Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/11/2026, 17:37

General

  • Target
    Axor-Loader.exe
  • Size 24.5MB
  • Sample261104-v66zcaea92
  • SHA256 091c1cc989e9a78232dab157085199cd5924a6dd17255f4eceaa34c3a69a3ab4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Axor-Loader.exe
    "C:\Users\Admin\AppData\Local\Temp\Axor-Loader.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1588
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Axor-Loader.exe --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1588.512.2143351032063619675
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:1708
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0xf8,0x7ff9f60cb078,0x7ff9f60cb084,0x7ff9f60cb090
        3⤵
          PID:1876
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1852,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=1848 /prefetch:2
          3⤵
            PID:1832
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2056,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:3
            3⤵
              PID:4404
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1784,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=1832 /prefetch:8
              3⤵
                PID:4904
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3656,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
                3⤵
                  PID:2976
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4152,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
                  3⤵
                    PID:2324
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2292,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:8
                    3⤵
                      PID:5440
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4900,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
                      3⤵
                        PID:388
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4680,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
                        3⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:660
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView" --webview-exe-name=Axor-Loader.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4896,i,2884010230957420960,4089491139885187170,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
                        3⤵
                          PID:5976
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --disable-background-mode --no-first-run --no-default-browser-check --disable-sync --new-window "https://api.axorvisual.cc/api/auth/google/authorize?state=70ea8a00a578f5a3baa168eac0cfe4168a4e6f79a0eedfbc"
                        2⤵
                        • Drops file in Program Files directory
                        • Checks processor information in registry
                        • Enumerates system info in registry
                        • Modifies registry class
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of WriteProcessMemory
                        PID:4648
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ff9f359c188,0x7ff9f359c194,0x7ff9f359c1a0
                          3⤵
                            PID:2000
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,3595571228952194874,16605775150114025745,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:3
                            3⤵
                            • System Time Discovery
                            PID:4848
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,14600177769415431257,9633104752941756238,262144 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
                            3⤵
                              PID:2632
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,2503746986076335932,4889366468055623722,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
                              3⤵
                                PID:2436
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,15978769650712873646,5377841953171352808,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
                                3⤵
                                  PID:4472
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,4171328664117567380,18087842485779472315,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
                                  3⤵
                                    PID:2988
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3900,i,14268502426731269886,3046255655527692278,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:2
                                    3⤵
                                      PID:2416
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4020,i,9713784113754944577,7893849234081359711,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4040 /prefetch:1
                                      3⤵
                                        PID:4020
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4044,i,5386540270152707836,12151966342754081567,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4076 /prefetch:1
                                        3⤵
                                          PID:5032
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4140,i,13251166429852315162,963692911234612871,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
                                          3⤵
                                            PID:3872
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4388,i,10258915462370814462,5256518690250683577,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:2
                                            3⤵
                                              PID:1952
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4184,i,11095190344842283982,2169741597696247906,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
                                              3⤵
                                                PID:3356
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4412,i,14559490492259900047,17342695894591518403,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
                                                3⤵
                                                  PID:2872
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4472,i,16825381035774597177,1069304270118923571,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:2
                                                  3⤵
                                                    PID:2668
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4512,i,8935909317467917168,1591703906394496399,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
                                                    3⤵
                                                      PID:4060
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4572,i,11662205099685226614,14629492913774196092,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:2
                                                      3⤵
                                                        PID:3620
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,5223137134525996260,5936829210351968194,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
                                                        3⤵
                                                          PID:5708
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4664,i,8051709318662587966,6631351865320553300,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                                                          3⤵
                                                            PID:5892
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,14873112553245349212,2971033371254421639,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
                                                            3⤵
                                                              PID:5976
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6480,i,2222986013856997392,5768862488288441298,2097152 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
                                                              3⤵
                                                                PID:6096
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,9473108256881503029,12858676325850884568,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8
                                                                3⤵
                                                                  PID:6140
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,13734843814381550371,13928299922386307100,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:8
                                                                  3⤵
                                                                  • Modifies registry class
                                                                  PID:2308
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6904,i,16460930998790091488,15442047744327347341,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:8
                                                                  3⤵
                                                                    PID:2828
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6916,i,7868958388420879836,5093943161793471463,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:8
                                                                    3⤵
                                                                      PID:2084
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,4257852410054542122,13046852682349417210,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:8
                                                                      3⤵
                                                                        PID:5776
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,4257852410054542122,13046852682349417210,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:8
                                                                        3⤵
                                                                          PID:5768
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7676,i,731093488536526920,10515117309526760080,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:8
                                                                          3⤵
                                                                            PID:6004
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7680,i,6535876868475389468,13773430561010947810,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
                                                                            3⤵
                                                                              PID:4284
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7844,i,3766570320413023412,3782161599400020962,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=1660 /prefetch:8
                                                                              3⤵
                                                                                PID:5712
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7880,i,17305282064585153915,17331485333385270004,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:8
                                                                                3⤵
                                                                                  PID:3920
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8000,i,7415633309661668841,7657677350017419945,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=7784 /prefetch:8
                                                                                  3⤵
                                                                                    PID:5224
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,13306704708412770213,2356780289995331820,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
                                                                                    3⤵
                                                                                      PID:5804
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,7087724838802271100,4247969673546558517,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
                                                                                      3⤵
                                                                                        PID:6080
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,16350140198918513192,2426399018977937174,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4108 /prefetch:8
                                                                                        3⤵
                                                                                          PID:6056
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,786270440248051494,7928054281153820279,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
                                                                                          3⤵
                                                                                            PID:5516
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,13284050462239085218,16351638512725929706,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:8
                                                                                            3⤵
                                                                                              PID:5744
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,10587746810098546626,10871714722037301892,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
                                                                                              3⤵
                                                                                                PID:1500
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11285562541691496845,5577524633262816409,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
                                                                                                3⤵
                                                                                                  PID:440
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,6331294369689919278,13716218641547573955,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
                                                                                                  3⤵
                                                                                                    PID:5488
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,1336919161317378449,9794675307953657538,524288 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
                                                                                                    3⤵
                                                                                                      PID:3160
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4852,i,9625269619800192953,12537754052329905216,262144 --field-trial-handle=2452,i,3992038075389254778,15494967372822959963,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
                                                                                                      3⤵
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:4940

                                                                                                Network

                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                      Replay Monitor

                                                                                                      Loading Replay Monitor...

                                                                                                      Downloads

                                                                                                      manifest.fingerprint

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_1952304580\manifest.fingerprint
                                                                                                      • Size 66B
                                                                                                      • SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      manifest.fingerprint

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_769922479\manifest.fingerprint
                                                                                                      • Size 66B
                                                                                                      • SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      verified_contents.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\_metadata\verified_contents.json
                                                                                                      • Size 7KB
                                                                                                      • SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-af.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-af.hyb
                                                                                                      • Size 70KB
                                                                                                      • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-be.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-be.hyb
                                                                                                      • Size 5KB
                                                                                                      • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-bg.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-bg.hyb
                                                                                                      • Size 3KB
                                                                                                      • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-cs.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-cs.hyb
                                                                                                      • Size 62KB
                                                                                                      • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-cu.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-cu.hyb
                                                                                                      • Size 51KB
                                                                                                      • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-cy.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-cy.hyb
                                                                                                      • Size 35KB
                                                                                                      • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-da.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-da.hyb
                                                                                                      • Size 6KB
                                                                                                      • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-de-1901.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-de-1901.hyb
                                                                                                      • Size 118KB
                                                                                                      • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-de-1996.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-de-1996.hyb
                                                                                                      • Size 117KB
                                                                                                      • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-de-ch-1901.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-de-ch-1901.hyb
                                                                                                      • Size 117KB
                                                                                                      • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-el.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-el.hyb
                                                                                                      • Size 4KB
                                                                                                      • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-en-gb.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-en-gb.hyb
                                                                                                      • Size 45KB
                                                                                                      • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-en-us.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-en-us.hyb
                                                                                                      • Size 58KB
                                                                                                      • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-es.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-es.hyb
                                                                                                      • Size 14KB
                                                                                                      • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-et.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-et.hyb
                                                                                                      • Size 20KB
                                                                                                      • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-eu.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-eu.hyb
                                                                                                      • Size 665B
                                                                                                      • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-fr.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-fr.hyb
                                                                                                      • Size 7KB
                                                                                                      • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-ga.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-ga.hyb
                                                                                                      • Size 34KB
                                                                                                      • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-gl.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-gl.hyb
                                                                                                      • Size 9KB
                                                                                                      • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-gu.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-gu.hyb
                                                                                                      • Size 655B
                                                                                                      • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-hr.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-hr.hyb
                                                                                                      • Size 2KB
                                                                                                      • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-hu.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-hu.hyb
                                                                                                      • Size 309KB
                                                                                                      • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-hy.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-hy.hyb
                                                                                                      • Size 605B
                                                                                                      • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-it.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-it.hyb
                                                                                                      • Size 2KB
                                                                                                      • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-ka.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-ka.hyb
                                                                                                      • Size 9KB
                                                                                                      • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-kn.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-kn.hyb
                                                                                                      • Size 711B
                                                                                                      • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-la.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-la.hyb
                                                                                                      • Size 1KB
                                                                                                      • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-lt.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-lt.hyb
                                                                                                      • Size 7KB
                                                                                                      • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-lv.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-lv.hyb
                                                                                                      • Size 37KB
                                                                                                      • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-ml.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-ml.hyb
                                                                                                      • Size 776B
                                                                                                      • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-mn-cyrl.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-mn-cyrl.hyb
                                                                                                      • Size 5KB
                                                                                                      • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-mul-ethi.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-mul-ethi.hyb
                                                                                                      • Size 3KB
                                                                                                      • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-nl.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-nl.hyb
                                                                                                      • Size 75KB
                                                                                                      • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-or.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-or.hyb
                                                                                                      • Size 647B
                                                                                                      • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-pa.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-pa.hyb
                                                                                                      • Size 607B
                                                                                                      • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-pt.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-pt.hyb
                                                                                                      • Size 1KB
                                                                                                      • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-ru.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-ru.hyb
                                                                                                      • Size 19KB
                                                                                                      • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-sk.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-sk.hyb
                                                                                                      • Size 62KB
                                                                                                      • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-sl.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-sl.hyb
                                                                                                      • Size 6KB
                                                                                                      • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-sq.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-sq.hyb
                                                                                                      • Size 1KB
                                                                                                      • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-sv.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-sv.hyb
                                                                                                      • Size 70KB
                                                                                                      • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-ta.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-ta.hyb
                                                                                                      • Size 554B
                                                                                                      • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-te.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-te.hyb
                                                                                                      • Size 703B
                                                                                                      • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-tk.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-tk.hyb
                                                                                                      • Size 2KB
                                                                                                      • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-uk.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-uk.hyb
                                                                                                      • Size 18KB
                                                                                                      • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      hyph-und-ethi.hyb

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\hyph-und-ethi.hyb
                                                                                                      • Size 3KB
                                                                                                      • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      manifest.fingerprint

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping1708_93051552\manifest.fingerprint
                                                                                                      • Size 66B
                                                                                                      • SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      nav_config.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4648_1028440529\nav_config.json
                                                                                                      • Size 2KB
                                                                                                      • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      llm_user_input_extractor_config.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4648_1200172838\llm_user_input_extractor_config.json
                                                                                                      • Size 4KB
                                                                                                      • SHA256 2056ee7ed0e7adb69344c93a024158ee4e2332ecd50d183dbad7595c4d588ed9
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      office_endpoints_list.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4648_1200172838\office_endpoints_list.json
                                                                                                      • Size 9KB
                                                                                                      • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      smart_switch_list.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4648_1200172838\smart_switch_list.json
                                                                                                      • Size 2KB
                                                                                                      • SHA256 d490aec3403b2daa86aa095db121c2dfee0a35c3ed0770284c0bd0e0a103c776
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      protocols.json

                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4648_1971587975\protocols.json
                                                                                                      • Size 3KB
                                                                                                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      1d6adf09-e892-433b-ac61-2191b608663e.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\1d6adf09-e892-433b-ac61-2191b608663e.tmp
                                                                                                      • Size 23KB
                                                                                                      • SHA256 082ee02bcef5d17bb967c8a18efafc6ab2d3cf3ce78a88541f9fea81b41a377f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                                                                      • Size 135B
                                                                                                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      settings.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 937ce6010a08965e319419136e4ee72c661add0be0239a9eb650a6f4e5e7478c
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      settings.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 67785e058e38ad91d9efa07ddc0ff0c45714a80c3801ea7de5d351f9c6e72a0e
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      07ab05c1-a3ee-48ba-b9a2-c633910c8dd3.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\07ab05c1-a3ee-48ba-b9a2-c633910c8dd3.tmp
                                                                                                      • Size 9KB
                                                                                                      • SHA256 c5e82372074f017827d11b2ac8a316eedeba58413aea88ddd163ab65d5a3907e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      000003.log

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Asset Store\assets.db\000003.log
                                                                                                      • Size 33B
                                                                                                      • SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      temp-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Code Cache\js\index-dir\temp-index
                                                                                                      • Size 648B
                                                                                                      • SHA256 30b652b8a2a41dba788abf86771b71e4262c6f3d2da210d9605ccb05fb4c3d3e
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 48B
                                                                                                      • SHA256 c66e46708fef4531a1d69201824c688ead59c0a8eec940f4ec1a9df902aade37
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Code Cache\wasm\index
                                                                                                      • Size 24B
                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      51466222-62ba-4347-93a4-a5c63fbdca00.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\DualEngine\51466222-62ba-4347-93a4-a5c63fbdca00.tmp
                                                                                                      • Size 2B
                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      dasherSettingSchema.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                      • Size 854B
                                                                                                      • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      006140ab-1fa4-43ae-b21d-76c6c1df1c28.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Network\006140ab-1fa4-43ae-b21d-76c6c1df1c28.tmp
                                                                                                      • Size 59B
                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      650c6c3e-7c23-43e0-9fd9-be73936a4426.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Network\650c6c3e-7c23-43e0-9fd9-be73936a4426.tmp
                                                                                                      • Size 5KB
                                                                                                      • SHA256 049296912d2b48b621b86215cb619f882211168c616a3328c2bf33f9d106edf5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      c4ce18bd-6280-4e0c-89f0-600bfa766e02.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Network\c4ce18bd-6280-4e0c-89f0-600bfa766e02.tmp
                                                                                                      • Size 40B
                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Preferences
                                                                                                      • Size 9KB
                                                                                                      • SHA256 cc47e0e4ce424ca6df9b7cead388970bb420035b7aec33ed85677a5cdaa0babe
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      temp-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\temp-index
                                                                                                      • Size 72B
                                                                                                      • SHA256 713287006871585c57ff43de4cb34b464eb1a7a6481aff385b461408125b939c
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      temp-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\wasm\index-dir\temp-index
                                                                                                      • Size 48B
                                                                                                      • SHA256 be70c82431aa8d86217efa99acfdb8937ef0b985eec96142d2165d997bfcb84a
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      dab794f5-7560-4833-a48a-182a22315c4c.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\dab794f5-7560-4833-a48a-182a22315c4c.tmp
                                                                                                      • Size 29KB
                                                                                                      • SHA256 a5e35c1c3716520a2fa7c5879d2331c2b5fd8fbaf95484fced9c11172912aa67
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      fb1a9c47-eb27-4ad9-b846-eba27f4f9c47.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Default\fb1a9c47-eb27-4ad9-b846-eba27f4f9c47.tmp
                                                                                                      • Size 9KB
                                                                                                      • SHA256 f3b25a0250bcbddd01aba22f4b1d31152dc25f4002678c1363cfe20bbde7c097
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      5ffc69f9-d979-4c22-94f1-5dd0b2769de4.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Edge Cloud Config\5ffc69f9-d979-4c22-94f1-5dd0b2769de4.tmp
                                                                                                      • Size 22KB
                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      OperationConfig

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Edge Cloud Config\OperationConfig
                                                                                                      • Size 3KB
                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Edge Data Protection Lists\2026.6.5.1\manifest.json
                                                                                                      • Size 165B
                                                                                                      • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\Local State
                                                                                                      • Size 1KB
                                                                                                      • SHA256 4631916469d029e113ea5c19ddd0bba672927691cc30a0af6416fa21df988446
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\OriginTrials\0.0.1.7\manifest.json
                                                                                                      • Size 43B
                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\WorkspacesNavigationComponent\1.0.0.5\manifest.json
                                                                                                      • Size 160B
                                                                                                      • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      a0b0ded1-e458-4154-a1f8-bff174cc0b25.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\a0b0ded1-e458-4154-a1f8-bff174cc0b25.tmp
                                                                                                      • Size 13KB
                                                                                                      • SHA256 f630b9f57a41a4ae81431756627db8c0206b64d94b3b2258f182c92ee7553671
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      a2545963-780b-4b76-934c-b739c76963b4.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\a2545963-780b-4b76-934c-b739c76963b4.tmp
                                                                                                      • Size 5KB
                                                                                                      • SHA256 16394ea2733faa7d199115b4ae332b056eef3c60c045296ace8fc38705084f9f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      aa9b8bdf-9c43-4238-aca6-b5e58920f56c.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\aa9b8bdf-9c43-4238-aca6-b5e58920f56c.tmp
                                                                                                      • Size 4KB
                                                                                                      • SHA256 f0a54ec33126261482ef6552ef51ec847d318694c9f8c403b3d6edd543d94d40
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      6d982a76-ffa8-4e77-ba3c-b3a24ec789ec.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\component_crx_cache\6d982a76-ffa8-4e77-ba3c-b3a24ec789ec.tmp
                                                                                                      • Size 372B
                                                                                                      • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      a5b8a434-3ed8-4d31-823f-c52b6d14574e.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\component_crx_cache\a5b8a434-3ed8-4d31-823f-c52b6d14574e.tmp
                                                                                                      • Size 252B
                                                                                                      • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      de7d75e3-e30b-4e79-8dd5-ad9f01b93f23.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\component_crx_cache\de7d75e3-e30b-4e79-8dd5-ad9f01b93f23.tmp
                                                                                                      • Size 132B
                                                                                                      • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      ed19dc69-c07e-4f0c-ba82-daac7cc0e292.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\ed19dc69-c07e-4f0c-ba82-daac7cc0e292.tmp
                                                                                                      • Size 13KB
                                                                                                      • SHA256 e5b29c75a2bd4af7c5ecb92574666b00506f0ba5300bdf049fd082cc96cb0467
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f0717fe6-35fe-45c4-b0ce-6c5f9175ab63.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\GoogleBrowser\66e9b76d48ae3b168e023fb6\extensions_crx_cache\f0717fe6-35fe-45c4-b0ce-6c5f9175ab63.tmp
                                                                                                      • Size 13B
                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      32a6e9f8-b7e2-4c1c-8dba-c9fb95c69ffd.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\32a6e9f8-b7e2-4c1c-8dba-c9fb95c69ffd.tmp
                                                                                                      • Size 16KB
                                                                                                      • SHA256 2f8d908464f63ed64b7dd0567aa3b5f7e697d0ef0c7bddee72eb42a8bec573e6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      54ef90cc-cc2f-4b74-b3e3-62da4938a8b6.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\54ef90cc-cc2f-4b74-b3e3-62da4938a8b6.tmp
                                                                                                      • Size 2KB
                                                                                                      • SHA256 42656d10310b88d2e087a3293e3b3888bf73452bf975cfa7f9f84db455dab7aa
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      84fc4c45-4f18-48a9-b77f-860949664ce0.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\84fc4c45-4f18-48a9-b77f-860949664ce0.tmp
                                                                                                      • Size 3KB
                                                                                                      • SHA256 142802a4d84a36c9413b97597fafcce045012ff53be29f9d5a412b5bb5dd01bc
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      86faf7f3-1457-4a18-a32a-3e85acec0e5d.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\86faf7f3-1457-4a18-a32a-3e85acec0e5d.tmp
                                                                                                      • Size 16KB
                                                                                                      • SHA256 8ee9a416fe491d117a20e3ea238de83f26cd68def7f987f435eda824f6ed371a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      crl-set

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\CertificateRevocation\6498.2026.10.20\crl-set
                                                                                                      • Size 13KB
                                                                                                      • SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
                                                                                                      • Size 118B
                                                                                                      • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      settings.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 fdbe7772e31bbbeae6500fc3cf3f0bba93e93dc56528e78d2d10ed24d8ff813b
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      settings.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 5739596316f327182789c3ccd4ced2c7c2457c87aa310f956c433a03b11eccaf
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      throttle_store.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Crashpad\throttle_store.dat
                                                                                                      • Size 20B
                                                                                                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      data_0

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\GPUCache\data_0
                                                                                                      • Size 8KB
                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                      data_1

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\GPUCache\data_1
                                                                                                      • Size 264KB
                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                      data_2

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\GPUCache\data_2
                                                                                                      • Size 8KB
                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                      data_3

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\GPUCache\data_3
                                                                                                      • Size 8KB
                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                      SCT Auditing Pending Reports

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                                      • Size 2B
                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      f3527d93-bd3c-41f4-af75-18560e3e94cd.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\Network\f3527d93-bd3c-41f4-af75-18560e3e94cd.tmp
                                                                                                      • Size 111B
                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      MANIFEST-000001

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                                                                                                      • Size 41B
                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      CURRENT

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                                                                                      • Size 16B
                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      d35ed967-f85d-4b37-9e83-e903a3921097.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\d35ed967-f85d-4b37-9e83-e903a3921097.tmp
                                                                                                      • Size 6KB
                                                                                                      • SHA256 c3cea66e0a3eed95f629ed1a145e65cb7071fa9999373a263440f5fadff8bbe6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      e06118c4-293b-4cf2-97e8-4bba3ff625d1.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Default\e06118c4-293b-4cf2-97e8-4bba3ff625d1.tmp
                                                                                                      • Size 6KB
                                                                                                      • SHA256 08f5455ed4797a5f2ccabe7508b43804954fed21d971e2711a5f76bed0e16a3b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\Local State
                                                                                                      • Size 1KB
                                                                                                      • SHA256 94c968fdb9565bc7d873802836f2550ca213a712b9dbdff8e2ca0f98f19356b8
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      f5507126-8056-4461-a56a-55dc58ad1136.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\f5507126-8056-4461-a56a-55dc58ad1136.tmp
                                                                                                      • Size 1KB
                                                                                                      • SHA256 6292f684831712633e938bf51299de13984385f30a1727fbfdbe1aa6195faffa
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-as.hyb

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
                                                                                                      • Size 703B
                                                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-hi.hyb

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
                                                                                                      • Size 687B
                                                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      hyph-nb.hyb

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
                                                                                                      • Size 141KB
                                                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      manifest.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Axor\LoaderWebView2\EBWebView\hyphen-data\120.0.6050.0\manifest.json
                                                                                                      • Size 82B
                                                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                      • Size 2KB
                                                                                                      • SHA256 853cef7aeb7e4c4db6c2d766b4fd94edfd17c43f58e5f5bc9579df825edac93f
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      0e7a95b7-ea6c-43a3-87cf-0d957c7fdae8.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\0e7a95b7-ea6c-43a3-87cf-0d957c7fdae8.tmp
                                                                                                      • Size 158KB
                                                                                                      • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      c58c49b2-b2f1-415f-80f6-6f1c00981d70.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\c58c49b2-b2f1-415f-80f6-6f1c00981d70.tmp
                                                                                                      • Size 1B
                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      messages.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4648_1007291324\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                      • Size 711B
                                                                                                      • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      8409c002-96b2-4bb6-9b8b-5119eeae3973.tmp

                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4648_1503605538\8409c002-96b2-4bb6-9b8b-5119eeae3973.tmp
                                                                                                      • Size 10KB
                                                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      content.js

                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4648_1503605538\CRX_INSTALL\content.js
                                                                                                      • Size 9KB
                                                                                                      • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      memory/660-1409-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1406-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1404-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1407-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1408-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1405-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1403-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1399-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1398-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/660-1397-0x000001E7C6FF0000-0x000001E7C6FF1000-memory.dmp

                                                                                                      memory/1588-10-0x00007FF70F1B0000-0x00007FF711B0F000-memory.dmp

                                                                                                      memory/1588-19-0x00007FF70F1B0000-0x00007FF711B0F000-memory.dmp

                                                                                                      memory/1588-208-0x00007FF70F1B0000-0x00007FF711B0F000-memory.dmp

                                                                                                      memory/1588-2-0x00007FFA12C00000-0x00007FFA12C02000-memory.dmp

                                                                                                      memory/1588-6-0x00007FFA11420000-0x00007FFA11422000-memory.dmp

                                                                                                      memory/1588-8-0x00007FFA10A50000-0x00007FFA10A52000-memory.dmp

                                                                                                      memory/1588-7-0x00007FFA10A40000-0x00007FFA10A42000-memory.dmp

                                                                                                      memory/1588-12-0x00007FF70F1B0000-0x00007FF711B0F000-memory.dmp

                                                                                                      memory/1588-5-0x00007FFA11410000-0x00007FFA11412000-memory.dmp

                                                                                                      memory/1588-0-0x00007FF70F273000-0x00007FF71028F000-memory.dmp

                                                                                                      memory/1588-206-0x00007FF70F273000-0x00007FF71028F000-memory.dmp

                                                                                                      memory/1588-4-0x00007FFA12C20000-0x00007FFA12C22000-memory.dmp

                                                                                                      memory/1588-207-0x00007FF70F1B0000-0x00007FF711B0F000-memory.dmp

                                                                                                      memory/1588-1-0x00007FFA12BF0000-0x00007FFA12BF2000-memory.dmp

                                                                                                      memory/1588-3-0x00007FFA12C10000-0x00007FFA12C12000-memory.dmp

                                                                                                      memory/1832-41-0x00007FFA126C0000-0x00007FFA126C1000-memory.dmp

                                                                                                      memory/2976-155-0x00007FFA126C0000-0x00007FFA126C1000-memory.dmp

                                                                                                      memory/4904-67-0x00007FFA11410000-0x00007FFA11411000-memory.dmp

                                                                                                      memory/4904-76-0x00007FFA11420000-0x00007FFA11421000-memory.dmp