3723998a293f21bebfbd405bfa55c9eeb07e6587d330a78186e375a8e596a35e

Resubmissions

25/10/2026, 07:18

261025-h5ga3sf16q3

25/10/2026, 07:17

261025-h4nnrst12k8

24/10/2026, 12:24

261024-pk4dfaeh828

Analysis

user interaction
yes
max time kernel
296s
max time network
262s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
svt.exe
Size 4.5MB
Sample261024-pk4dfaeh82
SHA256 3723998a293f21bebfbd405bfa55c9eeb07e6587d330a78186e375a8e596a35e
MD5 d312eb7efbe2935eea6be2d3f3dc4329
SHA1 e14b4e26591f3822e1b5f7d12a4e825b131b61b3
SHA512 75cc51e16ea1513f0f101f1c71cb3c9da78620b0ab75e322efb05635eefa408284a0e977ff133eec758ec3cb473eb3352ccdbbf417cd27523767f9c7c9c2d645
SSDEEP 49152:ZSyrMfjzTdFTAp3NWlTXgt53iDViQK9m93pKngt53iDViQK9m93pKl+cKb0aztfP:Bo/spw63iUQKU73iUQKU+9KAaz1UjT
TLSH
T1A8260221B6A541DDD2BBE1B48B376907E7723442173065EB02D089AE1F37AD14E7FB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Badlisted process makes network request 7 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
154	7124	rundll32.exe
155	7124	rundll32.exe
156	7124	rundll32.exe
157	7124	rundll32.exe
158	7124	rundll32.exe
159	7124	rundll32.exe
160	7124	rundll32.exe

Drops file in Drivers directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\drivers\drmk.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\drivers\portcls.sys	DrvInst.exe

Executes dropped EXE 1 IoCs

pid	Process
1040	VBCABLE_Setup_x64.exe

Loads dropped DLL 1 IoCs

pid	Process
912	taskmgr.exe

Drops file in System32 directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\vbmmecable64_win10.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbaudio_cable64_win10.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbmmecable64_win10.inf	DrvInst.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbmmecable64_win10.PNF	VBCABLE_Setup_x64.exe
File created	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE4.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbaudio_cable64_win10.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE5.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE6.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE4.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\vbaudio_cable64_win10.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE5.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\vbaudio_cable64_win10.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{4ce1c527-d014-3e45-8c01-302ff60c8bff}\SETDCE6.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe

Drops file in Program Files directory 10 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\VB\CABLE\VBCABLE_ControlPanel.exe	VBCABLE_Setup_x64.exe
File created	C:\Program Files\VB\CABLE\pin_out.ico	VBCABLE_Setup_x64.exe
File opened for modification	C:\Program Files\VB\CABLE\pin_out.ico	VBCABLE_Setup_x64.exe
File created	C:\Program Files\VB\CABLE\vbMmeCable64_win10.inf	VBCABLE_Setup_x64.exe
File opened for modification	C:\Program Files\VB\CABLE\vbMmeCable64_win10.inf	VBCABLE_Setup_x64.exe
File opened for modification	C:\Program Files\VB\CABLE\VBCABLE_Setup_x64.exe	VBCABLE_Setup_x64.exe
File created	C:\Program Files\VB\CABLE\pin_in.ico	VBCABLE_Setup_x64.exe
File opened for modification	C:\Program Files\VB\CABLE\pin_in.ico	VBCABLE_Setup_x64.exe
File created	C:\Program Files\VB\CABLE\VBCABLE_Setup_x64.exe	VBCABLE_Setup_x64.exe
File created	C:\Program Files\VB\CABLE\VBCABLE_ControlPanel.exe	VBCABLE_Setup_x64.exe

Drops file in Windows directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\inf\oem3.inf	DrvInst.exe
File created	C:\Windows\inf\oem3.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	VBCABLE_Setup_x64.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	svchost.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1096_1518685568\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	svt.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	svt.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VBCABLE_Setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1416	msedge.exe

Checks SCSI registry key(s) 3 TTPs 48 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	VBCABLE_Setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	VBCABLE_Setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	VBCABLE_Setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	VBCABLE_Setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	VBCABLE_Setup_x64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	VBCABLE_Setup_x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 41 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-338007942-693956180-937915117-1000_Classes\Local Settings	taskmgr.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-338007942-693956180-937915117-1000\{A2B4AB21-6214-47B6-ADCE-A85CF7712A8C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-338007942-693956180-937915117-1000_Classes\Local Settings	msedge.exe

Modifies system certificate store 2 TTPs 13 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD	svt.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 5c000000010000000400000000100000190000000100000010000000cb9dd0fceaaa492f75ce292c21bbfbdd0300000001000000140000008094640eb5a7a1ca119c1fddd59f810263a7fbd17e00000001000000080000000080c82b6886d7017a000000010000000c000000300a06082b060105050703091d0000000100000010000000521f5c98970d19a8e515ef6eeb6d48ef140000000100000014000000ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a07f0000000100000016000000301406082b0601050507030306082b060105050703096200000001000000200000002cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf690b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520036000000090000000100000056000000305406082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030906082b0601050507030106082b0601050507030853000000010000007e000000307c301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301f06092b06010401a032010230123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000030000000ea09c51d4c3a334ce4acd2bc08c6a9be352e334f45c4fccfcab63edb9f82dc87d4bd2ed2fadae11163fb954809984ff10400000001000000100000004fdd07e4d42264391e0c3742ead1c6ae200000000100000087050000308205833082036ba003020102020e45e6bb038333c3856548e6ff4551300d06092a864886f70d01010c0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3134313231303030303030305a170d3334313231303030303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820222300d06092a864886f70d01010105000382020f003082020a02820201009507e873ca66f9ec14ca7b3cf70d08f1b4450b2c82b448c6eb5b3cae83b841923314a46f7fe92accc6b0886bc5b689d1c6b2ff14ce511421ec4add1b5ac6d687ee4d3a1506ed64660b9280ca44de73944ef3a7897f4f786308c812506d42662f4db979284d521a8a1a80b719810e7ec48abc644c211c4368d73d3c8ac5b266d5909ab73106c5bee26d3206a61ef9b9ebaaa3b8bfbe826350d0f01889dfe40f79f5eaa21f2ad2702e7be7bc93bb6d53e2487c8c100738ff66b277617ee0ea8c3caab4a4f6f3954a12076dfd8cb289cfd0a06177c85874b0d4233af75d3acaa2db9d09de5d442d90f181cd5792fa7ebc50046334df6b9318be6b36b239e4ac2436b7f0efb61c135793b6deb2f8e285b773a2b835aa45f2e09d36a16f548af172566e2e88c55142441594eea3c538969b4e4e5a0b47f30636497730bc7137e5a6ec210875fce661163f77d5d99197840a6cd4024d74c014edfd39fb83f25e14a104b00be9feee8fe16e0bb208b36166096ab1063a659659c0f035fdc9da288d1a118770810aa89a751d9e3a8605009edb80d625f9dc059e27594c76395beaf9a5a1d8830fd1ffdf3011f985cf3348f5ca6d64142c7a584fd34b0849c595641a630e793df5b38cca58ad9c4245796e0e87195c54b165b6bf8c9bdc13e90d6fb82edc676ec98b11b584148a0019708379919791d41a27bf371e3207d814633c284caf0203010001a3633061300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0301f0603551d23041830168014ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0300d06092a864886f70d01010c050003820201008325ede8d1fd9552cd9ec004a09169e65cd084dedcada24fe84778d66598a95ba83c877c028ad16eb71673e65fc05498d574bec1cde21191ad23183ddde1724496b4955ec07b8e99781643135657b3a2b33bb577dc4072aca3eb9b353eb10821a1e7c443377932beb5e79c2c4cbc4329998e30d3ac21e0e31dfad80733765400222ab94d202e7068dae553fc835cd39df2ff440c4466f2d2e3bd46001a6d02ba255d8da13151dd54461c4ddb9996ef1a1c045ca615ef78e079fe5ddb3eaa4c55fd9a15a96fe1a6fbdf7030e9c3ee4246edc2930589fa7d637b3fd071817c00e898ae0e7834c325fbaf0a9f206bdd3b138f128ce2411a487a73a07769c7b65c7f82c81efe581b282ba86cad5e6dc005d27bb7eb80fe2537fe029b68ac425dc3eef5ccdcf05075d236699ce67b04df6e0669b6de0a09485987eb7b14607a64aa6943ef91c74cec18dd6cef532d8c99e15ef2723ecf54c8bd67eca40f4c45ffd3b93023074c8f10bf8696d9995ab499571ca4ccbb158953ba2c050fe4c49e19b11834d54c9dbaedf71faf24950478a803bbee81e5da5f7c8b4aa1907425a7b33e4bc82c56bdc7c8ef38e25c92f079f79c84ba742d6101207e7ed1f24f07595f8b2d4352eb460c94e1f566477977d5545b1fad2437cb455a4ea04448c8d8b099c5158409f6d64949c065b8e61a716ea0a8f182e8453e6cd602d70a6783055ac9a410	svt.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5	rundll32.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	svt.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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	rundll32.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 5c000000010000000400000000080000190000000100000010000000d8b5fb368468620275d142ffd2aade370300000001000000140000004eb6d578499b1ccf5f581ead56be3d9b6744a5e56800000001000000000000007e000000010000000800000000c0032f2df8d6011d0000000100000010000000c6cbcafa17955c4cfd41eca0c654c3610b000000010000001200000056006500720069005300690067006e0000001400000001000000140000007fd365a7c2ddecbbf03009f34339fa02af3331336200000001000000200000009acfab7e43c8d880d06b262a94deeee4b4659989c3d0caf19baf6405e41ab7df09000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b060105050703017f000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030153000000010000006300000030613021060b6086480186f8450107170630123010060a2b0601040182373c0101030200c0301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000e91e1e972b8f467ab4e0598fa92285387dee94c9040000000100000010000000cb17e431673ee209fe455793f30afa1c2000000001000000d7040000308204d3308203bba003020102021018dad19e267de8bb4a2158cdcc6b3b4a300d06092a864886f70d01010505003081ca310b300906035504061302555331173015060355040a130e566572695369676e2c20496e632e311f301d060355040b1316566572695369676e205472757374204e6574776f726b313a3038060355040b1331286329203230303620566572695369676e2c20496e632e202d20466f7220617574686f72697a656420757365206f6e6c79314530430603550403133c566572695369676e20436c6173732033205075626c6963205072696d6172792043657274696669636174696f6e20417574686f72697479202d204735301e170d3036313130383030303030305a170d3336303731363233353935395a3081ca310b300906035504061302555331173015060355040a130e566572695369676e2c20496e632e311f301d060355040b1316566572695369676e205472757374204e6574776f726b313a3038060355040b1331286329203230303620566572695369676e2c20496e632e202d20466f7220617574686f72697a656420757365206f6e6c79314530430603550403133c566572695369676e20436c6173732033205075626c6963205072696d6172792043657274696669636174696f6e20417574686f72697479202d20473530820122300d06092a864886f70d01010105000382010f003082010a0282010100af240808297a359e600caae74b3b4edc7cbc3c451cbb2be0fe2902f95708a364851527f5f1adc831895d22e82aaaa642b38ff8b955b7b1b74bb3fe8f7e0757ecef43db66621561cf600da4d8def8e0c362083d5413eb49ca59548526e52b8f1b9febf5a191c23349d843636a524bd28fe870514dd189697bc770f6b3dc1274db7b5d4b56d396bf1577a1b0f4a225f2af1c926718e5f40604ef90b9e400e4dd3ab519ff02baf43ceee08beb378becf4d7acf2f6f03dafdd759133191d1c40cb7424192193d914feac2a52c78fd50449e48d6347883c6983cbfe47bd2b7e4fc595ae0e9dd4d143c06773e314087ee53f9f73b8330acf5d3f3487968aee53e825150203010001a381b23081af300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106306d06082b0601050507010c0461305fa15da05b3059305730551609696d6167652f6769663021301f300706052b0e03021a04148fe5d31a86ac8d8e6bc3cf806ad448182c7b192e30251623687474703a2f2f6c6f676f2e766572697369676e2e636f6d2f76736c6f676f2e676966301d0603551d0e041604147fd365a7c2ddecbbf03009f34339fa02af333133300d06092a864886f70d0101050500038201010093244a305f62cfd81a982f3deadc992dbd77f6a5792238ecc4a7a07812ad620e457064c5e797662d98097e5fafd6cc2865f201aa081a47def9f97c925a0869200dd93e6d6e3c0d6ed8e606914018b9f8c1eddfdb41aae09620c9cd64153881c994eea284290b136f8edb0cdd2502dba48b1944d2417a05694a584f60ca7e826a0b02aa251739b5db7fe784652a958abd86de5e8116832d10ccdefda8822a6d281f0d0bc4e5e71a2619e1f4116f10b595fce7420532dbce9d515e28b69e85d35befa57d4540728eb70e6b0e06fb33354871b89d278bc4655f0d86769c447af6955cf65d320833a454b6183f685cf2424a853854835fd1e82cf2ac11d6a8ed636a	rundll32.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1764	svt.exe
1764	svt.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4180	OpenWith.exe
4320	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe
1096	msedge.exe

Suspicious use of AdjustPrivilegeToken 27 IoCs

description	pid	Process
Token: 33	1232	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1232	AUDIODG.EXE
Token: SeDebugPrivilege	4320	taskmgr.exe
Token: SeSystemProfilePrivilege	4320	taskmgr.exe
Token: SeCreateGlobalPrivilege	4320	taskmgr.exe
Token: SeBackupPrivilege	4828	svchost.exe
Token: SeRestorePrivilege	4828	svchost.exe
Token: SeSecurityPrivilege	4828	svchost.exe
Token: SeTakeOwnershipPrivilege	4828	svchost.exe
Token: 35	4828	svchost.exe
Token: 33	4320	taskmgr.exe
Token: SeIncBasePriorityPrivilege	4320	taskmgr.exe
Token: SeAuditPrivilege	3400	svchost.exe
Token: SeSecurityPrivilege	3400	svchost.exe
Token: SeLoadDriverPrivilege	1040	VBCABLE_Setup_x64.exe
Token: SeRestorePrivilege	4364	DrvInst.exe
Token: SeBackupPrivilege	4364	DrvInst.exe
Token: SeRestorePrivilege	4364	DrvInst.exe
Token: SeBackupPrivilege	4364	DrvInst.exe
Token: SeLoadDriverPrivilege	4364	DrvInst.exe
Token: SeLoadDriverPrivilege	4364	DrvInst.exe
Token: SeLoadDriverPrivilege	4364	DrvInst.exe
Token: SeDebugPrivilege	912	taskmgr.exe
Token: SeSystemProfilePrivilege	912	taskmgr.exe
Token: SeCreateGlobalPrivilege	912	taskmgr.exe
Token: 33	912	taskmgr.exe
Token: SeIncBasePriorityPrivilege	912	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe
4320	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4180	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1764 wrote to memory of 4528	1764	svt.exe	82
PID 1764 wrote to memory of 4668	1764	svt.exe	102
PID 1764 wrote to memory of 1040	1764	svt.exe	104
PID 3400 wrote to memory of 2244	3400	svchost.exe	106
PID 3400 wrote to memory of 4364	3400	svchost.exe	107
PID 1764 wrote to memory of 1096	1764	svt.exe	110
PID 1096 wrote to memory of 772	1096	msedge.exe	111
PID 1096 wrote to memory of 1416	1096	msedge.exe	112
PID 1096 wrote to memory of 2272	1096	msedge.exe	113
PID 1096 wrote to memory of 2272	1096	msedge.exe	113
PID 1096 wrote to memory of 2272	1096	msedge.exe	113
PID 1096 wrote to memory of 664	1096	msedge.exe	114
PID 1096 wrote to memory of 664	1096	msedge.exe	114
PID 1096 wrote to memory of 2328	1096	msedge.exe	117
PID 1096 wrote to memory of 2328	1096	msedge.exe	117
PID 1096 wrote to memory of 2328	1096	msedge.exe	117
PID 1096 wrote to memory of 4548	1096	msedge.exe	116
PID 1096 wrote to memory of 4548	1096	msedge.exe	116
PID 1096 wrote to memory of 4548	1096	msedge.exe	116
PID 1096 wrote to memory of 232	1096	msedge.exe	118
PID 1096 wrote to memory of 4748	1096	msedge.exe	119
PID 1096 wrote to memory of 4972	1096	msedge.exe	120
PID 1096 wrote to memory of 232	1096	msedge.exe	118
PID 1096 wrote to memory of 232	1096	msedge.exe	118
PID 1096 wrote to memory of 4748	1096	msedge.exe	119
PID 1096 wrote to memory of 4748	1096	msedge.exe	119
PID 1096 wrote to memory of 4972	1096	msedge.exe	120
PID 1096 wrote to memory of 4972	1096	msedge.exe	120
PID 1096 wrote to memory of 4852	1096	msedge.exe	121
PID 1096 wrote to memory of 4852	1096	msedge.exe	121
PID 1096 wrote to memory of 4852	1096	msedge.exe	121
PID 1096 wrote to memory of 3884	1096	msedge.exe	123
PID 1096 wrote to memory of 3884	1096	msedge.exe	123
PID 1096 wrote to memory of 2348	1096	msedge.exe	124
PID 1096 wrote to memory of 2348	1096	msedge.exe	124
PID 1096 wrote to memory of 1100	1096	msedge.exe	126
PID 1096 wrote to memory of 1100	1096	msedge.exe	126
PID 1096 wrote to memory of 1100	1096	msedge.exe	126
PID 1096 wrote to memory of 5124	1096	msedge.exe	127
PID 1096 wrote to memory of 5132	1096	msedge.exe	128
PID 1096 wrote to memory of 5124	1096	msedge.exe	127
PID 1096 wrote to memory of 5132	1096	msedge.exe	128
PID 1096 wrote to memory of 5508	1096	msedge.exe	130
PID 1096 wrote to memory of 5572	1096	msedge.exe	131
PID 5572 wrote to memory of 5788	5572	msedge.exe	132
PID 1096 wrote to memory of 6088	1096	msedge.exe	133
PID 1096 wrote to memory of 6088	1096	msedge.exe	133
PID 1096 wrote to memory of 5216	1096	msedge.exe	134
PID 1096 wrote to memory of 5216	1096	msedge.exe	134
PID 1096 wrote to memory of 5420	1096	msedge.exe	135
PID 1096 wrote to memory of 5436	1096	msedge.exe	136
PID 1096 wrote to memory of 5420	1096	msedge.exe	135
PID 1096 wrote to memory of 5436	1096	msedge.exe	136
PID 1096 wrote to memory of 6072	1096	msedge.exe	137
PID 1096 wrote to memory of 6072	1096	msedge.exe	137
PID 1096 wrote to memory of 5736	1096	msedge.exe	140
PID 1096 wrote to memory of 6416	1096	msedge.exe	141
PID 1096 wrote to memory of 6420	1096	msedge.exe	142
PID 1096 wrote to memory of 6508	1096	msedge.exe	144
PID 1096 wrote to memory of 6508	1096	msedge.exe	144
PID 1096 wrote to memory of 6508	1096	msedge.exe	144
PID 1096 wrote to memory of 6500	1096	msedge.exe	143
PID 1096 wrote to memory of 6500	1096	msedge.exe	143
PID 1096 wrote to memory of 6612	1096	msedge.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\svt.exe
"C:\Users\Admin\AppData\Local\Temp\svt.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1764
- C:\Windows\system32\schtasks.exe
  "C:\Windows\system32\schtasks.exe" /Query /TN "svt"
  2⤵
  PID:4528
- C:\Windows\system32\tar.exe
  "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\AppData\Local\svt\vbcable\VBCABLE_Driver_Pack.zip" -C "C:\Users\Admin\AppData\Local\svt\vbcable"
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\svt\vbcable\VBCABLE_Setup_x64.exe
  "C:\Users\Admin\AppData\Local\svt\vbcable\VBCABLE_Setup_x64.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Suspicious use of AdjustPrivilegeToken
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://vb-audio.com/Cable/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f4,0x7ffb5d67c188,0x7ffb5d67c194,0x7ffb5d67c1a0
    3⤵
    PID:772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,7873484826491384359,2764662444679374387,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,13742149208064339414,3428564756814331021,262144 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
    3⤵
    PID:2272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,14146091634593362825,17038647563605504079,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:13
    3⤵
    PID:664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,5249481882249123479,11455259204727607554,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,6112917479207095564,1527877250434910601,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
    3⤵
    PID:2328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,14121324286994222425,598579986462400900,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
    3⤵
    PID:232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,4374441912693530424,1292886357951139140,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
    3⤵
    PID:4748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4352,i,2498082787100896955,2268839696013749152,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
    3⤵
    PID:4972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4392,i,5389165313877947048,9802942346877260695,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:9
    3⤵
    PID:4852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3964,i,8377095600371006327,14822854692008313402,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:14
    3⤵
    PID:3884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,3639060754633954472,7896132845932463821,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:14
    3⤵
    PID:2348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3516,i,1677442078863699063,4843107772007562232,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
    3⤵
    PID:1100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,17478129254846266042,5744701361359017721,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:14
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,10402982877296030359,17284878557925334413,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
    3⤵
    PID:5132
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,8450911897509115967,11156838279996511819,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:14
    3⤵
    PID:5492
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,8450911897509115967,11156838279996511819,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:14
    3⤵
    PID:5508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,13687061946108127173,11464243521504927756,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5572
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1128
      4⤵
      PID:5788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,13128737235961462901,17264154706017134594,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,2610522667906852264,10565439049661143989,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:14
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,8524686705085134962,16465494595468987846,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:14
    3⤵
    PID:5420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,13626134015910230935,7562128876744816487,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:14
    3⤵
    PID:5436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7012,i,18030495690257511036,4141632278523229183,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:14
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,16011660434996762218,10011871685832023113,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
    3⤵
    PID:5736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,3359153277119049632,16650792753229246054,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
    3⤵
    PID:6416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,3914882895899527512,4174131243320528611,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=3920 /prefetch:14
    3⤵
    PID:6420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,11815938139962330464,18096616906280322218,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
    3⤵
    PID:6500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5820,i,9219041084767884070,9421315275260040482,2097152 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:1
    3⤵
    PID:6508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,6436144468502872105,3860704349555660607,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
    3⤵
    - NTFS ADS
    PID:6612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,9947100354218839231,15803569961662393161,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:14
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,13205889801908639673,3271355726010691850,524288 --field-trial-handle=2164,i,12970871576098989607,13705452995289264015,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
    3⤵
    PID:6248

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004E4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2160

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:788

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:4064

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4320

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4528

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k SDRSVC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4828

C:\Windows\System32\cs2w8b.exe
"C:\Windows\System32\cs2w8b.exe"
1⤵
PID:5008

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:2148

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:2436

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4180

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3400
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{b42900aa-66a0-9248-9941-3742fde12b46}\vbmmecable64_win10.inf" "9" "412cfd737" "000000000000014C" "WinSta0\Default" "000000000000015C" "208" "c:\users\admin\appdata\local\svt\vbcable"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:2244
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:c14ce8840c48fa1f:VBCableInst.NTamd64:3.3.1.7:vbaudiovacwdm," "412cfd737" "000000000000014C" "4960"
  2⤵
  - Drops file in Drivers directory
  - Drops file in Windows directory
  - Suspicious use of AdjustPrivilegeToken
  PID:4364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1212

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:912

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" cryptext.dll,CryptExtOpenCAT C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45\vbaudio_cable_2003.cat
1⤵
- Badlisted process makes network request
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
PID:7124

C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45\VBCABLE_Setup_x64.exe
"C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45\VBCABLE_Setup_x64.exe"
1⤵
PID:6124

C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45\VBCABLE_Setup.exe
"C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45\VBCABLE_Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7B8944BA8AD0EFDF0E01A43EF62BECD0_413DBDA45FEA544CB2DF184EDF14A743

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_413DBDA45FEA544CB2DF184EDF14A743
Size 5B
SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
MD5 5bfa51f3a417b98e7443eca90fc94703
SHA1 8c015d80b8a23f780bdd215dc842b0f5551f63bd
SHA512 4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399
MD5 SHA1 SHA512

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Path C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
Size 64KB
SHA256 2f9a5eeb5ac8cec52a3e73621e4d392f501f5d657dfec3215ccd40eec317208d
MD5 9e466b4837d8431be725d6b9c1b4d9ef
SHA1 3f247b7c89985a41d839cad351cd0fc182fcb284
SHA512 01de0fda555d63b5c38339b0f6d38c28de2a882643439679e63cf5d75f13516b57dc90e8dfb8c638bda328fc12342e58d1e501acec8f85b92dbd5589dac06418
SSDEEP 3:afzl9/lGlll/l/lXp9ZjrPBY06llql9F///ZP:arl9/0dPBY0OcV//J
TLSH
T1945311A2A283022BC802033008CF0A883EB822088B8300A282208230C8A8B0082B22C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Path C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
Size 4B
SHA256 326410334921c9a003ca819820b2f26e6a31201d54a4b7dec0cf621756e46a94
MD5 22d47fde80501801656894bc91506aa6
SHA1 c5550f5450eca9b24416c56d722b7a6d7d63bfb4
SHA512 8abc97b035bc4a660184b1fd51ef190fc620d4017821d5e9ced6aee82fdc720be05eb412b606c4dcf2edbe354c370609bfc6ea8b5e14b6a26122f37ea5ffc6d2
MD5 SHA1 SHA512

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Path C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
Size 960B
SHA256 69f19f2ab2f3625faca623477864766ab1ef3a21712bc892d7b2b0886585b3f9
MD5 16846df493521e84fe47cd6b6451ec8f
SHA1 6d99eb017c5aec08d3a7e908bbd4a051ce250c02
SHA512 aefa5121601b8273cff6b79b7f76417c71e29e835b66faf3e1a67d0d38fb9ebe90320b75493fd5c4a2d9ea3e3c485d0a84bcdbfb78c26a8ecee3175cd8bd93cd
TLSH
T1B6118C85BBC32CB0E33978700069A2201322F1221CC2E24C4AC4C058CA30104E832FA8
MD5 SHA1 SHA512 TLSH

Submit Download

0af6bc4e-68ea-475e-8b9b-045db4294380.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0af6bc4e-68ea-475e-8b9b-045db4294380.tmp
Size 18KB
SHA256 220edefd1601a2cf5a0f2fc6a60e8d6350cd358b02540262b18f90e366f94838
MD5 17fe1303b38c54f7396cbd501f98f30e
SHA1 cdac26e987228d9e16eaecef01fa785459da9d2e
SHA512 84950b758d031dc800b85a448c21c2c70762583527879121eee0613d1b75c3fdb86d4afbcf0e74f88ecef9871c08d3bf360844f0ef8b73295475d19cbd485ba2
SSDEEP 384:nEQkUSvV8NRFgYsreuy9ckX5mV8C3zbTY2IgIIlz:0VOwpsALDnY5gLJ
TLSH
T101826B35AC79BC278AF7F510F54A3A539EA4A167E9841F44D6C99B2C00CE2CC370B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f4ce764-1e53-4062-bf14-2db85c232233.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f4ce764-1e53-4062-bf14-2db85c232233.tmp
Size 8KB
SHA256 f571f96ebd3757df7acc5e5dcea65003fe3ae487f3c005e78183f852651eeee1
MD5 048c2df8d97dcb5efa0b12a588d12142
SHA1 0b85e98a8252c0ffae3bf996c80005ff4673cc34
SHA512 ae09dd72afc66d487d267e7534203d2e68f5177edeb69b3cde5ca0eded9504d343f53d2849a762af41635177291a7fecfa837b46d5342a8f8fc1b8bb677d8a0c
SSDEEP 192:oGN06WL8QmiUyjeuEbnckX5m9r8C3zbAMeNqYENU6:oGN06aMnuQckX5mV8C3zbmYU6
TLSH
T17B12F875B878BC274EE3B414B8873B27ADA42167ED846F40E6D84A1D00DE79C370B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b82bbee-3b5f-4412-995b-a2c672ce38c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4b82bbee-3b5f-4412-995b-a2c672ce38c6.tmp
Size 18KB
SHA256 7051abe53be2b2afff13c5ad040524fd1f571e1893c5b39e19bd4fe6e944c1fe
MD5 4bfe227cdd66bce46f4a289755865a84
SHA1 39b16cfc258914a81ec80f650524d0f54b8c8b40
SHA512 dc0273cccac037377a0467afb56f606a12011d11accfcaae94b5950f8e2cb724a54760a030b8c1499fbb7db5afeed2d644c8efd24aadc7fcbfca75b0516398bd
SSDEEP 384:nUQkUSvV8NRFgYsreuy9ckX5mV8C3zbTY2IgIIlz:EVOwpsALDnY5gLJ
TLSH
T16E825B75AC79BC278AF7F510F54A3A539EA4A167E9841F44D6C99B1C00CE2CC370B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9981dc54-bfae-4862-bfc6-a18ee207b29f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9981dc54-bfae-4862-bfc6-a18ee207b29f.tmp
Size 18KB
SHA256 947d8cc9b06ae96ec2903efc3e55f9267582ce363caecab32aeae8d2ee43a533
MD5 a9ab8975d211eeaf7d12611cc866698b
SHA1 231d1153c1cb43553797e6166b9ddc7dda74b669
SHA512 e7e6fdd2a46adffe95858373f3fbbbdc9a300c7225cdfbeb70b91f5d1bf4bfd9cbfb2dca4a87dec91e73cd392451b209a631e5021007c49d9d44144e6662d9a8
SSDEEP 384:nZQkUSvR8NRWgYsr8uy9ckX5mV8C3zbHY2IgIIlz:7RxSpsALDDY5gLJ
TLSH
T116825B35AC79BC278AF7F510F54A3A539EA4A167E9841F44D6C99B2C00CE2DC370B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d5203709d191cefd619c9b1777d39aff6cab97309c7e64a26cca768a0982a1c1
MD5 557bc82a1999f7b11291385864c1d95a
SHA1 3e6c218368478c58448f56f0a579d50a586fef13
SHA512 a9b3c0413a0c2e323247435861e122817cc75b3a631c1cb370d12f61e774b277ad13ae194d55801409143528ecdaa2800eb07e6939afdd052a89984749a6f9fc
TLSH
T16BD01261B93739EDE16A617855795A4459009A53419201115A020C6D596419368B59E8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2aa0ef8543982e42f2141a859cd78cf0f780a6b139ea99c1c2ad33fd4f56cb7b
MD5 cf1ef0f6a6585003596ad6b09c83cbc3
SHA1 80edf8da49bc458828bf3125b8b4aa3036814e22
SHA512 0c23492cf0d4ab37f4a7f42f865cc6238ff5b3cdabf212ce523b204513d6aa133d66ec3e381caf548455fba3f37294ba5fdf00ad1dbaac1945115047c226530d
TLSH
T198D012A1FB31008CE4801134613A1B281D00810000C301015510009D4C441D2657D024
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 635a17b62bc802a1d6d2ac977e63b5a2027aa2bf3d1b5551e63352afa4362fd9
MD5 7fe12d00d13e30949f1419fc02757c7e
SHA1 7fe9042bd95f9f143a17aee8b65dd97f8f4eb44e
SHA512 c9251c530a2927beaa3f58a69cd075267ab37b951ce23f2f159ff17f194ed9b03a08d41f5cce2d4dd1a091898135db5440df49406cc67c2f8fa1bd50c44edd4e
TLSH
T1B1D011A2FB32008CE0802238A23B2B282E00820000C30000AA2000AEAC882A2AABE028
MD5 SHA1 SHA512 TLSH

Submit Download

1b1caa97-0134-47cc-a3c1-37c7a2c4937e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b1caa97-0134-47cc-a3c1-37c7a2c4937e.tmp
Size 11KB
SHA256 5aa7d8dd9c79636bb4a4d5ad9e9ade8ed7c1f8db256a931eab5790d429212873
MD5 b187e53708d52915918f5c197175efc3
SHA1 b737855e46bfb1a0e374c3715fa0eecbf40d39f8
SHA512 8ad834af7c9e24d62c5bd2c04f8fe8bbb1e3f3208d9f660b01494ac85327753315b8f5bbdd65f3ddcf4b4a6fe1391001cf7becf6ad505dc8cc66111e6743f51b
SSDEEP 192:sxZbkRBT4/ft/suF8o/MiiIdpW7/W6+WNM7rXeIVJrIQVIv0eK30Hbnc10Ig5qJ:sxZwL4/fVsuKuk/bMXeyrrVxE4GE
TLSH
T1C842A556AA38793B4CC6F219B655BF53E2F9103291D01E85AAFCC61C01EF6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47cda0c2-eaba-47e1-9b95-3eaedb001c87.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47cda0c2-eaba-47e1-9b95-3eaedb001c87.tmp
Size 33KB
SHA256 c756638cf0ea07d91cb071e7026dfca9b416aa04cc659618832fb9bc4b0de1af
MD5 e4d6f4cbdbefc9ef65915776a03575df
SHA1 96665aff84f6311f9c09c627150b23ac30a62f18
SHA512 86ab6f34cdd0e46c22279fdd1e303a6f9b620b806392627fba394862f1258a35ea66cb197c09fcc419f6979e98315edecda555fe7e53d11457f047eba5d021f8
SSDEEP 768:irY2I87M2Zx7pLuLjXTWRmjdQVx8F1+UoAYDCx9Tuqh0VfUC9xbog/OV38ILyLlM:irY2I87M2ZnEjXTWRmjdQVxu1jaK8ILZ
TLSH
T11EF2EA7B380CCB7E4FC05E9DDD1A6F9BADA8028B9698C94047FA845C02C77EE51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7efec38f-f113-4277-b82b-87c81e07eef8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7efec38f-f113-4277-b82b-87c81e07eef8.tmp
Size 12KB
SHA256 37acb418998bae365a30fb0a468ec63ac5a765861cf8dca303c72311261b56b3
MD5 9608709928a20ff1dfa9e19626b4633f
SHA1 6ade5570d764b9503194a2c6ff7a48cf64c66315
SHA512 0de9be2119ce97732bb8bb6e3ca5a314ef69dc78fbce239d2033de2ff2567973e8e83cb0933adecd9858d1a761c07c62eae219650bae841396a2c75687385a70
SSDEEP 192:sxZbkR4T4/ft/s6WpVOF8o/YiiIdpI7/W6+WNew7rXeIVJrIQVIv0eK30nqZcQuC:sxZwE4/fVs6WvOKYC/bLXeyrrVxERFC
TLSH
T14C42C6566938697B8CC7E269FA55BF63E2F9103291D01E45ABFC891C01EF6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 23KB
SHA256 34ab51f51a48801028b5954908c235bde80b8bf496c203ef351a79e8379d5e1d
MD5 b0a436d75e81066cced5a35c2089f250
SHA1 cfa95ad57d40b0242d508a54f655b3e58168b399
SHA512 8e7a6536e7286937791980e5d17210f84206a1a7d68612aa466bc747b4d1b7b75c4b6309537fde9bd2301e4d6c3d52831e5dcc27e3fba201cd166b7009c4ac8e
SSDEEP 384:ZLtU+DyyNCYLDXPRKDOr9GoEzx+vol1vQAqCjqRR9kvkYJcyCaUyHP3Kk7I2XDAr:56+DyyNrzPKOrYHcvivQFCWXSkzynHPi
TLSH
T167B2D00299973164EF56F2EEE9107270BA9B7AADC38F14A28F4D83DA41A45703258FD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e638d9b9cf977e0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6e638d9b9cf977e0_0
Size 332B
SHA256 3cfaec5b1e299489b837451843e6f92a862a33ed3186ca6c97cc68e16d52fd37
MD5 b9e66832522dfb6378ee32731d9cb426
SHA1 1f48be25d9b1a43592d759f085e91b7d84095805
SHA512 ce94118b8d312960c3aca60f94c73379824c1f422b0abf096bd2a8b70f1b02eb427aa4e927f80cf30c8009fbd72d9edf0e3da83d45e186a2318749a4a57d9ee6
TLSH
T16AE07D3382AD48C8DA2E44B5CD5D524EBF17D05504D9C5F68191B1377F1C1F1BA16720
MD5 SHA1 SHA512 TLSH

Submit Download

b97b21e736470eff_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b97b21e736470eff_0
Size 241B
SHA256 98ef8c3d92b3133e8d70721c9875f56b579744a13895fec54ba20ac403b07e8e
MD5 50c3d81c8de5710808576f749d422147
SHA1 03f9c956a28272770a23ca0ddeb0ed0640d5f6c6
SHA512 18bb6b0f06fcb6c936abfeec1e17b93f022cd6bcb38b0b3e1b752cced1f3572ff5141434d07c684f662bea9acad5f811ab299107abcfa245db989d39ce851d66
TLSH
T132D0A7AB6D980404CE7CE8F8D96A624DCA2271695485C6604062A1F285684B3A149115
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 18f3f949c62b8a14394fc037e5370ea48f9b95b7ce11cb9f542065fee0d4c29a
MD5 bd429598ed70033874f85a2df00bb3a3
SHA1 0e5000109021ed7f0eb92558976e6cc49d853d09
SHA512 a4f2e4570e1a2ce7e39c091a2981791b144187b68f5571c981605691f98bbda378a641a1a22458ac3f9524eb4054fe6d0296c21c943a69434675b4a30381018e
TLSH
T178717282E5A44061CBBDA4F8F9E904C7F97BC086B6C3AE0201F8C9BB5C3B765705D044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f691fb8eb595d11dac82a3d9c796ef67c5bff4b602da3dc9933ace0b6fe29031
MD5 a94946bf04f9b30b0fd4cf84d82bfcc2
SHA1 964d7c9d1a6402ab4baa51ce43f7bd4aaef69389
SHA512 c8f71cd74315c9f715c97d29c1697bc49daf46553ab1522306771403595cfff4918b85d530a45ce0468e7f12e2b81f397370baa4186282c1b5130751895f25b4
TLSH
T13B616282C95444A2C77D65F8F8F800D7F9BBD086B783AE0205A9CDBB5C3BB16B05D144
MD5 SHA1 SHA512 TLSH

Submit Download

2acfe374-97a4-4eaa-a5f0-aafb4d5d4c5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2acfe374-97a4-4eaa-a5f0-aafb4d5d4c5b.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1096_1113431837\CRX_INSTALL\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1096_1113431837\CRX_INSTALL\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1096_1113431837\CRX_INSTALL\service_worker_bin_prod.js
Size 137KB
SHA256 63b3d006783e106d3aacb9cda3224d48a218dd45d50db663d38b45d2d9b2bff0
MD5 97b43ffd3c415ea9887f0113d43f5a2d
SHA1 1afcebee8c88dcc9c3ff7d43ffdc3b00a329f9c0
SHA512 279521e204cebf954dbf991ba66b9d4a30534d77650c898ce2f052034263d9dfd9a1ea122a548f51a061ebee9859fd2e88860ebece906b23b9d6dffdc7d85c97
SSDEEP 3072:cFMbB96nK7qtBnZ8CDPDHbSVh6lGE4C0S1wmF9cWMzK:cFMqMGvSVh6lGE4CymFiWMzK
TLSH
T147D3D9CCF6A5B0124363A5F5402F000BB239B8B9E44C85A8F288D9E97D7556D8277F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

343640f1-67d7-4c52-acef-3524394e4776.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\343640f1-67d7-4c52-acef-3524394e4776.tmp
Size 6KB
SHA256 76afe27b278e1188fbe90574ddc7b804b15553be4c86630f35c5f81484db26a2
MD5 9bd3b1e66f37f896280c42954c8e9845
SHA1 cb81ee6c6eb80a6d55b36b67e76beb15b2aebb7c
SHA512 ab038e9f406a373cf8291023514c63ae8db235b7833dce06ab708c8eb975c7005294dec0c9ff3b0d2cab5f7b0f62bb691a17a4ad6c93331a94dd1dcb2ac560b3
SSDEEP 192:DTgoVNesgwfNRrIuxPVnsurtwuHeMyliJk8Q:DTgoVNesgwfNRrIuxPVnsurtwuHeMylp
TLSH
T186D1BEE7C7E4892D8D2151F4A6353E6BCE1E0928522C3C2AC9D9AF6BD3F1430E20195F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f8db645-6496-4fcf-995e-70c2eccee1d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3f8db645-6496-4fcf-995e-70c2eccee1d7.tmp
Size 6KB
SHA256 4fd2ba3b486ea8fcbb1057c6e8ebe7fcffdd8c5a96d8a77b468add46b20571b4
MD5 70d52e7085b0256e52a901dc395d41df
SHA1 c7589731aca992a2e5c85530ff3dd1c0837b4940
SHA512 266814d860f390f9072c51219e43ca99a3b49846ab68f512c92a2e192349269508307928c40f5c996ea1dfb9b995dd7626316c86a22c4bc493a7cd17f33f66a9
SSDEEP 192:DTgoVNesgwfNRrIuxPVcurtwuHeTliF/EPcQ:DTgoVNesgwfNRrIuxPVcurtwuHeTliFk
TLSH
T1F3D1BEE7C7F4892D8D2155F4A6352E6BCE1E0928522C3C2AC9D9AF6BD3F1431E20195F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e059828-4100-4cc8-893a-6e0e5250acec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9e059828-4100-4cc8-893a-6e0e5250acec.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ee628b81-9dff-4e8c-993c-195e04db5ccf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ee628b81-9dff-4e8c-993c-195e04db5ccf.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ad1346bbbbb0a2bc593a5cedd19af7b077c69d800468a096f0ef01dbd7a14666
MD5 02f7a771d9c4a15d7deedc2f09890bd5
SHA1 3c219f6866f559d26e9fc91b29aa03a219fdc51a
SHA512 8e3ca0552fd79f6d53b26daf4ba0872e840c6670a67142fcff7a2b658a0efcb4414a71edff711b3c632d3b05045cb5379a0677ac548bdfacc13be757a48eb57f
SSDEEP 48:K0iI/KDycjyRkIvK9WcVDkfzxl5kJlSPIS7kKXB/ZkrT00rytHIhKwg0V:K0iIKDyKikgK9WmEIKxG/2HWKwgM
TLSH
T178B1FF8576BA428638BE25188578873B564131B3305DE5AB7FBC00A38F77F450DBCAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 162B
SHA256 14c945d1a375fece67da653a1fa763a13761b95aa4e76f29bfb03375e30ed6b2
MD5 a3e5c14845cbad64965e145b1b88ddd1
SHA1 f408c70239726320b0badb9ac4201e63677ffd9f
SHA512 49e30b87912357d6c832380267a034ece8035a165d441b5669b1a423bcd183aa38803ad001e9f10a5a6a05c3dd07f507764a40ec477f96a099929a5e62df5b62
TLSH
T1DEC08CF3127164AA6B30EAF02834722DD03B8E0C9CC8CCF28A05F44231B83228107920
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 236B
SHA256 781da3fbef682beefbfbf14b808c7b46eae5d862eb4f469859834cff44681e73
MD5 3c0bcb1041ef4e820b4fc6374b8f500f
SHA1 e0807b45c5d6431d44135a0d0a1af9bad836da11
SHA512 3971ada80d9d86b9966b95d3658f5e67f87e1ca20e79f3f32e404011be10de527944eee2577b4577d255cd8bc2f05ee4e8856eda6da0a254eac3287157ff4f86
TLSH
T19BD0A7E3227119A79730DAE03835726D903B990D4CC9CCE9AB06B44230B87228552A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 152B
SHA256 4a2a27ddc81d48e79b777e1221862b1207530d42def07cb7f1ca6ba5e5cc72c6
MD5 aacdba700c7469c547e75bf0c5fef6a2
SHA1 0f3af6f791641be353a6543a74e8a1289c75c0f2
SHA512 01737e560b10e5f48015c143f870fd071ad5bd5dff66a7f2722f910efdfd6b27e92e4857dbf9a44676a06d610fe0b5f0797cb10dbd2cb13bc31dc03803dfd48e
TLSH
T17CC08CE3112088AB87709DE43021B21DD01B820C4CD9CCE8AA08A10210B4A324883A25
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

a8eb66bb-5da1-4906-993b-aa8c19b8abb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8eb66bb-5da1-4906-993b-aa8c19b8abb9.tmp
Size 11KB
SHA256 b9cfde5efd24b9b20946617cded463fbc02f477f7bac4c41037211052e9f865c
MD5 cf569e2c4590d606a61bcd50bd310d01
SHA1 7dfce0d619cc3fa213a2fb40bd062db3826105f5
SHA512 4eae352bc1da6b4e231388ae288b322e8cb83ac5f069448d84c447fe7884346b0308125df37f3a17d936e98615c9ab95963391b65dd0ed22f6da713ace525840
SSDEEP 192:sxZbkRBC4/ft/smF8o/MiiIdpW7/W6+WNM6N4/eIVJrIQVIv0eK30HKxc10Ig4J:sxZwq4/fVsmKuk/bf4/eyrrVxEVGc
TLSH
T14432A556AE38793B4CCAE219BA55BF53E2F91032A1D41E45AAFC851C00EE6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5bd13d8-5e34-41b2-94e5-5c9578ba1fdb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5bd13d8-5e34-41b2-94e5-5c9578ba1fdb.tmp
Size 11KB
SHA256 1d80b9124aff4ffabadcd76c686f131483425317e68e9dc3d1d6a6f8c91bb8dc
MD5 ae70b8beedc7133a158c6d34ba475ccf
SHA1 00889de6d4652de568df5a575222e70d1092ccb6
SHA512 8a335de5e1087d9064044977a36063adfe6c695b69a1fe0555750fa2947b6d1aef36f55886efd6816ccc3cfc241bd5cc404e3d9d05409fb15c7c3d05b1c8670d
SSDEEP 192:sxZbkRBC4/ft/sHF8o/MiiIdpW7/W6+WNM6N4/eIVJrIQVIv0eK30HKxc10Ig5kJ:sxZwq4/fVsHKuk/bf4/eyrrVxEVGK
TLSH
T1EB32A656AE38793B4CCAE219BA55BF53E2F91036E1D01E45ABFC851C00EE6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5223622-5d80-4522-bad7-f38c0f15fc7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d5223622-5d80-4522-bad7-f38c0f15fc7a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de48c202-6e24-463f-b943-40c7271d9343.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de48c202-6e24-463f-b943-40c7271d9343.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

a6d85059-93af-4d91-8b1b-f661d2f4c40a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a6d85059-93af-4d91-8b1b-f661d2f4c40a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 2405529af871951bdf7a1c25fd7d72964506c84b0f707f4c3dd3e288c2369a39
MD5 bf1696a42f2aacc951a6ba633a9d4d73
SHA1 8f80e694bbc377339b76233bdc788ab8a5672ae4
SHA512 275db3dd0d5535e8b84c3bee6530e5ef92c208cf97bb51df19bf270d49b8776c84818eca674d94ff5f9629ec31d7b9dfa610f5b9958b2e64f76b46b1c00b881a
SSDEEP 3:MsEllllkEthXllkl2zE/len6tl:/M/xT02z5a
TLSH
T1614404047FD04507CD001131C453D3D05370D5300713574334D104337CD57410C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

b0afbf60-8b13-4ec5-bd37-4e1ef9d295b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b0afbf60-8b13-4ec5-bd37-4e1ef9d295b0.tmp
Size 28KB
SHA256 34c699c5406c606d9607e58f7bb8779262927fe303528844a452bc8769920b68
MD5 0e0501b399f74ce3aadd5a5d4d1fb241
SHA1 70e9661328f64e8ff0f0a4f40ca9d5202e76cac7
SHA512 f6739ef99d0b735051f0c8115e0a6e8ad2023e5050f5e820afc7c1c16103cf5b68edea9760dbc3e390ecabff9a378755e076f610491494289afae2f6307d56e0
SSDEEP 384:nciFIQkUSvI8Nj8TUNTUlIlFgYsrePyCDfw2ckX5mV8C3zbgY2IgIIlz:HFAIewgvBuVsALDEY5gLJ
TLSH
T161D2C4F598E79937D9AE9783A73E2D429DBCC153B5845980F7885D0CCC862BFD30A806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfc6b528-e1b2-42ec-91a0-c21622fe9594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfc6b528-e1b2-42ec-91a0-c21622fe9594.tmp
Size 33KB
SHA256 2ffcb19482e379ca5e8ab717ca17f4000b2689c448ed7fb6dbf515a41cb408e1
MD5 49da89dd05273cd4e108a8316db6cb80
SHA1 78fbd44e8f7d0d9ce5fe1d7129cfb72d5ec41fb5
SHA512 362ceca3b31f907c586d782e93b54388b03024a5a84fff083fbab4f6cc410148904c9cae737fca803e7842594c9aca3bde7fd08946e615a741f43428d723c528
SSDEEP 384:nciFbQkUSvN8Ng8TUNTUlIlFgYsrEkyCDfx2ckX5mV8C3zbX/Ga/tUW+vw8zG2Ii:HFVNrwgv4/VsALDz/ptf+vw8zG5gLJ
TLSH
T170F26FF99CD3993AC8AEA743673D2D5699BCC123F5A44984F7840B0CCCA61BFE706815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3779e372-6d36-4c97-beb4-698f37749f12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3779e372-6d36-4c97-beb4-698f37749f12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f2992c99-00e7-41f9-a71c-565ab5067db6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f2992c99-00e7-41f9-a71c-565ab5067db6.tmp
Size 8KB
SHA256 c3fbebc06c5ec2ae7b541b0d2e53f0e8a57959f472735add91ab7c3b2d374420
MD5 16806300dc1af2ac4d310e2aa64ac999
SHA1 145a9797d734ea072afc969115d232befacf5d25
SHA512 7d4b5e9d6e33ac06b912e7f57bc5b2a0838a445c9f253bda86f05a4b54216aea189b8f0cd5f4f6c2da9b4cbd9022dac97537b298a51270f0dc9a4f8d3cb69b97
SSDEEP 192:AGNS6WLkQmiUybmeLEbnckX5m9r8C3O4l6QU6:AGNS6a0UHLQckX5mV8C3H3U6
TLSH
T13F02D839AC787C7B8EF2AD05B94726139EE5111BEA452F44DAEC1E1D40DB29C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FileCoAuth-2026-10-24.1224.4064.1.odl

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2026-10-24.1224.4064.1.odl
Size 706B
SHA256 56da3fdd01ca41c68fc00d30b94843f924bfb67ce775229c769488b2c5c606e2
MD5 eb78532348690d409579566b471fe09c
SHA1 b8db52f397ff648b68ca5726ec69a64523615efa
SHA512 0212bf0faf085e92e11e39432cd570a8edf1604bf624ce7b0f79e8a5ca4ea94e27dab7787d6e6ade51c1556ad861d245cd4eae5f33a7f9ffc80aa81a05bf6b7e
TLSH
T17401E99AFD5B5575DF32127CD40DF309190AB9623C8D2471AA850799460F390511AE31
MD5 SHA1 SHA512 TLSH

Submit Download

VBCABLE_Driver_Pack45[1].zip

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XAE2F16D\VBCABLE_Driver_Pack45[1].zip
Size 1.3MB
SHA256 b950e39f01af1d04ea623c8f6d8eb9b6ea5c477c637295fabf20631c85116bfb
MD5 e58f7ed5b41f3a4c48f5453efacaca79
SHA1 15e4a8eff010e810be492a2e61d771f2f7e671e5
SHA512 fa73fbc483c229079c65c78de3c3ede5cacd8e8a5f9f3aac52a7e0b49bae1ec31a35db324d05afeb33388503eebec59e5bff861df56d6ad7d1a279a67ec4f92d
SSDEEP 24576:ZtBKwfPZ5JLfbe+17FbDNQUSIjH/zLI8yhbMkkTdbvxB2Hcfx6X9pxiqinDp:NKwZ5Zfbe+hb5dzHbLI8UbRubvPQzift
TLSH
T10D5533D54726841B944B29378FFD0E72A288D79800FE48E93677D5BA6F1040F49A53EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cable[1].htm

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\YIK9FYHF\Cable[1].htm
Size 31KB
SHA256 84a594b9987374a6816740a465dc75885fe1380753ee870089bdf595405289b7
MD5 fc5fb0296ffd7b27e3a24f045b2733c9
SHA1 9b9d02a9b92663a1f934b416ddf8dd804511a09f
SHA512 f7bc5f98d7dc72627ccf5d86475e13f5f04d183d8b42ce14b28abaaf707ea9798e638bd1a4e1a2fdd20506ff071fca7c416350ffd01406046a2fc82a32b5aa4b
SSDEEP 192:G/73T5Z3+QX2KcmXPM4umxVr4AW7T3zU0co3ocDoS+gRk0zbzKAcnbbQPLzprJZ+:G/f5Z339dgT3wSj+gzKVWLNRTNmREVk
TLSH
T1A2E2C4AED814E45E0752CDD895092095E867420FA9B35DF13A7BB107D2D0E28B12EEFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00bb2bd1-9a71-44c0-8646-1b3174fb0ed7.tmp

Path C:\Users\Admin\AppData\Local\Temp\00bb2bd1-9a71-44c0-8646-1b3174fb0ed7.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

9052fae6-5988-4add-8d4c-0ceadfcdd2e8.tmp

Path C:\Users\Admin\AppData\Local\Temp\9052fae6-5988-4add-8d4c-0ceadfcdd2e8.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\128.png
Size 4KB
SHA256 41b21cd721317759a1391ec66ec4606b1f1b0a66fc6542ec3e69f9a6ba9a60d3
MD5 a6e517fba00c44d26f516d2bc473042f
SHA1 bcedbf549056bfacff8820cac38713a1eacd95b9
SHA512 8c58b58a05b60420ff187c2dc8b71e019fc36cd6bcec050257b5532f131ba50ecd00fe2ca734805753a39f6911125d2d8684286207b1d1d039e862904279a145
SSDEEP 96:4niq7dWteEb8MsIhE+bf+rgEPQCGJxc4bOdpI0xeblJpzSkLqdsQ4pXnW3P:e97kteEnJEu+rxoi4b3RJpfhQ45nGP
TLSH
T14AA1AFFA12E3DA94303E91711B20659B4D7909385624364DDBB2AC7140C7A0D9B7CF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\af\messages.json
Size 908B
SHA256 b40bde5b612cfff936370b32fb0c58cc205fc89937729504c6c0b527b60e2cba
MD5 12403ebcce3ae8287a9e823c0256d205
SHA1 c82d43c501fae24bfe05db8b8f95ed1c9ac54037
SHA512 153401ecdb13086d2f65f9b9f20acb3cefe5e2aeff1c31ba021be35bf08ab0634812c33d1d34da270e5693a8048fc5e2085e30974f6a703f75ea1622a0ca0ffd
TLSH
T1FA11C004E5625D3F42F5E1D6793EB342D21006B65150DCBA7CBCD51C4FB2D12518AF88
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\am\messages.json
Size 1KB
SHA256 3d0361a85adfcd35d0de74135723a75b646965e775188f7dcdd35e3e42db788e
MD5 9721ebce89ec51eb2baeb4159e2e4d8c
SHA1 58979859b28513608626b563138097dc19236f1f
SHA512 fa3689e8663565d3c1c923c81a620b006ea69c99fb1eb15d07f8f45192ed9175a6a92315fa424159c1163382a3707b25b5fc23e590300c62cbe2dace79d84871
TLSH
T1C221D805E0E8BB1F0F2E9B02B4352B4AD1A45D6A41406CB5F72997AC7F3DF1788D6618
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ar\messages.json
Size 1KB
SHA256 abd0919121956ab535e6a235de67764f46cfc944071fcf2302148f5fb0e8c65a
MD5 3ec93ea8f8422fda079f8e5b3f386a73
SHA1 24640131ccfb21d9bc3373c0661da02d50350c15
SHA512 f40e879f85bc9b8120a9b7357ed44c22c075bf065f45bea42bd5316af929cbd035d5d6c35734e454aef5b79d378e51a77a71fa23f9ebd0b3754159718fceb95c
TLSH
T186217BB1A73094728526DE0BF1F13264D5B1AD73A143FC21385B45088BE3D23A68EBB8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\as\messages.json
Size 2KB
SHA256 01b549ef285c94b31891997c7d5728bee7b56040f8847f279fc46e5cc262c4e3
MD5 ccebda0ca2d2ce0ea65b7cc8651175e1
SHA1 1510e686a9e94ada32bd62b9fc5d8950850fda2d
SHA512 6a345812ca8d5e9f8bcffd96acb435e8576d26b376e1de39b0ce0687c115da8ad2832cbb42cf0f36534514db7e8291f6c5130e9351ec87557a0bf1f79f328846
TLSH
T19E51A219B0E5FE88060D6495DC3074FD5A8C598A01701A3A9D8FDACB7E2E17DC16FAB1
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\az\messages.json
Size 977B
SHA256 628145f4281fa825d75f1e332998904466abd050e8b0dc8bb9b6a20488d78a66
MD5 9a798fd298008074e59ecc253e2f2933
SHA1 1e93da985e880f3d3350fc94f5ccc498efc8c813
SHA512 9094480379f5ab711b3c32c55fd162290cb0031644ea09a145e2ef315da12f2e55369d824af218c3a7c37dd9a276aeec127d8b3627d3ab45a14b0191ed2bbe70
TLSH
T1D311CB08D09E2C1F823406263CBA3302F51506EC5040BCBFBA68E12C6FFDD538AC1B98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\be\messages.json
Size 3KB
SHA256 ddf16859a15f3eb3334d6241975ca3988ac3eafc3d96452ac3a4afd3644c8550
MD5 68884dfda320b85f9fc5244c2dd00568
SHA1 fd9c01e03320560cbbb91dc3d1917c96d792a549
SHA512 7ff0fbd555b1f9a9a4e36b745cbfcad47b33024664f0d99e8c080be541420d1955d35d04b5e973c07725573e592cd0dd84fdbb867c63482baff6929ada27ccde
TLSH
T1E351FFD2D0B5169C39C838D7E779BCDD34986E80D124EB3BDC3D1ADBD20C601AA91B29
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\bg\messages.json
Size 1KB
SHA256 ac4a8b5b7c0b0dd1c07910f30dcfbdf1bcb701cfcfd182b6153fd3911d566c0e
MD5 2e6423f38e148ac5a5a041b1d5989cc0
SHA1 88966ffe39510c06cd9f710dfac8545672ffdceb
SHA512 891fcdc6f07337970518322c69c6026896dd3588f41f1e6c8a1d91204412cae01808f87f9f2dea1754458d70f51c3cef5f12a9e3fc011165a42b0844c75ec683
TLSH
T19B21485199539CAF0225F16FB8083E0578A640BE3F518AC23078592E3FF583507D6B5E
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\bn\messages.json
Size 1KB
SHA256 1dbf38e425c5c7fc39e8077a837df0443692463ba1fbe94e288ab5a93242c46e
MD5 651375c6af22e2bcd228347a45e3c2c9
SHA1 109ac3a912326171d77869854d7300385f6e628c
SHA512 958aa7cf645fab991f2eca0937ba734861b373fb1c8bcc001599be57c65e0917f7833a971d93a7a6423c5f54a4839d3a4d5f100c26efa0d2a068516953989f9d
TLSH
T10C312724DC5E58BB90E1CDD627587320E1235E9A8752F71EFC1B82496E7DC3C0C99EA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ca\messages.json
Size 930B
SHA256 d6e65238187a430ff29d4c10cf1c46b3f0fa4b91a5900a17c5dfd16e67ffc9bd
MD5 d177261ffe5f8ab4b3796d26835f8331
SHA1 4be708e2ffe0f018ac183003b74353ad646c1657
SHA512 e7d730304aed78c0f4a78dadbf835a22b3d8114fb41d67b2b26f4fe938b572763d3e127b7c1c81ebe7d538da976a7a1e7adc40f918f88afadea2201ae8ab47d0
TLSH
T15A115B15D5D16D7B02B191537E671342E17416B42701D88B7A3C82185FB5D42A2CBFE8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\cs\messages.json
Size 913B
SHA256 21ae66ce537095408d21670585ad12599b0f575ff2cb3ee34e3a48f8cc71cfab
MD5 ccb00c63e4814f7c46b06e4a142f2de9
SHA1 860936b2a500ce09498b07a457e0cca6b69c5c23
SHA512 35839dac6c985a6ca11c1bff5b8b5e59db501fcb91298e2c41cb0816b6101bf322445b249eaea0cef38f76d73a4e198f2b6e25eea8d8a94ea6007d386d4f1055
TLSH
T1F6115C0ED0E22C7B127882623C77A311F6B484E21208986ABA7CE0498F75C5644D6FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\cy\messages.json
Size 806B
SHA256 a482663292a913b02a9cde4635c7c92270bf3c8726fd274475dc2c490019a7c9
MD5 a86407c6f20818972b80b9384acfbbed
SHA1 d1531cd0701371e95d2a6bb5edcb79b949d65e7c
SHA512 d9fbf675514a890e9656f83572208830c6d977e34d5744c298a012515bc7eb5a17726add0d9078501393babd65387c4f4d3ac0cc0f7c60c72e09f336dca88de7
TLSH
T1EB01B1571F203FBAA70FD587FE933525086ACFCA5488541355D8883E032A71935E6232
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\da\messages.json
Size 883B
SHA256 48847d57c75af51a44cbf8f7ef1a4496c2007e58ed56d340724fda1604ff9195
MD5 b922f7fd0e8ccac31b411fc26542c5ba
SHA1 2d25e153983e311e44a3a348b7d97af9aad21a30
SHA512 ad0954deeb17af04858dd5ec3d3b3da12dff7a666af4061deb6fd492992d95db3baf751ab6a59bec7ab22117103a93496e07632c2fc724623bb3acf2ca6093f3
TLSH
T145114C58D0A66E2B073B4266B4223B11E26402FB4152DC5A796DD51C9FB2C1351DBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\de\messages.json
Size 1KB
SHA256 36ac525fa6e28f18572d71d75293970e0e1ead68f358c20da4fdc643eea2c1c5
MD5 d116453277cc860d196887cec6432ffe
SHA1 0ae00288fde696795cc62fd36eabc507ab6f4ea4
SHA512 c788c3202a27ec220e3232ae25e3c855f3fdb8f124848f46a3d89510c564641a2dfea86d5014cea20d3d2d3c1405c96dbeb7ccad910d65c55a32fdca8a33fdd4
TLSH
T15A11AB46D2A24A2F42F7967370793791F72441BB8240AD5B786CE61D6FBA8530186F38
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\el\messages.json
Size 1KB
SHA256 37ca6ab271d6e7c9b00b846fdb969811c9ce7864a85b5714027050795ea24f00
MD5 9aba4337c670c6349ba38fddc27c2106
SHA1 1fc33be9ab4ad99216629bc89fbb30e7aa42b812
SHA512 8564f93ad8485c06034a89421ce74a4e719bbac865e33a7ed0b87baa80b7f7e54b240266f2edb595df4e6816144428db8be18a4252cbdcc1e37b9ecc9f9d7897
TLSH
T1493126DEF0691D6E90226253549DB0BAEB911CA87305EEDC363CCA253BF84710D32A5F
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\en_GB\messages.json
Size 848B
SHA256 ab5cda04013dce0195e80af714fbf3a67675283768ffd062cf3cf16edb49f5d4
MD5 3734d498fb377cf5e4e2508b8131c0fa
SHA1 aa23e39bfe526b5e3379de04e00eacba89c55ade
SHA512 56d9c792954214b0de56558983f7eb7805ac330af00e944e734340be41c68e5dd03eddb17a63bc2ab99bdd9be1f2e2da5be8ba7c43d938a67151082a9041c7ba
TLSH
T196015506E3406B2B0372B12774613201F67001EA1200ECBF7A7CC42C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\en_US\messages.json
Size 1KB
SHA256 102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1
MD5 578215fbb8c12cb7e6cd73fbd16ec994
SHA1 9471d71fa6d82ce1863b74e24237ad4fd9477187
SHA512 e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212
TLSH
T161210707DA04AB37827A6136BC656685F33007EE2201E86F7DBCD50C5F229A791A7798
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\es\messages.json
Size 961B
SHA256 2008f4faab71ab8c76a5d8811ad40102c380b6b929ce0bce9c378a7cadfc05eb
MD5 f61916a206ac0e971cdcb63b29e580e3
SHA1 994b8c985dc1e161655d6e553146fb84d0030619
SHA512 d9c63b2f99015355aca04d74a27fd6b81170750c4b4be7293390dc81ef4cd920ee9184b05c61dc8979b6c2783528949a4ae7180dbf460a2620dbb0d3fd7a05cf
TLSH
T15C113A43D5929D7B19B28261B4776312F5A406F52D80E8CB7D3C85382BA9D06E0E7F8D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\es_419\messages.json
Size 959B
SHA256 90a560ff82605db7eda26c90331650ff9e42c0b596cedb79b23598dec1b4988f
MD5 535331f8fb98894877811b14994fea9d
SHA1 42475e6afb6a8ae41e2fc2b9949189ef9bbe09fb
SHA512 2ce9c69e901ab5f766e6cfc1e592e1af5a07aa78d154ccbb7898519a12e6b42a21c5052a86783abe3e7a05043d4bd41b28960feddb30169ff7f7fe7208c8cfe9
TLSH
T177113D46D9D15CA715B68166B5775312F66406F52C80E9DB3D3C803C1BB9C06E0EBF9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\et\messages.json
Size 968B
SHA256 cc31b877238da6c1d51d9a6155fde565727a1956572f466c387b7e41c4923a29
MD5 64204786e7a7c1ed9c241f1c59b81007
SHA1 586528e87cd670249a44fb9c54b1796e40cdb794
SHA512 44fcf93f3fb10a3db68d74f9453995995ab2d16863ec89779db451a4d90f19743b8f51095eec3ecef5bd0c5c60d1bf3dfb0d64df288dccfbe70c129ae350b2c6
TLSH
T1F011BD14D1993A2F4633627A746A6B02D85593F00441CCAA39ACD39C6FBEC1691D6F1C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\eu\messages.json
Size 838B
SHA256 a41670d52423ba69c7a65e7e153e7b9994e8dd0370c584bda0714bd61c49c578
MD5 29a1da4acb4c9d04f080bb101e204e93
SHA1 2d0e4587ddd4bac1c90e79a88af3bd2c140b53b1
SHA512 b7b7a5a0aa8f6724b0fa15d65f25286d9c66873f03080cbaba037bdeea6aadc678ac4f083bc52c2db01beb1b41a755ed67bbddb9c0fe4e35a004537a3f7fc458
TLSH
T19801C2075213EDA6CF69A376FD13B4417B954E412E47710370AED608328FC2EA1A7375
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\fa\messages.json
Size 1KB
SHA256 7c4c09d19ac4da30cc0f7f521825f44c4dfbc19482a127fbfb2b74b3468f48f1
MD5 097f3ba8de41a0aaf436c783dcfe7ef3
SHA1 986b8cabd794e08c7ad41f0f35c93e4824ac84df
SHA512 8114ea7422e3b20ae3f08a3a64a6ffe1517a7579a3243919b8f789eb52c68d6f5a591f7b4d16cee4bd337ff4daf4057d81695732e5f7d9e761d04f859359fadb
TLSH
T1CD218E49A1786DB34122851372F23516C673AEA55101FD80B969472D0F3BD235E8EF2B
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\fi\messages.json
Size 911B
SHA256 2d752a5dbe80e34ea9a18c958b4c754f3bc10d63279484e4df5880b8fd1894d2
MD5 b38cbd6c2c5bfaa6ee252d573a0b12a1
SHA1 2e490d5a4942d2455c3e751f96bd9960f93c4b60
SHA512 6e65207f4d8212736059cc802c6a7104e71a9cc0935e07bd13d17ec46ea26d10bc87ad923cd84d78781e4f93231a11cb9ed8d3558877b6b0d52c07cb005f1c0c
TLSH
T162119046E0426E6B4276912638623202F2F005F61180DD5F39EC876C0FB9C0672DBF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\fil\messages.json
Size 939B
SHA256 f51eeb7aaf5f2103c1043d520e5a4de0fa75e4dc375e23a2c2c4afd4d9293a72
MD5 fcea43d62605860fff41be26bad80169
SHA1 f25c2ce893d65666cc46ea267e3d1aa080a25f5b
SHA512 f66f113a26e5bcf54b9aafa69dae3c02c9c59bd5b9a05f829c92af208c06dc8ccc7a1875cbb7b7ce425899e4ba27bfe8ce2cdaf43a00a1b9f95149e855989ee0
TLSH
T1D8119C16E240192B93B2846279E52501E2E001FA2F40A85F7B7DEE496FF7C12509AF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\fr\messages.json
Size 977B
SHA256 0518287950a8b010ffc8d52554eb82e5d93b6c3571823b7ceca898906c11abcc
MD5 a58c0eebd5dc6bb5d91daf923bd3a2aa
SHA1 f169870eeed333363950d0bcd5a46d712231e2ae
SHA512 b04afd61de490bc838354e8dc6c22be5c7ac6e55386fff78489031acbe2dbf1eaa2652366f7a1e62ce87cfccb75576da3b2645fea1645b0eceb38b1fa3a409e8
TLSH
T12B113808E9602D6F0E725233BA257253DA7001E67340D9957A2CD60D4FB5C6AE2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\fr_CA\messages.json
Size 972B
SHA256 4caa46656ecc46a420aa98d3307731e84f5ac1a89111d2e808a228c436d83834
MD5 6cac04bdcc09034981b4ab567b00c296
SHA1 84f4d0e89e30ed7b7acd7644e4867ffdb346d2a5
SHA512 160590b6ec3dcf48f3ea7a5baa11a8f6fa4131059469623e00ad273606b468b3a6e56d199e97daa0ecb6c526260ebae008570223f2822811f441d1c900dc33d6
TLSH
T13D11BD08D961397F0A7251327935A252DD7006E5B300D9CA3A2DD20C4FB5C97E2D3FAD
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\gl\messages.json
Size 990B
SHA256 0cf098dfe5bbb46fc0132b3cf0c54b06b4d2c8390d847ee2a65d20f9b7480f4c
MD5 6baafee2f718befbc7cd58a04ccc6c92
SHA1 ce0bddda2fa1f0ad222b604c13ff116cbb6d02cf
SHA512 3da23e74cd6cf9c0e2a0c4dba60301281d362fb0a2a908f39a55abdca4cc69ad55638c63cc3befd44dc032f9cbb9e2fdc1b4c4abe292917df8272ba25b82af20
TLSH
T1F8119E56C9C15C3B05729162B16A5213EA400AE12D80E4CB3D3DE63C1B68C55E5EBF98
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\gu\messages.json
Size 1KB
SHA256 fe8218df25db54e633927c4a1640b1a41b8e6cb3360fa386b5382f833b0b237c
MD5 bc7e1d09028b085b74cb4e04d8a90814
SHA1 e28b2919f000b41b41209e56b7bf3a4448456cfe
SHA512 040a8267d67db05bbaa52f1fac3460f58d35c5b73aa76bbf17fa78acc6d3bfb796a870dd44638f9ac3967e35217578a20d6f0b975ceeeedbadfc9f65be7e72c9
TLSH
T12C319890D2B4E4B614E69B7FA0AD2230C6705363D1162206328CD90D8E22C5B3CFABCF
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\hi\messages.json
Size 1KB
SHA256 d2d1afa224cda388ff1dc8fac24cda228d7ce09de5d375947d7207fa4a6c4f8d
MD5 98a7fc3e2e05afffc1cfe4a029f47476
SHA1 a17e077d6e6ba1d8a90c1f3faf25d37b0ff5a6ad
SHA512 457e295c760abfd29fc6bbbb7fc7d4959287bca7fb0e3e99eb834087d17eed331def18138838d35c48c6ddc8a0134affff1a5a24033f9b5607b355d3d48fdf88
TLSH
T18831270CDBBDF67F18BC789631591A33D2A537B4B3D05617B588B2DE4E61C3110AB612
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\hr\messages.json
Size 935B
SHA256 73e6e246ceeab9875625cd4889fbf931f93b7b9deaa11288ae1a0f8a6e311e76
MD5 25cdff9d60c5fc4740a48ef9804bf5c7
SHA1 4fadecc52fb43aec084df9ff86d2d465fbebcdc0
SHA512 ef00b08496427feb5a6b9fb3fe2e5404525be7c329d9dd2a417480637fd91885837d134a26980dcf9f61e463e6cb68f09a24402805807e656af16b116a75e02c
TLSH
T1B5118C1580B56E6F817A82B378B4B302F5B442BD11808D777A3CE12C4FBAE2195C5F2C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\hu\messages.json
Size 1KB
SHA256 958c0f664fca20855fa84293566b2ddb7f297185619143457d6479e6ac81d240
MD5 8930a51e3ace3dd897c9e61a2aea1d02
SHA1 4108506500c68c054ba03310c49fa5b8ee246ea4
SHA512 126b80cd3428c0bc459eeaafcbe4b9fde2541a57f19f3ec7346baf449f36dc073a9cf015594a57203255941551b25f6faa6d2c73c57c44725f563883ff902606
TLSH
T1A911C009D0A1692B91BB426739753705D21802FA2340ACDF396CC17D9F75F234497F79
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\hy\messages.json
Size 2KB
SHA256 0b16e3f8bd904a767284345ae86a0a9927c47afe89e05ea2b13ad80009bdf9e4
MD5 55de859ad778e0aa9d950ef505b29da9
SHA1 4479be637a50c9ee8a2f7690ad362a6a8ffc59b2
SHA512 edab2fcc14cabb6d116e9c2907b42cfbc34f1d9035f43e454f1f4d1f3774c100cbadf6b4c81b025810ed90fa91c22f1aefe83056e4543d92527e4fe81c7889a8
TLSH
T12051818A9F771F9C0E756DBBD434A78D28881DD101A7A71AD4C4CD8AF38B60D10D7A2D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\id\messages.json
Size 858B
SHA256 e3c86ddd2efebe88eed8484765a9868202546149753e03a61eb7c28fd62cfca1
MD5 34d6ee258af9429465ae6a078c2fb1f5
SHA1 612cae151984449a4346a66c0a0df4235d64d932
SHA512 20427807b64a0f79a6349f8a923152d9647da95c05de19ad3a4bf7db817e25227f3b99307c8745dd323a6591b515221bd2f1e92b6f1a1783bdfa7142e84601b1
TLSH
T17F11250696D1282F423652A374B63302F65102EA0A00A8AE7A7CCB285FBB81214CAF95
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\is\messages.json
Size 954B
SHA256 943e61988c859bb088f548889f0449885525dd660626a89ba67b2c94cfbfbb1b
MD5 caeb37f451b5b5e9f5eb2e7e7f46e2d7
SHA1 f917f9eae268a385a10db3e19e3cc3aced56d02e
SHA512 a55dec2404e1d7fa5a05475284cbecc2a6208730f09a227d75fdd4ac82ce50f3751c89dc687c14b91950f9aa85503bd6bf705113f2f1d478e728df64d476a9ee
TLSH
T13211274E72F46CADBF8DC261BC30B7EDC6BA06C00686D4D6528F164E117670922B2321
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\it\messages.json
Size 899B
SHA256 f41862665b13c0b4c4f562ef1743684cce29d4bcf7fe3ea494208df253e33885
MD5 0d82b734ef045d5fe7aa680b6a12e711
SHA1 bd04f181e4ee09f02cd53161dcabcef902423092
SHA512 01f305a280112482884485085494e871c66d40c0b03de710b4e5f49c6a478d541c2c1fda2ceaf4307900485946dee9d905851e98a2eb237642c80d464d1b3ada
TLSH
T15A118C45C5D3292B1A76A31334763205EA7502F66A80A94B7F6DC91C1FBBC43D086F4C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\iw\messages.json
Size 2KB
SHA256 69cab95d83b5e6d0629d3d70630a0c581f2e2179f2b7599af8aa11bccc6d0646
MD5 7d790e8f9f36abb425ecf54509d0cb15
SHA1 b64a2972c3fb537c6a6c5edef142a9758b2596cf
SHA512 723c414493114da774689aca57584578f90dc99ef3a6fdd6ee2cb026eff50fdd1afba2b36396edea1a9045ac9e2c604f663370adbe89491f49f20e71dd77f1e8
TLSH
T1D741739EC272678D0F386C779C34AADD14BB47D0349073668C18D186B7E66B890ADCF9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ja\messages.json
Size 1KB
SHA256 34ac08f3c4f2d42962a3395508818b48ca323d22f498738cc9f09e78cb197d73
MD5 15ec1963fc113d4ad6e7e59ae5de7c0a
SHA1 4017fc6d8b302335469091b91d063b07c9e12109
SHA512 427251f471fa3b759ca1555e9600c10f755bc023701d058ff661bec605b6ab94cfb3456c1fea68d12b4d815ffbafabceb6c12311dd1199fc783ed6863af97c0f
TLSH
T1CB21F67DC384293B153582B2B5A932C2F1559CEAE542B86A7A2CC1191F7AE6DD040FB4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ka\messages.json
Size 3KB
SHA256 30898bbf51bdd58db397ff780f061e33431a38ef5cfc288b5177ecf76b399f26
MD5 83f81d30913dc4344573d7a58bd20d85
SHA1 5ad0e91ea18045232a8f9df1627007fe506a70e0
SHA512 85f97f12ad4482b5d9a6166bb2ae3c4458a582cf575190c71c1d8e0fb87c58482f8c0efead56e3a70edd42bed945816db5e07732ad27b8ffc93f4093710dd58f
TLSH
T119617E7D10FD36EEF6CED16A9C7165B6C8F70A900A45B439BA463B4B0D217306EB0925
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\kk\messages.json
Size 3KB
SHA256 548dc6c96e31a16ce355dc55c64833b08ef3fba8bf33149031b4a685959e3af4
MD5 2d94a58795f7b1e6e43c9656a147ad3c
SHA1 e377db505c6924b6bfc9d73dc7c02610062f674e
SHA512 f51cc857e4cf2d4545c76a2dce7d837381ce59016e250319bf8d39718be79f9f6ee74ea5a56de0e8759e4e586d93430d51651fc902376d8a5698628e54a0f2d8
TLSH
T18E61EFD2C1B6168C29D475ABE771BCDD24989B90E100FB37EC3D15EFE20C629BA91720
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\km\messages.json
Size 3KB
SHA256 a6118f0a0de329e07c01f53cd6fb4fed43e54c5f53db4cd1c7f5b2b4d9fb10e6
MD5 b3699c20a94776a5c2f90aef6eb0dad9
SHA1 1f9b968b0679a20fa097624c9abfa2b96c8c0bea
SHA512 1e8d15b8bff1d289434a244172f9ed42b4bb6bcb6372c1f300b01acea5a88167e97fedaba0a7ae3beb5e24763d1b09046ae8e30745b80e2e2fe785c94df362f6
TLSH
T13D51738855928B3AE6C786BE9C725F4444E733226B52D4BC9F8F3C0D5411A28ACDF867
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\kn\messages.json
Size 1KB
SHA256 30078ef35a76e02a400f03b3698708a0145d9b57241cc4009e010696895cf3a1
MD5 38be0974108fc1cc30f13d8230ee5c40
SHA1 acf44889dd07db97d26d534ad5afa1bc1a827bad
SHA512 7bdb2bade4680801fc3b33e82c8aa4fac648f45c795b4bace4669d6e907a578ff181c093464884c0e00c9762e8db75586a253d55cd10a7777d281b4bffafe302
TLSH
T18C41B70CAC7A6D3A5BE5016724AD203EDFF017D25D5847D2F49DEB442E61C2B4183E9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ko\messages.json
Size 1KB
SHA256 c52d9b955d229373725a6e713334bbb31ea72efa9b5cf4fbd76a566417b12cac
MD5 f3e59eeeb007144ea26306c20e04c292
SHA1 83e7bdfa1f18f4c7534208493c3ff6b1f2f57d90
SHA512 7808cb5ff041b002cbd78171ec5a0b4dba3e017e21f7e8039084c2790f395b839bee04ad6c942eed47ccb53e90f6de818a725d1450bf81ba2990154afd3763af
TLSH
T1BA113565A0A62D9F12B6C6437DA53601D2A060F653075456BE2CC90E8F359A251C1EB9
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\lo\messages.json
Size 2KB
SHA256 89082fb05229826bc222f5d22c158235f025f0e6df67ff135a18bd899e13bb8f
MD5 e20d6c27840b406555e2f5091b118fc5
SHA1 0dcecc1a58ceb4936e255a64a2830956bfa6ec14
SHA512 ad53fc0b153005f47f9f4344df6c4804049fac94932d895fd02eebe75222cfe77eedd9cd3fdc4c88376d18c5972055b00190507aa896488499d64e884f84f093
TLSH
T19051F2CF90B6EB1D2A0971AEE930994618BC09E28031B336CF7EC18A2D0E51DC79B751
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\lt\messages.json
Size 1KB
SHA256 5dfcbd4dfeaec3abe973a78277d3bd02cd77ae635d5c8cd1f816446c61808f59
MD5 970544ab4622701ffdf66dc556847652
SHA1 14bee2b77ee74c5e38ebd1db09e8d8104cf75317
SHA512 cc12d00c10b970189e90d47390eeb142359a8d6f3a9174c2ef3ae0118f09c88ab9b689d9773028834839a7dfaf3aac6747bc1dcb23794a9f067281e20b8dc6ea
TLSH
T1D811CC15D8807C3F4336729FB4A47705D96442B19110AC5534BCC20D4FBBC67908AF48
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\lv\messages.json
Size 994B
SHA256 0621de9161748f45d53052ed8a430962139d7f19074c7ffe7223ecb06b0b87db
MD5 a568a58817375590007d1b8abcaebf82
SHA1 b0f51fe6927bb4975fc6eda7d8a631bf0c1ab597
SHA512 fcfbadec9f73975301ab404db6b09d31457fac7ccad2fa5be348e1cad6800f87cb5b56de50880c55bbadb3c40423351a6b5c2d03f6a327d898e35f517b1c628c
TLSH
T12C11E10DD0D22E1B6E7580477A38B752D29490F56540DA4EB9BCCA5C2FBDC0B81CAF6C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\mk\messages.json
Size 2KB
SHA256 d0ae7739adea379b6390d1ee65699fc78d8649b7977503b062f34a52690a5744
MD5 5237e2a0ad375fa0f462b95eeb4b8cfc
SHA1 8fcf0fda66d275f70bd5ee2a491c797c2d0fe976
SHA512 4158ee0ab8e651c66720fd64a6414717d596ac9f642c3f50704ced9bb2b57d1add25b087dc9068a0094e9c05b51242af7bb77bd15ce2094be0796faf6ad21063
TLSH
T1FA51B2E390B3165C29C879DAE771BCED34987880D218D77FEC7E2787D20862125D171A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ml\messages.json
Size 2KB
SHA256 22ca9415e294d9c3ec3384b9d08cdaf5164af73b4e4c251559e09e529c843ea6
MD5 4717efe4651f94eff6acb6653e868d1a
SHA1 b8a7703152767fbe1819808876d09d9cc1c44450
SHA512 487eab4938f6bc47b1d77dd47a5e2a389b94e01d29849e38e96c95cabc7bd98679451f0e22d3fea25c045558cd69fddb6c4fef7c581141f1c53c4aa17578d7f7
TLSH
T13741D0079131CD3F0EA152267B1E2F57C91B8EA1409B6A8B3D3DF2664D6AF2D0C86931
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\mn\messages.json
Size 2KB
SHA256 613d8751f6cc9d3fa319f4b7ea8b2bd3bed37fd077482ca825929dd7c12a69a8
MD5 83e7a14b7fc60d4c66bf313c8a2bef0b
SHA1 1ccf1d79cded5d65439266db58480089cc110b18
SHA512 3742e24ffc4b5283e6ee496813c1bdc6835630d006e8647d427c3de8b8e7bf814201adf9a27bfab3abd130b6fec64ebb102ac0eb8dedfe7b63d82d3e1233305d
TLSH
T14251EEE2D1B6574C2D847593E67AFDDD348CAD80D114EB3BCC7E2287E340278A592715
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\mr\messages.json
Size 1KB
SHA256 adeb082a9c754dfd5a9d47340a3ddcc19bf9c7efa6e629a2f1796305f1c9a66f
MD5 3b98c4ed8874a160c3789fead5553cfa
SHA1 5550d0ec548335293d962aaa96b6443dd8abb9f6
SHA512 5139b6c6df9459c7b5cdc08a98348891499408cd75b46519ba3ac29e99aaafcc5911a1dee6c3a57e3413dbd0fae72d7cbc676027248dce6364377982b5ce4151
TLSH
T1B631030DFB7AF76E0DBC7D6A31280E33D1A555F1C3D4885B7564B2CA4EA4CB0018AA92
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ms\messages.json
Size 936B
SHA256 2824cf97513dc3ecc261f378bfd595ae95a5997e9d1c63f5731a58b1f8cd54f9
MD5 7d273824b1e22426c033ff5d8d7162b7
SHA1 eadbe9dbe5519bd60458b3551bdfc36a10049dd1
SHA512 e5b611bbfab24c9924d1d5e1774925433c65c322769e1f3b116254b1e9c69b6df1be7828141eebbf7524dd179875d40c1d8f29c4fb86d663b8a365c6c60421a7
TLSH
T11F115B0EC3A5283F407652A770E86701F98406AA0F40ED9F3D5C9F384FBA9926681F58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\my\messages.json
Size 3KB
SHA256 243befbd6b67a21433dcc97dc1a728896d3a070dc20055eb04d644e1bb955fe7
MD5 342335a22f1886b8bc92008597326b24
SHA1 2cb04f892e430dcd7705c02bf0a8619354515513
SHA512 cd344d060e30242e5a4705547e807ce3ce2231ee983bb9a8ad22b3e7598a7ec87399094b04a80245ad51d039370f09d74fe54c0b0738583884a73f0c7e888ad8
TLSH
T1A2812B2CA82E25EE5BCF46C11CE24C5F84B31CB0466DFC6C96B62A474A027E83DE165D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ne\messages.json
Size 1KB
SHA256 729cf12e1ce062efc5eda3796ca6d7a29b1c52aabb0ac4889d6fa6aa88ad9526
MD5 4291b668707082a28738168f2d84d0a3
SHA1 dbebedc946705efed87e59e7b4988eaa7e05dcce
SHA512 8f25c7baa768d6dd17a3ac21d03d7649954500074f33ea190c8dc6e905450b5a6eee576d292db924501ef11018c2463e9c3058a288ed59db61b0c51569524faa
TLSH
T1D141A44DEBB8F3DB05BC785B361C1E36D1945B704392554BF8B8B2C74AB0CB101D5A96
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\nl\messages.json
Size 914B
SHA256 f3fe1ffcb182183b76e1b46c4463168c746a38e461fd25ca91ff2a40846f1d61
MD5 32df72f14be59a9bc9777113a8b21de6
SHA1 2a8d9b9a998453144307dd0b700a76e783062ad0
SHA512 e0966f5cca5a8a6d91c58d716e662e892d1c3441daa5d632e5e843839bb989f620d8ac33ed3edbafe18d7306b40cd0c4639e5a4e04da2c598331dacec2112aad
TLSH
T125112C15DA526E3B42E19162746A3343EAA002FD0149F8AF796CD96C4FF2D12019EE68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\no\messages.json
Size 878B
SHA256 21ceff02b45a4bfd60d144879dfa9f427949a027dd49a3eb0e9e345bd0b7c9a8
MD5 a1744b0f53ccf889955b95108367f9c8
SHA1 6a5a6771dff13dcb4fd425ed839ba100b7123de0
SHA512 f55e43f14514eecb89f6727a0d3c234149609020a516b193542b5964d2536d192f40cc12d377e70c683c269a1bdcde1c6a0e634aa84a164775cffe776536a961
TLSH
T1E011CE00D1927C2F077AD27675357322E26004B95A10ACDA7A2CD95EAFF7C8210D1FDA
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\or\messages.json
Size 2KB
SHA256 4fa7d3ed5b6003b4b0b3d1cedf0a7dd6489b96311b4bc320e8a3dd16852d59d9
MD5 2c38f78a74ab24d6aeec34fc890fdf11
SHA1 6bcd1873e513962c511a5eeb5e96dfe7f0b1daec
SHA512 2b0bda5283272e6ac62652a64e8756fe74c0866db5d82e7188d456d6f9a60e0883023c339e265c10758256f4e46c43df98bb41a6d758321e8b6385c288e7990c
TLSH
T1C85130C3B371354A15F8B362D53AA4FE298AACF05373C2AA5DA91BDFC2073509713621
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\pa\messages.json
Size 2KB
SHA256 bbd37d41b7de6f93948fa2437a7699d4c30a3c39e736179702f212cb36a3133c
MD5 97f769f51b83d35c260d1f8cfd7990af
SHA1 0d59a76564b0aee31d0a074305905472f740ceca
SHA512 d91f5e2d22fc2d7f73c1f1c4af79db98fcfd1c7804069ae9b2348cbc729a6d2dff7fb6f44d152b0bdaba6e0d05dff54987e8472c081c4d39315cec2cbc593816
TLSH
T19A51DAC7E7B27964150AB074D23ED4CE5B924CE48051E2B7BDE72AB9C2CDE7382102A0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\pl\messages.json
Size 978B
SHA256 e00ff20437599a5c184ca0c79546cb6500171a95e5f24b9b5535e89a89d3ec3d
MD5 b8d55e4e3b9619784aeca61ba15c9c0f
SHA1 b4a9c9885fbeb78635957296fddd12579fefa033
SHA512 266589116eee223056391c65808255edae10eb6dc5c26655d96f8178a41e283b06360ab8e08ac3857d172023c4f616ef073d0bea770a3b3dd3ee74f5ffb2296b
TLSH
T17B112729D0D21E7F4675967379F63301E9A044E62600DADB7A2C801D8F7AD5604DEFAC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\pt_BR\messages.json
Size 874B
SHA256 9c42ecc79a6763b98b2bb0874121467a9a67772649e103adf0d6d2617bcfd2cd
MD5 b77cc058ff1f41f0d9279af45f8e0e0b
SHA1 20385a6dbba09c0f01081b6e6c75b3be27025f76
SHA512 3333ca3e1c6498399e60a72f208c5bb2e0c9fd6a87ca16d68b27ddf8c1be485b2e486e945ea9456349662c027b686648844e0a100906cf6aa62deb6ccb6a56ad
TLSH
T1DE112926E6536E3B07718623B0792701E6550AF61E45DC8B7D6D890D4FF1D829083FA8
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\pt_PT\messages.json
Size 914B
SHA256 e93b8e7fb86d2f7dfae57416bb1fb6ee0eea25629b972a5922940f0023c85f90
MD5 0963f2f3641a62a78b02825f6fa3941c
SHA1 7e6972beab3d18e49857079a24fb9336bc4d2d48
SHA512 22dd42d967124da5a2209dd05fb6ad3f5d0d2687ea956a22ba1e31c56ec09deb53f0711cd5b24d672405358502e9d1c502659bb36ced66caf83923b021ca0286
TLSH
T15E117A29C593153B07369123B5796702F6580AE72540ECCB3E2C890C1FF5D16E1D3FA4
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ro\messages.json
Size 937B
SHA256 085787999d78fadff9600c9dc5e3ff4fb4eb9be06d6bb19df2eef8c284be7b20
MD5 bed8332ab788098d276b448ec2b33351
SHA1 6084124a2b32f386967da980cbe79dd86742859e
SHA512 22596584d10707cc1c8179ed3abe46ef2c314cf9c3d0685921475944b8855aab660590f8fa1cfdce7976b4bb3bd9abbbf053f61f1249a325fd0094e1c95692ed
TLSH
T112119C05D1524EEF0A7142A3B8703A81E13584E66544AD9B796CC92E5FB6C0381C3FCC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ru\messages.json
Size 1KB
SHA256 c0a776448a258efd47065bf3f4b45260d1b4cb431d57ecc97995e122249081f6
MD5 1ca9a6bd3d62b1abec854ff1864e10b9
SHA1 f8a3351adee093489c19fad2d46ef2ce532718dd
SHA512 81ff14cb54e01cc17cdb55a0c3a315001a12e91028606b49f7d46af3b57bba3ea10d75f6c1753fa59e1297a79a92efbff623b02036fa8102b5b93e665b6e666c
TLSH
T17B214611D54A78FE123AB537FC047E02B8A240BE3E466A9535382D2F3BF541502FB719
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\si\messages.json
Size 2KB
SHA256 54241ebe651a8344235cc47afd274c080abaebc8c3a25afb95d8373b6a5670a2
MD5 b8a4fd612534a171a9a03c1984bb4bdd
SHA1 f513f7300827fe352e8ecb5bd4bb1729f3a0e22a
SHA512 c03e35bfde546aeb3245024ef721e7e606327581efe9eaf8c5b11989d9033bdb58437041a5cb6d567baa05466b6aaf054c47f976fd940eeedf69fdf80d79095b
TLSH
T18C51029EF0B6FF9A5A3592026C71E4A9048E9F9015F010BBD8CAC1CA6C0DD3CD66F953
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sk\messages.json
Size 934B
SHA256 903060ec9e76040b46deb47bbb041d0b28a6816cb9b892d7342fc7dc6782f87c
MD5 8e55817bf7a87052f11fe554a61c52d5
SHA1 9abdc0725fe27967f6f6be0df5d6c46e2957f455
SHA512 eff9ec7e72b272dde5f29123653bc056a4bc2c3c662ae3c448f8cb6a4d1865a0679b7e74c1b3189f3e262109ed6bc8f8d2bde14aefc8e87e0f785ae4837d01c7
TLSH
T15E117A0AC0922D6F463D4661B8723245E3E889F60648E8AB7ABC900A4FB1813949AF49
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sl\messages.json
Size 963B
SHA256 aab9cf9098294a46dc0f2fa468afff7ca7c323a1a0efa70c9db1e3a4da05d1d4
MD5 bfaefeff32813df91c56b71b79ec2af4
SHA1 f8eda2b632610972b581724d6b2f9782ac37377b
SHA512 971f2bbf5e9c84de3d31e5f2a4d1a00d891a2504f8af6d3f75fc19056bfd059a270c4c9836af35258aba586a1888133fb22b484f260c1cbc2d1d17bc3b4451aa
TLSH
T12D11BD2498B22D2F1C76D16F74B53302EA10057D5445588A3A1CB7180FB6D52D5CEF28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sq\messages.json
Size 950B
SHA256 8558d3adaec20033c83b2e5c4c8121f969f531ae779c15181e65a2f7954ebc6b
MD5 aa1bc08cf49cbc6a8cb8e6a04c4f1a4a
SHA1 9c06fa875d0a6d5ee4a1bcca25424cbe55d97a28
SHA512 5d99f7c5fbf724563e2b0f64e297f415219feba376d48b1c0fe752da198d4a5b61e05244226c3ef3bf38288df97761397a08206fbb84e0909875a9f2e3e1c542
TLSH
T120119B0184611EBBC272516739653201E2A011FF11D4EC6EBA6CDA1E8FB2C3640A6E0C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sr\messages.json
Size 1KB
SHA256 4e8b69e864f57cddd4dc4e4faf2c28d496874d06016bc22e8d39e0cb69552769
MD5 7f5f8933d2d078618496c67526a2b066
SHA1 b7050e3efa4d39548577cf47cb119fa0e246b7a4
SHA512 0fbab56629368eef87deef2977ca51831beb7deae98e02504e564218425c751853c4fdeaa40f51ecfe75c633128b56ae105a6eb308fd5b4a2e983013197f5dba
TLSH
T1A321295199AB6CAF4226E01BB8047D05B9AA41BE3F1654C5326C2C1F3BF147807D7B5D
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sv\messages.json
Size 884B
SHA256 64b1e422b346ab77c5d1c77142685b3ff7661d498767d104b0c24cb36d0eb859
MD5 90d8fb448ce9c0b9ba3d07fb8de6d7ee
SHA1 d8688cac0245fd7b886d0deb51394f5df8ae7e84
SHA512 6d58f49ee3ef0d3186ea036b868b2203fe936ce30dc8e246c32e90b58d9b18c624825419346b62af8f7d61767dbe9721957280aa3c524d3a5dfb1a3a76c00742
TLSH
T10811C246D4612C7B0F3A922B31753306E26402F91290DC9A75BC842CEFB7D1750DBF1A
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\sw\messages.json
Size 980B
SHA256 0d20680b74af10ef8c754fcde259124a438dce3848305b0caf994d98e787d263
MD5 d0579209686889e079d87c23817eddd5
SHA1 c4f99e66a5891973315d7f2bc9c1daa524cb30dc
SHA512 d59911f91ed6c8ff78fd158389b4d326daf4c031b940c399569fe210f6985e23897e7f404b7014fc7b0acec086c01cc5f76354f7e5d3a1e0dedef788c23c2978
TLSH
T18D119B71E430287B42B5026735E83721F3D5C6B11554AC877A2C9B9E5F32C4701DBF54
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ta\messages.json
Size 1KB
SHA256 6282bf9df12ad453858b0b531c8999d5fd6251eb855234546a1b30858462231a
MD5 dcc0d1725aeaeaaf1690ef8053529601
SHA1 bb9d31859469760ac93e84b70b57909dcc02ea65
SHA512 6243982d764026d342b3c47c706d822bb2b0caffa51f0591d8c878f981eef2a7fc68b76d012630b1c1eb394af90eb782e2b49329eb6538dd5608a7f0791fdcf5
TLSH
T18F418FCF813DFE8B1EA3145F2329135562547156C02AF3A23C7C5E25D9ECC9ACA60ABC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\te\messages.json
Size 1KB
SHA256 026c164bae27dbb36a564888a796aa3f188aad9e0c37176d48910395cf772cea
MD5 385e65ef723f1c4018eee6e4e56bc03f
SHA1 0cea195638a403fd99baef88a360bd746c21df42
SHA512 e55167cb5638e04df3543d57c8027b86b9483bfcafa8e7c148eded66454aebf554b4c1cf3c33e93ec63d73e43800d6a6e7b9b1a1b0798b6bdb2f699d3989b052
TLSH
T12F41B0017622EA25DBE702B37528F608495817D262C5E72D3E7FA74BFF57C2D0083A26
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\th\messages.json
Size 1KB
SHA256 d147631b2334a25b8aa4519e4a30fb3a1a85b6a0396bc688c68dc124ec387d58
MD5 64077e3d186e585a8bea86ff415aa19d
SHA1 73a861ac810dabb4ce63ad052e6e1834f8ca0e65
SHA512 56dd389eb9dd335a6214e206b3bf5d63562584394d1de1928b67d369e548477004146e6cb2ad19d291cb06564676e2b2ac078162356f6bc9278b04d29825ef0c
TLSH
T13D313373A2425DEA6421231332653381F61CACAA3B63FCD1B959200E0BF1B168413FEB
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\tr\messages.json
Size 1KB
SHA256 b9066a162bee00fd50dc48c71b32b69dffa362a01f84b45698b017a624f46824
MD5 76b59aaacc7b469792694cf3855d3f4c
SHA1 7c04a2c1c808fa57057a4cceee66855251a3c231
SHA512 2e507ca6874de8028dc769f3d9dfd9e5494c268432ba41b51568d56f7426f8a5f2e5b111ddd04259eb8d9a036bb4e3333863a8fc65aab793bcef39edfe41403b
TLSH
T1DB116A44E0D3281F8A74170F35AA2256E59507BA3220FC9936BDC50CEFB595640E3B68
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\uk\messages.json
Size 1KB
SHA256 9fa26ff09f6acde2457ed366c0c4124b6cac1435d0c4fd8a870a0c090417da19
MD5 970963c25c2cef16bb6f60952e103105
SHA1 bbddacfeee60e22fb1c130e1ee8efda75ea600aa
SHA512 1bed9fe4d4adeed3d0bc8258d9f2fd72c6a177c713c3b03fc6f5452b6d6c2cb2236c54ea972ece7dbfd756733805eb2352cae44bab93aa8ea73bb80460349504
TLSH
T14721BB1599553CFF0226A32FFC447A00BCA501BA2B129B6B35A86C2E3FF5416026AB59
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\ur\messages.json
Size 1KB
SHA256 5da836224d0f3a96f1c5eb5063061aad837ca9fc6fed15d19c66da25cf56f8ac
MD5 8b4df6a9281333341c939c244ddb7648
SHA1 382c80cad29bcf8aaf52d9a24ca5a6ecf1941c6b
SHA512 fa1c015d4ea349f73468c78fdb798d462eef0f73c1a762298798e19f825e968383b0a133e0a2ce3b3df95f24c71992235bfc872c69dc98166b44d3183bf8a9e5
TLSH
T110217BA1E5F41B774331C467E0A77E20D3760E634240F6997929464A8FB64035B8AEBC
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\uz\messages.json
Size 865B
SHA256 1eba3f2228c3e838a666f85ba3ee42c1d62c98a51287c5cf1de3fcd204c3bc4c
MD5 043e661611bed481ea3d1734a792c5a8
SHA1 1b3deccd3128081cada2bc88244609c36f2c4f8c
SHA512 43a716864098252bdeabda2d121302d9085bc610c03c3f27a37f519318c6994ea959123775c3bbcb808d6502dcec4f91a9bcb09b7e629bfb341c6b165d7bd072
TLSH
T18811C244F0A19E7BC37182A335552A01F29001B55640DCBA7E3C7A1E4FF6D2266C3F28
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\vi\messages.json
Size 1KB
SHA256 597c5f32bc999746bc5c2ed1e5115c523b7eb1d33f81b042203e1c1df4bbcafe
MD5 773a3b9e708d052d6cbaa6d55c8a5438
SHA1 5617235844595d5c73961a2c0a4ac66d8ea5f90f
SHA512 e5f906729e38b23f64d7f146fa48f3abf6baed9aafc0e5f6fa59f369dc47829dbb4bfa94448580bd61a34e844241f590b8d7aec7091861105d8ebb2590a3bee9
TLSH
T10811C004A7B9243B417C8A37B56C7202EB61D5EECE80DC863ABC913C6FB78519455F9C
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\zh_CN\messages.json
Size 873B
SHA256 c047235c983d3dcf835d4ecc1c9270c6262a09a5acadf093d87e709c0a23cae7
MD5 de9899623560d8a6f389cb0726abfa7c
SHA1 3edb7a2736cbd8808b5ba3b77734bc0e54797ca5
SHA512 4b34ddfe9c94b651ff6926ef15bda94f8f72a106ad9f81d2a937731f2fc9566b66c70fb4e7006769ec13f17492c552af8d0449b3a8967b045d3e71a31e7c9fad
TLSH
T17B11AF00D2A0797F06379253752AB243F1F155B460249C9E7D6DD54C5F71C53125BF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\zh_HK\messages.json
Size 1KB
SHA256 30f44cfad052d73d86d12fa20cfc111563a3b2e4523b43f7d66d934ba8dace91
MD5 524e1b2a370d0e71342d05dde3d3e774
SHA1 60d1f59714f9e8f90ef34138d33fbff6dd39e85a
SHA512 d2225cf2fa94b01a7b0f70a933e1fdcf69cdf92f76c424ce4f9fcc86510c481c9a87a7b71f907c836cbb1ca41a8bebbd08f68dbc90710984ca738d293f905272
TLSH
T13E2149EEA2456AAB47BAC1CAFD283D4FC5930E602063D173C0FC698C370692D5DA6864
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\zh_TW\messages.json
Size 843B
SHA256 f94c6ddedf067642a1af18d629778ec65e02b6097a8532b7e794502747aeb008
MD5 0e60627acfd18f44d4df469d8dce6d30
SHA1 2bfcb0c3ca6b50d69ad5745fa692baf0708db4b5
SHA512 6ff517eed4381a61075ac7c8e80c73fafae7c0583ba4fa7f4951dd7dbe183c253702dee44b3276efc566f295dac1592271be5e0ac0c7d2c9f6062054418c7c27
TLSH
T100014C64D2A0387B4136D16375A83352E19C52F50404BCD6BB1C9D8CCFB5C1A01FAF58
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_locales\zu\messages.json
Size 912B
SHA256 ec78ddd4ccf32b5d76ec701a20167c3fbd146d79a505e4fb0421fc1e5cf4aa63
MD5 71f916a64f98b6d1b5d1f62d297fdec1
SHA1 9386e8f723c3f42da5b3f7e0b9970d2664ea0baa
SHA512 30fa4e02120af1be6e7cc7dbb15fae5d50825bd6b3cf28ef21d2f2e217b14af5b76cfcc165685c3edc1d09536bfcb10ca07e1e2cc0da891cec05e19394ad7144
TLSH
T1F611C0C543D25FC9472E83577B15B0112BE60BB562C23A73E9E9321D18578B57907F38
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\_metadata\verified_contents.json
Size 11KB
SHA256 4d441fb1a868ae146813a98f1eb48e30e5e9a13c0e611a8231dfac5fc9eda1b4
MD5 3f2b1498d5e090ada9c94382ac23d6d4
SHA1 d4f4e2db2668697e635fbae1247199d3aedc65c3
SHA512 b50a6415dbf9732427bdfe05a676d6a0792e9d56e08c3f902ebd518aac05302e7cc7c1ee5b1a7f2d5ff4e5dea4259a4f9c0fd6355458d3bea7189bc23485aab2
SSDEEP 192:RBG1a5Ma9+PqITEPc6R+ZdmOp+lbO/d/jUmkD2mLLpPwcgT9QrWBVnGSn8:e5xn3BolOU1sp8
TLSH
T106326668CC8D708CFC56FB764BAA75769B48C9C9A14D6E1E13D34C603CB7A4988A30DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\manifest.json
Size 2KB
SHA256 fb058a918d6dd8b78e841a3e49c81a68333cc2c074f34a3ccd722547eeee024e
MD5 e7d544db4b3c5b9a266500baaf70de89
SHA1 899c90f13bfc3dd5a2a9faea8bcf45f4aefc052d
SHA512 171e288467cd934c0aac008376763e8c5ca546eca7b1c45bdb200fcd480f7ebafc6197dda42115815490838e061a56520cb371b0909575b9bea35826b1f300bf
TLSH
T17D516DFBBC10AC6347B08594991A710EF729735E45CFC4DBB2BC60734BE4CAA1D60598
MD5 SHA1 SHA512 TLSH

Submit Download

offscreendocument.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\offscreendocument.html
Size 97B
SHA256 b9fa2d52a4ffabb438b56184131b893b04655b01f336066415d4fe839efe64e7
MD5 b747b5922a0bc74bbf0a9bc59df7685f
SHA1 7bf124b0be8ee2cfcd2506c1c6ffc74d1650108c
SHA512 7567761be4054fcb31885e16d119cd4e419a423ffb83c3b3ed80bfbf64e78a73c2e97aae4e24ab25486cd1e43877842db0836db58fbfbcef495bc53f9b2a20ec
TLSH
T132B012EE6C03C10004551E8A38E092146412638870D1A1445CDEE0334D4075C9C0B44C
MD5 SHA1 SHA512 TLSH

Submit Download

offscreendocument_main.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\offscreendocument_main.js
Size 131KB
SHA256 917d2458ae42e72d90a73b90dbb0a5b0c67eb8f751554122d663d7eb67fbe3ed
MD5 c805bfc174dc1f02504694dd4e607892
SHA1 952ff0a6083c878db9c83c42e4c9e3a6e85e7b1e
SHA512 aebe0a125e15bc57f3803efc3339dab73ef9027f797bd09476162825b5e8d4c046f46a7aff872e6c8cbf12fa23ba707e5b5c9c86695524ac90e08d7988b600de
SSDEEP 3072:zV8Ys3PBOTpKIQGxzjaa19L1qMDHfXXTAQmk23UKWN1a32T:zVCkTLU0TApkaWNRT
TLSH
T141D3EACCF6A5705243A3A5F5402F010BB23AB8B9E44C85A8B288D8E97DB546D4377F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_1819903422\CRX_INSTALL\page_embed_script.js
Size 339B
SHA256 6f98e519001e27a4c99987bb11c5f4a5b17a0e377839f53fd80d9dc563214e39
MD5 ea121b05e3f10c1d0ac83e4a37a31470
SHA1 80ee51087960cb0efc36b4f6bec5abe52f78f961
SHA512 8304d182e0b81266fff6b814a31447e8e515b24e5b6858da3b728eb90246f7bafa28dbbd63fadb5a32859c8970cc177749ff98a7462a64c6c9a8b457af18bef6
TLSH
T1A5E086070F095929F0BE891EEF133A43AB7541106C35954F26CE0051AF433DBD1192BC
MD5 SHA1 SHA512 TLSH

Submit Download

745812db-e6f3-433d-ab7d-63a28e1085bf.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_385108653\745812db-e6f3-433d-ab7d-63a28e1085bf.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1096_385108653\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VBCABLE_ControlPanel.exe

Path C:\Users\Admin\AppData\Local\svt\vbcable\VBCABLE_ControlPanel.exe
Size 908KB
SHA256 f5b44706fe7ba2eed0516dee791f826dc7a9891e997f6ce9704e2899300b14ff
MD5 c56acc1e49d1af04a5a5c4f737cdbfc5
SHA1 b1e6d6bd23619e46957da080d76cad96e1dae389
SHA512 1ff45dab43ad7352c899968d360d2b86cc36d522ba699bb8895a80c950613ed8c6e2ee1d7470c355c6b3537383d436c832ac356158df581aff4fd36b04fa30fb
SSDEEP 6144:M7wG/LZIILw6dxL0B4NHh9aphA2hwrYqrgLuBj2Xhntm5hJ2r9Un+Ldqscgu:UZIILw6dxL04DkLuBj2xntmgr9+yRs
TLSH
T14C150072575D32B0C440C6FF4B8F3240B401ADFD219F947ABB4A3C699378E6D928AD96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VBCABLE_Setup_x64.exe

Path C:\Users\Admin\AppData\Local\svt\vbcable\VBCABLE_Setup_x64.exe
Size 915KB
SHA256 734c35dfa6d98f48782a451633ceb471166ec70d60482fd89a1123d0ee3c4f41
MD5 fd3ec8b4d075d879af81caee8f216724
SHA1 3f6e53cef29dc30df588def8abd83cc052ededef
SHA512 816c2fe66a0333ed92d9edb3d67e852b11999e24d0e001a158c9ea46a0bc3b08858929693d6beb4cf3f91d085dfc19c0f1970f3d8bb1c959f3e378fbf0b8da7c
SSDEEP 12288:XmBbJrhTZUI6HKhgS9APmGKRH8MYmmBHBw:Xm9rhTZ36HKhx9AP0RH8MYDBHBw
TLSH
T16F15D8E531623A03C9DC45369918BBFDB9C41C44D625FA74A93BB90C103A7D0B93A7EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pin_in.ico

Path C:\Users\Admin\AppData\Local\svt\vbcable\pin_in.ico
Size 7KB
SHA256 934865449455103c1c5997d8220acd160c3891f8a870f8e745b743d12681ac42
MD5 e442346f22da9a5bb15dfaba67a360b8
SHA1 6255a045c25bda6097eca8b4d611219093cf9525
SHA512 09dc47e1b5b1f932a9b87aca9e13b9e85e0674630335f24af613ca5cb2af3d282de8438937ba30e7640accb6f1843686bb310a0bbf882c9d87bd876e7fe4d266
SSDEEP 24:Vt9xMU25SeyH2tJL7w8hoUaJWRHJdwWxg7N/26YFwtNxUb6bUZINoy3dC5Q/JkmI:HJSJVoUd1FzxMN2mbegaQ/q
TLSH
T120E19FCE54BA1E56CAD000BE35BC6C51C3D40C62D899B0993253736C987AF9DE21CE6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pin_out.ico

Path C:\Users\Admin\AppData\Local\svt\vbcable\pin_out.ico
Size 7KB
SHA256 e8728a811e1f1af7d2ba31f77e47d449d5bba091e3e89a0df325ac7a3e67652c
MD5 235559de67569ebc8fdcf5d51d753b57
SHA1 ce78fbbc34348c637c6f8d04f5ee1d1fb572e432
SHA512 2b31c416c15ab0fd61a3e1de6e30cba777abd26bc6017e6714f0607be674db58cc81181f8ddd6eb8fc1ec1d3de4ae7396daf066f846dbf03833e11dc81ec6047
SSDEEP 96:FuzFTKHCf1OAxA9nvUsvZG0ieQGnAvqlUvX:FuRjtOA6vUmZGleQa8qlUvX
TLSH
T14BE1BEF1BD8E376AC0CE25B3C2BC3555C6D84FA1F5889B355066724A04B14E26E0DEBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vbMmeCable64_win10.inf

Path C:\Users\Admin\AppData\Local\svt\vbcable\vbMmeCable64_win10.inf
Size 11KB
SHA256 61c857be74831cc299d9be62f8d49d137f14063454fc54f859d5bc9b4b813daf
MD5 937c403862f584e1ea23800b77fd68fc
SHA1 a89b8f0ff7d66d9a1313e9169db7e301d9601f17
SHA512 59ec053c7858f8f3598518c054a1345e677997064131cbb7bfc0dbfa6ff8835b21dc206bba8cc22c9172f137f8806bf50d646a2bfc5938e869eb8faaa7e4b520
SSDEEP 192:h0iE2f0JoxR+XsR+8wxxagRj8gABagRj8gAUEZ/gdktqqENoAglb84+54D:o28oqGwxlVxAVVxALZ/gdktqwFlb84
TLSH
T1883222C506DBBC1CC382D094DB531EC2EA0366D1A0F617197BB69503EADDB8AC3A4E74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e20f083-19f9-4730-93f4-dd4b3e172929.tmp

Path C:\Users\Admin\Downloads\6e20f083-19f9-4730-93f4-dd4b3e172929.tmp
Size 15KB
SHA256 cef502ed0d3b99ebfadc2e268b920ea89dffcef7f57322224ad8bfef186328b7
MD5 cf1108a20778e28a3a2b1e0799b35fbf
SHA1 0675abb5e418b7c56fea889586031977d92529e3
SHA512 c772d0e88803a4a83450218ab512abb200a21a2de826de1efa0e9a1468b009cb98323d1198706dec72fd9de49f5734158401095a6e48de13b05237ad9127dbc5
SSDEEP 384:FnYuF2NQP0D7R/rKq5cLHr6QPXUkH0M3ZhzfKaarZsU6AOU:FfF2kE7R/BczrNfZPZKPrZs/o
TLSH
T1D972D0A8A41C77187A6B96D8AA0CDD8016145C3826C0AE57CB7D1E827C533D2CEBB736
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VBCABLE_Driver_Pack45.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\VBCABLE_Driver_Pack45.zip:Zone.Identifier
Size 141B
SHA256 ab6754218c7c1c46dd2245b672f708bb8e8a9dc1520f86e9ed30f71631bf6ef0
MD5 ecc8c06ffcb9184f7bd61639102ee8a6
SHA1 a161dea94ec44c456e3ab035ed9cb151ce4cb961
SHA512 90775fadaeba3e9a0e4ec3d1ced917001e590f341621aca7cbe8b37f8c5b1c450d7d9349ddc194430c9cf0a9d18c1b1a02084ed224550ebd2a76d47e24bb6ed0
TLSH
T1C8C02B87440089200B0010D03A6C940CA72F630A0DD5C540EC00604BD7D00B8CCF3C03
MD5 SHA1 SHA512 TLSH

Submit Download

VBFFD5~1.SYS

Path \??\c:\users\admin\appdata\local\svt\vbcable\VBFFD5~1.SYS
Size 137KB
SHA256 f01344602472f1b527de5ee98f18987c03db48fea444e457d061e937f1d531d5
MD5 7b69ad5c60efb7e802bc7fda8b22bc4e
SHA1 96749d221eea16972393ab529a6ede85a91e6f94
SHA512 827027d4951bae48b82b5cca72efbd91a48bd5fd0a5206e78c393f098013d186b4ab65f5a78a036b25e74aae4950f3ffc712571dea8335b89c35fbd6c9154d48
SSDEEP 1536:Fwg3HqjC/TQy3EDp1/Sjl5RbVpqxmubMnDp0IcjHjSezF:PKjCB3a/Sjl5vDubMlCjDhx
TLSH
T140D3E5A6B2A43AF1C48D10F1C66C9F86D760ED885BC5878720227B190E737E97D34E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vbaudio_cable64_win10.cat

Path \??\c:\users\admin\appdata\local\svt\vbcable\vbaudio_cable64_win10.cat
Size 12KB
SHA256 0a921ebadbe39cf3fa7c14ff37d1ca22565a9651244bd3ac177dc810bc99072e
MD5 12b8515be2a7c142674fecc666e049c8
SHA1 2551eec8bd705c343f5fa03faec414cb9d865f22
SHA512 4c6c62a612bb9b2731ed76196b57cbd6147a8d66785b7c023b9f3a7399fbc498cf8d4fe9478acaf2f89c849170d10fd0e70008cc1c929be54fafed87ed590726
SSDEEP 192:zIL5u91AJCqxRnnXBEwZIhYCvrEmeDtagQ5X01k9z3A1oDnucJp:QRdRIh3wmeDtdQ5R9zQoDucJp
TLSH
T18E42F8A6855D4083FAA3AC6053E4F5577C3A37CF6C4015AA62DFF71A09A23C8F71426E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/912-1403-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1398-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1405-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1397-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1396-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1404-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1406-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1407-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/912-1408-0x000001E04CA10000-0x000001E04CA11000-memory.dmp

Download

memory/4320-6-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-12-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-5-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-4-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-17-0x00000177CB200000-0x00000177CB3A6000-memory.dmp

Download

memory/4320-10-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-11-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-94-0x00000177CB200000-0x00000177CB3A6000-memory.dmp

Download

memory/4320-13-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-14-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-15-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/4320-16-0x00000177CA920000-0x00000177CA921000-memory.dmp

Download

memory/5508-1394-0x000001E684C00000-0x000001E684FBB000-memory.dmp

Download

memory/5508-1395-0x000001E684C00000-0x000001E684FBB000-memory.dmp

Download