460317923277cfa8af4973027afed29979dddb55336d08dfd656326810ce8439

Analysis

user interaction
yes
max time kernel
300s
max time network
304s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 16:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Jac-Code-Setup.exe
Size 5.4MB
Sample261027-vd4craea96
SHA256 460317923277cfa8af4973027afed29979dddb55336d08dfd656326810ce8439
MD5 46751cf1c7500c3826dcc7b278290cf8
SHA1 58dff9c9c3489457270bc443fe8868e94eec8240
SHA512 4e8735f0a45de087b7b0b32962f46fac62ac48b65c5ccf19277d357d1e81cfec5558e7e8dcd9099321b3ecd3a1c12e6ff0e54b192906e8570c0a397d24b43711
SSDEEP 98304:oagzHLAR2PDSo1BBAThFJjA2gD7uEoyeVCb4MABph:iNPDSEBAThFJjin0CFAPh
TLSH
T16F468C1933FC6E27D56FE776D1B095126BF5F86AB363EB0B2182D2A54C12B105C423A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
11	4420	Jac-Code-Setup.exe

Checks computer location settings 2 TTPs 5 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation	Jac Code.exe
Key value queried	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation	jac-engine.exe
Key value queried	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation	Jac Code.exe
Key value queried	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation	Jac Code.exe
Key value queried	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation	Jac Code.exe

Executes dropped EXE 35 IoCs

pid	Process
2412	verified-installer.exe
1140	jac.exe
4476	Jac Code.exe
3688	jac.exe
4972	Jac Code.exe
4812	Jac Code.exe
2728	Jac Code.exe
1160	Jac Code.exe
452	Jac Code.exe
1292	jac.exe
4208	Jac Code.exe
1812	Jac Code.exe
4028	Jac Code.exe
3444	Jac Code.exe
1648	jac-engine.exe
544	JacDesktopLock.exe
2972	JacAuth.exe
4212	JacAuth.exe
3068	JacDesktopUpdate.exe
3580	JacAuth.exe
2140	JacAuth.exe
4044	JacAuth.exe
4308	JacAuth.exe
3252	Jac Code.exe
4816	JacAuth.exe
4464	JacDesktopUpdate.exe
1212	JacAuth.exe
1636	JacAuth.exe
2136	rg.exe
1616	JacAuth.exe
1636	JacAuth.exe
2004	JacAuth.exe
5416	JacAuth.exe
6136	JacAuth.exe
4056	JacAuth.exe

Loads dropped DLL 11 IoCs

pid	Process
4812	Jac Code.exe
4812	Jac Code.exe
4812	Jac Code.exe
4812	Jac Code.exe
4812	Jac Code.exe
4812	Jac Code.exe
3444	Jac Code.exe
3252	Jac Code.exe
3252	Jac Code.exe
3252	Jac Code.exe
1648	jac-engine.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\JacCode_F9078B62610FCF91A3F6 = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Jac Code\\jac.exe\" --startup"	verified-installer.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4696_1933252590\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4696_588304996\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4696_1933252590\manifest.json	msedge.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 3 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
4080	powershell.EXE
4996	powershell.EXE
1212	powershell.EXE

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2656	powershell.exe
5556	powershell.EXE
5204	powershell.EXE
2004	powershell.EXE

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 15 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	JacAuth.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	JacAuth.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	rg.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jac-Code-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	jac-engine.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jac-Code-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	jac-engine.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jac Code.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3764	msedge.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Jac Code.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Jac Code.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jac Code.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Jac Code.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{801B1589-3E89-4034-96C4-D70D96EFD4F4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 17 IoCs

pid	Process
3252	Jac Code.exe
3252	Jac Code.exe
2656	powershell.exe
2656	powershell.exe
2656	powershell.exe
5556	powershell.EXE
5556	powershell.EXE
5556	powershell.EXE
1212	powershell.EXE
1212	powershell.EXE
1212	powershell.EXE
4080	powershell.EXE
4080	powershell.EXE
4080	powershell.EXE
5204	powershell.EXE
5204	powershell.EXE
5204	powershell.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4696	msedge.exe
4696	msedge.exe
4696	msedge.exe
4696	msedge.exe
4696	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4420	Jac-Code-Setup.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4972	Jac Code.exe
Token: SeCreatePagefilePrivilege	4972	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe
Token: SeCreatePagefilePrivilege	4476	Jac Code.exe
Token: SeShutdownPrivilege	4476	Jac Code.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4420	Jac-Code-Setup.exe
4476	Jac Code.exe
4696	msedge.exe
4696	msedge.exe
4696	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4420 wrote to memory of 2412	4420	Jac-Code-Setup.exe	92
PID 4420 wrote to memory of 1140	4420	Jac-Code-Setup.exe	94
PID 1140 wrote to memory of 4476	1140	jac.exe	96
PID 3688 wrote to memory of 4972	3688	jac.exe	98
PID 4476 wrote to memory of 4812	4476	Jac Code.exe	100
PID 4476 wrote to memory of 2728	4476	Jac Code.exe	101
PID 4972 wrote to memory of 1160	4972	Jac Code.exe	102
PID 4972 wrote to memory of 452	4972	Jac Code.exe	103
PID 1292 wrote to memory of 4208	1292	jac.exe	107
PID 4208 wrote to memory of 1812	4208	Jac Code.exe	108
PID 4208 wrote to memory of 4028	4208	Jac Code.exe	109
PID 4476 wrote to memory of 3444	4476	Jac Code.exe	110
PID 4476 wrote to memory of 1648	4476	Jac Code.exe	111
PID 1648 wrote to memory of 544	1648	jac-engine.exe	113
PID 1648 wrote to memory of 2972	1648	jac-engine.exe	115
PID 1648 wrote to memory of 4212	1648	jac-engine.exe	117
PID 4476 wrote to memory of 3068	4476	Jac Code.exe	119
PID 1648 wrote to memory of 3580	1648	jac-engine.exe	120
PID 1648 wrote to memory of 2140	1648	jac-engine.exe	123
PID 1648 wrote to memory of 4044	1648	jac-engine.exe	125
PID 1648 wrote to memory of 4308	1648	jac-engine.exe	127
PID 4476 wrote to memory of 3252	4476	Jac Code.exe	130
PID 1648 wrote to memory of 4816	1648	jac-engine.exe	131
PID 4476 wrote to memory of 4464	4476	Jac Code.exe	133
PID 4476 wrote to memory of 4696	4476	Jac Code.exe	135
PID 4696 wrote to memory of 1924	4696	msedge.exe	136
PID 4696 wrote to memory of 3764	4696	msedge.exe	137
PID 4696 wrote to memory of 2012	4696	msedge.exe	138
PID 4696 wrote to memory of 2012	4696	msedge.exe	138
PID 4696 wrote to memory of 2012	4696	msedge.exe	138
PID 4696 wrote to memory of 3464	4696	msedge.exe	139
PID 4696 wrote to memory of 3464	4696	msedge.exe	139
PID 4696 wrote to memory of 828	4696	msedge.exe	140
PID 4696 wrote to memory of 2972	4696	msedge.exe	141
PID 4696 wrote to memory of 828	4696	msedge.exe	140
PID 4696 wrote to memory of 828	4696	msedge.exe	140
PID 4696 wrote to memory of 2972	4696	msedge.exe	141
PID 4696 wrote to memory of 2972	4696	msedge.exe	141
PID 4696 wrote to memory of 3252	4696	msedge.exe	143
PID 4696 wrote to memory of 1020	4696	msedge.exe	144
PID 4696 wrote to memory of 3252	4696	msedge.exe	143
PID 4696 wrote to memory of 3252	4696	msedge.exe	143
PID 4696 wrote to memory of 1020	4696	msedge.exe	144
PID 4696 wrote to memory of 1020	4696	msedge.exe	144
PID 4696 wrote to memory of 2248	4696	msedge.exe	155
PID 4696 wrote to memory of 2248	4696	msedge.exe	155
PID 4696 wrote to memory of 4224	4696	msedge.exe	149
PID 4696 wrote to memory of 4224	4696	msedge.exe	149
PID 4696 wrote to memory of 2488	4696	msedge.exe	150
PID 4696 wrote to memory of 1560	4696	msedge.exe	151
PID 4696 wrote to memory of 2488	4696	msedge.exe	150
PID 4696 wrote to memory of 1560	4696	msedge.exe	151
PID 4696 wrote to memory of 2924	4696	msedge.exe	154
PID 4696 wrote to memory of 2248	4696	msedge.exe	155
PID 4696 wrote to memory of 2248	4696	msedge.exe	155
PID 4696 wrote to memory of 804	4696	msedge.exe	156
PID 4696 wrote to memory of 804	4696	msedge.exe	156
PID 4696 wrote to memory of 1164	4696	msedge.exe	157
PID 4696 wrote to memory of 1164	4696	msedge.exe	157
PID 4696 wrote to memory of 744	4696	msedge.exe	158
PID 4696 wrote to memory of 744	4696	msedge.exe	158
PID 4696 wrote to memory of 2160	4696	msedge.exe	159
PID 4696 wrote to memory of 2160	4696	msedge.exe	159
PID 4696 wrote to memory of 2248	4696	msedge.exe	161

C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup.exe"
1⤵
- Downloads MZ/PE file
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4420
- C:\Users\Admin\AppData\Local\Temp\jac-bootstrap-cab0a480ad0d490da3e56477842c8f11\verified-installer.exe
  "C:\Users\Admin\AppData\Local\Temp\jac-bootstrap-cab0a480ad0d490da3e56477842c8f11\verified-installer.exe" /S /DIR="C:\Users\Admin\AppData\Local\Programs\Jac Code" /DESKTOP=1 /STARTUP=1
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  PID:2412
- C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
  "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --home
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1140
- - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" "--home"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4476
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1712,i,4201486279845884567,11972760038810553280,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,6692703954605824707,16012138774461580898,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1692 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4812
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1712,i,4201486279845884567,11972760038810553280,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,6692703954605824707,16012138774461580898,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1912 /prefetch:3
      4⤵
      Executes dropped EXE
      Reads the TCP/IP host and domain name from the registry
      PID:2728
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --app-user-model-id=JacCode.Desktop --app-path="C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1712,i,4201486279845884567,11972760038810553280,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,6692703954605824707,16012138774461580898,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3120 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:3444
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\jac-engine.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\jac-engine.exe"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Reads the TCP/IP host and domain name from the registry
      Suspicious use of WriteProcessMemory
      PID:1648
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopLock.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopLock.exe" transaction C:\Users\Admin\.local\share\jaccode
        5⤵
        Executes dropped EXE
        
        PID:544
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" transaction
        5⤵
        Executes dropped EXE
        
        PID:2972
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" transaction
        5⤵
        Executes dropped EXE
        
        PID:4212
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:3580
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" transaction
        5⤵
        Executes dropped EXE
        
        PID:2140
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" transaction
        5⤵
        Executes dropped EXE
        
        PID:4044
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" device
        5⤵
        Executes dropped EXE
        Reads the TCP/IP host and domain name from the registry
        
        PID:4308
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" transaction
        5⤵
        Executes dropped EXE
        
        PID:4816
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:1212
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:1636
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NonInteractive -Command "$global:ProgressPreference = 'SilentlyContinue'; Expand-Archive -LiteralPath 'C:\Users\Admin\.cache\jaccode\bin\ripgrep-15.1.0-x86_64-pc-windows-msvc.zip' -DestinationPath 'C:\Users\Admin\.cache\jaccode\bin\ripgrep-T6GVaC' -Force"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:2656
    - - C:\Users\Admin\.cache\jaccode\bin\rg.exe
        
        C:\Users\Admin\.cache\jaccode\bin\rg.exe --no-config --files --glob=!**/.git/** .
        5⤵
        Executes dropped EXE
        Reads the TCP/IP host and domain name from the registry
        
        PID:2136
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:1616
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:1636
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:2004
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:5416
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "Get-Location; Get-ChildItem -Force | Select-Object Mode,Length,Name"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:5556
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "$PSVersionTable.PSVersion; Get-Command cl, cl.exe, gcc, g++, clang++ -ErrorAction SilentlyContinue | Select-Object Name,Source"
        5⤵
        Hide Artifacts: Ignore Process Interrupts
        Suspicious behavior: EnumeratesProcesses
        
        PID:1212
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:6136
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "Get-ChildItem \"C:\Program Files\Microsoft Visual Studio\",\"C:\Program Files (x86)\Microsoft Visual Studio\" -ErrorAction SilentlyContinue | Select-Object FullName"
        5⤵
        Hide Artifacts: Ignore Process Interrupts
        Suspicious behavior: EnumeratesProcesses
        
        PID:4080
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "Get-ChildItem -Force -Recurse | Select-Object FullName,Length | Format-Table -AutoSize"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:5204
    - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe" mcp-config
        5⤵
        Executes dropped EXE
        
        PID:4056
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "Get-ChildItem Env: | Where-Object { $_.Name -match 'PATH|USERNAME|COMPUTERNAME' } | Select-Object Name,Value"
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:2004
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -NoLogo -NoProfile -NonInteractive -Command "Get-Command python, python3, py, gcc, clang, make, cmake -ErrorAction SilentlyContinue | Select-Object Name,Source"
        5⤵
        Hide Artifacts: Ignore Process Interrupts
        
        PID:4996
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopUpdate.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
      4⤵
      Executes dropped EXE
      PID:3068
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1712,i,4201486279845884567,11972760038810553280,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1716,i,6692703954605824707,16012138774461580898,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2860 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      PID:3252
  - - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopUpdate.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
      4⤵
      Executes dropped EXE
      PID:4464
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://jaccode.net/
      4⤵
      Drops file in Program Files directory
      Checks processor information in registry
      Enumerates system info in registry
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:4696
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffc39ffc188,0x7ffc39ffc194,0x7ffc39ffc1a0
        5⤵
        
        PID:1924
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,4980333921314414349,4931866184161643227,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:3764
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,9632111697732914718,609937598357666607,262144 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
        5⤵
        
        PID:2012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,13723515768328652454,18002561766138376985,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:8
        5⤵
        
        PID:3464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,16298744783738650614,10768631511178763270,2097152 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
        5⤵
        
        PID:828
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,17890884020140283154,18260535184159593402,2097152 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
        5⤵
        
        PID:2972
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,14686067637156662189,15845257728282909328,2097152 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
        5⤵
        
        PID:3252
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,4870413501935422574,16698992268674901504,2097152 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
        5⤵
        
        PID:1020
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,15155379772922092768,16051464076382446570,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,3372843904039495669,10391436809937372214,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:8
        5⤵
        
        PID:4224
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,16461703983842645415,1896442243391498132,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
        5⤵
        
        PID:2488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,15539465022615348277,14995347283199456393,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
        5⤵
        
        PID:1560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,7826683655231235533,2839804646511124007,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,7826683655231235533,2839804646511124007,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
        5⤵
        
        PID:2924
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,16141225117319527959,13870376549233116555,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,16767279242032687128,2116569816630942954,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
        5⤵
        
        PID:804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,4738555141435450121,11645840258230919426,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
        5⤵
        
        PID:1164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,17359449513017758161,1987558983573225982,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:8
        5⤵
        
        PID:744
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,14284415512678151808,837879209420786484,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
        5⤵
        
        PID:2160
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,2827342318205898114,5873490589682883669,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,9620594638838085158,6356139893056041782,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
        5⤵
        
        PID:688
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,17286249228232314933,10315122354408254662,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
        5⤵
        
        PID:3108
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,13487581556278337140,13483527210061198505,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
        5⤵
        
        PID:4572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2956,i,17365417343972343373,3503063650197923574,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
        5⤵
        
        PID:4996
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1264,i,15404874279436030238,11361003149936693275,524288 --field-trial-handle=2340,i,4891491996013962670,17130326562820341026,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
        5⤵
        
        PID:5828

C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
"C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --startup
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3688
- C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
  "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" "--startup"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4972
- - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1668,i,10641461890646113696,17855198874639983557,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1672,i,12604236211064349109,9112608372201906359,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1664 /prefetch:2
    3⤵
    - Executes dropped EXE
    PID:1160
- - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1668,i,10641461890646113696,17855198874639983557,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1672,i,12604236211064349109,9112608372201906359,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2184 /prefetch:3
    3⤵
    - Executes dropped EXE
    PID:452

C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
"C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --home
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1292
- C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
  "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" "--home"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Checks processor information in registry
  - Suspicious use of WriteProcessMemory
  PID:4208
- - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1784,i,11567017977399126663,17758839655210036292,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1788,i,16508093822160437790,7118589807986003124,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1832 /prefetch:3
    3⤵
    - Executes dropped EXE
    PID:1812
- - C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\Jac Code.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1784,i,11567017977399126663,17758839655210036292,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1788,i,16508093822160437790,7118589807986003124,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1780 /prefetch:2
    3⤵
    - Executes dropped EXE
    PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

protocols.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4696_1933252590\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

rg.exe

Path C:\Users\Admin\.cache\jaccode\bin\rg.exe
Size 4.1MB
SHA256 decdd4992f3f1b9a5ef9898f1b40ab16886d579d6516b4efd3d5eaa19364e408
MD5 309515d04b3847fd87b1975dc7498e9d
SHA1 05f46d32f55be4491d3dc4d6ac0dccba2cb31e2a
SHA512 3d6aa36570da59cf2d052a8765d18fd652c7fd748edf079f46984de1d21a099aea4e00619fe06c8e4f1e9c7b4ea16f4c99acaa2dac20452358a881e6f4c5e7ef
SSDEEP 49152:cvejLH6sn+d8d0CdvkYRh1Y9Puo9zoy9jlRX2CXu4RTFXQ96styCIl9ztghSAZ31:Ku911o9z9VldJ4Hj/Z3X3
TLSH
T16C163A47FAA351E8C569C034835A7233FB72B88D47357AEB5AD447313E52AA01E7CB48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

opencode.db

Path C:\Users\Admin\.local\share\jaccode\opencode.db
Size 4KB
SHA256 97e8d54f8a7255106f66cf1b213c4a4d7b558d21310b1c2bfedc3d0d526dddda
MD5 7521076b0e620fab0a1c8064e30a53bc
SHA1 c3ed68e93b0aa7d81e3118e0724fcbbc0203df42
SHA512 3f57dfd9d6d8e9b8a1d06db976a0ce10b8cd94b6cfce7656e92343e4b9514ee145673f8dc531060e2cc24f08bcd2c62c05b4e803b4a810d91d78d5d82304a8df
TLSH
T16A810440D34000F1D45507F354D1131C0F07F3D4D5410F0315010443CC415444C70FD4
MD5 SHA1 SHA512 TLSH

Submit Download

opencode.db-wal

Path C:\Users\Admin\.local\share\jaccode\opencode.db-wal
Size 253KB
SHA256 f1e86916309e5f692a31a9e54f148ddc7a20476e721662e02d7634464e6e88b4
MD5 7d9ff5eea459ad49781e25b3b4fb2848
SHA1 c12455f1db1485cc6acb83b1320f8f6803903d2f
SHA512 ec41a41562faf830d78666b06e5613689d802d7d5c5e11bc66ac792ceeb3ac3cb96089b85cdb753f3ec181f22c4f0792e7fe80ce8a022d77e56faea8ca116d42
SSDEEP 192:JzP9ulPhL+zwAwrjRnEr+qlBrjOfXy/qSSb+po1tw:JYrWwrNM+qlBrCfi/qSSsoU
TLSH
T18544FE0D7D22A636D4DBE834A9F6A85156B4038B6FC0BD6233FCB560AFDDEC4503A509
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 197B
SHA256 51ee63173f6ae0fbc846a372db6b422845785fc9990d313adf23dd4a66eebaa5
MD5 c1138bcbcd21480638c1b779f304d480
SHA1 bf5f7e2d643df6263bcf26cc7445d6b4bb31db0e
SHA512 3d6aa7809655177d23efd43741026f21347ca9bcefe55b8bf19e7677f0c1a59f321a86f1ef71f28f7504b1b81ed4ab87a2dd3b81ffcfc79dc12064780fa4da31
TLSH
T1D6D0120C745D857F59C8834140082D55E7BD26723250653CD1AC59456AC32DD7132177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 232B
SHA256 1464ba468164378b7351177911c7e3a4e879f81c1082e963b05806622788b632
MD5 7779927a60b270c947a8017407fa430b
SHA1 9b50be9b3e2e19698df7106cab6dd83bf7e100c8
SHA512 9f898369c8a0cc57ceba942dce245513831ba7cb4bd4c5aa1a007f8c9e8728b59d8e2b832865bfe9021196323e162b44b253ca42533f168ce7a5a8126c496026
TLSH
T12CD0A91C344982BF55CDC342420C2D1BE77E22323260A53CD6AC89866BC32ACB4B21B7
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 233B
SHA256 e1f947028c7d5bd49cf99d03d96ad389b84336030af1f2ad2ea14a5b073bce4d
MD5 abec74e9a612439870c335302aa30b0a
SHA1 ba0684ac9717cfe8cd2498f48d6283996c9dcaeb
SHA512 cc371d610537d825892dc8128c7d70c1a7e3fd98237969cb08e806ab390d6189a78bfffb0ecfd09c8ffbdcf6e99dcfcd3971e9bece546547e9bee843ec6caf0e
TLSH
T1EFD0A91C345882BF59CCC342420C2E17E37E22323260A53CD6AC8D466BC32ACB4A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 235B
SHA256 efbc4184a54d95ad186eddb8b1ff90fe4e4f8759969a1814209ad951a5853975
MD5 690574983d41db198f74060867e903f8
SHA1 9e68803d7491e3320e9217b189d84a14e89a37b0
SHA512 a673c6bf77fe1fe6f8e30fc9aa51c1e6f3105b500da703b3a022cbeaeccd4140af349a4e5389b49181eb69a25d120ef13e4fe46fa44595861b585f873de5de56
TLSH
T13CD0A70C3858427F558CC342410C2D57E7BD11313250653CD6EC4D4557832AC74B1177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 260B
SHA256 e6ff3362938c17676a02cf38a6ef8bd89295d1f8da0ad06a194b6cde7dd520e3
MD5 84f694d554124daf046e9c625447f48d
SHA1 62572d4a6ae7b9db5448b9346c8997c085e10dd9
SHA512 6d72e8f376989bad43c15cb84b7de1408589972fcee4280f1ffd47419ee6ee0bf1ef2477a8ab0e38f1d182efd97731776e60427f78fffa9557500ff23879a966
TLSH
T144D0A71C705D423F4ACCC302410D2E56E37D51323260753CD6AC9D155BC32DE75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 275B
SHA256 beb03968fa642fda6991a1d8eae82ba5af9b0d77775fc62bdac873696228a0a5
MD5 c359dce9d6cdd7ea62527386129440e6
SHA1 dc025fb23bfe829a44d2db4811e066c3a39bf518
SHA512 766703a44cdfcdc4f961b80fbe6a3eb16fca7501092301262758017ed9c5d265d702b6cbafb3dd07d4aba63b9c32df671067f68fb90fa4df0506272b11836d41
TLSH
T13BD02E1C3408817F4ACCC302020D2E12E73D12323120783CC6AC8A125BC32DF75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 259B
SHA256 9a183ab9cab3cf8e0b34df81a9c6eff3865afd4fcbd50cf558c5a2ef3d678e63
MD5 f3d9e5b0df4fa65855df8498cc5b80ed
SHA1 4e1f02b0cba7f356c1c42d78dbd0cd7bb0f6cfbf
SHA512 c2704ac118551588d386e92ee5c1d57e710cb4cc6eaa39d7706fe632e9fa789c314f4dd3e166037b97071a08be3b3a6005c690c6a2759e909638dd1eaefa018b
TLSH
T13BD0A71C705D413F4ACCC302410D2E56E37E52323160753CD6AC9A555BC32DE75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 261B
SHA256 1cae68079797b5a4a2af7771a498a7fa5c6817b6fa6b42fc9160ed47ffc99986
MD5 0e4ce79998cef65b3e09576028d52225
SHA1 21a9b7c2493e90de0db428e825aab640e86ac939
SHA512 c6e9ed63049ce6a6b12aee1fda5a4c649ce372d6e271460732c8076eeb42b33037bbd4158b6ff54023cf8b12e18340f4bc6febd2f8112f34aba6ddc8ac6cd87a
TLSH
T1E4D0A71C745D417F4ACCC342410D2E56E37D51323160753CD6AC9A155BC32DF75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 262B
SHA256 ac499b2d2072c9ba5bae3763ff670b574fce756ebfcf704fb5c67f8924ae8198
MD5 57c063430761bce58105a74e1568d2b2
SHA1 d66dc97a42f5bbae8b463d3b4f2c0dc61d5028db
SHA512 8a7f010f333445c8d56d5d70ff53cc1bd52f2f9658160413f890fd30bf38d19e49176489f65fe75e88521c2eca6f0537df5f608983906c63547e272d9f727e0e
TLSH
T182D05E187459423F4A8CC302510D2E56E7BD51322260653CDAA89D55568329E75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 263B
SHA256 f6c7a951f266770ee31197e421bd5c7e5cf59a6811574a900b48552d5d46b3da
MD5 5a40543805f42383e649ccda12504f88
SHA1 9def6bc196b463e6a3835582683bb2cb101ef60e
SHA512 46e1b6d629f39bf4d43d401fa2941eb4e19b5443996bf7f11259110b49269bcf188aeaaa6374601b9ec626391a0dbcb61ef496649f38e8db4ae8aba648c82504
TLSH
T1AFD05E1C7459417F8ACCC306421D2E56E77D51323160793CD6A89A155A832DE75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 260B
SHA256 7540d176046e82e5ae4f31089e91e5b6fefa1f760e771bc9639ad4437feeb9da
MD5 7f8f17e6fcf46a109bf7a1cb7e7e07b9
SHA1 625e5d2730335f33e7b18d504ca8470f7005745a
SHA512 0d66247c05e1a62436769059cdc37e8af40a9c00d5d38f007019a5c7126e05eecc1302b8b3a485a85232ec582f54c20b46482bd58423c0a7d2bf295a70bbd9c2
TLSH
T1F5D0A71C705D417F4ACCC342410D2E56E37D51323160753CD6AC9A155BC32DE75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 265B
SHA256 de460a0c689d555031e5fa7ecc58cb61a736c92a16c1ab7c96b3c5791c00d961
MD5 cce205ffaa37d2efdd970bfef6decae0
SHA1 bbe3c3e44116f21cbdc3705a489115f9b9b4d173
SHA512 41da5b8baf742ca75dd03ec2bbb6ac1942559199f5313506a985d1aa6051b377979a1a0dd4757120c0327e55d8690147f9b7e4849b6e9ed44676249f0bf7e3ea
TLSH
T1DDD05E1C7459467F4ACCC302420D6E56E77D51323160793CD6A89A155B832DE75A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 262B
SHA256 a940e4facac512db9826d9581119f9ae88918c9dade729285c218e86ba9e4610
MD5 6ee9908346b43db6ee7be6e48148ed2d
SHA1 e429f91586c2cc0f5de29e13730572d95fc77099
SHA512 5d87c1e1330a335527d032c355bfae95a93edf188256007731ee5686a3d9934fd70d2dc5d884de61ab9cf45e60b493dad14daffdd0b8a9ec0bc8538c7825513e
TLSH
T163D05E1C7459417F4ACCC302420D2E56E37D51323160753CD6A89A155A8329E76A2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 267B
SHA256 396c19a6c5e38bf3ea3ddcf2173b40098cd5f94e7b06845edac8bf79bf0ea53c
MD5 5458e23993ee879b32ca34f65f57d8af
SHA1 94f083c6a772a47f63a59af5dc67599d1ee35209
SHA512 0a40bec22581836395e60534cd31da081606f2b355646f4c3036884adbeae861b81afbee61a27e1b284859d707b7035f33716b17c2b02d91fa5f888a6fbd4043
TLSH
T100D02E1C3008413F4ACCC302020D2E12E33D11323160383CC6A88A115B832CE75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 276B
SHA256 cb5b3223897700bab8219a1d01f72161cdfbca4f0c9faceea94a236c264eef69
MD5 bbae416e9954daebbe7374ed11cd0ee4
SHA1 bd76cd4e0f807f142a2774500067bda2fe2c1b42
SHA512 ee1df8f63cd1c6a004f5b4bb1b5b249a68b75c796e3cebf66af80d6a024dc83e89078747b2c465ceaa791042ecc578acf77c2f9d179aa3c65c1b96e409b17c9f
TLSH
T1BBD02E1CB808813F4ACCC302020D2E22E73D12323120783DC6AC8A115B832CF75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 264B
SHA256 d341ac807a243ea1baee965c997cbc7f9344c1781ef1c273c0e816b6f404a1b9
MD5 d7e50839ba4a65a9f14f252c1e994482
SHA1 1382624884d7977c334509a32b01b9107ff2fc06
SHA512 4efdd2c32900ced502598f8f241d7d616822c2a7391c44159e80ac8cb15c7a259e7ca75bbfd3e6ebc2a2ddfcd224b740e9db455be8f395eaf698e878de131649
TLSH
T1E1D05E187459517F4ACCC302420D2E56E77D51323160793CD6A89A155B832DE75E2177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 269B
SHA256 71b185d3bac77826d605b25c71ccbc343be8daa0746040ad3cf732144f3904fd
MD5 d918f4aa1557c9ac070918146b3993c5
SHA1 578c21709826451a2569d799576a162927c89aa1
SHA512 1d9aa81c35d93f0b8c5cf888c90b382a1b14a90725592567666c62d34133c39e75040fa46c334386fd21f0c173393a685512b193eac1acc74b2cd6f74dd22417
TLSH
T10BD02E1C3408813F4ACCC302020D2E12E33D11323160383CCAA88A115B832CE75A2233
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 278B
SHA256 70d9035f92596d1cc6e91af73676346ee216e944f5a36a7d10f9d18d15fe91d7
MD5 bf175a425453bf02436ec39c788e5450
SHA1 f97396baf6f9166e1bd1c6955a397690fbd197b4
SHA512 e80cb9b4254f22ff7355d77e7ddf9719f631c64ff1404d1304a0b36d5c9d3fe65234935f2f5a2e94070bb5b16f35c8d2de071173118757d2be427e4cdb341d4d
TLSH
T193D02E1C3808813F4ACCC302020D2E12E77D12323120783CC6AC9A215B832CF75A2137
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 266B
SHA256 53075d9a8fd01ff57e381387ad7e5d58f27fce58568d68b47a8cc0460a9c68e6
MD5 6cc85db7eec701504db5bf5571c36094
SHA1 50463fec4279c3960b225c250ec96057e912e4d2
SHA512 86896e7a063d1d491d1148c96655ef1a7e47cffa7b0d77c48d19dc70f788ae598622f46b3d327dbd190006c9cf7f634d7a1e6a81e049a95164a764b7035fccb0
TLSH
T1E9D05E1C7459527F4ACCC302420D2E56E77D51323160793CD6A89A155B832DE75A6177
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 271B
SHA256 2910de66ff233864896a76d87f04a89876545cdbda1bb0003c77a4a50c351dc6
MD5 99cd323a1d51bb61c0fb1fe5fea2cff1
SHA1 305634b5934d031caa6496c31bd435420ddf9093
SHA512 a206cd9fad2c27f04b661be70a3dcc947def5e6010908d5434d990d6b22129776e61c8d8f93bec821a1e7aff617031b174d08c9f91393012b5bbcf30ed1efbcf
TLSH
T161D02E1C7408853F4ACCC302020D2E12E73D11323120383CC6AC8A115BC32DE75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 268B
SHA256 f4bd0ecaa3563b6dd5ef4010a2077a02721279e75e5cefbba9e56e017fbb601b
MD5 0eef165a95c20238eedcf2a0a1e3623a
SHA1 339aa469823034ea4a0321da378ef5ae88fda14e
SHA512 d8217013ceb9f66ed579f6301f26655ca63d2e44d5c23b2ffe57addc88b9026e98dc49a26ceb9c764c0f848574dfc42ac29e4641d8bd485e8e94a7bf046f9430
TLSH
T1E7D05E1C7459427F4ACCC302421D2E56E77D51323160793CD6A89A155B832DE75A2577
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 273B
SHA256 9681e1b9c4cfe5ec20644fbd254c64c76d33406a0f95bbaaca35c9388cb00219
MD5 afe09a13f3ddb3e8c018cf4356e7a98a
SHA1 b72611fc2722bee5d32c2597832ac1fe62f9bcdb
SHA512 5e2e07ddb90c740d0028b65d2d2f94a299224c9a2a0b9543bbd5233735a635c7ea5dc5225687cd1bd0a001d95221ba5c9061b34b43a6eb54d02c2414cd4adc0d
TLSH
T19BD02E1C3408853F4ACCC302020D2E1AE73D11323120383CC6AC9A115B832CE75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 270B
SHA256 4d1fb80b40ead43d3b20cd52cb047d2f1e1a8eec63a3bfbef8e84aeb3e1a5dde
MD5 45d5681dba188eacc0658323f9cce3e4
SHA1 f36fb4e40219d7742b42caddc1f02c9c73f3234e
SHA512 6bdb5f0ace6046129796e82362b9ba8eb9dcc264c506ef058ad55fb48933c5680046d977b92fc51ce39fe374669c552a3a4ce9151f64da8f50a8eb0cec3ab674
TLSH
T133D02E1C3408813F4ACCC302020D2E16E33D11323120393CC6AC8A115B832CE75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 272B
SHA256 ec3be5e71311d38475037b6d054b07c867df9c078aa955b9f9c1ee7c6fd35fd9
MD5 d75bdc0a906c57944c4809c72a46d55d
SHA1 77e138ec889db4045c233bd93c3944a25b9f5f53
SHA512 8eba6c435e78a77878edc79ec5eed42f5541a9899a190f36ab06f5dd279a582dafd965f3b2e22fc313edcda1c2f10c4380efddf518d4137e4547c840e8bd9f2a
TLSH
T184D02E1C3408813F4ACCC302060D2E12E73D11323120383CC6AC8A115BC33CE75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 274B
SHA256 818c82558d76213e040ced5e68fddebf8f7f1f2eabf78abb87ae3cbae0eb9bed
MD5 ad4ef4bbae2aeac478d61e47745ef9cb
SHA1 d4f5943655e1d25a4a94f88b14aedafa41ae9f78
SHA512 44db2a84a5ebbcbd511b44af3cec41a00e7e73e933ec313045f8a6d075df32d971202229c7c11cf1259a5625da28eb50f4679d98f18f2705f00add964b0e0397
TLSH
T168D02E1C7408813F4ACCC302020D2E12E73D11323160783CC6AC8A155B832CF75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 277B
SHA256 0dc85c37b7b1356bc6e03452c927caa3b3bdd5a2d100687ee5a96e3903880bab
MD5 9f2772b7e0ffac4b0cc423f85e2bb25c
SHA1 938e49b4c72b313744eb97c0e189765c8ae059c1
SHA512 695aaec53d904fe2554a6e8a13b6a33c7f71d0ad79fa3b92f982670d043c22c4cef4993b966edf57578a61cab16d30f293a4f60a2258670bc0f9780b536aa410
TLSH
T164D02E1C3408817F4ACCC302020D2E12E73D12323120783CC6AC8A215B833CF75A2133
MD5 SHA1 SHA512 TLSH

Submit Download

desktop-v3.json

Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
Size 279B
SHA256 4490a2209cc3bdf80c4d5b18d29ab791bb246253bade40820de0f523a58e235d
MD5 27e44121b5a0189c3147f1f69ca7c48d
SHA1 4b2a28f1be2dad4c64bf92aaefea8a4c72488d95
SHA512 0949afdc23197291bc3ba2ce9960ceda2955e7bd8a7f51553d05138eef0214d12ffe67c73a723cef6aeac4fbbfcd39a23ea1392c0877e0505dcd164a5d5bcc38
TLSH
T1E7D02E1C3408813F4ACCC302020D2E12E77D92323120783DC6AC8A216B832CF76A2137
MD5 SHA1 SHA512 TLSH

Submit Download

kv.json

Path C:\Users\Admin\.local\state\jaccode\kv.json
Size 28B
SHA256 6541ed329b3062af16a2ef9b866a49ea690682d65da476105531480703210f6a
MD5 0ec1cacbefe40168c32bcb288dcab728
SHA1 2c0be274ff746f848a739a382b53dba6c718a713
SHA512 c03a1c63f682a676266b2c1b94b68d8df791f1c39aac56549d7acc17ce7489fcc446fd3d33ec7a4af098bff4dbaee6bf6672ef94183bc5cc51d6fa2a75c6e2e3
MD5 SHA1 SHA512

Submit Download

kv.json

Path C:\Users\Admin\.local\state\jaccode\kv.json
Size 26B
SHA256 c007acc4a90d665fa79d035cee026c8bb6d3998ade05afc79519411d170b1d74
MD5 9ccf334c1d80507204d6c0a413f849be
SHA1 868f8cd30d91290ad401bca94d5efc16c35a7863
SHA512 6c4dd7b02cfb776526ace1a988e22e13286cf3ef4b488f926c3a5d1f7e8c4667f6620fb0945aca6a329f0311f0b22c97e0460f50cfd4812fd5a856584186f8d5
MD5 SHA1 SHA512

Submit Download

jac.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\jac.exe.log
Size 1KB
SHA256 28da357194e6cf73ced8ba39459786048059a8866cc7977667e6af6a5cd5cf46
MD5 950b6b92d53c9720105be3cbc6a7e5b0
SHA1 3812717dad7db163c39802221a5cf4d842edfbc2
SHA512 54dc7e4b00b29963d9f7e6ac60799795996f11ea0446d9691c3dd5f1716e588db24f55953c8aa0a7e4df34efe30d095fcb98a79cd4cd9ed032fbd6c3fa72f05f
TLSH
T113117B71227AA1D88D163F952D1D2BC403BF4339B6509E187998729EDD360175F212F7
MD5 SHA1 SHA512 TLSH

Submit Download

12e15ec8-76be-4c30-8bf3-eb210ffd68be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12e15ec8-76be-4c30-8bf3-eb210ffd68be.tmp
Size 23KB
SHA256 c67a44e275daf526e69ffe05a5aefc863d2ec7345e221e93edf5e08631b98798
MD5 2f1114c3d54d63bc402b254ec12f04fd
SHA1 7f61e7db46c52aeef2ab4ce526cca719daaffa7f
SHA512 0847c704e5e334c0e101679c5b6cad4fb171acfd4a51c3d3efd2c1578119413600432a9b11e46493c2945994ac7584722f931c35c87df5397ded0922718dfeca
SSDEEP 384:nfiFlQkUSv9bsN58TUNTUlIlvXQ5fmJc9BtDf4mYX5E2P7ZgDJJvaTZcYIIlo:qF/d8wg+WcfymYu2TZCJJvaTZcYL+
TLSH
T16AB23975D8A9DE3BADE797C1F24A3647DEE051A789C89AC4DAC95D0C00C72DD230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1725e825-cd85-427a-857b-1dd5c620afca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1725e825-cd85-427a-857b-1dd5c620afca.tmp
Size 18KB
SHA256 4a3ff6478c7a4a9ec520c477206c1044acdf1cc2adb833b822ba7045d06da7d4
MD5 ed3319e8205771b49165d97518e1138a
SHA1 2da32e4d90fbde1ad605cb3b0ccad02272a41a7f
SHA512 84c8a2a83a2839a38f1f9a03b80094280ebd350edd956b284b02d083f7b9cdd2ada5a2c581da4dfe53c9a5ec7f9751d7cd463cb64ddd7ce1831d976bc35fc28e
SSDEEP 384:nBQkUSvUsNnrXQ5fmJc9BGYX5E2P7ZgDtJvaTZcYIIlo:zUrWcfGYu2TZCtJvaTZcYL+
TLSH
T185826C70A87DAC774DEBE150F18A3743DEB4A17BDAC41F54D5DA4B1C01CA398330A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26a568d7-a4c4-4eca-b73b-227278a18a5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26a568d7-a4c4-4eca-b73b-227278a18a5c.tmp
Size 8KB
SHA256 023b2274ad95765baa09959061c5399cb365df677ed10c6f2a20837ab2f1e44f
MD5 6d96ccacf90a241d4e46f5581f2f4f70
SHA1 90e5c43ec46dcfcf92d89d0403c41e8a33096398
SHA512 d91cc2536ed47b22391edc53a5fa2a30f161d00753f570227e9ab97d7107d8d368fc79be382ec13cf94ee293fbeea6c339c92e04aa857a3eaef349d07fda3450
SSDEEP 192:AONS6DphYqQmiUyO6XawGYX59ezvCP7ZgDdkII8q5TxU6:AONS61PCXawGYX5E2P7ZgDmJU6
TLSH
T110120875E8BCAC771DD7B455F58B37139EA4213BAE84AF44D5E90A1C01CB38C270A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38f5af28-8342-4404-8c74-706e12404359.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38f5af28-8342-4404-8c74-706e12404359.tmp
Size 8KB
SHA256 77e4272bf94d79d023a0d82465bca1390684b60ca0213e494e34b13b7cd94fac
MD5 a5b99effd5b34e35fdc2ee3945394912
SHA1 1378dfb722778e8197ef3a52d76dcd684f17dee5
SHA512 2520606d611948db737ee04ccd70098680d0c8a9b07da0a2e0345d30980a79ff5e565bcb8cd823bf0470c4471a9fe27b33b58eb22bda2424e4f26f25b3c9eef5
SSDEEP 192:LJONl6DphmqQmiUyP6Xq8wGYX59ezvCP7zkk7BKU6:lONl619LXRwGYX5E2P7rIU6
TLSH
T14002EA35E8787CBB4DE7AE55F54B2B139FE4112FAA906B84C6E81A1D01D764C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d280f12-a5ac-4a50-b6de-edaa6de4316b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5d280f12-a5ac-4a50-b6de-edaa6de4316b.tmp
Size 18KB
SHA256 86118fd730ce21bdd3587a2a93c133c72ad670c98a52eb13320522d0368e6523
MD5 a56b7a6e7b0e048c1304383ee14d037f
SHA1 a105ab2b460cf24ae16b565a2df4d7ea69fdd801
SHA512 49893ec54c4b69ba7512ee367773622e90165028b2955bc9c8fbea5bd01b47a09f5b8fc86383016d90c239e44617b8b85138283e857fb6d7bd3a450f28bcb2fa
SSDEEP 384:nGQkUSv0sNnIXQ5fmJc9BGYX5E2P7ZgDtJvaTZcYIIlo:m0CWcfGYu2TZCtJvaTZcYL+
TLSH
T148826C35A87DAC774DEBA150F18B3703DEB4917BDAC41F54D5DA4B1C01CA298330A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a1b53c2-4a49-47ce-a5e6-3c70b350e506.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a1b53c2-4a49-47ce-a5e6-3c70b350e506.tmp
Size 12KB
SHA256 84446ad4ad5e3339c6e928e5624c80ed4ff7bd7c320d2f367a248877edc4dab4
MD5 81d7625962ddaff663bf23b31f415ac7
SHA1 0cbd6b33ada3790fc21988830fbdca3e5a5a257a
SHA512 849747f846fc35bcfa87ee9846868ea34ce8ad5022114d6b2df9390f0e14d83067ec3e66f57e9fbb77108e5612dc45f6563a5327da3ad9a18621404c295d9ae6
SSDEEP 192:uu2LsNnIQKKBTphvniIQmiU1B6Lcy4BGYX59ezvCP7ZgDPkH18q5TxzOW:ncsNnIXQ5fmLc9BGYX5E2P7ZgD8JzP
TLSH
T158423A34A878AC775DEBA185F54B37139EB850BB9A842F54D6ED4B0C00C739C330A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

19dba8e0-b7c7-4e6d-9c39-9e3d6e4e8bb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\19dba8e0-b7c7-4e6d-9c39-9e3d6e4e8bb7.tmp
Size 10KB
SHA256 d49375391e5c840b046bf7c1b752e476f6a64413bf458324117159cd9183ad12
MD5 1dcb9eea1e070fa78f271004b5422e9a
SHA1 69dd5886a7c345ad0952921e9e0c42dba7f41c22
SHA512 47697a3fd73f0b7c34ccd13252ae293bdb74dec712528e81dc797b93b08a88311a7b6cce6a5777fe0aec96486785b45f6e20827c0a1140208197c1781f0a9718
SSDEEP 192:sxZHRKsa/fdszRQQVnIdp1lHW6+WNajcXYg2tt/Ig5CJ:sxZHZa/fdsF+PHbjXKI
TLSH
T1F322E9526E38A97B8CCBD20DBB54BF13E6F9507291900E44AAFC861C05E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c9b8061-e8c8-402b-b848-34e15b948ddb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c9b8061-e8c8-402b-b848-34e15b948ddb.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 85f44a4bff276075361f65b85762c84fa9b78d00b3b5cb311f6970ecea3918f8
MD5 e0e414ac6edb777ecf37e73b8ac3091f
SHA1 6d26e86ab7bbe672e856d995a3db11ca0a1b9bb1
SHA512 f813386196c589733db7cac9d5cbf6f0f508fb218e44b094e5bbe129a12f2daacd1bfbfd378bb60760e69bc66341aa307237e3867362ab20f309f01a58191477
TLSH
T193613CD511DB84AFF7A6AD3485E930C73A7756A043E36F7301B9D83B5E063A98440053
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 266f5e4ff101e4cdc77d5f2e601a009837001b210008d0f97344707ea1f7d73f
MD5 2e6cc0de04b1877cbd48b1adff1ecc14
SHA1 235fb8659b4ec44d46d9677e8f3d04546c1df8b8
SHA512 3cc734f730f6d927afbbed2acffab7d6f2cca15e21221d48c3aaecb54950c9bb08bcd05547e683107c351bafa947758f239f1e8c6b589a70c5f0e5a9e11e69fc
TLSH
T1EE615CC511DB80AFFBAAED3489E830CB3A3706A003E32F7301B9D83B5E063A98040013
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

474ad6e3-9f6a-42b4-afe3-026ed3358f93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\474ad6e3-9f6a-42b4-afe3-026ed3358f93.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

53af972f-acd5-470d-a1b6-da3a6459d5c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\53af972f-acd5-470d-a1b6-da3a6459d5c0.tmp
Size 2KB
SHA256 5950476be8ee982d5baa2a5d4ca5dfcec4f7ccb66c59c261e6a7ecdba8321a9e
MD5 df47f9cfa2123d83a00d112176314849
SHA1 1007b4152159b87afdecb1f63c1c6fcb7b69dd63
SHA512 3a19e74fe69b56d9f6bf695643252140c93db41bf239b0613a867f755d46fd587420bf9149ae65616e30eb30985f243ce7e15cf4d6936387fa3195176714dca3
TLSH
T1C451BDF3C6EC866D890156F0AA246E2FCF1D1914432C3D9AC9D5EF4BE3E2871E24155E
MD5 SHA1 SHA512 TLSH

Submit Download

fa8b5645-b87f-4010-883d-6f0ea0e99378.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fa8b5645-b87f-4010-883d-6f0ea0e99378.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d08aca0e-31a0-4795-a85c-66847481dabc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d08aca0e-31a0-4795-a85c-66847481dabc.tmp
Size 27KB
SHA256 865c80e7566e01199a4bcc45f27760f8f03fee386e8fd90716fc322c172f32ba
MD5 bd78ca2ad62fa27b18c5253ecd8983ac
SHA1 22ab9127d4eee47654da6851d57592c1ff8d317a
SHA512 59ebc9fe081f3a5b40e03bc75c37b5e733356685da058412b6ec28e393098f8ac87238f26da525b3908f42af8bf00cb4909b92b29329ba7dd449b8c86ff2d5a3
SSDEEP 768:+E7MichkPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVs+LlEKXz7romNO:boichkPWvPZplu1ja7+LKgzIWO
TLSH
T1F3C2E93B644CCB7E4FC01A9DDD1A6F9A7EA802C7A6588D4047FE984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9d43769-b86f-42f1-b362-1819b507ce43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e9d43769-b86f-42f1-b362-1819b507ce43.tmp
Size 10KB
SHA256 b879f350446c64288b5c9c5c8622e942894c56701aa219e3a7c2051af053734a
MD5 ebe4260f557f5a21c97b8a26ae3fbd98
SHA1 4f6212b768abcb358db43d460e414cfca34e6403
SHA512 898a16bffdcb3030fb5050ee0e4f7be39cb888a9af0dd7a5a7659f9c42e831612c338cfc834cafb95ae60998051706b034d582f5ecf9adeaaca47eae7ea972ed
SSDEEP 192:sxZHRK9a/fdszsQQVnIdp1lHW6+WNa63ZYgYHt/Ig50J:sxZHEa/fdsQ+PHb/ZwG
TLSH
T1B232E9526E38A97B9CCBD20DBB54BF13E6F9507291911E44AAFC861C05E7ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecca5f82-92d5-4575-94e9-5fe557b1c676.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecca5f82-92d5-4575-94e9-5fe557b1c676.tmp
Size 9KB
SHA256 5ac81898619eb90bd6f43153595d96d31baaf40342d36108a01d4d119ee43b5d
MD5 c2afaf873e2f4b9922d3951935919484
SHA1 abee205fed93a4d49e46ed7e56c1c3b9a613036f
SHA512 83cf24b8005c35c0ab676acd06bbb5c1e65fe03546942f0daef2e05d4009c355b1036ed8e2ec59e5c7d385249e5c9de8de5c4d4c843815de6c82188d22415a40
SSDEEP 192:sxZHRKsa/fdsTRDEdp1lHW6+WNaie/YgHtt/Ig4J:sxZHZa/fdslQPHbi/Bc
TLSH
T1F422B8526E38A97B9CCBD20DBB14BF13E6F9507295D11E48AAFC861C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

ce4a0ecd-9941-4d90-9197-227756175acb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ce4a0ecd-9941-4d90-9197-227756175acb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

155bd89b-56ab-4ba2-a25d-37b808a0a9e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\155bd89b-56ab-4ba2-a25d-37b808a0a9e8.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

ed576a96-fb53-43f6-ab28-2fac2ea3380a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed576a96-fb53-43f6-ab28-2fac2ea3380a.tmp
Size 18KB
SHA256 bdd7735837576b5f49ba9adaefc8941dcb0477db8125f861b4aaca94626816ed
MD5 da67e9f609cb74ae4e9ee2a0b1905a3a
SHA1 a1eeb043c0fef2aea2170cb220277f9d5aef09e0
SHA512 b324db900a91009352a75b1f5c31d1a6eb29dcd1fd3ea4cc37c07ba493fd24f12307d422902e977d2ff03c4f865b177c6d9ed6e84b1d54bb101d5a0159237c34
SSDEEP 384:nzQkUSvUsNnvXQ5fmJc9BGYX5E2P7ZgDtJvaTZcYIIlo:dU3WcfGYu2TZCtJvaTZcYL+
TLSH
T1F4826B71A87DAC774DEBE150F18A3707DEB4A1BBDAC41F54D5DE4A1C01CA398330A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3a2b1b3-d78d-48ce-8d03-9325a82fa9cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f3a2b1b3-d78d-48ce-8d03-9325a82fa9cf.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 42a4b7097e7714a74dda27128c7fabe551d8082d95082c29f5be3f618ef10d6d
MD5 dd7611150f21a19454211bbcada32d87
SHA1 492a6229851b48e6728c537ddd1bf01a726b21ba
SHA512 bd819d2479606ce7f5ae0fa11bedb4a3ecdccd63d295a681f944f2b5755c10566d5e7e3e2925693c8d531ed5eb282f9342482215892f3be2e96a1cb760ab7a9b
TLSH
T1934124A9BAF95148B3B76F169BF6792E447A7E732A06D09D10110E4E0663A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

.jac-current.xml

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-current.xml
Size 34B
SHA256 9f895c8533531d15db7d0decc14bb67a332b709f69bebf46c7901931a9983dfb
MD5 0d96bd4fa3589580a45ccf9a08354d37
SHA1 d114c3e70c12b31fe41574f50e8f0062d06c66c9
SHA512 dbb0dad40a0dbecb350641eb71bd694545b4fee12e6bc321ccc554148a4888b1e2c53ca50b53ebe51771ab1f8b379dbe3e9f055c52673d0b228973da32c31fb9
MD5 SHA1 SHA512

Submit Download

.jac-install.xml

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-install.xml
Size 2KB
SHA256 9465eab7a1af2a031eedef2b49781bb2fa58b9bbf7992540ebed27746ed97165
MD5 fc1eaa99fc2d0c5371a8105cf48c899b
SHA1 4dd8e6824b5b191988f53548aa68ffa16a1765a9
SHA512 518c829bd71507f713fc384f41e52027da9f234951ff6d4b92e3234a78923c2cef6ebc2ab8c1832a4abeb55fd462529c56dba01b17df638f42dfce460d783738
TLSH
T1CA417DF608D4B32E9470AEF76B19B538B329D8103A5D2941BC89058B53B513973CB5EF
MD5 SHA1 SHA512 TLSH

Submit Download

.jac-transaction.json

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-transaction.json
Size 2KB
SHA256 e7782e556603023d30b20fcc6dea6db2a245cec2c9f7eaca1a6050ac6219ea9e
MD5 0b8cfc2917946502a3de9968190a821c
SHA1 75ad712cd9903a849c9acd7bc41302cadba40b3e
SHA512 7b1d28672cbd3b801051dee66e9e7c7ead4d29a3a1bc362a21efc48b704bc7faace423efc3169e1a0742729e1eaa03333ef9997d2e358d0186cf6ca08aeaf9b6
TLSH
T1CD5133AD1525DD6E93C21AEC42039BDEE371EC32E8D9B18FE48B0B8273F706A5654453
MD5 SHA1 SHA512 TLSH

Submit Download

GETTING-STARTED.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\GETTING-STARTED.txt
Size 2KB
SHA256 82949ab8e04160277b51c241b7459cfaeaf3d26d41c82740167ed3ff1cd164f0
MD5 8dcc5a2069ffe7f8dd719fdc2311822d
SHA1 99b2a165ee0074aa8617569370643f403b3d3e8b
SHA512 1af854bc9ed39a279b6991db39c0d29708773f6ca5f63896015b02b849d6bf97bb4b5724f5a0e15c150cfc109a49a56de62a3a433c527d3e9a6d29e008be161b
TLSH
T1BB51C9777BCB368C36530395BE0183D1BF34A1683B990961F85E549C425A15897B3B36
MD5 SHA1 SHA512 TLSH

Submit Download

Uninstall.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\Uninstall.exe
Size 49KB
SHA256 222d1070259bb6d4e771e853ca95038cf5347d40690cfda2514692618ad110fc
MD5 7907ea1a368097d2f795aadd15b09b05
SHA1 90385749c5334ac647126ef5ee485f2000cc041b
SHA512 7871c082300696eabaac27324b544c8489056695a04cbccb7e5f1669f18b7fae603b7544ade0ff8b6e152ce7f5a2458cf5a2248e971b2d9c6344dc654d02db01
SSDEEP 768:Xk+d0gKB7FKB1z+dlvqom14t+owm9jLrAkpxy:XkeUuwlvqomatPbXA
TLSH
T10C33D54977E84B24E6BF2B78A87152548E71FC57ED32EB5D1A8140AD0D3AF80CD60B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jac.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
Size 29KB
SHA256 158fca0ac4e4abccf79bb6c42f42fde25efedc33a8e10166883df854f0212b63
MD5 89e32b530eef987074ecf8fef21daf2f
SHA1 136757c300b0bdbd5e0087e2d4875ca92ec0a27a
SHA512 63c4233a133d9986b0de986184622c23c1e6790b1ade7a98b070092aa8dcf3553b4a403ffa9e4d82eb4a30153cd93c99d04e6e517f7c16da5cb370b5bd888503
SSDEEP 384:WnKEgDTKk+aCJJ0cxXDXn5DAhiC+4yT2V1StYg12+UAdYa5UlIIpjRx2K6xyWR:NTKk+N0cxzn5DAhiCOkStzvmjRx2pxy
TLSH
T1CAD20B486BE88B74D1FE0B78A93121559E71FC5AA832FB1D1F88507C4C3BB848D91B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jac.ico

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.ico
Size 3KB
SHA256 0aa6b0cd0fc67bbbd3575af1409cd4e824c52d6c2f36ea7af5640582035c1629
MD5 68e740ddb6f215c4dfbbb372c7944b4a
SHA1 0155f1f29940701bfdbffdbded519c70f339f2a3
SHA512 f770dd9b66f90d9818e3459eb64ccbdd814adc667cde9270fcfe49f3cc4776df75024a801c164dcd164d35e114cb0716133cebd99fedeee18f53f7580d1ec7cd
TLSH
T1BE8163CD1B8C4EF8C65944214B6B31B2FE75ACDE247D39167B74B4748E1E58025836C2
MD5 SHA1 SHA512 TLSH

Submit Download

DEPENDENCIES.json

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\DEPENDENCIES.json
Size 197KB
SHA256 31bc7b101cb4af57a0a6c94cc809dbf4cb9b40930a40c259100db3993e3567bd
MD5 a77b47e13b7e64238fd46db726f2894b
SHA1 94ca4efd9fe92fd5c947e3ba650870cc9219d701
SHA512 7d9b30c2eca62327d342e97b93d2a91fc017e736420207e0048110bee43daf3710eb845256afbedcce56f69c4ebe7e007cf61a3f6aa020910cd9a854b58ca31d
SSDEEP 1536:GYW8PltFxCbAQ6mpoNFyNIcfWgD3s/Tto1lx:GslrxCbL6mpEFyNtDr6o1v
TLSH
T10F14FF61C6706CB7288C8BB4092A564A762400471D6D7D0E33AE9A7C5FBDDBF28F171E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NOTICE.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\NOTICE.txt
Size 222B
SHA256 4b92f3c799b77b10104227f9e778063558cafcafd883d57de058b1a00d95b0d5
MD5 4919bea71ad9b72c7d6c6d7c6fc6d821
SHA1 449a00908cdfc9c17acf0a7fa4c5101fbd1ccf8e
SHA512 a786e10b92f8d9ad67aa5e4587242aae3665469ac7a4f88f8941febe3f50af4623db1762e8bff2b7f8424fc912928ba8e54c90713c6f6c6107395df1eb2bc06e
TLSH
T12CD0231E618A17D586310386F55BB3DFDB158D0803E04297A0B5410E01DB1B89367FBE
MD5 SHA1 SHA512 TLSH

Submit Download

OpenCode-LICENSE.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\OpenCode-LICENSE.txt
Size 1KB
SHA256 b5c625d157735f04e1b2b7ceccee849130b554bdb23cd58db55a38a257efbbdd
MD5 943d7c4c5077c4cbf3fe540cbbde6ce1
SHA1 a6b66f875a6b320a472c667c0675ca0ceab1b89c
SHA512 8de19a86a32572202c2d102f82626999e9f42cbd8654a9f73092d9e09db8a1f18a1e7d74c77532a7eb9d1770854f152204e15a0c6bd0bca97d877065bc52c013
TLSH
T14911B52F72960373189657A055B9ECC5F22BB14A7FAF1A84346EF2091326058C9FFC68
MD5 SHA1 SHA512 TLSH

Submit Download

THIRD-PARTY-NOTICES.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\THIRD-PARTY-NOTICES.txt
Size 5.3MB
SHA256 e9eee1733aadc53787e0f4c8e4c3a40b80b09b8513251a15b7b8d93e8151ce24
MD5 57c065c3fa0c3160e9db4866ef46465c
SHA1 665f042c52129cb5cc09291fc56da4e0b40ebaca
SHA512 4afdb92e7083b0bfb5f44ac77453f01ae378eb925f69ba40e6e0aea1905c5102dcf74b735c4d01518ded48fc50ac901fb51e03ca4b3356c5a0581edcd5d7e06a
SSDEEP 24576:6Orh0I+sE1KBf9beApGk/CzvTCKo9CzWhCt0Lo1YzgBTEDBxPLlj6ulj6J:6OrhAP9
TLSH
T17246C72F7B48037319D343616A6668CAF21EB03F3B5B2644345DE258273B76982FF598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FFLATE-LICENSE.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\FFLATE-LICENSE.txt
Size 1KB
SHA256 0a1df3a083d0c010560aa342e87959c8c1070e6fd54545741f083f22d0c8b551
MD5 b44ae31f7482d1a8d2f9bce6cc409db5
SHA1 e8f37052323f71060dab76883ed691cf95c0cd69
SHA512 5d5eb9ccf01a5be79b40f0cd157cbc6e2c20d88c3d499422026fbff7aeda999fee25fd52fa6bc5b202e2aaa7de3602be005c65235cb1f2e59f2737854ca17da8
TLSH
T1CB11791E72510772189B176055746CD5F13BB25F7E5F2A84246DF345233A06CC9FF840
MD5 SHA1 SHA512 TLSH

Submit Download

PDFJS-LICENSE.txt

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\PDFJS-LICENSE.txt
Size 9KB
SHA256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594
MD5 2ee41112a44fe7014dce33e26468ba93
SHA1 598f87f072f66e2269dd6919292b2934dbb20492
SHA512 27b8c0252eae50ca3ce02ab7c5670664c0c824e03eb3da1089f3f0a00d23e648a956bcb9f53645c6d79674a87c4cc86d1085dc335911be0210d691336b121857
SSDEEP 192:nU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLhP:U9vlKM1zJlFvmNz5VrZ
TLSH
T18822512FBB48037B06C20162A79764CBF31E903F3B552568314CD1681F6B96593FB6AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\LICENSE
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\LICENSES.chromium.html
Size 19.4MB
SHA256 5d545ce8065079f38a82472ab93bd62fcdf73cd319f0771ef51c45c7e243f1d4
MD5 a1ee17d90caa1bf1f3726ec03842f18b
SHA1 27a94b164c4255ce0dcab5c020f335a9cd3f8c60
SHA512 d9f7448213a449535f1ff43090c08f0e2388af4e72ce2f59e0b1b457a831f76c0d7d69d88cd435b1682479d31d480b19a5488dc3ef6c133c974557d5bdbcf446
SSDEEP 49152:52SFkMZThUZLQTYp281vCmR3r8xsJQfiFTuoYQdVi2Hxj37D4h:f
TLSH
T11827B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\chrome_100_percent.pak
Size 117KB
SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
MD5 750913d55e87def9108e55728ba67d00
SHA1 a5944bc170d1f6c3223195c043134566471dae1d
SHA512 f5663ae3c775e2ec12dda6255afea99291673b8586048b131ca657a10be88cca61e298bb56797bcc34723fc8bf0a3dd966ad8b9f0e77747f963d8dada4f25edf
SSDEEP 3072:7lj4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:7lcYWFUbGz8LI1TdjQBQCrC
TLSH
T1E9C3D0E773B0AD7DDA464BB743560070FCB31B2907C2160E4B9AE479652AB88D9C93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\chrome_200_percent.pak
Size 192KB
SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
MD5 d476c19d21b3c2861f08c1c82fffddcb
SHA1 6f61aab7b6fba4fed5a7c222bdb96aee11f23bd9
SHA512 36acefce9f4e6837609f801bb340380f8e3e0de3f01872ef1e9bfd769f61ec2804191b91cfd01d90fb874cc9f4e685de7f2d03c21cd7e0bc6c7d8907f41dc12a
SSDEEP 3072:y6FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:y6IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1DE1401D323B4AD3DDA530BB3926600B0FD7A20291AB3511E569FED397925F8889C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\dxcompiler.dll
Size 24.5MB
SHA256 b25b6c8bc64c9ff17ed16e0d272bf0bd7b305f3e19f792a72c8145a6bf624584
MD5 d1b78f795d632caf74e3f6e6aa09f770
SHA1 4f91847c6924c50868fa961973526327c13945c9
SHA512 95edb7b4c761a0feb19e6b348f706e38bd2a9a8dd674474271f6cc23de8b92b99ccbe80bc48e2bf6c9381242db94fb77ab0e22b2b0a2ba0d1a30d9a7c865fd1c
SSDEEP 393216:XClYzmZHZRxtwnLsde/Vuyjw4O+qZG/+V:tORi57JaZGW
TLSH
T167473A122646D49CC059C879C7678B26CA6C30E73FA7B9EBC0F451252B79EBC5B39234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\ffmpeg.dll
Size 2.9MB
SHA256 1b9d751721a40fc8fba2355172382d0e0c210e54c7f2862ebd8a6b6a093f832f
MD5 475107b162007199044cee83e815f771
SHA1 d3ef20d40f696710164994cfbb55edc4e0ccda07
SHA512 8d81ecd673d59a773d18369849a11878a41a5c92be6c4ee7dbf951070bb833e604a357d6a0e9a58d070df484069fb4c923a9e3c7b1802e0ea5d9062258f4fa46
SSDEEP 49152:odfREhAZtlrINr/T6XF2i81IQbx6i1N2A0hGR9/HvaLukwhBuO1i:o9ZtormXFgLaLukwh3
TLSH
T197E59E02F6D251EDD029C03497ABE213F271780A4F205AEF17A05A253F66FD86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\icudtl.dat
Size 10.4MB
SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
MD5 0a7cbe8e902379fc03c5c6c7c08c7d3b
SHA1 18ff020331534d21f24d922d4da3c253668e44d8
SHA512 88b94c5d350c2022aa27481e3a5c6bc74dd13ed1f2157dec4219d9b847469f7191f6fdc7305f3d27533c69f146324da8fdefbd8acbd2081965e74e8926d1e9c9
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89o:1/cBhORok2HiXUxO/RJk3IWhlYntjdOo
TLSH
T180B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\libEGL.dll
Size 467KB
SHA256 fa8cf715db0e2a7a0f20a2b583221e439c484390b400ec70ff5956ea70d55aae
MD5 dfafc7b1b6948618c9d49f471b389456
SHA1 e4588df2cec79e131cf96d1e2e437691b9bc13ba
SHA512 aa391adb7af700e4304fa1bcbd0ff62fb63d3cd2d9603739487a537b45c25e45b2f9e79dbe79fb3354e6c14561d9b46907d136fd35880968f7df69d979a52b59
SSDEEP 12288:NGxGyTj2M2uuMlptOdxncCjfsLFm5kQDhfl1:NGxGyTjT2tMluQLIk0hd
TLSH
T1F3A47D15B3E949A9E07BC138CA538643EB71B8560B21F6DF02A0D2793F77BE45A39311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\libGLESv2.dll
Size 7.7MB
SHA256 b6548524109b605155fcccccac8836c3d29dde3f1f6337f67a2bfb7931b9e0a0
MD5 0cb591214b989bcafd178c5337095edd
SHA1 0cf018723bdcc568e3a666004e34f1e66c97d45f
SHA512 4dd7b6ba31511160d447138c628a713e529fe494fc58e1a28f69dc80c51a41a96774805858a1555026b7f90a545743a9617e9e4b0172d3faff03f9aee48b74d5
SSDEEP 49152:a4AMBWsanmFGBeBMb0y/tQOZcS4vl7s7EGt6j9pH2Isk2MKWcL0LM0k7bzsKVkqC:xMR/ldEzKNtLsKK4X6F0HO
TLSH
T1F9866C03F69681D9C05DE2788757A223FB34B8850724F6CF2B9457152F6ABE0AB3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\locales\en-GB.pak
Size 552KB
SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
MD5 121461689d08e6e0d1e0ad4e6c695f7e
SHA1 113ec35be3b54ebf9e2b064181475bb82dda2670
SHA512 69b0d1d401aafd2fac6ed86f3c51de4889ebda123c6cfbe6267e83cd9271dccf7db2627cfaf31bf5713efad48845662763106ef26da09803a1580fa04c7416c5
SSDEEP 6144:D1Zf+l9GJBIvNBlxIxhb5E43FzcieMaMP9zQ49lfaYHEJjXCYDcBcnR7K:D1ZfqsJavNBPIxhbQvMNQ49UhDc
TLSH
T13AC43D1FF784126A05A311A2BB0AA5A2FF23D07CB35112667CBD811C33B676583777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\locales\en-US.pak
Size 558KB
SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
MD5 6249e6f03590c631a2a873b3e79058d4
SHA1 b82396e2d4ddcb822254dc999c378642614e7f13
SHA512 3352f438f691067fcdd1cc331cac28130e464d0d9411971ecf7bf8c2d30d32e67cd9a65a71a48dc72f60eaee295dacc9055166dff0bef1f79e0ad4bbb2d0f3e2
SSDEEP 6144:JI1Ecs6drHfBLOFcGfIKUMP99Q8HUfaYQypqs5GjWngK8/uYwj:J2G6drHfBVZMTQ8HSkjZwj
TLSH
T157C44D1FF744112A06A352A2BF0995A2FF32D06DA35112563CBD812C3376B6683B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources.pak
Size 6.6MB
SHA256 b92a3508c9631066b013adb736684e63e7b9e82e5f4c8a005b243e8e6b2bb5d2
MD5 d36dc817d163729acb7886ef14673881
SHA1 cb7f36e1ba0f649bed5f4c34510eed1e0e2018bf
SHA512 2e81faf0b555818ed61a4906226fae8a2d79f51216c67fece11bd9a6eaa7a784f88b333b6df1813d62c023874b49a8e8a9c1288ffda489c943b7c87a5cebb6ab
SSDEEP 196608:plsBRHPfIXoDTz9uTjTMkriACmZnC3gEL34tVrW:8Tvr/ztkrDntEoVrW
TLSH
T16A6633D266E3A80BCE9063B98984CF39199CAF2572D4B093489D5119ED9CF5C0BC4B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JacAttachmentGuard.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAttachmentGuard.exe
Size 6KB
SHA256 a17b3cae4866fe8710011e58fff941c10be32bf606c30d6a9c5236e35a6e6127
MD5 451d7f091fa0d7ef91fb7717e1d885d7
SHA1 b8d3c8d6356763d1ce2a86945468d1e6e6ae1810
SHA512 4b39d4e88ded245b3f2730d0162a486d6b51a6b36111fbff55916c82ad0d49503e48d94e4db0eef94071630a7c9bf18561d6783c13b9e23baf1fc03023e4d7ce
SSDEEP 96:ByoeMd+7C14+rdQiPDYikPVcoVQ3Dlk6zQp:Byoe8XrEHQO6
TLSH
T111C10A49E7CC45A1E96B037C5AF293011BF4FA5CCEAB87BF24E18279BD117444B92391
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JacAuth.exe.385ae47cfc184a468375fd93b2edaa44.tmp

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacAuth.exe.385ae47cfc184a468375fd93b2edaa44.tmp
Size 19KB
SHA256 cd672da3646a563b4ebb8cc522473557d728fd7237f5355842572ba6456adf74
MD5 fd0bb6b85ec2683a2c55dd1bbf91dfa9
SHA1 e66027300f15c7a613ab26782c28067718ffa2cd
SHA512 88ab84fefacdd673559083a41ea6fa214bc48918d13a86750b0cf1cf172dd4dcf0fe75035d934b63391c0aaded32c1c71548228477e974627b74461056bd3cc4
SSDEEP 384:as092bZdfy6aspecyrUzfHjEWxX+69AYfx57cc1GyrCs:aD2Vdf10cyrUz/jEWE6JxdC
TLSH
T1BF922804B7E8C712EAFF4679A87207400E72AA975D62CB4D0CC5A8BF0D73B508D94FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JacDesktopLock.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopLock.exe
Size 5KB
SHA256 d0f940d5f1d95a78489423ff2128f5f9dbf510fb06c2c38523cd50e5633944c4
MD5 f850191983962f15ee0d5b7b9bd9e0b9
SHA1 38fae484f32d7e05be1fe0955047729750973cb3
SHA512 42bffda55257b0a17f4ddf680932f976251e0ac9fd31fb059d922d241408c2bbab637002d27f3d3199721c95fa29b88a39da993378e47f2b054dad2f019fc686
SSDEEP 96:HzZaM3C5ZCW/X67OmTr3uPsD3Dlk6zQp:HzZaM3C50W/q7OmTr3ZDO6
TLSH
T1E7C1EA42B3D44512E57F477869F3430527F4FAA94D2AC3AF9CC4851D6C1138C9B607E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JacDesktopUpdate.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacDesktopUpdate.exe
Size 43KB
SHA256 3d4762cf77473b87c07d169044b5802b7ebb32b47116638a46e9198b0c29a0be
MD5 61c91883eb421ee3a6bb9d07be4e6297
SHA1 0c7439a56a513f0489a22c0b0a0d0b1a07de9fbb
SHA512 9bdb32adbb48d1f433f42d5ec66e2276dc140bc6b298d9cd6a4b5dd6182b699aed6a2c74858419ca0a266f8a8e24d20166a8d08266dcd16124bedf408ba50149
SSDEEP 768:gRcCU8p2qeJxCgbAQWF2Eti5IBad1AIpxy:gRTsqssQWF2EteIIA
TLSH
T1AB130B4937D84A74D6BE5B38A5722220DE72FC5AA536FB0D1F84547C0D3AB808D92F93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JacProjectRun.exe

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\JacProjectRun.exe
Size 15KB
SHA256 c9a15bd168482f8a1b0ef765837b2ae8b37b270c7c9b82ac053bc4b863ad9b3d
MD5 a906c924684ca1d47508cba6f6b8d007
SHA1 f2157e12c04e3d9693f8a7cc6c91942ac8908add
SHA512 fe425b8b513c178519f35eec1bf022926a1c5e3e2087231e0186ab37cd416abee5e81c2777f49caa495e70ddad8d4cbdf0c6ffd5d8ac00856a87ecd44a36c1d7
SSDEEP 192:m2UM5nMaUElpOsT8Fz6TqnN06ufQtoojDV+Kk8KE/HggMi8rgbwh8I126D+QO6:IM54Ex8FznGfMUZ4/HgG8GY8a+Q
TLSH
T139623A8FCF1802B3EA8D42BC58770B0057B0419DAD93EB96AEE5E1B72D25BC54752387
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\app.asar
Size 3.1MB
SHA256 118cc0680cfedec54264e713f7c565c206b3421929945e61503f6a9294624e10
MD5 086a84dec05acebdf760bbbf027a19b9
SHA1 9bc8cf1c6871413652a79907ce0c6039bdb5dc21
SHA512 e5b6894e5534287c2ce39b00653ba84a0f78b880f42f756935f65c61c4063ce3ee4e89906dbd07f9a12017a6a1442145178952dda6dde00654e3af522a5ac067
SSDEEP 49152:lv0EtKhL9RcwUMjmasACRF8LHFKo8oiceJhJZ6aLNgZWsuigKXuMBlRwudx/fffI:zqkJoQ
TLSH
T1ABE52A5923F714219653B0B91F1B0102B636A417380DCD5DBEACCBD06F4A86992F6FBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client-integrity.json

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\resources\client-integrity.json
Size 6KB
SHA256 9550eb68ec3e16ffa115b82a7ada13baeb899068c46b89795694257f1ab8b7d3
MD5 652737232d3fc88ecbb237977440c7fe
SHA1 ca291cb1c0c6a2a72869a953d2175ddfaf454030
SHA512 2b29abd8070c254854990a60cfffb8af6ff558dbdbd98605166ceeb9005ad87bced1fae8a6484d2c41a28bae567289d4a33a2439738a31be8c1a1729c3e631bc
SSDEEP 96:AatSGf5xfVqmDB/S8ur3pJnlSQWpQcUilr+Wrge8vfxuna+b557zjPOyvUJ4B:AgVhx9lDB6R4QRov+xfG73rvUM
TLSH
T18DE1DAE255B6F25D7C04733D47D9BD460B85D0850A926F98E0DB46C82027AC7B9B60BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\snapshot_blob.bin
Size 338KB
SHA256 074571140666f561594889ccb6439bc30d21935f0c7157c0edd118223950bd7d
MD5 5986c77ce1030ed104ba7e3c914f8bcb
SHA1 f9b13bb6fabcae89187e13e2f8bf3be1ed282b4e
SHA512 cd0326d6d6f55e0aec95d93f8dd829269dc7803beb192cae744b7a3dd1b12316619996611c209d8dcc23a54f0a2912928724c6258e1ef7ab1e834fb7a563354c
SSDEEP 3072:r/OiXK+Ot+xbRt2FURJPGKKPipcCN7HON4Od1sTChznKBwdCqg1:r/5Xgt+HlqKKlu7uN4udhb3gT
TLSH
T1FD74E012F749CA26C8B639745EE58B942E24B2CD9DC9AF173060437DB4796640E2F38F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\v8_context_snapshot.bin
Size 704KB
SHA256 b0874ba2f21ccf59f8a3086168ad782834aeeabb4acb644a20744a1cbeb5bf59
MD5 8499aa219e4679efd7df4b5e0d767fe1
SHA1 3ccbe3967272f758fbf7d217fd6e40894e670053
SHA512 c6ea72fc00de1aa7a29a83d2d503a061d49f3d629bf1421731d5a9cd2e3e7ee310f581e465a1f440c43cf2bd7a1cdad4ae9cb9f41f8ecb8e00bb095096193dd7
SSDEEP 6144:jBrQKX5Xst+HlXawuu7uN4udhbM2Ndgp2BsaXgHkmybvAdEpjyHZdhU4iPWlan:mW5XhubLjbM2NdOeH4dEUlURWYn
TLSH
T1EFE48666FB06CE26C8657A7D8DD74B063A30B2DD9EC6EB077021937CB8786544D2E20D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

version

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\version
Size 8B
SHA256 6fad46276bd050e3ddbd7d6a667f72755cccd29ce87b714c1d0e73f3fb6a0206
MD5 08a8ded3dee574d7fa288c14592cbd62
SHA1 598bf61cd0e401d81347c045ae6afea2b2fd8cd1
SHA512 4fcd355c63af0a5e76dd0b3bb283784d840105b6b9afb74d5ac1a040c8d7372bc3b8206e8e80da04a103d36ad89bc37dfdda25993b8e152d580cf1e210016941
MD5 SHA1 SHA512

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\vk_swiftshader.dll
Size 5.3MB
SHA256 4bd642ea08bd933014cd5c44911c4422bd6f69c8569f494de79054536a6469e0
MD5 d37818372f78d8474170cd97e89727e8
SHA1 259deaebb92eb3b7f8ce5bae70a8b26831459fbb
SHA512 9d2593c075ea2c44760656b131c571fa0ece1fcbbb9df86c8616493588e90bd4ef69dd48adbe7a214a89d0fa2d1884cbac134a8d2a2a6b3fdbd8f83b3c708175
SSDEEP 49152:xVfzRLVriek3jvuhmV9lbL0aLgztfbkiNSYoCESb+ngPskvIC6C2Qf+d+0C8m8KZ:xVfz2pFxbkkm5X
TLSH
T106464903F29681D9C06DE679875FA623F631F8800B2276DF56A00F192E69FE06B3D715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.8\vulkan-1.dll
Size 904KB
SHA256 95785b9eb4ca4cca1a140041042f6007be1cbe08b4ad537b7b52ccc3d3939124
MD5 2c35b68f26e0458ec8eeb6715bfe99ed
SHA1 0f3a2876a26fd3a0a5619312f030006135990352
SHA512 3cc5e409f8a0013342215f851c11fbde6f4ced0c87a1e3432056025fd0aafff98a4d34ba99ecec2ca2d17fb67cbe392ce0ae3994818eec66b91d9dbcd429e07b
SSDEEP 24576:QNXa4ucqBxJ/N29IrPwn6Z5WzcxDYsHkDE6g3P0zAk76oOHDJ0X:wqeqq6rPU6Z5WzcxDYsHkDE6g3P0zAkT
TLSH
T1A3156D12D6548B69DA7AC074D8D18A0789F074851322BACF07B817147F6EFF42B7DB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.bun-1534026329-3cba9b8dc4fa4e45.node

Path C:\Users\Admin\AppData\Local\Temp\.bun-1534026329-3cba9b8dc4fa4e45.node
Size 506KB
SHA256 a8199cf7b6c5102267a5889f80321a4cc92e631d7504c474d32a35b4d440f315
MD5 34581748f55c388cd744f152e065bd0c
SHA1 95c5394ad0a174184b808c17d1eb5fc71593d7de
SHA512 b5b8ab91947a2b06bd7ef097855b0cf19dfbf3b9e93b33d02b57cbdac4ed0b7d82004665123a1ee6c5a880b80d7cd9df9ad202fa179731b2045b0ae11e1c69f3
SSDEEP 6144:jk4bH+DHWwaMfPvMpRIO8kM4dac5mlMH1BVLI6vuLlKIdM1sj3vy8BK:N+rWgcc6hdac5mSrVLIUuLlzqsDpU
TLSH
T19BB47D6AA2A803B8D4ABD17CCA574903F77578460761DBDF03E086761F27BE15A7E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_uihhpmh1.dpz.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_uihhpmh1.dpz.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

a1bb8061-4a40-4b68-83b7-443ebf01c0af.tmp

Path C:\Users\Admin\AppData\Local\Temp\a1bb8061-4a40-4b68-83b7-443ebf01c0af.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

909631cb-31b7-4a26-86f2-51b3a6389aad.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4696_238932199\909631cb-31b7-4a26-86f2-51b3a6389aad.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4696_238932199\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c3f0e36-c274-424a-9eb7-1c270d7df0b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4696_451766274\4c3f0e36-c274-424a-9eb7-1c270d7df0b7.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4696_451766274\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\Jac Code\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 78f312cba903d17fd37b8a9b358fb72f44444d807f8e71d35fa8e33657b95e71
MD5 6071eb0e0a97850a52a58a3385820927
SHA1 44d3348874b2d2c7cca4a53026323ab7454c5aae
SHA512 20e0ec3c2e56e8144283b1d41bda342106c7c6adeec5da5a49193d4a965224ab8cf22b797b83c439b782d8bc6bdf9b52e9aeec77d5b804245278c3699777881c
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Jac Code\DawnWebGPUCache\index
Size 256KB
SHA256 9bba2f546a5af401e7bec2ec16c82770b2333d421883a5f15854c61cf33e184c
MD5 fa397cfb7682f25d26a9e9df71e0ae29
SHA1 0b851bd2fec157ee072714b847261683b1d5fd55
SHA512 75b53283894c6bbc143eb5db6b783e3f6edde0a92ff3f57c2896efdfdb751d8ff21a6a0a28823444a9c63876ad1dd388bd358bbdf31cc901a711d71d95bc68a2
SSDEEP 3:LstlNllkll/ll:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\Jac Code\Local State
Size 490B
SHA256 89f674ff2a045f80aa0ede2324810e851b5f3f0bd3666b5cbb83954e4ff72d7e
MD5 b84c0111ce0003a3f10805e5746854ac
SHA1 6d112c29d6ab2b6ec0e0a196090b388efcdf7df7
SHA512 ed8f9668a4dfd83611b269b7c566d1757b55f3501bfca267a9d662e0526731a8872f1c9b8934e6432e247e4aa40762cad158297cb62c6406ec8a7212ea6b9092
TLSH
T1C5F095B5547DEA717B670B50461377330D2618A74B054510769C0127005B5F4D70BD34
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Jac Code\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

.integrity-v6.key

Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.integrity-v6.key
Size 32B
SHA256 ab9c4365aebfa60c083c60b27d0ac2a6551c37e668b3ed4918a4eaf5252a3b25
MD5 e0b7673e8fcce2ead4dfb7a8f5bc0553
SHA1 8e36e3a9f00e2ed3cf83fef0dca085b0e119c6df
SHA512 a84c2d4e198fab7d7d8ecb122dbdf8bdc2dce1a4cde3584ecab7eed2ce66b4612cb8e72433ce1ee1f261f58272cff3a6fa7e959efc48e46d70e20ac84377a894
MD5 SHA1 SHA512

Submit Download

database.sqlite

Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-70d5531b-195d-493e-b4ad-1b576326e08d\database.sqlite
Size 192KB
SHA256 d5e3b7895d87def31793955da12e80a92ce9b4ce54835f7a1c03f1291e848afc
MD5 e0c407cd7a4011b0ba58d98cface1fce
SHA1 660863f34e5d74deba2b9e31114444a817f90e87
SHA512 ff381edbb5bfe139d5b0d064bdedcfcd9d22b845afe3d940c4f99cbf23121034ed2471fe5a202716e47cf56f7f2f32c004cca0ff1634838d741ee70803fbf593
SSDEEP 96:2ndlIwGjS4r34+/bfXy/qn6GSbSbJahYoriS7nIl8IKSqddlInGjS4r34+/0Uybb:2cJtjfXy/qSSb+Yo1tTnJtLi8TLU
TLSH
T1C514004D7D22EB22E1DBD43095F2A8626775038B6F807C1233FCB960AFE9EC1513A409
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-70d5531b-195d-493e-b4ad-1b576326e08d\manifest.json
Size 1KB
SHA256 643ab1c63c0f19b2cda0c77f7f50f0ff5fedc55c380b5172c8b148f117e969df
MD5 83c71cd34566489863f405da3dfbde40
SHA1 0d43aecbfbb86e80db505761f6d0e61b392bebed
SHA512 9d50991c0309f7b605b708af9354f10b8d3d7b8a8e119767a83b5fca6e95188ded6d0ba5e49677bcd3f743823f19af021433aaf48186be82eeb60728929b845f
TLSH
T11B314226D70D70BC974B64BADF531E82A37578113EA5096059D9C0C5A34104CE7F3BE9
MD5 SHA1 SHA512 TLSH

Submit Download

f60c4cbe-c47b-4463-aa42-98afca331c80.tmp

Path C:\Users\Admin\AppData\Roaming\Jac Code\f60c4cbe-c47b-4463-aa42-98afca331c80.tmp
Size 490B
SHA256 6d6dfdf672f8f0f4dc372e0d56e4809b58f16317cb2d32d3124929ad78b72b61
MD5 95e7988fb70c763f9e4b8d70ffd7d2f6
SHA1 5d31739d90d871a0d76919d8391599e1b38d3fa8
SHA512 e31261bbb2de01e221f318d7c0eeb6a510c8343ee80b08f895d2e22caa0766d5555b098dff96126fe64333bbf11b710d96192ab33e9e0f13d43d30eb798a0b6b
TLSH
T18EF09EB15EA29A667E818961163BA8924F2035FB4211572171C8821A60A6CB887279A0
MD5 SHA1 SHA512 TLSH

Submit Download

queue.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\queue-v6\queue.json
Size 38B
SHA256 6b6401b3841d14091235e8e71a5f7e767b3198be6f3662576a618cd4d296f732
MD5 ef2682934d7f3705011fa867628f2bf5
SHA1 2ed7634c7711fb62c7404aabe9727a5f7a38d4fb
SHA512 789d7b39a52f16278e8b3ecbded4622f9f32ce46f3d7877925632d40f1865ef08920261a9cb6d532e96d48c95cfe1fa1d876fc6ed3773e0f0bb260b71fa98108
MD5 SHA1 SHA512

Submit Download

.task-write-ce633553-dd0f-41ca-b50b-1654e817cf52

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_4c0b090a-1575-4d15-9790-b8551669b827\.task-write-ce633553-dd0f-41ca-b50b-1654e817cf52
Size 640B
SHA256 19d49cd21144c2400d54fc569efbbebc97dcb95102c7b40856e70639bae2419f
MD5 a9d3727df183e835759358414c4ccf45
SHA1 e7f4cf8b908ce76ed52facacdefa3b40f16b8c2a
SHA512 097c2c993f52ef29fda34a0109cd80052af33b655028df75f3755e61788b43cac3af85d81942e2167ac3b2bb23a614ed993bd97339cdb6549c662ce510a40063
TLSH
T127F002510B14B5B76B46D646540F2F035EE410BD70880CB8C7E58D7C02601C6A7D3D27
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_4c0b090a-1575-4d15-9790-b8551669b827\task.json
Size 455B
SHA256 35fce782a995c2df762ce1ea929271bcbada5c1ff8c89fceb76a56226f8b3828
MD5 0e829b24031988364cb63b5723164522
SHA1 40b31851a185be752349cc425b67667431d30724
SHA512 61dcb17ae741f4550a7936d2bc9e453419168cf054a13a17b6e2bb3bef1d66ea945c92a33b611067ee0564c6c1f15cdfc973b7220508537374cd7474b7ef8e88
TLSH
T16AF023221725B77B6745DB06281F0E071F60445A61C40C74C7E1C59802804D757D3C37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-6b3d553f-ee73-4727-a09e-6dcbbdbaeeb4

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_6150b008-d7b8-4a30-9b9c-fcdfe974c5cc\.task-write-6b3d553f-ee73-4727-a09e-6dcbbdbaeeb4
Size 994B
SHA256 563e75a3bdbbbada60f970d69585aa185bfde34efa20bb6ae007444377ac03a8
MD5 2cecfb19e85cb2509a8e8de7808c6b0b
SHA1 545f7f874e7003f9548de4baef93aabb22460a21
SHA512 10615686a88388d238196b578e14eb98a111a0c04fc8dfe64641a807093a019066e05ccc0b90723218e1daf52b5dcd09e121d17d6bf2c334c1a96337ad24e2cf
TLSH
T1791114100A15B8F66745D2C84D4B162326D834B471980D74D2E7CF2C25E538D57D79B3
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-a2542695-570f-4dec-b3ba-ea6dfc1f22da

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_6150b008-d7b8-4a30-9b9c-fcdfe974c5cc\.task-write-a2542695-570f-4dec-b3ba-ea6dfc1f22da
Size 989B
SHA256 9853d35412fff44bad72f1347e3d997368f7ec03e4c26e9a9a757a2bea72e49d
MD5 3d5cce1ac8603f50830e762f8a6e4260
SHA1 f27b04baa7d61239cf1891caa38839d5dc2c42b0
SHA512 b785cdf981a4496be0fc198f1bf2868de66c7acf54ca333151ea2fb5fb75ef718b64e083b851cf07264d3d150981bb9850599bac6b1a01944f5f786549a7957b
TLSH
T1301110A10600B8F62744E288494F1B6717D464B471A84E74D7DB8F2872D53C87BD7D67
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_6150b008-d7b8-4a30-9b9c-fcdfe974c5cc\task.json
Size 640B
SHA256 b53733a2dab93077ce3ea5ba0540408da73d6bd88c8c81581566e7a9bf0fecb0
MD5 6bbd853ecbba006a946cd03909e517a9
SHA1 b71c9d6183342bd18fdb1811ac57bb201eaf1156
SHA512 ee705b87c00942527c419837d4e3655b6816ce2e16f73d18d965cfa05319753e35791117f0d3c5a3138d97612809440f4841bfdb6361a892f91b2aede3846f14
TLSH
T152F00C100B60B4B52741D389095B1B130AE824BA70984EB4C2EB8E6C02B438A67D3C23
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_6150b008-d7b8-4a30-9b9c-fcdfe974c5cc\task.json
Size 455B
SHA256 f86176032e9a2edc35ece8fa6ee9e13352d75d87c262edc5161d69d04a56fadc
MD5 f9ceaf82eab92cbd94a8399d9838c2e6
SHA1 548cda9e7557711cac79920c4ff01dbfacb8f14a
SHA512 8c18aa151f96eb202a746977be903cdb2a437c9c473aa23367d34c10b2af1279593d99462de7103ef50b0f6b830b2be6cb4b827379ebfbe95688241258e33ae1
TLSH
T1FAF023201771B63A2340D749092B0D1707D4985252C48D71C3D3C54802E49D627D3C33
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_6150b008-d7b8-4a30-9b9c-fcdfe974c5cc\task.json
Size 989B
SHA256 68788157d63bf0583d6c27738cf7ab2349e522ee87f5fba705491e623f75ab38
MD5 b56a583b5fc48ad941f58394352fdebb
SHA1 3bf87c0595311a655f8e8207810d21365685d06a
SHA512 496b94d2b181e6863a74061e828b470a2a210f7a59968d3f8ba4adb70fbc24908ae27c210fda8b20bbbaa12d1138529d19675855f8bdf5eaadb03a92be711bd7
TLSH
T1001110A10A40B8B62744D2844A8B1B2717D434B471A84E78D7DB8F2872D539477D7D67
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-24d632f2-0974-456e-acaa-97f62c6d0196

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-24d632f2-0974-456e-acaa-97f62c6d0196
Size 784B
SHA256 26bacc358092515025902b06d72f65db28cef505391efc72efb8d460ef4ada62
MD5 f663e11888d466c86562ed11b2b06167
SHA1 43cfb65f4a3eb6c8cea6cf9a675a3d1ce68056d8
SHA512 ed29dd568129376b12b7821df92b51e5def1da672d600b1beccdb286c0215276a3c9a16bcb880115646a6cd78964bbbef372318ccbbbad3ae92c4b1ed3138d71
TLSH
T11901D094095069FA9700D589054F5F132EE41039A09C4C69D7DACEE812A53C6B6E3937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-27199759-6f2d-41a8-bfe9-a09879b23872

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-27199759-6f2d-41a8-bfe9-a09879b23872
Size 784B
SHA256 56343f7e6f460597f4394d7fdf48113e5024a30f2a04bb8feed5011edfa3cb14
MD5 e12fda44dc2804eeba9b9d42d73057fc
SHA1 99f5bc33583a5ce095c8612088975cb3bc21ec02
SHA512 9ecc4640761c378f087d8cd873a6168614f1d15bc90cfb755fbc951260520b7faa73acf0cd9798dedefd1eca873471fd93cbb1319e0611e9b4420d2fbf69291f
TLSH
T155016558091068F98B00D5C54A4F5F131EE45474A09C4C79D7DACFA813E03C677D3933
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-31f6b207-19e7-42b3-8765-436191bc3b18

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-31f6b207-19e7-42b3-8765-436191bc3b18
Size 784B
SHA256 fcc954950a9f63cc67fb89f65a3e73fbbb1cb2be961d607a5de2e3bb42d32316
MD5 c2e11acfd12d1335c5c940b9cbdd3e1d
SHA1 7dfca4546eb0d2c1f2d97540521baaba5ac47fbe
SHA512 94a1d827b53db9950ea8531716dd228028550a13ad2825712829e3f2364347a514273957dda9ce54f157535c5b7bab6e17c250041fe7c521a50a66b2489d43d7
TLSH
T1FE0115540911B8F99700D6850A4F5F131EE520B5A09C4CBDD7DACEAD12E43C676E7937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-34573dde-8639-4a53-bd4c-bb0521203b0b

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-34573dde-8639-4a53-bd4c-bb0521203b0b
Size 783B
SHA256 42a4518770b82c1685989b344e27e20f1170ca68e57638461c0c2ff13d6ec0cd
MD5 2b02c045fd4374cf36abddd88369abdf
SHA1 7f844cdadbf731510fbd7e9565c0c2711467352e
SHA512 03906a7272cc3e674753b5b823cecf3f12063ec09d13f4741e46e3a5da1f44ccdb1aef08564f49e133cbceec8141ce1a6939a7178deea7c5d12f6cfd6996389e
TLSH
T18A0165940910A8FA9700D185060F5F132EF81039609C0C7AC7D9CFAC13E43CA76D7937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-3afcf638-15a2-4d6e-b138-96c3aaade54e

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-3afcf638-15a2-4d6e-b138-96c3aaade54e
Size 784B
SHA256 386890a003f7bd17e397c83fc8013ca8b643cfd2e82f36599ac87a1dececc3af
MD5 8adc574d42e227df24dced1b3d09b742
SHA1 f81faf0eb0d15b611787e0d4ad8eeb178e086a80
SHA512 4c7cfd122dbfa7455ef43ddf30452473d4388b13d3d340773399395c082710a135368ea7a17b346fe6b8f064ddf5c8d2b555e3d00d8e363e190ee0a027205876
TLSH
T1E7012058091078F68710D2850A0F5F131EE41034A09C4C69D7DACEAD12E43C6B6DBA37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-4a2421ea-2c66-4b74-854e-5b38c0b554de

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-4a2421ea-2c66-4b74-854e-5b38c0b554de
Size 783B
SHA256 180bcb651ba2d7a03b466790f90dd61781875e1947e51bfbad44958f126610d5
MD5 4bc86602ee86193ddd4ead0fdcf8e504
SHA1 e8004cc8c55397ea0dcebd541dd8bce3362ec030
SHA512 24c381e7394f99959f352c7a70de75fdca9583e25e7201e683728ee83fb47613bb2d5c513e8694ac9006ff431877fdbd2ba0e324984ad872cdd50e306e657c2b
TLSH
T1D0012058091078F69700D2840A0F5F231EE41034A09C0C69D7E9CFAD12A43CA76DBA37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-556b26c6-5d01-4c43-95bd-e6e914af15e5

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-556b26c6-5d01-4c43-95bd-e6e914af15e5
Size 784B
SHA256 b6971581609e4d89f98da38d9ef216443c75392bf32dc3cbc2c0058c2d772187
MD5 31d0d836f07669f3418220664a7ee71b
SHA1 18e02cbd481f6d007f3ef99ee79d152e775d4350
SHA512 e44cca9689fbe42a173a75abba6a005cb24b80e9f62cd87d71bd20a2385f0e129ddea19382a16c51c84a725be8cef81bafb050e39b704bf583ac5495105fce01
TLSH
T14D016554096078F99700D1810A0F5F131EE41035A09C4C7ED7DACFAC12E03C676D7A37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-5d1ec5f5-a732-4ca2-84ef-b359748bd50e

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-5d1ec5f5-a732-4ca2-84ef-b359748bd50e
Size 783B
SHA256 d40dd51da7f69ffe7833e3a21e3ebf9d919f8ae6290d1ddd33523a0136b644bb
MD5 cb07f51abeba797028998a6a0a25f2e7
SHA1 fe732bef3c97ce129963bef2a9e447bd051ffa23
SHA512 12abafec40a8561cc365de7fa42091471982a386c0b85b770a29a875d68e259f275a518c08b77f0b315fcee90693045421e8891c7e46edffc29227af4b7d4b1f
TLSH
T15D012055091068FA9700D185064F5F131EE41039A09C5C69C7D9CFA812E43CA76D3937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-6389d749-79c5-42de-887f-09c70b3f0b62

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-6389d749-79c5-42de-887f-09c70b3f0b62
Size 784B
SHA256 507454eb512ab9f26356663f36c9b335fbf57686060752e7d86ef1e3259e672c
MD5 5714ad74ea7fdabf0f8f59613d095726
SHA1 cc8f2d3cd63d98d6e5e746cb36061c6a44b784cc
SHA512 f8aee5cfe8148ba258b56d5b77b8219e907d5fafe052f3ee285d442f784cdc25a6ca7c8d3f6b2a32635e0f15a3ce8fde22019bfe9d3be38852a84f93c1717243
TLSH
T12E016554091078F9A700D2850A4F5F131EE51075A09C4C7DD7DACEAC12E43C676E3937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-6ac82384-3b40-4af7-9eff-e24c0917d644

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-6ac82384-3b40-4af7-9eff-e24c0917d644
Size 784B
SHA256 bc8f571993ead5d68d46d7c78be043694b7992eac5f77ea95e717cec1bfab1c4
MD5 5942972641ab0fb1ac18e50313ed37e3
SHA1 f2dd63d975cf15a300eae5d91102242ebe218b96
SHA512 ef9f70ac183f9823411cf7aa433417b17392267be6c64b4c6c4697fa3f1f94fc4fe3f8a4b3661e6e520139650dfedc68f60f93eb3dc32b03e97c449c7287c1e2
TLSH
T18401655809006CF99B00D5854A4F5F131EE45038A09C4C79D7DACFA813E03C6B6D3933
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-6bcee624-0c02-448b-a1db-adc45db572ca

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-6bcee624-0c02-448b-a1db-adc45db572ca
Size 783B
SHA256 6d63f1b4dbf9790f216dfad0dc5b8d844bf8bc4a133ae86942a41ed2d5bef471
MD5 4fd31058146db862b7b7c89799c0cf6f
SHA1 faad13a4106b00511e5462bb02c38614579146dc
SHA512 fa6a7605b2d956783b5ab9103f3976718af9f757c8d6a3f2c9da02a7e65b64a00395c489ed464ff5e8b09e72de588b8f550b2574d9e57cc6bfc284fe171733da
TLSH
T131016554090068F99B04D5844A0F5F131EE85034A09C0C79C7E9CFAC13E03CA76D3937
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-6d442c86-368b-4591-99f0-40e3dceb49f8

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-6d442c86-368b-4591-99f0-40e3dceb49f8
Size 784B
SHA256 8b634d5cd9f1902ac8d295a02e3e60d50d946085206d17aedd315b43125c30eb
MD5 700e6a6c9adfa1424fc6d30de84aaab6
SHA1 fe45ccfcc773421e5b7003a32dbe766edcc20e47
SHA512 2f462a636096b424785bff02d11b5a04854d0f0ed40630980bcd84434b9691dff072e5a505bdd441f52336e681acfbaa8d27a01083de4055f9ac4ef325132afa
TLSH
T1800115580951A9FA9700D5C5054F5F132EF51039A09C4C79D7DACEF812E43C676D3A37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-7d3b1c58-5692-450a-a558-a16242caad23

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-7d3b1c58-5692-450a-a558-a16242caad23
Size 784B
SHA256 43733c8074a8b3e46d1fa53c1be8f18e55a9eb1f2bc24cb48b5e8e62fbbe65aa
MD5 6c38867aec0b2a7651ba668b91200c0b
SHA1 e73bb878e7d0f297856b023ee69765932659a1e8
SHA512 17ec52f840d65bfc2b9fe64c3a29c7a82ea10035fd9b659c28686f6f278bf8189089de61269163bd7dcd539f9237fece2d26ee7f4776a2865bca2633de48804c
TLSH
T17D016594091068F99700D6C5050F5F132EF81039A09C4C79C7DACEA813E03C6F6D3933
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-80de30fd-8fe8-49a9-b679-ef7fe8bc1797

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-80de30fd-8fe8-49a9-b679-ef7fe8bc1797
Size 784B
SHA256 7ccb6ce6e1d1e7e1a14eaac14eb7d403ec175aede2768175ce796949000c2ab0
MD5 6f386bbca33b156f8daec5531c0cb756
SHA1 a57cfbca042ddfd1f986437844e743e2f4ab3161
SHA512 ef43bab865d6ca22e50c4bd5291a8c4bb666e6384c954aa5bd75baa659552370677f5bebfe1670ceadb94e5718d898e476d3efc6b3da807619907c2cf4bc01ed
TLSH
T1E7012058091078FA9710D2850A4F5F231EE41038A09C4C69D7DACEAD12E43C6B6DBA37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-881601cd-5573-449d-af7a-690854aae7ec

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-881601cd-5573-449d-af7a-690854aae7ec
Size 784B
SHA256 f3f9dfe2ad34b0cce12f98be64cdc1b3175e2cea0454da5afb0edc7b61237686
MD5 bae3707cf599e34f4c076df7ea3a5730
SHA1 02269f6193c3451e1f920cb8b3183fbf08ae4eea
SHA512 d91988056f94f175675d5f06043ffeb94d5d2197349ff8b65aad00e224c4d0888d3a087351613460bd8de6ad28ae838886bcd7d7814af0c6ce5276d4fad4feb9
TLSH
T1B20120580D1078F69710D2850A0F5F131EE41034A09C4C79D7DACEAD12A43C6B6D7A37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-9204bf71-2a0e-4bcd-b86f-87d731f6e9a6

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-9204bf71-2a0e-4bcd-b86f-87d731f6e9a6
Size 784B
SHA256 932da3ddd237a140ce26767c6b0b020d7f4a29724836a394fce4d22c83d569c9
MD5 0cb6c1061e2edbeca62a357cf32dc81f
SHA1 c7e4da5205bc43f5237e91a79a2eb1ffb519f034
SHA512 ad98d89d65b264235e883b56dc7252e6eb3a447afcc0496a6d8e8af1e9fb11151716b84a85e4442bdc117d2b9998c79a259073245301c6fe334e7eb41c42df8b
TLSH
T1EB012058091078F69710D2850A0F9F131EE41034A09C4C69D7DACEAD12E43C6B6DBA37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-96f6496b-f041-47e2-a89e-53696519170d

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-96f6496b-f041-47e2-a89e-53696519170d
Size 784B
SHA256 451a9b2c8205a97a911a6f9eae000be892e9786ff872e3e3a594085df4ca7dc8
MD5 6672e4e92e46e85d6f76e580d55b7685
SHA1 2893d0471e3c01bb20279f4d4d7720e886aa247b
SHA512 155813241708c6352c019bfb75f354d27b41b7705bc4792ad0928c30d4f7367e60900f6700f01ad8d0bf1476d5c3c02596059be8c6dbad3f37f1e4cfa25c624a
TLSH
T17B01D0580A5078FA9710D6850A4F5F131EE41075A09C4C69D7DACEAD12A43C6B6D7A37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-9ef50278-1e1f-49f0-9a76-0b2e7fd465a7

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-9ef50278-1e1f-49f0-9a76-0b2e7fd465a7
Size 784B
SHA256 9f5271b62f799cde30848e1e2e1f2d46176b1a89d3b0c941a2d47fd599324b7a
MD5 318649aff005d7742440062ee2a8cd6d
SHA1 abcc97077765dc4c6b045e111682a613cbc1dd36
SHA512 1d9a7739d4fca6b01c4f839fa2229268354bf6ada1c90108b5adcb0e988aaca8a25cbb6d323103a2eac693e882b6e969c54480280d3dc73b7ab8a64a61551c03
TLSH
T12B016558095078F68710D2850A0F5F131FE81034A09C4C79D7DACFAD12E43C6B6DBA37
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-9f0cc163-a4e3-479f-b8f7-b4107eba346f

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-9f0cc163-a4e3-479f-b8f7-b4107eba346f
Size 784B
SHA256 49cdf4044edba58f01ca60c0b631d504a97bb0b563c870fc7c4bde85249871c7
MD5 f1f0ad160586ac94d4911577e2a6f2ae
SHA1 3de5ce10aaaa96aa43f719e8afaf3d9d9d05a9b5
SHA512 f9b61b52afb71aac41a83ceecbe705cd5f73fc4a66eeff1a4d466c9c9174c89a6f980829a8a967feafbc8f8cf52627f5727956ca5d08e11fdc53eb70fe232b94
TLSH
T17C012058090068F98B00D5854A0F5F132EE45034A09C4C79D7DACEA812E02C676D3933
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-bd8024e8-7190-4119-a3d1-ba9f2c42221f

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-bd8024e8-7190-4119-a3d1-ba9f2c42221f
Size 784B
SHA256 fc28fce47d9393e3ddc308c197607ebed6deb54f7676bc609b32af6851d2b402
MD5 5b8a2e5509805357c175c0f6397f85b8
SHA1 24954e2b438b7676ef66a6cea31ed929a922783b
SHA512 cf402bc813402baf3bc1675d216585c62d7958f022d8b2cffdd26469d76173219298f9e08cf67d4f412a8d9bb41bd8e6f76c8ef04903a91708c8d8a5cc348b6c
TLSH
T124016558090068F98B00D5854A0F5F131EE45039A09C4C79D7DACFA813E03C676D3933
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-e7255e41-39c2-469c-a79f-9a074866b606

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-e7255e41-39c2-469c-a79f-9a074866b606
Size 784B
SHA256 f1ba3e0884cf02c2786b12a3465e07b18a2dc738963401f56f2eacaf7fdd05c4
MD5 fe2ba8084db3c7438f9f58c8642059ad
SHA1 2cf1462880ee8e34ede78d902e6b07b3f53242eb
SHA512 df72c7fcac4598b99fb2adbdd0697a9e756ec38eb64130bac6ca2f9b838b30693c796f62bb12a5509e24bd6c988ae6b68a74c249e0ff4328253a4633df1aeb97
TLSH
T13D0165980911A8F99700D6C5050F5F132EF81039A09C4C7AC7DACEA813E43C6B6D3A33
MD5 SHA1 SHA512 TLSH

Submit Download

.task-write-f04825ad-eff9-4a26-8c4f-c366e1a4981b

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\.task-write-f04825ad-eff9-4a26-8c4f-c366e1a4981b
Size 784B
SHA256 4bb023044a32194e032b961b273b4fe74922d6ab59d3808520020b9fc48191ca
MD5 228f5ad36497177831dbdd1a76b31643
SHA1 10d1f34efd1fd23c4884843b276aad5fbc29743a
SHA512 3f59cb3411bf0745671ac3b48073e093503d4376571d8a9f84618e1de4d86c350806af76671675681f87a74bb7e66ca932956474266dc0660cd7ac325c39e97a
TLSH
T1250165540E5068F98700D1810A0F5F131EE41075A09C4CBDC7DACFAC12E03C676E3A37
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\task.json
Size 659B
SHA256 f2bcd39bdf0629d11cd07770f3090fdabedfe49a082a04701f1f15c8c65a3b38
MD5 ee68d063325a2d62c2e009435d1bf934
SHA1 0a44578db96c859a2859b49bda4e20c3cfb9de5c
SHA512 435371fd45b2877a71c2202d2093cd17e0700c3c52a5afd252fa62cea2a92c0040ffc8f324042d693ab38e7009b2f3c4b3a44d75f49efe1d4e747ce0d24ec2a5
TLSH
T1D701DD580A11B9FA5700D6844A4F6F131AE45079609C4C79C7EACEA812A02C677D3937
MD5 SHA1 SHA512 TLSH

Submit Download

task.json

Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_d2695ad5-30b1-4061-94cd-91d5a2d91ac7\task.json
Size 474B
SHA256 b4ec5249f996716c4614aec17911f54df0673a52b7e04b65aef43bfff226c883
MD5 6882f499c8493ef61635d80ba4e569d7
SHA1 41ec3eea670e54fdef082f7ce76dda9ee411cf4a
SHA512 8876059dbef07b77071c3c186d536866ca9a5239ab970051e8775c174c9890858d339996800f6d93099dd7581535cbe4a6932fdec675be94e04e3cd569d84d7d
TLSH
T177F0DC692961ABBE5300A6481A1F5C131B64883598DC4C3BC7C6C1D403905D727D3833
MD5 SHA1 SHA512 TLSH

Submit Download

default.acl

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Jac Code F9078B.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jac Code F9078B.lnk
Size 2KB
SHA256 a51b2476933a06337424e79b2996d02fa35210a8e06adf40f5734f6b3fe4b2ad
MD5 a9ab63aac74f0182438ccbc84428d8f4
SHA1 35b9f9132b37001f44f977419769d986de9eb0db
SHA512 a2d32337bdc20d362f6f1bef2425847ab42ee0eb04284b1ac607c6f6d97e89c5fd6ea289ab91088bde4c1e5953eb535bc42629faf9f2ed27c39d1f2488a4dd44
TLSH
T17E41AA009AF55325E3B74A7E4DAA52219E77F420AB520F0B044293870E66F909E18F4B
MD5 SHA1 SHA512 TLSH

Submit Download

~ac Code F9078B.tmp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\~ac Code F9078B.tmp
Size 2KB
SHA256 9e8cd1f6ad5bbf671c7b5e6e8ff4751b3419ae3a19b1b2eac442eada1faccb3f
MD5 54f2f29b9fcdf3b2679b576664947395
SHA1 aab96ae3c7100923ce4a9eb2be4501867f89d499
SHA512 a62b76977eb2cfe96736b971c046968d52f4fd7cc12cbedcb6762c670cb9601d76f9277e24ef1e05c7fd84df30b27d2f781d1d617628d6bcae5032755a3073dc
TLSH
T14A519B00A7F56321E3BB0A795AB662259E76F4309F160B0E4005838B1E66FD09E14F4B
MD5 SHA1 SHA512 TLSH

Submit Download

Jac Code F9078B.lnk

Path C:\Users\Admin\Desktop\Jac Code F9078B.lnk
Size 2KB
SHA256 809effd2bf37da8f61f3a1004a71a5ed0e913e483cd70e92af839f67e56b4543
MD5 442107ca67e2d9988e57c7c875106dc0
SHA1 58866760763aa6d4efc070a59fc2da11e24d153f
SHA512 40c279eccfbe905961927f0771883a52bda7d720d719ef3f70728890072512d6556ee3f99612efa58915cf20c4574002da4198ff408c33d520b9074f18d79ed5
TLSH
T1E441EE00ABF65265D3B74A3E5DA752659F76F4305B030E1B044293871E72FD09E18B4F
MD5 SHA1 SHA512 TLSH

Submit Download

~ac Code F9078B.tmp

Path C:\Users\Admin\Desktop\~ac Code F9078B.tmp
Size 2KB
SHA256 618620236f2aa85631a6a2ff680e6c2875b2d0c6a4c9c75a7153801cdb5dc270
MD5 e98b97b71f30c1996658e45b81c73b5e
SHA1 2733c0223214604e0f9cc9c0805fdd4c3ad54c0e
SHA512 25447da1ee83eb96066d8a7a6a73da5569aace14ab1b4eae298d14f316501a012ed81fe28b36212a120dcea95d6bb9d7904c253c9c3c6bc39eccd4fe8dd6aa5e
TLSH
T172518B00EBF96261E3BB4A7D5EB662659F76F4305F060E0E4406938B1E76FD09E14B0B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/544-499-0x0000000000F30000-0x0000000000F36000-memory.dmp

Download

memory/1140-326-0x0000000000570000-0x000000000057A000-memory.dmp

Download

memory/2412-31-0x000000006BC20000-0x000000006C148000-memory.dmp

Download

memory/2412-28-0x0000000029380000-0x0000000029390000-memory.dmp

Download

memory/2412-27-0x0000000000DF0000-0x0000000001DF0000-memory.dmp

Download

memory/2412-29-0x000000002A160000-0x000000002A322000-memory.dmp

Download

memory/2412-30-0x000000000DAC0000-0x000000000DAD2000-memory.dmp

Download

memory/2656-1584-0x0000017D6F6D0000-0x0000017D6F6DA000-memory.dmp

Download

memory/2972-502-0x0000000000190000-0x000000000019A000-memory.dmp

Download

memory/2972-506-0x000000001D1C0000-0x000000001D210000-memory.dmp

Download

memory/3068-512-0x0000000000D20000-0x0000000000D2E000-memory.dmp

Download

memory/3252-701-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-710-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-707-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-708-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-709-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-711-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-712-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-713-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-702-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3252-703-0x000001A43AD70000-0x000001A43AD71000-memory.dmp

Download

memory/3444-451-0x00007FFC5A900000-0x00007FFC5A901000-memory.dmp

Download

memory/3444-578-0x0000026B05CD0000-0x0000026B0640F000-memory.dmp

Download

memory/3444-452-0x00007FFC5C170000-0x00007FFC5C171000-memory.dmp

Download

memory/4420-21-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download

memory/4420-18-0x0000000023EF0000-0x0000000023F12000-memory.dmp

Download

memory/4420-0-0x0000000000560000-0x0000000000ACC000-memory.dmp

Download

memory/4420-5-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download

memory/4420-1-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download

memory/4420-2-0x000000001C6E0000-0x000000001CB8C000-memory.dmp

Download

memory/4420-20-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download

memory/4420-22-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download

memory/4420-3-0x0000000003640000-0x00000000036F4000-memory.dmp

Download

memory/4420-4-0x00000000014B0000-0x00000000014C0000-memory.dmp

Download