hxxps://jen2dfd[.]itch[.]io/jens-gacha-20

Analysis

user interaction
yes
max time kernel
299s
max time network
301s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://jen2dfd.itch.io/jens-gacha-20
Sample261027-vf11eaex3y

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3276	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{7305D632-BF99-4DA8-BD02-0F335F804B16}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5564	msedge.exe
5564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeRestorePrivilege	756	7zG.exe
Token: 35	756	7zG.exe
Token: SeSecurityPrivilege	756	7zG.exe
Token: SeSecurityPrivilege	756	7zG.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
756	7zG.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe
1952	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1952 wrote to memory of 6004	1952	msedge.exe	89
PID 1952 wrote to memory of 2160	1952	msedge.exe	90
PID 1952 wrote to memory of 3276	1952	msedge.exe	91
PID 1952 wrote to memory of 2160	1952	msedge.exe	90
PID 1952 wrote to memory of 2160	1952	msedge.exe	90
PID 1952 wrote to memory of 1728	1952	msedge.exe	92
PID 1952 wrote to memory of 1728	1952	msedge.exe	92
PID 1952 wrote to memory of 572	1952	msedge.exe	94
PID 1952 wrote to memory of 2668	1952	msedge.exe	95
PID 1952 wrote to memory of 572	1952	msedge.exe	94
PID 1952 wrote to memory of 572	1952	msedge.exe	94
PID 1952 wrote to memory of 2668	1952	msedge.exe	95
PID 1952 wrote to memory of 2668	1952	msedge.exe	95
PID 1952 wrote to memory of 4836	1952	msedge.exe	96
PID 1952 wrote to memory of 4160	1952	msedge.exe	97
PID 1952 wrote to memory of 4836	1952	msedge.exe	96
PID 1952 wrote to memory of 4836	1952	msedge.exe	96
PID 1952 wrote to memory of 4160	1952	msedge.exe	97
PID 1952 wrote to memory of 4160	1952	msedge.exe	97
PID 1952 wrote to memory of 4768	1952	msedge.exe	99
PID 1952 wrote to memory of 2648	1952	msedge.exe	100
PID 1952 wrote to memory of 4768	1952	msedge.exe	99
PID 1952 wrote to memory of 2648	1952	msedge.exe	100
PID 1952 wrote to memory of 1944	1952	msedge.exe	102
PID 1952 wrote to memory of 5404	1952	msedge.exe	105
PID 1952 wrote to memory of 5404	1952	msedge.exe	105
PID 1952 wrote to memory of 5404	1952	msedge.exe	105
PID 1952 wrote to memory of 572	1952	msedge.exe	106
PID 1952 wrote to memory of 572	1952	msedge.exe	106
PID 1952 wrote to memory of 572	1952	msedge.exe	106
PID 1952 wrote to memory of 4896	1952	msedge.exe	107
PID 1952 wrote to memory of 4896	1952	msedge.exe	107
PID 1952 wrote to memory of 4896	1952	msedge.exe	107
PID 1952 wrote to memory of 1636	1952	msedge.exe	108
PID 1952 wrote to memory of 1636	1952	msedge.exe	108
PID 1952 wrote to memory of 1636	1952	msedge.exe	108
PID 1952 wrote to memory of 5964	1952	msedge.exe	109
PID 1952 wrote to memory of 5964	1952	msedge.exe	109
PID 1952 wrote to memory of 3204	1952	msedge.exe	110
PID 1952 wrote to memory of 3204	1952	msedge.exe	110
PID 1952 wrote to memory of 3204	1952	msedge.exe	110
PID 1952 wrote to memory of 2596	1952	msedge.exe	111
PID 1952 wrote to memory of 3244	1952	msedge.exe	112
PID 1952 wrote to memory of 3244	1952	msedge.exe	112
PID 1952 wrote to memory of 3244	1952	msedge.exe	112
PID 1952 wrote to memory of 4648	1952	msedge.exe	113
PID 1952 wrote to memory of 4648	1952	msedge.exe	113
PID 1952 wrote to memory of 4648	1952	msedge.exe	113
PID 1952 wrote to memory of 2856	1952	msedge.exe	114
PID 1952 wrote to memory of 2856	1952	msedge.exe	114
PID 1952 wrote to memory of 2856	1952	msedge.exe	114
PID 1952 wrote to memory of 5564	1952	msedge.exe	116
PID 1952 wrote to memory of 4784	1952	msedge.exe	117
PID 1952 wrote to memory of 1044	1952	msedge.exe	118
PID 1952 wrote to memory of 4100	1952	msedge.exe	120
PID 1952 wrote to memory of 2868	1952	msedge.exe	121
PID 1952 wrote to memory of 2868	1952	msedge.exe	121
PID 1952 wrote to memory of 2868	1952	msedge.exe	121
PID 1952 wrote to memory of 2932	1952	msedge.exe	124
PID 1952 wrote to memory of 2932	1952	msedge.exe	124
PID 1952 wrote to memory of 6068	1952	msedge.exe	127
PID 1952 wrote to memory of 6068	1952	msedge.exe	127
PID 1952 wrote to memory of 6068	1952	msedge.exe	127
PID 1952 wrote to memory of 5564	1952	msedge.exe	129

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://jen2dfd.itch.io/jens-gacha-20
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd4478c188,0x7ffd4478c194,0x7ffd4478c1a0
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,1033661351538626108,3090884928859600312,262144 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,3371336005759216795,2768247636551939495,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,6289116274766176017,5579837419471368297,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:13
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3612,i,11295819848341708351,558151547299094842,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3112,i,5274139887539787539,3600668502094209649,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4352,i,4705813135522268556,6496311105837050916,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,18419873159641475645,6530798551479047405,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,9301509347439636043,10239397656696573263,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,16518361414216928270,10925453335953228644,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,11873428556921852697,14451246722914017502,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,11873428556921852697,14451246722914017502,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6592,i,13415072408644682853,6693946607423558540,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3812,i,1270725801850309523,13294891960592474603,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6704,i,12615036875136330413,17800948282297064270,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4476,i,9883437745791117993,14002130438253399755,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,11107289543256964825,17003995609970628399,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6968,i,8082503632512383855,13705619092562773097,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7284,i,12356924218796690721,11795951540750269890,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:14
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6888,i,10064027478741949531,16774242279917019325,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4736,i,970863996596764749,1017491516783802716,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6832,i,1437762887802317120,11981112821866431706,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,17680120684624359152,3708183309426855569,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,7267117914325815442,17629003372010497156,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7484,i,13529839506305035579,5633079794065344913,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7836,i,1111120344993028839,8798926829005996625,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:14
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7836,i,1111120344993028839,8798926829005996625,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:14
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7892,i,16003974777391389335,9366684935367487627,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=7908 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,9567065929194323456,15410384258902521904,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7116,i,5980886186485641899,12379317150416131197,2097152 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,8816235696528357086,12551461222752640640,262144 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,4697654418776190773,14714778472820547926,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,13304677130373416662,5443333272446550056,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=812,i,2254131588696049397,9690338442766665183,524288 --field-trial-handle=2756,i,3833496485967901651,15052378408803250611,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:14
  2⤵
  PID:2136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3244

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1944

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Jen's Gacha v2.0\" -spe -an -ai#7zMap12400:94:7zEvent1270
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\index.html
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

117a6acc-573a-49b3-aa28-af18dde3f084.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\117a6acc-573a-49b3-aa28-af18dde3f084.tmp
Size 34KB
SHA256 61877a00732dd54308ebfada4c46c2915a9c4a416b7517a0417e2d92cb2f328c
MD5 31e1e0c7884933614ef57c5edce48135
SHA1 d4a7a91daafe2ba075ecd1b30a9edf01ae1b45f0
SHA512 983d73bcd964bbbb63607517686a598c473c4b54957070d7f1c95b4b0c79f7f527f61b0322a2b936854001afc2da53d2ae844eed5a11678f05f4b0d01cf581b0
SSDEEP 768:763QIcwOgWYtsG5fgGM1TnXMqOa8oaTZc+LF:763QdUfgt1TnxOX9Lx
TLSH
T1A1F2BF32A8669D734CF2D381F21A7292AEF182A7D9C81E98D9DD7D1D018B25E134BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

324f6dac-bebe-42d7-bc2e-6e568bb7f677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\324f6dac-bebe-42d7-bc2e-6e568bb7f677.tmp
Size 41KB
SHA256 4fd9ad5cd63cfab39f8ba3b926bd642c049e1e20bf51a83c8ba14f488cb1492b
MD5 f9d8a88f3d58c3580e69a5e6109df6c8
SHA1 704c15ac39c4d1852694f6b90caf2e4b63963511
SHA512 d52a4d3baf06719ce31e827a1ede7d42c7b8acaa11696cdcd050570547710d421e312480ab1b345d445a7b917806f74f2b564378c8ed9a792d926989322c1450
SSDEEP 768:FFI93QwgifI3wOgWYtO5fgGM1TnXMqOa8oaTZc+LF:U93BYfgt1TnxOX9Lx
TLSH
T1A7135AF258D78977D8AE8783A33D2D42ADBDC253F5841994B7DD680CCD461BFD20A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

506071a0-02b0-4b0f-8b0b-6d6c762520d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\506071a0-02b0-4b0f-8b0b-6d6c762520d7.tmp
Size 392B
SHA256 fbddcebd8bf8297eaa4115368baa9f89cef869b2b869c0392d95cace96ac064b
MD5 dbb2ce59d561642abf1e1bf267994b74
SHA1 922c356389fbabfbb9c7cb81394857ce364a924d
SHA512 378429ec422bb4d698ee887df407ae3708b014b9d37013064ccc101eb216389fc554047d04a871f9f185b6eef7f77f1da7f9a9fb1b67eccbb560dde0664682d1
TLSH
T13EE00243A10401EAD025037001C21B7032B2816002A70205061501701D153046E60E80
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

00ed7b97-3cb6-4d44-a980-ddd539897dd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\00ed7b97-3cb6-4d44-a980-ddd539897dd5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

745dd844-7ed4-4bd9-a520-db8214e9f717.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\745dd844-7ed4-4bd9-a520-db8214e9f717.tmp
Size 11KB
SHA256 4c8658dc2ff31afb65937358cae81d489858171a848d5f325ece1706117b570a
MD5 af566f770b19c977a90376dd03baa65f
SHA1 b70d798c1854822e73d5a32ac5767313e441ac2c
SHA512 7d1fd85822f67f9e56dbeed2fca1156e057ff8814f24e29caf1d2971cf8418d155d0db28fb62b4ffd172da2e7ca2f367a0bb94237d6c47375822b3a301128843
SSDEEP 192:sxRcR2bN/fkslq3zoA8pWlJ/g6+WN59i/YRYF43j9GlIgIJ:sxRcuN/fkslVe/5O/mEs
TLSH
T1B432E715AE38A97B8CCBD20DFB66BF53D6F9507260D11E08A6FC861C05E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e6a329a-e0e1-402d-8787-4873a15bf49a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e6a329a-e0e1-402d-8787-4873a15bf49a.tmp
Size 12KB
SHA256 ba6f593a97f6745af2a21935b1411b212477aeeff236f6ef62608fc0f1c2a1be
MD5 b60de0e10afe560bf61c078cc22d8e30
SHA1 4524b367666f4723e58d6d2d2a6e952bec64f747
SHA512 d944c770a69fa6f84765a9da82e36ff6703e44294caa49f76ad4cff28418fd277578900bb335804adaf2a9d761dd5ae564a5ea5171436d6a679568050b863032
SSDEEP 192:sxRYR2ON/fks+qbzoA8pZCrl7/g6+WN5c9ZYRtTw3j9GlIgDgJ:sxRYvN/fks+Bg9/5OZxEw
TLSH
T11B42C716AD78A97B9CCBD21DFB56BF53E6F9507260D11E08AAFC861C01E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 891f59ff48b83bfffdb6fe7183128de9f994c6a6e41a3dd03a6d4f56f4ba1b1e
MD5 e0a80eb5f06cf926af2965c93360f45b
SHA1 3a8d7544200575c49c974c9857a378873f5e4b25
SHA512 2efbd2773dc4ffce702d84119190bb724e49a87b73bd549da88ebcab261f71d536087873c66d460409feb1fd9989ea48e426578038811679bb67a2076296f134
TLSH
T1F2E026D406CAC26FB3196CC7117C6B8CC3813F5A93CC6A8E1B04C98A724F644E6C2AA4
MD5 SHA1 SHA512 TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 26KB
SHA256 070a127020fdbdd5f46b56ccc18c3d3b91551a8c27ab42860f1c48c9f6f93f9c
MD5 5de5522799d22f1f75b5fd183468b509
SHA1 5be47fe4366562c3de6c4624a849117126dd639f
SHA512 f651b6d35c23caf8de63329a8baf8941b0ba732cffbfbeaf8b51737fa321c7bbf46966953eafdc736cad59efd6d64815361cc3ae1f3917e034e59740787e5059
SSDEEP 768:C9jK0EkoOP70PlitxUPwN20VE5KSC0MDulTq8:C9jK0EkomxUPwAL5kupq8
TLSH
T169C2E08F52CC58DD3C52B856AC4E5E4C787493C09DA863842DBC7242ADE9887B529FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 43KB
SHA256 08b668ab17c2dde5424fbfacddfcca4e37e2471be0e1cfff477831d4122157b3
MD5 a524ec6f978e298c04ff7e6e618245df
SHA1 15e6b5ac570c11bd38953ed2c8d9c2306f062a2c
SHA512 416e1be619b0d64f694a2aa7bf945d89d0d812e7cd12e387efac6574d1c66596d3b075b786a2a399d3c03de326666bb7a196851d85c4b85aa609c85c920ddb42
SSDEEP 768:aD2YhIpzPQAP6aqZjY5tBJtKLNtyn1EnHHDpDm4cuK12p5ZNS/DeWTzR:aDTapzIAP6BuzJtIdptcuG0zNADb
TLSH
T1E5130219B14CB841D529773F326A76F1F61DD50AF9E6FE403A7103400BDADB260A68CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 37KB
SHA256 3c0d5d9f9e8915acba88888fec151bd7ded7079a623f6a9734aece4521c01ec4
MD5 b4ea307d18cfb705f057321275c2cc21
SHA1 dfb3b26593308dd618e484e3ffec7ed3d39443b2
SHA512 f440861116831c6174a16fe9d08375102776ef31982e9e6c7c8fdc668cc0c613975c8fac7fc229ef25520305e7b23384cde7d18f75aff7510ebc2955dfb8cff5
SSDEEP 768:xUkZQao9bYgNbATHwt+iV3EqrYcy3VL69nl5ZUkeco:xhqd9MvQt9VUDcnzo
TLSH
T1CF0302EA00B95AECA19E18F47219274DD0B2D905F9152CFC946490A26D47DBEFCC3726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 63KB
SHA256 0e554e791f58d3fd21d9a8eb173d831f11cdd950545936df99e6e4d4faab0f5c
MD5 6d2f677e07a6d8c2664a2c460452f09b
SHA1 86a944d329267a3b18aeaea88ad57e1423af2aa6
SHA512 44d87a7bbfbbcaa3c5c7e23f6c65b2fd7d44040588f6d4ef954f3f8cad9ea255579ef3d8c9cdb9cda69e6413ba022eb988a2ca0c4f814a3031dcc508b3d2dc2e
SSDEEP 1536:g7toVDszyNhfnqt1Bhza3Zee2Ra31GQZL:g+lszwu1Bhzaoe2RaPZL
TLSH
T17D53023BFB43569B7381C5D92A3F0A6AC56D096B29D3ECE0C1B6EA12FD091C410E5F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 98KB
SHA256 1e96f5b57dcd82cb38a46521670d13c1b6322b41be791e91282106023616cd87
MD5 405a6a2fb311cdd753c93c35cacc56b6
SHA1 3c224bdcc41380364acbc8a9a2e6acd3976a950f
SHA512 0d56bac701eb217b295957068e01d8b6aa158a972335e7f51ee274ea968855e828bd8c2187afb18c0ca3afb8ac9c07164f0be8e47c3fcf34fd6e6ee582b508fc
SSDEEP 1536:ynXeVAln4f140pqfLbLvaQ/f8UanmVfOas87KFOkqaGmReHBGwNWLtln6eg4mZ:+rn49pQrSQ/f8UanCLKGguGwqtlna4mZ
TLSH
T11AA3022FE5F18130F9131FA6424E0DFE754881E7A62DF6C5889D9817AE341A81B7CEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 77KB
SHA256 b86ee4a95fce8866d019b76ee027136fdd41b6f55dd4003d7bf9e07040c44094
MD5 378e5698e8e3475a77ec39a2e4b1caa6
SHA1 09f519f31afe251957fcc0b357d8d4534e6c5bd0
SHA512 08c8808a55c8cb0c137d6e329faddabe266b4acc58181c87aedcc1010e2d281df7e0dc41ee8fcbdaefc905f7f4d45db1d7294cb3812702e1be3199183d133552
SSDEEP 1536:nWm/FJPjcYdI8WBA/x8Mkhir9CYUBRDaJeFuQ6Fcn4+42SpX:n7jre8q+km9CYU7TYQvu2sX
TLSH
T1917312358406E13A10A501CF6247983ADB9A17E6831B73B78193C3CBED87536DA1BC9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 49KB
SHA256 e1b575e3693730b7d737c0d14a4ca39862c6f6cfcc6010168e025a142e813fcd
MD5 937425a2bb2b47aa9e9bccd82fbf95bb
SHA1 ed9dff6565d330afe20ebe00148d5f62713cd1a1
SHA512 5fc42a1b4edf3574bc8ac98801be721ff9f4b477ebe43851237916d62fadd522f45e33a60391a7ed0b380946d071160c8882748c7ecba9ab6a6b92605223bb86
SSDEEP 1536:m0oV8aUB4aMc0C55351/TiZzlQO33abIFs:S8arlcd55p1/GZRQO3oIW
TLSH
T1EE33F17F039EAA00C439A0ACACEE17D853BC3C35B0BB9891EB817711359C556D3E651E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 47KB
SHA256 58d489ccb51db3c935c2721a1e75284ad4b91ae3aa83d831ca37ea9f5e125bce
MD5 33a235724d379e844c7132dab8f48554
SHA1 2e31c0748f38b5b82822583c9a1bfd711a29aff4
SHA512 adb8c05e15cb596d275c5838e616b2868cb3b93f990069819de01c4e0eeb2741a8654bae4797edd20302d5f5f96aec289382dd68e29c7066d51cceb3230d1290
SSDEEP 768:p+92RtAEm3ZWB9ykjIylj1c2FLib18Ug8KVDfW34rxAvbDIvbFlQBz2ja:p+9yKE4ZWB9VnjVcat8KJc4tA+mt2ja
TLSH
T1B123F2A75DD7EDEFFD46A400C1E84FCEB4B10E15794118708D8ABBBB2A84436CD74691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 180KB
SHA256 d3312cab62e4910fd6d9c26cc454ca1f4bd3e9718ecb491d580547a33e80b858
MD5 c9ffa1fb718bba3fb03318f469a4c3b0
SHA1 cf4f71b12a05cd0127aa853c8f4ea24a3ab09aa6
SHA512 acf515115af4de6f2f0145ce478c9e70f4746542f66e211b7b0c9467c33662f18acb5be5cb36a89d77f5f4c0fcbba0560342a53ed96c0bd4357f5dc44677a88a
SSDEEP 3072:hzh71fGGsqVTQ3RkUeqlAygynrMXcAPG3NeMKCzsy4xyAIYRkkhlhEAyEP2KgF26:NXxk3DCqnMdG3NLK8sy4vIcREXEPs2a9
TLSH
T180041264BD27B7EEC9EB7D36EC593EE54E7E12B7CC9C440B172596660602FC0A080768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 222KB
SHA256 55c22625e0501735bc27d22cc48a4795055a65a34d10dd6da6a63a1f9b323ef5
MD5 f0608f77931da80eb863a428d263c77f
SHA1 3f17e4b9267ad590ad6957114b4d2f77fbc0efd9
SHA512 d879cc81328529af6b91bc40d2ee226489c4791063a5e90ceb6cfd51898388549fc9fdf4689d298147107767d3850763504e88ed0509e9672ff104711ece08ba
SSDEEP 6144:BLuFhZcJr+eKx46mmN6uuTwWK9YWQb2vdBYD:BLuKR+Lx4S6u02Fa
TLSH
T1652413A824B3CF5A61D70633B30CD4914B7A169B45C813AEF09FBA4E5DA0E760F52573
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 74KB
SHA256 70e4d628843c8aa128f28b04653deba8bc351b4b868d4d6e9ada67a3e2cfb400
MD5 5c1cb34c1dd3766326afedfbef9f4aab
SHA1 da51bf4e974c86eddbca6e3b7e07967b21a08367
SHA512 a42ca1fe34d594fa550c9f806022d3c3674a7f03ccf0359b1bf623883b807fad668fdb2a05e89e4335a98a88bb94a8f9b47423e22f2bc9d882899ed6ff26de5c
SSDEEP 1536:sl9xog1rbd61Os/oqNREWWFkSXI0SlxUbW8uIl/7SpLP/v9:s5Fp6l/RvWFkSu/d7Il8Pd
TLSH
T1DB730260BEEE2E1A9C337F0F5D94C9852562FE9B60CF16EC4FE44D98D15C1E682402A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 24KB
SHA256 f9074ac7ced776e010599f95c47c4f0306f31db29414d5dd9d8b80a844ce009d
MD5 bd9541be6af68e4dcdf4d9363ac06f26
SHA1 8b648d53599ec344fa9790f8ad2ed045194d5e1d
SHA512 7cbab524ae46f03f742908ba800e3e1bcfa992c10e0da189cd4fc81c22760ff2bc37acddafe54b87cec1142ce4196744c1104bcb7a0592ee6b2f5bbd2051a58e
SSDEEP 384:jWiPFVfdUiuti5OjtUfdTvsHUhVnp3tHjK3ieS6+NZoWZrM/q6Cb5hkNC1bMT:jWePlEZijskrDK336NZoerM6kNCVMT
TLSH
T126B2F10342AEC9B5EF4D02CB64947A97F00BAFD831EB1541545DAC9B1EB1232FE181E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 b3ebbc9ef9dea43977300938d49ae6dcc7768b7f88dfe8c1f131dbdc406ee980
MD5 f83af55ac3a39b42c2fd5c38e9736bcd
SHA1 0d38279dcfb942edcddf84d47a4d60f9f46f4315
SHA512 26e3f3ddd62af1445afd5481d2bb466c3624bdbb554ccf3b1a1b8f27d9aadcce0deb752eeb1aaa5a13720dbe46695e2c2a844979edc60a4c100c361f96f8752d
SSDEEP 96:5JOUbcjG4LCB2MK2KglAm1+SPeOZs4PGoJxKFz:HtbcjG4O28KgamU8juz
TLSH
T11E91C96D93E2629CFBAC107944C078477AF095F5458BAE3302A4E9B93CF73BD66802D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fee4fbaf967257684c33ad64305badc11849c1031ccc154ef3d58be1d1279ae7
MD5 095729536dbd903c1a7da4e1a1ac7bb8
SHA1 389e94da8223cac854fe5e62dccb185617349c17
SHA512 aaa357058c7087c46952b4107c45be3ade68241f5043818d5d65a11dadea670b554d6cbb685dbb46675793590e6cde92062d881e13f3da772bbc7c5b8eede090
TLSH
T1C461826DD362629DF7AC10BA88C03087767095F1848B3E3303A8EAF93CF637946802D4
MD5 SHA1 SHA512 TLSH

Submit Download

360a7f6e-3714-430d-9146-0b8cdf6e9e8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\360a7f6e-3714-430d-9146-0b8cdf6e9e8a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0e18b43b-631a-4331-b2e7-538583bc22bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e18b43b-631a-4331-b2e7-538583bc22bf.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

89836c31-3bd4-473b-a98d-b3ee52a969e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\89836c31-3bd4-473b-a98d-b3ee52a969e1.tmp
Size 8KB
SHA256 624b6c5d3f33277165bf4f73027b1f9bc9d63ae495f298140ba0be6ad321a9ce
MD5 1d4591877ef9ab0282371d2761355725
SHA1 f96dd3ff91c593e5fc13e1ecff9eb997f5d6397a
SHA512 cd6f1ced7a7822e25c537ca874b40c6ede8cec3d58488faf8f7df687b69a618c1217fe3adc7951b9053208290e257faead4593b5608f1357aa077b6190469361
SSDEEP 192:DHjSe4j8jtJjVjlj2pZJubvJjcRVZaatSxjyjeF+TjWjB6jpjqjtPMQjhdeePsdb:DHjSe4j8j7jVjlj2pHubvJjcRVZaatSA
TLSH
T1C1129DF3C3E8456DC91157F06A252F2FDE2E055A42A83D0689D8EF4AE3F14B1E38594E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db999b9e-0e1d-47bc-89e4-febefbc0b518.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\db999b9e-0e1d-47bc-89e4-febefbc0b518.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e2d0d3f2d976ca27eceead22a7fcb4903418c74c50bd0f2f8d2744a10d0b0878
MD5 ba2d9050e8c3573a5b51aa9ff087e005
SHA1 71ac0a9a92e76d759f14b380684ea556dad8092f
SHA512 6971b671078027a09211d7c0cb41e3dce83d57b56a51e7a7b565d950de7f009da761f156d2a0a92c28f7b963f73e781d30043a55a597360c17067289c0deed5e
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkFroqYq:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VB
TLSH
T16BB2DB2F644CCB7E5FC10AAD9C1AAF976D9802C797548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b7cd88e3-cf16-4810-9f76-254b2cc2a969.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7cd88e3-cf16-4810-9f76-254b2cc2a969.tmp
Size 12KB
SHA256 c98223bc3a1ab7759508467f4f98ad8ede8b4106ed13005899fa0b92598bf5f9
MD5 a7eb593490b5a34fa74dc933f2ff781b
SHA1 4f5f265bc2b9954a5266583cd4aaf8b743994b85
SHA512 60a934261692c9b72b68d4c50ac1ad1e293865dde83806d114c35bc5f21f45d27eb36ffebc9ce7fb170a2d3b2d5582944ff08a2b605b1c0c29178e42b4431916
SSDEEP 192:sxRYR2ON/fks/qvzoA8pZCrlj/g6+WN5tCXYREF43j9GlIgD6J:sxRYvN/fks/5gd/5KXGEC
TLSH
T13642D715AD38A97B9CCBD21DBB66BF53D6F94072A0D11E08BAFC861C05E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7fb2128-7d75-44fb-a82e-66b37bb91cbd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c7fb2128-7d75-44fb-a82e-66b37bb91cbd.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2194f349470b26c6e9dabef4a0301a8bb9716e47f4264696a388b2e58a5c0cab
MD5 eeaf2a7fe1e16a7243445788c938e71d
SHA1 bc82395c39d5bf868b9469f5fec547a3862d888a
SHA512 606a49ec5189e35527ae87e37c692f6bc55e9da1954bc9b4208b44e53ed663199d49069778c4b0cc3f034d716cd03a1feef87fa537b2f21ac2fd749ec9dc60ef
MD5 SHA1 SHA512

Submit Download

b327a5c8-8de8-421d-81d3-f53db59167bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b327a5c8-8de8-421d-81d3-f53db59167bc.tmp
Size 34KB
SHA256 d7a6157e9643162f8a7bde588f81a3610bd4bf90ff2f41c0e26b1525a699b644
MD5 1020d1437d4049d9c3f2d218df6be883
SHA1 1190b9e1899bc00eb8e2c05d2e95ba8db3fd67d0
SHA512 58acb8d7b6c537c250ae936052a42af6f83398cf8c3ff9014cd76d3ae50a2f217611e8655c95281c752262163171dc79fcfaf7dba4b6833ef1afdf9181fe5fa2
SSDEEP 768:nk3bPcwOgWYtsf5fgGM1TnXMqOa8oaTZc+LF:nk3bQRfgt1TnxOX9Lx
TLSH
T17EF2BF32A86A9D738CE2D381F21A7252BEF18297D9C81E98D9DD7D1D018B25E534FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b43cd36b-9cef-4982-8895-048e37f0d9a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b43cd36b-9cef-4982-8895-048e37f0d9a4.tmp
Size 38KB
SHA256 29ae0e949666e4d8656c2fef638536f0ff9f48b4807e2e3989b7f554be20a107
MD5 2cf3821d9afcd193ea6192714970b4e2
SHA1 319917131e65e641cc5107a1992bad8bab426b03
SHA512 aae61e074d1d6db571e614f5c2fc8ddbf02ee85011fdf7069fc4abe2317b8164fda208b158df8566774e53ddf34eaa74a745d99a8e80b498c852091383759a2d
SSDEEP 768:9/UxvxjgC+93j+wOgWYtsu5fgGM1TnXMqO/8AaP8:gZj3+93icfgt1TnxOkAG8
TLSH
T1A403C036A9596D739CF2D381721AA297AEF185A3C5C51EE49DEC3D0E018B25E430FC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf39b7e7-bd24-4b00-be83-47d13f684530.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bf39b7e7-bd24-4b00-be83-47d13f684530.tmp
Size 41KB
SHA256 2a0a03ab0d6cff652629d1ff63273a86fc02ebe755665efd670a39713df0d434
MD5 f3fa8195453c7e31a93d51d59172d962
SHA1 7958b0c02c486281f7d53c265543997bc4dd7ead
SHA512 5b8cfba8480169f4efcd203e8cf7c261015f4f39b90a19e48fa357354c2db347c67c85762da363a392fd0bc20a5dcaf52c149955b4f56fefd4c36361e21fae12
SSDEEP 768:FF993QwgiPcwOgWYtB5fgGM1TnXMqOa8oaTZc+LF:B93Bffgt1TnxOX9Lx
TLSH
T127135AF258D78977D8AE8783A33D2D42ADBDC297F4841994B7DD680CCD4A17FD20A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca318961-badf-49ad-8af0-9955a332a8d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca318961-badf-49ad-8af0-9955a332a8d9.tmp
Size 37KB
SHA256 8374024959cec2f7ba75cd96a937d88f7fc3abf929649e567009c2175f305641
MD5 0c699d92a2f35a86c42c1c7e13f27c01
SHA1 a3e8100c933b5b9cf374a7967a401ea2d598b449
SHA512 fbeb2820bdf6f17037fb696ae66459e367da34d0ecbfac4bb2d0809ba8a9a6de8a8d99f70ddc37b85744986b07ea97f5743ab5476292349ae6648510db685ab6
SSDEEP 768:5/UxvxjgC+93uBwOgBu5fgGM1TnXMqOeVAaP8:sZj3+93vcfgt1TnxOiAG8
TLSH
T1ED03C036AC556D779CF2D380B30AA3A6AEF145A3D5C51EA889EC3D0E028B35D530BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1517d1f-4f76-4e15-84e6-3529866615db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1517d1f-4f76-4e15-84e6-3529866615db.tmp
Size 34KB
SHA256 b3c761e4f3c01dc85a2a4585efc4bb180a561a1259892f966b9c392d1699d4c9
MD5 09963e7c121671f127311b0f7cad0301
SHA1 41ba081e794c30a8006fba25d809d2177695562f
SHA512 c4f6f732d3c3b2f8e480f291630bc25e96e7b707fde2378c58e0230250ae15030856ac4ef753c1c096b09488997d5d9507f9dc1921afb20302c8e8810c3ad218
SSDEEP 768:b63PacwOgWYtsf5fgGM1TnXMqOa8oaTZc+LF:b63PHRfgt1TnxOX9Lx
TLSH
T1E7F2BF32A8659D739CE2D381F21A7252BEF18297D9C81E98D9DD7D1D018B25E134BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbf8ebb1-3aa9-4216-aa10-182d771090dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbf8ebb1-3aa9-4216-aa10-182d771090dc.tmp
Size 392B
SHA256 892814c7739e70bfaaaac71fadd87b791eb4cbef347dd603fadbb777d0a9d9f9
MD5 f8a4346e631c5cf3619e277f9cf49a6c
SHA1 56fa0b823a585f74168d34b3a9fc38a80037ab67
SHA512 732630c9090002ff9a30247f8b56af6700fccecd15c1d048b3bc644c40972717f3c45ddabadcde6906f1293d17e047602d131d795dd7a1d4e0acba62e79e5121
TLSH
T1DFE00243A20401FFD039437001C72B7032F2C16003F70316061502702E5B3146F70FC1
MD5 SHA1 SHA512 TLSH

Submit Download

f2addfa2-d3e9-4af8-9838-59827bdccd30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f2addfa2-d3e9-4af8-9838-59827bdccd30.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

4b4c2814-3915-4b9e-bd07-12968056bdb4.tmp

Path C:\Users\Admin\Downloads\4b4c2814-3915-4b9e-bd07-12968056bdb4.tmp
Size 14KB
SHA256 251b09cd14beca38729cb89d574024a39f9693437873cc03b537e5557cebac81
MD5 2887cc295d4fc4b5605d0c9b3b44ae7e
SHA1 6205f00138085613c860ff07bf5a4968aa177084
SHA512 f2105d49155b0ab4944bc7eb1ecd54d7a973085226fc486eef256ac48c43a776033a608ba657a87a4b3bc3e412f90c61f228aa99dc6460c626c6f21872df7521
SSDEEP 384:QOTXF3G9tPe3SMUUgsx00gRruUZInTCAnQb0QM:QSFWjUSMRg2UR1ZI+AnQbw
TLSH
T1BF62D04EB944DEAC59279830F975274588F62D6F92DF042C1294C76B878CB47EF244C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jen's Gacha v2.0.zip.crdownload

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0.zip.crdownload
Size 3.2MB
SHA256 aecd6248b45e76b3f82115854fd66bb444ac45114507082834f5684e386706db
MD5 c49215c44472e5be29dc74b427beb3e0
SHA1 eb4502e9561681824d9ed9ebdb7b5c3088253a5a
SHA512 bfe4441a5575ccc9179391133fbe4077e861b7dafda48c5dc667d6347affcfa82431576206e04997bcd137e54488dafc7db31c3512d30f7a74eeee36177ba48f
SSDEEP 98304:O4xnd6YeXJeQ5sz22uWqz6mnaARZ59Rx2:OsuJjmzpRlmaQZe
TLSH
T1BFF533C5BB8575EDC818803D038A5643542D836C4B5CE74A0E115B579EBBE8CBBFAF22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

account.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\account.js
Size 9KB
SHA256 e3b6c2b507f385a552fb8955660a050f0a69a3cf246c003f43498c7d3327dc50
MD5 2b7d38b45a5a86f29aa39b24ebcfda40
SHA1 91cb9201e9f6a9c74885545d0c6d36f53fb8d79a
SHA512 b672f0a82566939ba0d502dda414685dedd666080a1f61e4f13788c41700d9b261fd0207dafe3f168086df1cf00b36f57bc74612b81a925a8ee313571cb2ee46
SSDEEP 192:BBcsIt+s2PvHEZZJlQKUZY6XQt/Rmk/+XwkctiKIC63K:BGTtmPvHeUZYtdR9ewkctXn
TLSH
T12C12A6343E40689A3F479EF73E37F0D0CB552E1EAAC0C887B508799AB982521E5D5B30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

collections.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\collections.js
Size 11KB
SHA256 fb90a2a7f8ddf038cc99d90676ed16c5c4370a1514025dc311acdffbc6b61af4
MD5 8128019b793f9892b7f7eb5567c1ed45
SHA1 9a0ba9c54713ef06c55f5f8e84c56021de29e8c8
SHA512 9ea632924f64d9e2f80dc50c595821cb39f0ee5d7a41858b71f2fe5edb6eeae6d3ab989cffa7a88469cd435e5f033408adf61c7fd44f57999e473d6a31e88d5f
SSDEEP 192:BBcOrdz3QwGz9VK1GHIiqA0CpfOkMqe3OHQoh3+U/Wxf6NhjfNgUKBsYIJqi4YjX:BGo9tGz9VuGHdl1e3+F4b5UpTf0hy3vD
TLSH
T1853252562F806883B61E8FEB3737B1D8C2511A4965448DEFE1047D20F9D23ABE5E0B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

daily-bonus.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\daily-bonus.js
Size 5KB
SHA256 ff14f9247beadbd42c379093b14f1017a720415057ed7006955f24f849aa182c
MD5 16691363267434683c4c2bcb2e6552bd
SHA1 67abdf83fdfd71da8ec079b56b77821d95407505
SHA512 ea19fe2ef914d02377e585dd0c620db94d8abe5313366f4538e5a6fd8fb58df1c3a58f9d73783bbe7d872fc5c1c2411274be79d4e3588de1b02d91d8f4ff7b5d
SSDEEP 96:BOec+U4tz4ZFSFemTi2I/0pFGswgdINPYEX6s2hu4TBIxbSg6WJpzWDVk2piHT:BBc+U4SZIe8i2HDGXI+PY86s2hfBIxb9
TLSH
T175B1519162D85E602207EFF77F39E8C4D4066C4E9AC00DDEA4217A58F953251FEE8B71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

game.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\game.js
Size 27KB
SHA256 445ab73708ba7989b7c41068af5f7cd48852c76c3504ca2e687fbd86c1775474
MD5 15f041109e2c609a5187001d9dc3a054
SHA1 9a163be13a2542bdca27e05e02b7621d791f4356
SHA512 109eb2a90a56bc7faf479cadc12488251cba3cf24355381ba7d7e2184f632c19fb03885430e33448263e0d1db6d1794ad061f3527c15406e6ca36053a08be23e
SSDEEP 768:IhYqQotoMoDo2o/Mgi63NVigFzk2c16IZh7dch8pC4DU7Xqv04pyzLZExjMUwDRP:Iha+NVigFA2cwIZhhcJhzLsafe9m
TLSH
T1A2C2831677806A5617166EFBA623A8D5E0051E1B3E5046EBE308BC1DF49F237E2F5B30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

help.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\help.js
Size 10KB
SHA256 f8ff5431485c5412d51a67c9468a3a714b6c56a3ba5582405aac82ee75ff8e70
MD5 4f2f18c5d15db6f53d62fdf20d9361a3
SHA1 ff2e0593747e7eb4b576b43b113596aee5e7fd09
SHA512 61b8005f61e759ef9e1074a9a1129d68bdf7214009d54c2f3f2c2be9afacd074903f78aee28ba4f106eea8044c03fe70b3e000bdfb98b09754f83b8a95a9fc5a
SSDEEP 192:BBc7yMz7Y0tRQV2ELZrkBxATj8WW3jRX+SpI4Ug0MCmhCuOyjJFy9LEc:BG7z6Fk4j3W3jN+SpI4UVMCmhTeec
TLSH
T14E2210943EC8535E362E6BA72323E0D8F5606E8FB64515ED810C7CDCB181973E9DAA31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

imageslogo.png

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\imageslogo.png
Size 100KB
SHA256 ae194cb0a718265566b7eeaec599701f27e2dbbe5e4a7e0a29813a5ec1ac4814
MD5 1468051cf543482fd862f49315c5582b
SHA1 4586b8772ccc2c6aa10a723179506d052c4ba149
SHA512 6f476205a73a266f28de6d6bae194e545c193840e0f9ccee52218344ffeb1e3976ca7bc22b791c187fbbe41f33c32d570ea1334641c1d23d72aa8d89583cbc90
SSDEEP 3072:6jo6OB56nyAiin24sw0IKjgQdpr6Tnsyh/0u:6S6p2ucrpWzsyCu
TLSH
T142A312084F14FEF5669B69D0913D46DA28E198DFCBEA605C67A09C848F6CC4FB5DA08C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

banner-jen.webp

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\img\banner-jen.webp
Size 11KB
SHA256 347d039f4f2769d4c2f9b1ed8cd8539da0f1bbc4f111b9a877ad2ae9230f06da
MD5 da00c3023fe6161389e699fe094391df
SHA1 f1c3c2a64b5c7cd4a04309e5b7d1f3b2c1258516
SHA512 cad5b851969499bb3f93656a4cfb05fbe3beea697fe52db5bfc9ac67a0b608d65809d1ce9a98d523254830c820f35facbdd5da853f7b803f46948b7e9bce57c2
SSDEEP 192:QZE74J9s3q7ndDAdvNLi7FvgU6yyMZEAquhHoXlWGqi4kiRfNJ12sfvB0:QOD3EAdvNLW1gsblquhIXAWihN/1vB0
TLSH
T15432BFB208922377FA45C7C1A1F818668BF83C3F09C5FD19496359E79D906AA3CB349C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\index.html
Size 47KB
SHA256 4ea498bc26d03740d462da9c5bbc5b5135a436cf7d1841dc1d34ac855a448631
MD5 f545fde4f116441a9c04308c0c313707
SHA1 eaa14f404259135ed847adfd8e530931d472b9f9
SHA512 3e98c603f33a1212388e83b1e14b09d2890f57d58ee5a929742ba38fb0bcbe27b7966cfe667bd1bc69edbf322953b6876d4e54b778fe835cc4db6a8883a09386
SSDEEP 768:ZAdGgXkQF6BHAHBHfo/qBHB8pIlinBH3aVXyAqvkUYm:YkQcB0BfBhbS3XAdm
TLSH
T1BB2309A2A692002DB657E0857BF3474F327CD103E4074AAC7BED2198CFCA9FD956A705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\manifest.json
Size 1KB
SHA256 4cd0f6acfdf6b10d502815e8c3de174498c457a0b68ac4440a2d46629683cc60
MD5 efb579c0679c9e5058dfc4eb4fe7f428
SHA1 94abcf58309ed621a5ce614286f63148006a08cc
SHA512 a3aca45c6ce347a0303a4ad231662dfff6990e2accefebdcc2a08196254380c5eb9d075e713902335a87e0f758fd4b84d653691bc13dc6eed46c7f57991941da
TLSH
T1FA21DE23F9222C66A2F865647CE51A82B1DC0A479C807C48BF8D404C6FEC06F21B9FCC
MD5 SHA1 SHA512 TLSH

Submit Download

page-fx.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\page-fx.js
Size 33KB
SHA256 42e5640f72e9648c62f2d8e3710fbc4e58131b4a36908b93ae856b921d9b8d46
MD5 a64d231080c0fcd382cca2390ea6c05c
SHA1 0dfc2c50bca66d43a422120ae44dd41c9b1a1b4c
SHA512 8c2635251bbe46f6ad042f87c84960fc105451a399baa1fe7fd48bbf3b392075046fbe527ddd0186e93feaf2a93a6d690c56cd63dda9ccfa892a3cb7be2ffc45
SSDEEP 768:Ix4q0dXwupmWLEcT/BkbiR5/CTdm9RVhtSoKeCh8kuJUGGShHSJtw1NJdGXnr4w+:ICAAQ8ED/GGMHvNf
TLSH
T11AF2554537C01456AB1BABBB3B22F8D9E1247D4E67D10A99F3047C29F646132E6F8B31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\profile.js
Size 19KB
SHA256 cbf8ff396e4480df7d067b9050ab8b24c36ad2124d19ccc274d121704cf5327e
MD5 bb63c41fb0cef558bcab5f08081e0e84
SHA1 84595ac0ebbe9f1249cd1f5bcd9acff5c48bba05
SHA512 d0ad28aa2b747eb8a4102ee20c222472a20dc63cce29902d487a0a8f5cc269e1970c92841a17c0b01fc5f690149677bd2e8cd566e19ff5237c909cdd42202829
SSDEEP 384:BGDssCCEoaSRjleCU1G/eeben1iYy+Ly4OXlRxms2JI7NXBObCZnTRbf3q0c:I4NCEoaqjleCqG/vCnwZ+Ly4OX/xms2R
TLSH
T1E09265806E504883330B67BF3E2E55D4E7151C4FBA0C499BD30579ECA99327AFAC5A72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progress-store.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\progress-store.js
Size 9KB
SHA256 0916eccaf605ee6ada7972098ab0fd9cacba23131ad54b854b639f90db3ab847
MD5 7fe48f05655702cf1eec61451172adab
SHA1 678021c79273f67fb552a6d5e2c9d692de25e408
SHA512 fa6b87c012c99f69a801884b9c55ed71aafe21375d65325688449a7438e96929ef0472c30a84c4299afc572f5abbfeb75b5baf4387dabcc1afb3c64aa7716889
SSDEEP 192:BBcm3Tvq+2ITT+VbQAk7QFZ8+0WvZP0ao5w:BGmjf2uTik7SZ7ZP0aSw
TLSH
T17C1243457E8128D133668BFF372796D0E9246C8E768009CFD208FE98FD55522DAC6BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

redeem.js

Path C:\Users\Admin\Downloads\Jen's Gacha v2.0\Jen's Gacha\redeem.js
Size 5KB
SHA256 569e1fda050925a9e50d90064064db55987f8dae983cd2fba88692a6bf0a64b9
MD5 50af5b350ac30c607c8a2c4d4f931232
SHA1 6bb6b10674134e134a4f1341a73cd7ffe1aa50e4
SHA512 44baf84ec80b3247e945084de04c17e60af0318cf7069fe4fe39ed5ca3e8748c4916d776d6c3bcd23421c4f08489e0b3d5966dcd8501b457da534851a6b3f1dd
SSDEEP 96:BOec1cSyuoRHR1uXbWhCLz6EntFy6Eto1FzYA5VVvkRTRyRXVX/Oufsf9fNM/35d:BBc1FxaHOLWhCCEntFy6EozYABvkRTRy
TLSH
T102C186553F005891774EDB837B2370E0D5421BCE5B56DCCBB608B74CE826AB1DACAA35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download