Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/10/2026, 17:09

General

  • Target
    jaffacakes118_Trojan.Win32.Inject.qafm.exe
  • Size 564KB
  • Sample261018-vpbf4sstdz
  • SHA256 e84d994ac402783eb936710d6686fb4d135eba10c8e01f4679c4c7a3b1da835a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • cybergate

Version
  • 2.6

Botnet
  • INFECTADO

C2
  • 177.44.176.142:80

Mutex
  • ***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    Win32

  • regkey_hklm

    Win32

Signatures

  • Family: CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

  • UAC bypass 3 TTPs 1 IoCs
  • Windows security bypass 2 TTPs 1 IoCs
  • Windows security modification 2 TTPs 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Drops file in Program Files directory 9 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 60 IoCs
  • System policy modification 1 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Inject.qafm.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Inject.qafm.exe"
    1⤵
    • UAC bypass
    • Windows security bypass
    • Windows security modification
    • Checks whether UAC is enabled
    • Suspicious use of SetThreadContext
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    • System policy modification
    PID:4848
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
      2⤵
      • Drops file in Program Files directory
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4308
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2cc,0x2d0,0x2d4,0x2c8,0x2dc,0x7ffc4035c188,0x7ffc4035c194,0x7ffc4035c1a0
        3⤵
          PID:1060
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,2890061164910633520,4807309650071183392,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:3
          3⤵
          • System Time Discovery
          PID:1924
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,18215229368141544911,386930026593883987,262144 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
          3⤵
            PID:4316
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,11369250088389371760,3940296572645974269,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
            3⤵
              PID:3988
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,16316173616751093977,15700123470113293966,2097152 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
              3⤵
                PID:3916
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,5302831775013493419,12612980811455201119,2097152 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
                3⤵
                  PID:4680
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,1811634691194339133,8934626663018807454,2097152 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
                  3⤵
                    PID:3280
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,2259008451555581300,7937216059597682589,2097152 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
                    3⤵
                      PID:792
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,3556417980494803333,5426953768565856165,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
                      3⤵
                        PID:3840
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,10848681264997631705,6936785222732434206,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
                        3⤵
                          PID:2580
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,4889674801391481706,3798790841932721645,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
                          3⤵
                            PID:4128
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,7169492789126780253,8416061425707589042,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
                            3⤵
                              PID:828
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,14642098069113076353,5621123095813226390,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
                              3⤵
                                PID:1604
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,14642098069113076353,5621123095813226390,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
                                3⤵
                                  PID:1212
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,12199902196517585458,16451888644812055307,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
                                  3⤵
                                    PID:2688
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,8935690592692577520,8835280320392134534,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
                                    3⤵
                                      PID:1804
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,13398476503176745199,15097535341037674822,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
                                      3⤵
                                        PID:996
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,2839557139960016314,8772478954893466547,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
                                        3⤵
                                          PID:3176
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,14201358708768733879,12885982218307825066,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
                                          3⤵
                                            PID:412
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,11999974558085943578,1035090453178135626,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
                                            3⤵
                                              PID:1160
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,1345209492381136511,5135549475325599887,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:8
                                              3⤵
                                                PID:4972
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,7898576431448374222,13586487997960420628,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
                                                3⤵
                                                  PID:4344
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2848,i,15964117257176117391,11484114187186073635,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8
                                                  3⤵
                                                    PID:548
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,1872045408216987222,2230354619213040161,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
                                                    3⤵
                                                      PID:1896
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=876,i,10752695180265067887,16094515077490452962,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
                                                      3⤵
                                                        PID:3828
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,8033928790946671769,1581482497894485901,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
                                                        3⤵
                                                          PID:2492
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6048,i,4233915454199661713,16993917578370327824,262144 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
                                                          3⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:3388
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,11442209262911110244,9369563406936075213,524288 --field-trial-handle=2208,i,4401434778379488628,13930435427575683321,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:8
                                                          3⤵
                                                            PID:2528
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                        1⤵
                                                          PID:3812

                                                        Network

                                                              MITRE ATT&CK Enterprise v16

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              nav_config.json

                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4308_1197143119\nav_config.json
                                                              • Size 2KB
                                                              • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              protocols.json

                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4308_58239265\protocols.json
                                                              • Size 3KB
                                                              • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                              • MD5 SHA1 SHA512 TLSH

                                                              llm_user_input_extractor_config.json

                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4308_864763702\llm_user_input_extractor_config.json
                                                              • Size 4KB
                                                              • SHA256 2056ee7ed0e7adb69344c93a024158ee4e2332ecd50d183dbad7595c4d588ed9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              office_endpoints_list.json

                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4308_864763702\office_endpoints_list.json
                                                              • Size 9KB
                                                              • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              smart_switch_list.json

                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4308_864763702\smart_switch_list.json
                                                              • Size 2KB
                                                              • SHA256 d490aec3403b2daa86aa095db121c2dfee0a35c3ed0770284c0bd0e0a103c776
                                                              • MD5 SHA1 SHA512 TLSH

                                                              090d0f6f-97f6-4ae3-aa73-2f4fe2edee00.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\090d0f6f-97f6-4ae3-aa73-2f4fe2edee00.tmp
                                                              • Size 23KB
                                                              • SHA256 6e76ff29947fbba2da44741881ca06cc14486eff81402d1dc80336e70b1cc2dd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              1ea87dee-7c9d-4ee9-9656-87c4b61ba6ef.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ea87dee-7c9d-4ee9-9656-87c4b61ba6ef.tmp
                                                              • Size 8KB
                                                              • SHA256 570f0bfdef20cf6f4d0eef96523da30ecd66f72647f355edb1dd3e60d67e2f4f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              300821ce-0a5e-4980-88a8-020279e32c0b.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\300821ce-0a5e-4980-88a8-020279e32c0b.tmp
                                                              • Size 18KB
                                                              • SHA256 8cd0c89e8993136fc5e2bb8a19923a41d5cd0990183aee80e5c13b7fe62d8759
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              manifest.json

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                              • Size 135B
                                                              • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                              • MD5 SHA1 SHA512 TLSH

                                                              settings.dat

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              • Size 280B
                                                              • SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
                                                              • MD5 SHA1 SHA512 TLSH

                                                              settings.dat

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              • Size 280B
                                                              • SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
                                                              • MD5 SHA1 SHA512 TLSH

                                                              CURRENT

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
                                                              • Size 16B
                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                              • MD5 SHA1 SHA512

                                                              MANIFEST-000001

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                              • Size 41B
                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                              • MD5 SHA1 SHA512

                                                              f_000072

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                              • Size 70KB
                                                              • SHA256 627b286d3dc6641aab3e1bd99fb3f4ef94f6e4ab845c5b24af93cdceb454ce08
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000073

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                              • Size 419KB
                                                              • SHA256 db6150e56eaf2574f450002f704d2d7d5a0810b89de21488b4f347e421bf1d6e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000075

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                              • Size 27KB
                                                              • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000076

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                                              • Size 78KB
                                                              • SHA256 d01a4b3c29c5d6fbabe837f2b40221e342081f31e5aafb5394d0fc83b2675ab1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00007e

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                              • Size 60KB
                                                              • SHA256 6dae0529c9121fb0d49ab49173db60fdb4daa997a0aec9af1f894099a215fbd6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000082

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                              • Size 72KB
                                                              • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000086

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                              • Size 77KB
                                                              • SHA256 0f056f2bda587b4e5c72b798d6fd98fdd7f70eb9e58c0eedf9f26c5bbb55656f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000088

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                              • Size 31KB
                                                              • SHA256 1a6e8fc586bde28be00ab8630fc815f58fcd39e4c8b30571152bb724b798d847
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008a

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                              • Size 16KB
                                                              • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008b

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                              • Size 54KB
                                                              • SHA256 915bbb64c93626dfe3f1261810ccf29e7fcbbbf3031e2c566eaf0724899f14d5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008c

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                              • Size 24KB
                                                              • SHA256 9733426d8982278c689b69d840e8be954e2267e648cb338839d467ec2ebc0119
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008d

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                              • Size 39KB
                                                              • SHA256 07dfd54361215d7af2f1e0b6dd2ee2209018d6ed18a7850c3d10456da7155550
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008e

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                              • Size 32KB
                                                              • SHA256 3561f13d60cc6122009074f7fe70eed73f1a8598f490d6c66da14c51fba1fc51
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00008f

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                              • Size 32KB
                                                              • SHA256 1a9ea2fc993eedceb4522c40aea7291ee597b58e68f5cabb7e35330740920e73
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000090

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                              • Size 36KB
                                                              • SHA256 199f11b47418935d040ec3c75c8bb8c6ab599665c9c41494e301cb46576c7700
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000091

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                              • Size 27KB
                                                              • SHA256 0f30a2c4db3ff7a3b176441f85371d510c36484aa082ddba618c6b96410ce3eb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000092

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                              • Size 27KB
                                                              • SHA256 f1cecf451bd2259716b87d492d97096a8ab39adc457c134ba270d6c16c5b344e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000093

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                              • Size 53KB
                                                              • SHA256 2a819f6f1a8183658c052f503808cd4f6374c09143ad61a8ebe8e078bae523db
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000094

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                              • Size 52KB
                                                              • SHA256 4da267cea1ab8fa1dfc783b7693f1b1429720e54655292f9f02ff8867aa6431e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000095

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                              • Size 18KB
                                                              • SHA256 fbe5e1ea2aabe4cd0f0c13d61187082c32a873460a5f58611c8f9fa2d941f34a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000096

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                              • Size 71KB
                                                              • SHA256 030fd13b72fbbd7f176378c562ea997ad8488f872420f2a2352357d46e8a6dd9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009d

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                              • Size 17KB
                                                              • SHA256 53cf0b355bf49d06e5edeceae746faf5dd8fc25e347e7f5cae52ca2ff3403def
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009e

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                              • Size 90KB
                                                              • SHA256 169951f600d2ba78246f7768e11ff2a27cf88f32208c2f9873f0fe5933131f24
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a3

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                              • Size 22KB
                                                              • SHA256 e49d63c87635f1c09195254dcb8adcabcb5eb4d79d159468b35e6626e069c759
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a4

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                              • Size 21KB
                                                              • SHA256 8781fecf0148d5d7c5e2fbc994f25bbdbbdd1a281fc1007188461a524e5ea61c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a5

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                              • Size 17KB
                                                              • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                              • Size 4KB
                                                              • SHA256 7345704ca34f82d9cd161b1a36e8fe954d9267c70caeaa429a593416a555113c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                              • Size 3KB
                                                              • SHA256 2c3a1b0edd105c03e507f2ee5aad9eee40bd9d48ff3e5fbac39439676c862174
                                                              • MD5 SHA1 SHA512 TLSH

                                                              b5e6c973-f7e6-4534-89de-169d74bedfc4.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b5e6c973-f7e6-4534-89de-169d74bedfc4.tmp
                                                              • Size 2B
                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                              • MD5 SHA1 SHA512

                                                              dasherSettingSchema.json

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                              • Size 854B
                                                              • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                              • MD5 SHA1 SHA512 TLSH

                                                              05d1ae5c-5b80-4039-857f-63d8a5179d71.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\05d1ae5c-5b80-4039-857f-63d8a5179d71.tmp
                                                              • Size 111B
                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                              • MD5 SHA1 SHA512 TLSH

                                                              07cdc4e5-1137-4edb-84e0-1626f3c375a5.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07cdc4e5-1137-4edb-84e0-1626f3c375a5.tmp
                                                              • Size 3KB
                                                              • SHA256 9bc5372f4ade79abe912861ee3d64ff9b27ee8422112f56dd1e8911e5e91e389
                                                              • MD5 SHA1 SHA512 TLSH

                                                              420577c3-4d3b-4285-adc5-a5c6d14a124b.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\420577c3-4d3b-4285-adc5-a5c6d14a124b.tmp
                                                              • Size 2B
                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                              • MD5 SHA1 SHA512

                                                              b0bb9674-46c0-4853-8740-47e7b807e7a0.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b0bb9674-46c0-4853-8740-47e7b807e7a0.tmp
                                                              • Size 4KB
                                                              • SHA256 597491ad58f1cac4e03b50a70ea90d693f4113fdc7934ba2e701caa80413b307
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\46843c8b-13ed-43f4-9da9-1501f0d9094e\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 bba2d4a0cf86cce95bbb2bd813708d7c1f62972be32e879bc08793c178e9b6ea
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\46843c8b-13ed-43f4-9da9-1501f0d9094e\index-dir\the-real-index
                                                              • Size 72B
                                                              • SHA256 765aca04af417edd905b45495ce6d8ecfb9c5678893fa2e75721e2daa19c5732
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\temp-index
                                                              • Size 3KB
                                                              • SHA256 1a27f90965ffbcae3b983fe552718a049ae84c0e2996214652a8dcd8179ba58c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\temp-index
                                                              • Size 672B
                                                              • SHA256 45047dfbf6b27c934eea6d5c2a375c2d8f0c606ab3e4d6eda288fd5f5edef9b9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
                                                              • Size 672B
                                                              • SHA256 6d946b35a3e22514aafd460ffad5e58c9ae10d937e22ab8f86ad99ba4a45ef79
                                                              • MD5 SHA1 SHA512 TLSH

                                                              index.txt.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                              • Size 371B
                                                              • SHA256 570c0153acf2f92163fd192e7ee42fd5eecd69e4e2ea0fde58dcc8cbdfbe5595
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 e69b6b1ceb3fa01ea3e1f91a17c89814a5505ee6f04b0a2aa57acf1d8e2a5c2b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                              • Size 48B
                                                              • SHA256 b5b93dfcdf97093a5d802e820864976123fdb4ae1c60c43e2b2e5182245fc3da
                                                              • MD5 SHA1 SHA512

                                                              aa9f39c0-3204-4c88-a162-add2cf3fa39e.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa9f39c0-3204-4c88-a162-add2cf3fa39e.tmp
                                                              • Size 11KB
                                                              • SHA256 56273afdd1d6931a8f5e6a4270976c965752360f9ede0750fa9adb1076d7fa8c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              b99115e1-6cae-4e70-b904-73333ecd4eaf.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b99115e1-6cae-4e70-b904-73333ecd4eaf.tmp
                                                              • Size 32KB
                                                              • SHA256 c56a09cbfc172eeafb6533ba5da3c1bc5e3c300bc3ec843cbacff8dd531d3c2a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              d8f9cddc-4164-4337-b935-79d04c243a5b.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8f9cddc-4164-4337-b935-79d04c243a5b.tmp
                                                              • Size 11KB
                                                              • SHA256 8dd4795265e12e6e48a31143dde97866ffbf1a099040aa9ec02adb46e95edaea
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              dac1e0df-6aa0-45b3-b61e-4c90a272535c.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dac1e0df-6aa0-45b3-b61e-4c90a272535c.tmp
                                                              • Size 11KB
                                                              • SHA256 d1b40f2daafcfaccebc3c2a44cb70abbd9c44167f4f98d07c0614177f022206e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              e25c74b7-eee7-4d80-8cca-8b54712a7413.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e25c74b7-eee7-4d80-8cca-8b54712a7413.tmp
                                                              • Size 70KB
                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f90c01e1-82c1-4212-8a10-c68170115016.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f90c01e1-82c1-4212-8a10-c68170115016.tmp
                                                              • Size 22KB
                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              manifest.json

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\manifest.json
                                                              • Size 165B
                                                              • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                              • MD5 SHA1 SHA512 TLSH

                                                              manifest.json

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
                                                              • Size 43B
                                                              • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                              • MD5 SHA1 SHA512

                                                              manifest.json

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\manifest.json
                                                              • Size 160B
                                                              • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              cfb0aaee-5980-43cb-9830-1febd9a0cc4e.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cfb0aaee-5980-43cb-9830-1febd9a0cc4e.tmp
                                                              • Size 18KB
                                                              • SHA256 650f13a6316f53caf1a987a116f17b3e41c2526836b376390497981232a907f5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0c3f0eb7-4684-4322-89ce-9c4806627d76.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\0c3f0eb7-4684-4322-89ce-9c4806627d76.tmp
                                                              • Size 132B
                                                              • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                              • MD5 SHA1 SHA512 TLSH

                                                              41f2a873-33d1-47c0-89ea-bbd2dd292e16.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\41f2a873-33d1-47c0-89ea-bbd2dd292e16.tmp
                                                              • Size 372B
                                                              • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              dd767eb4-8c62-4473-996b-18da39d4e173.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\dd767eb4-8c62-4473-996b-18da39d4e173.tmp
                                                              • Size 252B
                                                              • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                              • MD5 SHA1 SHA512 TLSH

                                                              f4377be6-2703-4272-9d8e-4075f3f8fc07.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\f4377be6-2703-4272-9d8e-4075f3f8fc07.tmp
                                                              • Size 492B
                                                              • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              d2c6ea28-9443-4d65-9451-03564f11b8de.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d2c6ea28-9443-4d65-9451-03564f11b8de.tmp
                                                              • Size 8KB
                                                              • SHA256 33c65689871097bac3079c3ebc9bf61b0a5b6c2edc7dc328b545e03112801bce
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              9cd49b9a-2ed3-46e9-83b8-6b1ae4e5cc27.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9cd49b9a-2ed3-46e9-83b8-6b1ae4e5cc27.tmp
                                                              • Size 13B
                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                              • MD5 SHA1 SHA512

                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                              • Size 2KB
                                                              • SHA256 0cd6cf8795b90f09d62f10d6b64375e28cc1d384142f572ea98a9aaa5afe42cd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              302cc411-c285-47c9-a89f-7ab3370c6fe5.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Temp\302cc411-c285-47c9-a89f-7ab3370c6fe5.tmp
                                                              • Size 158KB
                                                              • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              8aaee974-9db6-4d8a-9430-9fca18473d70.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Temp\8aaee974-9db6-4d8a-9430-9fca18473d70.tmp
                                                              • Size 1B
                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                              • MD5 SHA1 SHA512

                                                              messages.json

                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4308_641415109\CRX_INSTALL\_locales\en_CA\messages.json
                                                              • Size 711B
                                                              • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              2a4bf5f0-04ec-422e-889f-186025168868.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4308_85175372\2a4bf5f0-04ec-422e-889f-186025168868.tmp
                                                              • Size 10KB
                                                              • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              verified_contents.json

                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4308_85175372\CRX_INSTALL\_metadata\verified_contents.json
                                                              • Size 1KB
                                                              • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                              • MD5 SHA1 SHA512 TLSH

                                                              content.js

                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4308_85175372\CRX_INSTALL\content.js
                                                              • Size 9KB
                                                              • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              manifest.json

                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4308_85175372\CRX_INSTALL\manifest.json
                                                              • Size 962B
                                                              • SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              memory/4308-2-0x0000000000400000-0x0000000000450000-memory.dmp