Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/10/2026, 17:09

General

  • Target
    jaffacakes118_Trojan.Win32.Inject.qafm.exe
  • Size 564KB
  • Sample261018-vpbf4sstdz
  • SHA256 e84d994ac402783eb936710d6686fb4d135eba10c8e01f4679c4c7a3b1da835a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • cybergate

Version
  • 2.6

Botnet
  • INFECTADO

C2
  • 177.44.176.142:80

Mutex
  • ***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    Win32

  • regkey_hklm

    Win32

Signatures

  • Family: CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

  • UAC bypass 3 TTPs 1 IoCs
  • Windows security bypass 2 TTPs 1 IoCs
  • Windows security modification 2 TTPs 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Drops file in Windows directory 9 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 52 IoCs
  • System policy modification 1 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Inject.qafm.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Inject.qafm.exe"
    1⤵
    • UAC bypass
    • Windows security bypass
    • Windows security modification
    • Checks whether UAC is enabled
    • Suspicious use of SetThreadContext
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    • System policy modification
    PID:2584
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4284
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ffc63e5c188,0x7ffc63e5c194,0x7ffc63e5c1a0
        3⤵
          PID:3676
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,2345256028579564782,10511963966174362075,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:11
          3⤵
          • System Time Discovery
          PID:4548
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4109249387536188687,6456001164375087464,262144 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
          3⤵
            PID:4296
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2644,i,8472552048012861020,15468918452495203978,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:13
            3⤵
              PID:2536
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,7436116475352150904,11957568099698741937,2097152 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
              3⤵
                PID:5404
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,9494748061443387401,10473962182827162376,2097152 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
                3⤵
                  PID:2252
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,15426064535598966594,11052787207423852341,2097152 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
                  3⤵
                    PID:1216
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,16808439303126744913,15272759476099702436,2097152 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:9
                    3⤵
                      PID:6112
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,7630666327266239755,10499049944520144011,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:14
                      3⤵
                        PID:5252
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,10184165232448840927,8131220104205002873,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
                        3⤵
                          PID:2780
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,11298442326436547941,2709799925951875435,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
                          3⤵
                            PID:2504
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,4125484239968098458,6335015297346338685,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
                            3⤵
                              PID:932
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,4125484239968098458,6335015297346338685,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
                              3⤵
                                PID:3604
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,1010568561650707169,6376179656467042273,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:14
                                3⤵
                                  PID:5884
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,16443098795088325447,3376947922732166075,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
                                  3⤵
                                    PID:3540
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,16143337840873723279,4911410131295204071,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
                                    3⤵
                                      PID:612
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,13000015168732050467,5903503820852589948,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:14
                                      3⤵
                                        PID:4612
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,12184391953390595633,2823493783275387647,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:14
                                        3⤵
                                          PID:6140
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,17616672513618740994,10315910448769934047,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
                                          3⤵
                                            PID:2800
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,14821277759331610860,6626900671205158576,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
                                            3⤵
                                              PID:824
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,16797875315220772040,7281026741567455812,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
                                              3⤵
                                                PID:3256
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,5320340492825991283,16156579378925846805,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
                                                3⤵
                                                  PID:4580
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6940,i,12286235050409072535,13466284962750829739,262144 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:10
                                                  3⤵
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:2424
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1188,i,13957198528128679774,17132361580707199468,524288 --field-trial-handle=2360,i,7620606402709449590,5421070412824842461,262144 --variations-seed-version --mojo-platform-channel-handle=1192 /prefetch:14
                                                  3⤵
                                                    PID:996
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                1⤵
                                                  PID:4612
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                  1⤵
                                                    PID:3996
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                    1⤵
                                                      PID:2844

                                                    Network

                                                          MITRE ATT&CK Enterprise v16

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          2090378f-2088-45c4-9569-e8bce6e488c1.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2090378f-2088-45c4-9569-e8bce6e488c1.tmp
                                                          • Size 40KB
                                                          • SHA256 04bf686cf23a85c56280de3f1a29b91e28901b7ca775b86a8cba3cbab57c2cd4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          422c8b65-d4ee-4024-b41f-0404e3ce46a1.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\422c8b65-d4ee-4024-b41f-0404e3ce46a1.tmp
                                                          • Size 35KB
                                                          • SHA256 d5d9a2d39be95d3da7ad8e140f307cc9d574cad950869ef9c0ced2ec2d7294b5
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          4e31d9da-c280-42da-807c-f2638d077814.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e31d9da-c280-42da-807c-f2638d077814.tmp
                                                          • Size 39KB
                                                          • SHA256 d38d0c477a3e50e0209c6faf0f7a785077701fcd566041715fd66ff196dcfb9c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          5b5ac16e-b15f-40a6-8482-3c2d495a4c43.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b5ac16e-b15f-40a6-8482-3c2d495a4c43.tmp
                                                          • Size 38KB
                                                          • SHA256 4a04361f7fd2aba5f3da48559421c4f43bc881be04ffec459e00984302e25e71
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          66dec946-f214-4f0c-90c0-37a6da3f283b.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66dec946-f214-4f0c-90c0-37a6da3f283b.tmp
                                                          • Size 39KB
                                                          • SHA256 c9b49644a5870c9ebf47204713c356c700c383a44fec0990efa44865d0ddce69
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
                                                          • MD5 SHA1 SHA512 TLSH

                                                          3dcd665a-4886-48b2-a0ba-d6937b8f9fea.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3dcd665a-4886-48b2-a0ba-d6937b8f9fea.tmp
                                                          • Size 13KB
                                                          • SHA256 138fd4d5f775fe2227567f9304c0f77571dc6f3690dcfdb03bdc747cf9885c65
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          472e734a-718e-489b-8c1a-a37339ab8b4b.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\472e734a-718e-489b-8c1a-a37339ab8b4b.tmp
                                                          • Size 29KB
                                                          • SHA256 0372af8652b9bc54934140ca6df9d76137debe029fb932862b8c734f30c844ba
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          4d5918a7-072e-4d85-afbe-15a621cd7ee1.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4d5918a7-072e-4d85-afbe-15a621cd7ee1.tmp
                                                          • Size 12KB
                                                          • SHA256 1dc864cea4931852a1ee83b1c34525a6b8cef80f5275d24bc46f8d2275a4736b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          8a9160cf-0918-444b-b54a-b1fc6d801854.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8a9160cf-0918-444b-b54a-b1fc6d801854.tmp
                                                          • Size 13KB
                                                          • SHA256 a02dce86c9de6ca044a37e999083f8c66da16d6c8bfdd7dcbc512afaa26dfdf8
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          9b5e1b14-eca0-4708-be56-941a85b8150d.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9b5e1b14-eca0-4708-be56-941a85b8150d.tmp
                                                          • Size 6B
                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                          • MD5 SHA1 SHA512

                                                          f_000042

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000042
                                                          • Size 419KB
                                                          • SHA256 db6150e56eaf2574f450002f704d2d7d5a0810b89de21488b4f347e421bf1d6e
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000043

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000043
                                                          • Size 70KB
                                                          • SHA256 627b286d3dc6641aab3e1bd99fb3f4ef94f6e4ab845c5b24af93cdceb454ce08
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000045

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045
                                                          • Size 78KB
                                                          • SHA256 d01a4b3c29c5d6fbabe837f2b40221e342081f31e5aafb5394d0fc83b2675ab1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000046

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
                                                          • Size 27KB
                                                          • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00004a

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
                                                          • Size 60KB
                                                          • SHA256 6dae0529c9121fb0d49ab49173db60fdb4daa997a0aec9af1f894099a215fbd6
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00004c

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
                                                          • Size 72KB
                                                          • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000055

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                          • Size 21KB
                                                          • SHA256 8781fecf0148d5d7c5e2fbc994f25bbdbbdd1a281fc1007188461a524e5ea61c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000056

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                          • Size 16KB
                                                          • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000058

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                                          • Size 39KB
                                                          • SHA256 07dfd54361215d7af2f1e0b6dd2ee2209018d6ed18a7850c3d10456da7155550
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005a

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                          • Size 77KB
                                                          • SHA256 0f056f2bda587b4e5c72b798d6fd98fdd7f70eb9e58c0eedf9f26c5bbb55656f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005b

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                                          • Size 39KB
                                                          • SHA256 4113b53f458dd4d409ce46e1f3995039b5e1fe124ff796d6b71a198343e99bce
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005c

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                          • Size 31KB
                                                          • SHA256 1a6e8fc586bde28be00ab8630fc815f58fcd39e4c8b30571152bb724b798d847
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005d

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                          • Size 24KB
                                                          • SHA256 9733426d8982278c689b69d840e8be954e2267e648cb338839d467ec2ebc0119
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005e

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                          • Size 59KB
                                                          • SHA256 7681af049432ee81d253dd95831b70a6f15c84b87f951737c6b9a9bcb797408b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00005f

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                          • Size 36KB
                                                          • SHA256 8de28545f4d5ec0c7b4cd2af90e2c46bbd7b30d63a6abeb8eac9b24d5bd8e739
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000060

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                                          • Size 45KB
                                                          • SHA256 f650bdbb75c3a021d3edf59d00376b6fdbc60bb9e157033442b463bc072312c3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000061

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                                          • Size 38KB
                                                          • SHA256 04a2500a1f497bb77d5fbab423d27d9e9ef46b0e1faf6bb7713cdea6838658b1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000062

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                          • Size 30KB
                                                          • SHA256 22de94c32a0d49a4e5db85865899831714c6881da66a44810628ad0a828f884f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000063

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                                          • Size 27KB
                                                          • SHA256 0f30a2c4db3ff7a3b176441f85371d510c36484aa082ddba618c6b96410ce3eb
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000064

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                          • Size 71KB
                                                          • SHA256 030fd13b72fbbd7f176378c562ea997ad8488f872420f2a2352357d46e8a6dd9
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000065

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                          • Size 65KB
                                                          • SHA256 e5d85883cbbd77aa1e276e1a9438ef0dadc341fed061a81c9ea142023a3b6a06
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000066

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                          • Size 69KB
                                                          • SHA256 c3dbc0be65de0c6a0a94c1abb7300b7b2ed137584bb4c2fb2e22ffa959b46ab7
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000067

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                          • Size 45KB
                                                          • SHA256 df85470b6dc2e3cd6b3b740316c7e0b1732c367a9e48e62bbb46ac2cdefeb971
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000069

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                          • Size 37KB
                                                          • SHA256 68c5aa5fd994011bdecd26d05018de90f9fadb30b8b8fb6a279dfeb459228b58
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00006e

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                                          • Size 39KB
                                                          • SHA256 2a81bbcb4d7051a9b3183c891d50aba7333f87ed9808a803569a6026a990a405
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00006f

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                          • Size 36KB
                                                          • SHA256 419a23d93bf401843cedcd6a7fb1a2c53c3d11f6fce6349d61d176c1796e7ba2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000070

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                          • Size 95KB
                                                          • SHA256 bc69271532390c38fe61b1a7a562f2f48687b2f76f34b79cc02428f788fc0b5f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000071

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                                          • Size 17KB
                                                          • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000072

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                          • Size 22KB
                                                          • SHA256 e49d63c87635f1c09195254dcb8adcabcb5eb4d79d159468b35e6626e069c759
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                          • Size 4KB
                                                          • SHA256 1b4e4ce4e9bb3e474cae9812af62a42a872215e8689cc291149f1742e5c988e4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 2KB
                                                          • SHA256 2b83928d7d0846432a355dcfe95c0ba07b45aecb9fd5a8981065c2b900381b72
                                                          • MD5 SHA1 SHA512 TLSH

                                                          be7be615-d0f7-485d-a0b2-30cd9b6a4380.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\be7be615-d0f7-485d-a0b2-30cd9b6a4380.tmp
                                                          • Size 2B
                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                          • MD5 SHA1 SHA512

                                                          b4029e76-1ecb-4908-bc0d-7fdbb5939ecb.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b4029e76-1ecb-4908-bc0d-7fdbb5939ecb.tmp
                                                          • Size 4KB
                                                          • SHA256 0838a416bee3bdf31f2e361414995f6beaa9772b1e1105a8b6d2debf39905183
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          eeb1f8d4-d5ac-4725-bffc-cec364d30cc3.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eeb1f8d4-d5ac-4725-bffc-cec364d30cc3.tmp
                                                          • Size 40B
                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                          • MD5 SHA1 SHA512

                                                          fba6ebfb-d930-495e-85c4-4b7ac8c7ac10.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fba6ebfb-d930-495e-85c4-4b7ac8c7ac10.tmp
                                                          • Size 2B
                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                          • MD5 SHA1 SHA512

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2352507c-c79e-48c7-9ef4-18eb3273ad79\index-dir\temp-index
                                                          • Size 72B
                                                          • SHA256 95df9cabd152351088ee62cbe091010189bf21b87274e5a1e4e96935a3e20aaf
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2352507c-c79e-48c7-9ef4-18eb3273ad79\index-dir\the-real-index
                                                          • Size 72B
                                                          • SHA256 16c48a93bcf4f7a504d5d69bf203970089898d9bb49e3c6c91ff919ae4ad43d4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca3c23a5-0b45-49bd-9fac-532a302f4fc7\index-dir\temp-index
                                                          • Size 3KB
                                                          • SHA256 985a35948cf87db565dbf4af79dfe2e13d53631a72983cfab20702b5bb690d65
                                                          • MD5 SHA1 SHA512 TLSH

                                                          index.txt.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                          • Size 371B
                                                          • SHA256 34a565f4614550fd6ae0958781fa54e41c2e6a631da29f1ebc382e9db4a53faf
                                                          • MD5 SHA1 SHA512 TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                          • Size 72B
                                                          • SHA256 583a7c2d2dcb6fd980f3d0e7dcb2184314ba9f9c23e884c67894a052a2ff80e1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                          • Size 48B
                                                          • SHA256 318e924f550bd8f5b40d430396500cf895575700c205c3a4e155bea24ea22a87
                                                          • MD5 SHA1 SHA512

                                                          sync_diagnostic.log

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                          • Size 5KB
                                                          • SHA256 3b88615f0548beaeea3e4375fa2f416420960bceb7678bd705612ade471c0f53
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          c313dccb-3285-452e-bb6c-129c7094013d.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c313dccb-3285-452e-bb6c-129c7094013d.tmp
                                                          • Size 70KB
                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          OperationConfig

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                          • Size 3KB
                                                          • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                          • MD5 SHA1 SHA512 TLSH

                                                          f54b17ba-d1fa-48ea-8fb2-3fea38c72f09.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f54b17ba-d1fa-48ea-8fb2-3fea38c72f09.tmp
                                                          • Size 22KB
                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 35KB
                                                          • SHA256 5c0e78a07bc362b8701cec0949bb913acb439a6b80a61f6bbd704810589b5b10
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          09374160-13bb-4ccf-8685-66d84d3019cb.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\09374160-13bb-4ccf-8685-66d84d3019cb.tmp
                                                          • Size 492B
                                                          • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                          • MD5 SHA1 SHA512 TLSH

                                                          11bbf0f2-5f1a-40be-a547-1c588c52fad6.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\11bbf0f2-5f1a-40be-a547-1c588c52fad6.tmp
                                                          • Size 132B
                                                          • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                          • MD5 SHA1 SHA512 TLSH

                                                          1e313756-fb77-436f-af29-57b4fb9c5e0d.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\1e313756-fb77-436f-af29-57b4fb9c5e0d.tmp
                                                          • Size 372B
                                                          • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                          • MD5 SHA1 SHA512 TLSH

                                                          9de5295e-3628-4bff-b961-962cf3712055.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\9de5295e-3628-4bff-b961-962cf3712055.tmp
                                                          • Size 252B
                                                          • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          19074144-e15c-45c5-bafd-c9377a8d9967.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\19074144-e15c-45c5-bafd-c9377a8d9967.tmp
                                                          • Size 13B
                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                          • MD5 SHA1 SHA512

                                                          0098e0e4-a840-4ec6-9223-87b663633494.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Temp\0098e0e4-a840-4ec6-9223-87b663633494.tmp
                                                          • Size 1B
                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                          • MD5 SHA1 SHA512

                                                          c90b4b5b-a205-4513-93ac-1a0411a00d44.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Temp\c90b4b5b-a205-4513-93ac-1a0411a00d44.tmp
                                                          • Size 10KB
                                                          • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          content.js

                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4284_1912295022\CRX_INSTALL\content.js
                                                          • Size 9KB
                                                          • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          manifest.json

                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4284_1608959516\manifest.json
                                                          • Size 165B
                                                          • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4284_16253882\manifest.json
                                                          • Size 135B
                                                          • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4284_744418983\manifest.json
                                                          • Size 160B
                                                          • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4284_834572458\manifest.json
                                                          • Size 43B
                                                          • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                          • MD5 SHA1 SHA512

                                                          memory/4284-2-0x0000000000400000-0x0000000000450000-memory.dmp