65b4260dd7f5ae6a7ca5ff1df7aa48b738cc07b056fe47c830d632c62e3455a2

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 21:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WiFiAssistant-v1.5.8.exe
Size 24.6MB
Sample261104-zz8ltavvbw
SHA256 65b4260dd7f5ae6a7ca5ff1df7aa48b738cc07b056fe47c830d632c62e3455a2
MD5 a4bb4b3cd249640a1d5358739b7adb15
SHA1 6616f11f4f804882de5eab88b2f9957ad7db5df1
SHA512 7146baf871018f2ac3d39c9db54c40392eef0280af7d85ca0f7a3f7ab16ef455b3d915ece2a35566a26b2e52a9d5c441ca0d9c1202dc6369609225fd780ae417
SSDEEP 786432:166KY03vi6By+eiuWsxsP7UB3tFZo62NDGW:1zK9a6reiuWsqA/o62sW
TLSH
T1C9473321EA53C174EA3D90BDB75E91BEF970982AFB1550C0FA5C42D4DBE1B632078A70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
992	node.exe

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_1425033880\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_1249145436\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_1249145436\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_14548109\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_14548109\nav_config.json	msedge.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3864	powershell.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	node.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	node.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	WiFiAssistant-v1.5.8.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	WiFiAssistant-v1.5.8.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3544	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{0F842FFA-7C1B-46C1-961E-579309FB7926}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3864	powershell.exe
3864	powershell.exe
2100	msedge.exe
2100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe
2504	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3864	powershell.exe
Token: SeDebugPrivilege	5484	WiFiAssistant-v1.5.8.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3864	powershell.exe
2504	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5484 wrote to memory of 3864	5484	WiFiAssistant-v1.5.8.exe	89
PID 5484 wrote to memory of 992	5484	WiFiAssistant-v1.5.8.exe	91
PID 5484 wrote to memory of 2504	5484	WiFiAssistant-v1.5.8.exe	93
PID 2504 wrote to memory of 704	2504	msedge.exe	94
PID 2504 wrote to memory of 3544	2504	msedge.exe	96
PID 2504 wrote to memory of 2884	2504	msedge.exe	97
PID 2504 wrote to memory of 2884	2504	msedge.exe	97
PID 2504 wrote to memory of 2884	2504	msedge.exe	97
PID 2504 wrote to memory of 5868	2504	msedge.exe	98
PID 2504 wrote to memory of 5868	2504	msedge.exe	98
PID 2504 wrote to memory of 952	2504	msedge.exe	99
PID 2504 wrote to memory of 3004	2504	msedge.exe	100
PID 2504 wrote to memory of 952	2504	msedge.exe	99
PID 2504 wrote to memory of 952	2504	msedge.exe	99
PID 2504 wrote to memory of 3004	2504	msedge.exe	100
PID 2504 wrote to memory of 3004	2504	msedge.exe	100
PID 2504 wrote to memory of 772	2504	msedge.exe	102
PID 2504 wrote to memory of 2492	2504	msedge.exe	103
PID 2504 wrote to memory of 6076	2504	msedge.exe	117
PID 2504 wrote to memory of 2480	2504	msedge.exe	106
PID 2504 wrote to memory of 1828	2504	msedge.exe	107
PID 2504 wrote to memory of 4340	2504	msedge.exe	101
PID 2504 wrote to memory of 772	2504	msedge.exe	102
PID 2504 wrote to memory of 772	2504	msedge.exe	102
PID 2504 wrote to memory of 5272	2504	msedge.exe	105
PID 2504 wrote to memory of 6040	2504	msedge.exe	108
PID 2504 wrote to memory of 2508	2504	msedge.exe	109
PID 2504 wrote to memory of 2492	2504	msedge.exe	103
PID 2504 wrote to memory of 2492	2504	msedge.exe	103
PID 2504 wrote to memory of 2364	2504	msedge.exe	110
PID 2504 wrote to memory of 6076	2504	msedge.exe	117
PID 2504 wrote to memory of 6076	2504	msedge.exe	117
PID 2504 wrote to memory of 2480	2504	msedge.exe	106
PID 2504 wrote to memory of 2480	2504	msedge.exe	106
PID 2504 wrote to memory of 1828	2504	msedge.exe	107
PID 2504 wrote to memory of 1828	2504	msedge.exe	107
PID 2504 wrote to memory of 4340	2504	msedge.exe	101
PID 2504 wrote to memory of 4340	2504	msedge.exe	101
PID 2504 wrote to memory of 5272	2504	msedge.exe	105
PID 2504 wrote to memory of 5272	2504	msedge.exe	105
PID 2504 wrote to memory of 6040	2504	msedge.exe	108
PID 2504 wrote to memory of 6040	2504	msedge.exe	108
PID 2504 wrote to memory of 2508	2504	msedge.exe	109
PID 2504 wrote to memory of 2508	2504	msedge.exe	109
PID 2504 wrote to memory of 2364	2504	msedge.exe	110
PID 2504 wrote to memory of 2364	2504	msedge.exe	110
PID 2504 wrote to memory of 2548	2504	msedge.exe	111
PID 2504 wrote to memory of 2548	2504	msedge.exe	111
PID 2504 wrote to memory of 6072	2504	msedge.exe	112
PID 2504 wrote to memory of 6072	2504	msedge.exe	112
PID 2504 wrote to memory of 1404	2504	msedge.exe	113
PID 2504 wrote to memory of 888	2504	msedge.exe	114
PID 2504 wrote to memory of 1404	2504	msedge.exe	113
PID 2504 wrote to memory of 888	2504	msedge.exe	114
PID 2504 wrote to memory of 4436	2504	msedge.exe	116
PID 2504 wrote to memory of 6076	2504	msedge.exe	117
PID 2504 wrote to memory of 6076	2504	msedge.exe	117
PID 2504 wrote to memory of 4252	2504	msedge.exe	118
PID 2504 wrote to memory of 4252	2504	msedge.exe	118
PID 2504 wrote to memory of 5436	2504	msedge.exe	119
PID 2504 wrote to memory of 5436	2504	msedge.exe	119
PID 2504 wrote to memory of 5036	2504	msedge.exe	120
PID 2504 wrote to memory of 5036	2504	msedge.exe	120
PID 2504 wrote to memory of 2612	2504	msedge.exe	121

C:\Users\Admin\AppData\Local\Temp\WiFiAssistant-v1.5.8.exe
"C:\Users\Admin\AppData\Local\Temp\WiFiAssistant-v1.5.8.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5484
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell.exe" -NoProfile -NonInteractive -ExecutionPolicy Bypass -STA -File "C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\node.exe.extract.ps1"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:3864
- C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\node.exe
  "C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\node.exe" wifi-bridge.js
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --app=http://127.0.0.1:7717/ --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --no-first-run --no-default-browser-check --disable-features=msSmartScreenPrompt
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x278,0x7ffbf073c188,0x7ffbf073c194,0x7ffbf073c1a0
    3⤵
    PID:704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,13353665949504378071,10015705997598399721,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,10227819914925444108,17113230584746839820,262144 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:2
    3⤵
    PID:2884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,6402021608655054172,3165126949355995451,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,3576222784919149004,12079139716831896286,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,4878798292755404086,10516856339272718516,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:3004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,10724070456016131512,9849969126262317976,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
    3⤵
    PID:4340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4336,i,2094207449375388104,7272497248639564046,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
    3⤵
    PID:772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4360,i,6200271404820503858,16282532063446397319,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:9
    3⤵
    PID:2492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4424,i,4209247775580824994,4715377192107885385,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
    3⤵
    PID:6076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,1278675701529431024,2273068981329476576,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4440,i,10919704991481521304,2723059620986826928,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:9
    3⤵
    PID:2480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4476,i,5633344936389652997,4683641333273346234,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
    3⤵
    PID:1828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4540,i,14722799798318645747,6963349840497646591,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:9
    3⤵
    PID:6040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4520,i,5935324696103597803,12494043322539529135,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
    3⤵
    PID:2508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4448,i,15349844164437447209,3482130688058590148,2097152 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:9
    3⤵
    PID:2364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,6636631129638087652,12632033918744168233,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
    3⤵
    PID:2548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,6550461423619382240,15958865445460439565,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,16696486687757527900,2581104921282972627,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
    3⤵
    PID:1404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,13696012843006941658,2322270410501428192,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
    3⤵
    PID:888
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,15622466351435642573,15660869981058668888,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:14
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,15622466351435642573,15660869981058668888,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:14
    3⤵
    PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7092,i,16078398796187198543,9679259972804795043,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:14
    3⤵
    PID:6076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7312,i,8698884005464993624,62209370591433915,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:14
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7104,i,12444367026742975197,12738896707798020943,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:14
    3⤵
    PID:5436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7196,i,10028774023019240360,7414521438322369425,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=7264 /prefetch:14
    3⤵
    PID:5036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7668,i,17223508389001004680,16741923962466171930,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:14
    3⤵
    PID:2612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,12558382554958225413,15312257658968693181,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:14
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,13316915241809981437,9170607493420545969,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
    3⤵
    PID:1180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,9943706471487683096,1758091361963196045,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
    3⤵
    PID:3304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,4090865074459379775,9864252807383349431,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
    3⤵
    PID:5056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,14471767738646925815,10498240017093565061,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:14
    3⤵
    PID:3096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=820,i,5662251103524821067,14655087283000953402,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:14
    3⤵
    PID:4256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,14171470004850931901,4012040518127917674,524288 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
    3⤵
    PID:1768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4816,i,12914401434676665622,3470179431763898043,262144 --field-trial-handle=2712,i,15647379922247569926,16066921984702203140,262144 --disable-features=msSmartScreenPrompt --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2100

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

33663633-48ae-46d6-a092-420ddbe47242.tmp

Path C:\Users\Admin\AppData\Local\Temp\33663633-48ae-46d6-a092-420ddbe47242.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e899a10-b174-400c-8b5f-c71721665bbb.tmp

Path C:\Users\Admin\AppData\Local\Temp\3e899a10-b174-400c-8b5f-c71721665bbb.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\index.html
Size 105KB
SHA256 3597ca4a2133deac01a46780dee1cd20ac6c9155cf8804ed54ecedd0f160de17
MD5 85f019703bca9f33d0ea597f6ca50320
SHA1 e23a97bfe80cf07aed2e2733169e356ab92509a2
SHA512 adeb8296fc71b6ee63db471f3a2345228df7f2a49e29d488ae90c47e0a200126398fd3bbaf428fdebb1d65148a8184e3327d9b9149be4d102b24345a27e2a672
SSDEEP 3072:TtA+900TuSlaVPeunPMM5b0TbFOo+kgETD1tKC+7ksJH9w:TqpbeuPMM5YTbgo+kLTD1tKC+7/Q
TLSH
T1FAB37CF372C0247391F644E6716AA35A70944107F8174990FA6C66B3BBE5DE3913EB8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.exe.extract.ps1

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\node.exe.extract.ps1
Size 744B
SHA256 4270ca314358a52ffcd2bcbe202fc08f03962eee792ca4a688bfc0f1b59597b8
MD5 6feeb535d415bca30c4c203826ce05a9
SHA1 eb60a5df36fc1f3db49fee803ac24845edf5fc11
SHA512 2b462c679d4b8cdc36e902f6d4d906be4d7bbea9c648968d8c21186020fc75ff8eb429f0c9d8f98f97a0d414636c4bce71657f6613ee74f6f369c3a776ad42cf
TLSH
T153014C069356C75EA39AE07358D113FDF792040DBAAA3B15DB0CD4A4302A60FFA69586
MD5 SHA1 SHA512 TLSH

Submit Download

node.exe.tmp.cab

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\node.exe.tmp.cab
Size 23.9MB
SHA256 46d98751c37808a881302f827147c85c5e38caf3e8ffb8b0708e3102e618ecb2
MD5 ebf5a7e0de85d7b6407f08ca79b07d2d
SHA1 97d7729d1bd128fcbd27790b7608bad817750317
SHA512 daa34750b28204cc40f6be6282eb77ef327ce218957c283a4d56b3003e43dbd2ae8e46a4cfdface1ddaa2571e44749d2017638c11053ccbed492837ffeb257be
SSDEEP 393216:P9P66xjMS6K03wyNiZtCXPpy+eJpys9jLaDbsxsPjDrUBM6nSWBbFZoLxs2u+DGM:J66KY03vi6By+eiuWsxsP7UB3tFZo62x
TLSH
T156473320DE23C6A4FE2DD0BEBB9EA5BFB970AC29EB1450D5EA5843D4D4D17272074930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d80965e-09ed-4c7e-8a70-8eda0a04d51f.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\2d80965e-09ed-4c7e-8a70-8eda0a04d51f.tmp
Size 4KB
SHA256 f8ed6fe8a1414d835cc148b8e16d87eeef43b595251627ab015eef56c839f634
MD5 131b7935dfe6a81472c3775a7c4c736e
SHA1 8d2dd84172dc71ac41bc439deb34db7a87e1887e
SHA512 58dd7d61b43fd43585725fae4073b293c129597c4d6e82e7dbaf89712a4bd651341892c1f1835d4fcd328ea2642c4cb5496baed1868d71a02e534665a2676f70
SSDEEP 96:JqGNkkQsFfH4he58Frh/cInURoDotovAtDRBVbvO2zpOP0eUnlEmDVLDq4a:wGN4GcooDUw+n0KOPqrDVLM
TLSH
T164A1B5B15434A8BB9BF19E55B58A3A07AFF43137E0A47F84C9DC1A1C04DB7941386837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f5df114-ee3f-41f0-bb85-d7f9b9658b0c.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\3f5df114-ee3f-41f0-bb85-d7f9b9658b0c.tmp
Size 13KB
SHA256 36a42467e31831d51c82077156d01fa5f1e18ed39d88be1ea579a9291959dd78
MD5 b5258064da113f79818ad9b0aec6221d
SHA1 8cc27672d55492322e82c8fdefabdf24d7f57ed3
SHA512 1bc28376a812ec56f55f248abe076aaf0ab26da47d2382fc4f4888bfa747e2163bd85d21e25871972acf6fe983d36e8b026f5561cf54a862d99adba1556f0c71
SSDEEP 192:uuCP8ULHcP1cZLxRm88SvjiVw8N2CYT5pG+ooDUuxcYtWR+XPqrDVLA57vBnE/7x:neQkUSvX8N2CYfpSKWRccW7vBE/VIIl1
TLSH
T1D4525BB258656D6786F28E11F25D3B07EFB4A167D4E81E90D8D99B2D00C73892387C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Crashpad\settings.dat
Size 280B
SHA256 7f33364257f2f403ce7aa7e5c5bc1a5d0cd2710e3482fa9507dd808eb58d065c
MD5 98a8f39f6d02ea79a423a4ce092a7d47
SHA1 23a8539afa42b353548d5c8072ebdde1b0ab639b
SHA512 af06a1b314d3401225233e1e33b8ec03635a8d65eba8bdf53fd88c5ef45bd311d1a10622385af80b6dce33701c6948a6ef81132b6d07e5c1c07da4652ed03663
TLSH
T10DD0223CF3BA000FC2CC2032E0228200B00CCA38808A3B008023BB8A0E00CC82032308
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Crashpad\settings.dat
Size 280B
SHA256 3c514888e965e0cbbf306a3c6af2e0b25a904dd1adf139d343b2e8e3b5f0de2c
MD5 e3241a6e083f0d6f9eacdb29b477ad54
SHA1 8212acda00df63cdea43f8fbfa81897dba300768
SHA512 2f5b9bfd09a7325edd16c496fcd3b5433282776e0871f2fef0e425793bae73f1fb20fcc7bfe1c442a41305ab596ed296204e1f9965861996b4f0a38bdc160af0
TLSH
T155D0041171540105D14C10315034D15011044414000537104411551554415450001101
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

3ec20367-29ab-4fc1-96d6-0730e82a63b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\3ec20367-29ab-4fc1-96d6-0730e82a63b7.tmp
Size 9KB
SHA256 9338b78e7756ed35c64e2b84b04880e2526413d330877dd4ebfe628102544a3f
MD5 cf614e6ffa80936ff739f9f1286de71c
SHA1 da74dbeadc81c4671fdf92c238b43ed5464d74d8
SHA512 9b451ae52cddb78d6eede5f2da774854d8f5fa187e6c397989043fa6d0ea6126a97e7c7322a051fd683768026e6e5ebfff33e5f563098a211b65a9aec983f1f0
SSDEEP 192:sxRFRnw/fSsk9u6Idpwb/gb+WNoLB/d3vgU+AYBhg7J:sxRFlw/fSsksTu/cK/p7rY0N
TLSH
T18B22E7956D28687B8CCBE20DBA75BF56E2F5602191D40E48EBFCC61C04E67DD224781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e26683a-c8cd-4ecc-a150-44a7f831a608.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\9e26683a-c8cd-4ecc-a150-44a7f831a608.tmp
Size 9KB
SHA256 5f072e655a20430621102bd2638f4e3b6ed7c46b4cde02201d49a6efb5837da4
MD5 1c4a78e3ebe4321cecd25d93f637a4ac
SHA1 4020657004a1849303f281ccc5d14a0dcf2342d3
SHA512 d51b2e37bddd4b9d3af531d09ec38ed60bd05c8a3a0f0f61056becbc79ec97ac6c24c0d038cb358a3ce6bb42e2eed9f8116eaca1cb75f5a99e6a484b68c89aa0
SSDEEP 192:sxRFRnw/fSsa9u6Idpwb/gb+WNoLB/d3JgU+AYBhgJJ:sxRFlw/fSsasTu/cK/b7rY0z
TLSH
T12112D7456E28A87B4CCAE20DBA75BF57E2F55021A1D40E48ABFCD51C04E67DD224781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Code Cache\js\index-dir\temp-index
Size 384B
SHA256 dc2d02deb5e7cd67b9b6aad2db6fc2e0cbe541db30121e353204cf4bffb0d18a
MD5 12b1ec47d037b519f0dcd7ca844b99c5
SHA1 a284bfdb3befc65af28286af9369a57381d9cbb9
SHA512 9c69c718849e0bd48511a09650aa27a16f920224db4a3969781de252ee97fa43f58b70b17a83b83ee619c9cf3befe1d99bc89490bb8a31342269a23fd14ffb17
TLSH
T1C0E05E4343DDF0A1CFDD38764C249F1C2515C5F1554533AB9D5890BA45139F6D9A00DB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 f9f48b050227d8056c930b02df66363c620ae105f2431500f4af34b2a1e9d190
MD5 8194fb5b897c552d1e754bc2ffac8038
SHA1 1c333c7224ba7a489d596ff55d156e16b9b6b35a
SHA512 c2ce1150dc5e95a7b9c54324bffdfc61e376c5b5b0e9aeceb9c4cc7541595b698fddda397abb273c84d11bb55591a50f92ac4d4b31278a775c0a64f4321b19ae
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

c69ed9b0-6a42-4ee7-ae62-c49ffa20b1bd.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\DualEngine\c69ed9b0-6a42-4ee7-ae62-c49ffa20b1bd.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

492f6abc-1c9f-433f-92d4-b8755e390c31.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Network\492f6abc-1c9f-433f-92d4-b8755e390c31.tmp
Size 1KB
SHA256 8a86f99fc5389449ce6114bf6c65c599bd4d630683f0fe6d6602ef2eeea8240b
MD5 908f77e2dd94a43bd9fe914faec629fb
SHA1 9e2aebc4dee17db61adafedd23dc2fe10b5d6695
SHA512 ec54364a39d4c005bc77dc0c5a2bdf8b2efe51a6c92c7bb5d63357a7c4d738ccd63f0e4bc5d648b93429b2c628b88f8346c69c9811448e3a36bb6727daba4bd0
TLSH
T1F831C2F3C3E8856E8A0156F4A728AE1FDE1D0915832C3D9AC4E4AF1B93F2871D18195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Preferences
Size 9KB
SHA256 14c9cd34b9e4f7c1471c8e1514bd7833bc024535cfb17d707adb29cea0f44b05
MD5 219d00d854d192946c0d2449c266ecc9
SHA1 a13380f096dd16669f1f99a77af2ca70f2a114ac
SHA512 d11fdbf68758241bbe995b2a46dc416663e1e205b7a97007b47012df345a79554d46a525d1775cf77774ef49be796a94a65f34cd839fa5dcf19036c8d6ba98f8
SSDEEP 192:sxRFRnw/fSss9u6Idpwb/gb+WNoLB/d3JgU+AYBhgJJ:sxRFlw/fSsssTu/cK/b7rY0z
TLSH
T13C12D6456E28A87B4CCAE20DBA75BF57E2F56021A1D40E48ABFCD52C04E67DD224781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 02dd364b62b01bdb6df0e2803869e0c57a06755bc9adf618c3ccb5fdcbbfe1d6
MD5 cf8c4b2cd0cce37fde873827e85e3ae7
SHA1 e9273a78e820cbeaaa148fe834524bbd95536694
SHA512 72015bb1191b2929b9a329d4f22f14fca3597200bfb372a76594fb139858f45d0116ef93ae5708f9d2c4c4973c87bbc450513260893865ab3f97ac3cb08e2467
TLSH
T1D2A0026107D8A896C95562701EA69661275599A18207730759D550F9FC532E1C2050C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 d19533d76826707e4c846c0b62cfba19466e7dd7eda8dc88b8eca4384bbc2b5a
MD5 26a07188f36a43fdef83a5d2f86cdd72
SHA1 860433f2e6c8344109038d24df16a52af9e6b152
SHA512 58520bc1a81c180f8b19307d48d875588baa4b8be7e4ebeab9fd95aa2bc008ee30f5410f386cb9ce0e8f536c23c0624a934b59a4ee494e0915e7361919cb86ae
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

7c313036-f112-4e13-a71e-535b1c227c40.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\7c313036-f112-4e13-a71e-535b1c227c40.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

e3b49a6d-2b87-49e5-8789-323a708a527b.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\e3b49a6d-2b87-49e5-8789-323a708a527b.tmp
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

eabf031b-5fc1-4603-95f7-47929c1ed2ce.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Default\eabf031b-5fc1-4603-95f7-47929c1ed2ce.tmp
Size 29KB
SHA256 b01d1c1bc278a62add34f85e83c8b52b19159a85596b15a27977a51f5abae653
MD5 5e561cac55c0594d8f2e3ab024add121
SHA1 0dff4a607aa6c5de3a779792ca9087a9b7deb21d
SHA512 ee9bfbbaa36b105392c4d219d81c77d8113938a480c9936103a5c748be7c2e28ced0f5269f4316da8aa600b639b50c153834e56a35aa33efab9bb5c037377861
SSDEEP 768:BNEFWB7pLuLjmmWD84fKU8F1+UoAYDCx9Tuqh0VfUC9xbog/OVTjbKoBProgQkoF:BNEFW3EjmmWD84fKUu1ja0jb9Bc5F
TLSH
T1F3D2D87B680CCABE5F804ADDED1A7E8E6DA802CB9698CD4447F9D41C02C67EB51160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

946dab61-72f6-44f9-ac25-5ec909eb42ab.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Edge Cloud Config\946dab61-72f6-44f9-ac25-5ec909eb42ab.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\Local State
Size 1KB
SHA256 d1c4ddb770268e6dcf516b70a68a50d9fc6cb64276b9a7891a7f40ae2cd0563c
MD5 60ccfde954489ff1f0f974803377cee3
SHA1 fdd86b715c4394adddee8dac6eff2d28fbdde380
SHA512 09ed334840272b51076b5298719f440787657913511aa357513aee03ea3d25c58148aaa692026557fd8c308149061fb4eae494281df7c9d648632999cb643704
TLSH
T1613195B098696C77F8E04A95A25ABB575F707031D2956A0841EC610D05F7B8C639AC3B
MD5 SHA1 SHA512 TLSH

Submit Download

1ea304fb-a26c-43f0-b53c-d9e87518aa4c.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\component_crx_cache\1ea304fb-a26c-43f0-b53c-d9e87518aa4c.tmp
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

3debe505-2d3f-4d4b-b64b-5118d6b3b1b4.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\component_crx_cache\3debe505-2d3f-4d4b-b64b-5118d6b3b1b4.tmp
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

cb33ced0-dd4e-4acb-bb24-d5a77070bdd5.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\component_crx_cache\cb33ced0-dd4e-4acb-bb24-d5a77070bdd5.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

ea478a33-ae69-4b60-8560-7a7af6a3d120.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\ea478a33-ae69-4b60-8560-7a7af6a3d120.tmp
Size 13KB
SHA256 b827f5dc94ca0288eeaff55ea6ad4153b0ad7c6ca69079951eaa4e504c1b60fe
MD5 672a1448bcfbf39cc43cb5c8e53a9d34
SHA1 7f72325ec1b0721809b6e85352acb5ca50cc9e77
SHA512 1c9632c10a7529926f79bfdb9ebb37b9d6fe533ad7d668ef739b998394a893ec0cbc99c819f2c23e727f33815557e04e5ecdaf60a02ffff0846d2d3b45b9ec75
SSDEEP 192:uuHP8ULHcP1cZLxRm88SvjiVw8N2CYE5pG+ooDUuxcYtWR+XPqrDVLA57vBnE/7x:nvQkUSvX8N2C5fpSKWRccW7vBE/VIIl1
TLSH
T170525BB168656D6786F2CE51F25D3B07EFB0A06BD4E81E90D9D99B2D00C73892387C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88d1f485-2e52-4c62-b401-c61d6c93988a.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\extensions_crx_cache\88d1f485-2e52-4c62-b401-c61d6c93988a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f15c04ab-58af-4bc1-bf67-0e9aae2d7216.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\f15c04ab-58af-4bc1-bf67-0e9aae2d7216.tmp
Size 23KB
SHA256 d379e3e6b410914a4475e7fde4c80730ea793c46ea88bd35cfcfa9e32ad6f6db
MD5 b68252e7c0dfb7cb21fd4a6b696f4568
SHA1 c827506a8bb01c22066e8949eb71d26f882f0c8c
SHA512 8a0e92ad03d13b2e0fa7be231ff8cfd48f5f38187471c2af72785d5567e4696e326233025939632b9fef098122f2f1a3e1a7f200634d380fbac6054e21ed051d
SSDEEP 384:noiF5QkUSvn8N78TUNTUlIV5fpZKWR+Df01cW7vBE/VIIl1:zFbnOwgPBR1cW75E/VLH
TLSH
T17BB25FF194D39A3BD9AE4B83A33D2E469EBCD153B4985980BB845D4CCC831BFD346815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fcb0a88d-8b18-4bdc-b73a-6c69b96e2d6d.tmp

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\profile\fcb0a88d-8b18-4bdc-b73a-6c69b96e2d6d.tmp
Size 3KB
SHA256 05a62707fdc7617763262e61189dc9b75c4cff855a74f06a8f4a9d368043e077
MD5 a30fa0d096eee63ec79eac56eeb0e007
SHA1 e06011a82ff839540479284843aea37ad23273fb
SHA512 0bc672d4ab6dee131ef6f5c064df5a29f74521591f85ab5584f15a388ab471333182cef003d8970b82d1c4dde184b8bd8c444575eb0b85b9d38156aaa9c565e1
TLSH
T19481E6B1A828BCB7D7F14F95B55A7A03DFB43137D1656E40D9DC222804DB7582386837
MD5 SHA1 SHA512 TLSH

Submit Download

wifi-bridge.js

Path C:\Users\Admin\AppData\Local\Temp\WiFiAssistant\wifi-bridge.js
Size 25KB
SHA256 74070582764f6e32a818812ec2c03e63c5e83c0ccba8f170c3a10cb909fc6f17
MD5 27379a2a9c28255925d67249f3ef381a
SHA1 53e745206a1dac112465d936673b1661256293f1
SHA512 2fba68bcced2a902ec208633a0169e9fdf47d52d3ba1f6c5084653d8bc005f7d81c7651b0242bf74f7163ef4c773887457d91dbb97228d9a879f5349717519c2
SSDEEP 768:Lkf37JNVj2XrKEoNhdM0kTm/76Hf775S6W9Z1lzs:LuurqhdM0kyGHD75S6gZ1lzs
TLSH
T152C22A673EDA157F82B0B6E0A876940EE27FD613721196D4F04C2C04375A87C12BEB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b49778d4-7089-4629-b787-fa0b17991584.tmp

Path C:\Users\Admin\AppData\Local\Temp\b49778d4-7089-4629-b787-fa0b17991584.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1134917710\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1175433679\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1175433679\CRX_INSTALL\_locales\en_CA\messages.json
Size 851B
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6
TLSH
T175012506E2516A2B03B2A12775613641F57045EA1200DCBB7A7CD41C9FB6DAB918BBD8
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1175433679\CRX_INSTALL\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1175433679\CRX_INSTALL\service_worker_bin_prod.js
Size 137KB
SHA256 63b3d006783e106d3aacb9cda3224d48a218dd45d50db663d38b45d2d9b2bff0
MD5 97b43ffd3c415ea9887f0113d43f5a2d
SHA1 1afcebee8c88dcc9c3ff7d43ffdc3b00a329f9c0
SHA512 279521e204cebf954dbf991ba66b9d4a30534d77650c898ce2f052034263d9dfd9a1ea122a548f51a061ebee9859fd2e88860ebece906b23b9d6dffdc7d85c97
SSDEEP 3072:cFMbB96nK7qtBnZ8CDPDHbSVh6lGE4C0S1wmF9cWMzK:cFMqMGvSVh6lGE4CymFiWMzK
TLSH
T147D3D9CCF6A5B0124363A5F5402F000BB239B8B9E44C85A8F288D9E97D7556D8277F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RQAVTZV2Z75L6VU3PT0F.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RQAVTZV2Z75L6VU3PT0F.temp
Size 4KB
SHA256 de046f5deca4dd41331f1c8bcfea8b9fee32bff3f9f838a1572644b1d570f8a8
MD5 aa2e2547d4a2a00a5393eac10cf17020
SHA1 a1a7d21dc0a07af2afcea72ec2a26d7808beab2c
SHA512 3f3152c83282bf0a9f6216e48575389712c4b2f5ba6e717536a61fdf117d7d9e34bf8e6acaab0c039aff24d1455a68f6ace18d552ec678aa2ebb671230a52ed0
SSDEEP 48:c1SdO8HdPQK42J9zHYQmdLXuHbypB8SdO8HdPQK42J9zGYQVgdLXuHbh2o:ca7JHf+u7yTv7JGfVIu7v
TLSH
T1C591DF015BEA1D55F3F3AD7265732B11AB7FB8546D088E0E408645294C32B08DABAFA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_1249145436\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_1425033880\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2504_14548109\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3864-22-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-27-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-813-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-26-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-32-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-33-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-21-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-28-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-20-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-19-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-17-0x000001A95B270000-0x000001A95B292000-memory.dmp

Download

memory/3864-34-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-23-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-36-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-37-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/3864-24-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-812-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-1-0x0000000000F50000-0x00000000027F4000-memory.dmp

Download

memory/5484-8-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-2-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-13-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-14-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-0-0x00007FFBF41BF000-0x00007FFBF41C0000-memory.dmp

Download

memory/5484-831-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-808-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download

memory/5484-45-0x00007FFBF4030000-0x00007FFBF49D4000-memory.dmp

Download