41d83a2d92d1265be68fbf37f149106a5434c90588ffe9c6458f8a0bdaf96e4d

Analysis

max time kernel
151s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 21:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DenxLogs_Suite.exe
Size 80.3MB
Sample261104-1fd4jadw3z
SHA256 41d83a2d92d1265be68fbf37f149106a5434c90588ffe9c6458f8a0bdaf96e4d
MD5 6fa89d215b7bb382db6d7f236bf218de
SHA1 4aac3a2c68d6d70553b7d7623518c577f2ffb327
SHA512 8e27940b2cb2be9edf77a3b9c34c5b7a53e286bf8787a4fb31aeb8112e78144b3b86bb03bd71950e440e6445489b63d22cd6bbe32291866c94fa917aab77334c
SSDEEP 786432:MQrTmd02kGkhjbzSIfPm/epITDkPVaai:rw02kGkVfUepIX0Mai
TLSH
T146089D43EC6515E5C0AE9235CAB296537B317C884B3163D72B90B6386F77BD0AEB9340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
252	python.exe

Loads dropped DLL 14 IoCs

pid	Process
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe
252	python.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_494016547\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_494016547\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_806298273\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_806298273\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_494016547\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_3716_621543579\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_111_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_711457919\_locales\kn\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	python.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	python.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4188	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{7BB8C05A-3C80-4457-B486-3FD6B6C121EE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3596	msedge.exe
3596	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe
3716	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3716	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 3476 wrote to memory of 252	3476	DenxLogs_Suite.exe	89
PID 252 wrote to memory of 3716	252	python.exe	91
PID 3716 wrote to memory of 720	3716	msedge.exe	92
PID 3716 wrote to memory of 4188	3716	msedge.exe	93
PID 3716 wrote to memory of 1976	3716	msedge.exe	94
PID 3716 wrote to memory of 1976	3716	msedge.exe	94
PID 3716 wrote to memory of 1976	3716	msedge.exe	94
PID 3716 wrote to memory of 3916	3716	msedge.exe	95
PID 3716 wrote to memory of 3916	3716	msedge.exe	95
PID 3716 wrote to memory of 5676	3716	msedge.exe	98
PID 3716 wrote to memory of 2320	3716	msedge.exe	97
PID 3716 wrote to memory of 5676	3716	msedge.exe	98
PID 3716 wrote to memory of 5676	3716	msedge.exe	98
PID 3716 wrote to memory of 2320	3716	msedge.exe	97
PID 3716 wrote to memory of 2320	3716	msedge.exe	97
PID 3716 wrote to memory of 3404	3716	msedge.exe	99
PID 3716 wrote to memory of 5536	3716	msedge.exe	100
PID 3716 wrote to memory of 3404	3716	msedge.exe	99
PID 3716 wrote to memory of 3404	3716	msedge.exe	99
PID 3716 wrote to memory of 5536	3716	msedge.exe	100
PID 3716 wrote to memory of 5536	3716	msedge.exe	100
PID 3716 wrote to memory of 5896	3716	msedge.exe	102
PID 3716 wrote to memory of 5896	3716	msedge.exe	102
PID 3716 wrote to memory of 4744	3716	msedge.exe	103
PID 3716 wrote to memory of 2336	3716	msedge.exe	104
PID 3716 wrote to memory of 4744	3716	msedge.exe	103
PID 3716 wrote to memory of 2336	3716	msedge.exe	104
PID 3716 wrote to memory of 764	3716	msedge.exe	106
PID 3716 wrote to memory of 5524	3716	msedge.exe	109
PID 3716 wrote to memory of 5524	3716	msedge.exe	109
PID 3716 wrote to memory of 2604	3716	msedge.exe	110
PID 3716 wrote to memory of 2604	3716	msedge.exe	110
PID 3716 wrote to memory of 5992	3716	msedge.exe	112
PID 3716 wrote to memory of 5992	3716	msedge.exe	112
PID 3716 wrote to memory of 5292	3716	msedge.exe	113
PID 3716 wrote to memory of 5292	3716	msedge.exe	113
PID 3716 wrote to memory of 5992	3716	msedge.exe	115
PID 3716 wrote to memory of 5804	3716	msedge.exe	116
PID 3716 wrote to memory of 5860	3716	msedge.exe	117
PID 3716 wrote to memory of 5880	3716	msedge.exe	118
PID 3716 wrote to memory of 5880	3716	msedge.exe	118
PID 3716 wrote to memory of 3444	3716	msedge.exe	122
PID 3716 wrote to memory of 3444	3716	msedge.exe	122
PID 3716 wrote to memory of 2872	3716	msedge.exe	123
PID 3716 wrote to memory of 2872	3716	msedge.exe	123
PID 3716 wrote to memory of 5668	3716	msedge.exe	124
PID 3716 wrote to memory of 5668	3716	msedge.exe	124
PID 3716 wrote to memory of 3596	3716	msedge.exe	125
PID 3716 wrote to memory of 5288	3716	msedge.exe	126
PID 3716 wrote to memory of 5288	3716	msedge.exe	126

C:\Users\Admin\AppData\Local\Temp\DenxLogs_Suite.exe
"C:\Users\Admin\AppData\Local\Temp\DenxLogs_Suite.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3476
- C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python.exe
  C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python.exe C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\SnowFast_GUI.py
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of WriteProcessMemory
  PID:252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --app=http://127.0.0.1:49928 --window-size=1240,820
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3716
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x26c,0x270,0x274,0x268,0x294,0x7ff8622bc188,0x7ff8622bc194,0x7ff8622bc1a0
      4⤵
      PID:720
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,7100570983010262292,16631746121672489950,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:11
      4⤵
      System Time Discovery
      PID:4188
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,2969721967193451762,11946784812379995039,262144 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
      4⤵
      PID:1976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2676,i,790982538172384626,9814134370686578358,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:13
      4⤵
      PID:3916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,14607659937588692317,4607136344520263129,2097152 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
      4⤵
      PID:2320
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,15380890511964832084,14496429968998163814,2097152 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
      4⤵
      PID:5676
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,822720585331431470,9738952872931510276,2097152 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:1
      4⤵
      PID:3404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,13449042352346442007,9163426312107491836,2097152 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:9
      4⤵
      PID:5536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,13350981883965804195,12596724052422751584,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
      4⤵
      PID:5896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,18074489368076264364,1232649208157930348,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
      4⤵
      PID:4744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,1845007496515645106,18433248661255713173,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
      4⤵
      PID:2336
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5363795552509437087,3088134322794604926,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
      4⤵
      PID:3992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5363795552509437087,3088134322794604926,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
      4⤵
      PID:764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,7688054738213528774,13892848778769372292,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
      4⤵
      PID:5524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,4397245488282579670,6769732913819290675,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
      4⤵
      PID:2604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,6388269478815965958,2797949750434454769,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:14
      4⤵
      PID:5992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,1554330969407661487,6114980648148216956,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:14
      4⤵
      PID:5292
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,15484986476973092786,5787589172438121909,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:14
      4⤵
      PID:5992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,719017440670479337,17599739824234945570,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
      4⤵
      PID:5804
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2389542663839378805,2610363130967018176,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
      4⤵
      PID:5860
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,10806210895220453733,3438976471113489221,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
      4⤵
      PID:5880
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,9654648593985283255,3313888803043417444,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:14
      4⤵
      PID:3444
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,17876503210011474379,18425933229824538601,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
      4⤵
      PID:2872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,7696306268386490561,12890655756265018507,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
      4⤵
      PID:5668
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3116,i,14501698033520402052,7287460029798564408,262144 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,6642491832949448324,15033221979250812787,524288 --field-trial-handle=2188,i,6413368198191228619,14631603816831448634,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
      4⤵
      PID:5288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5368

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SnowFast_GUI.py

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\SnowFast_GUI.py
Size 34KB
SHA256 3db3fb540b1c441bc34723d6daa3cf8137ae1c601915ed1df8e085844663064f
MD5 e371d6a938f5adc4ca8d5336249f80d8
SHA1 79c5a2b7c3a32a06f25aec33a1dda7757141cb41
SHA512 38f8001f3634a5ffac9e7350d6ceefba8d7490810c7a3033fed78a004bc1178b635b737ecea623e5b32beae366097627300e05ba0f906e0cf7e5e07c462ea409
SSDEEP 768:3CkrDo306AYInOR5mrrbv8pphf4a9jTai8pJAg:3CkrDLfYInUErrbkpz4cYKg
TLSH
T1E9F27531D86D5893E353D11D489290926329B89376055838BDECB7683FEC53B82F8AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\app.js
Size 59KB
SHA256 92eb22b34e269d83a17ad066ba6e1e6b3a759c0567c59d4b51214e37fe5cb79c
MD5 92309856a683f0aef77b33e4a6b7569f
SHA1 4283ab07932057d0c4330ab72d8010a5448c6a59
SHA512 b0b9bfc9e18fc45a37dcc00fe932c870562e74b8b04a7d43284b72662224f2c42b17af2e01165f4938ddc38ca2833a42054c07e88e31e6f133c9bff4f10dc8fb
SSDEEP 1536:FpygkpggmL7r1bqlyyUmzIkwS+ebKw4BpYdL5zcxntP:LylCKyS03S1KwuSdVzg
TLSH
T1D053C63051B5003231BAD06E656719263166307B7E16F814776CB9982FEEC3EE5BA23F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crackweb_logo.jpg

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\assets\crackweb_logo.jpg
Size 24KB
SHA256 79fa8bab73ffc119bcd6fb4d3316861c9ab24a58143a835836c9a12a0614abf3
MD5 2252ff6fdc0b5bcfd2982026a1b5d2f0
SHA1 543df350160b75a8beb2c6bda20998c212b4e178
SHA512 489814e2e86af5b639c4f1bc99846a6f1e15af1d1fba0be69acebfc8061e99b2d983c5c4c0897ec232b8af3f739d31b4fffb4cfba5d65a00b55f3f3684b28df1
SSDEEP 768:Cmx2RmKAlaL17F+Nv5XT8l9dA46EG59YK:uEKyaL17yBWdboYK
TLSH
T1ABB2E115B7C40E8DC604267A9920CBAF8B3F9960768B12CD9238C7E383D7ED18568366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.svg

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\assets\flags\ru.svg
Size 262B
SHA256 79bd96fc1db38219321d2a8ab5e94dc603b33ea25107a0d4db1be0bb0ac352bd
MD5 29df41c655ec968092a97b91be8b04ea
SHA1 416a6e7421e315c392d769c20787496d19d22af2
SHA512 77a409add2588b33731649b1563905b44fa4e1eb2150056c5b0371b6449beeb21295b3a64042fc73b5469a769fb207df5e38b234213fc7fabc098382ef340618
TLSH
T10ED0A760E28E650CF7584B8D8218BE6A2303D0DC53754268DA89370560089FBFC711AE
MD5 SHA1 SHA512 TLSH

Submit Download

tr.svg

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\assets\flags\tr.svg
Size 331B
SHA256 c2e92d17762a97ebdf0258c5b93d47352036c8039fb0fb54c980ee9e7e493fd9
MD5 48ff91ce5a330227e02ddedc1329c5cc
SHA1 153268610d2378b245ae43750629671ba7f8fcd3
SHA512 79b93604389c0160a7b5886d3025c7d0db9b463f84da4f1fb632f08f2d9ee4c652e60ad3f47452c50c6a874df851f45629c49d56ea4661764cb6632460984e63
TLSH
T199E07D72F1CCDC39D264811CAB0670C8333BE0C9830813A8DD40AD5530021DF395B18F
MD5 SHA1 SHA512 TLSH

Submit Download

us.svg

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\assets\flags\us.svg
Size 951B
SHA256 48fd8a557f60099a29fd5d31101f3da04bdef30c19c4d3e3cee592a56302690c
MD5 df185b20d21a6d9ef57b5426993eb59a
SHA1 9c00b6975da34322610b52a8208bb148b833957a
SHA512 e6c935d834cdd89c6768013e3313b51dba599ad0db6f8d61fcca4044549d19793030a20234cac545ec6c0f2509e70769618f0425736f56628a64fdff892cf1c9
TLSH
T1BB115C1184FF0809872F72CDD2A8688ADA238497538B0A13F04E3F46AF6BD926913098
MD5 SHA1 SHA512 TLSH

Submit Download

translate_icon.png

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\assets\translate_icon.png
Size 51KB
SHA256 573fe685cfcb6f9068fd8e8e833559d1c7e16bbe8a17b957b68b4eb107f5e6cf
MD5 842b809f85fcdd56633e38d753f25cd8
SHA1 cdda6b3919a720b02e55abda0d9e8f8734ec8e68
SHA512 ee88bbd1aa9f0716511c29b20c9b66835572599494effcbc50c586bb35fb6c8cd782bce96420d9b8c6acbb96c9b344a8a641059db6ec0bfdb6712dfe16c9f9b3
SSDEEP 1536:ikyAR+if6mvi/6/g25cNqaLWDvNuW00kLaHV4:oAaog2yNvLUIWRX4
TLSH
T1E533F1FE930BF5B3EF1A2C49CD5541F86627E39208702F40413ACA9577A34B8E41EAA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\index.html
Size 3KB
SHA256 6339183967cb164f82c3cc4ea45ffb1cb66e3cb5085ba0a803744749ca506ae6
MD5 d5f9d2adad24bc9d3e7a1e77e606bca2
SHA1 464b2e43c987fdc3fc62c696f57fff7a56003fc8
SHA512 c59be333a14832f1716f3ca5dcff44f7e741c126f98db6791b06f7d766397e48dc9dca83be0b3397422536c6d0557af5dba115d6315a09726fc5118ac5b42aed
TLSH
T1B671BF6150FA667B026281C267A76E0A2ED9C207C71A640073FE2EE60FD7C92ED1B065
MD5 SHA1 SHA512 TLSH

Submit Download

style.css

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\gui\style.css
Size 29KB
SHA256 ef0c31549c561040127e691485272ef24b55eeeb22e3aa41ceed738dd41e8c21
MD5 2e2f8fc4ca52fb9763153f208943bc1c
SHA1 efa5ce6416f9476def3863a8dd8627cc1395acf9
SHA512 b46e5a101ef0901359d646a54b6617ecfe141cb11c990f255d360202bb1dc844e7252ff1222d99e7e625d045ce6c42d9fdc6ad5d0bc38d23d3ad2a75c1099a82
SSDEEP 384:0fiXmTbmEUVCkUP4MD4vK7aGX7Xr4F9W0jYhuSKWviq4ebLP4P:YUmOEUckUP4MKK77X8Fw0EuSKWvi4LPs
TLSH
T17CD25032666441207527EA5C66E3DF5E736D7002F509CA78ABE230488FCE2FDD562B78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\VCRUNTIME140.dll
Size 174KB
SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
TLSH
T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\_bz2.pyd
Size 84KB
SHA256 6da4d453852346299e983b458f3ec2f0db3b5f765998ba3f45c91b4a1549037b
MD5 739979534c8ca60e46bddabe2a404839
SHA1 25db2a8e280583dce5c6706f6c46ce52215ae134
SHA512 773bfeb481999b0831a7762245a83a7d8ae699db15ea59bee74dad2b816b1cf2f507661533236f5d146d215d02c27a99b8d2aa7f34fb21b5b25c378aa68df431
SSDEEP 1536:gjDODcz7qBq5IBcOrwTzZP3TmOemIMjTh8vtfsjRKJIPLVJyb2QS9bfIbHtvGl:gHODcz2B8O0pqOrjTuvtkjIJIPLVsHT6
TLSH
T1C2837E52A76472F6F9AF41B596C10353F731BB960710A3AFB244C3853F12B81AF68365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\_lzma.pyd
Size 155KB
SHA256 2b4dcb12c0420ffced4b91968ae4eff6cb585f0f07490160c6da47da63064a99
MD5 7cf9dd2e4839ff0c7c2d6a467de38a46
SHA1 de6c6b88100e5201a4b095293258a381a4e9fdf8
SHA512 541d10e5ed2783d86b2ee19be7d30801ec34f04a6d92589a630ebb7ac66172a64c19b51e29f065db986c3ddff38dea4115c99f892c0a21511dd27df93cc05608
SSDEEP 3072:RK1fxTOfpRnifp5/eNRFGznf59mNo5/ujJIP01MGUT:R6JTOjKsHYhYOgj0z
TLSH
T1AEF35B86A794F0E5F3628C38D2624F57E6F5785A0320929A01CC936D2B1FB759E2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\_queue.pyd
Size 34KB
SHA256 79c196a0804b152fc48b4055387f4352838e41c28863a0c946e7a98137e681e1
MD5 78b92e2645447dc759678a9be94a7b61
SHA1 44c94b113d61341b150b6f2a6a67a9a652b5057f
SHA512 4af14f7dbc5998853bc0d1ad71a7f45c994dcaf8ff083c1a0a7c745eecd5acaa478c8724dda75da33ce107321a883c31b3a03fe194c6dcb19a847185c0232460
SSDEEP 768:72Z6ytZI881IP9UL1yb2Zegc2Ip4ApPpTxf1mlRaXQ6BB:SnZI881IP9Upyb2QS9aPbfIYQ2B
TLSH
T12CF27DC69A6C5047E663C670C1F7EE82F935F7D3560187AF20A9C28E1E133C2A726359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\_socket.pyd
Size 84KB
SHA256 c5936292083189e0675a96ddd0e38235726f1c58195cec64eb0085b9c479ddce
MD5 72950ff47f397e535f6b207f15c18e0e
SHA1 2e617af1aadf1a7fc46e573be4754e17cfc7a4ba
SHA512 5216305b64278abb4220d67b14cba7bb58363b0cbc773a9970607da96987c23863461967137d767bdd49a13128f22218a86ac742e901ab747e5418d1ebde7a6d
SSDEEP 1536:Rtl/fl7Dy+Kf+f9yZ+TqqyJwtQlyJ+i+nzwhdN4jxtN3kx1IPyw3yb2QS9VfILBI:RtRZDy+Kf8GabyJwtQlyJL+nzwhdujxD
TLSH
T1CE835B00A66041FAEBA3D075C2639F63FF74B1C12295975F0066C65A1F33782EF7AA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\_ssl.pyd
Size 186KB
SHA256 30ff82a3ea0c675ddc99e6b14f71ca750f06e77d6653e2da3d7d35b7ef0fc2ed
MD5 b732b9ea24beed95e1cdd46781c4f10a
SHA1 bf85d5ccec9e71edf2844fda9a470254c19a6db7
SHA512 7914bd9befc187130eb556994e7f4bbe62f5b2a4e0dd68e25386980d6106ff5335432bff08b72aec4ec157e5171b54386acd6d6bf360a8d68495b18443b8f1ae
SSDEEP 3072:5N5wSvWfbkqZkNY+NZYf2hX7pJbMNdK1OsmY+pdCN/TEN9MAfXuG8MQNMMLoH9eN:v2RfbVJ+X02hX7pJwPWRMMMQN
TLSH
T17A146B47B6446AF7D802E4F9C2334502FBB0F155331257DE44D6EAA50F0374AAEAAB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\libcrypto-3.dll
Size 5.7MB
SHA256 75495fe0e079ab00d49be740d3c710a0b94e3f74f9648cb7cc9f768fc7f52319
MD5 b306c000f2b892736f0e66d265c61876
SHA1 f5c438c111e261bed3af886683a8ebbda9a4784f
SHA512 9cdc7fe337af7db5b171896d075486ea34ed139cf5c9c7a94903bce61b022e6ce671259675291805123fc739d727b23d4417fb7396d05f78b69321024a9fda58
SSDEEP 98304:GdBL82n7Vh6CLpf7u50n+Q1CPwDvt3uFA0Cv:GfL82n7Vh6CLpf7CuV1CPwDvt3uFA0Cv
TLSH
T1D3567B6AB6A41089E8BAD13CC6534B1BD6B1B854177197CF05A097BD2F33FDA0A3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\libssl-3.dll
Size 1.2MB
SHA256 8957182a9c385bfd9f3f790921de2ddc614cf91f99edbed4e9e5446a46504e32
MD5 5aaafa642930cc5ca5e7b6aa7a07f0a6
SHA1 3500c90b532ac1eb39b421a03bab59ad8149e809
SHA512 07cc0de051cbc1ec13d5648e708be08d12a79dbc0f2df48eeadc82a26cde638d86e2bbb6f71897de0217e29d5e69711632da9076f509eb935e170d35192cdef5
SSDEEP 24576:PKPVy3rUry/1n0EahtEf0O29YlFqW9Rg5aYsG:PKty3rZ1npkdeRg5aYsG
TLSH
T1D0556B6AB7B811ADD5B7D17CC6938B17E2B2B0002360A7EF066087791F23BD6167E354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python.exe

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python.exe
Size 103KB
SHA256 31fe10b4ed82a2f960af0ef9931f46a4b84ff286f8b6ffd9dee098cf4f10f17f
MD5 9ec9d421de6db7d737614a5a59515187
SHA1 a486b73a8febdc16d3a448acd4975009978f2f09
SHA512 51df1df1cb2874877b3eb82e2a65a059c66b0c2a6c1ab32d490a48976d88e166fc8b39f4d30c86ee56eede27566d624701263dcb8aafd8e233a48879315d3eac
SSDEEP 1536:RzKbuEYE+9z2wp+FavGmhMn+IhzZtzA/2ER9yb2QS94fIYYbv:RzKbuAs0FNmhMn+IhN6/2ER4+J
TLSH
T15BA3E48A6A1E8191D5749470437B87F22B2C2F62A9C3C68DA7C17F16E87D2C1F609773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.DLL

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python3.DLL
Size 70KB
SHA256 a1a32b2475675e784d9b34d33d3a8f3e4afaa563da1feb784b0dd69fc4d8f9dc
MD5 549ade9eb6c280900d56fd6afd07b21e
SHA1 3d11820e36a5526a822af150661a20dd7ea1d78b
SHA512 d9af95fad22688bc32f8c6a99d7cc6825d5e1c9e98aaa1fb4421a73ceba80ba11e6bb89898fca877abb311a7c17d026995c7c899e9b9e2c0e16a620d68133ec5
SSDEEP 768:cQEotsskOv6pWVCB4p/uKlZPRQcFIc9qunV0Jku/YFI1Hu1wEBbCpVNyD6VdPxim:AotssyKcunV8Ph1IPy02yb2QS9rfIY2k
TLSH
T1CA633BC25B5BF8A2D6F665FC78DDD9CD242B12CC53268D9FA47993920F0A310A22734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python313._pth

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python313._pth
Size 80B
SHA256 35ddf94682ff9aa713a8d63557242ad00f3f28fdd39337f02c3bda4c0f791577
MD5 c23ad35e55e5b1a71ee2e9dd97723749
SHA1 3c5332fcf5e31d3c84fcba3eb722d4c36a1802cf
SHA512 9fd07332911783ff9d534d952eb8cfece7cbeb1934a34da2ab5274d671c38bdbc75e491b3bcac332dd882310c243f389ac6dc7c0eb80e9c0131dff2244e3ad73
TLSH
T140A0220208A30080002020283FC002F88F32330CAB003A0E8BC02E380B00E30ABE202F
MD5 SHA1 SHA512 TLSH

Submit Download

python313.dll

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python313.dll
Size 5.9MB
SHA256 3b29bf9ff39bed8f660f5b935f19657f7ce7f145009851741b11364f6ebcb862
MD5 8365bdbf9aa838ad35c5a1f99b786707
SHA1 c491e5c224e2bb408229e61b92c06dbe2fe4d7e7
SHA512 541334ed59296d89808fcedf04aa9e85c5b6f3cc83b3fa3268dce80fa79c15cc1265d2c4e82f629737e7a42f97dd3636370257769d569681a09d740b92ac93df
SSDEEP 98304:/cir7sZ4Hh9ZA7hCluH2tfVTobJKvGHDMiEfbjDV:X7sZ4Hh9O71Ui4F
TLSH
T10E567C16729D41ACD9B78078CA078A0BF7B2BC413F60534B61E6BB5D2FB3362466E705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python313.zip

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\python313.zip
Size 3.7MB
SHA256 e35d379ff88b85e5e7044e5a4dc9e1d1666b65ee5d5e06071baf134d4f23d3d8
MD5 728c3c117f765fd608b39f08aa42cef8
SHA1 a000c3dbedcb7a7b0cf6c841bfa3aa085cd85569
SHA512 4d227fa3e8b16e4a4fc99aa7bed33e422e15586043df70032f6c1deb7c80c71ec3db00b8eda16ea15d177111b4ae9aac3820b5fca8f5821264170ca6c36ab226
SSDEEP 98304:FV5XARb1wxNL2sgp5+LEunhNgmnHLLFCf:L5XAR1S4hOLWerxe
TLSH
T16806333E847D561BC6A3BE75613CCA1A9D5C8780B6C0E20F6F0C81E1AE1F5F06B5E45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\select.pyd
Size 32KB
SHA256 17df388a7aa42e7f066b80aa4f77cbbba9286495e6f3508425806be6766d122b
MD5 295f399e34f8eb1b25b3c23b4b42ade8
SHA1 c8ab8ec9214f09699e3e29ad74c1eacc71097d03
SHA512 03d0b3c83b100552976fb8284c6648683280b9ed507577984744a61665cfcaefe4aebb734f54438c4817ea20d98ed4e8048c01e71cbb3ca8bebecc0db4b8b629
SSDEEP 768:7pX5SZnf8TaP1IP9GCyb2Zegc2Ip4FTxf1mlRaXk6U:NX5S5f8aP1IP9GCyb2QS9/fIYkP
TLSH
T1B0E28DCA5B785047EA63C671C5E2DE43F93AB3E35611829B31B5C1DA0E137C1A736358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\DenxLogsSuite\runtime\python\unicodedata.pyd
Size 695KB
SHA256 d113047658f92d893bf4ee2da81ffbd624ec5c485733c02e116fac1b9a1b964c
MD5 de962494598225de5066c6091e1688c1
SHA1 bd5e641c473dc876927676db8a8058a6c7b75612
SHA512 e50fe338ecefb86cf7efe1b765a2c5b0971ab1711cbde2b7841e12818236714dea57a7aa6bedf8239eaefea473cac6f463cea269f2548829576822a0eaedf5a1
SSDEEP 12288:Wj7Y4dLI/X77mvfldCK1ihH32W3cnPSqrUgg+E:Wj7Y4W7qNxq3cnPXg+E
TLSH
T1F6E4F6D5BBCF8D26E68B363948E3710F5171C3B35F1A863AB2182361D85B3B449D582E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34f60487-0598-4423-a711-1343503be697.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\34f60487-0598-4423-a711-1343503be697.tmp
Size 38KB
SHA256 b9658db9e5a20d581147e19e2db26ce075667e82c808df406a6ae117651fd113
MD5 9e7d015240705d9d16df69d05f4549b9
SHA1 33b30604e9ac65216b8e2fc3bab5800a14376d7b
SHA512 2d59b37b69fd8f253b41c98681304f36c9404f263708b917a6efa2c143dd94db2c9ff7fbc49f9a7390621224e501c2b64c3a6f7de196dc253cf4aea9a0b17350
SSDEEP 768:R/UxvxjgC+i34Z9TOfwfzpfzDt+yJYe1ELsAvC8/YNnSHrkw:kZj3+i3hfwfdfZYe1EQujY1S4w
TLSH
T1C203BF32DC789C735EF2A798774A5757FFF4412394C01AA88AD92B0D05C32AD230F86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

416448b8-30ba-43fe-aa27-bb5fd13557ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\416448b8-30ba-43fe-aa27-bb5fd13557ec.tmp
Size 37KB
SHA256 39e1897d872cf2d28aff78969b3d722999a9a9c3369620ec91115c986afb9cce
MD5 1dce7557d98e33374a7a9994550f5431
SHA1 f3de125136c839f8793e7fb9863dc0e9d9f714ba
SHA512 d7f65c19345e26b6b59a8af3d78d92c14c2e91fffff122a5aab2b4ca4dfeb6099707be48b7fa659f07aa6646295117239e2d28746bb830393607406f03d935a6
SSDEEP 768:h/UxvxjgC+i3Eg9TOfwfziKJYe1ELsAvC8/YMSZSHrkw:0Zj3+i38fwfvYe1EQujYRS4w
TLSH
T10F03CF36ECA48D375DF2A388774A5717FEF4811394C41AA886DD2B0D06C72ACA30F85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5725755e-d773-4c3c-acf3-9630e6c1b43d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5725755e-d773-4c3c-acf3-9630e6c1b43d.tmp
Size 33KB
SHA256 ec5f3d7a226c22bd878fa04b6024315cef8b01403b891a07fe089f5dad113fee
MD5 d678b1a2d73d8ca2cc71984ce89f30f7
SHA1 981d37d05675fd82d418f87e35c1c18e99fda48a
SHA512 59e3286718752a3fe9e4484cbfa5f7c393a2fbdf28d9572667b0245c258d979d71a8f1955ca9c365ce71ea43ceac5d53dcce8c8e4c915574ae182b81f6f2f37a
SSDEEP 768:713a/9TOfwfzpfzDtQyJYe1ELsAvC8/YEnE75EZLo:713FfwfdffYe1EQujYGkyU
TLSH
T139F29E71E8789D775EF1AB95F3492B63FFF4811394D80A54D6DA260D00C36AE234F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

21e55834-6662-44eb-94d0-65926a999bdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21e55834-6662-44eb-94d0-65926a999bdc.tmp
Size 12KB
SHA256 e99545796e6b03d3c87e2c03d5d8be7e101259db762a05b9b01fd1bb860563d7
MD5 fca4fdfc3b34a11871547083da6c8761
SHA1 d5d9ca9fe953c08179c97e271c6825f8c4c731aa
SHA512 ba2e0c421e7855c4f475ee4e728e7e56c8b1fb698773e896d9d86f9b9fe9b906ae31995887736ed01919b29dcdadbb8a8b3bfca9419b791391abcb5f0a6289cb
SSDEEP 192:sxReRZsp/feLsPGZyPzoA8p+P/g6+WNVQJ/YxyqU/+GyJIgB1/HJ:sxRe0p/fasPwymQ/5W/EU/E1f/p
TLSH
T19B42A755AA28A97B4CCBD219FA55BF53D2F92032A1D41E48B6FCD91C04E76DD220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3baf4c33-78cf-4b97-b389-69fb87d7b736.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3baf4c33-78cf-4b97-b389-69fb87d7b736.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6c6369ef-7d77-42b0-9b66-88558362b43d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c6369ef-7d77-42b0-9b66-88558362b43d.tmp
Size 27KB
SHA256 9fafc1a42656b58721f40bda20892b0507008bcc5af678bdbedc20315ab20090
MD5 713e08a8ef2341b79329da5381225672
SHA1 a79119d3b3c67f5c79f8d94b69e310708bcf0d4e
SHA512 f9d1cdf20cd2582c65200d3314c056a2277596f5f5eb0c882e114df7d5aa3a5c5d8b8bc886344956349762ae13a45ca9aa579b4bc1b3024539d17e624015c26d
SSDEEP 768:zBDnIx7pLuLbYFWgbjfkW8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYBK3aropUTh:zBDnInEbYFWgbjfkWu1jaj03RUh
TLSH
T1A2C2C87B740CCA7F4F804ADD9C197E9E6DA802CB9A98CD8047FE945C02C67EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86287760-eec9-4b6a-95ac-921bb1e4c757.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86287760-eec9-4b6a-95ac-921bb1e4c757.tmp
Size 11KB
SHA256 fd2cb89af876f4548907085d84f18ca491a071a1b7658a72b1745b5b5e398078
MD5 7140a54639199fecb03b9e94bab7f834
SHA1 f450654dec0b331511ed5739d70721276baa4c92
SHA512 d54c060ff23b707fdab5b21f717ce1ff87dc86e3d2d06e2f6614da703275779b5d5780fff7dd35d9fa9a748cdbb99dd5a736d78f54c749376372420d597a6a41
SSDEEP 192:sxRFRZsp/feLszqrVilzoA8p+P/g6+WNVQJ/YxyqU/+GyJIgB4OJ:sxRF0p/faszeiIQ/5W/EU/E1Ga
TLSH
T14342A655AE28A93B5CC7D219FB56BF53D2F91032A1951E44B6FCDA1C04EB6ED220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 76db73018fa703776156ddf26cb83564eefd7294d536123785ec12f8b706e3c7
MD5 814f54ab2e7201500649eb988c7ece2c
SHA1 d7e6dc161ed7336bdaa558c332c5b924dce8c0ee
SHA512 f29c1961c182b66e9952b41667b0fac9dde4be045d97cf50810d3ed65f3188af882f89fb77ad09c0a052f83d5381fb59a001cb30d4eeb0884409bfe32b16e076
TLSH
T1C961E9B852785467FFB90EB483D2AEE33A3641DA51433E511DB3DAFCA42A33006750E8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f268d163590cae6ccba68f04c3ff160778f445936ef2be7dabb145fec7f1f7e5
MD5 e6f4c456f1f45656f3778560f25ead1d
SHA1 960467fcc7279342ea8906231bfe3dfaf10a640b
SHA512 22209a8bfbd2116d40440203c9bdd30e47e1e72a5093d03edb0e8421f3e996b2bd691003f0194fea8bfa47701ceeb035df7d398f2ffb3938407acc91df46bb85
TLSH
T1EA61F8B852785463FFB50EB487D1AEE33A3A41CA51433E511DB7DAFCA42A33002710E8
MD5 SHA1 SHA512 TLSH

Submit Download

974fa5d0-f8cc-4064-a549-0b0bf8659c07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\974fa5d0-f8cc-4064-a549-0b0bf8659c07.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

73d9fe1e-a7ae-436f-b297-548266b5c9a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\73d9fe1e-a7ae-436f-b297-548266b5c9a2.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

8482f908-3fef-448b-8c9c-d3f4a398db9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8482f908-3fef-448b-8c9c-d3f4a398db9f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fea97d3e-00d3-4ce0-82b0-f911ff9ddf16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fea97d3e-00d3-4ce0-82b0-f911ff9ddf16.tmp
Size 2KB
SHA256 a30be1b4918ac09a3798f0e7e6ab057045d45c63b2813a98b1ffb9d4d6a5a256
MD5 c89ad91ec78182977ee66f4cb22f282d
SHA1 bf3859af15818fec491ab1284a3d0dea126c44ae
SHA512 dceb6cfa7446782028dcf5762f449b4afe235549bfcda492e8e70ec7a20aecdc0f749353de5b84731419247ab1100fd66e4fe88387c2d4a879f663802d3e2573
TLSH
T1F9419CF383F4856ECA0196F0AB186E1FCE2D0515432C7D5A89E4AE2B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aa24d85f44d2851818a6cf3c2c74f989407f4e416f472f5e177d24d8e4b05625
MD5 beef0e6c4e671570f11a76426656331b
SHA1 7b39ea3d4bb83e411f182bca1cd498b9d2db6ce8
SHA512 c1b21ffa7f5867e71e4e4e8a374670d44f4e12ff9f48f24fb80b2ecb9090a506dfe71ebc0ec053cb77fcabf14687fb67df994bb7acc35c56f92d6afcc3368542
SSDEEP 48:KMidI8iYoJTsbEIaEJKVA9SJR6ZoDUI6yDPqjvhBhaTJspIa/aKVv9taRvKoUF9o:K45WKqEKyAAKZOyu0KTq+3GTimMp
TLSH
T13291282434AF0620F97D391871E9A76A13433AA33018E56F3BEA44715EA7E150EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a456dad5-5b0f-42f6-a71d-9397ba1fa833.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a456dad5-5b0f-42f6-a71d-9397ba1fa833.tmp
Size 12KB
SHA256 22bd18244695bec80408b868fcf965878e63529c363ea2655d32b817ac1c1e4d
MD5 6b5613a1ede9bddf7e55c6f438dc0a94
SHA1 3af160d4f18c26cd186720961351c5ab30344daa
SHA512 6a62a1db21ad81e888aa9feabe78da62670a4c9313890e8e64f7964e642d03041baabf47c2398c678d40dad8c5955662d0999c87252f49c403ffd831e1289320
SSDEEP 192:sxReRZsp/feLsWGZyPzoA8p+P/g6+WNVQJ/YxoqU/+GyJIgr1/HJ:sxRe0p/fasWwymQ/5W/YU/E1x/p
TLSH
T13842B755AA28A97B5CCBD219FA55BF53E2F92032A1D11E48B7FCDA1C04E76DD220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2ef8f1c-77a8-4061-947d-a49626a19a4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2ef8f1c-77a8-4061-947d-a49626a19a4b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

dbc21993-9fde-4f32-a2bf-4148bb19446f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dbc21993-9fde-4f32-a2bf-4148bb19446f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bec61879-da50-4016-9d86-ee71bfa5d58b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bec61879-da50-4016-9d86-ee71bfa5d58b.tmp
Size 38KB
SHA256 c64479ffde7f5ff494e2566f68fd8285fbef1eb610b9f200f41036f60f708fff
MD5 3bd3d347372c7fe9d0f64e57d5d4b67a
SHA1 3144b4a035287d39871386740370f6e234dd4894
SHA512 96ec996bd106e5e14b4f05353cf071824cb9a96297fa48d94c4b3bddedfe80c133bfcd72c69e98f67b2cd4d641ffcd7ab37d7da34f5aae9a80c2c18af69d97ec
SSDEEP 768:7/UxvxjgC+B3L/9TOfwfzpfzDtEyJYe1ELsAvC8/YEnhBGq:uZj3+B3UfwfdfPYe1EQujYGTGq
TLSH
T17003BF31DC78AD335EF1AB59B74A5767FFF4402394C40AA88AD92B0D05877AD134F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c12869e3-87f6-4215-99af-d9a667836571.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c12869e3-87f6-4215-99af-d9a667836571.tmp
Size 33KB
SHA256 9893ad108071f315aaff67570195a663e7917c51920b01e0327aa0aeff018fa6
MD5 fc3036f4cca0f8286eb4c34cb5e33d2b
SHA1 b87a52e6bfeeaed2d4fd20bc2810a252e5fd9d13
SHA512 741fbb8eb33a05320368e8e3f623f126506f4e6701c311cef985ae130daa236a76984b1799b82335e6fddb4d31ac7e6132292b67f6accec12f40c095fa696341
SSDEEP 768:J13D/9TOfwfzpfzDtQyJYe1ELsAvC8/YEnE75EZLo:J13MfwfdffYe1EQujYGkyU
TLSH
T1C3F29D71E8789D775EF1AB99F3492B53FFF4811394D80A54D6DA260D00C36AE234F82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3586783-18fa-42de-877d-a845033dacf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\b3586783-18fa-42de-877d-a845033dacf7.tmp
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

e03b752b-852f-44e4-b0a4-3cbe837c23a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\e03b752b-852f-44e4-b0a4-3cbe837c23a2.tmp
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

fa8c4d78-d8cd-4c39-92fa-1a9742269c20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\fa8c4d78-d8cd-4c39-92fa-1a9742269c20.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

d3b79b36-48ca-470a-86c1-4ee542c8547a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d3b79b36-48ca-470a-86c1-4ee542c8547a.tmp
Size 37KB
SHA256 dd1672a832ead9b40e7992d42d8353d4a6dd52839e02f5b148f58c4e8b62ff3f
MD5 0cec94fa7c120065ae7632f005082807
SHA1 de1484432246ffd33dd4ea113ea3ce64cc410c46
SHA512 3012e85d76b5fb94433994941a92252fd4f345ce5a7de1d488a47cdd8cdd12c8ca562fd72fae404c2a5083ef55576fac38dd2531b26d7016a0284f1dff9d92a3
SSDEEP 768:kFuZ33wgC3JOfwfzpfzDtYtGJYe1ELsAvC8/YEnE75EZLo:ZZ3lfwfdfKqYe1EQujYGkyU
TLSH
T1A1036C72D864CE7BAEF29B95F3097B57EEE4411385D849D4DAC92D4900C32EE134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afa9dfe3-8fed-43a8-be35-916ac2ec69af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\afa9dfe3-8fed-43a8-be35-916ac2ec69af.tmp
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

b74cefa1-dd79-4364-89ef-dbacbed974a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b74cefa1-dd79-4364-89ef-dbacbed974a6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

909205c5-edca-4add-b969-bafd6920ef2c.tmp

Path C:\Users\Admin\AppData\Local\Temp\909205c5-edca-4add-b969-bafd6920ef2c.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c485b0fb-04e8-4dbd-8af3-45c2c45cf10c.tmp

Path C:\Users\Admin\AppData\Local\Temp\c485b0fb-04e8-4dbd-8af3-45c2c45cf10c.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3716_1713550729\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3716_331452630\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_1593872358\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_494016547\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_740761293\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3716_806298273\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download