Overview

overview

8

Static

static

3

Setup.-.UniShade.zip

windows11-ltsc_2024-x64

8

Resubmissions

30/10/2026, 00:40

261030-a1b7kaf19w3

29/10/2026, 22:30

261029-2e7vwsft4y8

Analysis

  • user interaction
    yes
  • max time kernel
    203s
  • max time network
    210s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-es
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 22:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Setup.-.UniShade.zip
  • Size 116.1MB
  • Sample261029-2e7vwsft4y
  • SHA256 7ef3622266a02abc66c93f6b801a3376a0711a7619e1fce9a56a3c9e7cf1ad21
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceransomwarespywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 9 IoCs
    defense_evasion
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 35 IoCs
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 52 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Setup.-.UniShade.zip
    1⤵
      PID:4288
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2060
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap17186:90:7zEvent7048
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2224
      • C:\Users\Admin\Desktop\RobloxCrashHandler.exe
        "C:\Users\Admin\Desktop\RobloxCrashHandler.exe"
        1⤵
        • Executes dropped EXE
        PID:1144
      • C:\Users\Admin\Desktop\RobloxCrashHandler1.exe
        "C:\Users\Admin\Desktop\RobloxCrashHandler1.exe"
        1⤵
        • Executes dropped EXE
        PID:4192
      • C:\Users\Admin\Desktop\UniShade - Setup.exe
        "C:\Users\Admin\Desktop\UniShade - Setup.exe"
        1⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of SetWindowsHookEx
        PID:3936
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        1⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4304
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffb6ff0c188,0x7ffb6ff0c194,0x7ffb6ff0c1a0
          2⤵
            PID:5552
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2100,i,15716336858451356572,15333324962523357773,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:11
            2⤵
            • System Time Discovery
            PID:4664
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1920,i,10773346801546168503,3726631340482293732,262144 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
            2⤵
              PID:3724
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2680,i,12586651128515100546,3023572663227155137,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
              2⤵
                PID:4792
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,7479656875250402439,11722216429403358104,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
                2⤵
                  PID:5172
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,17797724053877432955,4676464371681617915,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:1
                  2⤵
                    PID:5160
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,14258713797597894252,15646598656221033631,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
                    2⤵
                      PID:4208
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,11767763339339835934,11437476414842994585,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:9
                      2⤵
                        PID:2500
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,4696756744881443572,14642059845089235451,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
                        2⤵
                          PID:4928
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=es --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,7966397467756757368,7272667870428545594,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
                          2⤵
                            PID:1460
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,6521013254363858969,15128430619428249027,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
                            2⤵
                              PID:2824
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,16546343717684354879,17848053536453537452,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
                              2⤵
                                PID:4416
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,8704775110099399802,7898812296539854655,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
                                2⤵
                                  PID:5960
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,8704775110099399802,7898812296539854655,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
                                  2⤵
                                    PID:2476
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,743503330616209408,14873386465453744210,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
                                    2⤵
                                      PID:1444
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,11020638282328997257,173419674459998856,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:14
                                      2⤵
                                        PID:1488
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,5001169973249642619,13915014929249621227,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:14
                                        2⤵
                                          PID:4656
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6780,i,2539348261302715341,3247881318545828391,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:1
                                          2⤵
                                            PID:4384
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5468,i,7038349757175697989,621706622208320697,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:1
                                            2⤵
                                              PID:6276
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6864,i,4103412339801048908,1045539868559735844,2097152 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
                                              2⤵
                                                PID:6712
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1404,i,1820707276504774495,6039565769935241475,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=1388 /prefetch:14
                                                2⤵
                                                  PID:3168
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,4976393201456898752,9860297272260778683,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=1276 /prefetch:14
                                                  2⤵
                                                    PID:5088
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1424,i,16913607906840582281,1346589515062809500,524288 --field-trial-handle=2328,i,6175598479913461543,8343983625392066214,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:14
                                                    2⤵
                                                      PID:4512
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                      2⤵
                                                      • Drops file in Windows directory
                                                      • Enumerates system info in registry
                                                      • Modifies registry class
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:6684
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x234,0x7ffb6ff0c188,0x7ffb6ff0c194,0x7ffb6ff0c1a0
                                                        3⤵
                                                          PID:5096
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1940,i,18372532339400783217,16049043422795408912,262144 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
                                                          3⤵
                                                            PID:1412
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,18084456604225078255,17458756101465440158,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:11
                                                            3⤵
                                                            • System Time Discovery
                                                            PID:4648
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,16950032271198674277,8693372653224941427,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:13
                                                            3⤵
                                                              PID:7040
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,13358392371546218790,2447259632097915658,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
                                                              3⤵
                                                                PID:4352
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,13358392371546218790,2447259632097915658,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:14
                                                                3⤵
                                                                  PID:3496
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,4261197862435320870,5707600501843042,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:14
                                                                  3⤵
                                                                    PID:4948
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,4515956237992507352,8579084845399750410,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
                                                                    3⤵
                                                                      PID:4820
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,2733361524056233033,11922448792897317135,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:14
                                                                      3⤵
                                                                        PID:1076
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,16235814175336467996,2660977856484819281,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
                                                                        3⤵
                                                                          PID:6172
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,11262602748391637941,13756735774452048288,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
                                                                          3⤵
                                                                            PID:5008
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4868,i,12015877693206096327,18090444755742631217,2097152 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
                                                                            3⤵
                                                                              PID:6188
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5624,i,9281171271825981867,2285414958788731145,2097152 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
                                                                              3⤵
                                                                                PID:4268
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,13168991004090354648,5991723421187077619,524288 --field-trial-handle=2456,i,13106993640473229846,1593985961137249292,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
                                                                                3⤵
                                                                                  PID:4744
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                              1⤵
                                                                                PID:6036
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                1⤵
                                                                                  PID:4200
                                                                                • C:\Windows\system32\svchost.exe
                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                  1⤵
                                                                                    PID:6108
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                    1⤵
                                                                                      PID:420
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                      1⤵
                                                                                      • Enumerates system info in registry
                                                                                      • Modifies registry class
                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                      • Suspicious use of SendNotifyMessage
                                                                                      • Suspicious use of WriteProcessMemory
                                                                                      PID:4292
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xa8,0x134,0x7ffb6f6bc728,0x7ffb6f6bc734,0x7ffb6f6bc740
                                                                                        2⤵
                                                                                          PID:3008
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1984,i,7933554182207328858,11942532492879609665,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
                                                                                          2⤵
                                                                                          • Downloads MZ/PE file
                                                                                          • System Time Discovery
                                                                                          PID:6364
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,650508186795122979,15584549085979642704,262144 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=1832 /prefetch:2
                                                                                          2⤵
                                                                                            PID:6356
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,16804633617424816575,5517214300208629225,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=1772 /prefetch:13
                                                                                            2⤵
                                                                                              PID:6588
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,1814851138669282921,9653722082771509887,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5168
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,4961499328146239712,7564726121820404061,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:4780
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4696,i,10193103923510370569,4458008739420108842,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:2536
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4904,i,12555886137979435241,2695278916013894524,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:4268
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5428,i,11022298805355550088,15318820272914720636,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:6800
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,10775305078308855045,4557669095013855443,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:2772
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5672,i,7282026391731638953,5988388396371781677,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1200
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5700,i,17377182909105943866,15862105367627099676,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6284
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5872,i,6389252483012356960,27381750431732502,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:2092
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,17624486620193333194,5815065739920681797,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
                                                                                                                2⤵
                                                                                                                  PID:1036
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5864,i,1904172549184607002,4298053439203470708,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:2400
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6320,i,6376551820698681276,17926259057281773522,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:2536
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5692,i,17455924747246057497,4423177775009159222,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:2984
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3576,i,2084335096354756051,5254996543831745720,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:6336
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,5619680299186911251,14280999997346563617,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:6296
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3512,i,17338722503848086923,10673478803933042181,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:3092
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6364,i,6117466215841551708,2035110323024255357,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:2444
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3632,i,11142148436155833402,6810380222554480993,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
                                                                                                                                2⤵
                                                                                                                                • Modifies registry class
                                                                                                                                PID:7036
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3576,i,3298758874890648984,13491105691190415226,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:12
                                                                                                                                2⤵
                                                                                                                                  PID:7120
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6792,i,6028210319963752459,16234476282205078655,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:3180
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6808,i,16801320809398658427,10488745752965746152,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:5212
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5492,i,12468475678546114985,10983942195039693512,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:4656
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5540,i,6481095923949114269,5986526134831895846,2097152 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:9
                                                                                                                                        2⤵
                                                                                                                                          PID:1440
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6496,i,10395938734313797038,7473974000370205568,524288 --field-trial-handle=1840,i,165665202102331151,14724315621110721575,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
                                                                                                                                          2⤵
                                                                                                                                            PID:6780
                                                                                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller-HWTYRKDJWR.exe
                                                                                                                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller-HWTYRKDJWR.exe"
                                                                                                                                            2⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            • Checks whether UAC is enabled
                                                                                                                                            • Drops file in Program Files directory
                                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                                            • Enumerates system info in registry
                                                                                                                                            • Modifies Internet Explorer settings
                                                                                                                                            • Modifies registry class
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:2536
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe" -personalizedToken HWTYRKDJWR --deeplink https://www.roblox.com/download --webBtid 1793313249636001 --downloadSource installer -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 2536
                                                                                                                                              3⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              PID:6020
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe" -personalizedToken HWTYRKDJWR --deeplink https://www.roblox.com/download --webBtid 1793313249636001 --downloadSource installer -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 2536
                                                                                                                                              3⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:1660
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                          1⤵
                                                                                                                                            PID:6500
                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                            1⤵
                                                                                                                                              PID:7108
                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                              C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                              1⤵
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:7052
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe"
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              PID:1988
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe"
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:5532
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe"
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              PID:6884
                                                                                                                                            • C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe
                                                                                                                                              "C:\Program Files\Roblox\Versions\version-5a21b87bbc2641cf\RobloxPlayerBeta.exe"
                                                                                                                                              1⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:6708

                                                                                                                                            Network

                                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                                  Replay Monitor

                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                  Downloads

                                                                                                                                                  RobloxStudioInstaller.exe
                                                                                                                                                  • Path C:\Program Files\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                                                                                  • Size 13.1MB
                                                                                                                                                  • SHA256 f52514b1b91376ff9ac66f49d16f7cbda4096d44fcfe3dbb662a2b8547dac9b8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  6fd7ee92-ec21-411c-af46-66a6658ebf51.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6fd7ee92-ec21-411c-af46-66a6658ebf51.tmp
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 6813677ed8b537c763660c85250d7e8d840899692235747d02ed9cf34cf6a217
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70e6d047-d6e4-4a04-ae28-4c43277ad322.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\70e6d047-d6e4-4a04-ae28-4c43277ad322.tmp
                                                                                                                                                  • Size 144KB
                                                                                                                                                  • SHA256 ce3f6a793cf41112a677e856cacfade142baa444f0d57bfa793dd2ddb942f604
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 40B
                                                                                                                                                  • SHA256 95156e85b10bb169669ac3a8fd229cfc0fca67c83c351ee5fb76ca8d89d5e1be
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  156f3399-c80f-4908-b4a1-168ebdfe5558.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\156f3399-c80f-4908-b4a1-168ebdfe5558.tmp
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 d0ca48bf5c2cc539046f7a12f4fb9df3d4c47106180127adcb241bcf7594d64a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 6ff1fac66de84a4b871553bff8367261c9ca16dac5fe6f1f6436a0d4f611d041
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                  • Size 593B
                                                                                                                                                  • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  craw_background.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                  • Size 531KB
                                                                                                                                                  • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  CURRENT
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
                                                                                                                                                  • Size 16B
                                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  MANIFEST-000001
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000001
                                                                                                                                                  • Size 41B
                                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  e59ea63b-65a7-4cc5-a189-48f933fa2525.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e59ea63b-65a7-4cc5-a189-48f933fa2525.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 193d4919eb07b1a4a9d81a6fe32304c486c85acba5306e246ed32cb0c8005af9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f6b5165c-71bd-4ae4-8d06-2bb5a2a70890.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f6b5165c-71bd-4ae4-8d06-2bb5a2a70890.tmp
                                                                                                                                                  • Size 7KB
                                                                                                                                                  • SHA256 b70e2d6782183a0a017079e69ce64931698d90f264dfc46d261b7188f3efaf77
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                  • Size 96B
                                                                                                                                                  • SHA256 5a80bf889d35b5c09b2220d2f5ff1b0ca0e56fd45315ef1330d83f9ef274bfe8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                                                                                  • Size 72B
                                                                                                                                                  • SHA256 8ece0c782d36025931e0a57de42f3e7ef47b4c2fb7975982f5845fb271344a43
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 b2ac035410f6c18a05d0f096eec416debc7d297091783a7c7c2b7d450e364a8e
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  data_0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_0
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_2
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_2
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_3
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_3
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Shared Dictionary\cache\index
                                                                                                                                                  • Size 24B
                                                                                                                                                  • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  b4a29c97-1a36-4d40-b613-6413ee64bed1.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b4a29c97-1a36-4d40-b613-6413ee64bed1.tmp
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 a78a173598168e45b542fc4becedea3a2ee88799fce4cd9e10f6491d4ef2aa00
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f5d5f0bf-c3d8-43f4-8459-2c15b8990830.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f5d5f0bf-c3d8-43f4-8459-2c15b8990830.tmp
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 0b6e03933dc6974e8c5bc3d6d136563cda8eafbe7d5d2f72c062752d2efcf1fb
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f1fe64e2-9166-4cf3-8c17-c1ea7f9dca21.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f1fe64e2-9166-4cf3-8c17-c1ea7f9dca21.tmp
                                                                                                                                                  • Size 144KB
                                                                                                                                                  • SHA256 ac444782c2f8d35564ac348ac6a755543d04e942a4eb1f750a77fc116f64506e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  04bccb91-c68d-41ec-8810-a0b89313eef0.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04bccb91-c68d-41ec-8810-a0b89313eef0.tmp
                                                                                                                                                  • Size 37KB
                                                                                                                                                  • SHA256 21c8e39f2ab0da98280778b6d30be1dbfdd542c17e296147abb788ae25ee8f99
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  13ada8a4-fd6b-40c6-96d7-36f499ffe3e1.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13ada8a4-fd6b-40c6-96d7-36f499ffe3e1.tmp
                                                                                                                                                  • Size 34KB
                                                                                                                                                  • SHA256 65d25fd2878b021d71da62b5a0ee769217aaa5ba99f7ce323391cc538b29ffe5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  1d765ff7-a4b2-4e40-afcb-2eba2cf4ef0b.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d765ff7-a4b2-4e40-afcb-2eba2cf4ef0b.tmp
                                                                                                                                                  • Size 34KB
                                                                                                                                                  • SHA256 d920fd16aed0718b084831c756276f016837c09030edb87b787f3ea3b62b0f65
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  71e904b4-01a7-46b2-9e8b-f91d3a33b538.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\71e904b4-01a7-46b2-9e8b-f91d3a33b538.tmp
                                                                                                                                                  • Size 37KB
                                                                                                                                                  • SHA256 358cd6768e17238d8481b530394098039ecf138ad62104890ce9a1498f70b104
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 280B
                                                                                                                                                  • SHA256 4d2a720868ba02e97db5db5bd7193d65017bc29ed87a044bf1887a8f6b700489
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 280B
                                                                                                                                                  • SHA256 5aa00bab55e48fdb036bee36fe6bec4dc513337fea37f6744b4f063f18e82c9a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 280B
                                                                                                                                                  • SHA256 44ca7d0545d9e1a750cea05e052a08c4c8e807f12403223b67ba2af960c3db4a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 280B
                                                                                                                                                  • SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                  • Size 280B
                                                                                                                                                  • SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  1603c550-776e-4f0a-8e37-82bdc2b1173c.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1603c550-776e-4f0a-8e37-82bdc2b1173c.tmp
                                                                                                                                                  • Size 18KB
                                                                                                                                                  • SHA256 89866570aaa7060af6d4ec22ee0c655118573e258bf2c6fb8380e286d3d58f2c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  406672da-6d84-492a-b12c-ddd1f774eaa8.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\406672da-6d84-492a-b12c-ddd1f774eaa8.tmp
                                                                                                                                                  • Size 16KB
                                                                                                                                                  • SHA256 9fecf594a4a9c117eb48769c3e48edc1400ad79af7b38d49d3d7cdfb5e585495
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  4b075771-98de-4b88-81ed-04ed1b6d13df.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b075771-98de-4b88-81ed-04ed1b6d13df.tmp
                                                                                                                                                  • Size 414B
                                                                                                                                                  • SHA256 b742e0d587e8bf0f0f8df5165a1f3822de1345b69b12ab0f288ab93e3a5e8eaa
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  77485bc6-fb96-4082-9726-7185932c4fb5.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77485bc6-fb96-4082-9726-7185932c4fb5.tmp
                                                                                                                                                  • Size 29KB
                                                                                                                                                  • SHA256 a5254a80ff537fc9822c2bea13788c68b94cba9559dfc27f6cac4b3b51b187e1
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  7a232161-e012-4cd9-92b5-3f2923b2df2c.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7a232161-e012-4cd9-92b5-3f2923b2df2c.tmp
                                                                                                                                                  • Size 14KB
                                                                                                                                                  • SHA256 7f2409f18e762c673c84134756b95db88db6ebd14b21be0f7f77511609a6b093
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  823ed163-fe96-4315-a9bf-06f979af6ebc.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\823ed163-fe96-4315-a9bf-06f979af6ebc.tmp
                                                                                                                                                  • Size 16KB
                                                                                                                                                  • SHA256 a592b263ca94acc4c51fb2763d1ca61a1cb7d90eef4989e37e3b67af198fe09b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  8dcf18fd-5774-4d3d-a164-149fcaba6d48.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8dcf18fd-5774-4d3d-a164-149fcaba6d48.tmp
                                                                                                                                                  • Size 70KB
                                                                                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  BookmarkMergedSurfaceOrdering
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                  • Size 6B
                                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  data_0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
                                                                                                                                                  • Size 44KB
                                                                                                                                                  • SHA256 95673eba07cafc9989e1be31ca8907a76836f4af6c922e415fa33819e4e7b6ce
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000062
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                                                                                                  • Size 120KB
                                                                                                                                                  • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000064
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                                                                                                                  • Size 31KB
                                                                                                                                                  • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000065
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                                                                  • Size 102KB
                                                                                                                                                  • SHA256 68507cd63ba31b475df24e72126efa6f876ed08070edf9bc061370fa6d6236a1
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000066
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                                                                                                  • Size 247KB
                                                                                                                                                  • SHA256 eecc1b2e5947088931173383756213fb66562e9a28686d3fcda374fa59a212f8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_00006a
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                                                                  • Size 20KB
                                                                                                                                                  • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_00006c
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                                                                                                                                  • Size 35KB
                                                                                                                                                  • SHA256 c6715baea35a16441f09c1237ccef5858ea1b43b223683a40f40b69ee4f9e523
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_00007e
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                                  • Size 39KB
                                                                                                                                                  • SHA256 9d61169f0a322b68027db34b1d1c0fb29bd23cd39f77d168d880697fe8c118d5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000099
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                                                                  • Size 347KB
                                                                                                                                                  • SHA256 55a802124f008d2b631ff8977054930aad825cb251d3b036549216bb526f8489
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_00009b
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                                                                                                  • Size 54KB
                                                                                                                                                  • SHA256 c05bb73dfe2dc2835d1ea560540b7da463fb129937bba9b4750ff1c86a94afd9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                  • Size 5KB
                                                                                                                                                  • SHA256 88c74b9efcd7e0c825087efa89691ba2d4970b3f2fffc516488a05503407153f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                  • Size 6KB
                                                                                                                                                  • SHA256 a22c3c59a85f04ab8793540280c3aab9451c6583f54284a017f0d4991ccd92f8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 c5a351e1ad7f5a2e6e9980cfb0dfa2b63a3cc18e7b1ee97c49f1bb813683fc0a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  e0234b67-e464-41c3-8a08-dd6f0978c256.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e0234b67-e464-41c3-8a08-dd6f0978c256.tmp
                                                                                                                                                  • Size 2B
                                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
                                                                                                                                                  • Size 399B
                                                                                                                                                  • SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
                                                                                                                                                  • Size 319B
                                                                                                                                                  • SHA256 edd3d7bae2883779bf250994f16983bf73262b016e8c1a2292e7b8ea16ce8a88
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dasherSettingSchema.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                                                                  • Size 854B
                                                                                                                                                  • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  computed_hashes.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
                                                                                                                                                  • Size 429B
                                                                                                                                                  • SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  verified_contents.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  content_new.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Favicons
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
                                                                                                                                                  • Size 20KB
                                                                                                                                                  • SHA256 c493efb42ad0e55cd9fd891411cf4527de00affa671d54e852559defca2c252a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  History
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
                                                                                                                                                  • Size 224KB
                                                                                                                                                  • SHA256 a664303033d424dcfdb2b6d5d913199cca0d90bd6c866ef43529926726f95437
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
                                                                                                                                                  • Size 5KB
                                                                                                                                                  • SHA256 7767e191245470735d0a449d53623db13acfe65e986cb1924608d9b34346db40
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
                                                                                                                                                  • Size 334B
                                                                                                                                                  • SHA256 0513bc04a69910ce73ecfb055bebd2009b1b10b998aedeb3a4f539185a1d9c6e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  18d87462-8273-4673-b324-6c8f133fdbeb.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\18d87462-8273-4673-b324-6c8f133fdbeb.tmp
                                                                                                                                                  • Size 2B
                                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  Cookies
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                                                                                                                                                  • Size 28KB
                                                                                                                                                  • SHA256 f2c63b56913aa47cc899bd468875d11d42ae3607f65c36b97dc160123fedb77d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Sdch Dictionaries
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                  • Size 40B
                                                                                                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  dd7db694-6afe-4fe8-a292-7d912e6feec9.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dd7db694-6afe-4fe8-a292-7d912e6feec9.tmp
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 df24919af5bb44a7bda6951e822a50b351e7b29a8c44dcebf5d8c9bb25cb6fcc
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1b9c3b9d-ac34-4eda-b131-dcb6632a2bb0\index-dir\temp-index
                                                                                                                                                  • Size 72B
                                                                                                                                                  • SHA256 91e7367d1dae6737e980e67e984b62524bc095d51b0e0046e3bf7329f8c7a11a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1b9c3b9d-ac34-4eda-b131-dcb6632a2bb0\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 5b0aae4e6cb99691ec64c83b8a5866ed874016d699b885ee4c74e8cdb3b11516
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\temp-index
                                                                                                                                                  • Size 456B
                                                                                                                                                  • SHA256 1ed4f794d6912a202618da8ea27d433245557f0f85c448680c39a11e6bb8fbaf
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\the-real-index
                                                                                                                                                  • Size 456B
                                                                                                                                                  • SHA256 20bb1866784b09a7d8f7809397a85b1039f64d680d0dd59988e1565bb6dcf8cd
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f0126aac-8f46-4264-a92f-ffaf2c7a6386\index-dir\temp-index
                                                                                                                                                  • Size 72B
                                                                                                                                                  • SHA256 a079cca9066fb304016fc17d5a15fe78a4160f56ddafc67ea25fc55cadf359e5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f0126aac-8f46-4264-a92f-ffaf2c7a6386\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 42eefc876af8b68f6a842398148c0987d4350b47fac0a5783eeaeeaf1076cc53
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f1adc34b-5535-430e-a53d-2a5775908794\index-dir\temp-index
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 9dc8ff5a6472c7543500bd79b7346c0d73790c6affdf894ce0c485168765946b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f1adc34b-5535-430e-a53d-2a5775908794\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 d15714c28da973894960c4f54b8f95c21e2d7ba7d890a4c7b1ce3f404f853383
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 161B
                                                                                                                                                  • SHA256 dd975d205f1ddc4d807fdb3236f6835bac80dc467320f1b49d813962d1b58155
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 281B
                                                                                                                                                  • SHA256 096ce517df199cf0368877d55a98120e7398dd4aa49e9f4fae12f335ed3ad4b3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 399B
                                                                                                                                                  • SHA256 f1bd2cc9d54b6f441528ad2b71f05f4797423034d17502f31f887bac32c1bd2b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 394B
                                                                                                                                                  • SHA256 9eb0cea97531d5035ca901fbaeeda6044d6c58797b6ef0b594f19c230ec93e6c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 386B
                                                                                                                                                  • SHA256 f39974fae0bbba5501b4a3527bddb3aca6b43286b82c1522123ddec1e4000cb7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 488B
                                                                                                                                                  • SHA256 2b030178828ebd6ad990404ff05369f28d37d5fd3f11fa76d95c3e6608f6fda5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index.txt.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                  • Size 259B
                                                                                                                                                  • SHA256 adc7080d8951f51b13059a34c2e5ba1f68c4c516b4b0b723b7c25120f1e8cdca
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
                                                                                                                                                  • Size 6KB
                                                                                                                                                  • SHA256 d8902880c06aeff0f9b33a90229e418fbe5da97fd5cc57f813d4576aeaeffb2a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                                                                                                  • Size 335B
                                                                                                                                                  • SHA256 fb87ec47b3f41508c7f25eabb7e59d41b17647b70681191b58be1c6115bab080
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temp-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                  • Size 96B
                                                                                                                                                  • SHA256 6be99f52d207e4bd3520814da7f6fe5a22682702bcf20d19fd1b030cb6855ed2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 941c15e45ebce14ee7cfa67bd2ab5b1d23350c10ad96df98243d3d53b2c43868
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
                                                                                                                                                  • Size 172B
                                                                                                                                                  • SHA256 5cace5060729dbb1edc79a4f2f1bff9a56f97d59ca6f479c5ac376cf54c7f8a9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                                                                                                  • Size 347B
                                                                                                                                                  • SHA256 6e06b60184c4b42e51ad53a5b84c10ee44bf2cc400b7400b656adf69ff2f420c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
                                                                                                                                                  • Size 175B
                                                                                                                                                  • SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                                                                                                  • Size 326B
                                                                                                                                                  • SHA256 c3cb673eb07bb6e030534a79dae2a68edd111b69e2a30a34a4c9d41593555f5f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  sync_diagnostic.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 a271a884114646b13d19b1a6f239fcae1e89288d89e950ee292683b526c0d65c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Web Data
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
                                                                                                                                                  • Size 256KB
                                                                                                                                                  • SHA256 3d4ea387f3ede9686a09cfe073d2289e8ee1efdd246210ca641ca5e014810ff9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  e3cb519e-30d8-4d97-b72a-443b9d83c0db.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3cb519e-30d8-4d97-b72a-443b9d83c0db.tmp
                                                                                                                                                  • Size 17KB
                                                                                                                                                  • SHA256 287a7a1c90938d6e1e532c30d88bfe7ba305ca8bf48a0babc750c161e6a9ebf7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 afea3e23ecdfb52e1ded29d2f38f14f03c56d9603d453b9b3e6e02b1e0b92ddf
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                                                                                                                                                  • Size 319B
                                                                                                                                                  • SHA256 ea6866b03bebd3c78b6afd7591ad23b0310f4f4760583d85ca6c4a4142c4e55f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  000003.log
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 163f6be5259343ecff7c62fec514f14b4d746c59144f62a71fb8763d06fda28f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LOG
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                                                                                                  • Size 337B
                                                                                                                                                  • SHA256 d33a3f8516be75e34fde3bffdeb68459bb3c310b4dfe74f85805d65a69b2523d
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  OperationConfig
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  d8f01ded-0cfc-4d99-a437-d460fa6c7204.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d8f01ded-0cfc-4d99-a437-d460fa6c7204.tmp
                                                                                                                                                  • Size 22KB
                                                                                                                                                  • SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  data_1
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
                                                                                                                                                  • Size 264KB
                                                                                                                                                  • SHA256 99d909cfde69394f8a204c3d099a5719028867f9f6f32626da10f9bae59b14fa
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Last Version
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                                                                                                  • Size 14B
                                                                                                                                                  • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  campaign_history
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
                                                                                                                                                  • Size 20KB
                                                                                                                                                  • SHA256 280498f868bc2d369e49462f97f134881b9e80267c23e4e12ccb98d5464ca408
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  RevisitationBloomfilter
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                  • Size 392B
                                                                                                                                                  • SHA256 7f71b28e512b31fb01d112281c8088fc89331aebaa077bb7d200156e7a3c11b5
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  data_1
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                                                                                  • Size 264KB
                                                                                                                                                  • SHA256 f126575acc2401670f696268bad254562c88b09898385f83c4d11aafbcf42623
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Variations
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                                                                                                  • Size 86B
                                                                                                                                                  • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  a543d83b-a608-49d1-b9e8-767781da8df0.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a543d83b-a608-49d1-b9e8-767781da8df0.tmp
                                                                                                                                                  • Size 392B
                                                                                                                                                  • SHA256 d7edec11d2ab822de6d0f802e58795b77da060c2a1fb534d9d98bee2b6c6a8c4
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  a61a6581-1bcd-4365-97c1-38ff01cc4d48.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a61a6581-1bcd-4365-97c1-38ff01cc4d48.tmp
                                                                                                                                                  • Size 38KB
                                                                                                                                                  • SHA256 c2c57d053590755f4a7f8b62383127968a661b3049572203d1d25e280b620402
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  c71a1c5d-749b-4e04-b270-938969394907.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c71a1c5d-749b-4e04-b270-938969394907.tmp
                                                                                                                                                  • Size 34KB
                                                                                                                                                  • SHA256 0a543c9b22c3b9182c5c08be3fe5d9ab12b55947b071500661ab9bbbb6912320
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  c7719484-5093-4dcb-997f-26f974f0083a.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c7719484-5093-4dcb-997f-26f974f0083a.tmp
                                                                                                                                                  • Size 40KB
                                                                                                                                                  • SHA256 33dbb373082fb6ca7af4c4f645b2c5309805cd6db78ec1e17b316e4ae86f0c77
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ccb778d2-9545-4c23-88d1-bbff6a812a90.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ccb778d2-9545-4c23-88d1-bbff6a812a90.tmp
                                                                                                                                                  • Size 66KB
                                                                                                                                                  • SHA256 e84a705288dcb203cf8e8cb3283ebe541aeb384ad4a8eb5eceabb0a52fd702e9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  de66f133-922d-4354-89ec-4158c686af29.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\de66f133-922d-4354-89ec-4158c686af29.tmp
                                                                                                                                                  • Size 132B
                                                                                                                                                  • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                  • Size 158KB
                                                                                                                                                  • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  894ccb86-116c-4432-9d7e-4fcdb4513dba.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\894ccb86-116c-4432-9d7e-4fcdb4513dba.tmp
                                                                                                                                                  • Size 13B
                                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  dfbdb5af-ef3f-4611-8a35-e64cb7cc751e.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dfbdb5af-ef3f-4611-8a35-e64cb7cc751e.tmp
                                                                                                                                                  • Size 132B
                                                                                                                                                  • SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  fe41e5aa-2301-400a-9010-f3124b78ea1f.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fe41e5aa-2301-400a-9010-f3124b78ea1f.tmp
                                                                                                                                                  • Size 39KB
                                                                                                                                                  • SHA256 099b0de86609eec86d491d32a50dca5c80dd8c64479033b11e6379904f212ffc
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  4016f2d8-71a4-43b9-8ef7-d74f8a38a315.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\4016f2d8-71a4-43b9-8ef7-d74f8a38a315.tmp
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  72297a88-af81-48e6-90d7-058b2a95903d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\72297a88-af81-48e6-90d7-058b2a95903d.tmp
                                                                                                                                                  • Size 1B
                                                                                                                                                  • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  RBX2F3CDD8BC6744658A52A8A804A454938
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX2F3CDD8BC6744658A52A8A804A454938
                                                                                                                                                  • Size 64B
                                                                                                                                                  • SHA256 cad1c2fe88efe180193e8ef8814b418a459ce7fb3281c4205f19c7b118a53fdf
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  c2d64e06-dedb-4579-ab2c-f107f0724c17.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\c2d64e06-dedb-4579-ab2c-f107f0724c17.tmp
                                                                                                                                                  • Size 242KB
                                                                                                                                                  • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4292_643452169\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                  • Size 450B
                                                                                                                                                  • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  content.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4304_1078045273\CRX_INSTALL\content.js
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4304_1510256461\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                                  • Size 711B
                                                                                                                                                  • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  RobloxCrashHandler.exe
                                                                                                                                                  • Path C:\Users\Admin\Desktop\RobloxCrashHandler.exe
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 7c99b7fa27a246bca904ae27f9fe586f1a7f4256aa335f67ae813b43354e697e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  RobloxCrashHandler1.exe
                                                                                                                                                  • Path C:\Users\Admin\Desktop\RobloxCrashHandler1.exe
                                                                                                                                                  • Size 12.2MB
                                                                                                                                                  • SHA256 adb3eb289d5f4362b43f37a536571c8ef0a150aaa316b2e9697ec77e4f419453
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  11b90133-bbe5-41c8-8ad5-ce20283953b4.tmp
                                                                                                                                                  • Path C:\Users\Admin\Downloads\11b90133-bbe5-41c8-8ad5-ce20283953b4.tmp
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 2ac41111c678a2bc6273d03b3e41d34d15883d27f986327c5c3547355a2e4128
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Sin confirmar 844963.crdownload
                                                                                                                                                  • Path C:\Users\Admin\Downloads\Sin confirmar 844963.crdownload
                                                                                                                                                  • Size 13.2MB
                                                                                                                                                  • SHA256 19c68344c5e95d70bb59475a696838b50d94216ccdbb6c27c6c29e4d729c0171
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Sin confirmar 844963.crdownload
                                                                                                                                                  • Path C:\Users\Admin\Downloads\Sin confirmar 844963.crdownload
                                                                                                                                                  • Size 13.2MB
                                                                                                                                                  • SHA256 19c68344c5e95d70bb59475a696838b50d94216ccdbb6c27c6c29e4d729c0171
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  manifest.json
                                                                                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6684_1887835453\manifest.json
                                                                                                                                                  • Size 43B
                                                                                                                                                  • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download