Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/08/2026, 12:17

General

  • Target
    2026-08-15_8399410b55cff39c1b5f91d5fc464f33_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet.exe
  • Size 12.1MB
  • Sample260815-pgdzdaff63
  • SHA256 7b2e86d4074fcd638ee0876495b6d24bf65382f831f3dd52cfe2853b006da6ae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-15_8399410b55cff39c1b5f91d5fc464f33_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-15_8399410b55cff39c1b5f91d5fc464f33_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet.exe"
    1⤵
      PID:1736

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestASPWebshell3945283331\001\.state_signed
          • Size 25B
          • SHA256 71ece0b84729f877e78077a0374ca50d8b2c9881ac0f30444a3d0d087840d9d5
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestAccessWindowBlockMode3698439745\001\state.json
          • Size 16KB
          • SHA256 d226c5336875d4053126599d4733686b99c9142e64200e090b15761c180b1915
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestAccessWindowExemptsTrustedClient1153567966\001\state.json
          • Size 16KB
          • SHA256 93f9335764c1bea4052f9561c80f6bd6c5d542646ec120ac1cc23566ffee2822
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestAccessWindowSkipsBrokenRules3252815169\001\.state_signed
          • Size 25B
          • SHA256 64d092634241c1bc7299e99b75fc5768cd7da6a8a1b13215eeaf13dbdada5d44
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdaptRingStaysBoundedUnderOneNoisySource3275258551\001\.state_signed
          • Size 25B
          • SHA256 7a46988328adb5eb9130854be89937a9372f4bea1caec68d576127d9ba5cf5f8
          • MD5 SHA1 SHA512

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdaptiveResetAndPersist2326738689\001\rollup.json.hw
          • Size 96B
          • SHA256 3827dfab7c99ff87d400965d28c0229f03fa162c69a6b9a6a9eb83690e37adfb
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdaptiveResetAndPersist2326738689\001\state.json.hw
          • Size 96B
          • SHA256 d6c180339cfff48cf5dc165d4e876ed4eaebeea67b9ef95b0bb10027d57772d6
          • MD5 SHA1 SHA512 TLSH

          weights.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdaptiveResetAndPersist2326738689\001\weights.json.hw
          • Size 96B
          • SHA256 7c4ce84635d927228b13a7b0b8a0559670d21abe77f6e6968ce3047b2b1bb851
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdminWriteFamilyIsTimelockedlayer_chips3263475902\001\.state_signed
          • Size 25B
          • SHA256 b42bff6acc8bfb2de4e36df7fe69b30ca4a46bb26136232e4ab5a1c788c1394e
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdminWriteFamilyIsTimelockedrestore674555487\001\state.json
          • Size 16KB
          • SHA256 62456ef01bae58fd010be5c3162621c0ba977c07c5def80c16e284f0644f631e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestAdversarialEvasionCorpus3694330106\001\.state_signed
          • Size 25B
          • SHA256 52df90d1bf81c78a3bc7104ed354ff7a117afad95fa473a4d94be9d915eb098c
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestApplyPresetLockdown2802734756\001\state.json
          • Size 16KB
          • SHA256 a341cae489c76bdc7808fc5265e2d343579b83d95975f0d39b244d366779e7d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestApplyPresetPersists3407668080\001\state.json.hw
          • Size 96B
          • SHA256 1f9a273e291539b983ef338487b9fa9ddce0dbf493ede94f5d7f5b7eecfabcaf
          • MD5 SHA1 SHA512 TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestApplyPresets1760455102\001\state.json
          • Size 16KB
          • SHA256 760641235db88debbf37c0e02c334085c459c71d649b5fc13b1a64577849080d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestApplyPresets1760455102\001\state.json
          • Size 16KB
          • SHA256 e83a888d6b408b9f1a0d0fd324c74ff1caf34afa91f3027d84f954619284d33a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestArgInjectDocumentsAreNotInvocations266703761\017\.state_signed
          • Size 25B
          • SHA256 ea79bab5f297347b7951c1a82d6a6df60fa8d622edb28b04b4fbeea0741011ac
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestArgInjectRunbookIsNotBlocked1688661670\007\.state_signed
          • Size 25B
          • SHA256 03e1d8e53c8542f3cc134768ec82846af828e81172cbb1a7c133109e2b2b0ef2
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestArgInjectSuppliedOptionsStillFire1707765505\038\.state_signed
          • Size 25B
          • SHA256 9caae2a2c1134cd9f6e19d4c3c4bc523b01d1d68e06b9158aaaac51901c939ce
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestAuditModeAllowsBannedIP2373192369\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 bd746b00827f7f35da4c218273c868a20c54f17a0988fc711d1086c084c4a8a0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestAuthVelocitySurvivesScoreDecay1785639784\001\.state_signed
          • Size 25B
          • SHA256 edb97af3884cdb9a020a022eb492e63389d51f2ee118d27d02c24ec25ae8baea
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestAuthVelocitySurvivesScoreDecay1785639784\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 17761cae56273ec17acaf541aabac76d81251361f8b57de314b59a736defa721
          • MD5 SHA1 SHA512 SSDEEP TLSH

          config_20260815T121921Z-4.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestBackupUniqueSameSecond3015289103\001\backups\config_20260815T121921Z-4.json
          • Size 15KB
          • SHA256 cdb03bf3dc6ba596bd4743e3956a6ab40250acbe5786c84fbf2e068e7396a606
          • MD5 SHA1 SHA512 SSDEEP TLSH

          blocklist.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestBanPersistDebounce4285337868\001\blocklist.json
          • Size 642B
          • SHA256 6a4acc12537e5514c1074df275b5e2e5ff6767839201c1910926c5ec47ce2b5f
          • MD5 SHA1 SHA512 TLSH

          blocklist.json.hw.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestBanPersistDebounce4285337868\001\blocklist.json.hw.tmp.1736
          • Size 96B
          • SHA256 f56cc3e744ee7788d6c64532f59e4a32bb61c18550d1d08cba95cf81dcf2753e
          • MD5 SHA1 SHA512 TLSH

          blocklist.json.hw.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestBanPersistDebounce4285337868\001\blocklist.json.hw.tmp.1736
          • Size 96B
          • SHA256 6ca2930c67084b3ccdd5be5be03a3170f27b93a8d22ef5e3a51a6ff93b0122ca
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestBanPersistDebounce4285337868\001\rollup.json.hw.tmp.1736
          • Size 96B
          • SHA256 6c9731f21a85e61c9891933d39759f52db450a8c709e05790eb98d58cca83abc
          • MD5 SHA1 SHA512 TLSH

          state.json.hw.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestBanPersistDebounce4285337868\001\state.json.hw.tmp.1736
          • Size 96B
          • SHA256 172feed97207311066f4843cd200a43c2a94c1b5da44a2428e6e2185ed61a2a7
          • MD5 SHA1 SHA512 TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestBandwidthDoesNotClearFromSilence925179226\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 4f131a26a77a09eaaaa582b1b48ec222b7b8ce37a1c93288c6b15b8c07cc742f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBandwidthZeroDurationDoesNotPoisonTheWindow3181570418\003\.state_signed
          • Size 25B
          • SHA256 e6f7768e9062b5aecf385abf930f8dd1b78caf50efeca50005ebf95415ea05f9
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBenignHeadersStayClean3053943900\027\.state_signed
          • Size 25B
          • SHA256 b360895b9dbae0503c3a9722eafa969ef7312f7fcb4def9988edec886911c28e
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBenignHeadersStayClean3053943900\056\.state_signed
          • Size 25B
          • SHA256 004b5118b91c65550a0fb01447b87256c402f62d895e75a5e48c70f2b2df7b81
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBenignQueriesStayClean1203477784\008\.state_signed
          • Size 25B
          • SHA256 f11088964a8332cc092f0b119cb52e079f47926b25db860568e0422ffce9e788
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBenignQueriesStayClean1203477784\019\.state_signed
          • Size 25B
          • SHA256 d5dccde8bb3185f37b99271fe6050504d17427018c58e6014ee2191a8f0bc966
          • MD5 SHA1 SHA512

          filters.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestBlacklistPersist434670006\001\filters.json.hw
          • Size 96B
          • SHA256 1dcab37c595d2fc7a88f04281d9ff1cbd196e24f000883eb07fd67dc9638409c
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBlindSQLPossessiveProseIsSilent3800955725\002\.state_signed
          • Size 25B
          • SHA256 a491c97c56597f7c2300fb8600bc7aad0d0d3792b45549fbcc3b6fe0df05c1e4
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBodyOnlyGapsAreTheSuppliedFamily3998798545\001\.state_signed
          • Size 25B
          • SHA256 8f72412734f94e98fdf7341527abebd887d3a9c3ccbc29e067dd2237b3325af3
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestBracedCodePointEscape454620190\001\.state_signed
          • Size 25B
          • SHA256 ecdf51f0b263a7d27d04620e2880a7443389ca95fa5fb6571be3e7ef3bdff9b5
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCVEMarker2548516176\001\.state_signed
          • Size 25B
          • SHA256 4919d969d4c0c1b214e56f5591137c2a0c39a85080bd5e95f8a00db7f91fa31c
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCloudIac341336405\001\.state_signed
          • Size 25B
          • SHA256 09c644056c235136eaa4683082a8bab6fb0972414e0dfba1ceec8f3445cca77c
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestConfigMutationUnderLoad3066815083\001\state.json
          • Size 16KB
          • SHA256 badd2e40c55577c70438e2ad810f95dae213e442b74da3d1a05563f3e624a6a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestConfigWriteInjectionResistance1843696211\001\state.json
          • Size 211KB
          • SHA256 31f5cc2abdb723ce582e9b71d07709c45eefec08138a9344f959ac8b38aae002
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestConfigWriteInjectionResistance1843696211\001\state.json
          • Size 406KB
          • SHA256 822fd6657c95f2260e7d67099d4280e2c7965e947f695f8534b14022d0139f20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestCorruptedStateRecoveryempty376548899\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 cbbe1ed27a389b9be4ce7fb4934504181f58ce60988e5f2f26e16b91c28b078c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestCorruptedStateRecoverygarbage1767347036\001\state.json
          • Size 16KB
          • SHA256 1a039ae2e9441dbbc3356c20b2333d497e8e99d4bd24da67f41fdf0f644c2ce5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestCorruptedStateRecoverygarbage1767347036\001\state.json.hw
          • Size 96B
          • SHA256 38a14bcb949b68ec495357d55c6c2ddd34b31368ebb7509ce735b536a0d74c2e
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestCorruptedStateRecoverytruncated3491962120\001\state.json.hw
          • Size 96B
          • SHA256 efb8f5eb6069e521879f620781ea367d492cbba77712b8f9848834cebde236d8
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\001\.state_signed
          • Size 25B
          • SHA256 25668b95d1ca6db436e613743813d8d74689b3bc5ddf346d3a00abe85a3e4d30
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\032\.state_signed
          • Size 25B
          • SHA256 79738d52b998b9f544bc0fab060d7059aba19ee986e1245629d47d0cda4df6b8
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\064\.state_signed
          • Size 25B
          • SHA256 c57d5f8e93dffb61369ad14135ea0ebc8c4c4647d83a7a3262965caaf6a71538
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\092\.state_signed
          • Size 25B
          • SHA256 33a257637c607560862d22846e28cf2e87e3fd2a125b6e4ee19a292f4affb5a5
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\122\.state_signed
          • Size 25B
          • SHA256 d06ed0424b73f39f2fe651c0f840ca0e8745b160b28edf3633d1b59156bb760b
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\150\.state_signed
          • Size 25B
          • SHA256 f8f7a5d3a7fe010df1880b69a333a8a46303565473000dd36882e86e2a96b496
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\180\.state_signed
          • Size 25B
          • SHA256 5dc1cc7fd17c45553dcd5b4b757f4c0a812006256134f9beec57183ba24c4c01
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\212\.state_signed
          • Size 25B
          • SHA256 7c996c7da0db5d6c2191264f1bcf29aba01280404e4d3627ed8ca92d46f17331
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\247\.state_signed
          • Size 25B
          • SHA256 ce5c59d3259f54f9691ef8189cf64b76674d785979f34ecca071a165e0ae291d
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\278\.state_signed
          • Size 25B
          • SHA256 9d298c48ab1eaca8db791f97a51caea27855e3ff48b8e225237588918a495931
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\308\.state_signed
          • Size 25B
          • SHA256 ea75b0db6d18764f8f67d20b6f14cf8cfc3a822815977e0dbe0be4a87edc6b0f
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\335\.state_signed
          • Size 25B
          • SHA256 04ba75d7c967e32411318016bed98823ded97d415cb197d34af0e04b7361cc96
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\364\.state_signed
          • Size 25B
          • SHA256 e7d4f6ab4b69f7ce65aecb7e2c40ac82820c86a3d7d70d2a3df49462cf31dde5
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\394\.state_signed
          • Size 25B
          • SHA256 032e91269bc99580718ed0b46107e3b02c1e7da7112e912518e1fbf43590bf43
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\425\.state_signed
          • Size 25B
          • SHA256 3faaecb58721513009d4074e0b25b1830cd095cff5326f7a580b97033c471f83
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\452\.state_signed
          • Size 25B
          • SHA256 10a272526f01429f63fe7ca7c2b0a16c044dad184fe54810de679e88d52ca222
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\485\.state_signed
          • Size 25B
          • SHA256 30063d60e0da3585f64d366e4d7a5c1cdf453cd5cdea56f57ce4410c8724d550
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\522\.state_signed
          • Size 25B
          • SHA256 5f7879872f8d2dc2be3d159e7e898e3e9d5dabff88afb9fc5d1738a6022ef7b1
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrix3276461985\558\.state_signed
          • Size 25B
          • SHA256 c498f156e61c51621167b584f58c35f38a978da176ce7382a38428bf14401631
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCoverageMatrixGapsAreStillGaps882029192\005\.state_signed
          • Size 25B
          • SHA256 04741601d07716d9a05a712871e2d92cd4f65fecadd27f2a09ba7fb4c5451fc2
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCovertFragmentReassembly2615093591\001\.state_signed
          • Size 25B
          • SHA256 cbeee3fd7aebc38dc5cf1765527f5cce364a7e13263c537146252711c5ff1d76
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestCredFanoutNormalUsage3130166832\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 bdaed8ace48376a0b27d3535d0f6c6500c3eed310666dfb4d1293bfa3074dc43
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestCredGeometryBenignRetryNotFlagged996166120\001\.state_signed
          • Size 25B
          • SHA256 c1fcf739f278655e258168aace2e0f068acbd45b1e1ce8a95f8d646f37321e68
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestCredGeometryBenignRetryNotFlagged996166120\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 a694056346fc83d88f0fe978da65691a6a62b8a3f060d08499b88b2593c28ff7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rules.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestCustomSignatureCap2430413701\001\rules.json
          • Size 519B
          • SHA256 af38b3d602b9c20131d61c5a88dc46a6200b126dbea6ea3d22428d879e010585
          • MD5 SHA1 SHA512 TLSH

          rules.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestCustomSignatureCap2430413701\001\rules.json
          • Size 4KB
          • SHA256 97bf2822f1d8a8cbbec9172778128aa7c5d4958e0f555431db6972fa44d7218e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rules.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestCustomSignatureCap2430413701\001\rules.json
          • Size 1KB
          • SHA256 cf7e907ba56f1748c8600ff0bdcf1bcb7aa7e8677c9818e836418b3b8ef22b0e
          • MD5 SHA1 SHA512 TLSH

          rules.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestCustomSignatureCap2430413701\001\rules.json
          • Size 2KB
          • SHA256 45c3e64b772013e56e70f3872887e44e0a3aee798320336392871654eb0d6a70
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestDBADocumentsAreNotBlindSQLi77947667\011\.state_signed
          • Size 25B
          • SHA256 cff2827d652198759616bfd17ed975b60a8e1d2f77dccd9d13cfea58cd4310ce
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestDeserWireProseIsNotAPayload3099719983\001\.state_signed
          • Size 25B
          • SHA256 69234751a1a804b350ec59d6c31ba9115e18a86ea3319499fb8aaa8c69f996ed
          • MD5 SHA1 SHA512

          shield_lock.json.hw.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestDisablePasswordIterationUpgrade970483068\001\shield_lock.json.hw.tmp.1736
          • Size 96B
          • SHA256 7ba0ecac95e6b4ff35bab52ba5a4699d93bb929f891eff1836ea1e7718b2ddec
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestEnumRearmDoesNotBlindErrorDiversity1708911543\002\.state_signed
          • Size 25B
          • SHA256 056121de25f3ccfab0eab1e8851c328f0994082f050ae01a68f9b50a559a6b09
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestEnumerationOffByDefault1937584988\001\.state_signed
          • Size 25B
          • SHA256 e445f6202c95023fd74103510f43314b3968a51fff39f07e74837edd74932cbd
          • MD5 SHA1 SHA512

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestEnvKeyCountsAsSigned3604223940\001\blocklist.json.hw
          • Size 96B
          • SHA256 1be2d2dc4030147956f86e9f4b6a2914604128d59ed8731ca5faeab5b5527475
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestEnvKeyCountsAsSigned3604223940\001\rollup.json.hw
          • Size 96B
          • SHA256 03267e3893e7a0c512dd0920542088974309c267c8fed3496993aba165d175d8
          • MD5 SHA1 SHA512 TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestErrDiversitySparesTheBrokenIntegration2372175053\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 7ac27cc4cedbf5dc99a68b8c84ea28ba571c6962f5a53be35b0535f3d06a12cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestEscapedTabIsATab453132134\001\.state_signed
          • Size 25B
          • SHA256 844374d7bc45bd29648b4655e5cf80513a23ac5cfd8070b94a0513894ab75500
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestEvictKeepsTheEscalationRecord1085966530\001\.state_signed
          • Size 25B
          • SHA256 aa76b7ceb227a2d0436c417ec2cbf65476fa3061bbd3a7d6cbc348568d942bdd
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestFCrDNSRefutedNoBotPTR4173693393\001\.state_signed
          • Size 25B
          • SHA256 5989c2132a964a6302769f056e22fb1f3dae755414721636bb8170ff43031403
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestFileUploadMarkersInDocumentsAreNotUploads3334031526\008\.state_signed
          • Size 25B
          • SHA256 71da477dacf88e8b301a16885cb54f99622a87366c4fa19207633e91b21a7991
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestFramingDefuseNeedsADeclaredBoundary360088879\003\.state_signed
          • Size 25B
          • SHA256 a854407f0255316dc7bbc6938202b5146a8e210fdcc5ab206eaa40084ccddead
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGadgetClassDocumentsAreNotPayloads3482510693\008\.state_signed
          • Size 25B
          • SHA256 cf90d89f8e762bbb3fca0a075977cc3f05ad8db23b9827303aef1b8d4e5ebc24
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGeoBehaviourMatrixcountry_allow,_no_DB,_unknown=block634239792\001\.state_signed
          • Size 25B
          • SHA256 b33ffa1062edcdeae4f71c1bf7b5ac656a1d5207151ebeb7de12b91dcbe17554
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGqlIntrospectStillCatchesEveryDelivery2791453830\012\.state_signed
          • Size 25B
          • SHA256 511dd9d9fb457b5afd3e76de58b92e31375aa0ee49b0e6557dbe9cc74523414a
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGqlIntrospectStillCatchesEveryDelivery2791453830\060\.state_signed
          • Size 25B
          • SHA256 2c2cd3a7a23c319a4ef10c099d082fcd22be086b2243ea5aa99f59236bfa32e3
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGqlIntrospectStillCatchesEveryDelivery2791453830\105\.state_signed
          • Size 25B
          • SHA256 83bb08e45efd7bdbe5b4589d441dffb7cab881ffb07ec0d5f425bcf918008f43
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestGqlIntrospectStillCatchesTheHead412987549\005\.state_signed
          • Size 25B
          • SHA256 0ed3b1da789db02a5ce9689ae2e69d9a193ffbd26d24a9093f23cc1273d7ef86
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestHarvestHTMLOnly2288950789\002\.state_signed
          • Size 25B
          • SHA256 31c726ceb4f4bb885b475e795a44c82c6c8c3c75a134bb00c8161cc2cde422b0
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestHarvestHTMLOnly2288950789\003\state.json.tmp.1736
          • Size 16KB
          • SHA256 d3223c89b677a6a9dca36ad717201f0ca66c6b7d8079cc9325ff317462b8e6a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestHeadPrimaryBlobIsSupplied936350099\006\.state_signed
          • Size 25B
          • SHA256 6264756b4748a5c60a8910691c9841deadcab2fe6efd12c442a603f7d8b654e9
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestHoneypotImmediateBan3517701500\001\.state_signed
          • Size 25B
          • SHA256 06eb45792698ee81cc11d516a95b44e486a589f90e3bbdd9dfffe2f4bec07906
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestIMDSDocumentIsNotBlocked2246172817\006\.state_signed
          • Size 25B
          • SHA256 897dfa00e738ff29d6ef31e0f1e24d023d4bc8dfcf00ea8ff665c3234755a2c1
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestIMDSDocumentsAreNotSSRF590046249\020\.state_signed
          • Size 25B
          • SHA256 6caaea9519248165b68c0899b39e23b6c9a8630001d942b6e50ca9a10b13132a
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestImportSignaturesDetect633776151\001\.state_signed
          • Size 25B
          • SHA256 7e9ea63b62fca468fb0e8c507e947e1e10c019cdca9a80beac3c7e06c5f3c7b5
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestInspectBodySchemaTrailingBytes1329006893\006\.state_signed
          • Size 25B
          • SHA256 ef509fca861d8802718a32f5c22b49c7d17becd4c8c6f85c5313ba3cb6674ec1
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestJDBCDatasourceDocumentsAreNotInjection3146252166\009\.state_signed
          • Size 25B
          • SHA256 0e72dde3296c81b27a064278befb0622d93746666bc8f69e9475bbf5c8a07716
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestJDBCFixtureDocumentIsNotBlocked3337504642\003\.state_signed
          • Size 25B
          • SHA256 d30ac54018af1c2633a602ebaf10d36286fe5947c6cc5b16cb208085d06cb5b6
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestJndiDocumentIsNotBlocked2944426353\009\.state_signed
          • Size 25B
          • SHA256 afb70a7f0100acacb8250e89dd20e640dd04b71cb80726db354cea49dcea5cfa
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestJndiSuppliedLookupStillFires91837664\010\.state_signed
          • Size 25B
          • SHA256 736fc9f8ef107e0ec8ae7bccf6c14addbd2266c528f3631171edf3aa8e9b7b00
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestJndiSuppliedLookupStillFires91837664\055\.state_signed
          • Size 25B
          • SHA256 0eb414402e98b4926cf24719f514c52f32bbfd1a5fbf350fedff896a395bbe76
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitBenignDocumentsGoSilent1687273404\005\.state_signed
          • Size 25B
          • SHA256 074e11cb59350ccb42937bacbcdb3855debf975bd30c0e1e91845930e782cb5b
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitStillNamesEveryRequest2953845610\027\.state_signed
          • Size 25B
          • SHA256 fb2c32839123d70b9dba063c3157dce489013244be14c47fe0fe1e6bc1f09b63
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitStillNamesEveryRequest2953845610\073\.state_signed
          • Size 25B
          • SHA256 a6564441d8c0301914ba71164cb5a29eee93b6919c941721570d32b02a996abb
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitStillNamesTheHead3023048392\005\.state_signed
          • Size 25B
          • SHA256 665f21ea4ebb0da487415657a770c5144fbd1a18232097dbdb6cfbbbcb694d20
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitStillNamesTheHead3023048392\037\.state_signed
          • Size 25B
          • SHA256 b54d58bfd0b897f2badc34647d12390878d3094bd94c7e9e74d44fa19fd0748a
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestKnownExploitStillNamesTheHead3023048392\065\.state_signed
          • Size 25B
          • SHA256 516de89c1e7329145b3ee65a44e8f68149d4e9f21a170638ac7e5e7a56d4f711
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestLdapFilterDocumentsAreNotBreakouts1203557029\006\.state_signed
          • Size 25B
          • SHA256 4e99da2dddb5fb15091474193b888fa31926f008b48aef072041f2e77cf4b2f4
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestLeetDisguiseIsRevealedInTheBody4202553483\003\.state_signed
          • Size 25B
          • SHA256 732564a6cc49d795b5b045da253002197caf081a2aca8f4ed49adb776fc36dd3
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestLfiSchemeProseIsNotInclusion2864249711\002\.state_signed
          • Size 25B
          • SHA256 9145667205676b82a628351e0566655916117f56e7e205c815c382d883eb847d
          • MD5 SHA1 SHA512

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestLicensedBuildAfterTrialComesUpProtected3036411718\001\blocklist.json.hw
          • Size 96B
          • SHA256 82879c1bb242b23fa31bab3bf80260079cba98f06c1b564e0ccfb9bc27c847de
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestLicensedBuildAfterTrialComesUpProtected3036411718\001\rollup.json.hw
          • Size 96B
          • SHA256 4433463f4bcfec70bd651a352dd476a275a76dfccaa33154cb9219a93b420cc5
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestLicensedBuildAfterTrialComesUpProtected3036411718\001\state.json.hw
          • Size 96B
          • SHA256 31b125904cba14061912f9d27a4b4d231c026b375bf0a2f58698db0b9b3d77b2
          • MD5 SHA1 SHA512 TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestLicensedBuildAfterTrialComesUpProtected3036411718\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 4113d8300b34246e7c11858b868dabdcbc140131db362708a7afc35ac88060bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestManualBanPersistsAcrossReload3931973193\001\blocklist.json.hw
          • Size 96B
          • SHA256 ff24cce4ab9f152d5bc829b26775b36b6b1d31660395ce0a46165c00ea4630a6
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestManualBanPersistsAcrossReload3931973193\001\state.json.hw
          • Size 96B
          • SHA256 bf04b13479bcb41691d279bd1ad2db5dfaee3638199e5286877574b1fdc46aba
          • MD5 SHA1 SHA512 TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestNoTornReadsDuringSaveSpam3810529038\001\state.json
          • Size 16KB
          • SHA256 6f4fe55595d8486a0c2082d678ab1107eb71e342d51801ea4d6ad0d52b7ad988
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestNoTornReadsDuringSaveSpam3810529038\001\state.json
          • Size 16KB
          • SHA256 b4706d2927d8a8a7df95b49b9ca9734d5fadfdc72c063a855b179d1f0f5c6343
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestOGNLInDocumentsIsNotAnExpression746509209\001\.state_signed
          • Size 25B
          • SHA256 bd427fabe00af9c9d6474392b4a146ed28c20194910b2b02faa6ecf187611a5d
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestOGNLInDocumentsIsNotAnExpression746509209\042\.state_signed
          • Size 25B
          • SHA256 e90c49d717f3dc03ed7ceec8a830ff965b7a0bc44092a26ed7c0decd1a59d206
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestOGNLInDocumentsIsNotAnExpression746509209\086\.state_signed
          • Size 25B
          • SHA256 ecebb4aa291460d98a3486c81d1de079a9050bea537fab0d2b7a99555ac0686f
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPHPWebshellNeedsTheExecutedArgument2902017384\001\.state_signed
          • Size 25B
          • SHA256 0f87adb56f6d2ff7f989e3013a64b8e28b1c8bb201bf972ca008824120b10c48
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestPathConfusionInspectBlocks3626470003\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 096977299d8383e3ec5d994a3b0b040ea60ccd7f97ebb0c492560df854705e4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPolicyBlockIISCanonBypass3839198826\001\.state_signed
          • Size 25B
          • SHA256 70145fc0c8224e4413267e8ce1c08073692dc655a79b4b03c0c7baee185b2e22
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPosmodelMethodOverrideNotBypassed337948765\001\.state_signed
          • Size 25B
          • SHA256 718420d46a1c04356d4a0c5fe08b26cebf381179522fb19576a2cd55457db827
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\003\state.json
          • Size 16KB
          • SHA256 f80d13db596e814eb1cae5ec801824665fb63fe81651bc1bcc11965eee92a94c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\004\state.json
          • Size 16KB
          • SHA256 bd69837739bdb99a211eb64859f2ccfcf82b683924657f926295b9ce9ad0e326
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\008\state.json
          • Size 16KB
          • SHA256 81542f87201eadc698dc7f688a977a343ccbe9e94ee39b31f0dc311bc9bf12b3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\010\state.json
          • Size 16KB
          • SHA256 13b3236f06752a411f44832000153b32e47ba8a7e0eac7d22b7e07d8253ffec0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\011\.state_signed
          • Size 25B
          • SHA256 01c5f92836ec3e631cd11ba0f9f472adfbefa69f6cefc504815256946eedcc82
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\011\state.json
          • Size 16KB
          • SHA256 af4e5dec65028375f1709bb666afefe241de0bc6aee33f74eacb81adc6b1e5e7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\016\state.json.tmp.1736
          • Size 16KB
          • SHA256 608d3c2f603e798c6bf3d72e1e6dedf296f33f3151fbdaec73da8bf2dd606edc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\025\state.json.tmp.1736
          • Size 16KB
          • SHA256 1e2426028d8bebe29ab85a57e03d11be27a7bbd6154399a1aa8f85a0ffb6d46d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPresetAdvancedDefenseTiering657536289\029\.state_signed
          • Size 25B
          • SHA256 b0fe41804e0a86b39ad85605855f0a3515a38e1cf6d58794fa70a45ff2d1a75d
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestProtectOneClick1324092742\001\.state_signed
          • Size 25B
          • SHA256 03d9eace8d880eb97d8aff50f287ce8dab98c0cd0a635cba8beb274ba625f99c
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPrototypeDocumentsAreNotPollution1918295248\016\.state_signed
          • Size 25B
          • SHA256 cd483f0c8c50b96a13b90e321a7a3c7243f276cb35c85fb37fdb0be41b35eed7
          • MD5 SHA1 SHA512

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestPrototypePollutionInTheHeadStillBlocks2722256151\003\state.json.tmp.1736
          • Size 16KB
          • SHA256 a739ce52a8f1a8c022f00ec091aac3fec46fffbea37a62b91e8c73e56cf5b766
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPrototypePollutionInTheHeadStillBlocks2722256151\007\.state_signed
          • Size 25B
          • SHA256 dd3c675f3faa988f9d3e6194100c457b0d78da2e7d03be19748d6e012f10690c
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPrototypeTableOrderCeiling2231869752\002\.state_signed
          • Size 25B
          • SHA256 3c4bdb3738f59ac852df5e10c57f4403e827c685ff2d08b68d1890f85f03f135
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPythonDocumentIsNotBlocked79027267\001\.state_signed
          • Size 25B
          • SHA256 3c947c84c06294dd629986cfc7ffe4c314914018ce213847a5b8fed5534fafe4
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestPythonDocumentsAreNotSandboxEscapes2145397107\012\.state_signed
          • Size 25B
          • SHA256 abac8140cf0d5ba90982b25fe5eeb5646204fa4adf76f4778051da2c8a316ade
          • MD5 SHA1 SHA512

          blocklist.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestReadPathRace1185941638\001\blocklist.json
          • Size 9KB
          • SHA256 5f2cf3215d43dfa70a5fc0d02fdf429b6f965dc4dc84deef79ec35cf251c5304
          • MD5 SHA1 SHA512 SSDEEP TLSH

          blocklist.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestReadPathRace1185941638\001\blocklist.json
          • Size 3KB
          • SHA256 ce4fbd337ada36aa5521bf806f0bc4e117fbc15057ea58b3d1b995ce69d5a170
          • MD5 SHA1 SHA512 TLSH

          blocklist.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestReadPathRace1185941638\001\blocklist.json
          • Size 6KB
          • SHA256 717ada2a9c89c4b070946f24c0cbeb9693f14a505e98f0f6427356d7ef4a9178
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rules.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestReadPathRace1185941638\001\rules.json
          • Size 673B
          • SHA256 0cba149cf64cdf2ec419329444c69646e0a8d4325a5a4dde6e5eeca23629282f
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRealisticBodiesAreNotCovert2413622840\007\.state_signed
          • Size 25B
          • SHA256 3759bb703390e3608771adb149d7944bff40d48fc3d41dccd837400accbe3f5c
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRealisticQueriesAreNotCovert231816891\009\.state_signed
          • Size 25B
          • SHA256 e6645e149a95b09747f618c6d43b38a7ebec74d7700d4c74bd5f1d899344b310
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRecoveryFromTmpSibling911410221\001\.state_signed
          • Size 25B
          • SHA256 14d78c5cbf39c9cb3df384dc8e4d2c91ab0c7234dacc2331c8532ae94eedbca0
          • MD5 SHA1 SHA512

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestRecoveryFromTmpSibling911410221\001\state.json.hw
          • Size 96B
          • SHA256 934156fc02be6f10f9da32e2267b91e91d0aade827d4034294ad330a611f4c1d
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRedisInjectBenignDocuments899087109\018\.state_signed
          • Size 25B
          • SHA256 72ec1489f50b48935f428287ca269d4599bbbbe933f7d44d2c70e55dd5eacac8
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRedisInjectDeliveries4229692737\002\.state_signed
          • Size 25B
          • SHA256 f6f3e0d9c720ccb4a223d509c1dd6ac2ac0c84acf305f44182b030a6c88101b4
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportByCountrySurvivesReload2693697641\001\.state_signed
          • Size 25B
          • SHA256 33c87e7299cf7951f823d57093e9e183f91cf00992709589343cfcfdc0fe20d6
          • MD5 SHA1 SHA512

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportByCountrySurvivesReload2693697641\001\blocklist.json.hw
          • Size 96B
          • SHA256 b58bea0528e481aa1991c4d28ae0d062772e829a51cc02c1cee52d4fc7e6f030
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportByCountrySurvivesReload2693697641\001\rollup.json.hw
          • Size 96B
          • SHA256 8e37863058e646572a3ea41833d1f68bc644dc21000577120eb0d1e7c2f34960
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportIntegrityReportsTheRealStatussigned_store1545308723\001\rollup.json.hw
          • Size 96B
          • SHA256 93422565e3a377e9290ba1fefcf678c9f139182bb6c410d542a2e75dbaba1eff
          • MD5 SHA1 SHA512 TLSH

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportRecordsDowntimeAsGap541008829\001\blocklist.json.hw
          • Size 96B
          • SHA256 e92ca1ebf581d16d63f1277c10027715119d04d5ee9b0fce43b2d42e2045794e
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportRecordsDowntimeAsGap541008829\001\rollup.json.hw
          • Size 96B
          • SHA256 652950d839a754c1fa55f2d3b9112d3d0dba7e017f4acdb622a933338e5b6aca
          • MD5 SHA1 SHA512 TLSH

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestReportRefusesNumbersWhenUntrusted303708392\001\blocklist.json.hw
          • Size 96B
          • SHA256 588dcb72d28018d559385531e68bfba69b25d634f33cf8bc9f40ae9923305555
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestRuntimeAuditModeReleasesAcceptLayerBan3294719861\001\.state_signed
          • Size 25B
          • SHA256 cdd317dab808bd5a05ce7095fa12d928d90bbc77949a5ebdb4d212e1c11cd1c1
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentDocumentsScoreOnlyWhereDeclared1108281521\017\.state_signed
          • Size 25B
          • SHA256 68b897fc1d57e1b1eb698946f6d2e42da836564522ea52f7b8c6d3451abbcd19
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentHeadAndBodyAgree1403356853\029\.state_signed
          • Size 25B
          • SHA256 6c3e3dfa60a14587dc5f27040b795d97fc94b52488c25a7b6c68f852ea623ff0
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentPayloadsSurviveTheGate283131192\004\.state_signed
          • Size 25B
          • SHA256 0920ebe7863a6d759a4e1ef2adc5493e1cfd8c409570fce62bd01596065594ec
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentPayloadsSurviveTheGate283131192\038\.state_signed
          • Size 25B
          • SHA256 7f7103bc264de8ff507e2f7b3c318444d377edea9df1574e47e7aa4ef9ff1388
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentPayloadsSurviveTheGate283131192\069\.state_signed
          • Size 25B
          • SHA256 116be5859ee034ce32d748649c2cd4b951b34d70dc72e2191c9e8376d358ec9e
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentPayloadsSurviveTheGate283131192\105\.state_signed
          • Size 25B
          • SHA256 3aeb5d7b66e18f671aa77b9f53954831f2f941530de51455019adce5c49fa0ca
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLFragmentPayloadsSurviveTheGate283131192\138\.state_signed
          • Size 25B
          • SHA256 a1c04376218f5161efb0232342e327af233ee3dbd38db0112eada2bb2c695a6b
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSQLiOOB1101093082\001\.state_signed
          • Size 25B
          • SHA256 649fcde85f5a51b4dbe8dc81e8885676602b24bb5bbe365f1270e50ed7a34d45
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestSaveSkipsUnchangedContent3629017843\001\state.json
          • Size 16KB
          • SHA256 54db7a34df5ae470bc8e8f2bfcac5b24f905499cda9a8922a77b1702dd23b6ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestSaveSpamConcurrent1997073881\001\state.json
          • Size 16KB
          • SHA256 47c3816eda34a6f446e48964f4e982313461d59fbc7970fb144f4a728679bbf1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestSaveSpamConcurrent1997073881\001\state.json
          • Size 16KB
          • SHA256 a7b28c88cc91cc6a97bd6ae42a79fe562a2ecc6f8da52d5451aad741011a42aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestSaveSpamConcurrent1997073881\001\state.json
          • Size 16KB
          • SHA256 7e2537d00deab52e9e0e22bd51b3989815cbffac35335c07e27350929a2129a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestSaveSpamConcurrent1997073881\001\state.json.hw
          • Size 96B
          • SHA256 afe09c837891bb8ff132e245940f961ba96118f81ac33e56397d083d246a1fb0
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSensitivePathDocumentIsNotBanned2843766507\005\.state_signed
          • Size 25B
          • SHA256 2fc382b8e93a33a12aed03f74b5945c15f3d32887f37aa7f704669cac6ffeae9
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSensitivePathsInDocumentsAreNotRequests2886172290\005\.state_signed
          • Size 25B
          • SHA256 a5485844ed6784ed5c9a9e4629f66ffd99d7ae26465984b28b16752f00d2cf3c
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSensitivePathsInDocumentsAreNotRequests2886172290\019\.state_signed
          • Size 25B
          • SHA256 c58a2c3bf00e77c2b0769dcee1b0b25ffc0aa88ac6a562817fab7e32441e0337
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSensitivePathsInDocumentsAreNotRequests2886172290\040\.state_signed
          • Size 25B
          • SHA256 341e89df7e891fde1899ad5ea255a215a660e5b27bf40608744842ab131f4ff3
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSensitiveTargetsInDocumentsAreNotRequests4064227264\046\.state_signed
          • Size 25B
          • SHA256 3ba82139133998380fe21fbede27bfc18d33d91c9cac937c36bc2c7dff3c6416
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestShellSuppliedCeiling3075428340\001\.state_signed
          • Size 25B
          • SHA256 79f66bf9fe26a5b778a006bddfe8f00ac5dcc122d508a9dc13a706253b8799e5
          • MD5 SHA1 SHA512

          shield_lock.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestShieldDisableGuard403940091\001\shield_lock.json.hw
          • Size 96B
          • SHA256 a011006886c9b3487684fd7267f54c35cd474cc48ffe1b6592795e559a440d49
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestShieldDisableGuard403940091\001\state.json.hw
          • Size 96B
          • SHA256 2be78d25ca021902dc91dec28469bf6f0fd6098cc6cbc2ecce0182c73bf80842
          • MD5 SHA1 SHA512 TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSigTuningDisableStructural1247265490\001\.state_signed
          • Size 25B
          • SHA256 762c68c3196fc915ce20369d97821eaf0f75fc32a4b85cb4307b3fd6f04214be
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSinclDocsAreNotBlockedOnRepeat3587152527\014\.state_signed
          • Size 25B
          • SHA256 99ad287fc9db9b0deab54c5424ee3af95a6e6a740c8f82088051441d2c8b1325
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSinclDocumentsAreNotIncludes2698239585\004\.state_signed
          • Size 25B
          • SHA256 067ea2447848716bbc3ed9c336aa5241474543a1163cffa7efdce74c991bdce6
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSinclSuppliedDirectivesStillFire695464197\028\.state_signed
          • Size 25B
          • SHA256 1d79038939c09da13339dcb49261db53a1d61e374006ea06d3f15104ac3fd45b
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSinclSuppliedDirectivesStillFire695464197\069\.state_signed
          • Size 25B
          • SHA256 03a314b24ad597e3010a758318ab57f09512f95c5773f73da1bbe3c140d40397
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSpringDocumentIsNotBlocked4272940196\002\.state_signed
          • Size 25B
          • SHA256 c24acfa8bc90edc7f37b9e8670327ff170c1450832412b791e97509f3dab1568
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSpringDocumentsAreNotSpEL960246754\002\.state_signed
          • Size 25B
          • SHA256 ed18836fc4137df4446dbd0898428466c9dc82236baaf7b044da96df19ce68a0
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestStrutsDocumentIsNotBlocked2459765699\010\.state_signed
          • Size 25B
          • SHA256 3d186e265cf9d0b9525fed09ee148dc946f94a2cc9b8112c8d15da862d526961
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestSuppliedRedteamRestored2442506663\003\.state_signed
          • Size 25B
          • SHA256 91090e38f9d8b82e30ac4ad0ec1ad562156f6e8fba9879f4af0d90692885fe96
          • MD5 SHA1 SHA512

          state.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestTautologyMustArriveSomewhere4164429746\004\state.json
          • Size 16KB
          • SHA256 85a77f1fe4e6dc11880e8cbfca7632a1219c71472cb38e691d6dbcb75ae60dee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestTextLookupDocumentIsNotBlocked60124132\010\.state_signed
          • Size 25B
          • SHA256 ed5c686a1c8a7a704846fda62cbadb2283f7b8861db33de28460ee3a046e80c3
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestTextLookupDocumentsAreNotText4Shell3821481871\002\.state_signed
          • Size 25B
          • SHA256 817c9981b9511ed9c4e89148a62cf0ef292ca2151dcee585d490cbe5e3ba1200
          • MD5 SHA1 SHA512

          .state_signed

          • Path C:\Users\Admin\AppData\Local\Temp\TestTextLookupDocumentsAreNotText4Shell3821481871\038\.state_signed
          • Size 25B
          • SHA256 b5b0a490ca39158b794d415c887163133ee6d9688ce42ef4ff5b1b781aaa63df
          • MD5 SHA1 SHA512

          pending_changes.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockMaturedWhileDownNotAppliedDuringNew2872796257\001\pending_changes.json.hw
          • Size 96B
          • SHA256 eb345ef33e3db7788c863b478b7b9d817c0d36a4ca62b2c154d93bce26eddfc2
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockMaturedWhileDownNotAppliedDuringNew2872796257\001\state.json.hw
          • Size 96B
          • SHA256 eb4f0f233b1188c491a3128dc0e23af63920fdb1e21dcaf6755d9f32f11a4444
          • MD5 SHA1 SHA512 TLSH

          pending_changes.json

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockPendsDetectorDisable1959747963\001\pending_changes.json
          • Size 4KB
          • SHA256 6cd778504240186ebc13a5916a725a5e81b4684fa466c8ab18abab38187a934c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pending_changes.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockSurvivesRestart1870420627\001\pending_changes.json.hw
          • Size 96B
          • SHA256 3cf5b020526bd182503208e83b4981ec830c33b548d2b9e04406d5b0f0618975
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockSurvivesRestart1870420627\001\state.json.hw
          • Size 96B
          • SHA256 e5625ecea2600495416d2872403f6a61b003c5794c5a0ca35047a0d5375b6ec3
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestTimelockTamperedQueueDropped2525577143\001\state.json.hw
          • Size 96B
          • SHA256 4b840f09e20580668ee5aad75f6e159d9c5ef4ee5d3fe82d45d48b373b729985
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestUnsignedLegacyStateStillMigrates2033649364\001\state.json.hw
          • Size 96B
          • SHA256 add4d9b3078f53423ee293b38e330b2465f67b82b841c8a46d169d56bbb82e5b
          • MD5 SHA1 SHA512 TLSH

          state.json.tmp.1736

          • Path C:\Users\Admin\AppData\Local\Temp\TestUnsignedLegacyStateStillMigrates2033649364\001\state.json.tmp.1736
          • Size 16KB
          • SHA256 39b34626c595e5207633fc2eb0d13d02e628bc479e763182c7a556fa9a46b7c8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          blocklist.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestUnsignedStatePlantIsTamperNotAdopted593823098\001\blocklist.json.hw
          • Size 96B
          • SHA256 b60906fe97038dce8a99188ce8886fa7c45e1989ea2cb0ed9e2edc0b5e8f9ad2
          • MD5 SHA1 SHA512 TLSH

          rollup.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestUnsignedStatePlantIsTamperNotAdopted593823098\001\rollup.json.hw
          • Size 96B
          • SHA256 b02477b7ee67575a874e4fdf9d399c2ae352d1ca921ceda4a900fc67c204211b
          • MD5 SHA1 SHA512 TLSH

          filters.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestVolatileModeKeepsTheOperatorBlacklistWritable1073811970\001\filters.json.hw
          • Size 96B
          • SHA256 64d23939713f2fdbf5d891face4dd2a16a6fe571046ef3e26838fcf1e9c92d7e
          • MD5 SHA1 SHA512 TLSH

          state.json.hw

          • Path C:\Users\Admin\AppData\Local\Temp\TestVolatileModeKeepsTheOperatorBlacklistWritable1073811970\001\state.json.hw
          • Size 96B
          • SHA256 e4124595172304326176d564a5781d539705e2a51ad004899e628767af8d5619
          • MD5 SHA1 SHA512 TLSH