Overview

overview

10

Static

static

3

jaffacakes...ic.exe

windows10-2004-x64

10

jaffacakes...ic.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 00:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118_HEUR.Trojan.Win32.Generic.exe
  • Size 340KB
  • Sample261014-a3333att6j
  • SHA256 67a75f15e3bce2b69039dbf0ec5f657669178f215502bc47023569bce0c94707
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionteslacryptimpactpersistenceprivilege_escalationransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\PerfLogs\Recovery+vegvg.txt

  • teslacrypt

Ransom Note
  • NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption with RSA-4096. More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem) How did this happen ? !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private. !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet. !!! Decrypting of your files is only possible with the help of the private key and decrypt program , which is on our Secret Server What do I do ? So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BITCOIN NOW! , and restore your data easy way. If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment. For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below: 1. http://gwe32fdr74bhfsyujb34gfszfv.zatcurr.com/A51C7DA1F13B350 2. http://tes543berda73i48fsdfsd.keratadze.at/A51C7DA1F13B350 3. http://tt54rfdjhb34rfbnknaerg.milerteddy.com/A51C7DA1F13B350 If for some reasons the addresses are not available, follow these steps: 1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en 2. After a successful installation, run the browser 3. Type in the address bar: xlowfznrg4wf7dli.onion/A51C7DA1F13B350 4. Follow the instructions on the site. ---------------- IMPORTANT INFORMATION------------------------ *-*-* Your personal pages: http://gwe32fdr74bhfsyujb34gfszfv.zatcurr.com/A51C7DA1F13B350 http://tes543berda73i48fsdfsd.keratadze.at/A51C7DA1F13B350 http://tt54rfdjhb34rfbnknaerg.milerteddy.com/A51C7DA1F13B350 *-*-* Your personal page Tor-Browser: xlowfznrg4wf7dli.ONION/A51C7DA1F13B350
URLs

  • http://gwe32fdr74bhfsyujb34gfszfv.zatcurr.com/A51C7DA1F13B350

  • http://tes543berda73i48fsdfsd.keratadze.at/A51C7DA1F13B350

  • http://tt54rfdjhb34rfbnknaerg.milerteddy.com/A51C7DA1F13B350

  • http://xlowfznrg4wf7dli.ONION/A51C7DA1F13B350

Signatures

  • Family: TeslaCrypt, AlphaCrypt

    Ransomware based on CryptoLocker. Shut down by the developers in 2016.

    ransomwareteslacrypt
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Renames multiple (1076) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Creates a file in the Startup directory 1 TTPs 6 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • System policy modification 1 TTPs 2 IoCs
    defense_evasion
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4800
    • C:\Windows\wyjygnbtviug.exe
      C:\Windows\wyjygnbtviug.exe
      2⤵
      • Checks computer location settings
      • Creates a file in the Startup directory
      • Executes dropped EXE
      • Adds Run key to start application
      • Drops file in Program Files directory
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      • System policy modification
      PID:4724
      • C:\Windows\System32\wbem\WMIC.exe
        "C:\Windows\System32\wbem\WMIC.exe" shadowcopy delete /nointeractive
        3⤵
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of AdjustPrivilegeToken
        PID:4304
      • C:\Windows\SysWOW64\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\RECOVERY.TXT
        3⤵
        • System Location Discovery: System Language Discovery
        • Opens file in notepad (likely ransom note)
        PID:760
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\RECOVERY.HTM
        3⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3436
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x334,0x7ffdca79c188,0x7ffdca79c194,0x7ffdca79c1a0
          4⤵
            PID:3160
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,7067778965344818995,14604802759025294550,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:3
            4⤵
            • System Time Discovery
            PID:4160
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,14806000303113469054,10350496460689262530,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
            4⤵
              PID:5776
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,18278583437019723270,2165121298609330297,262144 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
              4⤵
                PID:4476
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3276,i,5951172739439295251,7943291465198019903,2097152 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
                4⤵
                  PID:5568
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3316,i,16091202010424625252,12952254510937684419,2097152 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
                  4⤵
                    PID:3300
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,7565387985112681916,15407533405737171091,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
                    4⤵
                      PID:3416
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,4469958319330085967,4599715101295447078,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:8
                      4⤵
                        PID:4352
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,15591504333590234355,6378034277851106892,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
                        4⤵
                          PID:1080
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,15591504333590234355,6378034277851106892,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
                          4⤵
                            PID:6048
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,16259431552124168573,13842431555770452404,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
                            4⤵
                              PID:4660
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,11779270484797458520,15771932374163729426,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                              4⤵
                                PID:3860
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,4728195282483258959,3033416234064995087,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
                                4⤵
                                  PID:3452
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,12154610527512601079,17581131270642277237,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
                                  4⤵
                                    PID:2884
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,8062218805720304014,609954462940467133,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
                                    4⤵
                                      PID:2956
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,2344095515745757476,2406268214707184260,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:8
                                      4⤵
                                        PID:2848
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,1089582734994345524,9362028642034766249,524288 --field-trial-handle=2508,i,2895972348676264552,14827938443686203574,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
                                        4⤵
                                          PID:5628
                                      • C:\Windows\System32\wbem\WMIC.exe
                                        "C:\Windows\System32\wbem\WMIC.exe" shadowcopy delete /nointeractive
                                        3⤵
                                        • Reads the TCP/IP host and domain name from the registry
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:2676
                                      • C:\Windows\SysWOW64\cmd.exe
                                        "C:\Windows\system32\cmd.exe" /c DEL C:\Windows\WYJYGN~1.EXE
                                        3⤵
                                        • System Location Discovery: System Language Discovery
                                        PID:2596
                                    • C:\Windows\SysWOW64\cmd.exe
                                      "C:\Windows\system32\cmd.exe" /c DEL C:\Users\Admin\AppData\Local\Temp\JAFFAC~1.EXE
                                      2⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:3452
                                  • C:\Windows\system32\vssvc.exe
                                    C:\Windows\system32\vssvc.exe
                                    1⤵
                                    • Suspicious use of AdjustPrivilegeToken
                                    PID:684
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:5040
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                      1⤵
                                        PID:3448

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Reconnaissance

                                            Resource Development

                                            Initial Access

                                            Execution

                                            Windows Management Instrumentation

                                            1
                                            T1047

                                            Persistence

                                            Boot or Logon Autostart Execution

                                            2
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            2
                                            T1547.001

                                            Privilege Escalation

                                            Boot or Logon Autostart Execution

                                            2
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            2
                                            T1547.001

                                            Defense Evasion

                                            Indicator Removal

                                            2
                                            T1070

                                            File Deletion

                                            2
                                            T1070.004

                                            Modify Registry

                                            2
                                            T1112

                                            Credential Access

                                            Credentials from Password Stores

                                            1
                                            T1555

                                            Credentials from Web Browsers

                                            1
                                            T1555.003

                                            Unsecured Credentials

                                            1
                                            T1552

                                            Credentials In Files

                                            1
                                            T1552.001

                                            Discovery

                                            Browser Information Discovery

                                            1
                                            T1217

                                            Query Registry

                                            3
                                            T1012

                                            System Information Discovery

                                            4
                                            T1082

                                            System Location Discovery

                                            1
                                            T1614

                                            System Language Discovery

                                            1
                                            T1614.001

                                            System Network Configuration Discovery

                                            1
                                            T1016

                                            System Time Discovery

                                            1
                                            T1124

                                            Lateral Movement

                                            Collection

                                            Data from Local System

                                            1
                                            T1005

                                            Command and Control

                                            Exfiltration

                                            Impact

                                            Inhibit System Recovery

                                            1
                                            T1490

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            Recovery+vegvg.html
                                            • Path C:\PerfLogs\Recovery+vegvg.html
                                            • Size 11KB
                                            • SHA256 0ae2f442e10ee0b50d1bf0e0ee520e58990b8a802dcae90ea914d2997826da79
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Recovery+vegvg.png
                                            • Path C:\PerfLogs\Recovery+vegvg.png
                                            • Size 63KB
                                            • SHA256 52c0e4a6fa7066d61f0ba39223cb9c8436933a4de712fb793d31e15a6056d6c3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Recovery+vegvg.txt
                                            • Path C:\PerfLogs\Recovery+vegvg.txt
                                            • Size 1KB
                                            • SHA256 b7d008828dadedcbf0765a28fda394b2ea3ce3e9932f7b4050440ef5477b56a0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            THIRDPARTYLICENSEREADME-JAVAFX.txt
                                            • Path C:\Program Files\Java\jdk-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
                                            • Size 560B
                                            • SHA256 64e8c34aae046578031a7818b9b64aa42fba94ffe60d738e119fda8cfa4e3885
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            THIRDPARTYLICENSEREADME.txt
                                            • Path C:\Program Files\Java\jdk-1.8\THIRDPARTYLICENSEREADME.txt
                                            • Size 560B
                                            • SHA256 fb70b11dd8f0544de3f0729d8ff192ddeda8f0ecda36e9f66074195f6e2d14fd
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            README.txt
                                            • Path C:\Program Files\Java\jre-1.8\README.txt
                                            • Size 416B
                                            • SHA256 5795e20996ac6fd6678c0699bc675a22c48f3150d1cd183e528a1851d133f921
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Xusage.txt
                                            • Path C:\Program Files\Java\jre-1.8\bin\server\Xusage.txt
                                            • Size 1KB
                                            • SHA256 fab657e1fd1973de98012e4c8a049b198664aa41137bdb313510ff0916e93235
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ffjcext.zip
                                            • Path C:\Program Files\Java\jre-1.8\lib\deploy\ffjcext.zip
                                            • Size 14KB
                                            • SHA256 db9f92c9365c90c932686e4a3a443d84fe5bb3ed6e84d58c0f5e17a48f14eccb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            jvm.hprof.txt
                                            • Path C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt
                                            • Size 4KB
                                            • SHA256 9f6ab2e4b788eb13238c5b8cf60df53ff6deb9367e94eb0525823744cf3b87d3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            ClientOSub2019_eula.txt
                                            • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientOSub2019_eula.txt
                                            • Size 416B
                                            • SHA256 c1227dbe5a3bee8c1d6de38da3945965e17c8cec350a015936fd30119d0fae01
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            LICENSE
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_2006543898\LICENSE
                                            • Size 1KB
                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            verified_contents.json
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_2006543898\_metadata\verified_contents.json
                                            • Size 1KB
                                            • SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            keys.json
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_2006543898\keys.json
                                            • Size 3KB
                                            • SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            deny_domains.list
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_98477616\deny_domains.list
                                            • Size 12B
                                            • SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            deny_etld1_domains.list
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_98477616\deny_etld1_domains.list
                                            • Size 6KB
                                            • SHA256 8babf90cf0c44b6e36537a8535a0e3d89e04001ae8b08a7fb50a51419c88a2e9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            deny_full_domains.list
                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3436_98477616\deny_full_domains.list
                                            • Size 12KB
                                            • SHA256 19e871f69e774c847717469957dd18f342712e702d2c54c5efb8542907bcbabd
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            user.png
                                            • Path C:\ProgramData\Microsoft\User Account Pictures\user.png
                                            • Size 6KB
                                            • SHA256 5d056999b719d34aa10360bc13670d01396d9c96c21d2a75a09425b34fb6c89d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            1d7941c2-574a-42b5-97ab-91e9e25d0a87.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d7941c2-574a-42b5-97ab-91e9e25d0a87.tmp
                                            • Size 26KB
                                            • SHA256 fab622a1dbe311e00b6f2df1c12979b08dbaf8571544f79b3afc10acdec98337
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            3a8d3172-2fe4-4a1f-8b7f-f97ab30a0045.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a8d3172-2fe4-4a1f-8b7f-f97ab30a0045.tmp
                                            • Size 25KB
                                            • SHA256 e06df01471fe1a02d7a8a0b1215f9fe7d928998ba7927ffede8e6245648402af
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            40280da0-29b0-4b6b-a098-3a7008a8b770.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40280da0-29b0-4b6b-a098-3a7008a8b770.tmp
                                            • Size 27KB
                                            • SHA256 eabc62815adac4128c234eb4f7b1d0148ef6f39a1fe8fc6cd5037c04e916f488
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            6be1a193-12e2-40db-b9f6-b4872f3f0228.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6be1a193-12e2-40db-b9f6-b4872f3f0228.tmp
                                            • Size 26KB
                                            • SHA256 7595b74d904307114b02da9bd8080a4e3c9c162571e7afdd1dffe6579d2cb025
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            9d418403-3c8b-4b74-9c7d-d8560d5bdf27.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d418403-3c8b-4b74-9c7d-d8560d5bdf27.tmp
                                            • Size 26KB
                                            • SHA256 bea06aaa05ae83639dd29ca46478f4d5a1d6b5c1144cf17ade6d4220b581a1fa
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            settings.dat
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            01bc9bfc-d0b8-4657-804d-b64d1ff61e9f.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01bc9bfc-d0b8-4657-804d-b64d1ff61e9f.tmp
                                            • Size 414B
                                            • SHA256 379e788740085b10c18840475b50b0eae73520232cb1afdc170b00fbdbf654a0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            4e204788-7408-4349-9508-964783577af5.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4e204788-7408-4349-9508-964783577af5.tmp
                                            • Size 12KB
                                            • SHA256 4fc1123395e566a59c1535adf631ba0ab2c4445a8a7452680f7af36544853b04
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            84f4201f-abc4-4c4a-9d5d-e9b8196a5cfe.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84f4201f-abc4-4c4a-9d5d-e9b8196a5cfe.tmp
                                            • Size 32KB
                                            • SHA256 1944d3ce2fe7de57856eb4a3df888c36fe9d1c40d451d273c886c29be942e980
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            4ceaad77-5903-49d0-b0b0-93e30bd99d88.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4ceaad77-5903-49d0-b0b0-93e30bd99d88.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            128.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png
                                            • Size 5KB
                                            • SHA256 da6c6af87c2bf4c353f627ae997cb3cc01f967b6d3c30e790955528094b5272e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            offscreendocument_main.js
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js
                                            • Size 130KB
                                            • SHA256 848de0b6ad4b954a9f82df0d008e521975c2120e5c6d6087c81f3b63bab82a8e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            page_embed_script.js
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js
                                            • Size 720B
                                            • SHA256 48383807d1a992a6c38ed104b895f7cf65d42a4ac9dcea37aa1cac1a5450c9ec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            service_worker_bin_prod.js
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js
                                            • Size 136KB
                                            • SHA256 9ae8cae098745152cca141769e6b44285690ad4f6ecab0da762e6ee7805028a3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            0dde80d3-47d1-4452-ada8-3a0bc35c5b4c.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0dde80d3-47d1-4452-ada8-3a0bc35c5b4c.tmp
                                            • Size 1KB
                                            • SHA256 0fc6616e8148f7fde80b85f8f6ae3271b097fd49436d600354cee79e7aa5d346
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            1d9dc2f5-1333-4f95-a92e-4d86597125d3.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d9dc2f5-1333-4f95-a92e-4d86597125d3.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            32cf0584-0527-43a7-b184-f3b4f1f5b99b.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\32cf0584-0527-43a7-b184-f3b4f1f5b99b.tmp
                                            • Size 40B
                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            sync_diagnostic.log
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 23KB
                                            • SHA256 2c68bc0aca44ec95e8a9213e810e0e19578c12768b7a4d0678ad6a10da4a3f98
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            c2247511-5bda-4a48-9cef-02eac51a25dd.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2247511-5bda-4a48-9cef-02eac51a25dd.tmp
                                            • Size 12KB
                                            • SHA256 4884aa922c88d7f9345b6be87acf02d60e83034ba806274164ac96ceb0d94136
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            cdf01efb-e5c7-4ac3-88a1-c97ced8fb64e.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdf01efb-e5c7-4ac3-88a1-c97ced8fb64e.tmp
                                            • Size 12KB
                                            • SHA256 8d9d09c8c99d41faab604b1b60ba7c31e08dc839e6b72920ff5cc2faf6c74699
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            db3f1120-feab-4bb0-8d4a-356a6960dea6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db3f1120-feab-4bb0-8d4a-356a6960dea6.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            data.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.24\data.txt.mp3
                                            • Size 152KB
                                            • SHA256 b6e0cca075cb1e624a87114686cbca21fc62fdfe8cec4d77387ad061c26400e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            arbitration_metadata.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Notifications\0.0.0.46\arbitration_metadata.txt.mp3
                                            • Size 344KB
                                            • SHA256 71f13f0dda0a87836df54e3bc454ce9dd4a8a1edc37970826a7407dea560261d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            auto_open_controller.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\auto_open_controller.js.mp3
                                            • Size 1.2MB
                                            • SHA256 9c656f032f7410f9230223b19a94df33e6a82404136c4724dc9d20f8bf069803
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            edge_checkout_page_validator.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_checkout_page_validator.js.mp3
                                            • Size 1021KB
                                            • SHA256 d00bf067bc3cc25dab7bd5758a144d878bac607757021747eba6d91b486170d7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            edge_confirmation_page_validator.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_confirmation_page_validator.js.mp3
                                            • Size 1021KB
                                            • SHA256 a5b38bcc13484b624e0ab5d88e37fcbef49dc6ed7e6f7b07077fd9bbcdab4de5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            edge_driver.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_driver.js.mp3
                                            • Size 1.0MB
                                            • SHA256 b3cdf1c5aeb7d63d850b77eb8e858d717aa4988d615f889e6203e05bd03d86b8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            edge_tracking_page_validator.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_tracking_page_validator.js.mp3
                                            • Size 63KB
                                            • SHA256 2d431380c9648266fd694a1d50f70f8f8989c74941c41148d755ef7e6198294e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            product_page.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\product_page.js.mp3
                                            • Size 1.0MB
                                            • SHA256 1018173281d612c1a2ee225e587f74877981e986a7f4df2c9735f0df22f9d21b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            shopping_iframe_driver.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\shopping_iframe_driver.js.mp3
                                            • Size 22KB
                                            • SHA256 6482d9e6bfbbeebff0553817b57512b26f2f07404771155c393838607e48afe8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            notification_fast.bundle.js.LICENSE.txt
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Notification\notification_fast.bundle.js.LICENSE.txt
                                            • Size 928B
                                            • SHA256 17daf71d0ac67f81750c75c88a2b4e76dd50803af63138f66f7e931c75680291
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            tokenized-card.bundle.js.LICENSE.txt
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
                                            • Size 1KB
                                            • SHA256 4bdb4b24bf42a417b32455e9d952e6de143f765a1f902b215dcb9eac1c69c94e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            app-setup.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\app-setup.js.mp3
                                            • Size 576B
                                            • SHA256 041d446fcb42199a36e52de777b4eae3c44093c7e56964881727327048e21e34
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            bnpl.bundle.js.LICENSE.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl\bnpl.bundle.js.LICENSE.txt.mp3
                                            • Size 2KB
                                            • SHA256 998030ce28a17285443cad8d3883fbc4527986f3cc89f9f6e586cbd5c414a681
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            bnpl.bundle.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl\bnpl.bundle.js.mp3
                                            • Size 691KB
                                            • SHA256 b4ce6dd07cbb78ca16fcec6c8902edbe67d11f8f3805e7679b698bb8f60fbb9a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bnpl_driver.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl_driver.js.mp3
                                            • Size 11KB
                                            • SHA256 cd0c1c0819e901d15ffd3870a8c39ec30c5b47fb0cd74ef5f9bfc4197d53cc8a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            buynow_driver.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\buynow_driver.js.mp3
                                            • Size 3KB
                                            • SHA256 ee770d9cbfa359b5edd2e3a4b0b079f322849fd202564729bed61cf54968e118
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            crypto.bundle.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\crypto.bundle.js.mp3
                                            • Size 496B
                                            • SHA256 ed856cebeab364f9cbbafb233b6d3d5dc5ede19c05971f8839993aab494e2622
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            driver-signature.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\driver-signature.txt.mp3
                                            • Size 20KB
                                            • SHA256 b5b93fb252fdeb66a9400752f273e92287ff3e743f40db48420e830746ddde49
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            edge_driver.js.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\edge_driver.js.mp3
                                            • Size 1.8MB
                                            • SHA256 babadef3fe67582f5a88229c05875a934969c2886b7276c16678780fb71d8feb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            hub-signature.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\hub-signature.txt.mp3
                                            • Size 1KB
                                            • SHA256 46f7cf9295550fefccc27bfab110527433bb1b5cd1df6d4f655bcc3c3d0c7143
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
                                            • Size 80B
                                            • SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.155\manifest.json
                                            • Size 177B
                                            • SHA256 77a882c1ca9977c89f8e67a15ec1854a8eb84e1e79bf7009808ae9eaf5193b65
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            english_wikipedia.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\english_wikipedia.txt.mp3
                                            • Size 270KB
                                            • SHA256 e2108aa4390fb5a8c4e556eec12f1b85d444b7550a009d927108865a8ff846c1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            female_names.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\female_names.txt.mp3
                                            • Size 26KB
                                            • SHA256 3141fed7ddec9cd01f7a09c1a3d660ea4cfb676a7b8613c6bc3e5f76892ce424
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            male_names.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\male_names.txt.mp3
                                            • Size 6KB
                                            • SHA256 3067b1dd25ac2ef4d4bed72e7db38213173b8bf3839ee237dcd2c61d3054eef4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            passwords.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\passwords.txt.mp3
                                            • Size 233KB
                                            • SHA256 b4b2053c990412514e70695b0f6807a2d9f5e6935ec28576fbd55b21dc49421e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            surnames.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\surnames.txt.mp3
                                            • Size 74KB
                                            • SHA256 286eecc975151858ba3770af96d525fbc56b8b0fb94ac9932a35b6bbcd1bd72b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            us_tv_and_film.txt.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\us_tv_and_film.txt.mp3
                                            • Size 159KB
                                            • SHA256 7d7f0594a9b7d53aecc0599b82471dbc0607bdf5aad007417d9d5d3f3dc387ef
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            2ac147d7-356e-444c-a33b-d4eeba8ee355.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\2ac147d7-356e-444c-a33b-d4eeba8ee355.tmp
                                            • Size 2KB
                                            • SHA256 f1ded5cfe46823e5134741c88a322b271d87c9595bc5af0b3fdb060818a02cc3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            c33862fc-2d79-4785-a7fd-5f50c427bde6.tmp
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c33862fc-2d79-4785-a7fd-5f50c427bde6.tmp
                                            • Size 132B
                                            • SHA256 d66c7c80938248300906322a0955b670b7627aee67c06ea033e7dd3fa460210e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveMedTile.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png
                                            • Size 1024B
                                            • SHA256 17055d407713df25623baa770b9f958d9e03867ed91f52189fe0f80be281dac4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveMedTile.scale-125.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png
                                            • Size 1KB
                                            • SHA256 ccbfdaadb6410168ca8c3bd806590171798f4682cc8d149ece6fe8df9419cfff
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveMedTile.scale-150.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png
                                            • Size 1KB
                                            • SHA256 3bfc406ac2414413aa42a9461c546810379972d5f3b7c1bb3bf82ab7fcba3088
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveMedTile.scale-200.png.mp3
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.mp3
                                            • Size 1KB
                                            • SHA256 da758a4c943e6b6cbcd0ac77bc5c673e17a6cc880981aa1792e38a55333bdb05
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveMedTile.scale-400.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png
                                            • Size 3KB
                                            • SHA256 46043d810a912b46d8d5cb64570693a05a8935b9534ee8bb6ce4a8c17cb4896e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveSmallTile.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png
                                            • Size 784B
                                            • SHA256 95fe2f34a52eacf5b14195fa3cb4389294bbdf774da1bbcbda657b11a8bd75c4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveSmallTile.scale-125.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png
                                            • Size 896B
                                            • SHA256 9f6fbdb6b83344b975ff15874a4424094897053b516ac13909e5e0e4ab48d2e6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveSmallTile.scale-150.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png
                                            • Size 960B
                                            • SHA256 934c9fa7f61c8f24e49c38e9d8b70162cadbe385d3fd4e8a80ca1b71b9737a5f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveSmallTile.scale-200.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png
                                            • Size 1KB
                                            • SHA256 55b8604838a769129105d99d5b0aa90df6ca14f07e610258188cd1a53d046d3a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            OneDriveSmallTile.scale-400.png
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png
                                            • Size 2KB
                                            • SHA256 90a2e19ef68822bc6b9a88c58c02e8076e679461c92d95886a6e17f7c0461002
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 904a758ccd0704a40dd96b981a2912e781ef654d10c03839c5c406032a98b289
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            0.0.filtertrie.intermediate.txt
                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{60aa0821-985f-438f-8fc7-356d9dac1cc0}\0.0.filtertrie.intermediate.txt
                                            • Size 30KB
                                            • SHA256 519900b179d5ecc3be6ca6d8709581e836126334099e6beb7735c78b27a1bfae
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            AppCache134336130503567780.txt
                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130503567780.txt
                                            • Size 77KB
                                            • SHA256 46bc8a36ef36490906245fc9e00a4003d5bfe248faeaf373a6b55ff864c99132
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            AppCache134336139330998058.txt
                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139330998058.txt
                                            • Size 64KB
                                            • SHA256 9f68c29785bcdad98dcae63afc4e4c74af54a86aafde6d564e933a32b8da39cc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            AppCache134336141304639019.txt
                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141304639019.txt
                                            • Size 85KB
                                            • SHA256 ee4e4e98535b664bb7f6153ffc14b86ed607d15e742e0e4b20758032925e8920
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            AppCache134336142557018706.txt
                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142557018706.txt
                                            • Size 88KB
                                            • SHA256 fdee7b6b5b56bc8b87f3a64cecb17c803d38fd3a73e721da352ec7fe38948e5e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            26ed8ba2-1691-4c6a-8e29-4b5f3ed3f168.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\26ed8ba2-1691-4c6a-8e29-4b5f3ed3f168.tmp
                                            • Size 1B
                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            verified_contents.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3436_633525771\CRX_INSTALL\_metadata\verified_contents.json
                                            • Size 1KB
                                            • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            content.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3436_633525771\CRX_INSTALL\content.js
                                            • Size 9KB
                                            • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3436_633525771\CRX_INSTALL\manifest.json
                                            • Size 962B
                                            • SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            BackupClose.zip
                                            • Path C:\Users\Admin\Downloads\BackupClose.zip
                                            • Size 506KB
                                            • SHA256 83c93bd71f815f94730310872996cbc015af5984ba970cf7dbae8f55c10563b0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            CompletePing.doc
                                            • Path C:\Users\Admin\Downloads\CompletePing.doc
                                            • Size 451KB
                                            • SHA256 ee8a2f9f33cdce1ed9dd389b3d378f69a1647fc465d7f7c5540f6c714f2a8d39
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            GrantSend.rtf
                                            • Path C:\Users\Admin\Downloads\GrantSend.rtf
                                            • Size 264KB
                                            • SHA256 174563ad98f09077dd06a34e6a94116a5631ba68829fc13e1183187823215389
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            wyjygnbtviug.exe
                                            • Path C:\Windows\wyjygnbtviug.exe
                                            • Size 340KB
                                            • SHA256 67a75f15e3bce2b69039dbf0ec5f657669178f215502bc47023569bce0c94707
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            memory/4724-2818-0x0000000002140000-0x00000000021C6000-memory.dmp
                                            Download

                                            memory/4724-8662-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-11755-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-14406-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-5124-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-2378-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-14507-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4724-9-0x0000000002140000-0x00000000021C6000-memory.dmp
                                            Download

                                            memory/4800-13-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/4800-14-0x00000000022F0000-0x0000000002376000-memory.dmp
                                            Download

                                            memory/4800-0-0x00000000022F0000-0x0000000002376000-memory.dmp
                                            Download

                                            memory/4800-1-0x0000000000400000-0x0000000000497000-memory.dmp
                                            Download

                                            memory/6048-14644-0x000002D0A2110000-0x000002D0A3110000-memory.dmp
                                            Download