 9e6fa4f33465c333ca41f0c49a7880e8a1243df7
SHA512 723e054f11e4b18c2a6c20acfe8e4eec355cb9d629cb619068067e965a000fe1fe7413f1e8fc534cba4459a6acba94e0625aefdc8596562d2b155d93ab121c35
TLSH
T1D651C2DD3CF59124434B76A5499F6049A134E41F490C9D5D7C8C0AB8AFC1F3669E3BC4
MD5 SHA1 SHA512 TLSH

Submit Download

TextSelectionDetection.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\TextSelectionDetection.js
Size 6KB
SHA256 198ea84ec73859c616e5d61a228f1d7ea8c3cffb61d3b822e1796f7fa4d51ce4
MD5 a183428e56747a98a3267e64492549fd
SHA1 28696d14102e6ba4a44d3f715ea68d0e57a9709b
SHA512 2e7207c1f37527b8cd91a4c81afd0cb09ba3899528bc9900adec38801f2b28197f0ba8a2e66971717a5f9d490eec331e2f8322809a072786ea362c9eec73ecbd
SSDEEP 96:e5XZOeh269bQpuVd6yFpHr8aQhyI7eyMZfdU73MdWOtYOeqZi:Mkeh2Sbs8MynLLQhJyyulU78/tGqZi
TLSH
T1C7E1CC2A36F83332855FA2270EC731027676411F2916A95D7A7D87982F3063486B7BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnreadObserver.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\UnreadObserver.js
Size 4KB
SHA256 322c716660c5ed09dc93ef5c9eada1c4d6dbddb2ab07a9964df31477581dab37
MD5 3025e0d58f9989aa4e9a8d7ed6198ac1
SHA1 96e67e2727c6cf503e2b41eed246453e7cdab4a5
SHA512 2061a46ec43d235986d29317981eba3e6c6b9e3b8070feea9a05584b25516084f7425720fc66abefa41d450466bb436200f506b4dd576b00a3987ba24152e4ed
SSDEEP 96:PynetRFPV8vWuDF0/1a+YGgZt18wcv2/IOianVKyqCMxdTSgt:v70WG+DSghv2/InanVKPRxdTpt
TLSH
T1CA91118A26ED653B0A13A9366DCB1014FB3C494B200F8DAD7F6C96986F44438897DFF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserAvatarObserver.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\UserAvatarObserver.js
Size 3KB
SHA256 da797cdbf3d04fd52143cd0ed7321ff18fc2532f1e007898758f461bde0a79c9
MD5 f56b5be54079aeeb0a3072c8b9ff8fd2
SHA1 7e821c431abcba52f4091188db6075289058c675
SHA512 27fa9756246f6ab1d99d0a8c4bae2825ad7d9b2fdd3c9ae4c3353d82b14507a42c6134d424c1b495aac197570bc6daf239dc69df1a8e561fde16fc36939d7570
TLSH
T1D571354826E9A43F096720B5DCA7F3567638100F23068878FF9D8AD45F040BABD55BF4
MD5 SHA1 SHA512 TLSH

Submit Download

UserEmailObserver.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\UserEmailObserver.js
Size 2KB
SHA256 dc24ae3d08ea20f06f17a43b8fcee8636b31b46ebb40d7f8c4005fb934fe2346
MD5 ac866a5442a685308b1c48f098f4d8e9
SHA1 1d84e8c0ae5b17789ea98804ff911705b2930824
SHA512 2162df47e184e3378b881df04b96f9970cafc204a495fd220d60f57be6410657d47a720ea3250c1e31d4c00396648bbd88cf383ecaf6f47bf43786627000a3d7
TLSH
T16E41BD4427EEE0A71A6210763DEB31693A39641B290788BC7F5C82C85F0083EBD65FF4
MD5 SHA1 SHA512 TLSH

Submit Download

WebUiProxy.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\WebUiProxy.js
Size 1KB
SHA256 5deda3f6697605502ff2bb02902edc3aae04342e0276fd6c0b80a5c774db8f58
MD5 b438ce462ab759d97cc34ea024b34c13
SHA1 3f0f7f017d5e34ca032742e1fa55b65da5d8fdc0
SHA512 00156e0411e11dcf957132c0c23b913d080d809ea86d4c0151ab3c0d7049ef9b4db26a68407138c73f9ba93d3f02624174b956d199762b4139367832cf4dd7cd
TLSH
T1D9310682B6D40538929B97377FAF3E433A3AA6C7C40164547783DCA49F200E29A91BD0
MD5 SHA1 SHA512 TLSH

Submit Download

WebviewClickDetector.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\WebviewClickDetector.js
Size 386B
SHA256 3d8d4d898a55ffe6b2162aef72e2e76a667224f81b917b1f9d05977301be15f5
MD5 e81b1dae05bbdaf4e1187ff710ca8a8e
SHA1 68c66dac9efa8b597e59f2f5adfb2df0a244912d
SHA512 fdf858a68092c28d295343d1503f4f4d2c40827cf4eefcf16fb7abdff239fb9ce488d3c900bf0d18c73d7992fdabfd401017ef6259f905a70d315e9920b75f37
TLSH
T13BE02B1437FE982A118293663C9962413225512741190D497EBC06F13F08EA82BF2760
MD5 SHA1 SHA512 TLSH

Submit Download

WelcomePage.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\injection\WelcomePage.js
Size 1003B
SHA256 cbfe641e8062ec6016f5091de866b0bf045c92447afde0e6a52d1a75052b8339
MD5 d73338130c4a13c15cbbed2e32cf3672
SHA1 e4cbac51de27861257a0851163bd776c1de10238
SHA512 57adc8ffaa0472faa31c1fa5df9dfdd98765f6fe18bc8e98bb8a58f802d0235c69161602d6783324d937de81da5982ae5d6f271ca58d27d528a64406cbeaea0b
TLSH
T1271199D989F88429639335123D7B32063BB5A10B040979753E9DD2F4DF448B598AAFB1
MD5 SHA1 SHA512 TLSH

Submit Download

mf.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\mf.js
Size 155KB
SHA256 78790831c09d2ccfa158c40958af30900cfa46adc4d477f50432daf6ae09958e
MD5 22fe3579bdc68477c2e89430155dae2d
SHA1 9f1a6d4cb4b85b52b080c8dc08b29ab1698039f9
SHA512 39102c8caaa78885c462858d326614d8c76fb44e0c688775c91f18908c2303d65fdb880138874656db3f183b14f5f00064afcf851f2d7e1371491d93d4fbba37
SSDEEP 3072:TWxsrIbeiaI3bfuUKEnsccEKbFmpPI40fiykhSl1oV:TWOrK68dubFmpPb0fiy2Sl1oV
TLSH
T1B4F329111968C7E53452EEBD05E6220E1409DAAAFE086DD4BFF0C93937DAFCA121DB53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-actions.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\min-ui\extension-actions.js
Size 6KB
SHA256 9f4600f51df985d44481c52d5d130d5fe4a8e2faee2f6fb4932c43f4ad216339
MD5 272fb2459654a504e67959ee969b8136
SHA1 852fd8dd76a07639d6284f55687ecd11acd17ecc
SHA512 8220ece931e130f98893cdc057fd24614e5bd9a49d1224499c2e75c47a5f4590b519cf68b6b9f04062d177c1e2b99db6ae002f5a6b960369e9b0fd036b1dac37
SSDEEP 192:FhFjKDOvtkZFRzHFkuendmsiwf8OoyalkJSsm9a6v:/FjKDOlkZFRzHFkuens5OLa+JSsJ2
TLSH
T160E1ED5621F5273B136F906BC8DB51E67320E0633245EEE139DD42642FE17E048F2AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\min-ui\index.html
Size 1KB
SHA256 e0389b9bcc573295678c962436378db40259606b421ba48f0a3ca3c02d4a09ce
MD5 e486daa0ba278e8f534d77592d01d586
SHA1 4a84acd1e8827c351cd1603f962824df60e4d07a
SHA512 d2cb3a233436bb5642cf1643e775c6c785b8f8eeb9b310007e88913ba2ea1f59b778f66975946a189b8085a52d4f5c12b8d8004e20ae2928fc423fef803dbf11
TLSH
T14931AC52C0F44E67432084083AD3A14A3D50D643D78D2415B95E5FEA5FF3A99D88F54F
MD5 SHA1 SHA512 TLSH

Submit Download

script.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\min-ui\script.js
Size 6KB
SHA256 7ed11a715eb7b2374158d9112dde59a13430172abcca44834eaa4a713da116ff
MD5 5b899f43532ef852026728290e5b0bb0
SHA1 0b7ea49ad08fde9b886549d032a73e019be9e65a
SHA512 60a0437275c81dce0f01bf4fbaa7874dec25731770d0eb74aad85b224fafb1968f34578860a05cb937150c6371d5e8dc2f060030c92fc3defa7e92e2e4919d95
SSDEEP 192:qjt8ex28gIUzo65qAqNkYqm37XlcclKOp:eC8gIUzXQAqNkQ7mOp
TLSH
T1CED141A672F2193553AF20B9149F52763E42905339089D83BE9C892467D4FF388FBBD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

styles.css

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\min-ui\styles.css
Size 6KB
SHA256 04dcccbf7c2ca0290fb14fccef0bb2ce230ba1834d706adb1e1dd7f49231a60b
MD5 4805636068a4b82a22d97a8d91a65860
SHA1 f50a1871d40efd24f24f050a0a83452f00c59573
SHA512 b722c2d4fdce7ae82fe4bd90b25d0acc3bd8052e157dc76c28a6f3564576be06e0edf9dd449d967df54c95c24dbf10527d603c3e050d56a9c63e73d9731e418b
SSDEEP 192:+Y70lmP39qS9FTgvt/QsYsu377UsYKZ5A:amP3gNyhfBw
TLSH
T14BE114D17A3141F4BE36EB99A657EBD9735E7220A609D934AEE1301C9EC03F50473748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

packaged-app-compat.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\packaged-app-compat.js
Size 1KB
SHA256 7e6e765b1406fe2739bd91089daa31cc5e76326ea6a114c8706efa90bf97a0f9
MD5 1ea66cf40c63de3534f94a7bcf7a5050
SHA1 4284ed8b3c955cdbe8f9766eba0375151bdb81d6
SHA512 89052042b1db65c0e9eb05faa78cee09c7e5ac1d06769ef0de3e5e524b3bb2c433f6ae030751326fa792381ddf1619ace2e162f6a9ed88840cadfe214d77dc6d
TLSH
T1792131823515BFB245E44ACE81AF1714E3282275303994D0F3E09CF2AD6188F52E9D27
MD5 SHA1 SHA512 TLSH

Submit Download

reader-mode-icon.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\reader-mode-icon.svg
Size 2KB
SHA256 99a6409b9c87a8d068766b433a4670fdc121cc3edfb473bc6fe154baa7527a3f
MD5 0a7f3c3d625712832eed323e3e2e7bd0
SHA1 f3c4edcda4aab4b80f20ecc009fbdeed10314833
SHA512 9af82b856000c377a2b06e8464379618ec638baff389511a60b4ee9879f7039a27b8d38d27fe3872260a479ae8023077ce5915476242992663721e0033193702
TLSH
T168519EF5B3B4AAC803463BB7E8E22002916E187D4B446599E1F4BDE0CCAA5C14F49C91
MD5 SHA1 SHA512 TLSH

Submit Download

service-worker.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\service-worker.js
Size 60KB
SHA256 34343a41837cfff2719663f533d4a602e2d3c57184d062948acc02352f1728b6
MD5 e879980f6e1d36ce7e9cf9ae50a32cea
SHA1 8c3cda2f2765c4edcee320d0dc19e9b78ea3d6d4
SHA512 a41182fac2ef04055ca8c53a2c580586f136dd3a9d9f0439047daa02d967daf9f4ba3d1f0a0f64505f20b7ea042edda3b53ee5c5ffd903616bb8fb04e63f2489
SSDEEP 1536:3wL/FqLFeoDjvPZe0bQcajaMgmrhajsptVmdzmTKGqTuB2W:RSmdyYuB2W
TLSH
T1FA534C9232BE34B2C9F2A4DDF823612052248D54310D80A4777E8E8E5B5FE87677AF75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.html

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\settings.html
Size 1KB
SHA256 f8fac22838b4b513c25e2f03002581e7efb38f488fd198fda1889789e635a599
MD5 855869b54681498f564f7c211b8ba56a
SHA1 68f3df85fd09da806a92c82db9bd4579c98d38d2
SHA512 ba3d1b32c8030bd37b3f64f94451c396f2356607071565ff55e1342a220db856197e60c132e4548004d887c8036adf3de893555005bdbe888606781c82827f78
TLSH
T16831C10865F088063215279A79D5FA587ED6B707C119DE64B1BEB0BC9F00FC68F939B8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\settings.js
Size 71KB
SHA256 e8874c7ba82379e3a9c38b50c7671a9e7fd8846042af868c35339fbe602c38fb
MD5 b38247aae65b6cab0787120be99eed0a
SHA1 59c0c669e2a56ef3956f3404bed93dbe3390c821
SHA512 c37df46cb46fb387b2e26ffb4ff63a5bc7903b05e3b7466cf313a711e49715ee6abd2129c244d764b2ab2aa3cf6b0782aadeb5c094743103d2e1db04d8189a2a
SSDEEP 768:t00RQoSwfGPcstNeS7SsiLdTYLNIgomHt6p1DKJFHMTlugAXZ5llKcIFCUJ24KFA:AQSACNy2v4FACWDlBvHu5lGxpnfO
TLSH
T15B633B417054B8BD9DB60DE5DC3F0325B12A0A94E52985F5AABC882C102E5C7F16BFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift-logo.ico

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\shift-logo.ico
Size 195KB
SHA256 626a1f799d6d390e316a5bbf38f5a0611b301f6c9fac37338368bf70a8e56f6c
MD5 c28a8237cd9228ece4131b013658ec87
SHA1 6d127a0c1326c36dd15b29e449e0efd495f9b3c3
SHA512 f555d9bd7fffbfc4046a96d4b06b8c944ef9cd81813a33049e8f48121b8fca8ecb8734d345463140eb5562c7ddbfb0702ab1019c71604cd30c5100eb248d6663
SSDEEP 1536:sL+LTDl3XN4op++G2/rZ2pLXf46pB9TzCRIcaZDHFhw8udOqeZI0+6NqripqW5rn:kCTDrjaVzCRWwgqcLNWOqW5JJ
TLSH
T156148EE3287DDB1ECF612AF824A2E3A144ADDB64F05A4561ECF4E71E350EEC19339941
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift-logo.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\shift-logo.svg
Size 4KB
SHA256 1910f0f4acfe551cfcf6924d57b150538905073af612c8946c00a78a3c8adcc7
MD5 086c9d8c73dad20c8e0ceabdc893c309
SHA1 a7e3bae94800e43c4ac6763029fc77df2ba114d0
SHA512 dc3b428a0b1e0804910371d3be0469cc79fbe1a05f3d9dfe58f6f8491d2e1d6eadc7d63ca97e10fa164adc7bf64f2dd5f52346f551a3e750017c2d0fc8536fce
SSDEEP 96:SOlbgFY0za6CFHelna6R6pdpt17Cr+ygYQ/hO72hJxhi:5bSY0za6m/6R6prTCCVldhi
TLSH
T1B7910EAEABA18C2BE9CEC78DE854C02C347961A26CC18260D19C9F0F64146DB3C1E7D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

upgrade-illustration.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\upgrade-illustration.svg
Size 12KB
SHA256 1973249e38d42076d92412de4ae6a93de73d004444b2f25fbcc2792a975ffce0
MD5 9975077f04944f4069fcd97dc00c56d4
SHA1 fc8523b3f2af5d02bad14b226953e00ceeaca053
SHA512 65877ba1c3e6447d7b07e58abee68f3a8181575492dd28eb237b362e0453cd7ae1529f68418ebdef9b29cba793bfd62381da38603b78ae4c342150a3ecf79996
SSDEEP 192:Wxy2AhqxrpPdsPvStnrPCGLtTbv8lvYyTzuz3bWc/sloukS3i:WLPNdJDZv8VYKuz3LCozS3i
TLSH
T19A42C6EE2739ADF8F88393F9FF429078605614F71F889290C2685D3D1D09259AB0BED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

weather-notification-image.svg

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\weather-notification-image.svg
Size 10KB
SHA256 e2ec2c4449f284081b26ff489877ff04b6d133ba3bf3c77e65f757b2697ff85e
MD5 7dbd6a8528cb66a60a7f8d04a2f5f43b
SHA1 433279442d0522eb4df83ee645dca672b19ac3b3
SHA512 8d64205fda7d9b85c08e84555474f1396fe0fbcd9d8586f58e6af95a6cf6d8817fc7bcdebef2451535ce8124053f48edf424e8703721e50cb8d3d1fec7ed830b
SSDEEP 192:JjoW6ULWxbqbjrXelYTjTBb9ntjae+ae0vgtjjpDRVg:JjxbaV6rX9HVb95aDX0Y59ng
TLSH
T1092276F6B0F9AE0EA5128278EBED985113BD61BAF15041598D4F2B368056CC2F93F3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hello.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\workers\hello.js
Size 540B
SHA256 2ca68e25fd4df2585da579955a4c17c61698481cb4cc75b44b30e266dc4a0b96
MD5 5941ef7a0bea773658efe76391878b39
SHA1 9c85023f479b77c9b8648c2c21b625331da4a68c
SHA512 11c71ad438be57025700dea882e5f19bc32d1b66faa449465207c443b12fae397810d2cd3c9b0558974bf2268ef1ddd6bf340b2ea47361162ae2f2e87e28a390
TLSH
T122F0C0DF8AF02F1DD0E74A68E91970C1611011A3608E8F80F13D5D2B2764C9E1C58F43
MD5 SHA1 SHA512 TLSH

Submit Download

history-index.js

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\resources\wexond\workers\history-index.js
Size 5KB
SHA256 71c470554316bcfe7d01f98ebbf63bba3482f8303ac0dd4b6e4871b2615bbab5
MD5 0db0f98c1db1ef9c77b50b1e3a12e5ca
SHA1 0681ca02314b525b7209be3a5899337a21264570
SHA512 87b2b22df8f17e27f490eb9ba1ee1752a2393244aa5eb02a402aec815beb60215aa3caacd823561da766d8913002c09e5727611afcd845b14f1c45315d4f5da2
SSDEEP 96:jO6rAJ70q8EQaXEWPqjrePzgRPCO7dptVDr4vayoZlMowYnsTJWz6gQ76IuYWVQC:y60JgAQO+51Dr4IZlMusFWz6gQ76IuXR
TLSH
T16BB1C9D721F1123992FB63B8D430690A396D66217C0A447DF5ACAACFEDE4C42D05EB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift.dll.sig

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift.dll.sig
Size 1KB
SHA256 7bbde543a0acb29ea4c328b27f57e5c01b5b2768d4a42dee622b02ec4dd44a5a
MD5 8d84f6d197d67a850311861e1e6d5a5d
SHA1 eda7f87d9ef9156d054f15628e4e7585351fb5e6
SHA512 1293d73dbe06a75e156fa00f1484e0247968b4c09f6bf966d7e8f93b1b3e802cc59054061cd8dde16cc8e3e565683c229be411e4cd498247990053e9371eaf7d
TLSH
T1B6211BC41F60342173C0AA4CE5D5DD2BDCBB52C3E07F54EC812550911EA93E429CB21E
MD5 SHA1 SHA512 TLSH

Submit Download

shift.exe.sig

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift.exe.sig
Size 1KB
SHA256 51c80075258f54b2dec17ba69fdcef022b57a570d8fd5b76b9a3e27e5ccd639b
MD5 025332e5a94af9d4344cf32c9ae4db89
SHA1 edf06c0be492a8e604bf31a68e084cac65fb919a
SHA512 bda81e74b506abcd41cba59e29dceff3c0932995da732c0f9394b7698bca7752bd6d51f0627841d7b70c7878e78f0f18cc09a020146475c9f61f43051521b94a
TLSH
T1E621E9950E241417B3C0DDDDA9C58E266CFA51C3B46E54EE801492851DE57D429CB31E
MD5 SHA1 SHA512 TLSH

Submit Download

shift_100_percent.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift_100_percent.pak
Size 709KB
SHA256 18f757cbf73e80b30049e75896dc2aa4cfbb29ebf5ec6dba766c1269777994d8
MD5 083df3dc8c097b5e960712773b10bf85
SHA1 9774b93b16d85ded3282a0b6f86619d0dfd223fc
SHA512 7cf30b8daa1fee114a2d78cb77b9e04f9c7b1ae940b09f4ec11da4329bd0513fd640bb9c4f68a159465c1ee170033ecb85f7ecac78600b28807c020b7901c88c
SSDEEP 12288:vI3H1fJwkzgsz5B0GDJQrnKs8SNP+QSs8ilSTe+gnPzmXdWYJblIt6kjKQCrC:w3VB/zEEmPL8bTe+gnPzmXdJbc6kGQt
TLSH
T192F412E77774AC7DEE9B1277826505B0FC371A680B82020A17DBF8796917B4898C93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift_200_percent.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift_200_percent.pak
Size 1.2MB
SHA256 b0909ff5a6cd3e878adff6b2ca5fd298fb793e11951f2ea3dc4dca8bd3c31cbe
MD5 c9bd8fb0ada98f79ba91e943263cf42a
SHA1 0f7b5148b713c08eae9722794946012da1b62ab5
SHA512 46c557f5ad289a82617e2d829a598ad6fdced151e69735d78c6d5165669a8877f39b33ca46038a9febef417b0a357839cb812b3576c0367883761e776a5180b0
SSDEEP 24576:63zB09ptmmibkFR8+mZi5r8BWhQume1RvQt9RdFIQwuSXAkpbaUGQ74:63ytmNbkFRJmQ58khQRa1QPTF8uSXAkA
TLSH
T10F4512D7A370DC7DDD530B77929B40F4FD7A10670AB2100E1626BD7A3926A889AC67C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift_elf.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift_elf.dll
Size 2.4MB
SHA256 3ef7577794febfe776aee23d7d77394871778bcc3c9e42c7b39df103f744dc11
MD5 bcf0c3ff64c898df9a9a3f07cbc2bbd1
SHA1 287f9c00702247fba609aca597e91abd465bcb1a
SHA512 2474699d3126e6c9bd48d847986f205a4c8931b00c80d9d46fe7106c3f383287b3f03c7bbafd816b31473f3839db426b713ebf226ff38b843ba7bc765a9d2c75
SSDEEP 49152:BsdS4+9IkpuDQIUC1dont0O/7tmzKypgJFP6CUhAw5d3:BsdBkpD9C1yRmRO8As
TLSH
T1F5C56B13F29901E8C05DC1788B4B9632AB61BC454B35B6DF0A9077562FBAFE4673E720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift_pwa_launcher.exe

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift_pwa_launcher.exe
Size 2.4MB
SHA256 80a8ad5e7112391968e9e8b15c7f158c155e16b3f226e6359046b345876e8d7c
MD5 157f2ab29aa949a008f49b453be1411a
SHA1 318760d17acb38e42937748a796c753a8f204f97
SHA512 0dc11344545049b2fc9ee0e628dcdd50e382f4ff3599e280f5930672cee1e25511f9b86c9be11adf185218071ebea86cf4f95bf12861ed7908dd408bddee28ff
SSDEEP 49152:WHvZPXbcwu7FP2bUw4J76Jmv0W6aJh+KFeZq1K:WHBO12bUZQE5KZWK
TLSH
T1ACC50723B19BD0D4C01DD174CF164AB295A17C69CBE5A3DF06C87E117B36AE07ABA318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift_wer.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\shift_wer.dll
Size 116KB
SHA256 619bcbf30f60f42328121328a3670d662308c5d8022ed0ad8d529e5f3776f585
MD5 5f0a1b3c1cabb0a9cb52c01d788cd331
SHA1 fd361b625c521004bea275a93a690065b3cf1b70
SHA512 b28b22d7ed245e31553e9ae782aa9e5bf6f431650e04ab75ed32898f515c87d3cc1673e108473b72c20a01fa83b73a80ae761bbb53220c2cb85899991d1fa43c
SSDEEP 3072:knLR29KNnTNX3ZEng0j4RV4eWAtpFrpqpqpvIwT25/2tSt:kLR2aZZf0j4RVznHot
TLSH
T1F0C34B5732E500BBE5B7863884A74F06DBB2B8114761ABEF03A4421A1F637D19E3DB71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\v8_context_snapshot.bin
Size 699KB
SHA256 54e43fb4e36bca5e855bd35a9adec5f704e0061ec1e791f9756cdd93ebbb92ef
MD5 a5c2688b4839917e9fce786e933c778b
SHA1 19f37eeb30a9bd204448476a1c82c68db0d43123
SHA512 1add5acd5e50069f7d853b20b5b8afcf2020d3ea07f9056205e2610f4e504222bd092ff6399e58d9de2d5e1c2be5427778296fb9408e0b15fb69056bd8b95f03
SSDEEP 12288:czkhL5X5fpfiB2NCxnkNTd2MMA3p53OE3I:myLbtAviJRPbd4
TLSH
T171E4A771FB0ACE26C9612ABDDDD74B063A31B1CE9EC7E607700253BD69B82944D2635C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\vk_swiftshader.dll
Size 5.2MB
SHA256 415995e615ef304137d5cac2ea764b6d88d58fa6133c47feab2cf73efadbbf5f
MD5 7016f7d200587086a97684e1709e0be2
SHA1 5a1fa9894db9c08bdd02213fb553c727eb034aa6
SHA512 c2da1ad8627ba6ea73c20492da6e603f82767b67e4546eeb5916c584b3b8c29ec111b68c523110c1578e8f32da4b56380d2dbebaecc215722b40de7cea41fa72
SSDEEP 49152:Bf+yCp08rMPcxOydpkUCUUxSsNNL3p92jDrQmF6hy2GgPqXCJ3/oVPSTraKe6Cx6:p+yCptxJyfpt7+09
TLSH
T1D6463803F28680E9C06DD579875EA623B232F8840B7276DF66A04F192E79FE0673D715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\vulkan-1.dll
Size 929KB
SHA256 ef4c7e204951810f2550225b53f33a5e91617972a42825d771f727ca1da360c0
MD5 40c85cbbcc62b89de09e985c7ee4d146
SHA1 fd84ac1dfbeffae13d3701abe42757009c5103ff
SHA512 27a6a41f35af50fb49f3ea2a6294bdf838ff5c33f89f15dc67e99f5ce59fda953246cec34b0dffb3b80e26811b6ecffacca522619e599584dcc7188c0ab00cb6
SSDEEP 24576:k9egyXXMWgZBDgCmCqqalP6Z5WGchDYsHQDI6g3P0zAk79oOHBjCgn:YMXcWgHBqq2P6Z5WGchDYsHQDI6g3P0F
TLSH
T16F157E23DA948AA9DA7AC074DDC18A0399F074811322B5CF12B817157F6FEF46B3DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wexond_resources.pak

Path C:\Users\Admin\AppData\Local\Shift\chromium\147.2.0.487\wexond_resources.pak
Size 110KB
SHA256 50ec0512b59ba9f5f3295142ed84801ce7d7d7a0f778ed29e2e9a591e7748e68
MD5 d404bb53ad5fab64d4fdc6c5791b412b
SHA1 51b1198ab7f538dc179cbccb6b231e403df767a9
SHA512 32220608074bd4c6b4d60c3df6836e2daac2549bd2ff3a885b644512d9375bbe021bfbb75d9cd1a57b724a06ac86059197ab8fd8083083b775aa903f892a36c3
SSDEEP 1536:7hEZUACRC/beAT8yKXf5bLCLtWtGgCDcXJFu9SQRXGX89O6yG4KwffhiB+2IiYUO:dECJw7MbL8ItGRSQRl3+DV2xYUVVe
TLSH
T187B302EB761D9E16DCEE9763A8B0943B10070DA878C762D831C69648A53C19DF3B1CB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift.exe

Path C:\Users\Admin\AppData\Local\Shift\chromium\shift.exe
Size 4.0MB
SHA256 e1426196cf498fca4107a2170ae02918a2bb2a3a5d3d2db1084b402aa2aa1252
MD5 dc2dda2feb1fb77e4e9150212510b20c
SHA1 13448b5681b30db6d3184ce9e1e545cbec46ca85
SHA512 770732dda71d3ae53c1b81c25d9d034968c1c2947ddab1d142ccc3ece252c6199341898e574fb109d54d1af2e4204e190b117d2f842e90dd680a29d9e6019bbd
SSDEEP 49152:UFDhOEMMyFbCEcIBJcuM2eKp7CPvt9ks37EcQoI1DV7Bkn/uAfksBC3m5y3o3Fxu:s8dMup7Cd9tSpEwoioCCECYCe
TLSH
T176168C13F1DA41DAC019D078879B9632E971BC458B35B6DF0A90B7162F7AEE06B3D720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift_proxy.exe

Path C:\Users\Admin\AppData\Local\Shift\chromium\shift_proxy.exe
Size 2.2MB
SHA256 a3009cbb8fc25b673d8702e933184be079a4c8481747102034f4787ee0c3f1ac
MD5 50ba8aa7f2c47149c14063a54a378a06
SHA1 22e1fffddb7716ef2b274de58e75cb7c373747a9
SHA512 3b911e4cc43ef7fac5bd818db7bed260966b376a71617b77402b277f26b25e1bef8ed4bf040c0e033ee0a6cfbdf30e7ddf92058a00e41ef50d2b672ad0a0cf2f
SSDEEP 49152:Rj9jnoCANoTq71l53AYV3hX2wcEzlUWaRC4MYw0:Rj9jk1l93hKbzC4MYz
TLSH
T17BA58D13F2DA01E8C05DC1788B5A8633EA61BC550B3576EF0A50B7561F7AEE46B3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close-active.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-7H07J3DVH9.tmp\close-active.bmp
Size 20KB
SHA256 455e5367d8628bd2668265555336f96d0418665373246770c2d4ce96bbd41ca1
MD5 351a2351aa4fb36c1a0adbc52eb5e92a
SHA1 9e2e3003a7a6f5bdf53644520b4ad53280d5c68e
SHA512 a7e1089f1ae592315604e7fcc0025d3b83712f9727a5e29874d823022276b70d86b456efd2959f670f2d0ee5c9bf568345338f72db6938cf55c388029c422f18
SSDEEP 384:yhqgh/5x5x5x5x5x53PH/P3x5x5x5x5x5x5BIJeSZTo:y+To
TLSH
T17692FBE2F8D451C2D1218FE29CB5B6C3864DC33AC6EAACF29C1C56A6C184B57913D61F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close-hover.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-7H07J3DVH9.tmp\close-hover.bmp
Size 20KB
SHA256 92df439be7ee9b39daddb48510e51d8b15886c865df67ec828b2e42d1d1cdc13
MD5 4218c9348f72f71135ab1e2bcbe58177
SHA1 47f25d90586fd3c0bf666eb409dc0735a86d3b41
SHA512 d1a47d94031fad0fe4019c584451fd423d782e4600041cf0cb8ecfa011f51e2e0f5ccc267bb2fa83792519ae14b16e39c3cda154a133b76f1502d7bf7ceeab6e
SSDEEP 48:7jm/L9//iY/71iEXFjSbHEWf6wmtFAnRceCjMS77Z6IeOXIVMA+Z:7wL9//i5ElK69jtIIIVMA+Z
TLSH
T1219251B1FE9B311DA51DF4332F5EE7AD09845039AAD5335DB8C1813A03980A7B62722F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

minimize-hover.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-7H07J3DVH9.tmp\minimize-hover.bmp
Size 20KB
SHA256 2e9bc2b16e7442b71c3781c520c7d2fa1c00df0629616285695621a72b64de98
MD5 7b501f647895c73bb4656937201e94f0
SHA1 4edd328ced49b40261beeaaa658c9711ae6f5fa9
SHA512 568fc08a9bad0c1f15b24082c4354a743a3826a4b8d22b9c7d409700c043e7b5b0b28d7ef8db6ba108e3c97fe34567798612e313d5c6944dfa03e46aea1a911a
SSDEEP 48:Pw3zUaw34mLWu/8+xumlzDKr90NhBYGuDMLFpuNKAl:OpLduHxuXKYGuA+N7l
TLSH
T1A1923FBAFA57251CA51CBC332F08CB8E5A18143241E03B7E1045AA3C9398193BF3716F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close-rest.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\close-rest.bmp
Size 20KB
SHA256 5fdac2937a763f01960b2e1c29119bf9f41b5797249068895e2bda9e6e88cafb
MD5 199ec48512eb91c0909edf8e27350ecb
SHA1 a439a946b311356773b6051c274006044dc342ca
SHA512 782ede7b44acd825885a62cd04ec49f8f046194aec62da7017833c4301cc688097785e77f303b0a214ac01cbbe20d1962fb0bfc5411276b5e1ec1420aed70124
SSDEEP 384:9pJ3sUkg69ZFi5U+X8UMtSzkdGvuW1fkSo+zBK5xnxBirtzMsIsnE/3kv0wnJHi9:9pJ3s9g69ZQqZUwS4dG2kfkrSW76imEv
TLSH
T1A79262E2ED143B221039A426700A58DB0B762B3E8784F5A4B175D7BA05CE0DBF637B57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en.json

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\en.json
Size 1KB
SHA256 10aac92038b0779ee119aadef2baabc709aed426321a4a15b68de28f1edc73b1
MD5 d1b3ea986b980beec1bbb43300417562
SHA1 302aa1d77d399a05c244b6496c0893e244d9eaa6
SHA512 3d3aec06b056f3b84758a25510949cf7180a4bf94588e254016a8ffccb57cac7f6fe24ce1ebd018d42e4cbbe1b17131a01083ac0cd849013e06311fdf5783738
TLSH
T16821821D53B88437A9E02AC72DC3392230798D0F029B31584767920C325F823B2BF3AE
MD5 SHA1 SHA512 TLSH

Submit Download

install-location-center.png

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\install-location-center.png
Size 75B
SHA256 83705b13c7710484d97dfa2d1879892ac96fccbb63d9831d89be53286b53ae8e
MD5 69537a71b15c561f820c4574614a9ab9
SHA1 5083b5bb9da9c7cc0fa6f67348c49c5412b685d7
SHA512 1de09897e1a06412d4fa5a180f65dfc0645e069d20c8587da24448dc2aa6091577b2998fbc8de39d78737c8304f8ecc50c65d1e1f11d4f39d8f81919a2d30c39
TLSH
T11EA024C303C11C7CC7551333401D0031DC3053540141014C1C155C341C00D1105D4303
MD5 SHA1 SHA512 TLSH

Submit Download

install-location-left.png

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\install-location-left.png
Size 227B
SHA256 e07d1793bc6e2e07e77459c702d58db5471b8f9d4af4101aa1d0c09d93269497
MD5 3692bcbd5a9d0dfc4637c5a9cc7f506e
SHA1 8382072f1fe7f004555ba4085a6631f47bdbc1ec
SHA512 b24350400b3781ffc04654e12227caca84be87f6445309195d6c1059231712042e462f8c9d446779dda2c6e5470c516ac927bd044c275c01e8ba0e327ea3955d
TLSH
T188D0A7F07D623D68D6540AEF84791020D4754A69131A4523E44D957E3DA6546A08819B
MD5 SHA1 SHA512 TLSH

Submit Download

install-location-right.png

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\install-location-right.png
Size 219B
SHA256 3d4335dd6898ea9c9af7956dcb27c4d9a065a6be69c499c722312bce1ecf545e
MD5 20a53b464c6dfdbc6cb32599a6a68883
SHA1 7983a5ee65222fdc8875a310850ade4afc0472ed
SHA512 bc5dc43cf9d013ab534ebe417dd607403d0237b94d731d3f51a6fa989eb10435ec3a3dcf366b6bad23bc2bba5cd67cdef8dad62828518421a207e01554febfb3
TLSH
T1AED023E371549EBED0916F734F4C00D2F63D061703751651530F943B611D7495093E47
MD5 SHA1 SHA512 TLSH

Submit Download

minimize-rest.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\minimize-rest.bmp
Size 20KB
SHA256 2f308a3681bbd092086a607e3d9326d78f24b22abd4ad2a42325fe456c6a4faa
MD5 ef793e3a47e2a4fd6147df16d83a2b5f
SHA1 09fc2f4e64bafc8f019c5019e91a846e5252423b
SHA512 c7b6ec11d3b7bb2bef001e69ddc3d821566bd99b3ec7b5d18c562b8bbb060dcaa8b29d612a0ab3d5336150053e813bd5ab968b0400cdfec9575c1c4399b64fc3
SSDEEP 384:xJ7FOzsaxlKCYwG9gytf2PTr3PwFqLK+eaNUlICM6GQDMmsYqi0a:xJ4x1ytOPqF9qUlIJ6dDMpK
TLSH
T10092C8E6EF6432625034E037B10D5C930E72392A87D4B5A23025937A55CE1DBF63BBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progress.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\progress.bmp
Size 100KB
SHA256 a346fcdd9fe224b2ad39cf81606c938935b3862277ceccb6d5fe937aa7469178
MD5 b6f1d9c7f4d55dd3ddab687687e8e87d
SHA1 16075e7a0916f048936e1db5c12083ca4e9d5a74
SHA512 c86799f1083de64b647d059e6ee828009904307fbbfe8eed91370360137b9d7e702d304dc645944e875f1ec2f3b1d7b695a28e432ea6e7aa53d4f782bce97b5f
SSDEEP 3072:mNuNBNL9JbNNVzNuZaeee4uuNNNNNNjgg8eUNNlNNON6eeVNNN9bNqNGHeeKoX3s:n9XTeee8gg8eEeexeeFbeGeweerpkeeb
TLSH
T137A355BE1BBB25ED201CBC449C37ED9A0B9E359BF29CCE56A21C57B622A1FC411CD015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift-welcome-background.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\shift-welcome-background.bmp
Size 10.5MB
SHA256 87d0a7e9b7cc64f0d6d33631e7db327e764855b0f61c681ce7e0ec6ba3a6a8c2
MD5 151991570fb047b8096e2b9265070ecd
SHA1 e963253f64e64bfa669d884cf5e0764be67bf2e7
SHA512 a9a812b161eb0f423228d8c96bbf4899952ef3649a143fbb359042832daa06d5acbfb52d2da1b3673e97c352a50ce1554562b31c26adedcd354a7557703b4439
SSDEEP 196608:YHnbVBLm57ZHQloylG/io7ddoS6ecvGlhE5Y5zsz2d+isymz1qWnkmYMGtvzv3t0:U3cqloMwoS6I4QkyCtkhJV2ifTorZCqn
TLSH
T1A0B63EAADAC9A1915E7F4C1124D231822D6B80BDA27658D17897B1E2C0FC1D3723F79F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

welcome-button-rest.png

Path C:\Users\Admin\AppData\Local\Temp\is-DO6VN4SIL4.tmp\welcome-button-rest.png
Size 13KB
SHA256 962f2a986d43fa50351407f57bfecb0a92df5628b606366d5af80db9fb099612
MD5 daf7600d4196acbcd8fece7059ed1a43
SHA1 75bb9af55223f96d9d7cd5bc4b375f87cfbe97ff
SHA512 11fb2a6c53c87d8e919cde8e04efbc556ff9f7cd824f775082d159184620768404e0fce572f83369d4af12043c3ce26cb0e4c05d05f6f33d68c4bc05b93ccd5c
SSDEEP 192:JH2Fm5/hKbbfsjp0d9q3sp1Mhac3wKy7W8Q4BddrWM1t6GcbPrb7zzHpqIGN:TTnpm9A+MhZ3wKO7BdIA6GSTXzzHpc
TLSH
T13B52BF6602E28812F1AAD11E1375B277BF7392287C88521075F87E7354884BF0F92ADF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Geist-VariableFont_wght.ttf

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\Geist-VariableFont_wght.ttf
Size 145KB
SHA256 b17278190bd0c2be811fe2c3060be95f1aa40cd34e237478743d7c100c28005d
MD5 1713ac9a2186de9818940519cb570081
SHA1 28d65e8e3bc0decd426ed5b3cab3f7bfa20c58eb
SHA512 c647f24ad4c8afe19c8788ea1417d9328dddd41727d7e89fd1be34dfeabeb31bc13fb1a3c59ff6c2bacf9983e865b30d1e62f48d1aa8035608f3b4630334e605
SSDEEP 3072:pCoy0Hw8dmSg4HdarF/xtI4JUA4sB+2MMg6ppEi+Uy8e1JoP:pJyWmSHktl5Q2MoeJoP
TLSH
T16AE33903F2878346D8621B3A93B26F975335BA28DF09971FA64DBE35AC873F54C06614
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Win32Library.dll

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\Win32Library.dll
Size 61KB
SHA256 76ac90ae6c26031dd099e12b849e35ff85d16f5b1abe6dab0a885359d9e35276
MD5 fbb15c99bd7f6048309689c82917a1ae
SHA1 5484bfebeb9af2ea90e3648fcf631e0f5c3317a5
SHA512 eacc4ce0d9a252d3c27493786e91ebe4c723ee10548a938b9836d6a8ac6456534d20723e8f6422bcd6a3cd2b8563ce558f15de905b43d6e9d244e8f459d577d9
SSDEEP 768:3JlWHtdbdJwHSo4I8YTA/IDFnz7qYrBSpq3RD8av/MhR8rA+hLw:3J+Jcy2hDF6iBvR4aXMhRL
TLSH
T17F538C02F7F05A20DABF4F3D44BA4A054770F5562A22DB8E1ED3998E2EB334159907B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_is7z.dll

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\_isetup\_is7z.dll
Size 243KB
SHA256 b2f8baf7aec219395a18eca431b064a050d1e2d062bd341184b88f8137c41f43
MD5 50247e64bb6e594af4dc88701ab7a1e4
SHA1 abf59052941395afcff156f63c5163582d5e1cd4
SHA512 3ba07258e0b0aa87378d563dcba7395d21428382c5ab4d440de00c18a5a6fd17e8cd835ec8c99db8a3c04eb2bc1080347270513411601193291fb493db55814d
SSDEEP 3072:p7lXMwNLPKmpRiunP2ChIcJzO/fOgWPnyCm0BZ5wJqrBjYG+n2BZ00:5RNP/pRiY2EIeOnetnBzb+QZ00
TLSH
T168345C5A73B40CB5E8A79079C5575B0AEBB27C520360EADF0760836A9F1BBE0593D730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.bmp

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\background.bmp
Size 10.5MB
SHA256 c76fb3d0c489dccfa3aff4fe8c2de0f3ed41d9750715f0957d618e2f6fffc3a1
MD5 065402b100bbc0f66cd37cb93d8f80fa
SHA1 97982f5390613172a92eaeed005959f086409208
SHA512 994ae96ed9e25dd88e0f049b5fd4f15045e3d81dabd961d4064a09a0b1e61ad23a55ace81c6b4acdb8c378c99f159b351d24479740d2dc2026fa3274882d9391
SSDEEP 196608:1Bs92IsvIqBPmqwrcI8vod/zqrrjiQ6OPwDbxLCSpk93cn82szPgoZFbrn1W6x4n:EXT5trn8vWznkwDpCWGsn8JzPTc6xv/E
TLSH
T1B3B6D7C2E80023B57C71D466243A1CC31A63597ADF8078E1BCD8FE2B4499567E63BB67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\background.png
Size 5.4MB
SHA256 6f8fe508c8df60b03509e12118f62cd9bc1e14385d16962a0dd2a1e3bd2e58ec
MD5 627f6b333b090d4a95340eb54b465e8e
SHA1 46e1621883dcecf39860762b38eb3ab54f930af5
SHA512 a22775c6ac8ffe5590b59202f817a81787753b76ab77fd286ef5ff9b1b3a08710c1bb7badc731bccce85076d5ca40396602b5dafe1d9e8c81bd2107647a85ef9
SSDEEP 98304:n/HMiXCMA9rHjCGjq6qMeii1rAOdfunXt/gFmxoyViSlmh3YEqapgRy:ndUrOiMM61s+fq2mxo8lY39V+y
TLSH
T1B44633EABECA69F1D5059D18288942A504C53EB09754DF30BF0F85E48B0F36B22DDB9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

checkbox-selected-rest.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\checkbox-selected-rest.png
Size 689B
SHA256 ea99110dc4e3bc0b6ec9ca08f67813eef2233b1d07de17eb971bc0c5e8c942d8
MD5 7b7daceeb5f0edb8f3307c32b17a94f3
SHA1 7c8a081535f59dbad4a3034c546a10fe4c156f1a
SHA512 db98745af26400d79056521e318cc154c716f255a99babd8b7871bbb866baf178324ec99ab146c8ac7ca6fd6c02213847d4c4a57b05c402a61eb5a9d92a42a71
TLSH
T1AA0144A493151B4E273B136EDAB311D176EA3DCA7A64E14DB208DD890460808D879D82
MD5 SHA1 SHA512 TLSH

Submit Download

close-active.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\close-active.png
Size 2KB
SHA256 05882c61d2c1a9c14adc88cae41e83329e5d000a65ddc9f25fe36f30787d514e
MD5 f193bff75123f2e9c2144f209b3ceee7
SHA1 bf693207c3aab27e3d9dd0b7075f26221f4cfc7d
SHA512 47495c4c6c01f362e79c5647bdd8032f0ca1819e0a2fe49ecdac3c23e1c3f6e9b9850751a671a6b9aec93eca32da8bd9ae974750dfc005acb01dbc09583c7d36
TLSH
T183512A64FFE8D086C976518CFC448945E96B1B14EB0077C28C3664DE7AD525DCC6250F
MD5 SHA1 SHA512 TLSH

Submit Download

close-hover.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\close-hover.png
Size 2KB
SHA256 ea3e44238f1d1c7fc78aeca048ac537e2da97b2112b5ae9b895982d42194f25e
MD5 64ade55ca4ed1d0cbbe4ed7436c18ba9
SHA1 8755a35d50f208dd3256b3fe7b14b40095ef3009
SHA512 8a399e2039f6745b0b71f48e309324dd73f1ec1b11f6135b6ba192bfd2871f7c16032124dc928052ae468ff7efcf627ab94191d19d01dcfbffda45e99be7f472
TLSH
T1EB515B53DD1210A149BA23D536D3DFA1B3B2973EF91411B1241172AA44CF1E58D7A626
MD5 SHA1 SHA512 TLSH

Submit Download

close-rest.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\close-rest.png
Size 12KB
SHA256 1cabc3da52bc605d2d17a8446b24b9a7c3c8444908a0f2b735bdd84d935bbdb8
MD5 b033200612f83bf47247a03c93d164ce
SHA1 841a2574043aa4853787ee845840f53f39786098
SHA512 8b527bb623f588c7f9c9d95ca6b414e50e8e7b784b994a679f2acc742ae2511e03315a548c86e896095e44e4bdad2c007ed0b533d3a409e96416f4c227c20cc7
SSDEEP 384:/c7FpBYZi3SkSS0pn37p9ExYasEl23Ej1CT9fBQAao:/KqZiZSSunLp+easEPZC5fBQAao
TLSH
T1F742BF37B62D2A1C54C2D2EAF50F89C2EACA525FB9F1A1182348F7F12151F59B1227E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

json_parser.dll

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\json_parser.dll
Size 2.0MB
SHA256 d87e0a77456e358f50a640c23b5e62ef72eaa460120348470815357c439c6bf9
MD5 42a42c223ca33118585d19a78c930498
SHA1 a5bde7065b16e8dc4b0a90ee461e0e695c5fc749
SHA512 120c98b369aaf3ab6dd6551ab3006665b18f0ae10dd52a90728a875e906a3ef0590b75348bf0cf4d35fca7b83ad9fe05d708a29477d6fe474a29ad1371650f3b
SSDEEP 24576:+LQOm59doHPbEMdWTUzFTjS75B1+Emeuf6Kh+7kbRKLSNUpK1qTl8Y+jTpo:+LwgPzkUjc52fL6Kg4bRgmUp/l8ni
TLSH
T1AC957C13F6D901E8C05DD2B88B5B8632EA61BC450B35B6EF0790B6161E7AFE45B3D318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

minimize-active.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\minimize-active.png
Size 2KB
SHA256 b79ae1c53cc433c07bfdfaf296e8b9d20069d9380c813f16f92e30ab1bc33449
MD5 f99405c870b405591a45614ac2a48b50
SHA1 2f044f1d7c2f9ec97cb47ad3d1dc7d8fd1bfe78f
SHA512 700ec8cf0513fad1cfe03d798cba61986af767928a9383940b58c706caa5a74f65c6b47ca88ceb3a034bd0e6f24a994eac88e9058f8deacac9fb7b84523cdefa
TLSH
T149514C6706924308C1EE5BF9B4D2C65AC2FD6B497C8AD42B0548735F92E172A5712F0D
MD5 SHA1 SHA512 TLSH

Submit Download

minimize-hover.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\minimize-hover.png
Size 2KB
SHA256 c3c174293a5af12f6daae8859bcdc055f7a70de9b57cb925e6048b330e52cb98
MD5 e36718eada5dc3aa0881138c22ad2b33
SHA1 b4ded6c1285bf5d4dbd0733b3c3be5223da65cd9
SHA512 be52bb0f5f301387999bb1319549ce76e5005947e3ad9be8b8545f545faa76ae5f9410d4de81d12af095494c961cbe920a2405de658fa9e8d3d376ea6b44c300
TLSH
T12C513BC0FED9741AF8A55334404341BBCD24B4D7EC09CC8A3766AED5240AEDD7575785
MD5 SHA1 SHA512 TLSH

Submit Download

minimize-rest.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\minimize-rest.png
Size 12KB
SHA256 9ccf4c0e5febe271cfdfebdbe7eed9241d16fdf78be9a19a32829b2d06261a47
MD5 042b273d2e091940597ba002263cfdbc
SHA1 0d5798812e395f1d7e264c216952a8469d9511cf
SHA512 6020b03f42cc855378534f69c945e4dadeea089d728e83dd30662c384794f65ca98c02c00e5c5b1d985cd9b44ae7cc5a1b2d68fcda6fc13ee6980059453ae8df
SSDEEP 384:/c72Ko8WggkMKv72LRFGFx/IK0uxH6545mYm7:/K2Kr3MKv729fNuxa55l7
TLSH
T13842BF7FDC87BA70137281BF6ADA7C6628EE46065CB484F44536BD720D90571B80BB8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progress.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\progress.png
Size 23KB
SHA256 cb8fc57dd487dee7a87b53f9fdec86f6c0c4d35f53cf266b1cc616ed759c2c0b
MD5 74a0b114ddf76fe50ea0e73ef9479819
SHA1 bb3d7687f54bd0a06b2e55f6bab4ebcbf9ef9de3
SHA512 b571759c2b8b50be61798f7fbbbb4d3bbf77d8d2c11d19d775061239f35c0d1fbd2dbe25911830a6a93d1853884fde2637cef89fda59ad30949393883127f0f0
SSDEEP 384:KxhXUkjdHpYpwev3Ysd73jDdaLCKXb6AzTSeaNeiqQ4pOusrqDDhcn:IXjjdve/YO7zDqNXmAzTS3Nei8OuzDDM
TLSH
T1BAB2D062C8C078E330C974A91DD8A7A3A89395C79A729FE57BCFD0170F75BA99C50123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shift-welcome-background.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\shift-welcome-background.png
Size 4.1MB
SHA256 949203486527f8acc0ece12ac6c492c7a360d30e5bb7bf4f972dd8712b83b96a
MD5 1d30d442a7dc5081d1af26ebeb323fef
SHA1 d9b4b40befe264cafbf32f3692fed14fd0a40301
SHA512 02ee7cbd807eaa0ab15e459a02ff106b1854165586e0617719d21a8f1e7337e59f98002d391b362665979848d54e41ab73d34996b0285b1047a0e308362d229f
SSDEEP 98304:xPVC5aNMgxFaVuAKuhbSMv8DWdsayIEUYF/xX/PXr:xEaugrwuAKIKWyayIYF/xX3r
TLSH
T1BB1633E19CC594FDD2BACE1F309EC94096E1324722E62D1A7CCF9BDEA30CE595209715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

welcome-button-active.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\welcome-button-active.png
Size 63KB
SHA256 bdf694141f986b134b0c6691bb826325fccf862d17490886a5374cea72f220a9
MD5 6af0d2c9818d8e7c7ad363383a95deeb
SHA1 d88116d5667d2a2f1cfd8380681adf36b6e61fd9
SHA512 b835c36cec9684d44b48f7b38264516d5a563a63a0ae3c76d2121aeb530bf4856d7889d1b681284706367cd9f9d0df3d1ad2a6e4439b3ce2f408e40d7b6c071b
SSDEEP 1536:v8Ku3G2dctWuun1FOrRfzoNrXwD0hzMJspjwn:vy3G2Huun1FOtfsthgJsp0n
TLSH
T1C35301F766E1DC30FAAAF858BC8513E39C4D5790D213E84B70622A1BED2196FD04985A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

welcome-button-hover.png

Path C:\Users\Admin\AppData\Local\Temp\is-EHK8LQUF83.tmp\welcome-button-hover.png
Size 67KB
SHA256 938371fbf33cf9939fd848e3f329a38509c1cf4b08b3370b46a854f008d537a8
MD5 f52fcf65996dc3f328f27725c369c5eb
SHA1 4b1b334f63162adf89862eb44e06bc59b715908b
SHA512 d0b2c7d0e067b4112d7614ef434bc7bfc14522f5a8567829311037c38aecb50f72efad2343726bf1bc6f2b5002ecac36413078640c825e0fc6e5370c836f9e8e
SSDEEP 1536:lMdVd1SaIA/sqY7GfSApGqjcwT/ChFvMcCb:md1FYafSQMwGhFpCb
TLSH
T18A6302050BF03EFAD6708257EF786C17C4AE5F7146150AB6FE66B649521B310E8B780E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Shift.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-S8W7CFIHAW.tmp\Shift.tmp
Size 6.9MB
SHA256 4c87c00378fceb4d688db29b99d068fcfd097bfdad6596e2aa9e719ffd1239d8
MD5 d109a246b988fadbdfdd6f4b2a411e3a
SHA1 a7fd4e15ad5bfa9ac26dd65a4a6d113bf3087f2f
SHA512 bdf865874a4e19de5c28a056dddddd0b5406406f48cc12e167d3722421def17b430236d628e03c866d593e74d9c648887a3e7cbca42f5429350cce23a8783dd5
SSDEEP 98304:dYmkcxJ9/WUEYJ0VzW8hJH9XM2Ho333ha7SlF4:dliPH9XM2HSa7US
TLSH
T1E7765C6B72E4C22DD16EC23EC5A78F44E533B0B5173BC1EB529003991F1AAD49E7E660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Shift.exe

Path C:\Users\Admin\Downloads\Shift.exe
Size 15.6MB
SHA256 9e489eb8aab542c62d82b0878153d4853857566e09dadb8a87270762a13d6702
MD5 547143e83fc259c1c9ced7beb9aebcb2
SHA1 b51dc2f35cb8e5b7b4d4ddd6129f8c00627edcf6
SHA512 52901e47da46ac67d56942c5fe97ef679ae0c762c5e6d50583ba1359116c74a8ceb17d981bb37d54c6fa3723f68b55b92a677e861bf24375a88e07def62c630e
SSDEEP 393216:B3a4VRFrCq8m3t2z71UtFQ94g86eQbByCwWG97+ejG583+fla7C71:BFr0m362tFQygFeKyCSfjG50+oOp
TLSH
T144F6233B72A4D52AE96DC23AC6A2AA14B83370715F33C5EBD1E002699F079D04F7E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9570c8d-e519-4848-aa7c-d16bb4d9a99e.tmp

Path C:\Users\Admin\Downloads\c9570c8d-e519-4848-aa7c-d16bb4d9a99e.tmp
Size 4KB
SHA256 13b4da37dab09e37e46636e1c69a6d7d0685bbf59e9841512b146cd5638b156e
MD5 61b36e8eb57bc19996e20d94712732d7
SHA1 38fa0d01f0ed1024ed9b34ce08115a8c3c751eeb
SHA512 21078539f3c34cd0882e3640b46d6d627a7f65fd235a3cc5b3d7f526a5ddd352c9e698b6448a73fb6793986b36177a3fd7869a6d540072cdfa81925330cfb883
SSDEEP 48:OEPTJYXYP/1/+SIlMNIlYqcts1ZmZ8geFIUrkeG4:nPmXYPt/rVylysmZjeCUe4
TLSH
T1B781136FBB0DC897DD2C0236C0D75C1E787B50305A8B9E2249EC977912662C15D5FE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1656-610-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/1656-492-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/1656-906-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/2876-903-0x0000000000310000-0x0000000000A0C000-memory.dmp

Download

memory/2876-883-0x000001AB58AB0000-0x000001AB59571000-memory.dmp

Download

memory/2876-904-0x000001AB58AB0000-0x000001AB59571000-memory.dmp

Download

memory/2876-882-0x0000000000310000-0x0000000000A0C000-memory.dmp

Download

memory/2876-548-0x00000000533A0000-0x00000000533B4000-memory.dmp

Download

memory/2876-836-0x0000000000310000-0x0000000000A0C000-memory.dmp

Download

memory/2876-748-0x000001AB58AB0000-0x000001AB59571000-memory.dmp

Download

memory/2876-745-0x0000000000310000-0x0000000000A0C000-memory.dmp

Download

memory/2876-547-0x0000000000A70000-0x0000000000A84000-memory.dmp

Download

memory/2876-611-0x0000000000310000-0x0000000000A0C000-memory.dmp

Download

memory/2876-612-0x000001AB58AB0000-0x000001AB59571000-memory.dmp

Download

memory/3864-750-0x000001C1BCEE0000-0x000001C1BD9A1000-memory.dmp

Download

memory/3864-558-0x0000000001150000-0x0000000001164000-memory.dmp

Download

memory/3864-907-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-884-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-613-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-839-0x000001C1BCEE0000-0x000001C1BD9A1000-memory.dmp

Download

memory/3864-3078-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-3079-0x000001C1BCEE0000-0x000001C1BD9A1000-memory.dmp

Download

memory/3864-838-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-3207-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-3208-0x000001C1BCEE0000-0x000001C1BD9A1000-memory.dmp

Download

memory/3864-922-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-2493-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/3864-559-0x0000000053380000-0x0000000053394000-memory.dmp

Download

memory/3864-614-0x000001C1BCEE0000-0x000001C1BD9A1000-memory.dmp

Download

memory/3864-749-0x0000000000A30000-0x000000000112C000-memory.dmp

Download

memory/4028-3056-0x00007FFF81C50000-0x00007FFF81C51000-memory.dmp

Download

memory/4028-3055-0x00007FFF81A90000-0x00007FFF81A91000-memory.dmp

Download

memory/5024-609-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/5024-489-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/5024-3209-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/5772-647-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/5772-790-0x0000000000460000-0x0000000000613000-memory.dmp

Download

memory/5832-871-0x000001C9A4950000-0x000001C9A5411000-memory.dmp

Download

memory/5832-707-0x0000000053360000-0x0000000053374000-memory.dmp

Download

memory/5832-795-0x000001C9A4950000-0x000001C9A5411000-memory.dmp

Download

memory/5832-870-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-887-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-706-0x00000000009F0000-0x0000000000A04000-memory.dmp

Download

memory/5832-794-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-3289-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-3466-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-911-0x00000000002D0000-0x00000000009CC000-memory.dmp

Download

memory/5832-912-0x000001C9A4950000-0x000001C9A5411000-memory.dmp

Download