b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72

Resubmissions

30/10/2026, 04:11

261030-er95fswt4l7

30/10/2026, 03:58

261030-ejgsyaav5k7

Analysis

user interaction
yes
max time kernel
448s
max time network
451s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/10/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
saiko.exe
Size 12.3MB
Sample261030-ejgsyaav5k
SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
MD5 a2347e98c331e577f3abcc463c3ac68b
SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
TLSH
T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
1944	luau-lsp.exe
4752	RobloxPlayerBeta.exe
3396	RobloxCrashHandler.exe
5276	RobloxPlayerBeta.exe
3772	RobloxCrashHandler.exe

Loads dropped DLL 6 IoCs

pid	Process
4012	saiko.exe
5372	msedge.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
5276	RobloxPlayerBeta.exe
5276	RobloxPlayerBeta.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000\Software\Microsoft\Windows\CurrentVersion\Run\RobloxPlayerBeta = "\"C:\\Users\\Admin\\AppData\\Local\\Saiko\\Roblox\\RobloxPlayerBeta.exe\" --launch-to-tray"	RobloxPlayerBeta.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	saiko.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
3220	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 64 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1153964120\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_896467308\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_951990409\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_926037411\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_357006556\_platform_specific\win_x64\widevinecdm.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_896467308\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_613159546\kp_pinslist.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_613159546\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_236_260338802\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_111_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1153964120\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_680831045\_locales\cs\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RobloxPlayerBeta.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3728	msedge.exe
5300	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedgewebview2.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Enumerates system info in registry 2 TTPs 19 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	RobloxPlayerBeta.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\RobloxPlayerBeta.exe = "11000"	RobloxPlayerBeta.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "2"	svchost.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1"	svchost.exe

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{24A6A92C-EADE-4299-B5EA-E0F43387378D}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{55DEC13B-42E1-4102-921F-35E80EF6DED9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\ = "URL:roblox-player Protocol"	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\URL Protocol	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\shell\open\command	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\shell\open	saiko.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{CAA9DF1D-D180-4D4E-A977-6D3AC2D404F6}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{A6FA4CFF-8DBB-4AB1-99D0-F418B382FCEB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{F19C16B5-2548-4EB6-B556-7F059E293916}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\shell	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\saiko.exe\" \"%1\""	saiko.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
5332	msedgewebview2.exe
5332	msedgewebview2.exe
5372	msedge.exe
5372	msedge.exe
2280	msedge.exe
2280	msedge.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4752	RobloxPlayerBeta.exe
5388	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5024	msedgewebview2.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
664	msedgewebview2.exe
664	msedgewebview2.exe
6456	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3276	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3276	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4012	saiko.exe
236	msedge.exe
236	msedge.exe
4752	RobloxPlayerBeta.exe
5276	RobloxPlayerBeta.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4752	RobloxPlayerBeta.exe
5276	RobloxPlayerBeta.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4752	RobloxPlayerBeta.exe
4752	RobloxPlayerBeta.exe
5388	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4012 wrote to memory of 5024	4012	saiko.exe	81
PID 5024 wrote to memory of 5060	5024	msedgewebview2.exe	82
PID 5024 wrote to memory of 5688	5024	msedgewebview2.exe	84
PID 5024 wrote to memory of 5688	5024	msedgewebview2.exe	84
PID 5024 wrote to memory of 5688	5024	msedgewebview2.exe	84
PID 5024 wrote to memory of 4576	5024	msedgewebview2.exe	85
PID 5024 wrote to memory of 2932	5024	msedgewebview2.exe	86
PID 5024 wrote to memory of 2932	5024	msedgewebview2.exe	86
PID 5024 wrote to memory of 1544	5024	msedgewebview2.exe	87
PID 5024 wrote to memory of 1544	5024	msedgewebview2.exe	87
PID 5024 wrote to memory of 1544	5024	msedgewebview2.exe	87
PID 4012 wrote to memory of 1184	4012	saiko.exe	88
PID 1184 wrote to memory of 236	1184	rundll32.exe	89
PID 236 wrote to memory of 3748	236	msedge.exe	90
PID 236 wrote to memory of 3728	236	msedge.exe	91
PID 236 wrote to memory of 5700	236	msedge.exe	93
PID 236 wrote to memory of 5700	236	msedge.exe	93
PID 236 wrote to memory of 4176	236	msedge.exe	92
PID 236 wrote to memory of 4176	236	msedge.exe	92
PID 236 wrote to memory of 4176	236	msedge.exe	92
PID 236 wrote to memory of 5760	236	msedge.exe	95
PID 236 wrote to memory of 5760	236	msedge.exe	95
PID 236 wrote to memory of 5760	236	msedge.exe	95
PID 236 wrote to memory of 2404	236	msedge.exe	94
PID 236 wrote to memory of 2404	236	msedge.exe	94
PID 236 wrote to memory of 2404	236	msedge.exe	94
PID 236 wrote to memory of 3880	236	msedge.exe	98
PID 236 wrote to memory of 3880	236	msedge.exe	98
PID 236 wrote to memory of 3880	236	msedge.exe	98
PID 236 wrote to memory of 4652	236	msedge.exe	99
PID 236 wrote to memory of 3644	236	msedge.exe	100
PID 236 wrote to memory of 3644	236	msedge.exe	100
PID 236 wrote to memory of 5308	236	msedge.exe	101
PID 236 wrote to memory of 3428	236	msedge.exe	102
PID 236 wrote to memory of 5308	236	msedge.exe	101
PID 236 wrote to memory of 3428	236	msedge.exe	102
PID 236 wrote to memory of 5660	236	msedge.exe	103
PID 5660 wrote to memory of 3616	5660	msedge.exe	104
PID 236 wrote to memory of 2468	236	msedge.exe	106
PID 236 wrote to memory of 4420	236	msedge.exe	109
PID 236 wrote to memory of 1268	236	msedge.exe	110
PID 236 wrote to memory of 968	236	msedge.exe	111
PID 236 wrote to memory of 1844	236	msedge.exe	112
PID 236 wrote to memory of 1844	236	msedge.exe	112
PID 236 wrote to memory of 2468	236	msedge.exe	113
PID 236 wrote to memory of 2468	236	msedge.exe	113
PID 236 wrote to memory of 2520	236	msedge.exe	115
PID 236 wrote to memory of 2520	236	msedge.exe	115
PID 236 wrote to memory of 5664	236	msedge.exe	117
PID 236 wrote to memory of 5664	236	msedge.exe	117
PID 5024 wrote to memory of 4768	5024	msedgewebview2.exe	118
PID 5024 wrote to memory of 4768	5024	msedgewebview2.exe	118
PID 236 wrote to memory of 5372	236	msedge.exe	119
PID 5372 wrote to memory of 3336	5372	msedge.exe	120
PID 5372 wrote to memory of 5300	5372	msedge.exe	121
PID 5372 wrote to memory of 1696	5372	msedge.exe	122
PID 5372 wrote to memory of 1696	5372	msedge.exe	122
PID 5372 wrote to memory of 1696	5372	msedge.exe	122
PID 5372 wrote to memory of 2980	5372	msedge.exe	124
PID 5372 wrote to memory of 2980	5372	msedge.exe	124
PID 5372 wrote to memory of 6060	5372	msedge.exe	126
PID 5024 wrote to memory of 3568	5024	msedgewebview2.exe	127
PID 5024 wrote to memory of 3568	5024	msedgewebview2.exe	127
PID 5024 wrote to memory of 5332	5024	msedgewebview2.exe	128

C:\Users\Admin\AppData\Local\Temp\saiko.exe
"C:\Users\Admin\AppData\Local\Temp\saiko.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4012.5016.14001965502283125867
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5024
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff8af06b078,0x7ff8af06b084,0x7ff8af06b090
    3⤵
    PID:5060
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1624,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1688 /prefetch:2
    3⤵
    PID:5688
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2000,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
    3⤵
    PID:4576
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1700,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:13
    3⤵
    PID:2932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3520,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
    3⤵
    PID:1544
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4564,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:14
    3⤵
    PID:4768
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4408,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:14
    3⤵
    PID:3568
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4704,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5332
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4128,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4028 /prefetch:14
    3⤵
    PID:3412
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4728,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=944 /prefetch:14
    3⤵
    PID:2032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4016,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=940 /prefetch:14
    3⤵
    PID:2920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4520,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
    3⤵
    PID:900
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4516,i,11679858690207178185,18211716986546223709,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
    3⤵
    PID:5596
- C:\Windows\system32\rundll32.exe
  "rundll32" url.dll,FileProtocolHandler https://saiko.fun/register/
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://saiko.fun/register/
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x308,0x7ff8acb7c188,0x7ff8acb7c194,0x7ff8acb7c1a0
      4⤵
      PID:3748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,16241885571555357923,8597512184510324202,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
      4⤵
      System Time Discovery
      PID:3728
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,15843556872856263577,7819321507543498418,262144 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
      4⤵
      PID:4176
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,9462770468282883447,5735690077604385886,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:13
      4⤵
      PID:5700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,12580712746256614479,788355810657945336,2097152 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
      4⤵
      PID:2404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,17067505560651095884,5679371101465956106,2097152 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
      4⤵
      PID:5760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4860,i,55749815299117494,6755130235688926268,2097152 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:1
      4⤵
      PID:3880
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,7715930823588187291,13208238317791916861,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
      4⤵
      Modifies registry class
      PID:4652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,14051872357613867142,1905454507352123381,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:12
      4⤵
      PID:3644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,3893278441401706934,2304382614640427914,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
      4⤵
      PID:5308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,15209872929348974892,10477633460945120965,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
      4⤵
      PID:3428
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,15212222151821935958,11621864040065846793,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5660
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
        
        cookie_exporter.exe --cookie-json=1100
        5⤵
        
        PID:3616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,16927796348721510038,10061691603348101782,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
      4⤵
      PID:5588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,16927796348721510038,10061691603348101782,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
      4⤵
      PID:2468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,4063688634405042877,1768798947996170725,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:14
      4⤵
      PID:4420
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,1852742612127653387,4464237778020581565,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:14
      4⤵
      PID:1268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,15455065854408143854,15296878019029111600,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:14
      4⤵
      PID:968
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,14916930004088432622,8155866481881356520,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
      4⤵
      PID:1844
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,15386646903666657786,14616280530615464669,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
      4⤵
      PID:2468
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,10993952795751350572,7250426883883117579,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
      4⤵
      PID:2520
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,365174006742483327,17825824703536327337,524288 --field-trial-handle=2488,i,7065616375296521779,8704381392689625997,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:14
      4⤵
      PID:5664
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Loads dropped DLL
      Drops file in Windows directory
      Enumerates system info in registry
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:5372
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x294,0x7ff8acb7c188,0x7ff8acb7c194,0x7ff8acb7c1a0
        5⤵
        
        PID:3336
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7487989752185336304,6066587395017757325,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:5300
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,7722638773611293277,14228490612422031766,262144 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:2
        5⤵
        
        PID:1696
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,10617761907377101856,4165419539601549930,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:13
        5⤵
        
        PID:2980
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,12139306671352987814,7054587545056984849,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:14
        5⤵
        
        PID:2848
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,12139306671352987814,7054587545056984849,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:14
        5⤵
        
        PID:6060
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2072,i,15840405535304336075,11113483073887138693,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:14
        5⤵
        
        PID:3012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2076,i,12765859923729116600,12598068587186002865,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:14
        5⤵
        
        PID:5516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2080,i,7096977241239028726,11659472215830401673,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:14
        5⤵
        
        PID:5640
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2080,i,8250015323814994529,15036501323474249129,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
        5⤵
        
        PID:5008
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,14497744809475181798,1402856791400423535,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:14
        5⤵
        
        PID:5640
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,10105751119080460295,13858122220493758092,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
        5⤵
        
        PID:4128
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2760,i,11539533512708392016,18285415560373488544,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:14
        5⤵
        
        PID:5036
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3036,i,5308897587250424183,4584644524583756319,262144 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:10
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2280
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,15898368791734805772,16021898673627686017,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:14
        5⤵
        
        PID:3972
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9915245320163326564,15095455875540226456,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:14
        5⤵
        
        PID:5760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,3582054347922895006,12765236803090282472,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:14
        5⤵
        
        PID:6096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,17699233566124735906,9649879810138724812,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
        5⤵
        
        PID:112
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,7421209000583022382,5832952158332629969,524288 --field-trial-handle=2096,i,2092721546553876879,766677445542815379,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
        5⤵
        
        PID:6368
- C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
  "C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe" lsp --definitions @roblox=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\globalTypes.d.luau --definitions @executor=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\executor.d.luau
  2⤵
  - Executes dropped EXE
  PID:1944
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
  "C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Adds Run key to start application
  - Checks whether UAC is enabled
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Reads the TCP/IP host and domain name from the registry
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:4752
- - C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
    C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe --no-rate-limit --crashCounter Win-ROBLOXPlayer-Crash --baseUrl http://www.roblox.com/ --sentryUrl https://sentry-relay.rbxinfra.com/api/11/minidump/?sentry_key=812d501908401e9ad67861e1d6d1edbb --sentry-upload-via-crashpad --buildVariant Win64 --attachment=attachment_0.745.0.7451137_20261030T040244Z_Player_B8752_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T040244Z_Player_B8752_last.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.745.0.7451137 --annotation=BaseUrl=http://www.roblox.com/ --annotation=BuildVariant=Win64 "--annotation=CPUMake=Intel Core Processor (Broadwell)" --annotation=EnableSessionEndCallback=true --annotation=EnableSessionStartCallback=true --annotation=EngineVersion=0.745.0.7451137 --annotation=Format=minidump "--annotation=GPUMake=NVIDIA GeForce RTX 3060 TI" --annotation=OSPlatform=Win32 "--annotation=OSVersion=Windows 11 - PlatformId 2, Version 10.0, Build 22000" --annotation=PID=4752 --annotation=PlatformId=2 --annotation=RobloxChannel=production --annotation=RobloxGitHash=d2664f400cfdcaac1737922bdc152abd0f363f90 --annotation=RobloxProduct=RobloxPlayer --annotation=TotalMemoryGB=16 --annotation=UniqueId=4372873206915867164 --annotation=UploadAttachmentKiloByteLimit=1000 --annotation=UseCrashpad=True --initial-client-data=0x6cc,0x6d0,0x6d4,0x6a4,0x6a8,0x7ff767d5db18,0x7ff767d5db30,0x7ff767d5db48
    3⤵
    - Executes dropped EXE
    PID:3396
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4752.5704.10179630903862009497
    3⤵
    - Checks SCSI registry key(s)
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:664
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x140,0x240,0x7ff8af06b078,0x7ff8af06b084,0x7ff8af06b090
      4⤵
      PID:4712
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1860,i,1021895452089169579,11907534660356402272,262144 --variations-seed-version --mojo-platform-channel-handle=1856 /prefetch:2
      4⤵
      PID:3236
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2096,i,1021895452089169579,11907534660356402272,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:11
      4⤵
      PID:5796
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2148,i,1021895452089169579,11907534660356402272,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:13
      4⤵
      PID:2016
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3464,i,1021895452089169579,11907534660356402272,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
      4⤵
      PID:1004
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3664,i,1021895452089169579,11907534660356402272,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
      4⤵
      PID:652
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4752.5704.3868932303880503497
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:6456
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x1d0,0x7ff8af06b078,0x7ff8af06b084,0x7ff8af06b090
      4⤵
      PID:6492
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2160,i,12302140599815692432,5768888406341237173,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
      4⤵
      PID:4980
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1572,i,12302140599815692432,5768888406341237173,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
      4⤵
      PID:1624
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1752,i,12302140599815692432,5768888406341237173,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:13
      4⤵
      PID:4652
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3440,i,12302140599815692432,5768888406341237173,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
      4⤵
      PID:5856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1424

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1428

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:572

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:3220

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5388

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:1788

C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
"C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe" --launch-to-tray
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5276
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
  C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe --no-rate-limit --crashCounter Win-ROBLOXPlayer-Crash --baseUrl http://www.roblox.com/ --channel zfrmcontrolchanneloct28 --sentryUrl https://sentry-relay.rbxinfra.com/api/11/minidump/?sentry_key=812d501908401e9ad67861e1d6d1edbb --sentry-upload-via-crashpad --buildVariant Win64 --attachment=attachment_0.745.0.7451137_20261030T040423Z_Player_BF4D8_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T040423Z_Player_BF4D8_last.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.745.0.7451137 --annotation=BaseUrl=http://www.roblox.com/ --annotation=BuildVariant=Win64 "--annotation=CPUMake=Intel Core Processor (Broadwell)" --annotation=EnableSessionEndCallback=true --annotation=EnableSessionStartCallback=true --annotation=EngineVersion=0.745.0.7451137 --annotation=Format=minidump "--annotation=GPUMake=NVIDIA GeForce RTX 3060 TI" --annotation=OSPlatform=Win32 "--annotation=OSVersion=Windows 11 - PlatformId 2, Version 10.0, Build 22000" --annotation=PID=5276 --annotation=PlatformId=2 --annotation=RobloxChannel=zfrmcontrolchanneloct28 --annotation=RobloxGitHash=d2664f400cfdcaac1737922bdc152abd0f363f90 --annotation=RobloxProduct=RobloxPlayer --annotation=TotalMemoryGB=16 --annotation=UniqueId=6699450928959684975 --annotation=UploadAttachmentKiloByteLimit=1000 --annotation=UseCrashpad=True --initial-client-data=0x6b8,0x6bc,0x690,0x694,0x6c0,0x7ff767d5db18,0x7ff767d5db30,0x7ff767d5db48
  2⤵
  - Executes dropped EXE
  PID:3772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:5188

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Debugger Evasion

T1622

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Debugger Evasion

T1622

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05def567-cec2-4887-8021-15710e8d0be4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05def567-cec2-4887-8021-15710e8d0be4.tmp
Size 37KB
SHA256 07583ce1af48a51ca9ed9989560c133ddd6bde44ab8b196753e46e6deaf8d0cf
MD5 8520ce8ee415d82bcf9aec55327c93ec
SHA1 92b811ff7c247cf137593690737b0327fb2769cd
SHA512 9191b82baf419f632bb60243b0140fa2c9f2d076bf375d1bd8d51fc39c32cecd773726224f163af33a12f8a7e93c7b575cda4b2133746bdd6d68978980bff143
SSDEEP 768:KFdTywgFhYswnB0xYRT/rnNKVb6W54UyL59:qTamLNK96WOUyr
TLSH
T1C20380F99CD7993AD89E6B47573D2D1299BCC123F4684A98F7840E0CCCA60BFE306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fdb8b9a-bc2a-4ef4-ab27-1652e099a948.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5fdb8b9a-bc2a-4ef4-ab27-1652e099a948.tmp
Size 26KB
SHA256 a5c6dad6f3a1365984e5867d4d9a57c03256839e4d3124ca9e05e4b46554b48a
MD5 98407cc94677adc14af0654e078ad911
SHA1 aeba8f4ad2b562eaf05eded7cf4f3735a7afe012
SHA512 d86a9db6aa8d8c9418c4797759134904d0bd2483e1f141277db13ccb8c98dc543a467b17649427c1b3d8323613a63641cbc059b25147c388cfc144d1aa09b6fc
SSDEEP 384:zYiFiZcI638NR8TUNTUlIxBQnhxMwftzTfoBJzAZxYRT/XWrL7O6R2FeoxegL/7H:nFQ63Cwg2hJBUB0xYRT/Wn7TREF
TLSH
T1BDC24C31EC98D9B7EDEA8EEA974A7607EEF00123859C9AD4D9D85D1D00875DD030BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

952f95ff-c609-4973-a420-7a1d86c423da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\952f95ff-c609-4973-a420-7a1d86c423da.tmp
Size 26KB
SHA256 f96a215d0502cfb8315c3d6ae7b6bfd421be4adebdcb39bdea4630257adf2b77
MD5 37fa1911a523fa130acc32e975248110
SHA1 7d939bd2cc24fb6bf5fc2cc83c14483df9fd8484
SHA512 5f5ac91d581b1b362ee2916d52139802cc737e2676eab632dd6e20ba4cffa7d92a9f8f9785f1c1ae3fb488b7d158d0cfe98cad832d9a2c7436ca3e7bcba650fb
SSDEEP 384:njiFiZcIo38Nt8TUNTUlIRUQnhxyNPutzTfoBJzAZxYRT/XIrL2IpMtUOgL/7IzI:OFQo3ywgFhWwUB0xYRT/In54Uk8
TLSH
T156C23B32ECA8DEB7ECEA4ED9A74A7603DEE01123D59C8AD4E9D45D5D00871DD030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a9341e2-440d-4e61-9208-a13995e6568e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a9341e2-440d-4e61-9208-a13995e6568e.tmp
Size 32KB
SHA256 345466c829ab554289495cbe4e86f848d338fbf7a80a476ba75be477b6175bf5
MD5 22d160c6b2c70b5550fc2cf09a7b7299
SHA1 125181b5a85ea24805debede23a39a02c83b3b9e
SHA512 65a849b5171498d3959a4af636b21f130003d7d7d43b0afb77507a4d64e4336d1d8475e4411a062818690faad4bf72de98c89e16bbf4c2d92fe1e58e3e3146e1
SSDEEP 384:n/iFzQkUSvh38Nt8TUNTUlIRUQnhxy2Hutz4foBJzAZxYRT/XrrL2IpMtUOgL/7I:KFdh3ywgFhTwnB0xYRT/rn54UyL59
TLSH
T1B3E290F1A8D79977D99E4B97973D6D029AFCC113B4984A94FB840C1CCC861BFD306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c81fe377-4102-44ad-8f67-c939c75ddc90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\c81fe377-4102-44ad-8f67-c939c75ddc90.tmp
Size 105KB
SHA256 98d027a7d5f34317602446091fe5e8214f7e942ff9ef737ba4d84e1e3d5595bf
MD5 8f3342292c3866482651f7779a119225
SHA1 4913b3a3b3dbc7ed6a23f06a3e43a7fb771af8a5
SHA512 5ac909173ab373dd81244ae41107fd57459d8168297be5c68fdfbbe0e0d6bba188b269540254cf5084284313bf648a5ee3587eb3073c307b59f64cfeafed06a7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7J:fwUQC5VwBIiElEd2K57P7J
TLSH
T125B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2026.10.20\crl-set
Size 13KB
SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
MD5 5111ab39b220749a299b5bb7cd25c730
SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
TLSH
T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2026.10.20\manifest.json
Size 118B
SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
MD5 acb0c12cc7e5345764763e37bcebbec8
SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
TLSH
T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 94598876d980c86eb055386aa00295ce274354cc6d4d05d38555b2e8bbe3a5e9
MD5 d6230b3b4348beacbf10ed70eec47ce5
SHA1 13dd841d520420991dee4f4daf08b3cb6ab01c42
SHA512 98e7d7e2ca11b5628e5099e5f2a79c4ea32870ae91687aed2cc15a7c0e6e0996f71cd6baef36c3ad6f95be1a4a7b072c54931e85294463b48eee07588f20ab8b
TLSH
T1BDD08011386739ADC12F50770054A5405F54DD534614551555030C3D5A945D35D91EEA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 94cfe3fc1c31a5fbf603422147ceaaa1e33259697bf390858dfcd2aa1d65df31
MD5 e6f9a90db5efe441e34b076a0dbc6b75
SHA1 414b6d17fadc8fb9cc6b123e735f178d64fe8d5f
SHA512 9f3c1d91b7cbdec86682aec381a7e1ea5aa01ddc4031245482acc8193b89302a00f5d2ad1a1d5a3973f6e18f78e192f86acbb0c4a0f39aa6639aeedefe1ad8dc
TLSH
T1D9D08C293AAB390CCA0F60731594A6A0AF00DE1B461A9A326447093C5A886EA5F951EA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d06c655b2480a29ad334636f95a35c5bdce83a66295adea08a8856dcd298e39e
MD5 5dab4062f87d6ffd5dbc44ebf48fd8c6
SHA1 bffdeffc524afddf1ff9a0fbcfae676c4de6a3ac
SHA512 df19db1241309a372c6eeb5a332eb1a5cf13caf28f98f4b9727e26379c541aea8e4d6c5acea40f3adbe049e1527b086f83b2d59149638912f8c9f6d02fd77d74
TLSH
T15ED02B84A8D97104C0131437002161103F8898440906E012D0C0027E0985AD30355062
MD5 SHA1 SHA512 TLSH

Submit Download

23546bba-64a9-48ba-bd37-fd877370c851.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23546bba-64a9-48ba-bd37-fd877370c851.tmp
Size 12KB
SHA256 b0aef762ef1277823cc24cce94bd6798a1c7f64170a81de5ec2c878c4887c39b
MD5 15d86cacbcfc2762a1e2a32e62c5ea41
SHA1 293d5a0fd318e553392ae154c0938d0704179eee
SHA512 440efc83a329adfda096044c000864b1bbdd4cc79864f8cb6d2c3c7520a3b0d83a42f2fdf03e85885c683eb9e7e0e277933ed8502f0f0809af6eb33e81488acb
SSDEEP 192:sxZERjoP/f8sVQ705sGUQQHsfqzodp8//W6+WNu/GUXY0RLfCgePIg5dhJ:sxZEiP/f8sV35sdZQK/bgRX55ZW3r
TLSH
T15342EA55AE24A93B8CDBE619FB56BB53D2F9503290C01E44EAFC8A1C10EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c6eb5b9-81d1-41e2-bd66-8f7eb665e2db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2c6eb5b9-81d1-41e2-bd66-8f7eb665e2db.tmp
Size 414B
SHA256 f68bb06a8de323a5d725df9089c06f43412c5bc4ac7999a1fca7710aa4f8bdf6
MD5 d68276fd73edc016f7ab60e7ab8efedc
SHA1 70e5de10fcb0e0c7fb076d88758a20934a28f14f
SHA512 931874621473e3b0d8d95c58824206b9855e91f192b5e19df8e36360b0fb3716bc4024708bc3df495afd7fd13d4b7d8def8165c952d40e5ca7f46a5fe2771c14
TLSH
T1E1E022E9C961BC3B18FD0F192022170EEB2403673690564F3A3E821C8FB063A128AC7C
MD5 SHA1 SHA512 TLSH

Submit Download

3c5460e4-ca08-48ed-887d-80c233e52279.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c5460e4-ca08-48ed-887d-80c233e52279.tmp
Size 14KB
SHA256 edaec1c4e77e95ebe28d053e02d0cd9b04a62aa654b89d4927dae491fe1b8d1b
MD5 a170e55cbf06334601683ac73aa0c220
SHA1 d946f66695843c9b1a3fe6139303393c6fe68800
SHA512 0e2373d3d7ae6071f6cd3eb1b66605877ffef5802edfa533db01522958efe2b7684b7b2d553c308e8ffc377a3d409416698c64cefd519505330d792916cb0397
SSDEEP 192:sxZER/oP/f8sD2WpVDQ705sGUQQvsfqzodp8//W6+WNnP9LxY0V9p0OPIgbPnbN7:sxZECP/f8syWvD35sdZoK/bpx5WG/N7
TLSH
T1B352E955AD24A97F8CD7E61DFB557B63D2FD103291811E44AAFC8E1C00EB6DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ad2e549-96ea-449f-8978-6f30bed7dcba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4ad2e549-96ea-449f-8978-6f30bed7dcba.tmp
Size 12KB
SHA256 f7de9da2aabcee062944d83317361b3aa669627a6560c6fb6fca4990099f9f8c
MD5 4992c66c62ada823e5684418ac74d396
SHA1 d7b7e1792d91c6856bc7c693e64cb89c4d8f1695
SHA512 ae0a48da63146a411c9fea8d1554c44c4bb813b1016dcf2dee7c800c3563d38b3b42f239baf0e038a9f7f3f273fbeb08e8678b6a00486d1fbc5b16a83703d997
SSDEEP 192:sxZERjoP/f8sCQ705sGUQQHsfqzodp8//W6+WNuXNZY0R5CgePIg5PnbNxJ:sxZEiP/f8sC35sdZQK/bgZ5FWdN7
TLSH
T16642DA55AE24A97B8CC7E619FB55BB53D2F9603290C11E44EAFC8A1C00E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 66c5c7787e977478d6fac2549fd61b6fd3aecb7cdaf6d9173ac074cfd6d06b3c
MD5 7e822f08a82fe29007d2b68d9c614d26
SHA1 725a1cee40d58a4e75f789d40c1cd3687df1fd21
SHA512 d6c388c4f59565d177fd62300b78779b6a03874c179b846b37716ba112d85d93519f439be5f57486104f684db9a9c178123982902ac479d82024da4224d5f204
TLSH
T1CBE020E845CCC22DF115644B01B4730DC398365FD2C4AE1DB784CACD730D440E6915D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 60bc6b70ac503d75d4a0c16470b8b83fba115deaab9ac95e4407a8c3385301b6
MD5 a9cfa2c83bc49098897340b948e35a92
SHA1 6544cbe22843579e61889efd035d14df81502b80
SHA512 f6e09e9c990466ee96006629c0dbf9acd72566c0a9ef2219b9e41053afd8935efc90772dc94f6899bd4c6b066fcdddc7bb05dc96231b6bb5a90241c746712427
SSDEEP 192:VgeHZbIIVFC6gB65hWawmCKtYzIKECHRhO259Iqwn6aVjz:zCIVFC6gB6ihmCKyAIRYSW1
TLSH
T10D13C67D37A95C22F3EB957D824F0B394732D852F8E166830272FAA54F203449EAE4D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 66fd79f7af29360a06d6b1a9049cf774f0edc65c3657e12c1ab324df18d01b92
MD5 ed918a0be884265e189fd9100da5c794
SHA1 24345347e74a3a927667b84772df560ab54ecf21
SHA512 0858b1cc07b32702c069e1c5bad841cb1769a2a32c93d4151e2d091d5d817ce1cda5d3e9966f2cb338f65748259a673bded35bbec984b45d907d0af155e6006e
SSDEEP 1536:UL1gL/20L/yg3SdU7cv4L/bL/7L/ctuUyJ2gLDFqw9lJ+pR:UL1gL/rL/GZ4L/bL/7L/cuc
TLSH
T13B4451F75941A01BDBB852F9C2073A7EC53B415E7DD5EC99E1788C802825F31B2BDA88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 4a09047e7f8d04acdf95541830aaa74948a759825d710068cd96a84ad65913ec
MD5 97e84696a0dc51213786a7b54ae9fc22
SHA1 1121ec3787de1ada5981af86b3043c8b2ec0117d
SHA512 6a4fcc0add7d00ec431a7398ae4dd158c02270fd85f067e36c812e7af78fc54a2de6313b976566a84818c1f1d4de76fc6545d98b63517a54e11b2a535010c42e
SSDEEP 3072:VWAWcHFnbKGUtW8grzmfouoyQMWNWlhPCSbfAl625s1iOrdTKMSYtEdl2nTwc5E2:O+xUtW8g305QMWNINCSbol6/1iORJ
TLSH
T1BB254CDFCB682C82CF679A70B4D0D8177E702182BA99E0D39841C5E957C2FC175E92AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 24817894927ec7d6898c32bde28365837f30d7d9718d08e0bc5f886522b12453
MD5 628c437f6367fdb5affc100a75987ece
SHA1 56902f01562b92d4fb226e3e6c566f4411db0173
SHA512 e3b9be4b8fe37613107ba30c742662114b32552c89f90e278d55c50f0b2aeb4d3d967fed85fbbe136195ef347568acf7eac1ab1376d168cad95673824ed07875
SSDEEP 12288:Q9lI9wxbInFJyMBhqGS9Sz2eAIdYo55jIpjwDBsf1Ge5QdqkYKP4xDrz5LU+yyBV:+d8gcTufUy00+e2K0wV1+X0
TLSH
T190167CEDCA6858C3CE639930B4F0E9477C7413C3F995D1D68C98C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 2ff5fa76deb39e6c53f9ec3076760995fe4c4dee93afc910e57db3d6c7bd3d9c
MD5 8bc29cae614ae0ffb2430d2c96c94171
SHA1 9174786f65bfb24fd00bf69c0bc9c78182148273
SHA512 b998a641a964664512672c493a5020f701b44657f7e2d3051fb28a05532ae9c6d085f3290f32db82ed927c6de7596915b7a072cad5a1ae2f5a8d194b145947f6
TLSH
T15C51E770A3A58EA1F7A4413974CC3E8B3633A6C4B5C3DE02A590CAF94EC6383510E3C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8ebcef396870bfdc05a554c52fd80b351fd106558892fa4246ea800dcb8434b9
MD5 e16e994f6945d961d6345eb634f23986
SHA1 74650e7a928cca5224de5c8f3708add24cfabdf1
SHA512 d230455cdc8c4d49ec412cbddccc5495b30d24de873a677dc6a3f7af9949cdfd5e1227dd323d5573535c6aed6c8cfa9df4cd956325fc23e59c357c115ded07e3
TLSH
T1FF41D560A7A59EA1F7A4453874CC3E8B3633A6C5B5C3DE02A690C6F95EC6783414F3C0
MD5 SHA1 SHA512 TLSH

Submit Download

8d25ec24-e6bb-46df-b8be-17828d4278d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8d25ec24-e6bb-46df-b8be-17828d4278d1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 627B
SHA256 409d4c47e940688527d730b996e8991e010988c7671565467ed69d640d0947f3
MD5 9d7435ea49a80fdd66e4915f513017f9
SHA1 469f6c6e4b19b85cc1be497812b2f20864f4ff2c
SHA512 0561cd632d4219aef4686de40ec092921384ca89755d354801e0eaec8645a8630a180807af518ac8fcf01f71eb3d10faa9ce1e62c7a7226a274975bdcb7eeb4c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 6191cd3f5a47e199e6d40e48b910695bc1edb18cf403d8cec741d39542eebd84
MD5 c09092e490348dcb06b635844fc67ee2
SHA1 e4ed6588b74c2abf82357ca79d3db457de7703bc
SHA512 38f57998fc853806e4b5f989f7a1bed41a07cec998c0c97bac87a566d3684fc4a5cd7bd47ab358a34cd73cbea41da137275a75e6459b531888a620e32a388017
TLSH
T100E0262558C8C229D1186AD3027D630CC7D23812E2803D46274ECC8C6241369E387AC9
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 e027693b36ebb611db516190a4b3fbbe9f15db134a6310d06fcfca907c56d98e
MD5 fe664caf98184a12cb3e0dff2815d99a
SHA1 a1aa46c5816eba09ec2d916b43f0365d0c3fee00
SHA512 e0af2c7aa23bcb83802394e3ddef561befdc73db0adffb9ba84282f31e8d679ceb4566c886a118ee41fc8ebe6c575e85c8978ab07f21400d0d1ea47930264d3d
SSDEEP 192:N8D3n0+G83uxXBBK31GkSJV2aAEJH7DNspUW:N8Da83uFBBQ1GkS3pV7DNspUW
TLSH
T11514524F5F343312CDBD803669E754A75DBDF43F8B526A8A78601471CEE3A52602C8BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 133B
SHA256 3c9b04c37907ce34d683996e5ef4106d0357c0130cbdd298188a160a6032e1c4
MD5 16fd67d91540483c7c1d029d3aa39ae6
SHA1 ec308c605b5b7accdc12201ee426dd1d00524924
SHA512 c56efdd14350241d20f1700930cca786c2db8e6195e03b32c6b17a178cf9f27e6d33dbadb38c68ec05ae26960dbf59311a5826d04ebea3fcf1e19d60bc660e36
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 db03b59d6a56461abfaf055e1c650e329b4adce0e0313dd98c5ffbcc8386be52
MD5 88047b4adfc3c53e986fe9a6440d8b6a
SHA1 7c137e88a23c788b2f11a0d96eb9e785492717aa
SHA512 e12c7fbcb87038fe4ffe9e91aff15ee93a4892b0f46b1d1364551cc340a99a69946589d3534a025b57a659d942c1a64d58b39fd1559310fb8f2b5f8e97f3318e
TLSH
T15BE020B2A4DDC12D92092047027D770CC7F1341AD6843E856B05DDCCB005104E7C33C5
MD5 SHA1 SHA512 TLSH

Submit Download

1b8a346f-869b-47c0-a223-1c5ec2dcc861.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b8a346f-869b-47c0-a223-1c5ec2dcc861.tmp
Size 4KB
SHA256 b45047ffbd8200f9f5dbbc13b7696b68e2a78b09b7bf027cd07e703b4c6d1259
MD5 72bef2a2f5e2ce8e39b9ede372170d64
SHA1 d241dde7a7c50fcc7b860cc9aafd1b193b852eae
SHA512 7b5f6565a1fa8f3a4757a9142ac3323a83e307c7ca88f6213f37ad2879dbb38f124e5af66d3ace67a6c16309107c16618753986aa8ba7d48ae77df7b3429fba7
SSDEEP 96:D/O1HMHgH9HjHRHsLaOzBnHgH8JHJHxFucHMAHAHSwQ:DW1sAdDx+aO1nAspRFucjgyT
TLSH
T1EBA1ECF7C3E5862D8D2197F05A54AD1BCE6D0914832C7E6E88E8EF1B63E3071D241A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63ec1b7f-98d0-4a3a-80b6-7f1e15810a3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63ec1b7f-98d0-4a3a-80b6-7f1e15810a3d.tmp
Size 4KB
SHA256 35f65efcb8a7f31df82dfd389c6736596a2a047545790b1e4098119dc052e1f5
MD5 fd687e36de777e42a169245f413b4efd
SHA1 ed2621e478e81e9b0b5193d9b4091a536e825d2d
SHA512 e209c1188a9df3c7c743aaab63567b2c92ca988e4a51cbbbe01bebbcbab5bd2f59f1acf54d25dd03ad44ec6a49591a1db24629bff219f7311315d2cd703c15c9
SSDEEP 96:D/O1HMHgH9HjHRHsLaOzBnHgH8JHJHvucHMAHAHSwkx:DW1sAdDx+aO1nAspPucjgyJx
TLSH
T168A1ECF7C3E5862D8D2197F05A54AD1BCE6D0914832C7E6E88E8EF1B63E3071D241A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

666745ad-924c-48da-863a-a4087b15b5a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\666745ad-924c-48da-863a-a4087b15b5a5.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 0589054786c39dd3db567d0ec2a61f2df602b09f02e5c610272c358fd1d992a3
MD5 31f3cb1049afd2ea22f26e3d242a30e3
SHA1 9f63623072a5a232c716876dfa2459bd4fde4783
SHA512 287653e23274fdb42e6feac0dc684a2a500942d848995cd6b2cb0509d8a19b5858d0108764b1a3ca3ef865516e931a3846085343aadb9555268de304c1d9cec8
SSDEEP 48:TNLopFMatSaw/auUOt8BH6pdLgolXoGUtgGFnQbbo7wFn1KATOPwH:deMatUaAKiJU6wnrenmA
TLSH
T15192C95E5B382626D1F14FB7E5D140C23F1C142CD3637A99A845D0B29E221DFF91249A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 56a70439a6825a7612f1a3ef2a344dc24e861f9b5a809b8b296af34185ce449f
MD5 acd0eac60c5a21ec8a283ddb43c2bea3
SHA1 cb97d6cb3ff66378274f2fc80eb45e66d716f4d8
SHA512 8a4cadfbf3536b2d0bad7ffe88ef90a76a40e14c14b289bb0b7fbefb56c5254efb64d795cb4c15b107fc1c67fa9f0d87dd64817c026814dba52977c469a33349
SSDEEP 192:sxZERjoP/f8sgQ705sGUQQHsfqzodp8//W6+WNu7A/Y0RcCgePIgjhJ:sxZEiP/f8sg35sdZQK/bh/5YWjr
TLSH
T15042EA55AD24A93B9CD7E619FB16BF53D2F9503290D01E44EAFC8A1C10EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 33KB
SHA256 f3d46bc35a067fd89ad29f05778bf49892fea9e3609ccb8140dbb6ebb04e4ee8
MD5 adfc0ed64d88ad6ae821c961605a0507
SHA1 15b0c4ab7a6025eef795766562f598d2080bacea
SHA512 f102bf1aefd2d0af12da98b7272c88e0e0e3cb32fc4f0e487d012bd1f8ac2dff69dc3e6ee6bf3c18ab4eb7c901738140bc206364d85343f26b50baa45013775c
SSDEEP 768:WJ6E28xO2nh7pLuLjz5WRmp3Qf/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3DC8sLlI:WJ6E28xO2nXEjz5WRmp3Qf/u1jaKDC8f
TLSH
T1EFF20B7B380CCB7E4FC04A99DD667F9A6DA8028B9698CD4047FD885C02C7BEA51160DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 83f065834496e046cfc9f42d5fa43ca008a62d2d2a15d7fc17b0991b6ff6cf8c
MD5 df71c77796a6e96c247617de1ec146b8
SHA1 a56bad5755017eeb0776d9e3d3452a3c608f8231
SHA512 0b318cdd1241aed75e7db270c1de28e46742aa07c7ba8407c2d6d100c19648f608662036e7c6ecd830a0ebca42109176332c1ca77f0acc58e5d321c366a505ed
TLSH
T19CE026B256C8C17DA02930830736B30CC3E9F42BD2C43D063F01DA8E7146605F1931D8
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 f164d019e3ab0416be0fa5e93aa03a3f2fdcba87a18ed27a7302825a854cfb4e
MD5 e511b0244aad9fe654ad0e945904319f
SHA1 7267d60a2d2f5bf043226636ba3fda21770e7284
SHA512 e8ab708b4a4e4830320a1eb747371d8c7bdf3825249cbe19ceda9bd222acbecc9d2c1837b920f92f3a87871325b502b7e24dc220ac1a0bd513b8e4a75f1d4c57
TLSH
T134B012447B00EA07C48F09310F50CBC46330F23129444A57984DEF202C45ADC3E58C80
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 fc65e41a00faccf2fcce72d070f6f897363952048c077fa20f023f09550d2c99
MD5 85dc26a4c0fae0e35521c41a62ab2451
SHA1 541417365ecd0bda84d8439f833dd0e1d2d3010a
SHA512 76999d6b79c87c56a270460a5207b89f051b13e5d59b635324982026193fea547af5b63c91cff0da75b75352f697540ba2ed37f1a552e73b3b5866282cc79e71
TLSH
T15CE0DF3166C9C22AA18930CB0235F30CC2E3F412EAD839163B09D68CA20A240F383280
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 5f7142b5423134764a5e514482455bb881e91375959fee7d856a39913cec0522
MD5 61b442dbc621e38f72f7a32e3d4a35e7
SHA1 5015afd41ece30dfb978a63c085d21a5a7bf2621
SHA512 c653af94b065e06fc2a632e7bbcb2edb72e6de3b0e011338f95407a4f31a1e513ba49fc633eb4d80f89f5e9aac9a9f106f7597183d4726f1a0173e67e0a707ea
TLSH
T16FE0867195F9C239900D60C302B5B70DD7F1F81ADBD43E4AA70898ACA105345F2E75C8
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 176b1077ea872fbddd2dbbe8299e2935a8f3d9d401565db0cc6bfb6633ef26c5
MD5 13c84fbfd273b7571f2441649d0be794
SHA1 5b3a45e42ecb4ff76d309b0de479f1640d529d56
SHA512 911a3aa63746863092a7b0b8b898dfb3442fae225997696111a116c26386aa59cc120cdd6d1e61260f166e25f3a4ffe18bd18a8c1f8bad0c9ca8650e113e07fa
SSDEEP 96:KYlWKmcrGr2KosTUwK5e6SmIKT64ygKHK2qOcKjKIrSK4oiOHCKIUzj+fzptB0B+:80Z/jH0TnaJxzh/Mrzcp3wHbAdrN
TLSH
T120B2331171BA12453CBE290D81B59B2F524232B37119EA3B7FBD10B68E6BE445CFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 3c2639b8a00f35772b287f89cd1ec79ec7458428bc9beaaac2b5ff6540621919
MD5 b6fafa306933720e403f527b5149ad27
SHA1 646804aeea4c8bf51b199573f32bdda36b6c674f
SHA512 528f2a637fefb47026ec2c5a838d6bc310bcc533f83280175f93a0bba5bf58e79f3b702ac309bc62954d2d9f42e7228c2dc7de4c68179e8d60359d3c64d5757f
SSDEEP 384:amGBfQ0JQn6lLfzAivuvBN+wtP2sVIW8OImJmI2IfI:Z06n6lLfUPvBN+wtOsVdC/m
TLSH
T15A24950A3B747001EE92E9725CB040375E3C717DCFA2A68169A564594EF7903AA3D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\9d686459-aa8e-4eeb-91e7-7082ca1648e9\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\9d686459-aa8e-4eeb-91e7-7082ca1648e9\index-dir\temp-index
Size 72B
SHA256 ac3957b4daede0f95de1be229fc409c3c202f89d1c70c50e5d559ab811e3d556
MD5 391a7eabd5afbb53737f9469c1cbd38c
SHA1 79545db77a12e968db59f0fedcd544f45e93448a
SHA512 69e3f6bc3aee790c4be15f3b81dedeb080b97dd54ae0931fdb30da7b6ac4e313bd571e888336243ec434bedbd22c3b07394fd8f85380e09016c6332b2314407d
TLSH
T16CA0021053D92482D1689274A0850BA73711CA5045060B136890829C8CB12C8A911065
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\9d686459-aa8e-4eeb-91e7-7082ca1648e9\index-dir\the-real-index
Size 48B
SHA256 f153d7650a247b453172dec9ceb884799554d5a07e1981acd9eee5451b476211
MD5 58ea5443eae85e1d1a5e264b1405ab06
SHA1 e500192e0c18c5f945adab3560ded723d10a4912
SHA512 cc22d89055042b7c8e7e641a81ba204989c7315abaf2a500a06eb3297c4d6d8684c34fd84bf1c43b8ac4a13234dc97f4e028f6ec6945c78897b37a8df278ef9a
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 176B
SHA256 08b0a11e770209e197659a7382b5655404dc590e15caf36505d5653591d07c5f
MD5 d8d078434a6d66643f48391d4f24098f
SHA1 b435af16405a8c6584009205603ce9efd91c0a74
SHA512 d27d028127f924ed358fc90221d36e2f050bac185fef219a845f7e1b0004c12ac0f4fdd7d5b44d1eb2bbe1aed2d503f21b5d6f5442040f0f4b9200c944dbdfa5
TLSH
T187C08CFB80C396822E7028EF500732DCC83A7FC95DD0EF0C882235052334CA9000AD2C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 89B
SHA256 e57915789775c41625fa9c411237bed285684d2e747bdc0ab899367e7817cdb9
MD5 855981cf394d5b6904f72652ee575972
SHA1 e1a705164efbf0c9506701b2d7658192b7b18087
SHA512 98e0b411110f923698e479e0a70035b776fcc7ccce41735b495abf471e00e5b4f136167ba5269e7fbc72f23f1b6617b38c90574fac8b3b11d21f5f158cac1583
TLSH
T18EB002FF00C155C51EB139EF000731DDC43672D89D94EF4C8471155433154AD1002D28
MD5 SHA1 SHA512 TLSH

Submit Download

a8e7fef1-ad21-41ac-a547-1e267968cf27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8e7fef1-ad21-41ac-a547-1e267968cf27.tmp
Size 14KB
SHA256 3e89a9fbc1047516ff83ff6585f2abb4f611482e0c121f0f79f77f38e2733002
MD5 752b2676c23cd7723730adb58a52a102
SHA1 da194ad855b529eab6d4ef5633404cf231e410d7
SHA512 8c56a243cb15b8e6d63bb09e204c2135da31c3df82eba35c9dd997f5a014d06ec1e6625616c7e246df5606484697f42fe9438f1ff25302317d490c93403f3f07
SSDEEP 192:sxZER/oP/f8sXWpVDQ705sGUQQvsfqzodp8//W6+WNnP9LxY0V9p0Q5IgbPnbNxJ:sxZECP/f8sXWvD35sdZoK/bpx5Wa/N7
TLSH
T19C52E955AD24A97F8CD7E61DFB557B63D2FD103291901E44AAFC8E1C00E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0475075-1194-465c-aaf6-f0886ae2a897.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0475075-1194-465c-aaf6-f0886ae2a897.tmp
Size 33KB
SHA256 e6c37d5f86423782973c2d2678f28f71feb754046fa54607b2c4aa80a1df8200
MD5 fbbd0140341810a692d700ec77a9b417
SHA1 581b63116bfeb0bd46e28b439eeca611e4e922ce
SHA512 f2e2c7c3eed023ee00dd3d1871b11c8d85ec45fabc014e7c53cc7413bdeab8830d2dd9b24c481a04d607a9d285e0c4e1229d81faffb9971227a334206ceaafa1
SSDEEP 768:WJ6E28xO2dF7pLuLMV5WRmp3Qf/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3+C8sLlo:WJ6E28xO2dTEMV5WRmp3Qf/u1jaK+C8f
TLSH
T139F2FA7B780CCB7E4FC04A99DD667F9A6DA8028B9698C94047F9885C02C7BEA51160DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 42b66530c2d32388a2c0d3ec49a48681c5d09ab654e2e6cf43a724fee4736452
MD5 74db888dfc028b3b41ff185b233752f7
SHA1 b04b5a78e36899a9c5e625fcd33dde43d8bdc14a
SHA512 4717c24c8218c01b68cb20c199deb6f1fd4d8ae7cb312830d54971f4c3d7e9908f2f434390917635ffe99879231acef238bfab0aff5d7d0dc74062881f0d5923
SSDEEP 192:J95QkIIIbbLMIMNsYcY88rOP9VAs0lrNKrsmKlMMMMx:J95QkIIIbbLMIM2BfFGse8sPMMMMx
TLSH
T13C52812A2F041F73C09E6B77035A87A20BC9D8918276216D3562185F8CF2E57C6D93FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 a0f6b6efb74e48bdddfc1806a89b286e11265e39fd27d32871bb1894bb5194a1
MD5 bbb6c54855a64f8c7497e39334e9229e
SHA1 bd45aae4df79d0eec80ef9af919441adc71beb71
SHA512 8ef1faeeab0cb4fb3a18d93878f8086572efddeaf2d693c7ae580e297180850d4af4055cb994c0df31d247e0c79cc66574054a8b75b59f1e9173604767201c1d
TLSH
T136E08662F9E9C12EE01820C701B5635DD7D27D17FA943D8A2F06CCCDA146258FA979C9
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 516411aaa0ad12cee43be21e1401aef401b8384dba1262e027d3026b997bbc4d
MD5 4dcaf71aff902c5975d9f2c841c3e41e
SHA1 c4807db0486ee013eb4490ef0ec5f94f04fea4d7
SHA512 6f5d5aab9b50791173cd3b6129c44216fdad4717e45eade9c9c6548fabd5cd406b1bbc4ea266626d34d4a73db866e9667a2ad5c1670cf12c5edd86109c986df4
TLSH
T1DA21BF56F320C109D18A867DA42F97351738D8028FBCED0F94B924362E76B051E9B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 a816613377c5d42eac41bd0bc447b218b6160db13f0f0003a840488ae16bd3c0
MD5 61d5673c3f7d9b55f46c37091beb07b4
SHA1 ec50a678a8abffd02e1245e1eb04b9b4ba494308
SHA512 bc661e03db3d2cbad277f3d0a3eddef4202422033197b6a1679c61b6045b09ff0c62e8b4a0296b61c32030a9db7d9e86f26de0bcbd15382e4a91343201faf95d
TLSH
T19AE0DFB2B8C8C12F9018208301B5B34CC3D63812EAA03E0A6F01CD8FA145241F68B289
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.26\manifest.json
Size 53B
SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
MD5 231f4c6814bd04e1dff159c333e99a8f
SHA1 e7a5e431643eb7e17b88cd2bc6d76be5be95edf2
SHA512 10edf632be82534001690da65ece25b5c0882a44afd68b54ba078676f06cc19183c50e64b771f36b1d5a52ce2e885dc34ca4f4c049eb517770ee33c03ae06d21
TLSH
T1A29002600814921716C14E506570B882A391661955950D1D04455558029586CE0502A9
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 db37ebd723559d979d596f856b49f0eee9cd0cb6d485a080e72d89a6e25dab46
MD5 bbb6d80681644d32fb24123dde282fd0
SHA1 db1acf646c173f6895e4f92682ff7215b23de93b
SHA512 14f199fe81b85016b5779aea22b36c9a60689102cba0b1c3b368c77ccdd1e91968f429390fde414f48caab29f3abc621a6b55cf55239bfb91e89617ac07a1797
SSDEEP 3:MsEllllkEthXllkl2zEEV+ll:/M/xT02z7Va
TLSH
T12A4404047FC00555C5101035C051C3F403F0F4110511574734750433FCC57700C10010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2c1d3b3ae1e561897d6fd308743cedbebbce9b58295a62e44bc7d74fc5fdfca9
MD5 00d707d172224eb2f7eaaefe45b39194
SHA1 22a8ee8685057cbc10f9893eeb9b5d4b12c6c90e
SHA512 b343c3dc40a4478b482442aba3aeb14e0fc09abc26111246cc65a5903d855ae6952490097f2ee48de01e5354bc3188ee603dd031d81c1ceec0ee13874032bad3
SSDEEP 768:KFdTywgFhDswnB0xYRT/rnNKVb6W54UyL59:qTa5LNK96WOUyr
TLSH
T1070380F99CD7993AD89E6B47573D2D1299BCC123F4684998F7840E0CCCA60BFE306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\72.0.0.0\manifest.json
Size 102B
SHA256 0ed889bea99f74fede865222f4cacca4277c63023db98efa666d42ba1f7f9502
MD5 329ad25b265a82c711c72c02a553a353
SHA1 a9a666d4182caad82edd399fdab141473670c5a7
SHA512 b81005847e76dc513b255b36704dec0ae84c922d23dc152cc42bb3eec9e18cb083e601bb90562b3f3c9b2ac540e801866f59277b9c43c0b97fd3e90b688f26c5
TLSH
T178B01220EC10B4B3000403AC0C6CC3C063372F032C4079180DE59F84E80D9DBE071E29
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 157e419bfd7c348bad4c5c9edf4bd977511714d7de661b627fc45c30a6f6d28b
MD5 478699c7b9712b8c96ff14371fd0546a
SHA1 0ad00cc7c2b8c5341753c63a45175aaae5c4c259
SHA512 51986012ab5599e28e60555d9e463c781f310e3dd2b3a10982fcc41e9fcfdf79f256cded568d76a1919489c21a8467b83baecf3e42038407ccf2a33795aa59db
SSDEEP 3:MsEllllkEthXllkl2zEN:/M/xT02z
TLSH
T11C4402047FC04D09C5101035409187A013B0E41105115747685108227C866600C00020
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\keys.json
Size 3KB
SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
MD5 a86e3ddeb60db5984686f5bd89a95646
SHA1 e5f417a8f70c34b293ee20bb9f54a423a07982ec
SHA512 f3df95b51940a12ffd2d58648c302fbd649dc3097e0961a86da65e324690488d1b3d80c6267a6a0685f220a89c279ba54cb56fc02f19860e99ffcd6448cf0db5
TLSH
T19971D6BF14A40082CF3BD16A8F0735A78FB23C0623C67AC3965FE94A04425AC276F475
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
Size 80B
SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
MD5 3790d9257ba14f8be2ba08acf259a57f
SHA1 c54ab2e79d0ac9dc27425c7450e01ad593f02d60
SHA512 9568fef732369f06aafd8270638a38531a26f6f40a1c7c65fb7254eed36807789756e1c6efabaec86017b3decead2773de9ef5814650dbb334e6000ebd44a467
TLSH
T1A8A012605811E13310C403700260438243E01C112015240405461140218823713A3129
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.10.28.1\manifest.json
Size 119B
SHA256 b9719b9ee9ddf96dc60531dee676d20fa0277a996dd3d00f95f552ab95656985
MD5 55e7cde0957a3edebdde603c6c28b903
SHA1 ca0a6ae8df26c88a3b1ec9e4507a1cd1c68747bb
SHA512 b08497b9c8307aa01787e0a52b871539ab8696508e53fa67ded299faeb13956b01ae0158dc2cec877e5e6cbcde7559f721ba8c3d0f80d0ffcd579b47b9b2977c
TLSH
T1FBB092B10C2AE02B22C09320ECA166C283FC0228E852AB1E098036481F8817980362B2
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.159\manifest.json
Size 177B
SHA256 53147dd5510a91e0211cc4e693e3a41a321a1dfeec1a85a3a931f4f8e056186a
MD5 7f429d2422b099274165110352a894fc
SHA1 f1eaec6c13b9622db5583bc5f10b15fbbf0976c4
SHA512 24ad252e392eac7fd698df9574bbcd370fb400489de8fde6bab530ec7a0a2b620fe52ab3f97ddc93cb61b881161cac3949d5cc1e1ff5e427642debcc28e9173a
TLSH
T13FC012DFDC509DF115EB4722156D43C4D733CF4B1546451935F766082E25985C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.3\manifest.json
Size 141B
SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
MD5 3a5a48cc06d7f5cf2ec6e467e34915dd
SHA1 b6c3679e8961f0af7b5a56704992d5561ebaf6c1
SHA512 ae2de2b1827831eaeae6c9d00d081aa7be570fb050368eabc6b549469b14d7409b55e3726d4ac8ceb6cf75e48b3a88604345cb56a53f0686dd84cf8cb262125a
TLSH
T130C04C5585005D71509D87781D6C97054B12CF5618946509DDC68309EC1DCCB64B234F
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WidevineCdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

b591e3ab-d855-4887-99f7-18e48e3d9ec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b591e3ab-d855-4887-99f7-18e48e3d9ec5.tmp
Size 27KB
SHA256 8ad6ce7ed4c49ebea6935f984670436250d01f99819914f9dcc78f7456ae30f0
MD5 6155a9445f400599036b641783d7798e
SHA1 0cab91c9ed9fe6b89ef4e530c18cd09fc6e5a0b0
SHA512 4a601ef639fbdac3513f1c969c031c9d740b76b5dfb804a2ef4d94b8407714c2f1cc1aeda5859bc7ccc997038a0383c4b26d0403ddfcbd75313e56c03a657568
SSDEEP 384:njiFzQkUSvf38Nt8TUNTUlIRUQnhxy2PutzTfoBJzAZxYRT/XorL2IpMtUOgL/7I:OFdf3ywgFhLwUB0xYRT/on54UyL59
TLSH
T133C23B36ECA8DEB7EDEA4E95A74E7603EEE01123C49C4AD8EAC45D5C00871DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c57d7cb0-b251-494d-a284-06ca01e8ddb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c57d7cb0-b251-494d-a284-06ca01e8ddb7.tmp
Size 25KB
SHA256 f7ce2cbf346a7601ec0c727903fab109abbbed38ddffcaf12c2b10bf5d0d6bb3
MD5 b1aa5fdefe5149902e9f2e5ff49c5a7a
SHA1 17035f462385b29f7ee8e04970516beca59d3ecd
SHA512 15fa6f9415e992d49519b33805a9d8173662d2803a9b3c37bf2749bec2af690d937dac28b5fbd6cfb8f9eda5e2c41197e97b5b4ee4696228303f935598fb3cfa
SSDEEP 384:zBiFiZcI638N78TUNTUlIxBQnhxqq1itzTfoBJzAZxYRSIk7O6R2FeoxegL/7IzW:sFQ63Mwg2hx18UB0xYRSIk7TREF
TLSH
T108C25B32EC94CABBECEA8ED9AB4A7A03EDF04123D59C9AD4D5DC5D1D009759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08855466-f427-4051-bbf7-1df6333d9339.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\08855466-f427-4051-bbf7-1df6333d9339.tmp
Size 2KB
SHA256 4e1625829745aa7aa634ab8b86708fb494ff5fe880b78174ed0bfeee0af9e794
MD5 90eaf211ac6213bbf6fdc6370f83e245
SHA1 ac829c1de81b433f30d21c0173f8428cc6cae987
SHA512 26adf205f904c6c1a09afd642483585e73dc26077633bd56211ee6b4183902b226942265ef4a0485a810f1d9e171d511fd37872db5593d727f1e917791578668
TLSH
T1275130D09C395AD1D1FE0E7EA09739FC84EC9212F5A0343D2858E8984ABA62D348483F
MD5 SHA1 SHA512 TLSH

Submit Download

0ef155b9-1105-4c3f-9add-8a74900ae941.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\0ef155b9-1105-4c3f-9add-8a74900ae941.tmp
Size 2KB
SHA256 0fc31fd2538a46d65ffc8479094e346950b917cfcd3ff1e0175709caeb143f44
MD5 62e58d685bc50b1b592cc3de9f741a76
SHA1 4a7188c52dc49a7dc23bcb916d80affd996414c2
SHA512 987f00978d9297b8695c5b480b80eaa6cecb3475c457ccc40215db8793d91bc166767a820e905ae960046e978926f5b4deb05293186e108d03e5464e1fdf8da8
TLSH
T1DD5152D08C395AD1D1FE0E7EB09735FC84E89212B4E434392858E98C4ABA62D708483F
MD5 SHA1 SHA512 TLSH

Submit Download

ad584a73-aa17-447f-8c30-157c6a60317c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\ad584a73-aa17-447f-8c30-157c6a60317c.tmp
Size 2KB
SHA256 30259b48ff733d910c96472856f88224dac66553dc05015b8e33c94918c669ef
MD5 53bd533ab0a56f9c7a38031b1cd2d2f3
SHA1 ffe6c7dde1c779dc76f2ef1e1462ff817a65617f
SHA512 bb7d3007216796ecaffc5c997307fad4747171e15c24b6a2de4dd9fc73bb92ca9949723ac9c1e17069d3d277e4d449a9342144f67928ee5035d9c3c9c2556c8c
TLSH
T11D513FE08C395AD0D1FD0E7EA49735EC84E89221F494343D2858E99C4A7A62D718483F
MD5 SHA1 SHA512 TLSH

Submit Download

af36f513-f23a-4183-8669-64c780803fc9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\af36f513-f23a-4183-8669-64c780803fc9.tmp
Size 2KB
SHA256 07864017d057a72c7164f34ee10545dc470933fd5b70101f653b12f57bd7e614
MD5 cc2c90a45293eb386bdb62a1f681a1e9
SHA1 6fa12bd9589d4e0faf392fc348585df07551d5bb
SHA512 cd469174c2ac153421034ae706f737df889a1bd1dc61ffa2be9ba108a84645382b6375b4947f566240c59f95a7c35307f205216492caebff6da935fcbf8fc656
TLSH
T1D65122D08C3D5AD1D1FD0E7EA49735EC84E89221F594347D2858E9588A7AA2D718483F
MD5 SHA1 SHA512 TLSH

Submit Download

b2b88536-b466-44bc-ac82-4679170a4f2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\b2b88536-b466-44bc-ac82-4679170a4f2c.tmp
Size 2KB
SHA256 57c4f4972089b5330a56e3df1fbfd95bd1704e8617b67ed30cf19471f534091a
MD5 e136afbb4e3c0ec4fd3f7aba86ea25a3
SHA1 b9da78476e4e18e90159d5a29d814b947a99a6ba
SHA512 57873d896afee0ce180e94c5c16c3c38f8cedfc2f3a7a5fa030495340b02635060ca485a1838addbbf412799a145a6f53cb6ca8532c84038ed081f18af415851
TLSH
T1F95130E08C395AD1D1FD0E7EA45739FC84EC9211F5A0343D2858E89C4A7A62D748483F
MD5 SHA1 SHA512 TLSH

Submit Download

d255f4c3-be89-43b8-97ee-af47e42a3677.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\d255f4c3-be89-43b8-97ee-af47e42a3677.tmp
Size 2KB
SHA256 176aab15b433cdefe5c6db2bd9de40b8c49c6bdd1eebe8298d297bb15ecaef4d
MD5 958f7c99522f474408ab28f88e1b2857
SHA1 606386e278416de675e737cd347034708342b3e8
SHA512 dc79e780120ec6ef59473e5e80303ae6090527aa1af2477b106bfcbb4870bfe029c8aced6e352f923030a7ae867733af1b28a885af055155808eb90b61bc2f32
TLSH
T1A65131D09C395AD1D1FD0E7EB49739FC84EC9221F5A0347D2858E9984ABAA2D748483F
MD5 SHA1 SHA512 TLSH

Submit Download

f54654fc-632b-4adc-ba96-bc2450e69ab0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\f54654fc-632b-4adc-ba96-bc2450e69ab0.tmp
Size 2KB
SHA256 05e3abee5dcaa750c53788ab4fe3fff3ffe87129177f359457af4715c0a01572
MD5 b629fef44a849ed44ca5ca013ed2b3a5
SHA1 0bd513db9f63cbf3b99dc4b111c96b5f00a328bb
SHA512 0126173301c15c1741ea351d435bf543869522d51cc952746e18b0ec99adbd8154dd6307656a97cb4fca39a77dc563e9397b591f38e1db6fecea71d8180f5f4b
TLSH
T100510EE05C795AD4D1FD0EAEA49739FC94EC9321F4A4343D3858E99C4A7A61E708183F
MD5 SHA1 SHA512 TLSH

Submit Download

ed2c5abf-db45-4297-81a2-d4730ae3097c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed2c5abf-db45-4297-81a2-d4730ae3097c.tmp
Size 27KB
SHA256 f32879db31a34784b48de0e6d2d6ff6d9b62cbadd8ad568c44fd9a46f068f972
MD5 20458c7929f36b5682ebe6684a6d1117
SHA1 7a6aa7328635109bda9197e855f3277426fc32c2
SHA512 507149a21896bfbb425580804de5bf53002367663a44b28b3ccebf175c49173be2f78a70df9003a1dc847a47b695145e1932f750d6178c01288644ef0db09b52
SSDEEP 384:ntiFzQkUSvf38Nt8TUNTUlIRUQnhxy2PutzTfoBJzAZxYRT/XorL2IpMtUOgL/7I:kFdf3ywgFhLwUB0xYRT/on54UyL59
TLSH
T1DBC23B36ECA8DEB7EDEA4E95A74E7643DEE01123D49C4AD8EAC45D5C00871DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

ff85d014-900a-40f3-81db-9429bdef6ec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff85d014-900a-40f3-81db-9429bdef6ec5.tmp
Size 34KB
SHA256 b09da73901e72950b9ee28ba172927e02bf3c3031347821e31cf9e6d8ed4301b
MD5 9e2643e6e1dc11fd3d573f5e9df9cc75
SHA1 e4a41ec41c218cf6a2707817ce140767ac4387ce
SHA512 01a8d68e104f4e0c383a445e05be6a8cd4764135fafddefe4502ffcf99f804e9c778a04231f6cbc371b4b377972bdc5b4090fa996da98f621e2de0c4c55cd32d
SSDEEP 768:oFdTjwgFhLstJh1o9IR0xYRVMphKVb6y4U8L5t:ITPoCyOhK96LU8/
TLSH
T126F2C3F598C7997BD89E5B47973E6D0299FCC223B4A84A98F7840D1CCC921BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 10KB
SHA256 c862198ec9e54f793971ebff17e04c6a110c7b34117929684e7bc09546520000
MD5 bfff1916510ebcc4b4f6ec83217709cd
SHA1 8a2d6dc9a64ba2c04b0c2180caea7865a30169da
SHA512 80433540cf4137223c3e1ec1f784d9d3855e28033bc341896f01ec525512da178d4a1fb70ac0694f59073a7b0f437bf5fd726eaee43000fa19b2e9975ea415d1
SSDEEP 192:Xwvp3slmrAO3cQqTYjctzMRut0F5Om18t8Bka4QOUx+/gLJxS9HtN:Xm4lUwOQ
TLSH
T1C9329DF65048D4BBC0474869EBCB7F225A6114E538C63E3DE2ADBD0DDCBB0469E55A03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 35KB
SHA256 1c044ca50f938e788cda7c2c5b56fb2b3715b93fb5b99209bbd0f238197b51f3
MD5 452232ac56b1b2b772904b640fb2d2d4
SHA1 4af14e143702a722348f86c4c25d8dc85938bbd4
SHA512 5262fdef273d4329f6d84db47ae7e3c8b86a16c79c497bdac067094b6158ca5ab94d662a341270083c76dc277704b279e3849faef8c9490c73d2d55c4a575d11
SSDEEP 384:Qm4lUwO0bfKullkpqf/6LSRRekjMQVHuh6v7CzXM1rjM4+:QmIqpqf/6LSRRekjMuHu6v7Cz81rg4+
TLSH
T127F223F62008C4BBC186D91CAAEF7E322A61A0A555C13D3CD29CFD1DDCFB1769E65602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67f25776-1e61-4564-8e01-c76f6c6ca640.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\67f25776-1e61-4564-8e01-c76f6c6ca640.tmp
Size 1KB
SHA256 45e99eae671bfa67961bacfe698103efd6f2bf46b0b39c3702a4d2682aead8d1
MD5 dc28dfded7e5cdeed061e4425fdfd324
SHA1 9253d535f2ca0fdccfa355a9e75f68d4827620a8
SHA512 178cf2e00283e9e4c9cf06a13ba60ce8cae0d1a0b6f6de240c7760ea7b9fbc28e1ef9bbf73e45bcb9c72118b379e76c25a075481e2dab63a7aa6bd1d3a563404
TLSH
T153318572F4A47B369C86989771023F4B6F31A12991509E44A2DE0B3C01EB29CA136C32
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 becbcdbf8b01d041fbbcbb3f5884e2a1f7bf2c65639a47ff79eff5886f46f7cc
MD5 92e0de4cea2f90a23f22de1d1b77e7d0
SHA1 13bbeb7168a63f21ddac37c2b648c56c5c58a7a2
SHA512 8ce1573a9a30c63e9370b98621ea86cad76b68e2b9adaea29b666cb25ce70bec2e29225ed6cb3aad0afc91427505a4f0ee2ca91f4e279921c1802a22084c0a21
TLSH
T134D0122673411139C02024730202618C1940C10BD4054400E8289A1E1B084510D12491
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 960B
SHA256 a6a398a4d038181f1e11a9e7f7f2a199e0bf0ab53fb3c4792fadde31f28edaf5
MD5 c0893255d7669836e34015595cdb808b
SHA1 02953f62e1611cb11ea629ef0e5c9add63123e34
SHA512 c79af3b176727553987fc278eb0f8da01535cfbdd7293a84ac5dc1b31f19d846f189e08eba8e8ee500669539239a9b88d7bf39f8d6c74103372436e1efcf8629
TLSH
T118114C28B4D1D27CDF7259B0B9B31EE56D30315401031F87BA93F1399577BE17425425
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 1a59a0870ca2018f7456b93efbdad90eaaec8c19f0d420e136bd5763ba5a594e
MD5 cc5deee5af0f530cb7b6914c7c61a8ba
SHA1 3fb2d24856a3a77a97f36e483f5b2246fa41bfa1
SHA512 f17ccb31823cb42a3410622aca8a68499a9721afbae4ee0425d5c514fed9e1775411d393b7e92259bfc8d3c51d578ed4b2984551c2d1e566fe2f20a86a83a995
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 42965db5f9e1bc3a255f7097a2f12b4e37ab6e88a990fcff789da0873ff3efa7
MD5 56d54074a34c249070d203c5b764fffc
SHA1 fc0708c83af49b7e4697568e5e430574bc451038
SHA512 6a1493f29030562a4ebb90f9162d152ff8d433e9bb327fe3e662694e51d4d10e1474b0b3dc2d19a783a448800e67b19a7a3ff230c945a94831b63c478024fefb
SSDEEP 6:l9bNFlEs1oksm/kDEPDadUTgd81gguxtqlyup6YZ75fOSIe:TLiEokD/dPWOT/FuWfpbZ75fOSIe
TLSH
T1CBF2CDC2FF906432D91C2E7E558643F81F73D94C8D818D43807448605DD24CCC978D5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Local State
Size 1KB
SHA256 e44c48daede329e109d9c431ab4114742daceec9885014f6e322ddfe490143de
MD5 4dda4f198a38a38114a06ded42d5e469
SHA1 379fe2ee0afb821e021d520a828795c8f861cbbc
SHA512 868f448e3856bae5d4817a0e108e6d99c5704d3b5654c599609778181449cae4772a2105f915f8723bccf2fe5dd2985efb2d68464f0be42103d246e997fdc597
TLSH
T1A5216573E4A47A36AC46489671027F4E2F60E17991545E08D2DE073815EB5AC9173C32
MD5 SHA1 SHA512 TLSH

Submit Download

a5409688-1039-4cc7-bc20-73d22198cfeb.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\a5409688-1039-4cc7-bc20-73d22198cfeb.tmp
Size 3KB
SHA256 6f464b47f78be546bc24495229d2b68aa5ba8de2d73c711703cb2dd1aed3da37
MD5 6234838d9c5c30041386b1ac3da4e244
SHA1 d68227f925e42102fae6dd06e4494fab3887e08c
SHA512 eb15fa722bdee50838cf8d804f1b347c56d7f04d7501df985a828ac2e031b0d5f0945fb2aeda16a54a4b3f6e384145d639181bc162711465fd485f80af47091d
TLSH
T12171A536A8A4A93B4DE3DD45B9863F06BBA55126E1903F98D6ED0F1C01DB3D82352C27
MD5 SHA1 SHA512 TLSH

Submit Download

e3c2156a-0316-4a7c-bced-25289aee2b0e.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\e3c2156a-0316-4a7c-bced-25289aee2b0e.tmp
Size 2KB
SHA256 bf2dff7d892162c0400542cff1ca44a412c99fd59cbf7b9ddf07de36e88ce4e9
MD5 8070abe1e55cf6af9ebcb6ea0e8d30e2
SHA1 d5c8d33b73dfc794f8f30ab5a68d78e6ffff0173
SHA512 29c0f66949aae684cac8e341d342754c948a57a20b7d0dddf2efb9b01e1388a876ad205946d563b6eaf09cbd5e0cd642c076c4b8a65cf0a660c97bce1829ccc4
TLSH
T19351D833B854BA3B88E38D95B90A3F02EF39A16596502F50D6DE0B1C00DB2AC2312C37
MD5 SHA1 SHA512 TLSH

Submit Download

ee2b19a2-b131-48d8-a009-d1fe05227bc9.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\ee2b19a2-b131-48d8-a009-d1fe05227bc9.tmp
Size 4KB
SHA256 7f203674d26ac2a64e37d154e4908298e791e0a54c9785e44231f393df822964
MD5 92400b925e46d3d2b73277dfc00bef6f
SHA1 f72887c322a71a2535b3ad8bca65ab8611534393
SHA512 b25df1d768e98c5bc8c3ccfbd031ca37a59ba17882693e30c1d7e70898bf2686748bec7f5bbd5d10976368aad3189eaaa9cbd040e6b8e44877f6c1b4af6b6c7f
SSDEEP 96:zuMu3NkCE+ZfrMGMake8Frh/cInURoDotoN53MrDDfBxwBZ06bt8ZVxTsJlaa:z1u3NbppMGuooDUa8fDpxwBZDKNsp
TLSH
T17B919526A8B4AA374CF7D846B9463F06B7A96026E1947F98D9ED0F1C01DB3D81342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0.745.0.7451137_20261030T040244Z_Player_B8752_last.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T040244Z_Player_B8752_last.log
Size 69KB
SHA256 e55a53eab47c108b38b6774949771328541e8a7490d826e153cf5a88dfb6140e
MD5 53170354dcbfe88800c028ccbae27a26
SHA1 14ce03f0d8689c32323eee50b23ee2f537e90c0e
SHA512 8f124af3cf200de1ae5bdc5c549a6cf649f2303ba9b3d9d05f32fecd6ad94e45872c2a97d97a0599899d8af2dc909bbaf06ef0812fa9b15d4de1403e1574fe90
SSDEEP 1536:TCj5qFYrLMh9ev0f70suVDm4EqYgWsZIuz+8EtjAX9uzD81vPSR6OPI8J9YcLXDF:DD9SVu2QQLepAj+R
TLSH
T1D46385A293099415854E63D6C9FC4A0F4AEBB231BA09A1FC739CE6CC50DD5C0DFA2769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0318ecaab7c9b5287178c98fe1a73635

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\03\0318ecaab7c9b5287178c98fe1a73635
Size 81KB
SHA256 6ebf6bfd7eb20dcfd777ad073aa9e14de22734c425304b49cc49ffca6d134f09
MD5 a3116917e47c70e0aa6e57a1bfe17b05
SHA1 9bd866b9680c996a6141c0942cfdd6ce981b2c49
SHA512 938510527e204312dee47bedefcb5066a450349506fe6b8979b60f7accb67566b62bb4217e9e732fdb330df0f732f3cfc6fb234daebd414c2d69554df628c555
SSDEEP 1536:ISLU6zA98GpXao6fcTQdoOG1XFMU+3EZsWcmdAuP0PnLr9tvvQJnb:IS46U98GpXaz0cGfhWmd7wtvinb
TLSH
T11283F1B238C30CDE06456D72BEE512C882DF666EF827A4475137761F04A07973B8BE52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0353695bf0629b60998bead6b12887a6

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\03\0353695bf0629b60998bead6b12887a6
Size 9KB
SHA256 7a54a88ed3aa47a89e9e3fba7063fa8bbb7a73db00898e798cc4d2c8962e4f77
MD5 05e95dd54c84561965867f1335bed26c
SHA1 8db294c3a22f3c3b1b68f8b663333aebc4946437
SHA512 5219b7442395b4aae56294e051013c5f9362b03c2111a39d0fe8ab734fb39f3c99af148d04b8f6a1e4d193f2530d36898e500ef9835e03bada8d4ffda36e2f1b
SSDEEP 192:GyCeQA7cMrxYafswXmbCiVzVce4H/evYwMxsYQYe0x/rV3v5jHKvhUIQD4Afeo:GyLJLsw6CiVzVcan6J3vFHsvINeo
TLSH
T191129F2F1393E91990A4BCB0B958D739009AFD1315C81A5BCD2B8F3F1853C6649AEF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28aa409b9f4e065c5f0fbe86f133a475

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\28\28aa409b9f4e065c5f0fbe86f133a475
Size 11KB
SHA256 2f65d66270079a570201abbd3fa8cb7a0ed6eed790a741da8b53b37a7af66498
MD5 3ea92a51e4deed8fcab896d3451e4c03
SHA1 d9f74a613d4979f0e638ba23fbe3b0a56f9c782f
SHA512 a492814c542a56d17302a6dea05346d084e772394b8ade7d54a2e51c8f0bbac22c9e93031e6d4daf09ff1451fc82823325949cb7904d3fb24e09fb7cb56c524d
SSDEEP 192:o6tmXyjSnSne0JKfTehzkvZp9zbNp1Nsvui3p5sR1ai5gXIsWDrmj00K:hTjluSe3jMOai5gXFWuI9
TLSH
T1D9325B23324B5E66F1CB6A375835739181B4847D880B6D0BFA1B7AE0FC6B2026CB575D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e3b603ec36e99de38d531a18b209e0f

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\2e\2e3b603ec36e99de38d531a18b209e0f
Size 10KB
SHA256 8720ae013800ec1882d80d61fd658d38ebcca2952665bc461e2422af21dc50d3
MD5 fd8fd00b85542b151a3c3d6893525586
SHA1 efdf7f242d7e0021fc950ee29de8cfc1c50ebfa3
SHA512 2a7f2ea879e6ff79092eec3c23a6226da78b3c5531d942bc819208a71698389370652ea35423758b829b580042b1cce64f45effa498bbbd6dddefb47d20773a6
SSDEEP 192:CNO3LlhwcrbvrjV0EGQXHGJWZvwx6hZTZyQmsyKmsdVn8sZYBI:CN+y2jvV0kLhwMZXmsFTdVn8Hy
TLSH
T188222B79C3DBE6B6E9109B74148DABD5C157EDD1BB902AAD8CF058011B3BB24C76900E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

301b90909af160a00162ec2cf45ea709

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\30\301b90909af160a00162ec2cf45ea709
Size 11KB
SHA256 24fa323acc8d14f792aee47cb6f3631a8553045bc76a61badc33e4635781d0f5
MD5 5b6bcb0428312f9a4cd4ef248cbf14d2
SHA1 3fc72f0e46b8a1fdf4243f45337013ba80f827ed
SHA512 b56acefaa7c5763ec555ec8243fac2eb8e241192e9778b0d23eb0a8e91a3ae01666888ed96738a52908552d53078cabccd4c618e9379d5451580e40f9c71babb
SSDEEP 192:rUfwV1dsKeoupk2riNFkdOvqtZyVHM7VyL3yVThqLqo1GJzFgWYgf0MMhtpuUw9N:swlaoOwNFkdOv4yVH8VyL3SMB1GJzFtD
TLSH
T1A842EA5188CAADCDE1ABC73358808B2548FE5C253922FE57FF7BACCDC97918015A50D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3588e6a491c1a7ddd4bc3f5657d0bb00

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\35\3588e6a491c1a7ddd4bc3f5657d0bb00
Size 11KB
SHA256 e0b6dc0ec94c8155cfa4ff33fc7c93a47eb6278b63497da858659c2a8bbb99fe
MD5 91c2ba659dfa9c65ade6c4614bb30b43
SHA1 e0c1d036c8e974b4b88993d0285a5149a1c5632d
SHA512 215cd1225ee3d6f4ce1752ae923c78cad49379b141adb681c7616fe6145dacd08b01e4438f838277fc00e1bca96595675a365495356f38d2918e200e0ed73912
SSDEEP 192:PFnyrEFGfTE4QmgBMJ9xE2zbJp62m2Q65H6B/6oJSgTrNno2lE2CvVL54:PVygMTumGMTL8jTS2sX4
TLSH
T12D423B01205EF57AE0E767B504597B5292B8CC1A9A076E037E1677E88C6E3340875BFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

372f945eb978f9d6e480bd6bd4aaa2ca

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\37\372f945eb978f9d6e480bd6bd4aaa2ca
Size 21KB
SHA256 6ceb78f69e36ca681ee6fd56fd4ea7e527a918401ec57254cf5563a74d3e9dda
MD5 ca87290c316d13be11e22294dea9744d
SHA1 ec9a54f53a7490cd3d984e2ba5b63b541209abfc
SHA512 3fb6eeb00af0f300ae7d8a478537365b280ddcc81a28141519d019eb86c4fabda7c877f9415b660becd29d847134b09b0a3c1478eb40ad8a46cfada05276eda5
SSDEEP 384:Yn05poeel+jmlMKLSKGcXcd0AM95+d7Oll0Gpnd51t41NUHkM4sAddE9lEeM:YnkPrDKiocd095m7OpdDtw6HkMLAXEUZ
TLSH
T1BAA2E14BB1F2604151B1A33F23F43CE9C5E71598DFC30E2A9D12017A2E589CA9177A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38875b3f57084c8d1ca09d70194e6303

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\38\38875b3f57084c8d1ca09d70194e6303
Size 9KB
SHA256 10e9f7fbbe8c2b5a0698e44d021942fdfe2a0c3c2e64a4c72b9af1c9dd10540d
MD5 b8b91f5add29547f33d7fbe33ba46ba4
SHA1 8b9b8dcd07f7744995c52855af8a4ba9760207e6
SHA512 46be31463c69489982de2eccadccf900233904e3afd943910e9b614c8880d53299ea269dab86636d06dfbeb87f9b80313c4fe0f40b877144dacb82bd450a92ad
SSDEEP 96:SOJbMQLIiGwsiPCTOEuvr6Ev7FBBlQsm1H4HJKfcyHxLjMR3akcWeFDUhSzqvDfC:SGIjiGwsx6lMH4sTRLQSWr1e7p5J6Ay+
TLSH
T1B112A53C793C4C72DBC1C13A683217D36523A9C0077D7E7AA5A6EB209CE84795E746E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ebf05b200a605c8d3bdbc53ee90059c

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\3e\3ebf05b200a605c8d3bdbc53ee90059c
Size 24KB
SHA256 ca466acea530ac429ad454313ff0b852dc722d0fa425498f7d2d782001775e06
MD5 3a76ba4bbde057c393f7b253852116f4
SHA1 3997bd2a95dc140f641fe4efeb5a5ca508ea2dae
SHA512 47209e550f2bd3501438b450087688d32932b445083df5f8099657b50163bc1fa673950c19398ee7499bbd545d2cef0fc60b82dee87feac5825832b189ac90d0
SSDEEP 384:8OnesOW0nc5jXwoZKR5cq/xiyiD5p/GFzQejLxlV8jpc8S3FzdjmTprEGkAuf5uJ:s7mjXj6cMDlp5lasZcCGkZ5+
TLSH
T183B2E12131F57889C6070EFA37FAAD287D2CD411E4869EF3722F78761972C3445E2195
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46b4cbe084f0ff6b3887277b0c81c09c

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\46\46b4cbe084f0ff6b3887277b0c81c09c
Size 12KB
SHA256 85f71d7f515ba320ccae0d3ac44bb9e4920f0397499fd24d217fd24629f53b0b
MD5 df09faff33a60bbbd30bc2d784a79e6b
SHA1 164947d7932b0b09960e364e026a6008391f96b4
SHA512 76970ba617534bc846faa5b54044a92f48e945c408935c52e7770de490a21d0eefdc9a2b265d01ad612bab6c0a72f3bd22af0dbcb3744b9a215c23404f5529e6
SSDEEP 384:rPaU1CRzAxzDJxP5MllrGZj3WaG+bdkGDrlg7Jbpqz/9M34wlb:rPBY0kGdrLz/9u
TLSH
T196423BD578EA0014F4CF6034FDBAEAB1C328A5F2484A542391474ED9B2AE70CE576F93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53005685ffabf7460740d2af989ed970

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\53\53005685ffabf7460740d2af989ed970
Size 14KB
SHA256 3edad0cce97fce8009c1d617658032869172d4864f3a93320b057e701f54b1a9
MD5 7176649c2365009bb5dddd3695fe0fa2
SHA1 8d5dfa5f181a9d089d01c06c0637944e1ab1b45e
SHA512 484c80be6c2236d60640ad8b4caf32fb6bbe1fe2b4e14643733c158ef758c1e17dc9815bd674a572b5657ca3d4a882f9bae42d5468db10a8a4e114dd7fd2ec2e
SSDEEP 192:qZJoFTERq3idHvmKzGMPeaOgAHtcZ5skxpAgv1OnZxoo2xBbj8///lNdR4OmhM:yaTEk53aOgAH6Z5UIj8dZ
TLSH
T169621AB914CA3DE2CC5E8375E6277670A27A0C587865D78BFC1AC78224D341A38972B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

636f435119e66b37f83d542b3c1a1a6b

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\63\636f435119e66b37f83d542b3c1a1a6b
Size 10KB
SHA256 ec08f0eb33e0fe58686d96e6933cc7556b322f02332d75f7a15be04bcd6e528f
MD5 cad120c78ab47f146c7549a600334ae2
SHA1 8908228c76f9b20a242e026ff29856f655bd8e44
SHA512 c45917ca7ba24cbb4aeb43b6094a31d4bcc702c7d1a802873ad4b439107bc010bbf951afc5e05018b14f6b76eef7dfe47c9466790bca175c2ceb2924a4073f21
SSDEEP 192:wYX7AZnvDIrG8GRcciEtps+QcU321cqg4+2j833/q1oVLi0:wYg8rLZEta+Qclcqgx2a/gKR
TLSH
T131223CBA39C8C88FD841EF7116969A16C0B7FF321B53E23D06A4104417BB12C5B9DF2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64a240980708904ab91808e772678cfe

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\64\64a240980708904ab91808e772678cfe
Size 19KB
SHA256 b57ebe65d26a141cfc4992fc3b55b41431009ac346922ff2e8c97827f027999e
MD5 1ef223ee660d5c8c38a97cd2b5ff8ef3
SHA1 68a0d40d211f7eeefd0d8bbb8e7337cfe98f4485
SHA512 220586466cd7ab39758a9dfbbb1133da3168513a850ed75d22e747a075b2d76fb3b240db2a76e1b022b9c86715aedc1e7f6c376149dae0c5f7b9bf4fcd97751a
SSDEEP 384:M7ICYg20uvW/AFKVtHuPEwvUVjk96WNt4HGj7iSa65vMOY2sLcPs:RCYg2gqKVtOPEJkT7Xj+3eUOY2ock
TLSH
T17892E19D4B2D2C46E65BBBD22B4338041CD07FBC801FA405EE27B675AC56D50B6B3B44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

660e97601933fb06d0a0dd45053f9068

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\66\660e97601933fb06d0a0dd45053f9068
Size 30KB
SHA256 41f19fbdd69db6cef21403f0f6e0d5db83d66a787aa36965de8f216fec820de4
MD5 57188285a516fb2a964285a1586e9893
SHA1 f4a45bd7d7598bd3ec6321c1e7a0fa29d429c74d
SHA512 95e66081c8dc4072b9c375051ccaf462aa2949c76d60828f7b41d1f2de4d1f34ee9fbd729b8d4e542478faf39d272390969c45e3c3e7f85d3109e0674227569b
SSDEEP 768:D6vfDgWqd4fvINYUcCDYeDHSoE6VHwqQg1aLir4l8TBNIQ687yi2:uDkLPcGDHS9ywqQg1a+4KNG0m
TLSH
T135D2F16782E09170D8CCE9325DCB0B955514FEB721E7E7ACAEB40D563A04B92ACE710E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6901d3d24d71cd772a940b496e523579

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\69\6901d3d24d71cd772a940b496e523579
Size 14KB
SHA256 b905c6f08ca5b4dba26cea94fdccaab69a0ef232b6eeb23d2081b217745ea876
MD5 0c4746b6bf593b00efbea17f903771bb
SHA1 555bc5a2d1a4f28149b70399faaad562bd7f6e99
SHA512 afa6b6e50ac13b4f9fd08af89d68504e4d97640a35a282e3f13cba74cb15e07214aa98ae91cfed2f0fa20ff38751cfc8547c06233f9b049cdc6493d561258a7b
SSDEEP 384:1hk94v8TNX6gqv8bvzxZBgdA10Eap4Y8Z:1Zitqv8rzxZqq10Ea43
TLSH
T111622DB710D76AE9CC1A4134DF387B7853BB2859B413CB87F896C68174CB41D2862976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73c19485f26e832850c8f840d6ce5ebe

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\73\73c19485f26e832850c8f840d6ce5ebe
Size 98KB
SHA256 b891789d08036218aa7a34c28e95b23230f7979e7f2f5ea4b778e6538430923c
MD5 a63f7479a59db184027e43d9087bc2c3
SHA1 3ba3f917445e099557818d7424b3a66e52a87e6e
SHA512 e25eec5069fb662afdd3e730261f2b8268fbecb0196c0cbc5b78985fda8ab495a9249b6dd8a6568fde117757cbdf36020a1deddc281eff4b123cbb659a59392a
SSDEEP 3072:tUnkk70xthLZXdZ7oEfwsAOJI1j//VNY9s:tKkZxthFNZ0p7lbdN+s
TLSH
T13FA3D06736ACF1E019807589ED9393519BEB80BCA6853825CF9B8CE577D8338DC5B4A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c00f912a3653ed8734dc696c9ffae78

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\8c\8c00f912a3653ed8734dc696c9ffae78
Size 13KB
SHA256 7b965a21c50520e68b688b8858ddcb3b057689e09f27af3eeadfee23cdaf8460
MD5 c4ee0808b9c4cb691859475d311e17b7
SHA1 c6cd5ab967bdadfb4983e42cf4f8366bcdec194a
SHA512 dc82878f00089790c4f6871cbaf41f1a5f31a967d20311129dee720c059d9d7f7a946c82409a7bfd7b2c255b9b87bc19ea51882811975d3e5bb28ebdf46eedf5
SSDEEP 384:AVZ5/pUvb9lRsQeBGqNqtr7n3vRhlYstcDvOp4:AVHqvZ/sTfS7blYstcV
TLSH
T10A525B75661608A8F7FA1D7128A202C1C6F3DE7A2F8DFCA77A83356514F0BD2D320990
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9664223dc6e59e2230eb5f8d318f9fe7

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\96\9664223dc6e59e2230eb5f8d318f9fe7
Size 38KB
SHA256 9c62f2c1fd9869caac0b840513f56e86af3b5072bde151d84d90655e07cf970d
MD5 8ae7c757fb5ff45dbf2e17bbca1c12e2
SHA1 bc5f50060e4de9758a634522ec964c196a6e68cd
SHA512 6819a025836614b53d2333813ba1f1724b139a63d50163e41c78443ad8b4733a65037cefd11a2ef298d245236f2b749e589af6224edaf02fc9e39a82429f572e
SSDEEP 768:5CyKd3O59MRKGgYBupGrs3v6OOJ1Vy6wfLu62x2e+keX3NUonkyTR+exSlaKuK:5wRyMRKGgLMrs/9OJuaxYketUonky9Ap
TLSH
T1C60302144614BD69C2200CA5C0C948E56BB1303DE912BEBFF939F28EED957334D55B8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7e62c2b88981458411c7f19a510492e

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a7\a7e62c2b88981458411c7f19a510492e
Size 345KB
SHA256 7d749d4846325c8d0d22391c085bcb54f6cb1bac0eb8e3bd6333a91c35687b8d
MD5 3198db4853aae8e698becb0b37590a72
SHA1 c3eebcc6f95a8736f019a1d1b9cd7b5d6e94435a
SHA512 5aeb6b76bdfe9e78c9495121c86a83415438d6490db39da2fdf63f10696678c23b4982ec8dbee0477283352d3f725d0b5c08b81c59dfbeb944025b7efe777bb9
SSDEEP 6144:6k5HIAaHlzJTPE7l3Ov5VlR/8o1AjoG5b4FpGdMsiP5K1fklYNKxoTx1FPqTZoK:/ajEEvlZvABVMwMsio1V99i
TLSH
T10A74F116A28DD087DCD8A07665499933E18ACC7F41BED911BD00B95EA83DD9F03ACFD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8deb451653a8dc032e58371da42c9e8

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a8\a8deb451653a8dc032e58371da42c9e8
Size 38KB
SHA256 6be7528e04fc595a389002f4ff4a962b6fe61c7e2212038699d3ccb931c4c926
MD5 55c5419c40dbd4b271aff44d67291bf8
SHA1 ada6e60c594f8a5b0d538dbadfa81282b51b4ac0
SHA512 a7cba71b6641a81a13fa1639d501a4e1ce2281fad4f56e0988ac08524411ace226d0acce25fa660de2b385ad9ed283c51f25a8b76d9ed19a2dae0c2996e63457
SSDEEP 768:DLcO5HFzOMVsViQAHNLTiYE73aL/UgZxyUf6TKtNwv:jFFVu01eYoaL/U6xZgv
TLSH
T1F303E1CD91B6AFC6EA884AB545CA138F35DB141672BF400D418F43873D263825B6EFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac0bc53ca71c88821b30e8ac2a07a6d4

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\ac\ac0bc53ca71c88821b30e8ac2a07a6d4
Size 25KB
SHA256 6aa43f838ebd770b0e83630034d6159a09de7c1a922caf96daa4a51b204b7c72
MD5 9b08914dc89c969ce93939215e91e786
SHA1 9cd99b19e24b515736466c432618261bff6f39d7
SHA512 aac94878bc7ed065da0e065aa539ee5941b6bb6e21efc4e80920fcadb17cbb396f5081a537f47a9c67708086359a3a83a7dba41ba66249500b9b544ce07fb053
SSDEEP 768:3n92HN75ZHnFxSB6+J4iiG/Xxq9OygVXKjx:N2rNFyNJ4iiG/k9/wXKjx
TLSH
T141C2F0A8F0CA2FDBD7F4B3AF8E79003102A9505A1B897BEA184E0DDD25FAD255191037
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0629c844a8085cbdfa3b41ee00a87e3

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\b0\b0629c844a8085cbdfa3b41ee00a87e3
Size 30KB
SHA256 de9d5d218cf89e95a530ad775348e23bac9173fd65d0e83942ec4e05904ee797
MD5 862cc1e4b578c547d9130706ad0458bf
SHA1 8307d6441184b3a932f99d6df51a54e40b1b70ba
SHA512 3f8ec15729788dd2ee2fcdb9360f4749f2b16a1afe33bcb22a720205aff09d7e72178b3a2b7447a0a23d7cafe35a0da5619eebaae534a71f3ea7b2dbd3219f58
SSDEEP 768:gB/BAm+MoK7zHCZtPo53u5MoPncA4kzisT:6Z5+pYz35GMoPndYe
TLSH
T157E2F1C5AFEE10F84204EDA9E9834EB5F437DB043E3BD60C12A0D9A1D8C8152697EA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b51ea373e68626d44142e61e5e3ff0f3

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\b5\b51ea373e68626d44142e61e5e3ff0f3
Size 46KB
SHA256 801326bc3a13679d8e474f8891c10d2f7e665a5c60d797d436f3e55f4a7d8239
MD5 9fc5022bf325e2a1bac0e244fd91d2b2
SHA1 81a3ad5d7547a37a034cf5d04d27d05ade46b539
SHA512 b6f426ed0ee03aeebc4a6a87c1ddbcdcfcaf6886a832e7a8084f4d9389ce362da93aecd08954458efedfe36acfe017dcf7c671ac832e04bc2df9baca6af5839f
SSDEEP 768:27BQwssOSOnshXiyNZ30knr11dFvjVBSeiJDtq9/hpb42qqRXDVn0T745EIFoNo2:27iseUXDXP7Vse+Dtq/hp0kRVMM5EYiV
TLSH
T17A2302A715B0D0C9E907747EEFB37B817AD6004F072DBA740AE2A788E0F016D591B2E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b830727d848e3487a24c2c79e6847b51

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\b8\b830727d848e3487a24c2c79e6847b51
Size 33KB
SHA256 35849a0d911079ada35aba4b3f46dddd5916ac9fca33fad85e1c9d005eb1228c
MD5 553620c15d5440230ce1b4246835971d
SHA1 0d62f1b73ddaa135fd9120e1cfabea4987f639c9
SHA512 323d4c61fac086dfcec8509f0c01fc167e2a979f97a82c86576c4a176d8f993f0b929ecb0117653c6a2576f5db37f3553a8b5ff71043c1b7178db3901341df81
SSDEEP 768:uiyLxT7CRAJKNBQ11qDUr+5LxCQkPchPKA28jPXd57AhiTwYu:uiyLR7uBUa5LxCQkPmPKArjvd57AiTwp
TLSH
T1A0F2E1AE725568C7C128FEBADBE39BC933F464264581B48A493914D28F2B2F0DC75F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9f2c44d0d350c45cdb889a6f77a14d6

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\b9\b9f2c44d0d350c45cdb889a6f77a14d6
Size 9KB
SHA256 f851e90ee50cb37464036ef5bd7b287d1f07dc5f97c6abd080b152affc0797a5
MD5 4a27f1ea55f02e7d5db5e4eee9f16085
SHA1 30f541b164b5b05b87d6baa1d493f599b323d099
SHA512 de86f6d40a9d6a169e32fb412c057189eabc6f49cbb79b409df2dc83a7cc88d4a9457b224078e8f33577096469ecb809884af05593d5c0c8449ba095892b4c3a
SSDEEP 192://7Nflf0aZy5FbI/agA7+g4jAf7xwLKX5Lkb36IQrYgd8vOv:R96qaR7+O2LKXVkbDQYS
TLSH
T10A127D2E33135374E4B1B83CB735A71609992C57128C2AF3CCA23B9F195A4EB25E9E15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c914c4a77ad4bb1c9f4307b1c4355abf

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\c9\c914c4a77ad4bb1c9f4307b1c4355abf
Size 7KB
SHA256 327ab3db1dd234d32b8fe3fb4d7093e2ffbd38bc893390534d3288ed2db3bc14
MD5 975b9e7a17ebc340fd25accc72d958b3
SHA1 05c027a1564adbcc5bba50f6186fee42de3df6ef
SHA512 6aba1949f8a431c5415d865e8513fe705fad4bdd86d0bb530fa8c8ebf2020f6ecde15862b0bbbfc162b2324f205d0fe2a1c77f259b7485bfa96913d1a666289a
SSDEEP 192:HOwOd6/XlU3ARSyhkTzENgh0d/+JGhHHoh8XUqOnDIx/:HOOvl23TiZkGd8A
TLSH
T18EF14D72321EBC8BE16CCB3150B9018ED436D7C6A88B74B68790C67BD6B5C8034212FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce8c807faf790519ca339d3dee5bcdeb

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\ce\ce8c807faf790519ca339d3dee5bcdeb
Size 11KB
SHA256 d8c1014caad40b7558da66dde12ead91f3e5042ac17b8afe0ffc7436427415c8
MD5 a2740b69232b227b95e581aad7301f8a
SHA1 2a9f159ee7491fdfc8a4dcca1ca9e5d0d0e044e7
SHA512 a43ccb6ddfb686b942b5df961907fc15f90be8a33633faff44118866a8bc6ca898600d62f1ff667095af15d2fd8ac204bf96bd684b3b5f9cf792f71933387ea5
SSDEEP 192:pcPtK5J0hJFcPsW6Z59o/pOvpzecgSxPdyVGLKZlL8XlZQfrqlRjAU063zXQMxG8:CPOJA79o/pOvkcHxP8VGLLYzVx+zXQMJ
TLSH
T1B142F9F1CE5A6D8AE09FC33794606B3295EE48601D22FF5FAB2F6CCCD4360C1196509A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dca3126d8935607d70d30ea914cd477f

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\dc\dca3126d8935607d70d30ea914cd477f
Size 12KB
SHA256 11699af2d3b6e73d80e607047fc5b48f4c90db6641a4cbd4193e739465aa1edd
MD5 901c8b1ab25df8f3dd680897443b7dc6
SHA1 3c33f3bd83c20cb61241c955ba808ff98df62610
SHA512 224232826668b2c20d5f0c80683c32af8f9bd3fffd424bcaa3b85771f7c692fcd1b5e7fdf191fdcee3a7767472de1336a730a2168ddd0f5346a92de3d4be3452
SSDEEP 384:lRL/HS5rIotYxzHaAtzqll5z5G+/9kGLn33l7iu4hFgSES:bjHSBh1n3tNYg2
TLSH
T199424BE8306810C9F4DA44347D7D6EB4D72CC4F26616ED07D4A7ABDF81DAA05AC28BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e92b2acffb269d3b3576fb29551c27f2

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\e9\e92b2acffb269d3b3576fb29551c27f2
Size 21KB
SHA256 d8d4fefb9579c44755171ef5404341ba51617f9f8198f477c60f24937be6ae6a
MD5 93bf6e885580614ba5374e6453977965
SHA1 f43712d4a6885c4ec05110513247b8bb637dab55
SHA512 cc201cc7457038b0b987ac8e0cb7250257e05fde967ffe4b36309f25a507eb1707c79a6c05780d93d007313007998a2a1ba880c2b2e5b91440a2d414654038c4
SSDEEP 384:KPZ2GAouomk0cv5I3Bq92ReKejYLq9Haf6d27KU+/qF78SWjQ:KPZ2GAo5mk0cvK3Bq90eKejYLcayMc/s
TLSH
T18BA27D6435709C73EA84DB29D9A0DF8938EF21F9844CD27F110965496DFFC2B6AC1E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f06f6889ab98d336af739494a266344a

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f0\f06f6889ab98d336af739494a266344a
Size 149KB
SHA256 b276360dad838afc61c15944e4fade9627dc392fd3ec2e93dd7da8dd82a25475
MD5 8d7cec15546940eb13a7888c129c6664
SHA1 c7f72eb3f9aa6d219c0bb7ef449b939291b71eb1
SHA512 30c67384132825cf240695b0eda0c32f5c9f5d018148f50c8f8df82bf900cba555870a4f6aa8ff09b9cf48b977e987375cbf433b78ac1957edd87a5b4b83121c
SSDEEP 1536:Y5PsD/CNEFBR1tNr3nsE3B26Bhuxf4GFco4LvFwk6q7HaVraEtXhWzUwbJOK/pRS:IIKE7bsC5huGv4q7QaLQcXugzTe
TLSH
T163E3281CD763D707C93A3578DE52DE8F5823AD4B0B3B2159E6DB3E8B29923389497101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f12e1ef59e129fec5ac26146566656f0

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f1\f12e1ef59e129fec5ac26146566656f0
Size 7KB
SHA256 91f7d1486783d288fd6c5253390959e2f98f8cc9a9cee9d393e651df0bb4820a
MD5 e8f0084c7766a496ecfe70efcf4fff5e
SHA1 8e22146e1e77b1c4cdc99eae3e785fae64e891d5
SHA512 5e8db332d3855bd7e381962049b766365d75012cdb56ad318361a9787ea2330aea2d00146cff71d56a63c1930eac1d8e567d47b8b18d2d5ff0979d1f637a89b4
SSDEEP 192:52DMsqQznn4hQhV+T6G81g4ijJjn/XI2Wj5Ne9k1Zn:8DMsqQn4hQhV+T21TEjicu1Z
TLSH
T1ADF13C327146A8C6F0BEC3E3D95BD6BF20165CE2ED8B183CAA81D6BD5F36C40E4544A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f55a79bd8377b6fc4bb580f5e61925d9

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f5\f55a79bd8377b6fc4bb580f5e61925d9
Size 47KB
SHA256 35d8500271abfc50cb6425ce92a7b670ce4ed87914949b510fac731656ddcf35
MD5 6c5ac859328782ed1ae44efad459a045
SHA1 d33b72d03682b5c96b75058be62ee79ba14641dd
SHA512 0b6c85d62ef3e50a801ab6942c068361dce21b055607f463fd2995df6b4a2dcf12616771a5eabc742899406b0e5ff0107334f9c95e1c899abd8d12b51448785a
SSDEEP 768:TcceqoHmEdBpcSxufp/ZPU0PkwrxPAxv4ccaOKkxbW3brmeCbXSe+dvbds4CO2a7:xcmeBaHFHPkwrhAluxyrmekSe6je4CO/
TLSH
T19E23E1199173CF8F628A96B0326F54494AA04C54C6E4B69FB8C1C423A75E3327CCD6F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmp-4752000007.tmp

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\tmp-4752000007.tmp
Size 41KB
SHA256 2bfc760e13e5ee10988b31d36b2436dcc556f5a86809fa7fc07127ea50644889
MD5 97feaf140b00d77ef693efda7c786718
SHA1 779f8dcd7ae0f54f6de0778270cb79e139a2bc8d
SHA512 4ee26230f2596bf1bd9649414e7b40e20d74aa9f2eba2938a7b3792d3cca0189a64471e6247f17e0491d778b98d4b6072c1fcb4d491f989087c3dcbb1f60030f
SSDEEP 768:T5a5DWzd6+cMN+FTJ5m/9uUKkR9sMJtpNrHnSjuhK2mrHiGe6PmibOuYzjwtn5dl:la5DWzd6+cMoFTDm/9uUKkR/JtvrHnSn
TLSH
T13D13F778987E508AAEF2E9D25ED26FC3E429D741F9D0C5AE714CA329C7D0314E887316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Module.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\Module.dll
Size 13.0MB
SHA256 af562dab8a2005390e556c4a98dc1f34abca07661d3981ce81f35656d77b110b
MD5 980e58fb205cdf39288b88ea675472fe
SHA1 82e04b47221ccb93151f021189f5b43181bd2605
SHA512 46da849b93f762a5ee7810e7cec11d9ff2a1446a8c3d4f74ce21a2ea5749d458b4508a23b96a437bdf64c32e40ba4468f3baec01c8daae89318a9e2619d3305a
SSDEEP 196608:c7LfaClwBXXy7E1Q9Y0cH9nsssitXrKr0KCPud1F06y+7x7U2:IaNVyYwY0cVlHjPee6fd
TLSH
T174D60247FB45860EC813DA7184635B60B366AC215B6653076114337CEEAB3D88DAFAFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.dll
Size 3.9MB
SHA256 8195ff1c541f5fdf7aa321b8518c4e475b5ef9cf503af0b25c925bfb6102ca31
MD5 2690933c050fd865d4fc06f5b5c7874e
SHA1 5b7c23d93c22a06b139784f7015172529d6f5fb2
SHA512 e48766308df7d0466adb8e3bda3686935f153da486f91e6ec69b18527a902a2af29c4fd299a68b9dbc9668f8c4047b97207f1f91feb8db0a326de5e5809028d9
SSDEEP 98304:EUevny2mWa048LMl9M6aIVhuMlaQjDyKvOPDR1PmYGDt8Y:YQyMPM6PVhumPybd1OYc
TLSH
T16B16121BE7154D56C41B9373D0630B963391AF0A0360FBC73603AAA56F123D9DCB6AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

159740fd-a9f8-43a8-a1ed-79d2bf1ea2e6.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\159740fd-a9f8-43a8-a1ed-79d2bf1ea2e6.tmp
Size 3KB
SHA256 132e10658cefa0ab9cfa5bf083d291f010e328de8049000fa3d693bcbe1c9023
MD5 7f7f74058b34a86ce0b720a2cd688345
SHA1 66ab6526d087c384045c559d26ef1f5e0190b593
SHA512 32ee1da07bddcb92a3df92b4766329a52cdb5d913fd81934c6cca549d7b12d3af3ffd27e170b65a18a147056623a0cdb28ba29acfc8ae06edeaf2968a06da0a3
TLSH
T1B271A6376864BA375DA29D01BC863B16F7A95037E1C42FA8D9ED0F1D01DB2982302C17
MD5 SHA1 SHA512 TLSH

Submit Download

39d9398f-59f9-4c1f-89ae-b3fcdca7983f.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\39d9398f-59f9-4c1f-89ae-b3fcdca7983f.tmp
Size 2KB
SHA256 f05fd64d52c83e7432f57bd46e885a67254b68f6ae38ffe15b94472903ee4524
MD5 b5bf38a98451594544569a668c4fb9b3
SHA1 daa3d238dc2edcafd61c42debab6888b8a48b0ec
SHA512 8f80d60f0ac46731dbe838cc85938143a39ee13121a3b7473c678d088e5e9115c8f616d7e44d4e4090ec3c4181b707f8dda93efd7c2c4f651f1f05b69fb1a979
TLSH
T1B651D573B8047B3759A28E54BD0A3F26DF799061A6911F64AAEE0F1D01DF59C2302C37
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 74063a438a842b00d6cb4985d778bd678926b801f666a1331cbf730751be7737
MD5 054d6482678707a32766af578b06d59e
SHA1 63756e9d8db17330a28b049058a20d86adbeeb6f
SHA512 fa7c65588c8a58334b1e0a820d49868a0fe43acf6d563a767cdc3be63f91badb7e2202ad2abab994aed20959329006b14b210db8b2bf9847e7ac54015fac8522
TLSH
T182D0121237514578C01030330822611A1941C10F44054000AC2D951D1A944710E1A4C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Default\Extension Rules\000003.log
Size 38B
SHA256 1c43a1bda1e458863c46dfae7fb43bfb3e27802169f37320399b1dd799a819ac
MD5 51a2cbb807f5085530dec18e45cb8569
SHA1 7ad88cd3de5844c7fc269c4500228a630016ab5b
SHA512 b643a8fa75eda90c89ab98f79d4d022bb81f1f62f50ed4e5440f487f22d1163671ec3ae73c4742c11830214173ff2935c785018318f4a4cad413ae4eeef985df
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 d219eaa44cb29b67d9883f698e84b88fa54fe6cd5f76c32654a4b99a23707aed
MD5 6d047e90dd7f85fe20557adaa567e4c0
SHA1 a195134d66a7373f5ebddb03decbd0cf6509a964
SHA512 ba65906d90a7f2bd97d9281319cce424ed03d36df017958937723091aa6356974a9e49192c07d602f2a0f95146dbe8ed072c87c03b2f8186395aa0a643adbcb8
TLSH
T1A22195B7D8943B327D554D20B523BB4A9EA4503971444E2CD2DD062D029F89C5727D33
MD5 SHA1 SHA512 TLSH

Submit Download

af91707d-540f-4ad2-a942-f207239ea264.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\af91707d-540f-4ad2-a942-f207239ea264.tmp
Size 3KB
SHA256 5f468eb003e33405635b269c55d5fedec3fb4a806c49791df3d5be1aeb7fdbb1
MD5 4e3d9dcc02428fb9f0a68a9e76ba8b32
SHA1 8d6ea053fd0b5317a6430660b9e5523f376722a2
SHA512 edc66510b3b9bb3f4f9ddc46a1fdfcfb0e54aecac42c43461b88d874520bbd370df0100f8b291205ea60fa69b38740c167f3a8619fb0cb7e1af1dd64ee6d5b57
TLSH
T18781B5366864AA374DF2DD05B8863B16EBA99037E1C43FA8D9ED0F1D01DB2D81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

e233ed1e-87d8-4af2-8bb7-ff2cca1528f4.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\e233ed1e-87d8-4af2-8bb7-ff2cca1528f4.tmp
Size 1KB
SHA256 d11d856e6d40afe34cc549c61136ba77c75c301bb5cbf1fcb780d2e3ef2b0dfb
MD5 7904b6f72b288693d65271e5ba601f23
SHA1 564f2f79bf81208b03dec2d93bfacecbe3d77ba1
SHA512 ef8ff9a8490d724bae25a0fb2081b51d6c1d76e0aa83028f0664a46c199a84c2b56bdcb7ebca1c5370da32a91e4217bcb1aa451a946fb3310dcbfd21e73e5c75
TLSH
T1FE31B5B3A8903F327C515E51B5137B5BDF65103AA1444E28A2ED4B2D02EB48C662BD33
MD5 SHA1 SHA512 TLSH

Submit Download

luau-lsp.exe

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
Size 17.0MB
SHA256 3c834f9402c82681ef2b8cc171c769f239eb094028bb31469296e1f0f4c489a6
MD5 8f890ca7382ce4517422a73ec3c432b0
SHA1 0a69749e532f7bc7a08a09c711b8d87149b22876
SHA512 692a35d1494649f96851ec333a0265805e46cc6f8f2688371a88ba3b4b8d899ea403dfd3bd2e4ee94a9d1c4eb7fe4a7b2d5a61c5092354a220e6edfc6f0f2552
SSDEEP 393216:dWfmgggFgl6ggDg/gpQiMRgFEggUggg3dgfgi1UBgggggUuMwFgggg6NggggggeD:YDggFgl6ggDg/gpQrRgFEggUggg3dgfF
TLSH
T1FA075B2A21AC10DCF17BD0BD8BDB9E47D6B2340903319ADF05D15A9E1E1BDED4A7E620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en.json

Path C:\Users\Admin\AppData\Local\Saiko\translations\en.json
Size 60KB
SHA256 e739bd6fec825229a02ca0fc08ebadcacadc42950f92cb3596f23aa4b8fae162
MD5 6a00c92552201439e417433f359558f5
SHA1 1e6f49e4cd760e93013f742452f3d179db4a54ad
SHA512 98034c15ca977a3693083bd2e9be2ad9d798bbe2eb3a4708dbd17fe97922b8474738e27b580f7664043b74079e7a32fde41288e0094dd77191364d8b34055d2d
SSDEEP 1536:3pIGGDR7PnfmNoDQIDBt65PZz9w4Qm65U:3pIGGDFncIDBt65PDw4Qm65U
TLSH
T17E53732BAB40023B15E081813A5F53A77B214D3B1713391CAB9BA11D335E53F66BB5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11c6950b-d730-43e8-87a1-e9c24c1d02dd.tmp

Path C:\Users\Admin\AppData\Local\Temp\11c6950b-d730-43e8-87a1-e9c24c1d02dd.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

RBX7815E736C6F3429F9682D9FD3AAC2D9F

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7815E736C6F3429F9682D9FD3AAC2D9F
Size 64B
SHA256 c3b85852a389bd15aa1af65b130e924f5f4d41afce2668cd38083ec70e9d866a
MD5 62b72d013d07cff05c8d5e537fb0f9f2
SHA1 c771a3d0a6b1e455699ebe6110b399a48ca111f0
SHA512 9707d04ee5875dc9aa90505163fc8d7c64053ccb9d07fd4d6c04f06517c5b84e5cc03008ea985140409b8871629af3aa3102f5db29793dbabe2d4190dba6fca1
TLSH
T179A002012D110149C15E0677821D02911E69B595B144631038A5AB636E2162DF35F295
MD5 SHA1 SHA512 TLSH

Submit Download

RBXDA54A5A1CECE4E79B72F6C6E5A974ABC

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXDA54A5A1CECE4E79B72F6C6E5A974ABC
Size 14KB
SHA256 04e88f8ec6084cf21488e12a7a5726073fde1aa13eb41c56bcda39f5053e5771
MD5 b46638409c4d10c9dceafb7f633c0296
SHA1 4e4f3c6d12d56a09af4eea105370bb8cb380c26e
SHA512 7d4f3cd7fbc144b29d6db7fb0530c54a5f65832946ef038f90444419546fc3083d709ead4f32a7a75047d635750c31820ab399f8f4e50af7582b0424e832124d
SSDEEP 192:gtBUv8Wn0hUhElgiL4MnV2+GVeTXfue/CCYL8iSC3PMDfguJVF0VJqgmuCJVZKY7:7fYnVRSImZCYL8iED3VF+I5HJVZR7
TLSH
T18F62D0935235E89C7FFF162BE3FB870C8FD0F9242AD7195C5E0B00682266A556717709
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a01875a7454a5f71664a5feb82fbbe80

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\a01875a7454a5f71664a5feb82fbbe80
Size 14KB
SHA256 c71ad6e6d9ee1411ded47efe59f45b3a83946684f5ab717168c9a2c89fdeb4a5
MD5 7729bc7d014991096a0062ab7031b04d
SHA1 82e8a0e4c1d0803d4bb6a2168514ab7ea7f27a34
SHA512 ab9d8885357a9879aba2558f419487e94c2ad7e474ff23a903679ac46a1f5d504f065c8103e1265094ee410684c6cfccaa7a9f7c71b958e90497c7c0b8702313
SSDEEP 384:iiwzb3Nk/9vnAuaD7vp3ZxuaA/WJd4kXxaz6ZvTHvz67GWnWCBI4k:i3DNG9uPh6ah4kLZvT+7f/BA
TLSH
T14252C0076B7795C5263386BDC819A38050CBD83F4376789AD6F85B8586EE3F287152C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir236_288671202\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

32170e54-4877-4cbc-b482-f3c25a79c454.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\32170e54-4877-4cbc-b482-f3c25a79c454.tmp
Size 16KB
SHA256 881d4383fdf3f2a5f540a258cda60aef2fc1bd9ba4494a38b9b282d41efcba55
MD5 af7a144beff86a15c043790009d90155
SHA1 c81a524bc135580ec75f810ae8c66f7db04d149e
SHA512 ab5860bc781b7388569fc392bc9313c5799c3dffe38d28e87afabc3f228c54657462d07d7a89b0b14f144909468f9cd0d4fe099f3de6abfa459704e2369abe13
SSDEEP 384:z8+OBqImmJvGBLx3NaFMJFNNbOPDos8qg6rg:5cvGtlNuPsPsU
TLSH
T1DD72AD762C666B372CEBC90ABA893747DA791193C0D57FEACCFD8F0E415E0842351815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32852b2a-6fd7-4950-9a49-2203473fe4f7.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\32852b2a-6fd7-4950-9a49-2203473fe4f7.tmp
Size 16KB
SHA256 5120284cbff8b096a5d0a09936d387c5f54e37265d002b4f568ff0c1fa37ae7c
MD5 24a2561e36a1e33eecb2b495959e07f3
SHA1 9ba8d35c46cfd142db800b0c932ee0d37af633ba
SHA512 7ead7f503921b2ef1b9345ca166ad32b9f3708e517d725632b35ded6f1edcc5b0e0e3cacec19ea6f4f6a84a0f32752c43b62bcd56dd4c49d2208903a8a130755
SSDEEP 384:z0+OBqImmJvGBLx3NaFMJFzNbOPDos8qg6rg:JcvGtlNQPsPsU
TLSH
T15D729D762C666B372CEBC90ABA893747DA791193C0D57FEACDFD8F0E025E1842352815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34196f35-661e-4b79-973c-2a62a332812f.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\34196f35-661e-4b79-973c-2a62a332812f.tmp
Size 3KB
SHA256 65ec143a12c8b90ee6f394d74216ea2dc59e2c10a5d8f846a5ae97847b908640
MD5 89d861ce875243f4386a32c1d6931f8f
SHA1 3652434b60a246496cd2c422c3c5443077a23869
SHA512 5e048557f5cd287898838d4081c46feef659a5ad59f739afa15cb9875e3f589e84f0688fa3bac310d2c1f38ba7ff2bf0f4f2294824ce79c30beda5b995174bed
TLSH
T14E7185726C64AA3B9DF2DD05B9863B16F6A95126E1D13F99C9FD0F1C01DB2C81341C27
MD5 SHA1 SHA512 TLSH

Submit Download

7522ae8c-1fc4-4c98-99c4-0692b8f73052.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\7522ae8c-1fc4-4c98-99c4-0692b8f73052.tmp
Size 1KB
SHA256 aca70438fc6d2acd3c306544d7d116778b7c57d1ddd74d4a1cb5943ded5c4892
MD5 b7cbcb048265693d6a0c65042fd78f2d
SHA1 4ccde2c66224c5ef144e7b237c564334e6de8030
SHA512 9a7d0d1a2acd784b3200e8b83c776c2220e7f86f33ca1362ee8de5b61b3322b0a15a02cf9e904c8732c1b765ba51c55780feb8a38862dd31359dba2eba8bb0b9
TLSH
T1AD31B5B3BC906B36BC91DD0176427787AE781069D2914E0495ED0B1C01DA5CC2225C32
MD5 SHA1 SHA512 TLSH

Submit Download

83f0da42-59be-4e39-8c24-c4a09de2265e.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\83f0da42-59be-4e39-8c24-c4a09de2265e.tmp
Size 18KB
SHA256 29daed0de5c8f0e628c67b67000ae7ea0784a2565dd83d5c3f99aca9792fec75
MD5 9842f5ee99c25561ec269d3cdb041d1e
SHA1 3f3760e1ca6d0372431e5ba6f628077734a7a55f
SHA512 755206451f336ed9bb45dea640beeee1a60522af81bea14ba37c3982ef7458655cfb0455cfa64830515cec92eb05d16b625693ab98968496772df83f3b20d5fd
SSDEEP 384:zq+OBqImmJvGBLx3NaFMJFsNgnPTos7xmtf3qg6rg:TcvGtlNHPcPV3sU
TLSH
T17782AE36AC25AB277CFBCA4AB68A7787D6B4125381D92FD9CCEC4F0E014B1891316C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8d9c7f0e-f72f-447b-a6ee-e68d2dc9f51c.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\8d9c7f0e-f72f-447b-a6ee-e68d2dc9f51c.tmp
Size 17KB
SHA256 1a97a645f14074ff0402ee60237504d1f09f630e34a9aa2027889048d64e35bd
MD5 251d3fd22d80f7eea36a85000a23d075
SHA1 c23e82a2e02968b85b5279b9ac949e87bf0866dd
SHA512 0ed22a209886611c1a14a17b27573299b3818777815040e0a2d72f8a13d08a8f9488b06d9d02192982a8c4261d407288f7035538a092d5c67c0f62d2e6b0c1fd
SSDEEP 384:z5+OBqImmJvGBLx3NaFMJFzNgnPBos7df3qg6rg:4cvGtlNwPqq3sU
TLSH
T1B282AE35AC22AB373CFBC686BA4A778BD6B4125381C92FD9CCEC5F0E414B1892316C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96edd631-7465-4188-a0b2-7020a5009f9a.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\96edd631-7465-4188-a0b2-7020a5009f9a.tmp
Size 2KB
SHA256 2722b0aefe776cb95b74604b74ec1bebae11d3aee6433210eb279ca25d3f7cfd
MD5 1fcc684a51ee612ba45b28854740d3b2
SHA1 6cc473b2b8744e72a7b608dbbe8f3afee3c44f21
SHA512 f58a766feff5cfe4c815b14f5174e3d7aed68b8e473b1e0e369843f881bf19d9a45e1e7c3b4559462169d394fe7879a7679f83a51c1618d59cda44ecda82a81d
TLSH
T1E051C4737C04AB7799E2CD047E4A3B13EA79516592A22F509AED0B1C01CA58C2342C37
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 81368792667fc39f91ab6306b564383c588da79cab527bc19dd1718781e6c7b4
MD5 37a54a4b16457d7774a90a528db3f564
SHA1 96f552a3ef869a733677c4fd3732532255735f61
SHA512 09cc7a7a689c60ac02403011fc16d69546898b99bcd08a36308177d34e2e3a745bd32774c11d12cdd41f97afd25902868350d2aa7116e30d9e94f5dbaec98262
TLSH
T120D01227B3018534C0102273148666090600C11B414640005429855E1F484B00D0A881
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2bd8954fe9c30fa33703df190e9c1eaf0b2069c08a18028cedc0fe47eabd9ce6
MD5 76cdc133558cabb6fc55090efc87308b
SHA1 5d432a839ef6052e1cc9ddd4b55e27e9d67aea61
SHA512 c08c86905c9bb402036db8abc23cbea6d0b420d7105937afc050d75ed9a445c2224237a9188cbc80b7a704df6f03d421c68ac7b279c6443fe508d99c3ff32f5b
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

2b06c377-67a7-4962-b61d-769019f51a10.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\2b06c377-67a7-4962-b61d-769019f51a10.tmp
Size 6KB
SHA256 2fc056de7086b616167797d61f8f842835ce2ccb2f35d7d7e609311e0199afec
MD5 439c0730d4b7337d9051ae1268531a2b
SHA1 7061a43ce1caf7b94ecea30f9bf367821f2e9ff1
SHA512 0144656c70563bd4d0b8a549facba578078db91f01d2bd2fc5c8fe89a10d7f1aa266cb1ef04b5312cd6625ac4288affa06864c53d17a954d1d2a24448f43248c
SSDEEP 96:std05Za035b9F3ffXZ8i0vhE4ktTm/7qx+WVHMSm+uecJ1rMFHdQjU+ghZstMOB:std0ue3fvZ8paDi/S+WiT1rqdt/6tMC
TLSH
T100E1C902AE6869774CC7F61D7A35BB52E2FA106261D51E48EFFD861C05D66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

503930cb-8360-4deb-8fe1-98aeea8bcca2.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\503930cb-8360-4deb-8fe1-98aeea8bcca2.tmp
Size 6KB
SHA256 7604e54d4f2fd8dfcc45f51054674151e626ab942050ccc809b5ba1210c2a4b6
MD5 b4b4fb8d713baba3c3f920cd97c8a8f3
SHA1 17befe86b068c77279b7f4d31437cc020737aa8c
SHA512 bdc425914484a9e5142a17e1b653228613844b5890cc244238423219dae2b293282ecbb46ffb262be731586c355a710206afdf55a720afb2ae6cbfe00f83d66b
SSDEEP 96:std05q035b9F3ffXZ8i0vhE4ktTm/7qx+WVHMSm+uecJlN1idQjU+gdZhtMOB:std0Ue3fvZ8paDi/S+WiTlNwdt73tMC
TLSH
T1D5E1CA12AE287A774CC7F61D7A35BB12E2FA106261D51E44EFFD861C05D66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

709fec1d-dd64-4f8d-91fc-b90fc34232b5.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\709fec1d-dd64-4f8d-91fc-b90fc34232b5.tmp
Size 6KB
SHA256 6692cea16b2a401312a733858a6402fdaf89c39d7f6d3115ee134c2d3a38953b
MD5 48e7b8c135162540836c8e5854744c35
SHA1 86381177d7c5793ca04604aabf30506b0d840830
SHA512 310cb7dd4753ec5031760efcf7b8042c3750b797c2a236ba1bb41df14e4e63c6f5d8e823fdfbc450df04aaaf916107c7c050ba1bba5aea306d3dea934936e597
SSDEEP 96:std05q035b9G3ffXZ8i0vhE4ktTm/7qx+WVHMSm+uecJlN1idQjU+g75tMEB:std0UR3fvZ8paDi/S+WiTlNwdt3tM8
TLSH
T1D3D1B812AE286A774CC7E61D7A35BB12E2FA106265D51E48EFFD851C08D66CC220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 c9f6aa6a3c0911c2c1eb2e55b4af1ea065adcb5516c9ac2b3797db0edb80cf33
MD5 e735a871a52d2bdc5778d63ffbca9355
SHA1 3352efcf5e483682a566755196dc5c39637cbe59
SHA512 e3fb0a60da8c4083365d7b2a284276d6bc7d86432701485b23b2642c3456b60baaa0394ace3a7eb5c843174ae094ac571fdffdd6014e47238bc5791db3993639
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 168B
SHA256 8241271e368f4ae993cdf7ae17134a3cc9860c486eb5c4f05bb72a9a38440ac7
MD5 5e58fa660d5b4db2dccb2f0491fe62e6
SHA1 d02aee385fd907bdda558bd987e23c732e393ded
SHA512 a4960459d13372f275dc264562d9e8a0d776a350f7815ca2a4e27c2fd2aff9d01444b0fa738986bdccc9ef051b3388f43e2eda7b0f98f55d8dfcb75420c73237
TLSH
T145C09274780E6C25C3BD9B7342E100D036F3B69C82C31E8900AD18B84C3474989D1408
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 09a93b3bbcf08ceeb9c3b28581c457f9bed4e209e24b0a9dd329e7fdc0bdca39
MD5 2456b7c1556b570d572fac19052e5fc7
SHA1 72ca9c4e9f8e774058c36a59f37cb0ef3bdb6b62
SHA512 c46766e51ae01a0edaa86830069a50e97b035fdbfd26f20ae491d17374fc37a5d634b80b104c7f5f18fbdc4462dcf3cdba0dd71f037ced848c91242b7aa90181
SSDEEP 3:LstlNllkll/lWB9gt:LsX3lEtWL
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

172d9dce-e3c2-4b98-a553-0dc2a04a0597.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\172d9dce-e3c2-4b98-a553-0dc2a04a0597.tmp
Size 564B
SHA256 6371acc513990b6dfd2c6a7be1001ccc241d8f6cf64d28f82cd4160798586bac
MD5 a0ce62d397bca5fb4fb253197a36e97e
SHA1 9879189aef787539541e7f96cdd40991fc1b9fb3
SHA512 aa37e4aa0d13a87ed3fb55c389cdc30cdcbcacdd18b3c7848caa030da60692b23c1a974d34245e35380b03367103185f848d977e7acf90e0d9e08db41d631d63
TLSH
T176F0C0A2C7F4C67D8A4517F067347813DA3E0419A2287D2ACEEAFBBA57D20B5E11054F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 edbbc9e8a239b7ef23f0b87c5a50cc8d2454f63f5db4d912f85b682faffd6b3d
MD5 00cb8a4af1112e4ce9c0d585797993ca
SHA1 8bc5d2e9af625dcbb455f63da95d13de34c0157d
SHA512 96c3f97b22bcf23acd67630aee85976b43fce3be26c31a599ddb1f44b001fb809ec9011249bdbe1b2b171712862c63454af9a075411499ccbcb0e6c31a1dfeeb
TLSH
T114C02271003BA036107A0932CAC06D01EF36B0300041D4ECEA53862D60400A6620B022
MD5 SHA1 SHA512 TLSH

Submit Download

bb9d16d9-1059-4ff2-85e6-3481fe07a33f.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\bb9d16d9-1059-4ff2-85e6-3481fe07a33f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

be537440-05e5-4af5-80ac-e51b5eaf5821.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\be537440-05e5-4af5-80ac-e51b5eaf5821.tmp
Size 351B
SHA256 b7bf150899d88fce76cdda3cfa6847599856dac1ef2736b81970439479816678
MD5 c9d9b0f6c59d94543c959fd146d018e2
SHA1 69c7cf7b323f0a1316cc9f7795ad43405329d217
SHA512 ac2990095f0f1500ee544e7d31d87931541d8e8bacf3028bf6a9da1e3b3241b265e8496f532644eadfcd1c7614157b83d0e82386df2a47af126a0fa8c9228bbf
TLSH
T1A2E026A298BFE47A117A09376D84FD04BEBAF135008194F8CFA38B2E70945F79717466
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Site Characteristics Database\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Local State
Size 1KB
SHA256 c0c41814025590b96034f745acb0e58c64c67f612f01d0323ace45de9834cc01
MD5 4bcb7d78c63078ef2d2e8ea8699a1231
SHA1 f44fd0fc2caf6fef67b6e6fb63c015030eecd5ca
SHA512 c79f298c9529fc089da4069a3c1428e44dace5765d3c61c3a5e0d89356541200b95c1806586bc7b521fdb363a44b59a003015c634d9f088f680fed33425d29a1
TLSH
T1822192B3EC906A76FC918C11B642B78B2EA8507992A04E08D5ED0B2801CB4CC1366C32
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Speech Recognition\1.15.0.1\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-af.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-af.hyb
Size 70KB
SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
MD5 ffa9db945f0f0c15b8bba75a6e064880
SHA1 49217a9d5bb7a868464403b4e3c82e80df53456c
SHA512 cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0
SSDEEP 1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
TLSH
T1D56329C3C62BDF90CC6419F4594D0AA811D816C6E7C039BE9B6C54797A27CB82BC13EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-as.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

WebView2Loader-83f8f5bafedf77a3.dll

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\WebView2Loader-83f8f5bafedf77a3.dll
Size 156KB
SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
MD5 b7f10b8066ee96c628e09c439b8d0b9b
SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
TLSH
T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_1194780069\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping236_1194780069\_metadata\verified_contents.json
Size 1KB
SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
MD5 243afa1f565d5789d05d9762162cfa32
SHA1 7c7b6757be9b6ae391a59b940ddfb646cf6ce732
SHA512 671b53dd21e4566df6fb4ef811fb95382447f57a82d497de029ce1528aaaa47f26277615f6ca91ffe4834598b2a0b5b78ec2f2dabed2ef704581cbb990ad67a2
TLSH
T11F3119B8380E324F90A7E30425BB9D33534570BE13E0A517B1C26A4E5598A40B2732FA
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_1071993070\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_1856226934\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_1856226934\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.CognitiveServices.Speech.core.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_1990120541\Microsoft.CognitiveServices.Speech.core.dll
Size 2.6MB
SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
MD5 0ee2b50c85a110689352fccfa77b5b18
SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
TLSH
T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_1990120541\manifest.fingerprint
Size 66B
SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
MD5 5bbd09242392aacbb5fac763f9e3bd4e
SHA1 14bb7b23b459ce30193742ed1901a17b4dcf9645
SHA512 541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670
TLSH
T1CEA0026342648D9FBC1C042BD478A69DCD9115B088492445A925C75BB14203389F49A1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_2002506881\manifest.fingerprint
Size 66B
SHA256 9136f7c8a30419dc70fbe015784d1e8590a197ba88b564ca26b5a1e918e1b850
MD5 b740181eff7f7b568c83ad9d00213b13
SHA1 b3dcc9b0dc397aca84ca76c9fce3d0b37c7e37f8
SHA512 1d5c62a473a4e07c9e3d3d3900992eb6bf504b014763f7c9b7b0ce7e4b05648a9d69bb30a94b139eee88116767ed8d713f42ac49b8bfb4fcb9a1ffeff516397c
TLSH
T1F2A022C082A000F8C8080002C008008ACA00C00208003F00F080F200030CEA008FB800
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\_metadata\verified_contents.json
Size 7KB
SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
MD5 117d173e82b282deca740475e35c8ecd
SHA1 912b12b993507ebd9af6bdc937559b4d4b58a0d8
SHA512 e455c0bb68e9056c6242058fcba954bc1d5ea4a864e99be008b2745c51209b477bd7bdba57006be4a02a09bda49c0cdc17e8f870c81c7771864640950f5f9a93
SSDEEP 96:RhZIpt7VgtFD3F8CMXuuzaRFJrb7ghNglFjPu3ljl7arVSQi6E/swokYglZ:Ryt7VgtFD3FaeTrgCtP0dyCDsoYgn
TLSH
T121E185F21E79744D5CC52736077EA95B9AB4A298C2513EB646D00C99B0F7F0A80BB4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-be.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-be.hyb
Size 5KB
SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
MD5 087de134f3b23a9944afd711a9667a0b
SHA1 1b67d0a65ef91295207d66e62b682803aa74ef00
SHA512 42c0b51e0e28109a7058d3fc03fa7bef8b25c9b3c8bb74933574fad06c061fd1636b53eeeacf652e438d4df08002db449681be9e6e6821ec23d32a8be1778998
SSDEEP 96:mmfvnESaDPq1iYM7N8gyurprJr/P5FwBlh/RT95vtEUnbpwROaQPP/KV2L+HCdYV:XfYPq1iYyNk5p50OwQPP/KV2L+HCinCO
TLSH
T129C120C2DED52F91F8E428307076356E94C0ECD80B81DF27EEA5682DDE9EA045648AD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bg.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-bg.hyb
Size 3KB
SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
MD5 e8a4f8f5238f9a0ff6968ad8dba2755f
SHA1 abf002ff28b3aa2a59948225e5e600096348caa7
SHA512 b54811e1be6e63bf19e408ac4ae9da86e1473e4e8f1e9d517d907e025be20fa6979517339ec6defd0ec30613ed42a97d88111d39297214afa7606597cba5ea86
TLSH
T1AF61E86A840D1C89DC3258BF71F7FB890D00A6BB162DD05617462E61EB33D48AE04B77
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-cs.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-cs.hyb
Size 62KB
SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
MD5 e8b1509f86508e807d61216614b3dd58
SHA1 b2334509e9d1589ad2e8b80c187018eadb15872b
SHA512 fb340fef9d0dba342fd85b8b18c0090391aed717fe92a8da7c5d939dc9c0aa5235d4423b590e52b0decddd4f4ad8bd4652361161c193617601ff490dd1be97fe
SSDEEP 1536:sonSvAX9Cf306OFe4Q/irU+bvWDdF3EeFWPA:rSvEchf41oKv4dBEbY
TLSH
T1D6533A43FC650FA9DC7D50FAACE40EA955153ACA1F51682EFC281095BC22D293FE0B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-cu.hyb
Size 51KB
SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
MD5 b4e5921b1df85ba9f2ebe6ce578915f6
SHA1 b5f2e813667aae32e65cab9c9a0dd291421ada0b
SHA512 41696a9e25ca004acdc8def265766392ce3568747560ff73cd08ac9fa4a99e4c4654fb84dc602845b3e444a8312fb099c72932471f7e830874cd7cfa184b63b7
SSDEEP 1536:a5OMYzUXoeoZA7SmEUbxucj5DTKZ2oVXEyb:a5JYzUXoeCA7SmEU9ucjBKZxJEyb
TLSH
T17533E8D77029CF7DC0DD35F6AE993EDCA358689B3E462A7A521B91D32DE2D4230001E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cy.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-cy.hyb
Size 35KB
SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
MD5 b0f32ed7b4b8a068a962d820627b7229
SHA1 76734e58bd33c4d1450228bf05e53cfe169a02e6
SHA512 8f20253985c217401627e0c7d31aa1bf213fa220bb498869e11e1e532c3c82dbc2abe6ffa27c69243913243af1aeb35806175511d77d730c914b1cadd71aa7a0
SSDEEP 768:s022NAK9/8ei2v0BJlYZqNCII2vfP+DzEKd8mPBFDpvH5aWg6:c25X/MBPjNCIISkTPB3RN
TLSH
T1A1F2F81B75D0CF23C017863EC1AC5612932F9B19A744CA9B668E49BBB14B534BFA734C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-da.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-da.hyb
Size 6KB
SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
MD5 d0e160dca547eda390d6cc7c4a1f7ac6
SHA1 7eb71819675e82b1bb92428e07fa6b05cd1854d8
SHA512 9be5f673962c6049ed1c796a81aa7be72a1c7715fc2d4610cf6565541c7bb145d068b94b5fdadd30bdb5f5287ccc2055ec1dc9e11e4c5b8965d59ef73ab145c4
SSDEEP 96:op8RuPmWKvTES4MDmKQS3mAdi1flBiLwHR08fiCkUNGrvYe4KiGn1BUBkQH:op8ImWKEGS87diLBiLUfoUNGrln1BUBL
TLSH
T1C4E1B30AED968743C41AD9B9CF07C98B84B9E089B791713AF38C8641308A33C67E735D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1901.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-de-1901.hyb
Size 118KB
SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
MD5 dd9d0a81d897f88f76c1f6d69fb7483e
SHA1 520bf6111f902196591ea358fa8ab4ae89ee0acc
SHA512 8c0a339d353cac1c66542bcfb7d41e7241a59a1886fe8a189aa155aafdf3bd23274f956d3d8a49be5b23cceafb516648a0e0b44f67e6f5ca60e216fb3f362ccc
SSDEEP 1536:4S0havr6N41g38Gnzvueua0+Az+u3tnQrI9LKyQh9HzSWwwwKYf+wBuLxfrHmu:5cae4TyzvqaQzjQMuSWwwU+RpT
TLSH
T132C3D5AFC20E4E45B2B6FA0CC108767EC15C7E6ADFE045A7909F1424A4374A8AE547DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1996.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-de-1996.hyb
Size 117KB
SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
MD5 e7a9906b316d478b55bf8ebcbbb1d1c5
SHA1 5688453de9afb7405960980dc93adf9296aa2f4a
SHA512 36e6beaba33a16203f996d6e8fd987347028d590a4b4bcd4d2a129876c486e03b9ba13f279f301e91aec1e0f8e91bf109a27f2b464f15a3e1a2b56d03473b69c
SSDEEP 3072:+GQAdd4u8VlGiVdYQvi792ovhcxX9iEaAGGceTUjnnfxXElEg:7Q+UfN3RiEaZGceTUjnJXih
TLSH
T164C3E89BC11A3A44BA70BD5CC5C8326ED1547FB69EC0D1AE598E15A024738EC3B887DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-ch-1901.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-de-ch-1901.hyb
Size 117KB
SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
MD5 c6773229845710633d3a4d6dd9800fc5
SHA1 1d4c2e5f3ddf5627164edb471e8a8177993449f4
SHA512 ea69926520429cd934d52d84a7fcad6bc9bb654085d8d1de813e73f191ebd7b310e2e68b4bb43fecbd88cfd15ead7fe295405c01b7fdc225914b0477c08d4e01
SSDEEP 3072:iDCOweCoHgtKmiQaf6ZCM1BKstDcqZnSmEBQBkXmhHB71:CCZeLHgtlG6dzhcqZnSmjkXmJ
TLSH
T19FC3E5F3C5038E49A9B2A80CD588335E65147B7E9DC849B780AD5830A5B70BCFE8479F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-el.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-el.hyb
Size 4KB
SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
MD5 746a59e9f9dda15c0f17c1b72921c85f
SHA1 eb7f671af76eac40787d9227d41453b5117889bf
SHA512 8894b754377285e2f3071fa5bcd714f249f3dc85bf3690641c6576b070113c1e72caa61e7e2c97d35a7f79b08c2969bc4a2fe46bc4bffc4ed58069387dfa7834
SSDEEP 96:mMgP7nbvtENatA/JKab1QaRAwdRsCaRANaM2ahrvmG7VnaxEaP3/SJADfY:Wjpk+O5b1zRAcRshRA0KhrvZ7QJPvSJd
TLSH
T13391CC84FF865ED5C52C203325AA06261B1CDC9195E2977BBB70CC34BD5987CFC5A08E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-gb.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-en-gb.hyb
Size 45KB
SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
MD5 fa3dcb77293a058277cb148a0ff491fa
SHA1 3335315b13cd82075da2adbebe32759c01833e8d
SHA512 c83a8c4eb29c3171fefe983c3e342b6af1bc1add7288c75c5a782dc14f12d2af83043c2b43c9ab3e5db61c91de6d7cb473746517debcff7ac2c0f05bb8b0971c
SSDEEP 768:8CPGXSlQXvRVYVL0xpPuB5YBBaEiQD6m8eft0Sr+uh0d3TPwHh8fJVVoxUb:8bXQMZQ0xwB5Y7aEiQD6mPf2S6uoTPwg
TLSH
T1DC237BEFF8039C8F4623A667C55627152E9C6B9D2F53CFAB448D03F1322252CB0B595A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-us.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-en-us.hyb
Size 58KB
SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
MD5 b2693233d14890c81d322bec948549e7
SHA1 7ea8e42e319305010d3e6568fb4983171583dd06
SHA512 1bcb5a9c3db408fba6a6d02162a294c5c7264d4b202eb332da8d02c0c662cb070cf1534d5aa0754788d35abc88273f3337ca5f302ada95bcad077eaa52804915
SSDEEP 1536:h5tXyt+U07SAFarfxlLXSwk1cI3P05j23Kqo74TKAqs:JCtYuPrfxZE1c0o26aT9qs
TLSH
T13F43282BE574CE6A8D53177CC6A6225A08DFD789CFE4CACF452C81777056128AB3630B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-es.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-es.hyb
Size 14KB
SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
MD5 f6bd0377237fca3c4b7c6a6cb244298b
SHA1 b8df975889cfb06fc97db3d63a7820b7cf621f40
SHA512 0a36860580e295122f5e49091127386edc762eedba80a2d7ad958ab33307aabcd420173e08ae797a19664bc830800d92c548f3e434bf19bfd7791e50e0c45c2a
SSDEEP 192:j6aP1LZOFTlMa6Xb05w4rsv6SHyg8jNIcG3VTCkde7QpCKBz1iBOJGPJ3IDIHmz:hP9er5wKGhSfhIc4yyC+z1iM0PtIDIHQ
TLSH
T1B462084AF5455FE5C5A721B085530F9E0241E6980B90C36B98BC1D7ABD2AD3C7EC33AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-et.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-et.hyb
Size 20KB
SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
MD5 2ae42ab807286f6ec0ff1876d9536b0b
SHA1 cf3bbe7348eaf2cb3d93c5cc10964bb8d1ba07c1
SHA512 13c193571a7374bb169f6f0f06a9af7f8251cfcbf60825a85396c907d40f7837c8efd0a7bc8b6c4deed2bfca7b8508f132932d7860c2c9a4fb568d8ba2acaea9
SSDEEP 384:1HSUqMAZs9xsrscHJvMC0rWxMabdxhDPWSZuVyVm44/DasJVwLf3:1YanasivMaMaZxFPWSZ+EaZVwT3
TLSH
T1CEA2F99BB6818B61E23F0AF18AF93FAEC04541562F10578DF404D7B2B12A794AD93F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-eu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-eu.hyb
Size 665B
SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
MD5 e90ea97070cfcfa795fbd807ac300d34
SHA1 8c83b4cd54d394aeff31b14a219f2a3562132908
SHA512 210dd857f7799f1a926c7aa73f26912ad60723e099acf1566bc39efd445a1b194be4dc557d5da6874e7d75a37115aead9389b8009eec1422764e6648fe4cf8f1
TLSH
T1E8014F4AE4C04EAFC8D34EFF4017C6AD9681465BE4918B2E271CC8D5330556F679DB84
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-fr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-fr.hyb
Size 7KB
SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
MD5 092e0a95d6dada26ca56d2ed558749a3
SHA1 40bd8296e5e852fe725c7119083a8d5614037cf9
SHA512 c04ba62f4a0336e9b25bd2f6a8c3cb82c8b6127c1c04fc173abc9bf03767a9ffe18c9241b301d6f71f79f3377bc990f25f099d7660880c097a9cf4bb1e4bd48f
SSDEEP 192:Yq67m0o5PsoVQ5rT1+Eqy2G0Xy7i6uccc/J66POIY2:YHmkeQ/1v2Gay7Bupcx3vh
TLSH
T129F1B7C77A020EF5E86A3874D1D802950470AE242E602F56F3687C3DB5578652EE37EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ga.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ga.hyb
Size 34KB
SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
MD5 768032a419e0ae3bd870d591e2173715
SHA1 58fd709a1dc40176fb72189c20567ac1950b9db7
SHA512 4a4ca1f735b82f625002b0292f623179f2a6ce736f633cbfd6868e3db0709eb06eb462bd9da3ffa8365c3c38fdacba735ad32266cb3ec33d3e583ed073d0e3aa
SSDEEP 768:eZAG7bymjpz7qBZWBHn7xbeGhs0fCJRc3uQz3sfLsCPI2th4k/:iAGfJjpn2UbxbHhJaLc3pcfLFP/4S
TLSH
T1C3F24CC7FD09DF3FC6DF2436C078260643AE8B15AB45EB8B48466172B9471272E7692C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-gl.hyb
Size 9KB
SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
MD5 1b08fb098d29c30488b8fc3f19dcf8b9
SHA1 df6e03da66a7a5ae4927334808c8c20752733667
SHA512 de1de90bd44d8977a4a69d6c64bc90f421f5e099396d06fc2466de6ee62a59f5a59ac1ba0ea96e69dfcf744f12165a8a9e9fda73afe5d38704a7b3b0488a369b
SSDEEP 192:ivHsKFShtcb9Gn03kfkyrU3N3k65tk5kX9yI:GSh+xGn0UfkLNF5tikXt
TLSH
T11812084AFF44CF03E82256BB8511E47A404195017736EBA9664AA2F42F0BBB85DDB7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-gu.hyb
Size 655B
SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
MD5 f6dc4e0fb974869d3d9457c582a38690
SHA1 e6708afa342639eb96cb97d1f541a421b2626d00
SHA512 a778236fa8c5f28e747214d0ba0417aca1c9a95e4c013fbc21e6defe39d0421a2b27ccb27e6f248404a9f6b5cd1014574d0478078f36af2a0181872ac8173d72
TLSH
T193F0752A72011F4FC5213AFC1D6D05781034C01043AD0323C22534B24164B7DB4088C9
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-hr.hyb
Size 2KB
SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
MD5 1864e47e724bb7f9c052a2840eee21d9
SHA1 9749136107913d6570c0c46ae2b52e66d8284c38
SHA512 2d6e76aed93652510f5864dde1e1923c67e7413e895abfa8fc7e8c9177e228e4d153afb7099b86697d1662ca3124ff2173f4aab2c978d52583a8e2dbc70c0842
TLSH
T10351A1EADF108571CBFB09B12D9E249D0274C6D92347374770B6B061A6A0FA26D604FC
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-hu.hyb
Size 309KB
SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
MD5 37b1f197e8dfbafdac4597edcf673e63
SHA1 e672c6870417c71acdcda6c16a7185d7a868eb68
SHA512 69ee820439633b348bf8efdd3c498a30270753e53ff78d022bd1b295c6c95e0501955009f610a12fc55c786a563b0af40d2b69a7584b47662b943acbac2d3634
SSDEEP 6144:wxOMr0dBjIg2U0RT7c25PkvQoc6yzRcOmpTeIrDh2ky5khBh13kwTbqgT3Gfhh4D:wvkufNkzFtuWlAh36
TLSH
T18E641A9D9633A637CBF4258ADE7909DFC0543B43E943325F308960E89916E252DD23FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-hy.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-hy.hyb
Size 605B
SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
MD5 70ea4451c3a26fd7197a3d2188be4152
SHA1 e0c1390d94876bf2a3cbdecaabb0e335bd86355d
SHA512 ac957947c51ea23a9b7ca482db08f0ca3332b8048025a96acb01a4486c1a87c3f3d08898e94cc8e0b20721c56ce708fb37e1bd81bee1fedba60a7f370d5ddaa4
TLSH
T112F0728CCB54CFD7C8AA05F8067858AC89C24AAE2180143233200CC8968B9008AA322C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-it.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-it.hyb
Size 2KB
SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
MD5 a4d5ec24d4c5ee745cdcdc019018074f
SHA1 15dcd0305508afe357eee16a543f4ce547ed500c
SHA512 e9022473816f2ecf4b5b06bd6b28d75ec64fdff974a991aa522eb105e3aa8d23dda0a45e11040af4db32e1f2e8cfffc058bf29fea1403af5a724831c730719fe
TLSH
T1D851EFAB9FC87E37D11BE038D0AE063AB331C49597B30127E6858B3B25D53354EA2083
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ka.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ka.hyb
Size 9KB
SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
MD5 aa6c771083158380b2631f01e3f64f20
SHA1 1b41cd8e7585dcde57fc0b40502328845e524457
SHA512 f8cd93862ca2f76d769721bbf858955fc007bcf2e1892ae3e50846e28c6027208869f580479d3888610820ad5348a21a8709984aed844669fcaaa3f14199addc
SSDEEP 192:BykbapajL7tio65gkERH0b4/HXQDPPCOqyKrQhuqDr5fpMEgKh:BBNjSgk4H0kHX0XrKrQXrv/g4
TLSH
T1402232C3398617C3E0FB6831E17B3A498600EA827F52572BB3144339F652F661F82769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-kn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-kn.hyb
Size 711B
SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
MD5 d986ac2e7c75cf3ef929a7a269ae0d5a
SHA1 de8bf2ee2b8a77102337c45e5fec924c6c02355b
SHA512 5475c82fd5074334bc5f0f89edab62e94bc5865da0432c6f830b50db3045afda12bb698659951f6d0f76c55a43e1add8d47ad7fd03597bbe92d8178ad4783c71
TLSH
T10D0120F4B9493AABC4B4AC762A2282B841B8D5AA122D243FB05177869F18B0C664109F
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-la.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-la.hyb
Size 1KB
SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
MD5 9aaa47272099a013a4389bc314b7d2ed
SHA1 20b5bf65fa2023e67ea0687f643b52eab3fc68e9
SHA512 318b17b2e2b16ec73f231455d633c69fd44b32868c215053b3ccca54472e775d4589cbb4daad2fe37a40f79b6cde497f654654be009d485a84327e0f560fc843
TLSH
T10B31A60FB9859AA7F92E73701D250C48027EC2150F6B7B8753E4DAF7A546B026E3D64C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-lt.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-lt.hyb
Size 7KB
SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
MD5 970c2671eac4fff6d840dc122e43b7c6
SHA1 d849f8b0950dea8c45e60296f6c8a7ae2e0f3f95
SHA512 c6b799aaaa714650ca39f8728bef6989e7e801508366caf1b384f021ee443bf21b3f59d28c2d9123a1f59b4abd3a27522cba830e431940e6ef9dccb5a319d581
SSDEEP 192:EzpJxnGZRt2XF1iG2TPY89i3k4OikTky2mKx:E5ORsmLjH4OikTk2Kx
TLSH
T13AF1514FFC188E52D82178B8E619156E249E538A1ED4632B72BC5479F023E786FF438D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-lv.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-lv.hyb
Size 37KB
SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
MD5 05dfdb7f1ee5744573ccd62ae565b2c7
SHA1 754991bdb092e363b8d884246f4ca780cc9ab2f3
SHA512 11675bc30f19161666f0d7b5ae001cd2682989465dd3f4973c455ba50eb1250e56fd1782d9589af2f8b3d6843a611d75d38e4ccc03a529a7b42cf403c482f2e8
SSDEEP 768:91xhOugI3cO0VLN2o2zmetRffK359CG02:9FtM9c/D4x02
TLSH
T13A031119D7719FDBF59438B92C0701C4A06CFA84BB42AB172285622776215FE3EB325F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ml.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ml.hyb
Size 776B
SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
MD5 84a0a36ea2c5b3209a3cd40d1043230f
SHA1 a98436b640a8cfb9cffa26e89fee768dce6f0747
SHA512 845ab7b075d3ec490c477af3b1f6d28cdc83289d206d079730f69ffd32a0fadb04eb3c9539e4dee6dac080489aea9f3365a20810b4bbb229c2aea3558bcfa1f5
TLSH
T1DE010260BD850B0BC4778E761253DA7642A0C9BC937A291B1398F00A294DF25526658B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mn-cyrl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-mn-cyrl.hyb
Size 5KB
SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
MD5 07cda8332b62726883b29290ca35fc89
SHA1 2e3e1a7e4484225d8e25a59695e86eea9f516ec6
SHA512 a55a5a7ad3e6b084bb15d360a732f344eeb59e0ecdb8a431dc9379653d3cd828131daf18dd91b6b45001aaeecbaa87e1afd6eab4a795373dca1c4e68c7e0cc85
SSDEEP 96:l/PxIafuSv0YHQYYrJ8XFY+qT4uPnjHcMymaH0:lnu7SorJ0FaT4Onjc1pU
TLSH
T1F1B165CD6ED14FF2DB787471942D16A67280FB8835E0126BD279902CD716C387D9328E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-mul-ethi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-mul-ethi.hyb
Size 3KB
SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
MD5 b42317960e5da868a8120cb79a440abf
SHA1 5bc583fe2bcf8d9ef971c66a5f57821aad1458cc
SHA512 c26c686f7a1ae785a6d5b5856670cf9b7bc48e4a388d2e2922b21fd6c0124357acfeb73b370ab617c5ed4b033d945fb3c7cc235a661baaa7fb976dd6edec66c0
TLSH
T1AF711AB4DE80190FCFA5BCB446FF0EDD9AFC905A96290A53B1DC640BCAC5C7066C0698
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-nl.hyb
Size 75KB
SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
MD5 d3bb05944de3d0d7186e7e9383805e2c
SHA1 1b1ea734d900f8d766e7226fee09ee14fe606a7b
SHA512 5fd9c6e5e4f060d1b37b7e80f162ab10c1efb24258a5bb26c89469004191ec5517e4cf4c1c7724c838c62b5358d3c95d515c1ee4a5b001c42c3325ce1d11a928
SSDEEP 1536:2jJm3BkOrDrNWS+9cyF85YT0Bl3aGmsRlSq7wb/lFFQ6B:29m3DXgpeFl3ssRJ7m/lFlB
TLSH
T16F737D69F60B1F41B878A465C69CC76D86443BC628E00B5F9A9F16B8706786D3FC036F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-or.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-or.hyb
Size 647B
SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
MD5 7e265a294303f69aa66c243f5f474463
SHA1 4d382ab4bed3dbe481710f0c651ca87b2394661d
SHA512 d347d422249945c9a664be3c48e1ec07becaf03bd3525869f06c9aa328b4fe2884ac963cb97949d97e5ab41617b0fc6f2a2171f06007bf94cce88d55a15da922
TLSH
T1C7F00E9DF601C74BC0311EB00DB407B92339C729F29B075B926BF121CE8879E988A0C8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pa.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-pa.hyb
Size 607B
SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
MD5 0f27e5bccc1cd9ddf3eac020da27da57
SHA1 bd3c83300aad3e79287c1e806e864f7644240911
SHA512 141da09a4a1a3b9e581751a1b2c70cbe981e1a915ea538a8015c7614d11be059cd3a03b4f2420f963e5657a4417b3cc5c3a22e0028132a21363219e27751ccfb
TLSH
T151F0542D92232CDFF33500F8116A53D402E0C93D8BCF2213E0545A1791FA06A500DAC3
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pt.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-pt.hyb
Size 1KB
SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
MD5 564ff32ded64c6bfc693f2758a53d68e
SHA1 3965f963d36bee1598683e72c857a3bff196b295
SHA512 e9e574ba07703295aa8b7fd4603ef079816ea44394bd62750e08e523b9a7b408fd979552d90d04f825242ccada7ad66003fba76c9c8469541b5c6d2fb85c41e8
TLSH
T1A12149C8FB639B77DD6E1F77508AB60C03D4C2F247C90B1F819C56AF6EA128A0D62551
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ru.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ru.hyb
Size 19KB
SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
MD5 4d132ab42e0c8abd3ba93d8b34bdbeb3
SHA1 f3ce82f2dbdead517d5faa4490e1975ef8fafa6e
SHA512 eb8e27ab070db7407f1ede29751aab4a88f4182e878e956cc51d0ed9ef2c9afdec208f2f4700551374c5a7f69c176ed7d6cb771ac17c3eae77323a5709a85fcc
SSDEEP 384:hRsmaIUzHCX1GgFJwKSw4foB7zM1xnXg3JIcDn4VOzfr7K8lxf4:hR8IUzIRQw4foPM1xn6lDn1TFA
TLSH
T15792A48FEE2E7FB5C4671A73C65E22E4400B27200791EA5E8074047AF1EA46E1F9473B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-sk.hyb
Size 62KB
SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
MD5 cea295e8b4b99f95738727905a9184e2
SHA1 31db6c826fd7830bc76f0ac1b9d21c2ef67f8b1f
SHA512 b20f651c74a070a4d26b58bd8462e553077b7333a2c854f7974a7e67bc442c3a6feba52c3a537fd9f1579d5de0126bbe1da4be99aabee79b7987b2edfdd8ed67
SSDEEP 1536:tIAzVJ7EgiDEY0ZcznEDEo5JWJ4pgY5AW/N+:dhJRiDEfMaEw24auAv
TLSH
T1F2532A46DC298FA9DC3D50FA98E40CA929105ACB5F416C3FBC7C0199BE22D192FE175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-sl.hyb
Size 6KB
SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
MD5 a21358dd4506643486f72f7d80d60a5b
SHA1 fb7ee02adc970f4d71c84d18777a59508fa1a46c
SHA512 7dc9e18050b3df4288aacaaffdb17668f0b5d8b5e103305070d2ef83dab2f5dbe3b071b05ca69340d86a53d47d4cf8197ecc1bdd086a320bf81f9df8c0d3ccb8
SSDEEP 96:LbHqR1cAky2TFP+HQ1QpHPZtCjUtKapFxx8mLJO/5n0PatE08YyM9eW3svUaf5lk:P21cPFPAHPGjpEr85/NVtEjoeW88af5m
TLSH
T162D1D746B6ED8B27E51998BFC347646E817BC10AEB46D242734CC31594C136C9363389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sq.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-sq.hyb
Size 1KB
SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
MD5 a22d0f39cd83f3a8e251f95c5b12dd31
SHA1 24915151b31525a0a9ea0ef7faf8ddb8b3faf11e
SHA512 ad319fc85aa612bedad8289a20fcf42d4336c4b3ed704ce74c6c0ed68e3e18d62c18549f8a5efe5bd481d8def514f2c6b083803485e04bd5919bc600501c0e00
TLSH
T149416ECA57D48F2BE42B1A3109137228922CCF2553A4C34FD0B8915FAF823E9EC00320
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-sv.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-sv.hyb
Size 70KB
SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
MD5 892598dc59ce71e68ed337ed9ff3abc1
SHA1 c89af0d28b8b769150981539ec2318e34df29cce
SHA512 eb13a68ff5cdd0edd73ce4c109984b3e58763812c31755bd55c0a324048873f610e36d1c41b3f642a64f7fe0945ee872a02fde744d5821aab03a2288851d984d
SSDEEP 1536:KC2kHtGIlaNlgMMjmhkFQ0+9FRGv8L38CNf7k2k1rJ:KCDcIlt5mhweMEX42k1l
TLSH
T1BF634A93F60B0F529C7834E5DE591BFE936E6AC61A80452A7A8C6134B13BC6873D035F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ta.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-ta.hyb
Size 554B
SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
MD5 ab2f6f9696fc7d699356244725e7c778
SHA1 2026841da77dd77715b521ec73bf819d1d098b60
SHA512 88a4c2117102bdb60d482448c36dd79a8da1130a4636513c8ed56eb282da6c638d27eabc9799eab8bc1a7234a0aa6690c55408500608387912fe283f13bcc328
TLSH
T1FCF02BA0FA00480BF4B80034B0994248C388C9202A0F0F0F0194BA6F7B9B2B45E020CA
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-te.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-te.hyb
Size 703B
SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
MD5 bf9df63b3c97de3bff99e24ee4bc5f2e
SHA1 774659cf1d58bcfc69900315281e99e038cd2a97
SHA512 52f40a2c38cc62aa6b0e081c90b9dfcd6d3ed03a4a90e596e11ac85bfda96eaa74d465cd7168b803c0d59a53df878b0ea1ca657c5caf3de49c8758cbd527bee2
TLSH
T1AF01E1F8B5008E8FC57F48B0106A569D07B4C11E626E151E8675B856C5CCE1AAD0E88B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-tk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-tk.hyb
Size 2KB
SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
MD5 ed60185b6f455b6f8ed27eaeb73334a9
SHA1 11e53bda5e2a0acd000692ad8af45611b57277ad
SHA512 3ef211a330efe9e34468c9c460dfcda1b8da80d113317a177205c76ffcb916ff25ffcb4485703fd01ee248d356a67e5bb18df8e5ea40b2aab3999121083b7e30
TLSH
T19751FD838A2E2D4DEF60C5B600F57AAE52FB667031D461944C20BAFADD31EC20DC35E6
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-uk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-uk.hyb
Size 18KB
SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
MD5 0ec028755f0cd9ebba41fb7273de8baf
SHA1 a8a784454269a2769710fb3725730f06cdd7b242
SHA512 024c611ebabb0a84b5a887d808e24884ccbb4550f222e651728451cddb9a941d7d9a39786ddfe4a57d049dc82780c6bcf376d3e98547ecc4808fc7ed32ed47a9
SSDEEP 384:+uuckg5iXANOMyv3qTtbfRhn8da+dzk29L5zA:1FviXA4MuofRhn81zk291A
TLSH
T1DE92D76677260FDFE9E75A7B84D800C9A9DEEA9003A5C126D1106736B00EF6C6FC1369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-und-ethi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\hyph-und-ethi.hyb
Size 3KB
SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
MD5 4aa9b2c0c9ccde5140d01dc6502242bb
SHA1 d1759e8a62a42a72529adf9bc73820bf32f2a37b
SHA512 1b456301d814810e857e8a0c426e703a802febb5c3dfd8d0e5c58aeefc6c2d6f55c95830024c243d2bfbb8322ef72e9ff959cdc7f92ae51bebe8b053d9cda1e5
TLSH
T1EB710AB4DE80190FCFA5BCB446FF4EDC5AFC9018A6250A57B2DC640BCEC5C706AC02A8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_338273214\manifest.fingerprint
Size 66B
SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
MD5 1d09a9a5e62b846125cd7b929cccbe44
SHA1 5271237c4d13f7735689a5acc52e48c491669aa3
SHA512 cd2a2acc126ac6a7dcc81088047c894a427a44c5caa96003c1f3521beac3b46c117f0794e564838de14a18a3f65cb7988ba86b404e690ec77a57518247c03fbb
TLSH
T175A02288B00088830A00E2CAC202C88EA080020032002E2C3F200C8BB8C8220AC82CC0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_896467308\manifest.fingerprint
Size 66B
SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
MD5 fa32cf839f99432676ca9acccd8a0550
SHA1 9a869d2475f9840495188509e12ce9ca5a9e7189
SHA512 b1e901d92adecc46f96f52ac38954688f0a2514710041109785656ffe694766448cdbafcda397e9edb196763997d952537ebfefb4e5d128954576024f8856c04
TLSH
T1C5A00216AEA0E812F29486DEC4254B6A14372BF9AE76008979E8E4819C87260815B8D5
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5024_951990409\manifest.fingerprint
Size 66B
SHA256 56d1fe98928ebd4be664fc103e35673a15c2dfa98ff241478bbd39beb15a0754
MD5 bef72178d2d9f61006676a8323ac4a20
SHA1 281541cc22aaab5d71703791192ef66ee2e831ba
SHA512 ee3664c72ee9a894249799b642ed8c1f10b7a7a422d1277d7097f43b4f892d7b267200d323f861bb90b0436262da13dd3c674c4425dfdc264c1cce3755a593a3
TLSH
T154A022CE0CC208BC30008300FC8C8B222000282823280022F8A023CA32EF30AB000C02
MD5 SHA1 SHA512 TLSH

Submit Download

deny_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1153964120\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

deny_etld1_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1153964120\deny_etld1_domains.list
Size 7KB
SHA256 5eab4d72f62e203553df43d7ae2e130716309a8baf9f17315d100fd6e40ae1e4
MD5 fed3ebc587d2984b3a26c093070c6b13
SHA1 05525f884ba816770d971147ac2311f928a8a177
SHA512 1210e8f872db31dcbe0295944916c047d8f552edb4afb854d20af2b5c70b9bb62d76db0b4bacc3ab4773ac4d752b282cc8f93a19eea13b86c36f7d6bc7c9673f
SSDEEP 192:WMUs5HICESAF/UW3H/XohJe/W5iSLAUygbpw:ysdmzuEHP2TAUy9
TLSH
T1C5E1AE389C0EA410B58A5C6DE05847F296CAAB3A25E14C51CD4D4D3A031C2A7DA6CACF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_full_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1153964120\deny_full_domains.list
Size 12KB
SHA256 19e871f69e774c847717469957dd18f342712e702d2c54c5efb8542907bcbabd
MD5 85a2a44606d0d937cb7c3cb97549d1dc
SHA1 27081c556bfa37eef2ac2b0bfafecf90dfa8662d
SHA512 3f564a6b0b71ff54e3cf0e7addd91fb63a2e0d477cacaf73409fcd4c29cfa2076e76d0ca0e330c4fd0fba6cdaec8f118401bb2ce0f83af9e334cd603adb61d24
SSDEEP 192:3zjGRPX/DE6OGcrMHNK17dYuybxV3SOZTAnbtIBzkJkW9ELtW74zPJ1vRbmZM0ED:PAPYmhKh8RvOkWYtW74zBI1F71WqEgOR
TLSH
T16D42D04EF5E8A884C70E0AE50B8C759EDE0A514087A22BD53FB57B5F6988CB9FB11601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

well_known_domains.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1364619133\well_known_domains.dll
Size 86KB
SHA256 f63a806e2b89ed1db25687026abff5df4675a82a13882cdb2a47d1b08d2c996e
MD5 94e3e395b95eed4fe8857e0258d62491
SHA1 0e9bb0173cb2df4be5eea77cef5a09bb5b3116b3
SHA512 b680ece7a8b72a6f78a1643ee52a606fe7a094fe058bac041c25b775dd472834a1df349d45594a11fe6eb4c41d083bdb9809e944d9ff254d795f04e177ac19d7
SSDEEP 1536:HJxEzwtlOEMkVXvopF0BYDfBny/nXi7IruMPzEVWHxgeBz4:HA2DMggpuusPXBuEuaxgEc
TLSH
T17583F14A7AAC149BE9EB8674E2645E17BB72775B071893EF1342D0040DF73C1AE35A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_1489690885\data.txt
Size 152KB
SHA256 bf2c0a94df6f6a32ea1072e61ed3767c23fb8b3e864b0f6144f65c4b8e477338
MD5 6dd40551f20e2c6ad5dc991e60a7d4cb
SHA1 1147d32c228d4def80fb6415d1f58c1edad29055
SHA512 0d654ba49f9c53349b90cd2ce15424477b9c06ae3ae7bcfa09f61e12607f94750cc065d85458e985632f7c316e79d3b9ff279248fa1e6e4181f16e37ab31023c
SSDEEP 3072:GPAgDcCHaLHl65aynyosxb3+BLvf5yTewIjNq/eq:6X1aI5aZoKzMD4Ajy
TLSH
T19FE3F2608EC45F99CFE4292C90BF1F1A63E18BCD811A698EDB63FD066FA7A0415271D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_357006556\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_357006556\_metadata\verified_contents.json
Size 1KB
SHA256 a6ce8c1d0d27c54034e67a83270bf3fd2bdfcc45ffc4b9084357169c00c90f77
MD5 42b331a107b7320d16f115eb7872b3c5
SHA1 3438a81f13c76becc7eb8bf0a7881088e5ad358b
SHA512 afc9393c7a63ec8d95c708eab601ab76887e4600a03b10f3c8c6e6c78c1c48d8b8bc6f059f8f38e66f1e54c5040656b75b6d46b91a795f76dbb5d3c6ac59b333
TLSH
T12F31B7414DD5369EA14E42245AB873AB9F0E71B372C8A51DA9C5900CF4F914ACBD308F
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_357006556\_platform_specific\win_x64\widevinecdm.dll
Size 21.9MB
SHA256 e1f9ad648017e2cb0f0cd798d815dc51012b279ba32571e7b6eb5120b0ed2c05
MD5 046fdd0c07bbac0c160b03a2cea5ad4b
SHA1 fbe9107b962ff2c77070579a8769ce7188c4b473
SHA512 0a3e385a3d27883e6495e4cb4fd20bd5dd0c61176e04df2762fca9d13847c9ae88de7ac57648732ce6d6cce27f2eb9da4dbf9c54d1953504de784c4cb35c8fd2
SSDEEP 393216:DKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHk:MWCmz0dwJIkpqCw
TLSH
T15A37E14AE35350E9E81ECDF0866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_357006556\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 868171d91275d1e180a452621f66428afec0a9288ab96344ce92fc904ac1f70d
MD5 c7bf17a2f118fdb4a4344196706b6393
SHA1 d07695b35bf2f4bd746586fe56ce2ae9d7c99f69
SHA512 11abb5b2ea4120df63216ac38aa85c8deaa7d96b9e0a8867b8f281b0652211f4600bd4107d182f3ea0c657d8a1675ff56d0279837a7c33410a7968f2c5a9a754
TLSH
T1742108F4A215A94A7F50C142053DE827CF3E8AC12C6188B644BFC23628EE7C00F8457C
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_613159546\crs.pb
Size 284KB
SHA256 340643d368df6700a082071385780ba1d8212f35696137b0a44dd8538fa25ee1
MD5 280a97fbbf2e4b70813f616b487143d5
SHA1 804cd67da601cc1a9c248ee59ecb3585e7a0a625
SHA512 47beb2b1f2bd640d24e7793c313c38b42e3e394be9a4eb88c94ac261c5131a1585b39a2431e39326c9197aea29198fc0f60e1c737d354d71cc0f7e0a57c5cf68
SSDEEP 6144:KKqggR3NpUvYpVW+J2aKH66k8G1nT+uuBw1hhd0piFlXGq9V9t:KWsNpUvC2pIYTsTGG7
TLSH
T1C554CF960F383D12BFD2DEE466CCE93B3D79B6E06A6928162111C4F159927E07D8C42F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_613159546\ct_config.pb
Size 24KB
SHA256 a7371e9e40f287ebfd8c444633ff1eef0cc3050b015f761dd16ed5ae8fa1f35f
MD5 84a749aff1727eb9f4c907b1fb1ab051
SHA1 117b3ada2b80e5e03c560fe4b8eef5e8e6a7d760
SHA512 dfc2c3c565cfd5194be7029184db9a5cf5ee50b3a510da52e509e7e630ec963107ff57d65324aac9983f67158b6cacf8c6d03113cae79dbb37b2a413b57627d3
SSDEEP 768:8oIO1NNHA5uAbuOCri7GrZ7gl3u6ksYCjMPI:c+OuAbXGjhsYCQQ
TLSH
T142B2A7BF61159F001753D50896F52BB6E133A3D6C8F3697DB1E28008F1872E961E867B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_613159546\kp_pinslist.pb
Size 10KB
SHA256 71798e7f16d50ccfe2428fbc868f81949f592fbf7b8a64db4753e3fbba8a0d57
MD5 25b685289453d58201e61d13670b7105
SHA1 e3305c5defd136f91236ef6f06cc1536bceb4f38
SHA512 9fb8df9033e7ffb5a47b7a54b8f497a68a839976894a682d21d9d7e52ee8bd3bbc048ac2fb7a53b69d9ca807b42d1feeb17ad1e5eddacd27b46e72dc149dbeaa
SSDEEP 96:nxleRkDB0rBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gNn:3/DCrBnYQ5jlMacFwn2c9x
TLSH
T1A722F1B37904F99390E7E0BE1041F49AE937436540ADF98A528C4A7635F1F0729BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5372_926037411\typosquatting_list.pb
Size 1.4MB
SHA256 148c83fa31e0168254feee87bbcc8db23978d6570f27e8cdcfea38b623adc3c3
MD5 c46ca77e25bab365e4e1dc2edbf40230
SHA1 36d527b6f8e9510a0ccc9eac18bf177a789fb312
SHA512 8c676c66b28908aa6e9e2338031b3bf92ec0c6e4edd2b72755b803e9d2a231199b90f4c3cbb64dcacb6441aa34b651b425ab0be087a2dc7b9b473de04266c4cc
SSDEEP 6144:mjZVMtz0bCqjtXw0BZThj+1rzTacGYk+qlp97CL/LsBjeLXgJG1NSGFlVLpLLDjw:oOz0bCMXZOqKGIiQRLpmqilBLR
TLSH
T18E65C5B9DFC00154DBB8112D20BE71D8181412A540E9DFEAFE7C855F2BC6AC977E89E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/652-5602-0x000002C279200000-0x000002C279320000-memory.dmp

Download

memory/1004-5326-0x00000207C1120000-0x00000207C1240000-memory.dmp

Download

memory/1544-145-0x00007FF8CDF30000-0x00007FF8CDF31000-memory.dmp

Download

memory/1544-263-0x00000191F9630000-0x00000191F9750000-memory.dmp

Download

memory/3236-5477-0x00000158D0530000-0x00000158D0650000-memory.dmp

Download

memory/4012-240-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-3717-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4540-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4902-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-859-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4801-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4467-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4735-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4498-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4658-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4012-4609-0x00007FF72BFA0000-0x00007FF72CBFF000-memory.dmp

Download

memory/4752-5847-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/4752-4785-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/4752-4858-0x0000027F42BE0000-0x0000027F42D93000-memory.dmp

Download

memory/4752-4804-0x0000027EFE880000-0x0000027EFE881000-memory.dmp

Download

memory/4752-4787-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/4752-4784-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/4980-7251-0x0000022E592D0000-0x0000022E593F0000-memory.dmp

Download

memory/5276-13586-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/5276-6043-0x00007FF8AA230000-0x00007FF8AAB34000-memory.dmp

Download

memory/5276-9450-0x00000167988D0000-0x0000016798A83000-memory.dmp

Download

memory/5332-1620-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1618-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1599-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1624-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1621-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1622-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1623-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1600-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1598-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5332-1619-0x000001C2CA660000-0x000001C2CA661000-memory.dmp

Download

memory/5688-262-0x0000019F7A2D0000-0x0000019F7A3F0000-memory.dmp

Download

memory/5688-559-0x0000019F7A2D0000-0x0000019F7A3F0000-memory.dmp

Download

memory/5688-854-0x0000019F7A2D0000-0x0000019F7A3F0000-memory.dmp

Download

memory/5688-4438-0x0000019F7A2D0000-0x0000019F7A3F0000-memory.dmp

Download

memory/5688-31-0x00007FF8CDF30000-0x00007FF8CDF31000-memory.dmp

Download

memory/5856-6015-0x0000026FCC400000-0x0000026FCC520000-memory.dmp

Download