Overview

overview

10

Static

static

1

pfp.png

windows10-2004-x64

pfp.png

windows11-ltsc_2024-x64

10

Resubmissions

30/07/2026, 17:28

260730-v11kdatbre1

22/07/2026, 21:43

260722-1lbwcshn3v5

22/07/2026, 21:40

260722-1jgnts1wby3

22/07/2026, 21:40

260722-1h75ds1wbt1

22/07/2026, 01:20

260722-bqa27ahd5910

Analysis

  • user interaction
    yes
  • max time kernel
    782s
  • max time network
    900s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 01:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pfp.png
  • Size 57KB
  • Sample260722-bqa27ahd59
  • SHA256 e71efafee2808c59060a12ed4601f4eeda0b02c4600fa136a00121eadc4f0d27
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwarebootkitdiscoverykillmbrpersistenceransomwarespywarestealertrojanupxwiper

Malware Config

Signatures

  • Family: KillMBR

    KillMBR is a trojan that attempts to overwrite the Master Boot Record.

    wipertrojankillmbr
  • Detects KillMBR 1 IoCs
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 6 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • AutoIT Executable 10 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 30 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 36 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Modifies Internet Explorer settings 1 TTPs 7 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 57 IoCs
  • Suspicious use of WriteProcessMemory 57 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\mspaint.exe
    "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\pfp.png"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4468
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
    • Checks SCSI registry key(s)
    PID:1688
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:4872
    • C:\Windows\system32\sihost.exe
      sihost.exe
      1⤵
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3548
      • C:\Windows\explorer.exe
        explorer.exe /LOADSAVEDWINDOWS
        2⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops desktop.ini file(s)
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3324
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:1476
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe"
            4⤵
            • Drops desktop.ini file(s)
            • Checks processor information in registry
            • Modifies registry class
            • NTFS ADS
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:3388
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1960 -prefsLen 27098 -prefMapHandle 1964 -prefMapSize 270279 -ipcHandle 2036 -initialChannelId {dd3a21be-c976-4945-8dba-475b6834c4a0} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
              5⤵
                PID:1500
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2400 -prefsLen 27134 -prefMapHandle 2404 -prefMapSize 270279 -ipcHandle 2428 -initialChannelId {01094540-ce55-42c3-9b01-71bbaf895c63} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                5⤵
                  PID:5660
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3808 -prefsLen 27323 -prefMapHandle 3812 -prefMapSize 270279 -jsInitHandle 3816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3824 -initialChannelId {bd170c99-1ef2-4ae6-af36-32a73070d59d} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                  5⤵
                  • Checks processor information in registry
                  PID:4960
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3980 -prefsLen 27323 -prefMapHandle 3984 -prefMapSize 270279 -ipcHandle 4076 -initialChannelId {f0d7cfe2-ef5a-48fe-a06f-06e6dc1ebe55} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                  5⤵
                    PID:3100
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3116 -prefsLen 34822 -prefMapHandle 3120 -prefMapSize 270279 -jsInitHandle 3104 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3684 -initialChannelId {f8f391ce-6eea-4f46-b048-b17747d4b218} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                    5⤵
                    • Checks processor information in registry
                    PID:236
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5004 -prefsLen 35010 -prefMapHandle 5008 -prefMapSize 270279 -ipcHandle 4972 -initialChannelId {a26d8bb5-6c8c-4b49-87dc-bd69852001be} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                    5⤵
                    • Checks processor information in registry
                    PID:2092
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1616 -prefsLen 33031 -prefMapHandle 1624 -prefMapSize 270279 -jsInitHandle 2932 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5600 -initialChannelId {951efdbd-984f-46f4-9284-91ece1baba52} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                    5⤵
                    • Checks processor information in registry
                    PID:2136
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5756 -prefsLen 33031 -prefMapHandle 5752 -prefMapSize 270279 -jsInitHandle 5804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5808 -initialChannelId {b1b0610d-a0b9-4465-aa73-470977febcf6} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                    5⤵
                    • Checks processor information in registry
                    PID:5936
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5960 -prefsLen 33031 -prefMapHandle 6012 -prefMapSize 270279 -jsInitHandle 6016 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6004 -initialChannelId {00d79a50-b73b-44c8-ad6c-5b5c2273a646} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                    5⤵
                    • Checks processor information in registry
                    PID:1548
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6332 -prefsLen 33071 -prefMapHandle 6352 -prefMapSize 270279 -jsInitHandle 6356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6364 -initialChannelId {e3c3b3e2-d366-4bc8-9270-6dfec9b5b864} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                    5⤵
                    • Checks processor information in registry
                    PID:4584
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2892 -prefsLen 33071 -prefMapHandle 4592 -prefMapSize 270279 -jsInitHandle 4732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5224 -initialChannelId {5c62e9fc-413f-4c41-bd58-59fd024da06d} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                    5⤵
                    • Checks processor information in registry
                    PID:4784
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5592 -prefsLen 34329 -prefMapHandle 5516 -prefMapSize 270279 -jsInitHandle 6728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6720 -initialChannelId {53721611-39fe-4a6a-8287-a7b357f3939a} -parentPid 3388 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3388" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                    5⤵
                    • Checks processor information in registry
                    PID:1896
              • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
                "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Melissa.doc" /o ""
                3⤵
                • Checks processor information in registry
                • Enumerates system info in registry
                • Suspicious behavior: AddClipboardFormatListener
                • Suspicious use of SetWindowsHookEx
                PID:1688
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpaj.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpaj.exe"
                3⤵
                • Executes dropped EXE
                • Writes to the Master Boot Record (MBR)
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                • Suspicious use of SetWindowsHookEx
                PID:4972
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpajB.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpajB.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: GetForegroundWindowSpam
                PID:5368
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Mabezat\Mabezat.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Mabezat\Mabezat.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:1688
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\WinNuke.98.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\WinNuke.98.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:3360
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Gnil\Gnil.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Gnil\Gnil.exe"
                3⤵
                • Drops file in Drivers directory
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of WriteProcessMemory
                PID:1672
                • C:\Windows\SysWOW64\drivers\spoclsv.exe
                  C:\Windows\system32\drivers\spoclsv.exe
                  4⤵
                  • Executes dropped EXE
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: EnumeratesProcesses
                  PID:2820
              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Gnil\Gnil.exe
                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Gnil\Gnil.exe"
                3⤵
                  PID:5692
                  • C:\Windows\SysWOW64\drivers\spoclsv.exe
                    C:\Windows\system32\drivers\spoclsv.exe
                    4⤵
                      PID:3348
                  • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ArcticBomb.exe
                    "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ArcticBomb.exe"
                    3⤵
                      PID:1160
                    • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ArcticBomb.exe
                      "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ArcticBomb.exe"
                      3⤵
                        PID:3688
                      • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe
                        "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe"
                        3⤵
                          PID:5992
                        • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe
                          "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe"
                          3⤵
                            PID:2020
                          • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe
                            "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe"
                            3⤵
                              PID:3840
                            • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ColorBug.exe
                              "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ColorBug.exe"
                              3⤵
                                PID:5140
                              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\FlashKiller.exe
                                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\FlashKiller.exe"
                                3⤵
                                  PID:4884
                                  • C:\Windows\SysWOW64\WerFault.exe
                                    C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 284
                                    4⤵
                                    • Program crash
                                    PID:4552
                                • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                  "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe"
                                  3⤵
                                    PID:6036
                                    • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                      "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /watchdog
                                      4⤵
                                        PID:2144
                                      • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                        "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /watchdog
                                        4⤵
                                          PID:4576
                                        • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                          "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /watchdog
                                          4⤵
                                            PID:3472
                                          • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                            "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /watchdog
                                            4⤵
                                              PID:2988
                                            • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                              "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /watchdog
                                              4⤵
                                                PID:5340
                                              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe" /main
                                                4⤵
                                                  PID:2548
                                                  • C:\Windows\SysWOW64\notepad.exe
                                                    "C:\Windows\System32\notepad.exe" \note.txt
                                                    5⤵
                                                      PID:1124
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                      5⤵
                                                        PID:2592
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x35c,0x7ffc3f23c188,0x7ffc3f23c194,0x7ffc3f23c1a0
                                                          6⤵
                                                            PID:2672
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14179039679218736889,1903716235922947446,262144 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
                                                            6⤵
                                                              PID:4308
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,13620102591641079461,12581539161706950523,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
                                                              6⤵
                                                              • System Time Discovery
                                                              PID:1176
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,5453805552828255433,8402081891582650889,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
                                                              6⤵
                                                                PID:4888
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,8550679546997915582,3315824550463571882,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
                                                                6⤵
                                                                  PID:4732
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,4716809426709816639,7649495584393792130,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
                                                                  6⤵
                                                                    PID:1688
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,14705372818163729886,12276948666682161639,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:9
                                                                    6⤵
                                                                      PID:2352
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,1882833367540081986,2271264526122694367,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
                                                                      6⤵
                                                                        PID:4560
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,1749955586247849738,17552338303691331056,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:14
                                                                        6⤵
                                                                          PID:6440
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5456,i,14915714568715373278,1592127089654401824,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
                                                                          6⤵
                                                                            PID:6500
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5492,i,9969409100971233030,1819952971338759617,2097152 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
                                                                            6⤵
                                                                              PID:6728
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,16565720713365497986,12606927773370870875,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
                                                                              6⤵
                                                                                PID:6796
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,2086046256647143098,9516259734056154076,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:14
                                                                                6⤵
                                                                                  PID:6804
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9601896305315999349,16587179301426796874,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
                                                                                  6⤵
                                                                                    PID:7160
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9601896305315999349,16587179301426796874,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
                                                                                    6⤵
                                                                                      PID:1060
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,10419330337703489573,10465228025809252040,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
                                                                                      6⤵
                                                                                        PID:6712
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,9333309765710860908,13109501143150467902,524288 --field-trial-handle=2228,i,6101529436956091323,12825989992417835542,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
                                                                                        6⤵
                                                                                          PID:6628
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                          6⤵
                                                                                            PID:6340
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2a4,0x7ffc3f23c188,0x7ffc3f23c194,0x7ffc3f23c1a0
                                                                                              7⤵
                                                                                                PID:2684
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,1912247080735532464,13840848830042093465,262144 --field-trial-handle=2300,i,1540445506351228721,8002563278492544971,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
                                                                                                7⤵
                                                                                                  PID:1480
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,9443296524310932033,12719500371852033312,524288 --field-trial-handle=2300,i,1540445506351228721,8002563278492544971,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
                                                                                                  7⤵
                                                                                                  • System Time Discovery
                                                                                                  PID:6964
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,4270218500802414758,1356323591278971759,524288 --field-trial-handle=2300,i,1540445506351228721,8002563278492544971,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:13
                                                                                                  7⤵
                                                                                                    PID:7116
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,5407385969928406491,9040807311257626379,524288 --field-trial-handle=2300,i,1540445506351228721,8002563278492544971,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
                                                                                                    7⤵
                                                                                                      PID:3860
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,5407385969928406491,9040807311257626379,524288 --field-trial-handle=2300,i,1540445506351228721,8002563278492544971,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
                                                                                                      7⤵
                                                                                                        PID:5860
                                                                                              • C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\VeryFun.exe
                                                                                                "C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\VeryFun.exe"
                                                                                                3⤵
                                                                                                  PID:4296
                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                    "C:\Windows\system32\cmd.exe"
                                                                                                    4⤵
                                                                                                      PID:3888
                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                      "C:\Windows\system32\cmd.exe"
                                                                                                      4⤵
                                                                                                        PID:5024
                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                        "C:\Windows\system32\cmd.exe"
                                                                                                        4⤵
                                                                                                          PID:1196
                                                                                                        • C:\Windows\SysWOW64\cmd.exe
                                                                                                          "C:\Windows\system32\cmd.exe"
                                                                                                          4⤵
                                                                                                            PID:6672
                                                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                                                            "C:\Windows\system32\cmd.exe"
                                                                                                            4⤵
                                                                                                              PID:1200
                                                                                                            • C:\Windows\SysWOW64\cmd.exe
                                                                                                              "C:\Windows\system32\cmd.exe"
                                                                                                              4⤵
                                                                                                                PID:6496
                                                                                                              • C:\Windows\SysWOW64\cmd.exe
                                                                                                                "C:\Windows\system32\cmd.exe"
                                                                                                                4⤵
                                                                                                                  PID:6024
                                                                                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                            1⤵
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:4388
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:5772
                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                            C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                            1⤵
                                                                                                              PID:1692
                                                                                                            • C:\Windows\System32\rundll32.exe
                                                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                              1⤵
                                                                                                                PID:1488
                                                                                                              • C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
                                                                                                                "C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" -Embedding
                                                                                                                1⤵
                                                                                                                • Checks processor information in registry
                                                                                                                • Enumerates system info in registry
                                                                                                                • Modifies Internet Explorer settings
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:3188
                                                                                                              • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                1⤵
                                                                                                                  PID:1708
                                                                                                                • C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
                                                                                                                  "C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" -Embedding
                                                                                                                  1⤵
                                                                                                                  • Checks processor information in registry
                                                                                                                  • Enumerates system info in registry
                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                  PID:1504
                                                                                                                • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                  C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4884 -ip 4884
                                                                                                                  1⤵
                                                                                                                    PID:4308
                                                                                                                  • C:\Windows\system32\AUDIODG.EXE
                                                                                                                    C:\Windows\system32\AUDIODG.EXE 0x0000000000000504 0x00000000000004FC
                                                                                                                    1⤵
                                                                                                                      PID:2716
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                      1⤵
                                                                                                                        PID:1352
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                        1⤵
                                                                                                                          PID:6432

                                                                                                                        Network

                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                              Replay Monitor

                                                                                                                              Loading Replay Monitor...

                                                                                                                              Downloads

                                                                                                                              elevation_service.exe
                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                              • Size 2.2MB
                                                                                                                              • SHA256 d9c1f3c5312cfe135b46d04924e4c1645f28d771a153098bd16160a65b3bf7de
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              msedge_elf.dll
                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_elf.dll
                                                                                                                              • Size 3.6MB
                                                                                                                              • SHA256 20f12bf8b9da1d6bab81bd37266e77f246b732ac5be9416cf33f071a71cd8714
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              oneds.dll
                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\oneds.dll
                                                                                                                              • Size 3.0MB
                                                                                                                              • SHA256 02917020bdbf31d030482c4615ac1ebeda887d18c35a61e6089a49f48b09b87c
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              telclient.dll
                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\telclient.dll
                                                                                                                              • Size 2.3MB
                                                                                                                              • SHA256 a4e51938aac7b470b5e170964b1428db795f38d10760cdc5a817c6c5e1105d70
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              msedge.exe
                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              • Size 3.9MB
                                                                                                                              • SHA256 6d8e5d6a4d1c147b90b5a394a5054840e19dfa3eae3ea706ffb367477cecb929
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              VISSHE.DLL
                                                                                                                              • Path C:\Program Files\Microsoft Office\root\Office16\VISSHE.DLL
                                                                                                                              • Size 279KB
                                                                                                                              • SHA256 7a83319f41c626818556e406b5b664aa4c102cb851269e9becbe3041bde4368a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3
                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3
                                                                                                                              • Size 1KB
                                                                                                                              • SHA256 061af7ac64c686fab2a8a2b3ba33bf9dee5d3f3a296a1d09e6fa4beeaa51ddef
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
                                                                                                                              • Size 471B
                                                                                                                              • SHA256 28ad0a465b0d2fe28ad9cbbd224e39f224d85c8e3aabcda95713db23b6d4011b
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3
                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B76BE66D46C355931939D8CF818D03FD_68DC46933CF3DE41CC968E0784D43DC3
                                                                                                                              • Size 422B
                                                                                                                              • SHA256 5e95f5ef05621cae566910611c0d6efb5c2dae8c01159e3f57a4122029bf2210
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
                                                                                                                              • Size 412B
                                                                                                                              • SHA256 571e297386830998fe3ff63300e2511f09c8a914c361d9df45bbdfaa1f1c57e2
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              settings.dat
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                              • Size 280B
                                                                                                                              • SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              settings.dat
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                              • Size 280B
                                                                                                                              • SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              settings.dat
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                              • Size 280B
                                                                                                                              • SHA256 3b6d5fdf77d33b04d11d471d35a178c210e6b8755bcb281285ec2067dcf35c0d
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              settings.dat
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                              • Size 280B
                                                                                                                              • SHA256 67df9e1a6f6e5ffb8d2e0ae0f52afe57f895ea86f8ac3a414021c7a56acdea0c
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              1eedd0a9-0698-4325-be4d-bfcdd8e84d1c.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1eedd0a9-0698-4325-be4d-bfcdd8e84d1c.tmp
                                                                                                                              • Size 414B
                                                                                                                              • SHA256 f836826675a804c29173e31e339355310362e247d493f00bdaf72f9b4040f581
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              7bd7486a-d816-4f32-b48b-87137dbc8908.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7bd7486a-d816-4f32-b48b-87137dbc8908.tmp
                                                                                                                              • Size 6B
                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              812acdae-fb0f-4cb1-8bc2-0d837d7ac21a.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\812acdae-fb0f-4cb1-8bc2-0d837d7ac21a.tmp
                                                                                                                              • Size 1B
                                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              the-real-index
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 8ff16ce5fff29445d7610836cb1d4772f53cb7edda1ede4eb6d6cb915bb45b32
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              the-real-index~RFe66dcea.TMP
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe66dcea.TMP
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 ccc8ec2fd48803d08445d5b91c9a5c8a02a36fe22aae34972397951e40f0f026
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              data_1
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
                                                                                                                              • Size 264KB
                                                                                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                              Submit Download

                                                                                                                              SiteList-Enterprise.json
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                              • Size 2B
                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              Edge Profile.ico
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                              • Size 70KB
                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Network Persistent State
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                              • Size 3KB
                                                                                                                              • SHA256 557974be0394e6ba2503e7baafb554a99cebdab17e384bd4a0a14fd12ea96e52
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              SCT Auditing Pending Reports
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                              • Size 2B
                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              Sdch Dictionaries
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                              • Size 40B
                                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              Preferences
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                              • Size 12KB
                                                                                                                              • SHA256 3cb114f5c9aaccd91a6647ba5414601c239d9b57ea58a144a686a65b4610cf63
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Preferences
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                              • Size 13KB
                                                                                                                              • SHA256 e1b9cfeb5fcc8f4ce7bc3808d02aa180bed46955ff4192af238e01cc60c05ecf
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Secure Preferences
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                              • Size 27KB
                                                                                                                              • SHA256 3a8a1471284fff2e69a9d3b27e8cce8f42fa7d2b8d49f016924fbd22313550c9
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              sync_diagnostic.log
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 0d57d8a62f0eb15d1fdf217d1f369ee47ac832d93b4e4c883b97f8b3b368f7bc
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Local State
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                              • Size 39KB
                                                                                                                              • SHA256 e72d4b6ccd6180dae842950783eea0f6e975a27fad10825a6facc5a82de4e749
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Local State
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                              • Size 34KB
                                                                                                                              • SHA256 9b578a6cf7516fd0498fc6990a6171397433d053389c476e43bf2e121bdfbeea
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Local State
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                              • Size 38KB
                                                                                                                              • SHA256 b9a3c924acc0be37644a5c6a542d8c4227ab1ea482293113049abe294412a1ce
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              544bb95f-b3f5-4a21-87cd-f6307040d405.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\544bb95f-b3f5-4a21-87cd-f6307040d405.tmp
                                                                                                                              • Size 13B
                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                              Submit Download

                                                                                                                              4961F358-363B-4C11-BCE9-3D73BC7FE169
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\4961F358-363B-4C11-BCE9-3D73BC7FE169
                                                                                                                              • Size 191KB
                                                                                                                              • SHA256 2af77318bc958da1065d1ccc504b4f9363c59458f0b73dc5a1eb0a3515e21596
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              outlook.exe_Rules.xml
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\outlook.exe_Rules.xml
                                                                                                                              • Size 2.8MB
                                                                                                                              • SHA256 fe2a7a844d52e95039a71dd8487f46a9d0ca49805d228f01baa1ccff8a8a4d32
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              mip_sdk.miplog
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog
                                                                                                                              • Size 14KB
                                                                                                                              • SHA256 1e07d358eca9985e5607637d07a5a8a074acfe57123bda83531e4948ab0763db
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              mip_sdk.miplog
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\logs\mip_sdk.miplog
                                                                                                                              • Size 17KB
                                                                                                                              • SHA256 63324ef1d56a4aa325c541dc4704731d11266a73b57aa7b5da8e446ea6126f86
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              outlook.exe.db-wal
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal
                                                                                                                              • Size 124KB
                                                                                                                              • SHA256 65e04a6d388adf20576887d1d31469c425479e4f7c2ecfb105119f2795e4aa37
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              activity-stream.contile.json
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\activity-stream.contile.json
                                                                                                                              • Size 5KB
                                                                                                                              • SHA256 50988d968d68de0dbe2cd4404cfc0f8bd092671819cdd577cc70e184b0f54c7d
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              24280
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\doomed\24280
                                                                                                                              • Size 16KB
                                                                                                                              • SHA256 9c0292f7df9210c5d656526c85aea6f6dc0803cb5efea81ce9b9a92ece9648d0
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                                                                                                                              • Size 15KB
                                                                                                                              • SHA256 9266722486a415a6ae369d6fd7fdf05bc76bc949597ea62e8737fa90a3c3d6b9
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              9512A4488B00CC053350DAC32D417B4A35C11513
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
                                                                                                                              • Size 15KB
                                                                                                                              • SHA256 a86b4cf650c4088528563a23de6ba3d775e369c447c383286d43d04ab8044a63
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              A5E0748C966A3BE3C7D9146DD2B408EAE3C49489
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\fu4ot18b.default-release\cache2\entries\A5E0748C966A3BE3C7D9146DD2B408EAE3C49489
                                                                                                                              • Size 113KB
                                                                                                                              • SHA256 58ae29dd9b5cba0f8d135572e244c3213a0b4ba3a003e40ea509c63f0583aced
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prep_Activatable Class_Hermes_perf.cache
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                              • Size 607B
                                                                                                                              • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              0a137325-0b3e-4c92-9ab8-1406fcc09f99.zip
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\0a137325-0b3e-4c92-9ab8-1406fcc09f99.zip
                                                                                                                              • Size 3.7MB
                                                                                                                              • SHA256 bc95998470d618938a0fe50570dbed499e4e6215b1edca8a6693192fe6632a81
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              content_new.js
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2592_129984818\CRX_INSTALL\content_new.js
                                                                                                                              • Size 10KB
                                                                                                                              • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              tmpaddon
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                              • Size 502KB
                                                                                                                              • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              tmpaddon
                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                              • Size 11KB
                                                                                                                              • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Melissa.doc.LNK
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\Melissa.doc.LNK
                                                                                                                              • Size 1KB
                                                                                                                              • SHA256 f36493094451b00873eeb8614c9e87a4c52ddb7fb1a4fe328fc2321966e0ba71
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              index.dat
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Office\Recent\index.dat
                                                                                                                              • Size 301B
                                                                                                                              • SHA256 c01d28303e3459ec95c3e770aeb3732f43f08ef11cf23db7da16136b3dabe25a
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              ~WRD0000.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\~WRD0000.tmp
                                                                                                                              • Size 31KB
                                                                                                                              • SHA256 20100e5c44b764d1981d6ddac11bd46de50354740337aa47d926475f49a69f66
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Size 10KB
                                                                                                                              • SHA256 56a5a098d600c82b2b8ed360638323beec3a3a9a43f0cf051b116635b39fd143
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Size 11KB
                                                                                                                              • SHA256 4cd052f5b8b2c9899c176c2de48554d4591d9f0b456fc8031442c4300fe2a952
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Size 11KB
                                                                                                                              • SHA256 126036fbedf18a3c7ae088645d76e7915a98147c036731916cac2c867bea7445
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
                                                                                                                              • Size 12KB
                                                                                                                              • SHA256 acc7df34c49d63e056e3c2bc503664bf4556a4883f250c3de7ae232dc6a01203
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              6824f4a902c78fbd.customDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                              • Size 13KB
                                                                                                                              • SHA256 fd226456503ae00cf8c76ad59e47eec6b0dc96bd2cace7d0073c5a8b8b492e44
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              8LQ6O5GKFBIZSALJT4A6.temp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8LQ6O5GKFBIZSALJT4A6.temp
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 8a217f34ba59f38f9d2d0d5628ef757935c84ba7d56ba09d59d6948d32a6a76a
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              HGCLNL8KX0AWXODV1FU8.temp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\HGCLNL8KX0AWXODV1FU8.temp
                                                                                                                              • Size 13KB
                                                                                                                              • SHA256 d629ffdd719d33b2a7f538405fe02f20af2c61a5ad197a7f8f224f9a4304ecc3
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              fb3b0dbfee58fac8.customDestinations-ms
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
                                                                                                                              • Size 1KB
                                                                                                                              • SHA256 e32e6d50672cdabb4e730d759045332cebe774830d781dfbe496656a5ac7e265
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              Melissa.doc.lnk
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\Melissa.doc.lnk
                                                                                                                              • Size 1KB
                                                                                                                              • SHA256 2a6b75c022250766b247f267328416bc0268fd6b3cd9976d35c3728fc8cc4ef8
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              The-MALWARE-Repo-master.zip.lnk
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\The-MALWARE-Repo-master.zip.lnk
                                                                                                                              • Size 651B
                                                                                                                              • SHA256 187850f22ab838410f0a67c4978c1fb173d44187174417cd094acfd39d00d68b
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              Virus.lnk
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\Virus.lnk
                                                                                                                              • Size 917B
                                                                                                                              • SHA256 3ad284c37a5a8c0fce46238c77a612e2c1385177e1710b473fc3f4043386e37e
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              AlternateServices.bin
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
                                                                                                                              • Size 8KB
                                                                                                                              • SHA256 ed7553b6ef911f8f22be51e1af3cd7ad251687a7f7fa125b7ac4610fc11b09ba
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              AlternateServices.bin
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
                                                                                                                              • Size 16KB
                                                                                                                              • SHA256 f574aff33410dc71d24fd9bd3fab4771913224cb4b95d0d51dcac483cb263a03
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              AlternateServices.bin
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\AlternateServices.bin
                                                                                                                              • Size 22KB
                                                                                                                              • SHA256 ca1fb2da6e4efd57f654956933b4e1174dac36ecf580b66313b882ca04bd9bf3
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              data.safe.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                              • Size 124KB
                                                                                                                              • SHA256 c7e0737e1c128b7cae463fb1c8f7998428582fc183009080a30e40e85b5f0630
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              data.safe.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                              • Size 115KB
                                                                                                                              • SHA256 71ccd3e2ed43af0c20813df7745fdefd32b214b7db607aa3777628e22f6a9daa
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              data.safe.tmp
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                              • Size 27KB
                                                                                                                              • SHA256 5f454e1446100fa98b0680d63627b3ac79b806adeebe9ade1afebb16387c744b
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              events
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
                                                                                                                              • Size 1KB
                                                                                                                              • SHA256 4a125d59c252596f42e55f4c72bb58d7e8fd1739d8053b1a67afdc1f0779b28f
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              events
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\events\events
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 e6ba818a2face34f1bcf32128834b86e4768a1c7b16d02cb999f1933f6623c2f
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              475d9915-1b5c-4931-8e14-15303130c27b
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\475d9915-1b5c-4931-8e14-15303130c27b
                                                                                                                              • Size 886B
                                                                                                                              • SHA256 4331f5a184f3c15332daec343c9bffdc8d02a8a923b59b9ac3dafb936db9fcc2
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              7a966265-09ad-45e5-91a0-77345e7ea9a3
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\7a966265-09ad-45e5-91a0-77345e7ea9a3
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 b1a9d204c536c1f5f757b00c752347555f58a75b93cd7e58fab46b8de512eba5
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              c749a636-c742-47fc-8a02-49d6e0248eaa
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\c749a636-c742-47fc-8a02-49d6e0248eaa
                                                                                                                              • Size 235B
                                                                                                                              • SHA256 11b3bb35740b255b5ff478b0c4a288530bff32b60058e71ed95bef24743196cd
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              d8411ac5-a66b-4307-bf79-fc97efa99bc9
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\d8411ac5-a66b-4307-bf79-fc97efa99bc9
                                                                                                                              • Size 871B
                                                                                                                              • SHA256 53e090dc455f24b9dac473e54753f28cee478c4e707c5d3f6c20425f510821f0
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              dee424bd-fd7c-4584-9452-38f7871129e8
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\datareporting\glean\pending_pings\dee424bd-fd7c-4584-9452-38f7871129e8
                                                                                                                              • Size 235B
                                                                                                                              • SHA256 0a8a56bdb272c986c7532fb00665158007addefbde6a4068945d362734f72d00
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              extensions.json
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\extensions.json
                                                                                                                              • Size 16KB
                                                                                                                              • SHA256 d1d3e8e587e09e63ea0f97286753112173d9527a3eea196b77b3e86c9f115b5f
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              gmpopenh264.dll
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                                                                              • Size 1.1MB
                                                                                                                              • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              gmpopenh264.info
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                                                                              • Size 116B
                                                                                                                              • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              manifest.json
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                                                                              • Size 1002B
                                                                                                                              • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              widevinecdm.dll
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                                                                              • Size 21.6MB
                                                                                                                              • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs-1.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                                                                                                                              • Size 12KB
                                                                                                                              • SHA256 3211fdad3ddc1e83e4bcf859a20adbdf35e4bfd43791083b7b56cfddff761163
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs-1.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                                                                                                                              • Size 6KB
                                                                                                                              • SHA256 c661feba765250a8957f837c8066279e06653fdb2a9a84dbc3736d2c458ecafd
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs-1.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                                                                                                                              • Size 8KB
                                                                                                                              • SHA256 66ba433ed11afc0e5be4a27b6da623cf45941bb5d07b45a77c965e5f841ff77c
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs-1.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs-1.js
                                                                                                                              • Size 6KB
                                                                                                                              • SHA256 6e36fb9a82c618437b30fa0308c58fb53741127dab3f9627a588363b25d82c09
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
                                                                                                                              • Size 12KB
                                                                                                                              • SHA256 4a38bd895c1fecb17ca256f0875a2d91fda8e998a60b61f1dd86d7dd4d84c1a4
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
                                                                                                                              • Size 7KB
                                                                                                                              • SHA256 cf1225b27ec7507b538b2e0fc774ed5e0e14c9a0a48bd5f15539b750b9efd37a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              prefs.js
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\prefs.js
                                                                                                                              • Size 6KB
                                                                                                                              • SHA256 206f0bab1f713e59b42d33049829953e5f414c5c9fea911c9849d7bedef84085
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              recovery.baklz4
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 f9aa2c6d2d98349c3ceb1b6646e3a728990f79224cbb74852c4c848add748ac2
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              recovery.baklz4
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 5afcd24a2405509ccc59b40a69c7226be3ab8e1019c49cde44a11744a2bb4721
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              recovery.baklz4
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 0868857648d06419c0c3d6d328dd6a69c3e5b1340e4862cc4b5439d315518f52
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              recovery.jsonlz4
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                              • Size 5KB
                                                                                                                              • SHA256 c441a8468adb0720ea3363a964f70876e82decd5a8f9c301b234d8acdc3bdb7a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              3870112724rsegmnoittet-es.sqlite
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                              • Size 7.1MB
                                                                                                                              • SHA256 a029e74169d735cbc91f3734485af247817d42eece76d7d9c8304ae56fc3a337
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              3870112724rsegmnoittet-es.sqlite
                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fu4ot18b.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                              • Size 7.1MB
                                                                                                                              • SHA256 a73b4b59f3d5536ccc2d90c7d13c3b3bff74f14886e4ba4f326a901d656b99da
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Outlook Data File - ifohxzenwk.pst
                                                                                                                              • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - ifohxzenwk.pst
                                                                                                                              • Size 265KB
                                                                                                                              • SHA256 721e16fc837de9f1f91b251eeb6ad6eaf26c59fe7548cb51407b1a46954af799
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              000.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\000.exe
                                                                                                                              • Size 6.7MB
                                                                                                                              • SHA256 4ea1f2ecf7eb12896f2cbf8683dae8546d2b8dc43cf7710d68ce99e127c0a966
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Alerta.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Alerta.exe
                                                                                                                              • Size 111KB
                                                                                                                              • SHA256 2d2a22db20a44474afbd7b0e6488690bad584dcae9789a5db776cc1a00b98728
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Ana.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Ana.exe
                                                                                                                              • Size 2.1MB
                                                                                                                              • SHA256 117d7af0deb40b3fe532bb6cbe374884fa55ed7cfe053fe698720cdccb5a59cb
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              ArcticBomb.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ArcticBomb.exe
                                                                                                                              • Size 125KB
                                                                                                                              • SHA256 322eb96fc33119d8ed21b45f1cd57670f74fb42fd8888275ca4879dce1c1511c
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              BlueScreen.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\BlueScreen.exe
                                                                                                                              • Size 9KB
                                                                                                                              • SHA256 14e6ac84d824c0cf6ea8ebb5b3be10f8893449474096e59ff0fd878d49d0c160
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              ClassicShell.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ClassicShell.exe
                                                                                                                              • Size 6.8MB
                                                                                                                              • SHA256 a848bf24651421fbcd15c7e44f80bb87cbacd2599eb86508829537693359e032
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              ColorBug.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\ColorBug.exe
                                                                                                                              • Size 53KB
                                                                                                                              • SHA256 775ba68597507cf3c24663f5016d257446abeb66627f20f8f832c0860cad84de
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              DesktopPuzzle.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\DesktopPuzzle.exe
                                                                                                                              • Size 239KB
                                                                                                                              • SHA256 1f5a26f24a2bfdd301008f0cc51a6c3762f41b926f974c814f1ecaa4cb28e5e6
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              FlashKiller.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\FlashKiller.exe
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 353df4f186c06a626373b0978d15ec6357510fd0d4ac54b63217b37142ab52d3
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              FreeYoutubeDownloader.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\FreeYoutubeDownloader.exe
                                                                                                                              • Size 396KB
                                                                                                                              • SHA256 cae57a60c4d269cd1ca43ef143aedb8bfc4c09a7e4a689544883d05ce89406e7
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Gas.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Gas.exe
                                                                                                                              • Size 18KB
                                                                                                                              • SHA256 da3f40b66cc657ea33dbf547eb05d8d4fb5fb5cf753689d0222039a3292c937a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              HMBlocker.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\HMBlocker.exe
                                                                                                                              • Size 48KB
                                                                                                                              • SHA256 2d047b0a46be4da59d375f71cfbd578ce1fbf77955d0bb149f6be5b9e4552180
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              IconDance.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\IconDance.exe
                                                                                                                              • Size 301KB
                                                                                                                              • SHA256 a4b6e53453d1874a6f78f0d7aa14dfafba778062f4b85b42b4c1001e1fc17095
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Illerka.C.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Illerka.C.exe
                                                                                                                              • Size 378KB
                                                                                                                              • SHA256 cde188d6c4d6e64d6abfdea1e113314f9cdf9417bca36eb7201e6b766e5f5a7f
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              LoveYou.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\LoveYou.exe
                                                                                                                              • Size 22KB
                                                                                                                              • SHA256 1edc8771e2a1a70023fc9ddeb5a6bc950380224b75e8306eb70da8eb80cb5b71
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              MEMZ.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\MEMZ.exe
                                                                                                                              • Size 14KB
                                                                                                                              • SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Nostart.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Nostart.exe
                                                                                                                              • Size 233KB
                                                                                                                              • SHA256 2f10f1384f3513f573a88e1771c740a973a5a304387e23aa4bf310794532fa8e
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              PCToaster.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\PCToaster.exe
                                                                                                                              • Size 411KB
                                                                                                                              • SHA256 85a58aa96dccd94316a34608ba996656a22c8158d5156b6e454d9d69e6ff38c3
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Sevgi.a.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\Sevgi.a.exe
                                                                                                                              • Size 203KB
                                                                                                                              • SHA256 750e37d1fdd64e9ea015272a0db6720ac9a8d803dc0caad29d0653756a8e5b17
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              TaskILL.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\TaskILL.exe
                                                                                                                              • Size 31KB
                                                                                                                              • SHA256 4663715548c70eec7e9cbf272171493d47a75d2652e38cca870412ea9e749fe9
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              VeryFun.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Trojan\VeryFun.exe
                                                                                                                              • Size 3.0MB
                                                                                                                              • SHA256 8b04fda4bee1806587657da6c6147d3e949aa7d11be1eefb8cd6ef0dba76d387
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Gnil.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Gnil\Gnil.exe
                                                                                                                              • Size 73KB
                                                                                                                              • SHA256 24c0638ff7571c7f4df5bcddd50bc478195823e934481fa3ee96eb1d1c4b4a1b
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Mabezat.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Mabezat\Mabezat.exe
                                                                                                                              • Size 141KB
                                                                                                                              • SHA256 2ae0c4a5f1fedf964e2f8a486bf0ee5d1816aac30c889458a9ac113d13b50ceb
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              MadMan.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\MadMan.exe
                                                                                                                              • Size 2KB
                                                                                                                              • SHA256 17d81134a5957fb758b9d69a90b033477a991c8b0f107d9864dc790ca37e6a23
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              Melissa.doc
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Melissa.doc
                                                                                                                              • Size 40KB
                                                                                                                              • SHA256 554701bc874da646285689df79e5002b3b1a1f76daf705bea9586640026697ca
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              Walker.com
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Walker.com
                                                                                                                              • Size 4KB
                                                                                                                              • SHA256 b87b48dcbf779b06c6ca6491cd31328cf840578d29a6327b7a44f9043ce1eb07
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              WinNuke.98.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\WinNuke.98.exe
                                                                                                                              • Size 32KB
                                                                                                                              • SHA256 2f1f93ede80502d153e301baf9b7f68e7c7a9344cfa90cfae396aac17e81ce5a
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              xpaj.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpaj.exe
                                                                                                                              • Size 219KB
                                                                                                                              • SHA256 9db7ef2d1495dba921f3084b05d95e418a16f4c5e8de93738abef2479ad5b0da
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              xpajB.exe
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Virus\Xpaj\xpajB.exe
                                                                                                                              • Size 520KB
                                                                                                                              • SHA256 e04c85cd4bffa1f5465ff62c9baf0b29b7b2faddf7362789013fbac8c90268bf
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              8676210e6246948201aa014db471de90
                                                                                                                              • Path C:\Users\Admin\Downloads\The-MALWARE-Repo-master\The-MALWARE-Repo-master\Worm\Blaster\8676210e6246948201aa014db471de90
                                                                                                                              • Size 6KB
                                                                                                                              • SHA256 2e481059b9bc9686c676d69a80202eed5022c9a53ecd8cac215e70c601dd7fdc
                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                              Submit Download

                                                                                                                              note.txt
                                                                                                                              • Path C:\note.txt
                                                                                                                              • Size 218B
                                                                                                                              • SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                              Submit Download

                                                                                                                              memory/1160-7116-0x0000000000400000-0x0000000000454000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1160-7113-0x0000000000400000-0x0000000000454000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1196-7333-0x0000000000B60000-0x0000000000C6C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1196-7332-0x0000000000B60000-0x0000000000C6C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1196-7331-0x0000000000B60000-0x0000000000C6C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1672-7042-0x0000000000400000-0x0000000000444000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1672-7046-0x0000000000400000-0x0000000000444000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6715-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6932-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6717-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6714-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6719-0x00007FFC26760000-0x00007FFC26770000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6720-0x00007FFC26760000-0x00007FFC26770000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6931-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6934-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6933-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6716-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-6718-0x00007FFC28B80000-0x00007FFC28B90000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-7008-0x0000000001000000-0x0000000001026000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/1688-7010-0x0000000001000000-0x0000000001026000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/2020-7176-0x0000000000400000-0x0000000000AD8000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/2820-7045-0x0000000000400000-0x0000000000444000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3348-7050-0x0000000000400000-0x0000000000444000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3688-7118-0x0000000000400000-0x0000000000454000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3840-7189-0x0000000000400000-0x0000000000AD8000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7320-0x0000000010000000-0x0000000010013000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7316-0x0000000000B20000-0x0000000000CBC000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7315-0x0000000000B20000-0x0000000000CBC000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7317-0x0000000000B20000-0x0000000000CBC000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7321-0x0000000010000000-0x0000000010013000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/3888-7318-0x0000000010000000-0x0000000010013000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4296-7407-0x0000000000EA0000-0x00000000014DD000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4296-7744-0x0000000000EA0000-0x00000000014DD000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4296-7314-0x0000000000EA0000-0x00000000014DD000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4296-7413-0x0000000000EA0000-0x00000000014DD000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4296-7532-0x0000000000EA0000-0x00000000014DD000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-34-0x0000025E82A20000-0x0000025E82A40000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-35-0x0000025E82E40000-0x0000025E82F40000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-23-0x0000025E801E0000-0x0000025E802E0000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-738-0x0000025E970B0000-0x0000025E971B0000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-68-0x0000025E94200000-0x0000025E94220000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-284-0x0000025E99E20000-0x0000025E99F20000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4388-53-0x0000025E82C80000-0x0000025E82CA0000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4884-7210-0x0000000000400000-0x0000000000404000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4972-6966-0x0000000000400000-0x0000000000455000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4972-7561-0x0000000000400000-0x0000000000455000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/4972-6962-0x0000000000400000-0x0000000000455000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5024-7326-0x0000000000D00000-0x0000000000DF4000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5024-7325-0x0000000000D00000-0x0000000000DF4000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5024-7322-0x0000000000D00000-0x0000000000DF4000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5140-7200-0x0000000000400000-0x0000000000414000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5368-6980-0x0000000000400000-0x0000000000483000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5368-6986-0x0000000000400000-0x0000000000483000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5368-6981-0x0000000002000000-0x0000000002003000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5368-6985-0x0000000001FD0000-0x0000000001FF4000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5368-6982-0x0000000001FD0000-0x0000000001FF4000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5692-7049-0x0000000000400000-0x0000000000444000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/5992-7162-0x0000000000400000-0x0000000000AD8000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6024-7563-0x0000000001100000-0x000000000120C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6024-7564-0x0000000001100000-0x000000000120C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6024-7562-0x0000000001100000-0x000000000120C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6496-7559-0x0000000000D00000-0x0000000000E0C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6496-7560-0x0000000000D00000-0x0000000000E0C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6496-7558-0x0000000000D00000-0x0000000000E0C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6672-7416-0x0000000000660000-0x000000000076C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6672-7417-0x0000000000660000-0x000000000076C000-memory.dmp
                                                                                                                              Download

                                                                                                                              memory/6672-7415-0x0000000000660000-0x000000000076C000-memory.dmp
                                                                                                                              Download