Analysis

  • max time kernel
    150s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/10/2026, 17:29

General

  • Target
    213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe
  • Size 235KB
  • Sample261011-v21a1ax18l
  • SHA256 213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: ChupaCabra

    ChupaCabra is a Windows ransomware written in C#.

  • Detects ChupaCabra ransomware 1 IoCs
  • Renames multiple (4076) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Drivers directory 64 IoCs
  • Manipulates Digital Signatures 1 IoCs

    Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops desktop.ini file(s) 23 IoCs
  • Drops file in System32 directory 64 IoCs
  • Modifies termsrv.dll 1 TTPs 1 IoCs

    Commonly used to allow simultaneous RDP sessions.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

Processes

  • C:\Users\Admin\AppData\Local\Temp\213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe
    "C:\Users\Admin\AppData\Local\Temp\213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe"
    1⤵
    • Drops file in Drivers directory
    • Manipulates Digital Signatures
    • Drops desktop.ini file(s)
    • Drops file in System32 directory
    • Modifies termsrv.dll
    PID:1548

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        USSres00002.jrs

        • Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USSres00002.jrs
        • Size 3.0MB
        • SHA256 a97bfae83dc882bf50a0402f8583521031a984f7b688cb1ce617f103e40d3a0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index
        • Size 32B
        • SHA256 078e348b51c038f99e66fb29e2452b754d71d143182b63c2f7e276a3f9120c59
        • MD5 SHA1 SHA512

        data_2

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_2
        • Size 8KB
        • SHA256 28bf523cff9ae688498298691ff2f930fbf0504b52a2b589e40b463bed7e263e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_0

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_0
        • Size 8KB
        • SHA256 35a4d1d403664d8c785eb2fd0929d36a12e9070cc4325ce3e33761c67069fc04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_1

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
        • Size 264KB
        • SHA256 7e84a9940efcba045d0a128f858c2d57e5199865c84e92fb3a0d5033eeb98f7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_3

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_3
        • Size 8KB
        • SHA256 f2b4f1923822c2cb81de086218e0008ff4fa5fe9c65c5d23389861a909c0c845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\index
        • Size 256KB
        • SHA256 aca987c9c5bdc442662890704ef78c461d234863dc117bfe746298b5dd574b00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
        • Size 96B
        • SHA256 d19366a6b4d151a629733c5a68a62ad3bd6dbf9fe14b8a4108ad54a14ac5f1a1
        • MD5 SHA1 SHA512 TLSH

        CURRENT

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT
        • Size 32B
        • SHA256 588be25aa2a82009641bf3515b0f479125bcca8febc4df4a0f1588a9d7bfb19c
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\MANIFEST-000001
        • Size 48B
        • SHA256 bba755845fb000826781a0b18ed62d73429f1258c98ab558677ba6c5e97ce4eb
        • MD5 SHA1 SHA512

        messages.json

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
        • Size 608B
        • SHA256 62ab1bd65f767117d8cf80c68b4966e778ed7651e74842335292908f43ad3086
        • MD5 SHA1 SHA512 TLSH

        Login Data For Account

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
        • Size 40KB
        • SHA256 e0d64187a8dc05e70dd49563215aaa7a264370f1aa617fa778fc452f53632bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        the-real-index

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index-dir\the-real-index
        • Size 64B
        • SHA256 86edf3da3bb83395ce0d973fe3f99e46fe5abfeba52aa1a150127b11dcd4da63
        • MD5 SHA1 SHA512 TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnWebGPUCache\index
        • Size 256KB
        • SHA256 f402d9df7e7371bd24bc926acf538218c175159e53be34324771145f1a964f11
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCT Auditing Pending Reports

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\SCT Auditing Pending Reports
        • Size 16B
        • SHA256 780b040a03ec659fa457fbe911c0eacc5a99543028668e577fd43ef8cd0bf9f6
        • MD5 SHA1 SHA512

        db

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\db
        • Size 44KB
        • SHA256 c133767bb94e0be2b61c979b9ab5384053418ec9f126ee299b62357768a20823
        • MD5 SHA1 SHA512 SSDEEP TLSH

        first_party_sets.db-journal

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db-journal
        • Size 16B
        • SHA256 72f5d5c850d31c60d5bbbb3a4aa3bef95a82e5399e8aba19de816af70c678ef0
        • MD5 SHA1 SHA512

        BookmarkMergedSurfaceOrdering

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
        • Size 16B
        • SHA256 50e09fa4da1a2cbe677cfe37ca180327b8b3a7a96739f05e01a1fd3240022301
        • MD5 SHA1 SHA512

        BrowsingTopicsSiteData

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
        • Size 28KB
        • SHA256 fa47d5f771cc44f477e83cee9eb30a191353507492ca2b011c64554c3f4afe6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DIPS

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DIPS
        • Size 4KB
        • SHA256 267534f37c18a063f351316af85687208039c756e0327e7c000b209bb0e8b7b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\index
        • Size 256KB
        • SHA256 0d1a87cc5f3f49a548773d328734e322cabff2a3d368927bba3aff7b2f0580dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SiteList-Enterprise.json

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
        • Size 16B
        • SHA256 60e5a91beedac38b82f99d8dd876637fb49967b55e9f3979e9e978472f4e3536
        • MD5 SHA1 SHA512

        000003.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log
        • Size 48B
        • SHA256 faa59e5373335cc8d3177fe46857eb830bd422a430ef01be328f9d36a7a91e42
        • MD5 SHA1 SHA512

        000003.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
        • Size 128B
        • SHA256 d182adb17d1a2a555f79ad83ac5baefb67558acf5c909881a06217482cb0a95d
        • MD5 SHA1 SHA512 TLSH

        Network Action Predictor

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor
        • Size 52KB
        • SHA256 c5ca7905e55e481d4e77324c8f09083e0993e4d9a65504b6b6900f1cf17d5c89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Network Persistent State

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
        • Size 64B
        • SHA256 97f4928adf60ca68df0e9f398171bdbeb8c4b01aa39a958f71eea65a6e0fcd9b
        • MD5 SHA1 SHA512 TLSH

        Trust Tokens

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Trust Tokens
        • Size 36KB
        • SHA256 3e7ce9b5065f83b3a14bc845bcb17cb8d11b98908c9f047e22fac007aae8c10d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PreferredApps

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferredApps
        • Size 48B
        • SHA256 3800b4512e11c546752521ba932a972ac687bb2ce057fbae693698bf323115d9
        • MD5 SHA1 SHA512

        Safe Browsing Cookies

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Safe Browsing Network\Safe Browsing Cookies
        • Size 20KB
        • SHA256 7010b5b426a232aaf9ad7fce5c3163859c5a8dd1f8aeffa242633af3db4a3f88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ServerCertificate

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ServerCertificate
        • Size 20KB
        • SHA256 995dc01b725f47e39edd2be630444ea09546bcd3ecee2929db3462159f9f9232
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Shortcuts

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts
        • Size 20KB
        • SHA256 544fda8305fec5871eff993deb2f9fdddcbd8c2fc60082e582c279c7a39ab642
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
        • Size 48B
        • SHA256 80ab2f476fc9c81fc8756aa29967bf0ebb1792dce5b3b48a14b98f7b5964f67b
        • MD5 SHA1 SHA512

        Top Sites

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites
        • Size 20KB
        • SHA256 0bc8e0d2d012a7a57694ca4981a4a63a339433ca5968b3ae7d7e82725f8b4cf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QuotaManager

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager
        • Size 40KB
        • SHA256 51084654f92456a81c5fbde4713a44f82b12862aff1ef84c833b69f323108715
        • MD5 SHA1 SHA512 SSDEEP TLSH

        heavy_ad_intervention_opt_out.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db
        • Size 16KB
        • SHA256 ae0bf3892909bc9d57de27c47780f95504700ab0bdb9d3c7dac0c00979470f3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\index
        • Size 256KB
        • SHA256 29335db7abf54948b2543b69f42c994d9b901a8accc8e4eed7a741c18d89811f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        campaign_history

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
        • Size 20KB
        • SHA256 26dfaf9963b20e1c01cb577866642f21006acfb5f4ad831d5e532aa076c2728e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        download_cache

        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\download_cache
        • Size 192B
        • SHA256 b8f1a84882574663cfe809524879759cf757599007f42a3d7b41fad025220bf5
        • MD5 SHA1 SHA512 TLSH

        winword.exe_Rules.xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml
        • Size 1.6MB
        • SHA256 f36eb14ff6ac98dc2b4519fd8ec5ebd85e4bafdf5612b1c771475f7835a6f0c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        officeclicktorun.exe.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db
        • Size 24KB
        • SHA256 feee35c0e31acd5331d10caccbb43a6f82ea77f3aca8c8c1534792840bea6a92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneDriveMedTile.scale-100.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png
        • Size 656B
        • SHA256 1de9431f6f3a2d37cff20738196d380fe9b53a6c80d237a9668d02ec71475ba4
        • MD5 SHA1 SHA512 TLSH

        OneDriveMedTile.scale-125.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png
        • Size 864B
        • SHA256 2c47d31c280323ba82619efd41e956f0fed5df0ae7b0f199023b49bb53111c55
        • MD5 SHA1 SHA512 TLSH

        OneDriveMedTile.scale-150.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png
        • Size 992B
        • SHA256 94f0def0ed24f06fcbfdd690630773dcba49cc0fbc50db9202baed69db37eba2
        • MD5 SHA1 SHA512 TLSH

        OneDriveMedTile.scale-200.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png
        • Size 1KB
        • SHA256 5950d74961a803df26620fdfc464549e6d85b2064b5ed0245794300dce5082ab
        • MD5 SHA1 SHA512 TLSH

        OneDriveMedTile.scale-400.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png
        • Size 3KB
        • SHA256 5afc57c0015834e2ab6280bacefc3d6881c0e0bad39b0440d6b5318d54e41e37
        • MD5 SHA1 SHA512 TLSH

        OneDriveSmallTile.scale-100.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png
        • Size 416B
        • SHA256 056ed5c44f59ee498ee341c34e153b9b9990abccfea6ea33bfb5d94985e5a89f
        • MD5 SHA1 SHA512 TLSH

        OneDriveSmallTile.scale-125.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png
        • Size 528B
        • SHA256 43f651b9c66df2ef0560e47aefd7a8a978e62001265c1d3976b7043a57cbf5ce
        • MD5 SHA1 SHA512 TLSH

        OneDriveSmallTile.scale-150.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png
        • Size 592B
        • SHA256 81e1e5d1ddda1fe6e17d98fb1e05927917ae443ddc8f932b22f0b64970c7a955
        • MD5 SHA1 SHA512 TLSH

        OneDriveSmallTile.scale-200.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png
        • Size 816B
        • SHA256 693fd37af11c0843f47bac33a1ab460b81650bee1e0cba39a8dfe9704a3b5a2d
        • MD5 SHA1 SHA512 TLSH

        OneDriveSmallTile.scale-400.png

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png
        • Size 1KB
        • SHA256 bfea7418ee890a175ede528d564d53c8d5900198e3afd8966301a130fa8a1a65
        • MD5 SHA1 SHA512 TLSH

        userTelemetryCache.otc.session

        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\setup\userTelemetryCache.otc.session
        • Size 20KB
        • SHA256 e433012d2c98f6448af40682fc5591946442400265553e5de3dc9d7019a4d850
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thumbcache_1280.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db
        • Size 32B
        • SHA256 d794b88cd7d212db94c6e96379ed773bb3de27bde9e0d552ee1088bb482f1749
        • MD5 SHA1 SHA512

        thumbcache_1920.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db
        • Size 32B
        • SHA256 22a9801746470f59f266799f5725d8c1629c03fa0843820a6ba28372d0ef516b
        • MD5 SHA1 SHA512

        thumbcache_2560.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db
        • Size 32B
        • SHA256 8c6c59db5d5602731fc60b8f1319a29173b2ba4c0f70bd6b0878ec9d4cab1301
        • MD5 SHA1 SHA512

        thumbcache_768.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db
        • Size 32B
        • SHA256 d5c1e78a0b0b99a8463900a92083a4a2d5893f840990228102df3835786cdd19
        • MD5 SHA1 SHA512

        thumbcache_custom_stream.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db
        • Size 32B
        • SHA256 8cf673641769cc9ae1b093104f82d711085fdc07cf0543d1947713f1b2fedb90
        • MD5 SHA1 SHA512

        thumbcache_exif.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db
        • Size 32B
        • SHA256 a5bae48353633abc418bc039b84c4bcbdd72883bff276ca063f6aeff71f4bbad
        • MD5 SHA1 SHA512

        thumbcache_sr.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db
        • Size 32B
        • SHA256 29ef4497a1b7ce291cf1900104f6044b0dd51a07a4881cbc377cd8604abf2581
        • MD5 SHA1 SHA512

        thumbcache_wide.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db
        • Size 32B
        • SHA256 6e6749bbcb598f336a83db462ddf38c56e8e3c63e8363e0e22bfdee2465d540b
        • MD5 SHA1 SHA512

        thumbcache_wide_alternate.db

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db
        • Size 32B
        • SHA256 baeb03a485031eefac2bf8ce857971242661e3a949f2eaa9d3f2313a2ff8d7c1
        • MD5 SHA1 SHA512

        asrouter.ftl

        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ld7bw5bn.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
        • Size 15KB
        • SHA256 274f20d5cb419413276b0c3b54c832f39d86818904a891f1b2fc0b3660e406b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_AutoGenerated_{51325390-AE6A-68FC-A315-0950CC83A166}

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{51325390-AE6A-68FC-A315-0950CC83A166}
        • Size 36KB
        • SHA256 e0dcfdbc795e776a11e3d7561d3cfc9eb899f86542e29da944440b1cd9f0104f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_AutoGenerated_{C804BBA7-FA5F-CBF7-8B55-2096E5F972CB}

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{C804BBA7-FA5F-CBF7-8B55-2096E5F972CB}
        • Size 36KB
        • SHA256 eb0e81b49c34723c5f391335725710169619e58c2473d5e0927930f06ec1a6ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_Windows_Explorer

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Windows_Explorer
        • Size 36KB
        • SHA256 cf2a2bc1b732ac503b3ac2c5f51e98c2387fb7144b50800580df02b52b71285b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        https___java_com_

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_
        • Size 36KB
        • SHA256 ccf5b2293dc89ac296a71817126acf77e682e4d3518e3d94d6820cfbf01168a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_MdSched_exe

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_MdSched_exe
        • Size 36KB
        • SHA256 1a29c21143037ba489a9a7ce0493cdc8724e7f7bad9d0dc7603f4698bb3c3248
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_quickassist_exe

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_quickassist_exe
        • Size 36KB
        • SHA256 78628f5979a5ba0d6b92e551aae19df4dec2a8ec57dfd95cd9b5bc324d47e2fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_NEWS_txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_NEWS_txt
        • Size 36KB
        • SHA256 9be23c9233449d86cab3b0b48c2b63ecd80b141226157eb3f28ef064082a27aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_odbcad32_exe

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}_odbcad32_exe
        • Size 36KB
        • SHA256 69c0d8967932ad1ba73f2bec0c5c5c2e7ad1c552d790acf25f216ede5a6867cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0.0.filtertrie.intermediate.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8418bdc7-329f-449a-92f4-35853d441092}\0.0.filtertrie.intermediate.txt
        • Size 30KB
        • SHA256 6d8b9bc64b07df42271b59a6742d9a697fd2c05d24021a625fd5012b6f31d349
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0.1.filtertrie.intermediate.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8418bdc7-329f-449a-92f4-35853d441092}\0.1.filtertrie.intermediate.txt
        • Size 16B
        • SHA256 040a0ebc0edf5a07083e91cf550b108e0456db2d4cb0bae91e058aacb0234cfb
        • MD5 SHA1 SHA512

        0.2.filtertrie.intermediate.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8418bdc7-329f-449a-92f4-35853d441092}\0.2.filtertrie.intermediate.txt
        • Size 16B
        • SHA256 d1257e10da458a097d326dbf25ad77311eab25b446b8dcbd93eaec6ead15c13e
        • MD5 SHA1 SHA512

        Apps.ft

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8418bdc7-329f-449a-92f4-35853d441092}\Apps.ft
        • Size 41KB
        • SHA256 db1785b9e63871cb4b563dd223aa43c2559d9415ae24a328f85bf28ebef570a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Apps.index

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8418bdc7-329f-449a-92f4-35853d441092}\Apps.index
        • Size 1.0MB
        • SHA256 8c92117dbc3f1c414c19b30ecb854cd11c5a1a31fe11426146e9fcc68b8ebce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0.0.filtertrie.intermediate.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{628064c4-c388-4789-9d36-4b75e6b39536}\0.0.filtertrie.intermediate.txt
        • Size 204KB
        • SHA256 6f3a996beb93f7ebdccf32382f0020a88c16a837cbf8b627803956e6cdafa9b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Settings.ft

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{628064c4-c388-4789-9d36-4b75e6b39536}\Settings.ft
        • Size 224KB
        • SHA256 0e69461e779c6a1c7553456dbdbe3e862084d9238604177e00f8f7a146b6abbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Settings.index

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{628064c4-c388-4789-9d36-4b75e6b39536}\Settings.index
        • Size 1.4MB
        • SHA256 e2b90a433ab6570d55a1628b0754b26f5fcdfb1c2127ed2a61d3ca37c275f328
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppCache134336127713443189.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336127713443189.txt
        • Size 77KB
        • SHA256 0a2788b8f21f7cc3e152cacf863e39f78da50ea4bec682e9791f6de485d7e12b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppCache134336128804812007.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336128804812007.txt
        • Size 53KB
        • SHA256 e5aa8378219892a39142ec95e769f3eec926a91bf34177f6aa45ce30fa0a2909
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppCache134336138201802621.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138201802621.txt
        • Size 64KB
        • SHA256 eb1e22439e38fafd6467bb9eb23466c6d7ff785477f62beb68713a4f881a7665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppCache134336140555045602.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140555045602.txt
        • Size 85KB
        • SHA256 1180c53aeb13e34e3f51bca7d896c123f046846f13f0938229f4a5e3b74afa48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppCache134336142813574762.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142813574762.txt
        • Size 88KB
        • SHA256 585fcdfdf4fd913c5152bb22541d97a1c0cbe0f0df7b19942866103bbda38cf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.dat

        • Path C:\Users\Admin\AppData\Local\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\Settings\settings.dat
        • Size 8KB
        • SHA256 53d1c6d88ea090b582fb0d1fe5bdb3ca168907dc062393b447e8086655675daf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi

        • Path C:\Users\Admin\AppData\Local\Temp\151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi
        • Size 1.1MB
        • SHA256 2e2e8a045a31119d9085cd913d64cdb759a87f381cf210df4070aaaface624cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        432c917a2ef72aaa140ae8a79112fb80806d2740a465201e1298c1ed40040eb9.exe

        • Path C:\Users\Admin\AppData\Local\Temp\432c917a2ef72aaa140ae8a79112fb80806d2740a465201e1298c1ed40040eb9.exe
        • Size 424KB
        • SHA256 f5b97a7b39078f800532d728529fcee2f13f59a5920ab4440f9dbb0cc555bb4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        499e1eddf39a47eb3392be7e0cbd906f15e22bf9cb10c55dbd34f433772c0f8d.exe

        • Path C:\Users\Admin\AppData\Local\Temp\499e1eddf39a47eb3392be7e0cbd906f15e22bf9cb10c55dbd34f433772c0f8d.exe
        • Size 4.4MB
        • SHA256 2e23d3774893b65328b6fb317f4417f6683409a7cdc1a41cf671dc8f0d1aaea0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        88555a13-e50d-4d58-b7cb-3fc9c7fc0446.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\88555a13-e50d-4d58-b7cb-3fc9c7fc0446.tmp
        • Size 10KB
        • SHA256 9818047498e348462307988347a7baa5a632fa06134eb68269a8064eae2bf9bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        96437d02-dd5c-4a76-8876-5bb7db9128e3.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\96437d02-dd5c-4a76-8876-5bb7db9128e3.tmp
        • Size 157KB
        • SHA256 23440c9ae05caad6552d61373182598f1162fee62af24105ae6a74164cbe6c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2528_1942531219\CRX_INSTALL\_locales\en_CA\messages.json
        • Size 720B
        • SHA256 e28a419a06cfa0e58d115005cf9279211286b85364ebbd596bea9e1e34fcdd2c
        • MD5 SHA1 SHA512 TLSH

        content_new.js

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2528_362905341\CRX_INSTALL\content_new.js
        • Size 10KB
        • SHA256 b680a9b24afcb2f35c855434059ba79430b22d635474ee2ae30491683d389b44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\af\messages.json
        • Size 784B
        • SHA256 ffe05841ae88717e650a3b40b24826679533eb686231cb5902566bfa6ac5661a
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\am\messages.json
        • Size 1KB
        • SHA256 d7f260c533cba8d005ccad80341cf9944f67c5eee36c60405dff7b9cb04d6912
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ar\messages.json
        • Size 2KB
        • SHA256 2e8ba3be2b5967d913eaa77fb2c69f6ab31bc315469b88b9db2eb975bf526ecb
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\as\messages.json
        • Size 2KB
        • SHA256 3e3c94cb4e0a4e3090e798fc67e40f01a442764e35ca74b43efb3cb6ee234b6a
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\az\messages.json
        • Size 1KB
        • SHA256 3b8730411aa97ccd84fd9c813ed94ad403391a196706f3d3c5d2ed16b8c72493
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\be\messages.json
        • Size 3KB
        • SHA256 16ab8aa618cb8db18a67b513ad13018307c5e397e8632f389b129be87ad506cb
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\bg\messages.json
        • Size 3KB
        • SHA256 298bf83c5b51040225f2de9bda38dcb2b201728a6f5d55aa5f38d5f300bd922b
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\bn\messages.json
        • Size 2KB
        • SHA256 8d5476c443d8e234ab6f0c53dff77dd6b8326b60a2d96a62ac79c22516ac735b
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ca\messages.json
        • Size 848B
        • SHA256 b9269aa59462005944da79f36d81bafe3526cac5ecf5d8a116f1bb7fc53bb6f9
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\cs\messages.json
        • Size 960B
        • SHA256 4f624b31163fefcc6d995120dafc7b257010dfd51464c3d4de1117b02e8f7400
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\cy\messages.json
        • Size 816B
        • SHA256 ce3eaa4757047521d65d08ed5722118a36629e1a73c22a4e2b788d2b291d0eb4
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\da\messages.json
        • Size 768B
        • SHA256 65d3b911c6a4f7499c370dcbc515cf1d740bd32eb07d98041a8d82dd5b0421cd
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\de\messages.json
        • Size 928B
        • SHA256 afeeee34c1ac3accdb58949cb03b051c495ae57047b8b7bc679dd0e71d24a0b4
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\el\messages.json
        • Size 3KB
        • SHA256 6b3aea336430be0cb952734b4ffc401a32f98509bbdb37f53d706e6b392849dc
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\en_GB\messages.json
        • Size 720B
        • SHA256 9bd01b0a13faa71a82c71e35a0ec1f0fe91a9d3a20f4cace86e730f47b073b49
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\en_US\messages.json
        • Size 1KB
        • SHA256 925689f9c94487f02953d208d0dc59cd9a446f6a23606e027119b1c4a298d3e4
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\es\messages.json
        • Size 880B
        • SHA256 dfd95f636b70e3f62b47e1f21d2869adb0d2b911c8214c5f26fedfe96361fa29
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\es_419\messages.json
        • Size 896B
        • SHA256 f7d2718a17e1205a9a05d1785dd452bab6c8a952375e45e5efa8a4c85ffdadc5
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\et\messages.json
        • Size 928B
        • SHA256 140de6c5225957a43ff42b3b7232dd122208e8099f3ddb71cd9e169ec5e9ccab
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\eu\messages.json
        • Size 848B
        • SHA256 6b6bff1f8036c934642f3af8cede195d90786a0abad9ab7b75bb240e6c18f1ec
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\fa\messages.json
        • Size 2KB
        • SHA256 ebd832a691d1d8e79b2ac7b8993210818eeb5ee6d9cc5db1eb280ff7ea326a83
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\fi\messages.json
        • Size 848B
        • SHA256 4cc8055f6ab4101c409a09164a74e9fe610477764177fa6094b33ad74c504fc7
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\fil\messages.json
        • Size 800B
        • SHA256 ab543b9c57cae59ed43421108bb515b35c4dedf5ba05beeb2c33ae2113e6c5b7
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\fr\messages.json
        • Size 912B
        • SHA256 28df160e83b1360d012a2d116acca32f73227a0eb5cc7d149917ffc36601f8c8
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\fr_CA\messages.json
        • Size 912B
        • SHA256 4a8a89ea0c62f149765dec08515871cc20203963142f78a183fd4539a49c9033
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\gl\messages.json
        • Size 928B
        • SHA256 d553df89fba29e9f69f8866f8a02a2522adb89eb80083c6da44050e1fb13acac
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\gu\messages.json
        • Size 2KB
        • SHA256 ee3f90dbaca5d340e80cfed763a6dd907e96b74372fe3bc366747771d608deae
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\hi\messages.json
        • Size 2KB
        • SHA256 19c210bb9e42dc7318fc049415fd37cee7e64306017da996d8e779295fc0331f
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\hr\messages.json
        • Size 864B
        • SHA256 ddba75f91ac197e201b58ff8ca2bb4ab3b77d1196e11b534fcd0902ddb927e06
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\hu\messages.json
        • Size 1KB
        • SHA256 1f0a551a5f358a631bc0f4b2d181de3cc335556c73b65d8ecdd285ec32d18c0c
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\hy\messages.json
        • Size 2KB
        • SHA256 f5ff7626fad8a1ee120a838068155dbfc436505bda034fd92c803602d9d08ea2
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\id\messages.json
        • Size 720B
        • SHA256 ee614b43dabd049509feb9796c048bac448244b440db0db10f8c3b2e9d5d7be0
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\is\messages.json
        • Size 960B
        • SHA256 0cd143d1dc64518000e56b7c7922276ffcbd321e453e0a0ca08a5d7e7146ecfa
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\it\messages.json
        • Size 768B
        • SHA256 8238c040da8cb9ed6e3ba15f4608f45ee196b1e0151074131388d8d6e91e29c5
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\iw\messages.json
        • Size 2KB
        • SHA256 952ea18c56af03a07789b7648f29aa3da5469a1634f9b5cd8002c34631aa3993
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ja\messages.json
        • Size 1KB
        • SHA256 6ef58bc99eed6baba06c9c265dfa2330bb9596042edfd7cd546394967f2a75c3
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ka\messages.json
        • Size 3KB
        • SHA256 9e97c94a93a641bda368c69cfea3ff40fd708cc4c8d25e0d74f8a395127b9076
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\kk\messages.json
        • Size 3KB
        • SHA256 6b45792d3e6e82ad2de3ef12a5e620f43c17e7be0decd0285bc7ef340a66c460
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\km\messages.json
        • Size 3KB
        • SHA256 479e927970ab78f47a4366032d6319e9a6bb6c770081844373c83f19f6f7fa8e
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\kn\messages.json
        • Size 3KB
        • SHA256 1d78e35dae9c74088a5b68ef5cbb0084eb5053900a84f301a565bb10c48e86e1
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ko\messages.json
        • Size 1KB
        • SHA256 6fd9f5e264642dc8224a1a0110f4d04b9d30735593e6cdbd3b6e2818a46bb68f
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\lo\messages.json
        • Size 2KB
        • SHA256 adf4c2bbfc40986d19830b945fbc9ade7a35dd920661f6edb58fc681a72a21ec
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\lt\messages.json
        • Size 1008B
        • SHA256 1ce19c3d5b4c3959c82952ab7bf6cd5949772b25a8ddb5261eb65ef3faf1134f
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\lv\messages.json
        • Size 960B
        • SHA256 063feedd4bf58f20a626ae678749aafaf8cba737f36145d1182e21ff1324f2fd
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\mk\messages.json
        • Size 2KB
        • SHA256 d9c999dbdbd5d7a56f92a0c47ab802efaacd34488bf4baf310c1bc00d22192e2
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ml\messages.json
        • Size 3KB
        • SHA256 786149925b4cea376cd82ebb0dacaa46cf2cf6243dc545b458af29bce0743470
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\mn\messages.json
        • Size 2KB
        • SHA256 eba7573ff6baa7b05278aaff4d5a1ed7bf53076773ecec716996fb0dd7e086a6
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\mr\messages.json
        • Size 2KB
        • SHA256 707bb21665cccb7b2dd614bc6735f232b5dfe6c7b6a684b699c446ac6b84f338
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ms\messages.json
        • Size 800B
        • SHA256 76025135c14ccff62a5bf66207e57b62be794b457f8982f95f3010d83a2a6748
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\my\messages.json
        • Size 3KB
        • SHA256 5dcd814267b39a61671ac3b1ec24afbb22947661b4a482ad9610f14c1a1e4820
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ne\messages.json
        • Size 3KB
        • SHA256 2ea6e93baa201fafba11f1e1258bc20b560d46931fd6309d91318a3457a90f44
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\nl\messages.json
        • Size 784B
        • SHA256 80425aee2a1d4feb99d9b8e29678d1b409494bc6dbe69dc87e4d79400f902edb
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\no\messages.json
        • Size 768B
        • SHA256 5f82a82398d45cdb779b79a5522bc8de08d9ec21193affc41274bbbb010bafc7
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\or\messages.json
        • Size 2KB
        • SHA256 5f8fa45a700cd1b4f3cf22810fee783f020f49cfe4f79702cfd5c29bd572bb3b
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\pa\messages.json
        • Size 2KB
        • SHA256 b0e44d8c82bbb2586f1b23171880ae1f8c6fd7e3dbdb6d3eb49bbb0235adabf8
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\pl\messages.json
        • Size 992B
        • SHA256 2bc95b58999cc086059e6ed5845f42d9a4c5671d43a4a04a3fe319d82a4a9499
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\pt_BR\messages.json
        • Size 816B
        • SHA256 708d4ec234f8c8b502d9c334da0c3126775674d85be29decc4994847f72e45d9
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\pt_PT\messages.json
        • Size 864B
        • SHA256 08dbcb0cb52621887c1984c687fb3f76635b7252590d0a7cef22acc9a6a65733
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ro\messages.json
        • Size 944B
        • SHA256 0069d1ccdb90aace4ae616bd7547da466860fd11f03b8b4f8a8742093b9c7d82
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ru\messages.json
        • Size 2KB
        • SHA256 375a47c6c53a013f8d55ef4c2bcb8842da57be1b5b5774f6c3236f28232c176b
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\si\messages.json
        • Size 2KB
        • SHA256 3198ffc94c13994d90552a8cc82c3c8d0765b078f6200ad752d2926cd9197bf1
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sk\messages.json
        • Size 960B
        • SHA256 606700bc937f0d63d1478031863b9e97a16dffdd9991b50a9fa6bb1b31a985a9
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sl\messages.json
        • Size 864B
        • SHA256 6760aa22bda02410ee7a449fc82d2455d13f0447dffde871d9d77aba749c8aaf
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sq\messages.json
        • Size 928B
        • SHA256 990f8a78aa2dd11f6b5351f3d5e243b766620cf4e1a236ab9d6b5a7d44b39745
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sr\messages.json
        • Size 2KB
        • SHA256 240c060293e92c5c117c701f374ecbfa06053dabf10b182b10474d1d1e0a2ece
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sv\messages.json
        • Size 816B
        • SHA256 18a651fd4a45218a8f32d5b450f193a225b4f05fb12700c261e4fea1b509bae9
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\sw\messages.json
        • Size 848B
        • SHA256 5015713497bd6a21fc44993a5722646e7ce9007929aa140e32299520b6ead89e
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ta\messages.json
        • Size 3KB
        • SHA256 ba22751476abf201fc3bb0b084080db305df7823571aec2b270f744aaa119231
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\te\messages.json
        • Size 3KB
        • SHA256 8cc1a5ad2c392b2b0c7157bb1207930dd0215f2e723fc8e794367a75b0b8bf24
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\th\messages.json
        • Size 2KB
        • SHA256 cdcd17892c0b2fda108cc2662a673003abff552e8e28899e60951417d44884d1
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\tr\messages.json
        • Size 1KB
        • SHA256 ba9402e744fc80aca3816626c21c338f093f13608ba4a30d86ab7cef5d53f402
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\uk\messages.json
        • Size 2KB
        • SHA256 3ae36bdbd8c8c8e3b4ddba8d4c906d0058350ee98cd7b5d1e9c6ced430d1246e
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\ur\messages.json
        • Size 2KB
        • SHA256 6e63bb3dacde404556e99f35fc985bf9e6b529df702399428a6e3149dc84bc77
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\uz\messages.json
        • Size 752B
        • SHA256 d1e64f1083eec4ec5efe365fe5ecdee3e5bc03a6fa4c7b8bdc68059040f33774
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\vi\messages.json
        • Size 1KB
        • SHA256 bf88d79f2b77cc05bcd8e49fe8d3ccc6eb4dfa834c9911ef546dbe95cd651610
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\zh_CN\messages.json
        • Size 1KB
        • SHA256 85860a57eded1177f4d70ce4c000232864fe6b6a0de99e1584733ede279001b8
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\zh_HK\messages.json
        • Size 1KB
        • SHA256 bf50c8d20880241e5960876bd5910b7934488ac7147419bfcc93713c41b71e1e
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\zh_TW\messages.json
        • Size 1KB
        • SHA256 b52d94024a1014289778b283dd01dc5af131cbc12919742a71bf666b6ba27e84
        • MD5 SHA1 SHA512 TLSH

        messages.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\_locales\zu\messages.json
        • Size 928B
        • SHA256 dd175c8a2b3e063cc67bb5d69374d9f6d3927c2640d4554d5f4da768db4f7e56
        • MD5 SHA1 SHA512 TLSH

        dasherSettingSchema.json

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\dasherSettingSchema.json
        • Size 864B
        • SHA256 208b41bfa71827afeb91b5a533cafb165908a1b884b553474e64f0aceef6df5a
        • MD5 SHA1 SHA512 TLSH

        offscreendocument.html

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\offscreendocument.html
        • Size 112B
        • SHA256 473e97e94e084b1ff879de541cc41264463141533cfe49ddf6a21c8fbc349f33
        • MD5 SHA1 SHA512 TLSH

        offscreendocument_main.js

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\offscreendocument_main.js
        • Size 130KB
        • SHA256 7fbeb3044126e1483ed9893dfc2c79fea6f4a3612016019916f3e90e091e370d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        page_embed_script.js

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\page_embed_script.js
        • Size 352B
        • SHA256 edb03f0e1ecc405b2810b63bec7cb6e98f23d43f1111226bb92a0c69dfe427c1
        • MD5 SHA1 SHA512 TLSH

        service_worker_bin_prod.js.ChupaCabra

        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4240_874992913\CRX_INSTALL\service_worker_bin_prod.js.ChupaCabra
        • Size 136KB
        • SHA256 3038503e00697c5e9b3047a95087dd4441799172a300fbf7332ca7e89b3ade39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wct77AB.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\wct77AB.tmp
        • Size 63KB
        • SHA256 8ade238751e6a4a0aea5e8b03c660e4fb3fcec29c1cc70c5da40f56a969a1723
        • MD5 SHA1 SHA512 SSDEEP TLSH

        adp80xx.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\adp80xx.inf_amd64_efb36fdc260e8bc8\adp80xx.sys
        • Size 1.1MB
        • SHA256 8c827aef6e8bc4646cc1b95ca1d0dfe5a97eabb3d892e38a5d36816a479e5003
        • MD5 SHA1 SHA512 SSDEEP TLSH

        amdgpio2.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\amdgpio2.inf_amd64_808fe94735c4c6b3\amdgpio2.sys
        • Size 18KB
        • SHA256 edc18f353ab1596f83e1c4244d1dcaee0be0c10cb67c663d418144f40d486001
        • MD5 SHA1 SHA512 SSDEEP TLSH

        amdi2c.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\amdi2c.inf_amd64_d7ae71f8eb52c084\amdi2c.sys
        • Size 44KB
        • SHA256 6cbc417d3c2f5626e7331487fbc7308dcc79b04f79a2ab0c6e45b7cc5bbb760f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        amdsata.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\amdsata.inf_amd64_ea60132f1a9a7a62\amdsata.sys
        • Size 81KB
        • SHA256 f1b8c6b975931ed57cafcac177dc10c029cb60977dd3401612707eb288934795
        • MD5 SHA1 SHA512 SSDEEP TLSH

        arcsas.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\arcsas.inf_amd64_b3d75f82c617ac6a\arcsas.sys
        • Size 128KB
        • SHA256 f3e4c831d7ece0c26f76892c7dccbb93ec568ca9e00c726f8af7ed4c26fbd089
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cht4vfx.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\cht4vx64.inf_amd64_b03448ba0b72ec47\cht4vfx.sys
        • Size 28KB
        • SHA256 29e7db3ea5616a4f4fbefe42a4072ccb14c0f82c702eec864f8f386bc9433801
        • MD5 SHA1 SHA512 SSDEEP TLSH

        HpSAMD.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\hpsamd.inf_amd64_0784fd3ef0d7ec93\HpSAMD.sys
        • Size 62KB
        • SHA256 ef3c13490b99afc7f98e90c22359940b0f8f0902304e2d67e7918debe79698b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iai2c.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\iai2c.inf_amd64_a77c815b2999404d\iai2c.sys
        • Size 89KB
        • SHA256 d66e6ce582226d42e7558be9081f032066fce3d6dfe48099cfa54df8693074e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSS2i_GPIO2_BXT_P.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_bxt_p.inf_amd64_8be317e01b44bf5a\iaLPSS2i_GPIO2_BXT_P.sys
        • Size 91KB
        • SHA256 4374f052a7be7377b5b0a5fdbed2c07f9e4155bf4976e43ff01ba249c17be94c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSS2i_GPIO2_CNL.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_cnl.inf_amd64_a60833fda31e9831\iaLPSS2i_GPIO2_CNL.sys
        • Size 109KB
        • SHA256 bb8d8dc1565d39ff4cca41bd98d43a92182dde22d6e030f3acf1cc9fb9d084a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSS2i_GPIO2_GLK.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_glk.inf_amd64_dad1e0a2b185e32b\iaLPSS2i_GPIO2_GLK.sys
        • Size 94KB
        • SHA256 d8837d6e71fbaf4098fcc985d356e5fd69746d00f76d31597f625c74fcf9fa86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSS2i_I2C_GLK.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpss2i_i2c_glk.inf_amd64_7b6c08738ca8a856\iaLPSS2i_I2C_GLK.sys
        • Size 173KB
        • SHA256 053c06eafab0b8eeff47cf0bd0a066acc4da4528ca233539da9a221fffbc617c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSS2i_I2C.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpss2i_i2c_skl.inf_amd64_9d9dbb01837eba23\iaLPSS2i_I2C.sys
        • Size 167KB
        • SHA256 3afb1f369fe0928a0d502242cc89b4a660d274866e2c83796b5bf19970e64f17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSSi_GPIO.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpssi_gpio.inf_amd64_62ffa3c95446bcfc\iaLPSSi_GPIO.sys
        • Size 37KB
        • SHA256 02800c109ceb532ca58f98295eb98084ecc915dcba0792b13e6c38e49bf14257
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaLPSSi_I2C.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\ialpssi_i2c.inf_amd64_8e00e1aed7fbdf70\iaLPSSi_I2C.sys
        • Size 110KB
        • SHA256 b5fa8a2ca1be4d4fc6de1f6bdc1f220a2be77fe70d1218fdf9c50014c76fea63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaStorAVC.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\iastorav.inf_amd64_87f761c07c99d5e7\iaStorAVC.sys
        • Size 864KB
        • SHA256 a679f8c38c113de676a52f0f915a9da177df8e801cb857ecab1ca80cee752035
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iaStorV.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_9c09bd1df352f065\iaStorV.sys
        • Size 402KB
        • SHA256 eb4e916a2eb4066ab1ed9be8afd54d2d2fe6c2563238471860ee9376929ad439
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IntelTA.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\intelta.inf_amd64_ba962d801a22973c\IntelTA.sys
        • Size 25KB
        • SHA256 1597483cc37629e400bb6dae1d7d86310e8a6fc44e03a2f6aa4e9546307093db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ItSas35i.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\itsas35i.inf_amd64_4f5850c71046b0cb\ItSas35i.sys
        • Size 168KB
        • SHA256 2b51911a7ac8b3b18d10f089822aeedcf5736b2f4bbe6cedf530a4725f1459ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lsi_sas2i.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\lsi_sas2i.inf_amd64_b4e933c4540ad3cc\lsi_sas2i.sys
        • Size 121KB
        • SHA256 dcb6b5683a0bc381a1e72f581c97502522307625e70485cc1fac5fe2c91a8b69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lsi_sas3i.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\lsi_sas3i.inf_amd64_79c7a4d8be0a9744\lsi_sas3i.sys
        • Size 132KB
        • SHA256 27f7050bc3ef29a03b1750c44a3767e04e856c64b5000f246185fd1aacc23e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mlx4_bus.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\mlx4_bus.inf_amd64_4c426f3bebc68844\mlx4_bus.sys
        • Size 1.1MB
        • SHA256 68ef4dfcf5445922881424d27600de49f0c06b4454a7a2e68cc63259106365b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ndfltr.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\mlx4_bus.inf_amd64_4c426f3bebc68844\ndfltr.sys
        • Size 142KB
        • SHA256 003360474e62383950a6f35686cb40d2e724df25cba464ef4219a43fb3cd1dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winverbs.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\mlx4_bus.inf_amd64_4c426f3bebc68844\winverbs.sys
        • Size 71KB
        • SHA256 871dff95c3749bb88ac44118d68f02f4ca6f76a17c5e04527be24dab7e081171
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nvdimm.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\nvdimm.inf_amd64_9bb46b0de5ea33cd\nvdimm.sys
        • Size 164KB
        • SHA256 478643094cc3d3a867171fd98f7c4d0d27539cb6557c75c32e4337cf009e2129
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pmem.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\pmem.inf_amd64_acec109593aed940\pmem.sys
        • Size 134KB
        • SHA256 a8eaa59702abc2c303f1282e902616e00ab7437bd94aca70d18eb242e13b717b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sisraid2.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\sisraid2.inf_amd64_845e008c32615283\sisraid2.sys
        • Size 43KB
        • SHA256 d2e1f75ef67b54a97d2cac48bd689b986a4b8415b8410f230fa5fd083fcfca34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sisraid4.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\sisraid4.inf_amd64_65ab84e9830f6f4b\sisraid4.sys
        • Size 79KB
        • SHA256 6736e20acf4a4dddcf3966d66f3a2326710524c82a8d1b561da013c868fefaf2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uiccspb.dll

        • Path C:\Windows\System32\DriverStore\FileRepository\uiccspb.inf_amd64_18454ae612999870\uiccspb.dll
        • Size 32KB
        • SHA256 3eea71b5b035c687336ddc4642870a8cdbb9bddfd9cdcb0ff50bc270787148a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vsmraid.sys

        • Path C:\Windows\System32\DriverStore\FileRepository\vsmraid.inf_amd64_3d2bbc45931b8232\vsmraid.sys
        • Size 162KB
        • SHA256 7d19d376cd62b8efce63b37e5c83cb930baf07578a570cf5995e59d70dfee62a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VSTXRAID.SYS

        • Path C:\Windows\System32\DriverStore\FileRepository\vstxraid.inf_amd64_300cb04282659e6d\VSTXRAID.SYS
        • Size 298KB
        • SHA256 8d2e8549ac79daf98c64a5145e45737bb0f59f6f3b9102fca41a76fd5f66ba56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

        • Path C:\Windows\System32\config\systemprofile\AppData\Local\D3DSCache\90ccb9cba3f45768\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
        • Size 16B
        • SHA256 4c176189475802f9c4450b0047d49994c5e449383db995ed25e30e96af8e7672
        • MD5 SHA1 SHA512

        officeclicktorun.exe_Rules.xml

        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml
        • Size 486KB
        • SHA256 f2b371b18194729a6da99950822b472c47884d77b7387a1106221f7001348ce0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Latest.dat

        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Vault\UserProfileRoaming\Latest.dat
        • Size 16B
        • SHA256 a11b3502c9d9a0dd33f8379a93e07160bdce82bc299670f4778a203cccdfa77b
        • MD5 SHA1 SHA512

        StructuredQuerySchema.bin

        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin
        • Size 413KB
        • SHA256 04bedf460064327a6382dac799111cfdf4fc4ff39110b191f8ffdc4062e4ed5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {17A6A947-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db

        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\{17A6A947-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db
        • Size 413KB
        • SHA256 be61e37822715dba619a869fb4c921c34b2b8d09266e8d381ced621d186fc29d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d4cpj47d4msqe.exe

        • Path C:\Windows\System32\d4cpj47d4msqe.exe
        • Size 1.5MB
        • SHA256 2de794737c614d5daf312db1dfe4604b3ef7f62abc33e8894e20da61598e7d16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hsq6ugqjvoi7w.exe

        • Path C:\Windows\System32\hsq6ugqjvoi7w.exe
        • Size 10.3MB
        • SHA256 fc429f6346769ef3f24f7c1a75672a207d28c662dd9a794ed30276235389cf08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfc011.dat

        • Path C:\Windows\System32\perfc011.dat
        • Size 129KB
        • SHA256 f3c13479ee804360c8001a5c9651b11d24e1cbb47156e36f4d95ad8952453b25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfd007.dat

        • Path C:\Windows\System32\perfd007.dat
        • Size 39KB
        • SHA256 dcb76fa8aa645c72f3c246155d2a9fac60dee6e163a6ea2355de6c74beb8bc02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfd00A.dat

        • Path C:\Windows\System32\perfd00A.dat
        • Size 42KB
        • SHA256 9f8a8ebbbd87b0b9f4467c6c78b38e2220596989357cad6f47e927bfc3058903
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfd00C.dat

        • Path C:\Windows\System32\perfd00C.dat
        • Size 39KB
        • SHA256 df23d7a1b880f5656feaa5ec1a4ec852843cb4a5002189394f2c24e011f562b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfd010.dat

        • Path C:\Windows\System32\perfd010.dat
        • Size 38KB
        • SHA256 d01d7fc10e3744c06f88229a7a1defab4b9b719afc19fb5378abe966a2cb2a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi007.dat

        • Path C:\Windows\System32\perfi007.dat
        • Size 298KB
        • SHA256 a76dc8dcb69db6566c69ee76e01a81461384e0847faaf7633c155189bd938bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi009.dat

        • Path C:\Windows\System32\perfi009.dat
        • Size 290KB
        • SHA256 50a7185c4da6b4025b722adf9ca2a16c28fcb87a79a35a5076448356d840142d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi00A.dat

        • Path C:\Windows\System32\perfi00A.dat
        • Size 338KB
        • SHA256 bca36aa2cec0b91b282308bef518151484c8863c5417571d9d81cf24227c3503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi00C.dat

        • Path C:\Windows\System32\perfi00C.dat
        • Size 342KB
        • SHA256 16567077fc22104b0b55b2e41477a0d25d01b6a472edf6fd0ba80e01ef9baa96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi010.dat

        • Path C:\Windows\System32\perfi010.dat
        • Size 333KB
        • SHA256 8a28b910b827ecc5b300d618e3c17170f060e6d82d99f725adfa0fb45ebe67eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        perfi011.dat

        • Path C:\Windows\System32\perfi011.dat
        • Size 141KB
        • SHA256 a086b6d4b7c20e346bfc448acbb47c89f30e716c8be862cc7fd1e99ae5ae5a60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1548-3152-0x0000000002720000-0x0000000002730000-memory.dmp

        memory/1548-1-0x0000000002720000-0x0000000002730000-memory.dmp

        memory/1548-0-0x00000000004F0000-0x0000000000532000-memory.dmp