Overview

overview

8

Static

static

1

Luffy-PFP-...2.webp

windows10-2004-x64

8

Luffy-PFP-...2.webp

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    598s
  • max time network
    579s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/11/2026, 21:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Luffy-PFP-Gear-5-2.webp
  • Size 37KB
  • Sample261107-zygrpsft4z
  • SHA256 806ce7ea85a5de12032619e80f9ba7ca5b4bd34488405e95beff671705f4a360
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 1 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 19 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs

    Using powershell.exe command.

    execution
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 9 IoCs
    defense_evasion
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Command and Scripting Interpreter: JavaScript 1 TTPs
    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 8 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 33 IoCs
  • Suspicious behavior: EnumeratesProcesses 44 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 49 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\Luffy-PFP-Gear-5-2.webp
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:5668
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x308,0x7ff896e6c188,0x7ff896e6c194,0x7ff896e6c1a0
      2⤵
        PID:2040
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,18151858182192073783,2816444621484451598,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3416
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,7861383959788704758,2484172384032984952,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:8
        2⤵
          PID:4352
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,14747104323258790389,8339644852196242090,262144 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
          2⤵
            PID:5820
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,2318858450343201201,11472008921688878685,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
            2⤵
              PID:5752
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16057301388069646515,4763043828695324246,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:3428
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,14611872038949487114,8034276422570026141,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
                2⤵
                  PID:6128
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,10593062726180831835,16861596972703052642,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
                  2⤵
                    PID:1752
                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,16648846821400189781,6934407243477171614,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
                    2⤵
                      PID:3816
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5744,i,16648846821400189781,6934407243477171614,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
                      2⤵
                        PID:1684
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,7855259494629013758,18240128957500368216,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
                        2⤵
                          PID:1652
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5768,i,13314822547592557687,5119089690403482859,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:1
                          2⤵
                            PID:2016
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4608,i,15243543066491127934,16526652438271250664,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
                            2⤵
                              PID:5200
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6336,i,2293258146033835070,16736426158614093957,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:1
                              2⤵
                                PID:2104
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3104,i,7147277068768739248,3682097741515944866,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:8
                                2⤵
                                  PID:2436
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4120,i,15767515510519022406,14744214816452582127,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:1
                                  2⤵
                                    PID:5832
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7000,i,16288304526655192298,10048321752964520283,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
                                    2⤵
                                      PID:2472
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,3852230222190366623,11184785301462954685,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
                                      2⤵
                                        PID:2896
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,3919283547161481961,2300433231084432010,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:8
                                        2⤵
                                          PID:716
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,2120020459594620248,16423840054061341198,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
                                          2⤵
                                            PID:2248
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,16689230089561202689,4132163887095885822,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:8
                                            2⤵
                                              PID:3816
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,5605644764628328032,4881418173993664010,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:8
                                              2⤵
                                                PID:6132
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,1066610387747238756,4562264406917808091,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:8
                                                2⤵
                                                  PID:5560
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6868,i,1378758407008812441,14290078347358950282,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
                                                  2⤵
                                                    PID:2548
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3656,i,794740132745078363,8440813662635112705,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
                                                    2⤵
                                                      PID:2740
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7356,i,12371713353421528623,18136206666173054597,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
                                                      2⤵
                                                        PID:3476
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7604,i,14766201220233365965,6456455674887338973,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
                                                        2⤵
                                                          PID:3812
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6800,i,3296982835079425350,6500876350049190208,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:8
                                                          2⤵
                                                            PID:4428
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6568,i,3690352401579812223,727629262122559887,2097152 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
                                                            2⤵
                                                              PID:5808
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,8467122914940706877,9496293760217653362,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=8160 /prefetch:8
                                                              2⤵
                                                                PID:5272
                                                              • C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe
                                                                "C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Checks whether UAC is enabled
                                                                • Drops file in Program Files directory
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • Enumerates system info in registry
                                                                • Modifies Internet Explorer settings
                                                                • Modifies registry class
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:6104
                                                                • C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
                                                                  "C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe" -personalizedToken 2VH3JTTMPK --deeplink https://www.roblox.com/ --webBtid 1794085716619002 --downloadSource installer -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 6104
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:4492
                                                              • C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe
                                                                "C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                PID:6020
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7148,i,2305728610563596950,8827067733936083947,262144 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:8
                                                                2⤵
                                                                  PID:1352
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,17751638729130454374,5657663498624938224,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
                                                                  2⤵
                                                                    PID:728
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,17139876245854632396,1799485513103651776,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
                                                                    2⤵
                                                                      PID:6516
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,10347119390629563153,17971088167922860235,524288 --field-trial-handle=2488,i,4844275785766620843,2111391885540887240,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
                                                                      2⤵
                                                                        PID:6676
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:5776
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                        1⤵
                                                                          PID:2732
                                                                        • C:\Windows\System32\rundll32.exe
                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                          1⤵
                                                                            PID:3084
                                                                          • C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe
                                                                            "C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                            PID:620
                                                                          • C:\Windows\system32\OpenWith.exe
                                                                            C:\Windows\system32\OpenWith.exe -Embedding
                                                                            1⤵
                                                                            • Modifies registry class
                                                                            • Suspicious use of SetWindowsHookEx
                                                                            PID:6112
                                                                          • C:\Users\Admin\Downloads\Volt-Cracked\volt-installer.exe
                                                                            "C:\Users\Admin\Downloads\Volt-Cracked\volt-installer.exe"
                                                                            1⤵
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            PID:5716
                                                                            • C:\Users\Admin\AppData\Local\Volt\tauri-app.exe
                                                                              "C:\Users\Admin\AppData\Local\Volt\tauri-app.exe"
                                                                              2⤵
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Reads the TCP/IP host and domain name from the registry
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              PID:2956
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2956.5368.14628517082075000458
                                                                                3⤵
                                                                                • Drops file in Program Files directory
                                                                                • Enumerates system info in registry
                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                PID:2872
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0xe0,0x7ff875ddb078,0x7ff875ddb084,0x7ff875ddb090
                                                                                  4⤵
                                                                                    PID:4500
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1760,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:2
                                                                                    4⤵
                                                                                      PID:3852
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2040,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
                                                                                      4⤵
                                                                                        PID:2132
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2100,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:8
                                                                                        4⤵
                                                                                          PID:4576
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3536,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
                                                                                          4⤵
                                                                                            PID:1168
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2172,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:8
                                                                                            4⤵
                                                                                              PID:6748
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2180,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
                                                                                              4⤵
                                                                                                PID:4432
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2124,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                                                                4⤵
                                                                                                  PID:3956
                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4568,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
                                                                                                  4⤵
                                                                                                    PID:4152
                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4520,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
                                                                                                    4⤵
                                                                                                      PID:4632
                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4612,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
                                                                                                      4⤵
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      PID:3288
                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3768,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
                                                                                                      4⤵
                                                                                                        PID:2204
                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4880,i,8548123762299735720,9522458219641702596,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
                                                                                                        4⤵
                                                                                                          PID:740
                                                                                                  • C:\Windows\System32\WScript.exe
                                                                                                    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Volt-Cracked\volt_universal_crack.js"
                                                                                                    1⤵
                                                                                                      PID:2912
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault877971c6hc9d6h469fhbd36ha9bfee8e18ba
                                                                                                      1⤵
                                                                                                        PID:6484
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault877971c6hc9d6h469fhbd36ha9bfee8e18ba --edge-skip-compat-layer-relaunch
                                                                                                          2⤵
                                                                                                            PID:6556
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault54e7cdc9h933bh41a6h9413h45c16568e87c
                                                                                                          1⤵
                                                                                                            PID:7128
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultf4ff1bdchc161h4dc2hb328h36498513062a
                                                                                                            1⤵
                                                                                                              PID:3836
                                                                                                            • C:\Windows\System32\notepad.exe
                                                                                                              "C:\Windows\System32\notepad.exe" "C:\Users\Admin\Downloads\Volt-Cracked\setup.ps1"
                                                                                                              1⤵
                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                              PID:5788
                                                                                                            • C:\Users\Admin\Downloads\Volt-Cracked\tauri-app.exe
                                                                                                              "C:\Users\Admin\Downloads\Volt-Cracked\tauri-app.exe"
                                                                                                              1⤵
                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                              PID:6152
                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=6152.6808.280305376688026862
                                                                                                                2⤵
                                                                                                                  PID:6832
                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x144,0x140,0x184,0x160,0x1b4,0x7ff875ddb078,0x7ff875ddb084,0x7ff875ddb090
                                                                                                                    3⤵
                                                                                                                      PID:6852
                                                                                                                • C:\Windows\System32\notepad.exe
                                                                                                                  "C:\Windows\System32\notepad.exe" "C:\Users\Admin\Downloads\Volt-Cracked\install.ps1"
                                                                                                                  1⤵
                                                                                                                    PID:6912
                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "-Command" "if((Get-ExecutionPolicy ) -ne 'AllSigned') { Set-ExecutionPolicy -Scope Process Bypass }; & 'C:\Users\Admin\Downloads\Volt-Cracked\install.ps1'"
                                                                                                                    1⤵
                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                    PID:4552
                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "-Command" "if((Get-ExecutionPolicy ) -ne 'AllSigned') { Set-ExecutionPolicy -Scope Process Bypass }; & 'C:\Users\Admin\Downloads\Volt-Cracked\setup.ps1'"
                                                                                                                    1⤵
                                                                                                                    • Drops file in Drivers directory
                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                    PID:3372
                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "-Command" "if((Get-ExecutionPolicy ) -ne 'AllSigned') { Set-ExecutionPolicy -Scope Process Bypass }; & 'C:\Users\Admin\Downloads\Volt-Cracked\install.ps1'"
                                                                                                                    1⤵
                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                    PID:6352
                                                                                                                  • C:\Windows\System32\WScript.exe
                                                                                                                    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Volt-Cracked\volt_universal_crack.js"
                                                                                                                    1⤵
                                                                                                                      PID:6180
                                                                                                                    • C:\Windows\System32\WScript.exe
                                                                                                                      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Volt-Cracked\volt_universal_crack.js"
                                                                                                                      1⤵
                                                                                                                        PID:6248
                                                                                                                      • C:\Users\Admin\Downloads\Volt-Cracked\tauri-app.exe
                                                                                                                        "C:\Users\Admin\Downloads\Volt-Cracked\tauri-app.exe"
                                                                                                                        1⤵
                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                        PID:3324
                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3324.6576.14745474369655047674
                                                                                                                          2⤵
                                                                                                                          • Enumerates system info in registry
                                                                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                          PID:5384
                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x19c,0x7ff875ddb078,0x7ff875ddb084,0x7ff875ddb090
                                                                                                                            3⤵
                                                                                                                              PID:6596
                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2024,i,12204218171319242035,10659865322234433189,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:2
                                                                                                                              3⤵
                                                                                                                                PID:6540
                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1760,i,12204218171319242035,10659865322234433189,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:3
                                                                                                                                3⤵
                                                                                                                                  PID:740
                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2336,i,12204218171319242035,10659865322234433189,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:8
                                                                                                                                  3⤵
                                                                                                                                    PID:6376
                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView" --webview-exe-name=tauri-app.exe --webview-exe-version=1.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3488,i,12204218171319242035,10659865322234433189,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
                                                                                                                                    3⤵
                                                                                                                                      PID:7116
                                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                    "powershell" -NoProfile -Command "$ErrorActionPreference='SilentlyContinue'; Get-CimInstance Win32_Process -Filter \"Name = 'RobloxPlayerBeta.exe'\" | Select-Object -ExpandProperty ProcessId"
                                                                                                                                    2⤵
                                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:2804
                                                                                                                                  • C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
                                                                                                                                    "C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe"
                                                                                                                                    2⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:1684
                                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                    "powershell" -NoProfile -Command "$ErrorActionPreference='SilentlyContinue'; Get-CimInstance Win32_Process -Filter \"Name = 'RobloxPlayerBeta.exe'\" | Select-Object -ExpandProperty ProcessId"
                                                                                                                                    2⤵
                                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:5024
                                                                                                                                  • C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
                                                                                                                                    "C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe"
                                                                                                                                    2⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:4172

                                                                                                                                Network

                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                      Replay Monitor

                                                                                                                                      Loading Replay Monitor...

                                                                                                                                      Downloads

                                                                                                                                      RobloxStudioInstaller.exe
                                                                                                                                      • Path C:\Program Files\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                                                                      • Size 13.1MB
                                                                                                                                      • SHA256 52754337087a07feeaae693e71188291b68625a5c890cec353c8296aa1da29ca
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      RobloxPlayerBeta.dll
                                                                                                                                      • Path C:\Program Files\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.dll
                                                                                                                                      • Size 16.9MB
                                                                                                                                      • SHA256 a86baca31ff67f6dd1b5e51b9235edd8ad29aa1d0b9a2342176d5718e4938dcd
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      crl-set
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1086609489\crl-set
                                                                                                                                      • Size 13KB
                                                                                                                                      • SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.fingerprint
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1086609489\manifest.fingerprint
                                                                                                                                      • Size 66B
                                                                                                                                      • SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.fingerprint
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1246323847\manifest.fingerprint
                                                                                                                                      • Size 66B
                                                                                                                                      • SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Microsoft.CognitiveServices.Speech.core.dll
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1462660732\Microsoft.CognitiveServices.Speech.core.dll
                                                                                                                                      • Size 2.6MB
                                                                                                                                      • SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.fingerprint
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1462660732\manifest.fingerprint
                                                                                                                                      • Size 66B
                                                                                                                                      • SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      protocols.json
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_1996600133\protocols.json
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      verified_contents.json
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\_metadata\verified_contents.json
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-af.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-af.hyb
                                                                                                                                      • Size 70KB
                                                                                                                                      • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-be.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-be.hyb
                                                                                                                                      • Size 5KB
                                                                                                                                      • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-bg.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-bg.hyb
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-cs.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-cs.hyb
                                                                                                                                      • Size 62KB
                                                                                                                                      • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-cu.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-cu.hyb
                                                                                                                                      • Size 51KB
                                                                                                                                      • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-cy.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-cy.hyb
                                                                                                                                      • Size 35KB
                                                                                                                                      • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-da.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-da.hyb
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-de-1901.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-de-1901.hyb
                                                                                                                                      • Size 118KB
                                                                                                                                      • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-de-1996.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-de-1996.hyb
                                                                                                                                      • Size 117KB
                                                                                                                                      • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-de-ch-1901.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-de-ch-1901.hyb
                                                                                                                                      • Size 117KB
                                                                                                                                      • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-el.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-el.hyb
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-en-gb.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-en-gb.hyb
                                                                                                                                      • Size 45KB
                                                                                                                                      • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-en-us.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-en-us.hyb
                                                                                                                                      • Size 58KB
                                                                                                                                      • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-es.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-es.hyb
                                                                                                                                      • Size 14KB
                                                                                                                                      • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-et.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-et.hyb
                                                                                                                                      • Size 20KB
                                                                                                                                      • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-eu.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-eu.hyb
                                                                                                                                      • Size 665B
                                                                                                                                      • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-fr.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-fr.hyb
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-ga.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-ga.hyb
                                                                                                                                      • Size 34KB
                                                                                                                                      • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-gl.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-gl.hyb
                                                                                                                                      • Size 9KB
                                                                                                                                      • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-gu.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-gu.hyb
                                                                                                                                      • Size 655B
                                                                                                                                      • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-hr.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-hr.hyb
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-hu.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-hu.hyb
                                                                                                                                      • Size 309KB
                                                                                                                                      • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-hy.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-hy.hyb
                                                                                                                                      • Size 605B
                                                                                                                                      • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-it.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-it.hyb
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-ka.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-ka.hyb
                                                                                                                                      • Size 9KB
                                                                                                                                      • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-kn.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-kn.hyb
                                                                                                                                      • Size 711B
                                                                                                                                      • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-la.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-la.hyb
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-lt.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-lt.hyb
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-lv.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-lv.hyb
                                                                                                                                      • Size 37KB
                                                                                                                                      • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-ml.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-ml.hyb
                                                                                                                                      • Size 776B
                                                                                                                                      • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-mn-cyrl.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-mn-cyrl.hyb
                                                                                                                                      • Size 5KB
                                                                                                                                      • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-mul-ethi.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-mul-ethi.hyb
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-nl.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-nl.hyb
                                                                                                                                      • Size 75KB
                                                                                                                                      • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-or.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-or.hyb
                                                                                                                                      • Size 647B
                                                                                                                                      • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-pa.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-pa.hyb
                                                                                                                                      • Size 607B
                                                                                                                                      • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-pt.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-pt.hyb
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-ru.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-ru.hyb
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-sk.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-sk.hyb
                                                                                                                                      • Size 62KB
                                                                                                                                      • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-sl.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-sl.hyb
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-sq.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-sq.hyb
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-sv.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-sv.hyb
                                                                                                                                      • Size 70KB
                                                                                                                                      • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-ta.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-ta.hyb
                                                                                                                                      • Size 554B
                                                                                                                                      • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-te.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-te.hyb
                                                                                                                                      • Size 703B
                                                                                                                                      • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-tk.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-tk.hyb
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-uk.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-uk.hyb
                                                                                                                                      • Size 18KB
                                                                                                                                      • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-und-ethi.hyb
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\hyph-und-ethi.hyb
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.fingerprint
                                                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2872_63119861\manifest.fingerprint
                                                                                                                                      • Size 66B
                                                                                                                                      • SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      097b83b6-e1c9-4230-8a38-790022f424d5.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\097b83b6-e1c9-4230-8a38-790022f424d5.tmp
                                                                                                                                      • Size 26KB
                                                                                                                                      • SHA256 955ecd83c95553b8aaed44dccde7aebe7f68ae67b3e0a91baf64e16723f9a82d
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      3ca5cbb4-5452-4bed-86ce-42720f97208c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ca5cbb4-5452-4bed-86ce-42720f97208c.tmp
                                                                                                                                      • Size 27KB
                                                                                                                                      • SHA256 31ff401a25b009d1d9829d7458c97ebd573053fee8870aad9d3f039cd3666633
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      4029dd49-644e-44f1-b8d5-42c36eb15ec0.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4029dd49-644e-44f1-b8d5-42c36eb15ec0.tmp
                                                                                                                                      • Size 32KB
                                                                                                                                      • SHA256 b73299200ec6aaaa5702c8a9c513943f24fa1407e3f0ad81e6d683bcac68021c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      6562220a-9315-4807-a571-3ee4be5ee336.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6562220a-9315-4807-a571-3ee4be5ee336.tmp
                                                                                                                                      • Size 26KB
                                                                                                                                      • SHA256 c8a679214d737c472edab498b03a003e25622c1fd38022aae29cc83d3f3228e8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      6916e893-4af0-4651-8f93-5b8756bd1f9f.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6916e893-4af0-4651-8f93-5b8756bd1f9f.tmp
                                                                                                                                      • Size 27KB
                                                                                                                                      • SHA256 0746f6f207f665b1a88117a8cc86bb4b33ae9a3cbe8f812d31360cf16e99cfdb
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      81c5b1d8-f62a-48ce-b44c-73a70d93f4b8.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\81c5b1d8-f62a-48ce-b44c-73a70d93f4b8.tmp
                                                                                                                                      • Size 32KB
                                                                                                                                      • SHA256 87a92f455d7c6dfea88195a53fe8d6764225d9ef6cf47a6243899f16ccd280b0
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      880f77e7-c26e-4660-8afb-ff8cda8498cd.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\880f77e7-c26e-4660-8afb-ff8cda8498cd.tmp
                                                                                                                                      • Size 392B
                                                                                                                                      • SHA256 391c1f09619199232a544d440bb01b5ffdaa6bd889c4e716c89e93b30ddefc04
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      04834c18-4231-4c07-815e-202af1f5894b.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04834c18-4231-4c07-815e-202af1f5894b.tmp
                                                                                                                                      • Size 17KB
                                                                                                                                      • SHA256 e69115dd18989446c4c47e1d740579eaf19b010090831e9d14c480bb57afcac4
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      2d95919e-d731-441d-94b8-c2bc64a1dd4c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d95919e-d731-441d-94b8-c2bc64a1dd4c.tmp
                                                                                                                                      • Size 32KB
                                                                                                                                      • SHA256 a05656d16e691cbbbbdf3b98c004219219b91b7698937b194916cd70308a9ad7
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      34303005-8da9-43a3-bd7f-47c16cf940d2.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34303005-8da9-43a3-bd7f-47c16cf940d2.tmp
                                                                                                                                      • Size 6B
                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      473a0d17-e9fd-44af-9911-9b74bf438b9c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\473a0d17-e9fd-44af-9911-9b74bf438b9c.tmp
                                                                                                                                      • Size 414B
                                                                                                                                      • SHA256 987a7c46d294c5b7a093036c89f954fc89069517f38d05051da6c54c7360704a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      4df94110-ed19-4d4b-8149-02234bf48297.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4df94110-ed19-4d4b-8149-02234bf48297.tmp
                                                                                                                                      • Size 12KB
                                                                                                                                      • SHA256 458bea626bdc225fdc7a29c04a0a03211dd4cf447ca23efcb981490a0b434d12
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      58474c74-f866-479a-91f2-29672540036c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58474c74-f866-479a-91f2-29672540036c.tmp
                                                                                                                                      • Size 12KB
                                                                                                                                      • SHA256 8e6a41c5ce9c30b63458c82920b23d62b897d67ffbbf97bd620017b1190f1a84
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      5ef1fab6-928a-4575-b862-28dc70d24c53.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ef1fab6-928a-4575-b862-28dc70d24c53.tmp
                                                                                                                                      • Size 13KB
                                                                                                                                      • SHA256 2d7049967872a72e71c5dfa7e66121a6baca92fda15db72cdcacd64364cab884
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      LOG.old
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                      • Size 331B
                                                                                                                                      • SHA256 09df4f5cb6a7f4ea7de090c3d0d606a599f96134265d1a81b240bb9bf0ea643a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000054
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
                                                                                                                                      • Size 120KB
                                                                                                                                      • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000055
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                                                      • Size 123KB
                                                                                                                                      • SHA256 8e6838494cfd1d2bd7ead5f2b5004640782125d13591df691e7af10b965ed792
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000056
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                                                      • Size 24KB
                                                                                                                                      • SHA256 7e170ea7f2ac873c595b9f72cf35b8c15af17b5bfd3488b101bb5aca034d07cf
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000057
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                                                      • Size 102KB
                                                                                                                                      • SHA256 b3872b22bbd31a251930d167d0a58d2e7caa8f81e6d9dcd636b01ac4f2ac8982
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000058
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                                                                                                                      • Size 253KB
                                                                                                                                      • SHA256 ee2f4679eb39d821fecee18692b8211a759938dac6389294a4186ebf35c510f5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000059
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
                                                                                                                                      • Size 45KB
                                                                                                                                      • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_00005a
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                                                                      • Size 619KB
                                                                                                                                      • SHA256 f7292d0a8b5456ec79f2fe854e755c9b42aad6000386c2d5300e1b0f41e66af9
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_00005c
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                                                                                      • Size 20KB
                                                                                                                                      • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_00005d
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                                                                                      • Size 16KB
                                                                                                                                      • SHA256 b4e56c7dc88878968d4583f86276c0fc4414b65e7ddb06f04e9cce66d008d33a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_00005e
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                                                                                      • Size 36KB
                                                                                                                                      • SHA256 3ceb939a9120d5feb53077a292141c2fabce06832bda8a9226bb56a125257b64
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000071
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                                                                                                                      • Size 60KB
                                                                                                                                      • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000072
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                      • Size 68KB
                                                                                                                                      • SHA256 2033d4c0dcdab8b765e78c9c1845742d2589b0f1c56a06b701e91f536035f85c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000073
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000074
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                      • Size 45KB
                                                                                                                                      • SHA256 44c44c5e9cca81e4e3a8b88e6c45ef531d9ec84d198955739a4e3ca82e76f0f3
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_000075
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                      • Size 65KB
                                                                                                                                      • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f_0000b4
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                                                                                      • Size 40KB
                                                                                                                                      • SHA256 0e816113b559bd68f44aec6132a96c272232d85dd7f6f8894fd031912bebbdfa
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                      • Size 9KB
                                                                                                                                      • SHA256 7b8372444e979e33e5fd3d35cb91849d4006bbf5220d5598cebeecb04a2d9fea
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      c1eb14b2-cd60-4df7-aa55-a0133332cad7.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c1eb14b2-cd60-4df7-aa55-a0133332cad7.tmp
                                                                                                                                      • Size 2B
                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      dasherSettingSchema.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                                                      • Size 854B
                                                                                                                                      • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      CURRENT
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                      • Size 16B
                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      44cc7a69-7f5e-4335-b366-d23abb8d9625.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\44cc7a69-7f5e-4335-b366-d23abb8d9625.tmp
                                                                                                                                      • Size 210B
                                                                                                                                      • SHA256 a76986a1a9759dca3e4fb5b9d24f55407e2607c4bdbef6971f17937223ebed1b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      4af51784-3b0e-46a7-ad27-62c5651d608f.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4af51784-3b0e-46a7-ad27-62c5651d608f.tmp
                                                                                                                                      • Size 210B
                                                                                                                                      • SHA256 79cc2d6bb8997c3cc1991d047e8760b586251477e1a434135685d3ec7e88c370
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      733956e6-9e3b-448c-a823-2a50469ba040.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\733956e6-9e3b-448c-a823-2a50469ba040.tmp
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 7a1133be57b874fc7b66159dd1ea5134f21f2d0fc318d30ddc6a6a7181b548da
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                      • Size 2B
                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      cad28256-b948-4838-8ece-904090414240.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\cad28256-b948-4838-8ece-904090414240.tmp
                                                                                                                                      • Size 40B
                                                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      ff465bc1-1d58-4a72-8f41-ac8d3225fcf8.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ff465bc1-1d58-4a72-8f41-ac8d3225fcf8.tmp
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 ef44c1fdf17f6aee48e843a4cbbcad1ad9688942906c6b8d4f5fc2660bd35de8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17b78c44-d75f-4b1e-99a3-388539ad9899\index-dir\temp-index
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 f0207b2d26ce6bd51250008927a59fff95c5e0ee3b9c67b277ac0613c700163a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17b78c44-d75f-4b1e-99a3-388539ad9899\index-dir\the-real-index
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 dd1e171550be38f3f1a45c801fcb95091011a421dccf36a0bb9ea97d7aac86e7
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9c75768-e31b-4aa3-97fc-f1c0cc4d39dd\index-dir\temp-index
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 510706009797907041fc8d62452c6caf6d6a1e6bc1b681626449589fbbcaa9ec
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9c75768-e31b-4aa3-97fc-f1c0cc4d39dd\index-dir\the-real-index
                                                                                                                                      • Size 48B
                                                                                                                                      • SHA256 38a66cd5c664f824652d9db1d07f189829275c1de66b9ba29a801af6b5a221a5
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      index.txt.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                      • Size 484B
                                                                                                                                      • SHA256 d5d3bfe8af4cb6141b386c28cdc501eb25650fae3611d3ba969b071e17a347bf
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      index.txt.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                      • Size 492B
                                                                                                                                      • SHA256 1731c3de87060bb05dd70b7e0faf2850049cf5d0e3dd4bbb728d443d6277c67b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                      • Size 72B
                                                                                                                                      • SHA256 17982d7d429b3ba119d8a899d671a2245566e11a6bb5a5258598c96e0218f102
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                      • Size 48B
                                                                                                                                      • SHA256 d9839db7563a8917b0ffe895b21f27fc5c6b0783ad831a83d40eee97778535a3
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      sync_diagnostic.log
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                      • Size 23KB
                                                                                                                                      • SHA256 89606edf990f1341955d8751413ebc4bc5317609a95c1ed30e67f676f9b9805f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      RevisitationBloomfilter
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                      • Size 392B
                                                                                                                                      • SHA256 c3b8010897470a60d0808652f8b78986a758badadb20dc1c22f95ef760d2f470
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      a5e84bc6-1823-45d7-8ba2-ad5019296d21.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a5e84bc6-1823-45d7-8ba2-ad5019296d21.tmp
                                                                                                                                      • Size 32KB
                                                                                                                                      • SHA256 285a8780b3ba497ed9f010f0e9778b7fa72e2917c3d2f6757bc92232183c2ae8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      00c5065d-2af7-4afc-ae45-9d9ab4e28ef1.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\00c5065d-2af7-4afc-ae45-9d9ab4e28ef1.tmp
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 bc6b1c9e0cbd23efa9bafa9fd0a41ce3d985ae26db0c404c6196efcbf6b36243
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      e2bf0522-3181-446a-8b1b-3174fe51537e.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e2bf0522-3181-446a-8b1b-3174fe51537e.tmp
                                                                                                                                      • Size 25KB
                                                                                                                                      • SHA256 23f1639df52f1e9cdaa93a3749c0fb4404a5a91c01aaba2a6e29f43aa214241d
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                      • Size 158KB
                                                                                                                                      • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      76f5eea2-a101-497d-b0b8-0d3391acfbd3.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\76f5eea2-a101-497d-b0b8-0d3391acfbd3.tmp
                                                                                                                                      • Size 132B
                                                                                                                                      • SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      fabf8dbe-f9fd-4f60-8147-14f7fc2df545.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fabf8dbe-f9fd-4f60-8147-14f7fc2df545.tmp
                                                                                                                                      • Size 392B
                                                                                                                                      • SHA256 54cac51358648591f03aac7846db5f713a808e31733ecdb6392a7a84a93f5b32
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 6ef0deabfa88b72147ce01121e5e9844864606da71bca7e669bd9f4a0c987b53
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      InstallerInfo.log
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxPlayerInstaller\InstallerInfo.log
                                                                                                                                      • Size 146B
                                                                                                                                      • SHA256 51b457bc14ab9c384b1136eff772e68b910daf09fd641f9fa63444e214493e2a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      cacert.pem
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
                                                                                                                                      • Size 223KB
                                                                                                                                      • SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      8e150dfc-8f58-4c41-bd2a-18ccf3c4e49c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\8e150dfc-8f58-4c41-bd2a-18ccf3c4e49c.tmp
                                                                                                                                      • Size 1B
                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      __PSScriptPolicyTest_0rbcdfkh.5sb.ps1
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_0rbcdfkh.5sb.ps1
                                                                                                                                      • Size 60B
                                                                                                                                      • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      System.dll
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsyC94E.tmp\System.dll
                                                                                                                                      • Size 12KB
                                                                                                                                      • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      modern-wizard.bmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsyC94E.tmp\modern-wizard.bmp
                                                                                                                                      • Size 25KB
                                                                                                                                      • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      nsDialogs.dll
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsyC94E.tmp\nsDialogs.dll
                                                                                                                                      • Size 9KB
                                                                                                                                      • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      nsis_tauri_utils.dll
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsyC94E.tmp\nsis_tauri_utils.dll
                                                                                                                                      • Size 33KB
                                                                                                                                      • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      messages.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1810917610\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                      • Size 711B
                                                                                                                                      • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      .luaurc
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\lsp\.luaurc
                                                                                                                                      • Size 169B
                                                                                                                                      • SHA256 a4f0cf2fe24eb73815a884211257322dc2bcad03506c6c02171b3b97fd367e6b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      en-us.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\lsp\en-us.json
                                                                                                                                      • Size 6.8MB
                                                                                                                                      • SHA256 1deaf275538c1cb05eddf3934bfb21758fa8a8bcf997ed24b610b354fe7b2aa8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      globalTypes.d.lua
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\lsp\globalTypes.d.lua
                                                                                                                                      • Size 844KB
                                                                                                                                      • SHA256 844d0d3767c82140ae05327e2b92ac1f3604fc46d8356c8ab844512e2f8694f4
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      luau-lsp.exe
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\lsp\luau-lsp.exe
                                                                                                                                      • Size 6.0MB
                                                                                                                                      • SHA256 43dc7a51985872f83cd2f644cabf251023158b432a7cdcc795ac1b36dab3462a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      state.db
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\state.db
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 36e1537d6daa4977d21290c0c39d23b18ffd8790d4c2dde1e6f2aa38d0027102
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      tauri-app.exe
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\tauri-app.exe
                                                                                                                                      • Size 14.5MB
                                                                                                                                      • SHA256 93ed1c16ff9061dac4be42ca76f3cb85c2bac792d820ebee716f768f5c69055b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      windows.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Volt\windows.json
                                                                                                                                      • Size 136B
                                                                                                                                      • SHA256 9a51fc2a1f795e205e8bfabe21b1e6741fdf1342e640488436a9741012e7bea5
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      3fe12149-08c0-4f46-ab9d-5e37f6c78ee5.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\3fe12149-08c0-4f46-ab9d-5e37f6c78ee5.tmp
                                                                                                                                      • Size 18KB
                                                                                                                                      • SHA256 51b2e0249e22450628f037fa1d1d090b856766fe34345ff145ba0b19c468d217
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      4e0032c5-24db-4533-9b4c-566090ec711c.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\4e0032c5-24db-4533-9b4c-566090ec711c.tmp
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 0e8913f81b6d916fca016c13fadff486962d54d91da2a1281b45fb2fa067101d
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      544952b3-8614-4be0-82f0-7871d24602b7.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\544952b3-8614-4be0-82f0-7871d24602b7.tmp
                                                                                                                                      • Size 18KB
                                                                                                                                      • SHA256 ab5adce9b53b52ff32ee590174d38d035669c2f700f5d0b3f8f699430415f091
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      5cd9656b-eca7-4e4f-9801-03c7b68c9db2.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\5cd9656b-eca7-4e4f-9801-03c7b68c9db2.tmp
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 74a94ac6cdc6ae4ab1bd8ec401574e9fec99a400fd40f46dd2234f37a7d1ed93
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      8a21c559-a061-4219-a128-cb406c3f0dc3.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\8a21c559-a061-4219-a128-cb406c3f0dc3.tmp
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 1359b28e66cb2106b0bbf097491af2c2fcf325f1efa9fc4de0739559a08b2f73
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      965dd9ae-81ec-45bd-8729-cb51841e4bf2.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\965dd9ae-81ec-45bd-8729-cb51841e4bf2.tmp
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 d058fed4011bb9c946b3d2c42cd4b397f18fdcb7eefe827157184e47a06202c1
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.fingerprint
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.fingerprint
                                                                                                                                      • Size 66B
                                                                                                                                      • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                                                                                                      • Size 135B
                                                                                                                                      • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
                                                                                                                                      • Size 118B
                                                                                                                                      • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 9234b7921643d139f42a569978dd557efa53fd81db78e5b4cc9ff585b51a99a6
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 ebd9c1c0426780e3c7b32335a67e3f49d9a33ab6c6422ff28c96f92c854c4f4e
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 2c7ac9515a984e08f5122da0a0bb3129921ce9b3d188cbfbf5bae4be339f8952
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 3e0344733e39650cf8677a46795418234e25665550a6e71737f1c5d4b80e4cda
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      throttle_store.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                      • Size 20B
                                                                                                                                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      17024d52-0121-4191-964b-fde32657dda4.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\17024d52-0121-4191-964b-fde32657dda4.tmp
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 9beec46352b38a10a82a0cb864f731413d592b2bd732cf56155d284426d287e6
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      5cd96d19-d53e-471b-9f37-99b85680bcb7.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\5cd96d19-d53e-471b-9f37-99b85680bcb7.tmp
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 7d21cc967f3dcaa4adf8d677680d4a1c55b1ff142c7f00f0aa4bd5c1510da484
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                      • Size 72B
                                                                                                                                      • SHA256 e4fd8f2fde3f0678a7a111509ac6ed84493e52826497ea5f4282852e01fddd43
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      temp-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                      • Size 96B
                                                                                                                                      • SHA256 a9fcf105113a38478c29d1e99dfde594cbda253058ffa90294632d13fe1855ea
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                      • Size 48B
                                                                                                                                      • SHA256 6f96d0d1969411156a670924d3c800248962f21cf74ea0379c21c2d4734297dc
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      data_0
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\DawnGraphiteCache\data_0
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                      Submit Download

                                                                                                                                      data_1
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\DawnGraphiteCache\data_1
                                                                                                                                      • Size 264KB
                                                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                      Submit Download

                                                                                                                                      data_2
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\DawnGraphiteCache\data_2
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                      Submit Download

                                                                                                                                      data_3
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\DawnGraphiteCache\data_3
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                      Submit Download

                                                                                                                                      29883c13-d2bf-4514-a0af-bb2379296c50.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Network\29883c13-d2bf-4514-a0af-bb2379296c50.tmp
                                                                                                                                      • Size 188B
                                                                                                                                      • SHA256 2d4fabdc30214d58fa14f00044c8c62957ad00607fdbf960c47b8b62389873ee
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      6e765794-bb39-402a-b35d-6c63a8a3e543.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Network\6e765794-bb39-402a-b35d-6c63a8a3e543.tmp
                                                                                                                                      • Size 188B
                                                                                                                                      • SHA256 dca54463cdf137332eb32a191aea8b1fdb3fefdc6389c14083382ace80c7b583
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      9044e184-9dac-4197-84ec-b564b4baac75.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Network\9044e184-9dac-4197-84ec-b564b4baac75.tmp
                                                                                                                                      • Size 111B
                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Network Persistent State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Network\Network Persistent State
                                                                                                                                      • Size 59B
                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      TransportSecurity
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Network\TransportSecurity
                                                                                                                                      • Size 188B
                                                                                                                                      • SHA256 ce40d273968b4f53abe90222462082ac282d0510e162308939b2eee43f2304cf
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Preferences
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 68d74e93e2a667612e3e8c32c223d83254a078e2a1c6b74389b319898209c465
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Shared Dictionary\cache\index
                                                                                                                                      • Size 24B
                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      MANIFEST-000001
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                                                                                                                                      • Size 41B
                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      d418ff16-14f5-4fb1-820f-d5ee93dc0087.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\d418ff16-14f5-4fb1-820f-d5ee93dc0087.tmp
                                                                                                                                      • Size 7KB
                                                                                                                                      • SHA256 81c6a7f78d1d8830aa711324c45dbdf4e5e5edf239b41c1c98c49193775979a2
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      eef333e7-bc27-4637-8462-06ecf11029fe.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Default\eef333e7-bc27-4637-8462-06ecf11029fe.tmp
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 f7b41fb25b90ebad7aacbbe6e9cf756bb13b4995192d1d3ab36e4813c9ea7efe
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Local State
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 f45f157763e52ebbe2f0b5de0374f2e4af6b94bcd50e2a447e1950b5670e2daf
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\OriginTrials\0.0.1.7\manifest.json
                                                                                                                                      • Size 43B
                                                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      manifest.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Speech Recognition\1.15.0.1\manifest.json
                                                                                                                                      • Size 76B
                                                                                                                                      • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Ruleset Data
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Subresource Filter\Indexed Rules\36\10.34.0.84\Ruleset Data
                                                                                                                                      • Size 3.5MB
                                                                                                                                      • SHA256 ad506d85462accaac35068e71641814a593595cfe60657309ded18ebc2874e9d
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      LICENSE
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                                                      • Size 24KB
                                                                                                                                      • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      b6a19661-205f-4709-be06-d768afa578a3.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\b6a19661-205f-4709-be06-d768afa578a3.tmp
                                                                                                                                      • Size 16KB
                                                                                                                                      • SHA256 777d51766fb9a4f208383cb1bd2d22ebecb1bd05c5343fc04082ff0426ef3b05
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-as.hyb
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
                                                                                                                                      • Size 703B
                                                                                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-hi.hyb
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
                                                                                                                                      • Size 687B
                                                                                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      hyph-nb.hyb
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
                                                                                                                                      • Size 141KB
                                                                                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      manifest.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\com.volt.editor\EBWebView\hyphen-data\120.0.6050.0\manifest.json
                                                                                                                                      • Size 82B
                                                                                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      default.dic
                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                      • Size 2B
                                                                                                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      2a2e0412b8ad04a2.customDestinations-ms
                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 da8c84cc19452e8cc5c0fe8b5c81269b297bdb8b814f3ce8741a750f9e46a174
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      KXB1EZ4PVUXZE73VC55C.temp
                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\KXB1EZ4PVUXZE73VC55C.temp
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 e95a2ef233959ad3ea55dcf517c010d93b4de001608fbe6de837bc6a140e8536
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      LPYOCG1Q62X3IEP6FWNH.temp
                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\LPYOCG1Q62X3IEP6FWNH.temp
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 3f9d5c30c5201332deadcd846acc163cd76c04fe77293f88e962a71a098f96af
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      TM2EDFEPQKF88UCTB6MF.temp
                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\TM2EDFEPQKF88UCTB6MF.temp
                                                                                                                                      • Size 6KB
                                                                                                                                      • SHA256 41295ad7e584b5b0957d18bea16c105ffd02b464920ac822f9af6ebe8fdbf863
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      RobloxPlayerInstaller-2VH3JTTMPK.exe
                                                                                                                                      • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe
                                                                                                                                      • Size 13.1MB
                                                                                                                                      • SHA256 8b08d45cc34d0eb39dba91c10965b36c01d0ed56344f24915c354245a9037864
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      RobloxPlayerInstaller-2VH3JTTMPK.exe.crdownload
                                                                                                                                      • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-2VH3JTTMPK.exe.crdownload
                                                                                                                                      • Size 1.9MB
                                                                                                                                      • SHA256 d2a884990c4fc529f5f1e282afc7eb44f3c2bb8c6119d4f0e285a98f116484a7
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      b5e2927d-0275-47bc-b4a6-1cc9308e9240.tmp
                                                                                                                                      • Path C:\Users\Admin\Downloads\b5e2927d-0275-47bc-b4a6-1cc9308e9240.tmp
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 b4f99d632353029dd442f89ba4b6dfa5e61c280198442a0a51b762cec225387c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      memory/740-2795-0x00000279D5FD0000-0x00000279D5FFB000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/740-2790-0x00000279D8B70000-0x00000279D8B71000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/1168-2084-0x00007FF8A3F80000-0x00007FF8A3F81000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/1684-153-0x000002090D4F0000-0x000002090E4F0000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2204-2737-0x0000017C6A260000-0x0000017C6A28B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2204-2727-0x0000017C6A290000-0x0000017C6A291000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2804-3053-0x0000015DE45D0000-0x0000015DE45FA000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2804-3054-0x0000015DE45D0000-0x0000015DE45F4000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2690-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2692-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2684-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2685-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2696-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2691-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2693-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2694-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2695-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3288-2686-0x000001C7E22B0000-0x000001C7E22B1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3852-1997-0x00007FF8A3F80000-0x00007FF8A3F81000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3956-2437-0x0000024F17910000-0x0000024F1793B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/3956-2341-0x0000024F17940000-0x0000024F17941000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4432-2318-0x00000181CA460000-0x00000181CA48B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4432-2303-0x00000181CA490000-0x00000181CA491000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4552-2674-0x00000237ACA80000-0x00000237ACAA2000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4576-2220-0x00000240538D0000-0x00000240538FB000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4576-2101-0x00007FF8A4EF0000-0x00007FF8A4EF1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4576-2102-0x0000024053900000-0x0000024053901000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4632-2661-0x0000018360BC0000-0x0000018360BEB000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4632-2645-0x0000018360BF0000-0x0000018360BF1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/6376-3014-0x0000020126560000-0x0000020126561000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/6376-3074-0x0000020126530000-0x000002012655B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/6748-2282-0x0000015CDDA60000-0x0000015CDDA8B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/6748-2266-0x0000015CDDA90000-0x0000015CDDA91000-memory.dmp
                                                                                                                                      Download