09add7f018b6af71a10aa733098801678cae55780b4971be9730b5b3ce94940e

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ToolsUnlock_v14.1.exe
Size 3.2MB
Sample260831-xe2aws1tev
SHA256 09add7f018b6af71a10aa733098801678cae55780b4971be9730b5b3ce94940e
MD5 3393ecae21a0a0c07164711ea1414174
SHA1 1ae0ea884274a8c5bf5e2ba771b09d712eddd831
SHA512 9f09fe458b89adc131b7675281411c4a5795ad648fd0293395aead14701d3ff60549bbf932316e877c729c76a84681e44e2e2ef123112a74f5634522f2c29759
SSDEEP 49152:xS484gOclmNoMb3cUjIGVNoPNuElmeg7BWJc8fmMw1fs15NNXKS14Oq1Za7+3SxN:x44gR5sqo1fK5CJIpN
TLSH
T130F5BF939EE20158E1B38D3866FE5102D2377D099B38CAAF738C15543F63B89A4B6F15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4128	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326757076833832"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4249E3C5-63FE-4166-ACDF-D7DC6667D28A}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2044	2368	msedge.exe	111
PID 2044 wrote to memory of 2132	2044	msedge.exe	112
PID 2044 wrote to memory of 4128	2044	msedge.exe	113
PID 2044 wrote to memory of 2564	2044	msedge.exe	114
PID 2044 wrote to memory of 2564	2044	msedge.exe	114
PID 2044 wrote to memory of 2564	2044	msedge.exe	114
PID 2044 wrote to memory of 5064	2044	msedge.exe	115
PID 2044 wrote to memory of 5064	2044	msedge.exe	115
PID 2044 wrote to memory of 4204	2044	msedge.exe	116
PID 2044 wrote to memory of 4660	2044	msedge.exe	117
PID 2044 wrote to memory of 4204	2044	msedge.exe	116
PID 2044 wrote to memory of 4204	2044	msedge.exe	116
PID 2044 wrote to memory of 4660	2044	msedge.exe	117
PID 2044 wrote to memory of 4660	2044	msedge.exe	117
PID 2044 wrote to memory of 3192	2044	msedge.exe	118
PID 2044 wrote to memory of 2404	2044	msedge.exe	119
PID 2044 wrote to memory of 3192	2044	msedge.exe	118
PID 2044 wrote to memory of 3192	2044	msedge.exe	118
PID 2044 wrote to memory of 2404	2044	msedge.exe	119
PID 2044 wrote to memory of 2404	2044	msedge.exe	119
PID 2044 wrote to memory of 3156	2044	msedge.exe	123
PID 2044 wrote to memory of 3156	2044	msedge.exe	123
PID 2044 wrote to memory of 3496	2044	msedge.exe	125
PID 2044 wrote to memory of 3496	2044	msedge.exe	125
PID 2044 wrote to memory of 4380	2044	msedge.exe	126
PID 2044 wrote to memory of 1668	2044	msedge.exe	127
PID 2044 wrote to memory of 4380	2044	msedge.exe	126
PID 2044 wrote to memory of 1668	2044	msedge.exe	127
PID 2044 wrote to memory of 1184	2044	msedge.exe	129
PID 2044 wrote to memory of 4604	2044	msedge.exe	130
PID 2044 wrote to memory of 4604	2044	msedge.exe	130
PID 2044 wrote to memory of 4100	2044	msedge.exe	131
PID 2044 wrote to memory of 4100	2044	msedge.exe	131
PID 2044 wrote to memory of 3880	2044	msedge.exe	132
PID 2044 wrote to memory of 3880	2044	msedge.exe	132
PID 2044 wrote to memory of 1684	2044	msedge.exe	133
PID 2044 wrote to memory of 1684	2044	msedge.exe	133
PID 2044 wrote to memory of 4004	2044	msedge.exe	134
PID 2044 wrote to memory of 4004	2044	msedge.exe	134
PID 2044 wrote to memory of 5660	2044	msedge.exe	137
PID 2044 wrote to memory of 5652	2044	msedge.exe	138
PID 2044 wrote to memory of 5644	2044	msedge.exe	139
PID 2044 wrote to memory of 5504	2044	msedge.exe	140
PID 2044 wrote to memory of 5504	2044	msedge.exe	140
PID 2044 wrote to memory of 5788	2044	msedge.exe	141
PID 2044 wrote to memory of 5788	2044	msedge.exe	141

C:\Users\Admin\AppData\Local\Temp\ToolsUnlock_v14.1.exe
"C:\Users\Admin\AppData\Local\Temp\ToolsUnlock_v14.1.exe"
1⤵
PID:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffdf5d1c188,0x7ffdf5d1c194,0x7ffdf5d1c1a0
    3⤵
    PID:2132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,7041128449699907135,3487093466222991188,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,15607482444883118167,3534609187335073230,262144 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
    3⤵
    PID:2564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2424,i,14931422554712279199,16934439237625564387,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:8
    3⤵
    PID:5064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,5641824621146582395,14455493905116808942,2097152 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,432447908123853312,5015191803600405587,2097152 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:4660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,2485345560679615806,14771293883964899924,2097152 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
    3⤵
    PID:3192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,18329465745568578560,10104321086593608234,2097152 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
    3⤵
    PID:2404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,13549060575373322786,4240376246423140610,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
    3⤵
    PID:3156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16826661565422119331,1458232509052160113,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
    3⤵
    PID:3496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,11083466925942698791,7579311063892229668,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,17252726118961625443,7892751041921513007,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
    3⤵
    PID:1668
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,15911727084610993542,661753322289277369,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
    3⤵
    PID:948
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,15911727084610993542,661753322289277369,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
    3⤵
    PID:1184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,17506136213528331177,16562053666166455076,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
    3⤵
    PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,17199996730368245210,5289113765690741805,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,15482531682219671247,13305455108839834224,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
    3⤵
    PID:3880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,12994855402918202334,7025413037277774499,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
    3⤵
    PID:1684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,17444502222074652550,4978606005888188512,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
    3⤵
    PID:4004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=556,i,12025436423540761795,17157081726752974072,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
    3⤵
    PID:5660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,11721036458034905111,4635625440612416587,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
    3⤵
    PID:5652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=140,i,17861843863860308465,6141074881083121821,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
    3⤵
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4052,i,6826056160246971141,16431491482796291924,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:8
    3⤵
    PID:5504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,3274605425763150035,4197690093295359552,524288 --field-trial-handle=1892,i,12113024545673664616,9220948412533048554,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
    3⤵
    PID:5788

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 54567cce2b36c73025c9adf15258ae022dd3ad743793112769197d4e12e8bec6
MD5 fcbc5240a2923bcef63356fe7217a5d2
SHA1 faf77d59f0b66413e2c2646523f1c9685c029f1e
SHA512 0f23b0f8e2b1fdf442a3621931554518cebc5a235d4c7250c79f431811274a999b48ec7d7932ceabbd6dc63dc0dce58bae0b7c1e3cba708332d8247782919a67
SSDEEP 48:NRylMkHmNsO45ygL1rWDcW3SKeM1eg0Et8zyrhxupiNViGzm4XtUG5BC6vFQH:NRy59TbWi/BgVJhrIGC4XF5Bm
TLSH
T165A1833488C66353DF1C9230AADA1E7C2973EBC5FD7BCFB702944824E04BAD64398524
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a733d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a733d.TMP
Size 2KB
SHA256 45fd17e790206bbf4fb2525c3119f4250aa38f989eaf35cb4c94ccc27a5ee467
MD5 2bd809824105b519c94dc3851ad226ab
SHA1 7cb178635ad21db9aa13df6ff77a51914d4961ae
SHA512 854fd840c9c55ef64de314bdb7f98d45f0cd4e74663cf6b57915827f29667b02ebf3477afeac4808c2c063418fb25f81a19e5ce0a16ffdbf4774a5f604667922
TLSH
T13E5170B854826563E7251031A1DA2F7E3876BFDAFE4BCE7740908D36450FBE183A9478
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 85f208437f7bfc85500de33558a4d5fbb8185d13136950de5360700524b2cb6f
MD5 9f9a17d4931cd2c8c5f70870f4de6ac5
SHA1 090b92e8c8dfe449c3af3781c592e398f9fddc14
SHA512 7a36997824d204e0caf308246a9a589d1cb7a75c9a1bdfc06d410da7e2e580ed65bef1697231f4f9ba76572a4176ada135eb20e9ce283ebc8b0a4a1534d59977
SSDEEP 192:sxZoR/yM/jK1Ml8MZL/fdsxzVHR3is+cbycCdpmXHW6+WNBml/Y9Ig7bZIg4J:sxZoNhL/fdsxzdRibr4HbW/+c
TLSH
T15B62F7066A24597B8CDBD21DF915BB53D6F85433D6900E48AAFCCA0C04E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 61dcd39f1ab87d46865dd3391ecd83d078e67c5d03557eb23ede3fb4216f5d3b
MD5 1c5d15352c84b33d44666b05e47de2e8
SHA1 b0780922b68eb7dc1a0d8516586baa6634b01f85
SHA512 ee7e3e7fe096b14a4e4e67e505d862d3d0a49c9441be46952fac03c6e2da9caf14ddb6f12cbe26502aba5a3e4ae136586cabec97704e1dc3fc18b365a63a1898
SSDEEP 192:sxZoR/yM/jK1Ml8MCL/fdsrzVHR3is+cbycbdpmXHW6+WNBml/Y9Ig7bZIg5wJ:sxZoN6L/fdsrzdRibI4HbW/+G
TLSH
T1396209066A34597B8CDBD21DF915BB53D6F85433D6900E48A9FCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 1ade4ae20d86fbd14f33797ce521ba7f69e07f46dc9ac5026c8865eb34b00f11
MD5 fa81f11267c4b90a7024eb3bda47aa2a
SHA1 d89bdd2f07211299fb0adf6a858d2c438036c61b
SHA512 234100520375d884f4babfa7b6286d6053a378fa4b05b3d79ec4f8e3fafa3cbff21d0abb8f67205164f79f5ec65344649a199347ed3e1f2a535c7cade7f84fbc
SSDEEP 768:mbcv2O37pLuLzowWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVtnvFLlwmWNFroS:mbcv2OxEzowWvu+Z+u1jaYnvFLeRN+BQ
TLSH
T1F6F2FA3B6C0CCB7E4F844E9CED2A7E8A6DE8028B5698895447FA844C03C66EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\143a862f-cae1-4084-8272-1e88a7fe6024\index-dir\the-real-index
Size 3KB
SHA256 2b32bbfd49df8f2f0513b9a6e97590b779e82da587a6ba81a4e977183967080b
MD5 3b1b417dd074c0542ae036db964e1ec5
SHA1 0247a16e8f74f33687b3d38c4f076f7fdd57a85b
SHA512 9db12a2a23909e25c180be8e5c273b75c1decab818b653ee15128a2aeea2a41442042cd50ccafaaec09896823a396d705426ece2178a6ac364082fa57cb08731
TLSH
T1F551B74F4D461FB5DCA871B214B61D83333434EE13486E1756ECEA35A8E33646C1E559
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6fbaff7b-fe3e-43c2-8423-3bc8858c7948\index-dir\the-real-index
Size 72B
SHA256 458f465138db8920925e1a541f76d0983bff021328cb7b41498ccfbc57bfad07
MD5 6881f6f84990e798b446d7021287384e
SHA1 5cfb0418d1b88dbcb1c7545ec9d5840795eafb47
SHA512 bf432472dbaaa5a3398feb582eb425c1ecbf509e9d261d877f7df77fd52fbbd9ca9e892e0a72d970d7615fa458d3abb6425e91dcf4ef70b06b4b7efa1b894f98
TLSH
T1C9A0022C02880602C54312B025A685C12B71CA100223137755D85075CC90D49AD5140C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ed91396c789c8d18b966c2247da31e5beff13d4cd7fbdd58d58202e6a7affa12
MD5 034098bc93c67ed7b809330cc932d64d
SHA1 69090b7800f556af74f69e6b3dd9b1e379aeac25
SHA512 d256d7383d49e879b4530101a3f33ca855aa9972e8b5b66351a63d7b5bdbebf6130a397bbb369ed2b450c6d08e77da499249a650ca3cbfa407addda83a83461d
TLSH
T182E068B72DEB1420E9AFA3D2247104768104B9448605EC1E782AA18320F22842442D22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e59873a1d7a0b30452168fc82358ce43b4cb52f31d33ffa16a3becc40e2f83b2
MD5 ddc66927ded15ca2abf5f2002170e038
SHA1 e78f0ca0d6d1d0e3bb156143765ef73c6c53c2aa
SHA512 c584f302b14a512cd9d240da23049a054332f8edc8f26e5e9c1b09390c41f064b90abe60489a6a3790a7d2d68dec6e6bfda37f3ae276e12cbb3a0de6d5b317bb
TLSH
T126A002748A8ED215C9C517F665B7914077914EFD51571783489D90E88EBA28063C5311
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a4bb0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a4bb0.TMP
Size 48B
SHA256 91bfbb9586a348693e9b50eb0d1513202058bc828c37ee456bc1d490b1ac2e43
MD5 c5f36d7aec7046c7751a50249ef43276
SHA1 be79c83cfe33ff7e49bf39153dfbcaff27a7a9fc
SHA512 ae1b4c710ba7a083fa04a3a77ae9f4069a5c92c182fab750f556ee6f7385631e74296806ec87f87c812517df752ccb67aa4efb811a0094d990566c95eb3b8a66
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 cbf0d7dbbaa53a6d2c0433f1db50759c9555f4403c6e2c703f72da19e9102cb3
MD5 49ccd63e3b2ee596e0fe613ac9124589
SHA1 7468cca327cdfba999adc36e97f4a05869afd8b0
SHA512 9f703ca66e55024febff14e2b375e3c4e70d479f8b0639c1bbc6910335a2fb3a5aae28f44ff62e6417cb13b55c594dc4ce15e829258faadca49cc115a79b00d7
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKAIKZSGON2KWwCnr+JFTBBdI9UQqtdKCct:mT3LVxnr+JFTBBi9UBtXcqzs7z7ck
TLSH
T16AD13402717F0242387E3908B3668536AE4272673854A8BF7BB910A55F27E221DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5ad5b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5ad5b0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 db56dc3262678bd11ea672372fcee16a00e9ce8db370a9d4be6c68cfda47562e
MD5 0f9d019ca519346988c59062fe3c6c94
SHA1 f597a082f5842493276ee0ad7842365d4a0e4169
SHA512 3d80bddbdd342d499907512c16470c05dd7e7f283806bbf78c36de00a5104adb56aabfa8a8e0cc686d6379dcb074b80cdd4734b78f9476b5025e07b5b8b13f05
SSDEEP 384:ntZcIgsN2MTbIjAziyakMe+CQdi++FS0X1puL+ro/:1gBMnn4ExFSsyL+rs
TLSH
T19D826C715DB85D7B69F2A148F54B36075EF89023D6C92B84E1EDAF1C01EA6A8030BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a3dfd0bba8f2c2a77943db4f91aed8ff722205b18ba59cff17439766428cbb79
MD5 05768d40db005baa3ae3b4b45728d2d3
SHA1 526417f1d09cbfa9251caad9a2157be29b6f8053
SHA512 4bc2a39a41fba2f6644f554bbbc6909d6e4aa785293ab645e4e730f4dad484f209e2fcae86372355453487ff80d4519cdb6494ceec6ee238786b62aed18a5784
SSDEEP 192:JONB6v+YLNQmiUy7DZh+CG6+FdetRLusnLTU6:JONB6vz/WZh+CQdMvU6
TLSH
T1AD02EB356D782CAB9BF2AE05F58736135FE4103BEA962F80DAD81F1C01D775C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 571007ac2196662025b0a90871cc003c156f143ad86e3ccd022fe5a81d09ba6e
MD5 99befabd1223c24575ad9603a79e49e6
SHA1 7e9586c1fd04d3e006c2142a1f32a97f92f4c404
SHA512 03e1d475edd5761fe7e58f2d7a34f0379ca5452b9c22423ec2f95a3ba8e2515723414502eb430e55d21fc4347b8f44b9c93a455f1d8faa2be4152d0e4dd20bbc
SSDEEP 192:OJONf6v+YLpQmiUy/Dch+CG6+FdetRLXx++1CHcqUU6:kONf6vz7cch+CQdi++CSU6
TLSH
T1EA121A36A8781C6B5EE2A944F48735135EE49127DACA3FC4E5DC1F1C02DF6AC130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b162ae05e14f5276668863950b64092c0b800f4dd1bc072c0577ae1df8851cd9
MD5 3e560310f4255240138c8733cf40ad57
SHA1 a6f7de506c04b2bd131f5daa8b619726fd756896
SHA512 9c8880c87c2f5fa417e89ba18adb0f16b5a121f65988c5e9806ffc4c2d0745c53ab3e6c5706e6474f8ee19b8d7a036c6463b9c545cf3fbe2a600b3201eb866c2
SSDEEP 384:nwZcIgsN2dTbIjAziyakMe+CQdi++FS0X1puL+ro/:OgEMnn4ExFSsyL+rs
TLSH
T12D926C715D785D6B69F2E148F54B36075EF89023D6C92F84E1ECAF1C01EA6A8030BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43fe485f-be0a-42f7-9af5-00fd78334ce8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43fe485f-be0a-42f7-9af5-00fd78334ce8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a009f7d7bdd003f15c856782519b5b5f1b0fdf88fc74d7b676405bc927fcac6
MD5 1ce8bacffdf398c0bae74b27e2f1c402
SHA1 c25eb7f67a923b0814baf08ee4125f926dddc886
SHA512 8622342afe6fc25224e6f485874bb9a6aadc058c43e44e0abc015b8a936e51ae2dedc8f54cebfefa6617263e1d5da8c92942ff3897bc2c9455cab2508618f119
TLSH
T1C4410A5CB7E91158B3B76F1A9FFAA86D48BEBC672E06D49D10110E4E0A33A40C971737
MD5 SHA1 SHA512 TLSH

Submit Download

e3b3d534-b97d-4702-862d-1179e332b6a2.tmp

Path C:\Users\Admin\AppData\Local\Temp\e3b3d534-b97d-4702-862d-1179e332b6a2.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

ead7ce35-2e76-4356-93d9-beca3ab3f408.tmp

Path C:\Users\Admin\AppData\Local\Temp\ead7ce35-2e76-4356-93d9-beca3ab3f408.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09647bc1-0fd2-4204-bd0d-f09e193dabe2.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2044_1704600336\09647bc1-0fd2-4204-bd0d-f09e193dabe2.tmp
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2044_2104192311\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockPush.bat

Path C:\Users\Admin\Desktop\UnlockPush.bat
Size 654KB
SHA256 01d7d1bbefa5cc6d020d43263c11da90be01cf2cefdee7a769a369284f618cb8
MD5 edbf6b05f691038cc553dd396b6ac119
SHA1 3d60a067c63e7602f4d82a516adddb2f6d5caf61
SHA512 acdf4fe6f6cfa6e821d46533d12976905eb44abdd06574ba9e7346cbdee102b3ab0a18d8366a45d9fbbac297bb47f1764685b27285f9cc44f1ce40081aa80d53
SSDEEP 12288:qkEccCDeIoG9A6KoZhuQe0nc5Wg438B6HI/xytnrWy7/nrfMflY3/OWr0hxqk:g6eIoGZZpSCFA4rWCjUfi3HrC
TLSH
T1EAE423317A3444B9BB69EDEC604FE5C515A9372A1C0793164CAE2DCE7C8778C084A3EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupTest.ttc

Path C:\Users\Admin\Downloads\BackupTest.ttc
Size 398KB
SHA256 bf9cf33be6218df4838f9c4527200b2a41cf5a756484e91f32fa5e3b4b94b321
MD5 ac328e23bff39702f7bd50381aaa8898
SHA1 735b83ab41b1f7b56dbd26a6f4936659f50f3019
SHA512 82154347dc92154f10697d70dc051d7b2a5f80b5639520f8acf29912c1ffc195db2dceaf88aa9f967605195845acfd05d324971c4224a18e5243baf32790beff
SSDEEP 12288:QhcVmers/uxPzwnEq/To40KbJfikO8IKOMMM3WN1iSw:QIlESPXUz0K8kO8PS+WjTw
TLSH
T1F394232702DDB98B2D146EEACF1F40C8279AFF87F393484DDC692E5F09699C912B5841
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToEdit.iso

Path C:\Users\Admin\Downloads\ConvertToEdit.iso
Size 669KB
SHA256 2dcd558c4d584a1de180e733e27cfce487cad6980a149b307341a749b419a741
MD5 6f68741cf300d3076e15b17becd23628
SHA1 ceb0df2f17e9da47dfed62bfbe233edbf207dbc3
SHA512 84cdd8ef8d91987a9481b31db8d317f2a51e7f6ccf071a9d6aa53703532aff6b834a6472b78aa44720a1b13d7860cd4ad6eb5b55fa938c105f388d131ba7811c
SSDEEP 12288:AMXn7FKUdOVdW74syJcVef9A0CBue6AjTdS9kBUwfGzBor8hzrh4Cqg:TccOVdDsJYf9/OdTBiBor8D4Cqg
TLSH
T19EE423DEE245E56D013B01E6A462E82B4E0A5FCA14731CB78CF936280FF7D561AB7271
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToPublish.AAC

Path C:\Users\Admin\Downloads\ConvertToPublish.AAC
Size 504KB
SHA256 b8d988f1a604b6215aa3adcf4e6d02479e12ea80fddeb32b9afaf4758d36101a
MD5 1f1a14fefcb64764d9b396dd803d9c7f
SHA1 99f52dc60e6c67c77d7efac209abd0ee10372310
SHA512 dc2b11fdc9c304f8e1e554963daf3f79490d9e5bbd837c73a9c1777fef029a5cb4b747212b4c701efae69a63b38668de2973e13d5367ff94bdb3c3cf09d2559f
SSDEEP 12288:Ng9+Mdu9Pn66vFkp6nSgVwcFDr+4O9I0bHNaCnzcZZnv5:Ng9+MofrSg/gFIjv5
TLSH
T1A0B4233411CF2AA74E9913FA8315E35EAEE2208ADC7A65469DD04F79CADD9532F4C30C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyPing.docm

Path C:\Users\Admin\Downloads\CopyPing.docm
Size 413KB
SHA256 64965171dff6289e03a79dc73b3b04849b0076c84307f6f268c6f2f7fe9c5025
MD5 784500b878464d59e71181d5049c5d2e
SHA1 ab0d70c316693acd87dd540e8651c2c77d0b98e0
SHA512 b88b62d83031e346997c8404e4e4d8afa46c1e01a6a7351b61431cde7b28ba37d4c4700cf38decb116677f7021b7d0a6fc205644488b303d765bc3e08290ec7b
SSDEEP 12288:PCMeVJFDRAmdU6k44s3am9Jc8/3byD1f0:6ZF6mW6k44s3FLl/LYf0
TLSH
T12394234A0899093EE722E41134B3E744CEA45EEA3630D603D5C6DA6E2F511FBC9EF85D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugImport.temp

Path C:\Users\Admin\Downloads\DebugImport.temp
Size 684KB
SHA256 e4d35af4123e08252ef80bd9e69717064b8e2e121ca8e3726a6aa225fd7c2827
MD5 9921a461dfbaa9b832552ebf515b3874
SHA1 7600c20dd1e5bf6a775d5390955f0f231a60a8b5
SHA512 90ce119a12cc14c53310ff3211ec899ff2238f0a3769ed21f0227d421fdc0b0b5b7362955eb374631c0ccd2cac6d399ab1912d1b4133191e8bc24b1fc481077b
SSDEEP 12288:zYdOzGysaYg5ghTwLq65qEzyhzZ3ILyWedIH+0U3LLKJtMPPzHeH:zPGysaghUB5ql3qlU3Lg+Pz0
TLSH
T16DE42312A8B9C653E39C6A803E94501347396B173A2093465BBA3FDBC7F06DDC6DF468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugRemove.xhtml

Path C:\Users\Admin\Downloads\DebugRemove.xhtml
Size 978KB
SHA256 8d1b20d35e7d76494c00d1f29275c7663db61b21881446a73c1f529d6149e658
MD5 d013a0d8d6e651bbba21b6ccfcf4968a
SHA1 8210bd1cea3f9575193f38d00f8c3ef901ccfa02
SHA512 e5647257f82499683c514236eea3e22dfc2e648167762db7d5c930707c37a8063d6aa50e9e26b1d363c98e70f6e71f503c603fa87992ca7a5a7b345e3a7ff932
SSDEEP 24576:6bKfDmDKzhV8LIpcVdUmq9zd32IalGkotKoRO+hgWs5csnKyBV5MDjSmm:4KK+zhV8LIGomw32I0G145csKaTmjST
TLSH
T15D25335CD298AEAF23A1FB81C70C425A681FC1912FB71E6405F574C5DEAB20A3B1DB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyCheckpoint.jtx

Path C:\Users\Admin\Downloads\DenyCheckpoint.jtx
Size 654KB
SHA256 20cd7b3acb0e82f6b0c22818632531cff5c4e53569158ca92b74649ce0ea672d
MD5 594d369a7a03a0b085c5a8901cda65f3
SHA1 cbdf23e328357d04f3005d41b38ba53bbfdbcbc6
SHA512 74107f14df0e34e646551a91c36182e5cbb79ff14b11466cb06e33b07e759f614de0c4d5809a5404a54d5df6c618b4bc47182ca8e10ff3bc855326dc3ac45fab
SSDEEP 12288:TYIntZAEvUVmtMUTelUj4UbvL0+Dt50iOW4SZNvCrSkD02jSQHgcm9:TzZFsATLljHZ5d/4SX4SkZjSggcm9
TLSH
T1E2E423C7C289A75B38CB0C197BCFA1D381A35686DCDD47BA4D85070A0176BAD2E8752F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectDebug.xltx

Path C:\Users\Admin\Downloads\DisconnectDebug.xltx
Size 564KB
SHA256 d8012a8a964a0f4e5bbf6f79395680f3ab7a7028b08e23f0443a3ecb8c4647f4
MD5 67edd936ba5ac7cfbfe05f21a473f0b7
SHA1 602c408f698d2e9b373ccf88dab07dd82a172439
SHA512 6afa0b16d2aba5e9a4df6389bb79b4094dedb410462ffc0b4b9df83627ab078f3594ab214dd7dafbbab01cbcdf683f0cd794d643108989aaf35cfe5f1cc8d6a7
SSDEEP 12288:V9Qe28Iq7vGk2mn0omfeyTHZ84G1WuklH3M:TQe2dqx70hJZ84k2H3M
TLSH
T1A1C423B9AFD79E703187207952691B0C2B44083059E4E6F8FFB9CB71CFAFD260924659
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectRevoke.emz

Path C:\Users\Admin\Downloads\DisconnectRevoke.emz
Size 594KB
SHA256 39fdea37b5779ef0b8ef83f1c842aa22c3ef39aad7efab65bcf242119bc4e7db
MD5 2402ecaeef52d924c57d54d9741928c6
SHA1 940286e48e2cc9e35300b5d009178202f3c00e35
SHA512 f34cde56ff16daeadc4dbf34a766940c52601d2fcbee43f6691d60bf993ddd238b4ccb5dce2c23affed3ecf01e12a62c41028605c75e094aaaf61b2275d9c47a
SSDEEP 12288:70vvgK9f1yvtYqKRjK/RhxPz6qDQTnlPQL9p2CdmT2ahowKI+kYpHvB:4H1ylLW+/RhQTnlSoCU2TlZ
TLSH
T14CD4336BD2DA206614FFBDA40FB719FC4B69CB0498749E1E5F339180AEE0248356E3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableImport.tmp

Path C:\Users\Admin\Downloads\EnableImport.tmp
Size 714KB
SHA256 d61a20af00c437b591cf8e8ec5fff742494b84d1d57ddb83aa7d394360a27520
MD5 d1ca85fc13ef3bd068f703ab5692fabf
SHA1 03a3dd2c5d4b529b2acf73919c6eeb85878daeaa
SHA512 609dad0d1ca6af3a2d4307a9704f9515f8fa5c42cef01890fc7397b8f3503d66d66aeed68e3b5b8d5b6dbb3ab8afe2aaccd80891696c066bd7ebc92a49834d75
SSDEEP 12288:qdv7zdu1IA1dlpWGA/r/4UcTwOz+sEENldgA/C63mQdGGYHGYcJ66JQ2GbRCLX:qdv7zduSMd0j4H0Oz+snJ2fGYmF661GC
TLSH
T1FAF423844F43CA2C678904D73BDDB40F23885F6BC943129DCB6A79DA6A6C240E8D7A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandDisconnect.ogg

Path C:\Users\Admin\Downloads\ExpandDisconnect.ogg
Size 458KB
SHA256 8697620e6ee9f1625f80933d479ddad7f806b1629ff71c11c6460cce9df5b4be
MD5 db56364e25d88de2679dbbffc1f51a84
SHA1 a0fc297cc7d27078be8a9f893d06560625e77049
SHA512 049a5c3eb8b7ca9f2be70abacf847582649b3f338d12330d6efaea05e1857f0343737cbef4f9d38ed16ef1f71aa5ff44f2be803407fc12e44fcbe2000e5b189d
SSDEEP 12288:U83U45UM8OuTUAmyyFGlQScklkjXorbPypRyGgYPc7hTl/O:U83U45ZrAjyFuxkj+yqiPOhTFO
TLSH
T1C1A4238012F5EF1041608E87AEFB9A37D21A794E491F251880B3D6D6EFF8A797CDD181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandGet.mht

Path C:\Users\Admin\Downloads\ExpandGet.mht
Size 308KB
SHA256 c9ce547fbcbff37043d95ba3a2864b6da9f88bd0c5d640f3ea1f1fcf720ea841
MD5 b05fa8eaaa312c75951b1df8d941a027
SHA1 546d23e30431879bce2ae556eb36ddd479dca6fe
SHA512 b953070c1efecaef53a73be407c8ec8daa7898472a1e031e39374903a39031c012439058dcb13ab2cbf5e6c06f25adbfcaded0a261a2d593178d3dde706a654b
SSDEEP 6144:WjfDRiw5GsMUl4FKO2/HkKN5U7cZ7ZeoHJVnEH+8p3NEjQe8J:siw5GUl0T2/EKUIZMoHfEH+8pC8e8J
TLSH
T13D64234F9077EA41679E1778493C8439E99A69314ABB3FF3A0F81D13868B80C66C1FD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatUse.odp

Path C:\Users\Admin\Downloads\FormatUse.odp
Size 699KB
SHA256 01c41862e8b89f1f3e5cde65d95300a836e1e6afc3cca0a07ca99620afd86247
MD5 77025c97edfe73920d93ffa8cc060c19
SHA1 f7bea475c08ffe6dd5abf6a40af84ec01e561905
SHA512 1f30bff64529a7f47061477102d2bdf130f66eaf6784e74e09656ac8c3e9a916da6c370f24645d908b94f23dd48d338a550481800549e43c0cffcad73d0826ef
SSDEEP 12288:y3UDGdpbnsp1Im07cNzDG3kBV+GaOvHuplHROFt7/MBsQjZjlKiJnyfV:Iyp1OclDG3k7+cvO3RSwsQjZB/tyN
TLSH
T144E4232BD6840CBE831A22A95937763178556404FC1FDB1578CABB08BB3DDF27E152B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeMount.asp

Path C:\Users\Admin\Downloads\InitializeMount.asp
Size 353KB
SHA256 fe41effbe69fa561fbcc184014207689508cd96c462f5ea4c7f163627169b994
MD5 dc46020667ba2577bec027706ecedfbe
SHA1 8b36713e0c2080fd127357adfa8a256cb78be08d
SHA512 0c98c30858f076794baad76ce369a02afa22166f9fa1e4395426f9312930ac85e8b29837c920f93e3429c4d45189b4647346508d5e23246c5896ca2f9ccd9bb2
SSDEEP 6144:41AdApJ4mIecPjaEt7rYUbE+hllHka4Ia5sbJ3M4rTn857sQXvHTJh1QCu:41AdUmm87aYQGE+DlHxlJ3jrT07lzTu
TLSH
T1DF74235A214F5A74F148EC68E9F672C043BE03679211679B312FC46EE2413BFAE2D16D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountSelect.mp4v

Path C:\Users\Admin\Downloads\MountSelect.mp4v
Size 549KB
SHA256 2ce87652103b7533d0fc468862ab6188f988c3d8885557fce5ff89c201f135f9
MD5 4393bb1eb4022e611a8eb91db37bb961
SHA1 ca49fc711883dee5ce321f9df2ff9bbc40ec8149
SHA512 c85dd1cf0b13fdbea40f8da8646e5453aa5272960695005c1f27c3e6382d82dead466dc7c3d542d743703d8ebcd18deaab511b6974c3d7f39ba303c186f3310e
SSDEEP 6144:deuf8VvLYY/3Vz1zYz8CcBg+5c8tzMoHbe77qwEUrJHy9KQe/zMb5HrqX2DZhWW6:deuc1/3VzOc6vH/xEmcIh+NnLfQPhWK/
TLSH
T109C42375FB6C84CD7DF9E4B0246AF46A2C4F5010E6839ECB15A45C61E4B8E2DDC1BCA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenCompare.mov

Path C:\Users\Admin\Downloads\OpenCompare.mov
Size 443KB
SHA256 5ed2b8405dbdd02acc6e891f5b333e645925539483d4874105c50bd15ecc5d4c
MD5 079915668dacd10a7966aa614f4c6d27
SHA1 1307796c296b67802efabbc3e1954eafe6b1ea46
SHA512 7000b034f82b7b4e18187834bb24305270ce9c3dc3b0802a425cf122eaa8a9b4d33f7600e9ea4bff3f3610b4b3556723fa4cef4204305f1e6c42dc18c1fd52a2
SSDEEP 6144:TwlNgyaP8B2mrfsytkGWMAvXTQ/nK2KwHJQG40EDYUV5V1yTXR78wCKxhll3dsCG:ctAcfrk8iv8pNEcyDe84h5dl4D1d
TLSH
T141A423D02CA5FE358312BE59C38215C7938AD42AAC43129FFB26A07DDD1E55F910C99E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenConfirm.xml

Path C:\Users\Admin\Downloads\OpenConfirm.xml
Size 488KB
SHA256 a3781a80dfc9427b9fcb8a17e4ac7a077fec0b53e5c3f6c2d42dffa27c73de2e
MD5 54dd68ae40a919d62a119e29059517d3
SHA1 3efe20fe39c1031d31e95f74fe44259cf32d88ef
SHA512 1e1595b3522afe219192824c2f21b9af837b2902a16b2726b476e47fd1e93096942d0a7620f7e693eb912180b6c7bbfbca7da82ca596b926fb65e601388bb55a
SSDEEP 12288:w47nq4U7iU/gFskyI4B96FZ2/SdoP6z5nG7Hbm9FoaLqJFTes:woD4L/gSTcwqdokpK7mQsg
TLSH
T1DBB423849948029E5BB3465EA0A4F569218DA28E3843B5F13336605D34CF57EFA6F0EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutGet.tif

Path C:\Users\Admin\Downloads\OutGet.tif
Size 368KB
SHA256 d7cc10b7fe94c3a2fc1c32f83eeb0956d73ee340537a481c664b6b1a183658e6
MD5 994f977cdd8d3f3bf8d4ccbae4e4cb2b
SHA1 e95d684acc99e0c819a5ca3ec95b2d3a0423140a
SHA512 96cc191e6bf31260f0ca438fb2358001eed4ef831bc353e6ade844272a1f7fa0785f70bf5e3e6e3baff4a7f7bceb3a407ede6db1c9fe32bd0436120678001b63
SSDEEP 6144:IHaURRhxV11k7NQnRCw5vvUVqS8U2HHczeTGZDXIytQwZLxOIwSaBmaqNnbTWP2B:IpRXjkxOvnJpHHVSlIyROIwpB7KnPWPg
TLSH
T10B8423A05994FC3C8A0AFB52C711B161CFFC1393ADA24B15E255262E4AB0EF9770CD57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingMount.reg

Path C:\Users\Admin\Downloads\PingMount.reg
Size 338KB
SHA256 3132cbf1b6dbcc478565d5dae9cb3e00ddd9fdcf7466c682fbf9e0cb5c9dda6c
MD5 1cf67289a4c919def5912b669e83dcac
SHA1 c199dec5e469fe2032f71a339ddcf1c570d131d0
SHA512 ef7bafd1c2454a3c266f829a2aa03675a46b9f8bb436b298160c438d9ca56bc92e112480305bfd0cf81d7a4cc05c9e0f4890ee060608890ae1ce71e8a5fcc37d
SSDEEP 6144:wRBjh9/ypfkJC2+EgLIHr3lTS5GSxrVk8ya0rB0tzwaXdbdOpM7puN:uBCfkJ2LIHhJSx+rC9BbgO7pI
TLSH
T1937423AEBED813690F4139F2963CD1DA051CD8A4D4E5BDE846C8F5D6ACEBA3F9407240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingSend.7z

Path C:\Users\Admin\Downloads\PingSend.7z
Size 639KB
SHA256 be9e05c2175c5664d2e3745e13897811f5f37ca95fb37e9db2bc5177f32618b5
MD5 d4549c0dae5ca2dc0fc83584c2c9c0f0
SHA1 66edfe06572af6dbdde4f66783abececde86677a
SHA512 cf568963b194b27bdca0f72bb3c961145393ba9931a3fd49fff56164a01a7fb9b10c6acf26c2e3b40a00a1b812c5aafe108b2b1639086e30f42b9677b617cf9a
SSDEEP 12288:SVrfD5b1Xn5LWyPIj5K0eWCALLFGPgWHm8N+njZFiRUsFBnK:SrfbJLQzpCShGPZNOZFin0
TLSH
T1C9D433A92916D788BF40906DFAE12F316DD62DDC21A53470189AEA70C8FD64B760AF70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingSwitch.vsx

Path C:\Users\Admin\Downloads\PingSwitch.vsx
Size 248KB
SHA256 b684059435e2ebead1a2fbcb61105234b7cd13c6f1541499b2b610f54a3af174
MD5 a31818bd28d57793d8f669d0d6f007b4
SHA1 5e5170dba0825d6ebc36d63549bf73f1e4d6eef2
SHA512 03539df4285e036d555d6c78be884e24a5cfb95beab780a7d8279a47f31b73a69a6f626830e0a8274392256f04a44d54cd99d13faa0873897df78d326c9c00c4
SSDEEP 6144:l2wPAEXRgXFcnLkyWsStSllcZgIiV5HEOkadJPn/BxtpFu:kii0nWBEcZgIiV5tkYv/Fru
TLSH
T18644236F9795DEE49681C3632AC6E65DCE6F0C33336B0521A0B2D2112117E3D3AED193
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadReset.vbs

Path C:\Users\Admin\Downloads\ReadReset.vbs
Size 579KB
SHA256 1c47424f45c604c700c4601278a9c7a54fbd27c3d4b72dca6c242059521bc3f6
MD5 7742cfab9565e30af45a194da79e0455
SHA1 883d98a5063c90e02119eef52523ba986e923424
SHA512 d0c32420f1a0760ffaca03a769bb50ae2c9597c8c54237998bcca78f36ea1704547ed0c1d026e280c17c70c5441d0f21801c831e7d5c5af32fea319af323cbba
SSDEEP 12288:c2LZo87IVowFL97IBYFQY/BsCukDToSjrWPzJxH1ViL7eBX:cg7IVoeLFIBWQMBtoyrWPzr1o7e5
TLSH
T1A1C4235A6FD37219221A84C89073F514BA9DC13788DBECCC4EA7100E767B53AB47F2A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveRequest.raw

Path C:\Users\Admin\Downloads\ReceiveRequest.raw
Size 383KB
SHA256 ef0f3ff5024f74a33da317e809c30c5f95602c621df30f2aa3c483298b598c4a
MD5 f0d15df22b11cd3e03ffe252411f14ce
SHA1 2622d15dee6736b5144a733e2bbb3c5de41553b5
SHA512 5fd42b55192cf391d094af3fd98252d93c723e750366e1f1da3d47eb2a76f928ec22f8ebc239f88de69eb03dbb0e3c37fda29171cc2b658ddd3231b9edb2cd63
SSDEEP 6144:OrqZ8pqBL6qmrJ8pVDkggBwKFdASL9HsE3j41BNsgKZhawvFWmdfNpwCpeKue:C6a9qmrJIkHFdrLljGr6hagWGwCke
TLSH
T14284237CB6A7B7C71062C450A4E8F2A658B461794F6CCFBB932AD6AE6431EC0035707D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeRedo.dotx

Path C:\Users\Admin\Downloads\ResumeRedo.dotx
Size 323KB
SHA256 865486c97068774f905e31709660c4ba548ea6b89f2132148f60839f0d5ce110
MD5 1f7289789e7a814791596cbc4ad08b87
SHA1 4bd6e9419384cab33eb06f258db55f137ddb5685
SHA512 165c3d1c5c03ea9d9b47e85a7efbb3d4d26c089c5a038a0200f61500e47f9f2a248eafb60c68ac2d4d2835c1a4b61442fe0cc357a89dc1612b52ac02db25abe1
SSDEEP 6144:bsd4Sog2ywY55/cTlDc7kgTzegKIt1I6QIb3/AwWh0UbW2wCxEZ:bK1o5y95BcBDGkqegK21jd7MhUSY
TLSH
T1C36423AD89964E34F0A5358D0FC4E4821025D091AD6B35AFAF217EBC1CB7B2D57AC732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetMove.mht

Path C:\Users\Admin\Downloads\SetMove.mht
Size 473KB
SHA256 b0f6f955ad56501f6c5735d187ceccade926e794b963d6d84f495440d9c79761
MD5 12e3357ae08ae1257b80e9983c54c1e3
SHA1 27cf7984a777f420b03f56d81ec2f770044ecc2f
SHA512 7910849e0f70f21b7e316fc962e494e28b3a7f5eafeab54b909bd8b413d789cc2291da99175b8026bcfd05637e5db4ea71051c3c2c6b6a6225c21325b40a9ddd
SSDEEP 12288:F4WLSo3vonZW0jBbPHo9heeABwyvXBr2ZrzdNqEns27:F4WLSkwZWC9/o90eABFXByZt/
TLSH
T1E9A4231EA43DF0A45E4D7FFA56B72C3355819A0AC59B71EA3820FB0C6B5A04F49DB4A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipStep.vbe

Path C:\Users\Admin\Downloads\SkipStep.vbe
Size 609KB
SHA256 85a518d32a9255acefb65fb583c7803c8fecc97c17e642a61feec01a3bdd321b
MD5 0647ae50f950511b46465e9ab2e71e71
SHA1 d2d2f04cef1507a399a1f914f7734ee316f3b951
SHA512 d1a4c90d00f496f5328bb9744d6bfa44fd7684f34d2c7822abce569b91b81c38d3eb471f396c288cecfd9d057ba1110ad0ed732ce9f269cca4e39780c9eb805e
SSDEEP 12288:Jhn3nzrZHFK1Y+2L/mcYFMIbOgCEPLLpzeD7axnK1nKihbOAyl4u:Jhn3nZF1hYF9LnMDWKxFbny/
TLSH
T1E0D4236C7875B06323EA5D554558CBC850AE5090EF09AD9BD27BE317F0F8AEC34F0A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendStop.xml

Path C:\Users\Admin\Downloads\SuspendStop.xml
Size 519KB
SHA256 870a0a024ff4f594e16d8b943e58a12d92f58af6e57eee102b36d50c1953035b
MD5 d3472471d518a935a89299658d464324
SHA1 e16ed03418795f98b9ef4e0037a2e5d0697e5f36
SHA512 2efdcb9b84c7f44cfc8460f9a4939df0c72d07a35e772c0eec4258818cecfdb5ab31433e199841d624a7fe3333c779807b7e3b3a12da1da5a318b557121d4ea3
SSDEEP 12288:qyFgbGcPoLf9Jj8uzPP+bDcAa4J99boH7nNSRvbbp4:q8B10ubOva0DbcIRbba
TLSH
T1C7B423558D739E0AF00BAE678806DEB6A75D47F88071E7453E1A0C5879C327E9E0C6F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchSplit.wax

Path C:\Users\Admin\Downloads\SwitchSplit.wax
Size 278KB
SHA256 8d89c47225b879a98a3a2c38c1a5190c5447f461f57caa92030e06b24128f085
MD5 525df587aacf17a9d13cca8118445e3e
SHA1 09c024870c0e339b5d73a974da612c2474959f84
SHA512 c83ad75baaba87480d1f5c7d7faca332e15789732b640fb60f31d8f9ac3f239c4a3694df1789833ccb090187bc4ca62de34d9a7a6018db7ca5bf8aeb1f24459c
SSDEEP 6144:2gosQPv5mBF6/rdVOLYCgNNGIFvHD7MgsaZ309TTFAmDHDNhtY5PZrF23:VQpokrdPtfVvD7M6ZEJTOmrDNPYDrc3
TLSH
T1595422FF014B255056B3B23A5A7CC4702B0BE9E9D97E8F489F158BEA506E8C3DAC44D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncEnable.dwfx

Path C:\Users\Admin\Downloads\SyncEnable.dwfx
Size 534KB
SHA256 1031a2db6b14aa7186e10787cbd44878b123b14d3d62d276c210ce5e71c2fa59
MD5 0b5772100cda48a9812df036b71717d9
SHA1 1e36a2777ca2a811a73901da6b6a3f11a25d7b12
SHA512 8eebdb0b6d6e7e16827a18fc799711096906e0c72d2566c03247f90d651c85b6375d8cd1f3e63f79f677254721ab9d5f67c5d63f9ea4939f6d478db0c6cc3865
SSDEEP 12288:f/1Lk2WqrE0D9N28PMnHKPvVwJHf+6jJiiiqnbVdsl8D9:H9/rE0D9N2mMCNm+KKm
TLSH
T1E5C423DBBB0D374B64E91EBF3127C45BF05F432593C1357590AAE91C900AEACA2C295E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockInvoke.odt

Path C:\Users\Admin\Downloads\UnblockInvoke.odt
Size 624KB
SHA256 88a6a0bf6130e89ecd4bddc34648628a78575a9e1d5eb183aa7aeb87a86efb44
MD5 3552242dcbae3467e433f653f24e0b78
SHA1 876a8f6f55b217bfc5af7f1e8577847a46fd6099
SHA512 38fded713ad9e38e0fc03f2ab2d8c84be253aafdd980bee89b5b1c4d8e4670ecd09897c1b8dbfe4609233fba8381f587f364d86505620c1a9148cc7bb1fdd43d
SSDEEP 12288:hZ4CsdRK6v1Z+WhPf6t5sla2ula9Luavu1vVRIVBZ6Hg2eJfuoJ:havdRKiZ+8lpulIvwRIv2eRPJ
TLSH
T123D433DC1FD42BC8A27E72BAA4D9046B4D3D88C2CD81E1ABF31B431ED13151DA698D67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockMeasure.AAC

Path C:\Users\Admin\Downloads\UnblockMeasure.AAC
Size 263KB
SHA256 7aa19004d2b4ce6aa230a2c3e8e22956aab4c8a49223af8d8826d3e75eff7085
MD5 4206e87ba561957a654ff0e3e5ba309b
SHA1 206dbe5f76a91a3d4675118e1171c02fd2bc2a1e
SHA512 a083f86edd14c6e72b20b8407e97a937b7722f09b94ff2474bff7a48ed4d8a61e35ea09754b00181483342a7a8b360a23731814abd4952d54259b3e8d3bb3891
SSDEEP 6144:flDAiTxpMP5fA0Bori1YilZ/0kkdmznY9q0hmQi1r27Ko+T1M4UKkKm:RAiTwP54fOB3pzoq5Qi167UTMKrm
TLSH
T15D44230FE69D277A8F928D7B35BD4DA434353C691B0936C706C9E84924A632C7E219E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoReset.pot

Path C:\Users\Admin\Downloads\UndoReset.pot
Size 428KB
SHA256 6637f6922c486aa0e797b96a53c52cb3175c0c1b02dfcfe66a76342f80c09668
MD5 a3f0aaf2b60c9fb017e685bf76c41876
SHA1 2692c74828e3c53c0279be9c6159617a86fa778e
SHA512 5811d388bc83b5a999bcd6cd1a070001ceb22e34f2bd04b67305b5b75db5bf9b1f008491f238ce46ebb482c410b3ebff1bf2636956c499532409abb9e65c1e4c
SSDEEP 12288:mVnJ5IteBcfcKCYQpXSII+zFi5El1zM+OVhZxy0OJz:mVfIMoQpXG+Ri5EXzMJsz
TLSH
T14794231296549B1D94B1A171E248C2BAAF861DCDE18F01D8638D85F0E5FD32C139EFF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateRemove.aiff

Path C:\Users\Admin\Downloads\UpdateRemove.aiff
Size 293KB
SHA256 c7c0d8ddecfd80f8dad8290ca460e185357614affa2b2995852b80df6732751c
MD5 3d13c23216a74dfed3ad629c6f488687
SHA1 1b56efb3cfe231c6f39eac27e6e4aef2281691c1
SHA512 f9472ea193a4d795f61c2660811a9db698f72f9b47d143c4cefeada55f7bce4b0ed3e15c16dbba56d17eefaf854fa6545450a36940d9000e835f748862d3cb09
SSDEEP 6144:T+WtB7wUqkyuzLzzI7i/T/Q6iZ0g2nxJ6FISqoeoFuWWqn/Is:T+WtBEUpFvzYi/DniqgGxJgVCoFuUnws
TLSH
T13B54238113F0A6F3425A3DE5FD922E1D99A194675F03FD85464EC708E0797EF6F428A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads