Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://phisher-part...

windows10-2004-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    362s
  • max time network
    361s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/09/2026, 04:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://phisher-parts-production-eu-west-1.s3.eu-west-1.amazonaws.com/331f1185-2a2d-4d80-a09c-a778676cd6f5/2026-09-28/eme0u24010cdl0rk4vl4ifudmhasj83gv4oa17g1/d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483?response-content-disposition=attachment%3B%20filename%3D%22%22%3B%20filename%2A%3DUTF-8%27%27&x-amz-checksum-mode=ENABLED&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QETINJOAJ%2F20260928%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20260928T043006Z&X-Amz-Expires=2973&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEGAaCWV1LXdlc3QtMSJHMEUCIQCKmxwLcTTFsQJjRpf6cNcmjbXbGNetVn%2BHYHrL27CbEgIgTbZ44zt%2Bui6Q%2Fb0gV4QzVmoz7aLtoDkuzLGX%2FRVKYyAq%2FwMIKBAAGgw4MjMxOTMyNjU4MjQiDAnTi8WrHciSgBVOrircA47T1A8z7ryOKzOExwU%2F5mV6drf8XSTZWM7P3fWtG7u04vqLGH7fvYV7xfMoE0uQJ6y1bvYCVB%2BW%2FyjO6dDgOo5njqSovgYLUfKhAgutYxiLchbA6Ej7x5sg%2Feci9vHYzlKW7uPxvENggWki190LrD3olIsTC6YERsxAOO5VvzJBGCUYNAGnUMlPMH8SrYi%2BrRAM0oYBTDpTHPfo6ZA4yqBIaaNnLGoiS7bdmqFiXXDhgw2JgBNhz%2BHgKNCJ6zdGmUqnAmYb3xjOwqM0wJnX16jLp83nSvyFBSfzOlXJsYp71j1xslI6GSdffWwuBamO8h%2B7bAppeG8iArCD8ANg4yaOZWbUjd23bnJ4YHNkpX886Vk8A8OTUHAdNg45UFiOGi1e1TA06EH8oHKuM9%2FBPmIHS%2FxHWN0O8hin3gP2z5gSFaER3MuvZggwd%2FFGSBjTg0hzm1fbXKmHAq6sz5BEpSPzhHmZASy64%2BdJvD2TLmYbsY6bu%2FK0QPj2kY0xDUEl6wAASScA2iq%2F%2BYMH0mYqGOLehbg8IvKneInhbGYnyXhaca0cqfI0P%2Bv%2Bcnq%2FyXCaTY3S6nuPolxJSrNymOs5nx8AaeplCpZQTThM8AvmC525rSN9kQx2QBSeXH%2BxMIvJ5tUGOqUBd5JyjwsQlW3BSSLZtvpwH6MbLS%2Fk9A0AMyt%2BuypTR%2FWNMTUhE17IEXl8yVHiVn4bzVP2rmymoDLUkvJ43d48jxJ742l85pgjlxkEk2hTVzy6EW6Sct7IasJ0A6kghHPoZNTbafOFXkYPegKX4ipE6JONj%2B%2BzjNVVEklMsp8463MnBrnrC2mHS2DA0MJ%2FYjW%2BjGDptPQlHP40QD7%2FrVKfBlVxuAxl&X-Amz-SignedHeaders=host&X-Amz-Signature=87715517183947116583cc5af4ec26f08fe17ce7cfb239c1df60837589b03cf5
  • Sample260928-e5mlbavs9j
Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalationspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 13 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of FindShellTrayWindow 51 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 35 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://phisher-parts-production-eu-west-1.s3.eu-west-1.amazonaws.com/331f1185-2a2d-4d80-a09c-a778676cd6f5/2026-09-28/eme0u24010cdl0rk4vl4ifudmhasj83gv4oa17g1/d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483?response-content-disposition=attachment%3B%20filename%3D%22%22%3B%20filename%2A%3DUTF-8%27%27&x-amz-checksum-mode=ENABLED&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QETINJOAJ%2F20260928%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20260928T043006Z&X-Amz-Expires=2973&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEGAaCWV1LXdlc3QtMSJHMEUCIQCKmxwLcTTFsQJjRpf6cNcmjbXbGNetVn%2BHYHrL27CbEgIgTbZ44zt%2Bui6Q%2Fb0gV4QzVmoz7aLtoDkuzLGX%2FRVKYyAq%2FwMIKBAAGgw4MjMxOTMyNjU4MjQiDAnTi8WrHciSgBVOrircA47T1A8z7ryOKzOExwU%2F5mV6drf8XSTZWM7P3fWtG7u04vqLGH7fvYV7xfMoE0uQJ6y1bvYCVB%2BW%2FyjO6dDgOo5njqSovgYLUfKhAgutYxiLchbA6Ej7x5sg%2Feci9vHYzlKW7uPxvENggWki190LrD3olIsTC6YERsxAOO5VvzJBGCUYNAGnUMlPMH8SrYi%2BrRAM0oYBTDpTHPfo6ZA4yqBIaaNnLGoiS7bdmqFiXXDhgw2JgBNhz%2BHgKNCJ6zdGmUqnAmYb3xjOwqM0wJnX16jLp83nSvyFBSfzOlXJsYp71j1xslI6GSdffWwuBamO8h%2B7bAppeG8iArCD8ANg4yaOZWbUjd23bnJ4YHNkpX886Vk8A8OTUHAdNg45UFiOGi1e1TA06EH8oHKuM9%2FBPmIHS%2FxHWN0O8hin3gP2z5gSFaER3MuvZggwd%2FFGSBjTg0hzm1fbXKmHAq6sz5BEpSPzhHmZASy64%2BdJvD2TLmYbsY6bu%2FK0QPj2kY0xDUEl6wAASScA2iq%2F%2BYMH0mYqGOLehbg8IvKneInhbGYnyXhaca0cqfI0P%2Bv%2Bcnq%2FyXCaTY3S6nuPolxJSrNymOs5nx8AaeplCpZQTThM8AvmC525rSN9kQx2QBSeXH%2BxMIvJ5tUGOqUBd5JyjwsQlW3BSSLZtvpwH6MbLS%2Fk9A0AMyt%2BuypTR%2FWNMTUhE17IEXl8yVHiVn4bzVP2rmymoDLUkvJ43d48jxJ742l85pgjlxkEk2hTVzy6EW6Sct7IasJ0A6kghHPoZNTbafOFXkYPegKX4ipE6JONj%2B%2BzjNVVEklMsp8463MnBrnrC2mHS2DA0MJ%2FYjW%2BjGDptPQlHP40QD7%2FrVKfBlVxuAxl&X-Amz-SignedHeaders=host&X-Amz-Signature=87715517183947116583cc5af4ec26f08fe17ce7cfb239c1df60837589b03cf5
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1372
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbe92cc188,0x7ffbe92cc194,0x7ffbe92cc1a0
      2⤵
        PID:4884
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,12588703966010132476,15841564400499536348,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3788
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8611607514086008883,9160379639424932669,262144 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
        2⤵
          PID:2452
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,9357536230235619510,1747966537146287738,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
          2⤵
            PID:3824
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,5946063855806894022,72921736718961797,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
            2⤵
              PID:3732
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,2618820058661699940,17462442459672380895,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
              2⤵
                PID:2600
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,11038257352004863629,5500528051377360260,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
                2⤵
                  PID:2280
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,8831710732021425375,8640734700531031501,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
                  2⤵
                    PID:2556
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,6042695200936946275,15128978963689663917,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
                    2⤵
                      PID:1256
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,11005870298770046722,374301859475441086,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                      2⤵
                        PID:2404
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,17503339009228864271,11432799282329699816,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
                        2⤵
                          PID:1332
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5744,i,18348046044676072441,7521803553624383858,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:1
                          2⤵
                            PID:548
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,11602765006992775181,453064006888449168,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
                            2⤵
                              PID:4288
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,11325851727712800671,16045607508484870066,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
                              2⤵
                                PID:4536
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,11325851727712800671,16045607508484870066,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
                                2⤵
                                  PID:4192
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,12743239986043624551,545658541594983080,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                  2⤵
                                    PID:5356
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,13016791488132593548,16383766720616577015,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
                                    2⤵
                                      PID:5364
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,13256782856063840750,15370064622488241580,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:8
                                      2⤵
                                        PID:5372
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,15683347228112082087,13145786300899247262,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
                                        2⤵
                                          PID:5552
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5228,i,15168495970658645705,8288512092283352468,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:1
                                          2⤵
                                            PID:3580
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,17141127454510106468,5780124032042181290,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:8
                                            2⤵
                                              PID:5460
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,3268529425883533242,14466584928849365649,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
                                              2⤵
                                                PID:5248
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7068,i,12743420898061069737,17968695239981639412,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
                                                2⤵
                                                  PID:2252
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7172,i,13368643782225442066,7438021943918045002,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
                                                  2⤵
                                                    PID:6116
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7064,i,14836636646244167452,14678993923609624919,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
                                                    2⤵
                                                      PID:5592
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7512,i,7395775092183956865,7754086620154734836,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
                                                      2⤵
                                                        PID:5216
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6844,i,7811743785220228062,5645286002297783404,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
                                                        2⤵
                                                          PID:6028
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7728,i,9785096834637691790,9082845609030102210,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
                                                          2⤵
                                                            PID:4724
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7900,i,3567658039641150926,4077113350896556760,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7764 /prefetch:1
                                                            2⤵
                                                              PID:5816
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7144,i,355327170532668665,10238846574767370211,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:1
                                                              2⤵
                                                                PID:4696
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7892,i,2391163642032969197,13782864354490878499,2097152 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7744 /prefetch:1
                                                                2⤵
                                                                  PID:3388
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8496,i,18064908300572938746,11425146365639408305,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:8
                                                                  2⤵
                                                                    PID:5608
                                                                  • C:\Users\Admin\Downloads\npp.8.9.8.1.Installer.x64.exe
                                                                    "C:\Users\Admin\Downloads\npp.8.9.8.1.Installer.x64.exe"
                                                                    2⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Drops file in Program Files directory
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Modifies registry class
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:2644
                                                                    • C:\Windows\explorer.exe
                                                                      "C:\Windows\explorer.exe" "C:\Program Files\Notepad++\notepad++.exe"
                                                                      3⤵
                                                                        PID:5028
                                                                      • C:\Program Files\Notepad++\notepad++.exe
                                                                        "C:\Program Files\Notepad++\notepad++.exe" "C:\Program Files\Notepad++\change.log"
                                                                        3⤵
                                                                        • Executes dropped EXE
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:6136
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7688,i,9422407872473361916,7461413938438136385,262144 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:8
                                                                      2⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:1624
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,4526873154317195314,594919785029393918,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:8
                                                                      2⤵
                                                                        PID:6036
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8092,i,7003753158516254253,2623378536963303805,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
                                                                        2⤵
                                                                          PID:6004
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7668,i,12933570931986804,5966986302154406745,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:8
                                                                          2⤵
                                                                            PID:3048
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,11166492706603094886,1409292547186562020,524288 --field-trial-handle=2584,i,1959069237359812135,15210944114076358003,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
                                                                            2⤵
                                                                              PID:4936
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                            1⤵
                                                                              PID:2920
                                                                            • C:\Windows\System32\rundll32.exe
                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                              1⤵
                                                                                PID:2224
                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                1⤵
                                                                                • Modifies registry class
                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:4536
                                                                                • C:\Windows\system32\NOTEPAD.EXE
                                                                                  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483
                                                                                  2⤵
                                                                                    PID:5208
                                                                                • C:\Windows\explorer.exe
                                                                                  C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                  1⤵
                                                                                    PID:1552
                                                                                    • C:\Program Files\Notepad++\notepad++.exe
                                                                                      "C:\Program Files\Notepad++\notepad++.exe"
                                                                                      2⤵
                                                                                      • Executes dropped EXE
                                                                                      • Loads dropped DLL
                                                                                      • Modifies registry class
                                                                                      • Modifies system certificate store
                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                      PID:3900
                                                                                      • C:\Windows\splwow64.exe
                                                                                        C:\Windows\splwow64.exe 12288
                                                                                        3⤵
                                                                                          PID:1632
                                                                                    • C:\Windows\system32\svchost.exe
                                                                                      C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
                                                                                      1⤵
                                                                                        PID:1848
                                                                                      • C:\Windows\system32\printfilterpipelinesvc.exe
                                                                                        C:\Windows\system32\printfilterpipelinesvc.exe -Embedding
                                                                                        1⤵
                                                                                        • Drops file in System32 directory
                                                                                        PID:5192

                                                                                      Network

                                                                                            MITRE ATT&CK Enterprise v16

                                                                                            Replay Monitor

                                                                                            Loading Replay Monitor...

                                                                                            Downloads

                                                                                            change.log
                                                                                            • Path C:\Program Files\Notepad++\change.log
                                                                                            • Size 3KB
                                                                                            • SHA256 44457dfb7df179455ac8be46f2ace664442a131b44d322f923c36a5117479c8d
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            langs.model.xml
                                                                                            • Path C:\Program Files\Notepad++\langs.model.xml
                                                                                            • Size 533KB
                                                                                            • SHA256 6aaa58dfc6836f77587a0d8345d4e924847e734e29df4a271538cced9d6a58aa
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            notepad++.exe
                                                                                            • Path C:\Program Files\Notepad++\notepad++.exe
                                                                                            • Size 8.2MB
                                                                                            • SHA256 c52c9ed2ec6d0b5b3f243b29f2124f98db56b6ba92bb42a9af2665709464b3cf
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            nppPluginList.dll
                                                                                            • Path C:\Program Files\Notepad++\plugins\Config\nppPluginList.dll
                                                                                            • Size 236KB
                                                                                            • SHA256 3f0ee64e09923ed8dd1d6c0d9cd65b3925a96ed56006783ab0f72278d299f1d0
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            NppConverter.dll
                                                                                            • Path C:\Program Files\Notepad++\plugins\NppConverter\NppConverter.dll
                                                                                            • Size 203KB
                                                                                            • SHA256 be88acf9ab5fc6c765a4c2c07f1fa3726adf8146d30c5d2fbae584b37636744f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            NppExport.dll
                                                                                            • Path C:\Program Files\Notepad++\plugins\NppExport\NppExport.dll
                                                                                            • Size 155KB
                                                                                            • SHA256 34dcc95181cbeaebdcfd445bd409609287ac2a874afceacba044ec176fbcb51f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            mimeTools.dll
                                                                                            • Path C:\Program Files\Notepad++\plugins\mimeTools\mimeTools.dll
                                                                                            • Size 146KB
                                                                                            • SHA256 0dc04f5f1bf633a3b553d1e743ddff4f831316dace9b895383c98c29ef81b55b
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            stylers.model.xml
                                                                                            • Path C:\Program Files\Notepad++\stylers.model.xml
                                                                                            • Size 249KB
                                                                                            • SHA256 7260cba0dd635201e9ab5b89ef15e22f2d86132e7367fb9660ad83ff2c5a5809
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            gup.exe
                                                                                            • Path C:\Program Files\Notepad++\updater\gup.exe
                                                                                            • Size 1.3MB
                                                                                            • SHA256 b5630203642f547d9411a9191113e39d20030ef1189227eeaf279beb184ced1b
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            blocklist
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                            • Size 105KB
                                                                                            • SHA256 b83cbf64cc348bda7418cf4d51290f954f1a229bfc174076604c71e6316695b1
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            settings.dat
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            settings.dat
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            LOG.old
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                            • Size 334B
                                                                                            • SHA256 a0cc282dcb83e57a1ba2c7883853db19e3107ed5d21c74d9338f663a748b3d87
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            LOG.old
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                            • Size 331B
                                                                                            • SHA256 9adde485668f6eed07e08892967abd684c11aa9edbca65ce6cab23fe03972448
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            LOG.old
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                            • Size 334B
                                                                                            • SHA256 dbd14780b90108422c8f14b6629d33cb34a89e32efd3c30c86b6b9622621af22
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            BookmarkMergedSurfaceOrdering
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                            • Size 6B
                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            f_00005a
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                            • Size 59KB
                                                                                            • SHA256 ef1113039392e7098919b6da68d1bcaf69106b6035defee747563f221d652985
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            f_00005b
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                                                                            • Size 72KB
                                                                                            • SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            f_0000ad
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                                            • Size 56KB
                                                                                            • SHA256 5e8562a7601b9f2578290368e195d0aa97d06c6ca9d2c97eea75967f4ec26d60
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            3dde4ffec5ecb63d_0
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3dde4ffec5ecb63d_0
                                                                                            • Size 292B
                                                                                            • SHA256 42847a1d238d33ee5d4de778d2708ffeab29dafdb61f21e5e09619cfd71b86b7
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            temp-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                            • Size 4KB
                                                                                            • SHA256 1d278fd2c14e38a017f38281b41e6fef2f6e8f75061a910f694ed62cf4833795
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                            • Size 2KB
                                                                                            • SHA256 8bdd08373010c58124e1ff8ac275688e9af45549f49616948b0de209c054bac5
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                            • Size 6KB
                                                                                            • SHA256 80ebd64b438f7195e32d8a5f36c1c7d93684e6a1834b22691c48948ba86ff05c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            the-real-index~RFe58de36.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58de36.TMP
                                                                                            • Size 2KB
                                                                                            • SHA256 9b164e5b285c1e10a98efc5d60c28a39b8595a5a3edac2e7fe274da64e3ca6f0
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            SiteList-Enterprise.json
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                            • Size 2B
                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            Edge Profile.ico
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                            • Size 70KB
                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Network Persistent State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                            • Size 2KB
                                                                                            • SHA256 5ea894a42057a646d445068a8524010cda96bb6ec7eb831650041b7a5af41b40
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            Network Persistent State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                            • Size 111B
                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            Network Persistent State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                            • Size 12KB
                                                                                            • SHA256 48666c8a770984f502343ac6cefff9c6df7c726d4c57d402c2c78c3ad814fe0e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            SCT Auditing Pending Reports
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                            • Size 2B
                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            Sdch Dictionaries
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                            • Size 211B
                                                                                            • SHA256 c8227c497be79feb6b0ff7ce3e8c7362ac8a89568242ea4834e235a8ab135f72
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            Sdch Dictionaries~RFe5a1b78.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a1b78.TMP
                                                                                            • Size 40B
                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 9KB
                                                                                            • SHA256 f6a495637c96761e8675fdfd31152a5f054e80dc20be0edef77e3506c4fac7bf
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 12KB
                                                                                            • SHA256 74474279fc3495ace81462564d248be47529034210cf5f791dbe2cb250243ab3
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 15KB
                                                                                            • SHA256 80e0a2fbc4adc0c6e5799c6005bb5f841eb317fd4c415b6637eae797dc63601e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 10KB
                                                                                            • SHA256 b5316255bf65f8e3f72a7e98f63833038fb3bd8765a775ccab54469e27538fa3
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 14KB
                                                                                            • SHA256 46d5f3da5f4dd8dbf3a0e94deff0dd7473cabb677979bd4c9b97c67299dd265c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Secure Preferences
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                            • Size 27KB
                                                                                            • SHA256 985f76e471d8fcbdd4721c82be9e7354d262d5e67562f0ab6f62e49c3bbd9f2d
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\164b9232-c05c-4667-afcc-58397a334e3d\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 7fdca545461cfb14ee2dd0028dcb5d91db3c2dbe48a09626cd04cf9aec2e5199
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index~RFe59ce04.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\164b9232-c05c-4667-afcc-58397a334e3d\index-dir\the-real-index~RFe59ce04.TMP
                                                                                            • Size 72B
                                                                                            • SHA256 e63fa47d2eb1178c0b5d21f2bf23298f606c04ba5cae3a76d87ab985a069fb90
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\60c96e95-d322-4c6b-8b03-5fec3c4d15e2\index-dir\the-real-index
                                                                                            • Size 528B
                                                                                            • SHA256 5d92fda696d3a2cbc3bbc99e64d2342b0f6a42cc44c6f05ce4f7cd76067e42b4
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\60c96e95-d322-4c6b-8b03-5fec3c4d15e2\index-dir\the-real-index
                                                                                            • Size 3KB
                                                                                            • SHA256 d10e90e99d122a74d9e16a9ea43740ee2d2202cbac5d54802f4f2ac8ba9ee325
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index~RFe597601.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\60c96e95-d322-4c6b-8b03-5fec3c4d15e2\index-dir\the-real-index~RFe597601.TMP
                                                                                            • Size 528B
                                                                                            • SHA256 fb21e2478ef331e45b8d8e3064579e570b3088f70b28cc323b99accd2a77ee4c
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            index.txt
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                            • Size 371B
                                                                                            • SHA256 8bbf2c50dfb9da8015527fab188b5cb1e400cfde3e3be311f253815d73ab3832
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 24db1f4d9596bf0a20fe4cfe038f82bbe04bd69d0a456ec17da8601cb827ace0
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            the-real-index~RFe59cd49.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59cd49.TMP
                                                                                            • Size 48B
                                                                                            • SHA256 a830da81563881f550653080661f790455108f17bedaeb4deb377ced51d969b9
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            sync_diagnostic.log
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                            • Size 4KB
                                                                                            • SHA256 80f67aa988dc93705eb2952ccbd569cc268615802c7b3155d6285024eba582a6
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            fc4ec281-7cf4-442b-89e3-a4ff61763be2.tmp
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc4ec281-7cf4-442b-89e3-a4ff61763be2.tmp
                                                                                            • Size 10KB
                                                                                            • SHA256 8850b942972c0c8b50b1d90b7a5af3f39585ac71e9cad5dfff94027b81fa383e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            c75ee757-0a9a-45a0-8c2a-2c0b49f88909.tmp
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c75ee757-0a9a-45a0-8c2a-2c0b49f88909.tmp
                                                                                            • Size 22KB
                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 18KB
                                                                                            • SHA256 826f02a927d42336523e0d794bcb9114e2bd0b4ba1250abfab2bc74775e21aa4
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 21KB
                                                                                            • SHA256 632cf87c839507cfaf5f5131040641f4be9fc64959d253266614891eeea033e3
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 8KB
                                                                                            • SHA256 54bb91cf4af1e398bbdb3936fabc249ce34a8316ee481836b9521f3a9e3e12a8
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 21KB
                                                                                            • SHA256 a5a979203d585d1467aee0fdbad56e47c4b5dbdbaf89fd9ffcce045083b3900f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 18KB
                                                                                            • SHA256 35d01672430aa85b286d36377dd6611e66104a5e5632720503e85657558aa11d
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 21KB
                                                                                            • SHA256 ece87ee6091d1b758c77021314f90355113afda0ab647ff9d4fa21d0dc6aaf46
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 21KB
                                                                                            • SHA256 2760a4aeaf34b52dab85debbee25725afbf2fef8d4debc55780035ff10c2d556
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 21KB
                                                                                            • SHA256 b0ce7e22177cf9eb09c61b531a9516637ebee2daa7d516540231d7f8f233296e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            Local State
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 8KB
                                                                                            • SHA256 13d8fb1e90ecf3d4ea61efd6eacc7b74115c57fa2de8ff68ec692274c2bb311f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            RevisitationBloomfilter
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                            • Size 392B
                                                                                            • SHA256 42ace54911e12d5e84eeda671577f9afbd9568a4299e4ec4db241066ac5e6aa9
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            RevisitationBloomfilter~RFe59fea9.TMP
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59fea9.TMP
                                                                                            • Size 392B
                                                                                            • SHA256 a48d167d0d8db0518115a6708432b2e23183c47d0e543c5a859bd7fd94ef0ea6
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            e2ce8049-8353-4f04-8f3e-f47cfb5ee9f5.tmp
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e2ce8049-8353-4f04-8f3e-f47cfb5ee9f5.tmp
                                                                                            • Size 13B
                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                            • MD5 SHA1 SHA512
                                                                                            Submit Download

                                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                            • Size 2KB
                                                                                            • SHA256 87cc3a5866a78a155280ad7a114f10243d0f383551bf669547292246b4b0b447
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            InstallOptions.dll
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\InstallOptions.dll
                                                                                            • Size 15KB
                                                                                            • SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            LangDLL.dll
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\LangDLL.dll
                                                                                            • Size 5KB
                                                                                            • SHA256 760df89c2341f9c39c0250c283cb9caad185244fd6b76e8157cdf49928dc1d8e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            System.dll
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\System.dll
                                                                                            • Size 12KB
                                                                                            • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            UserInfo.dll
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\UserInfo.dll
                                                                                            • Size 4KB
                                                                                            • SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            ioSpecial.ini
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\ioSpecial.ini
                                                                                            • Size 1KB
                                                                                            • SHA256 50e16218e15614a65de3bbad128923c6853ec16a190bd40d0e47ffc79f5a2f56
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            ioSpecial.ini
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\ioSpecial.ini
                                                                                            • Size 1KB
                                                                                            • SHA256 7a322fb48caa0c1ac2a35929f0cf5bec9198eebabcad7c40dbbdca67756b8893
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            ioSpecial.ini
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\ioSpecial.ini
                                                                                            • Size 1KB
                                                                                            • SHA256 dda47bb62c2b7e453491a380e46a6b838fc4730639a08fa45ec1c080e04096ce
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            nsDialogs.dll
                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsi2FAE.tmp\nsDialogs.dll
                                                                                            • Size 9KB
                                                                                            • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            contextMenu.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\contextMenu.xml
                                                                                            • Size 4KB
                                                                                            • SHA256 cee7492b0f600d952da489f4b097896c47217959e1597f2529d5004fe1eb08aa
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            langs.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\langs.xml
                                                                                            • Size 532KB
                                                                                            • SHA256 646a415cf3da34d777277930e22767218a2185337d27ad71b6d1f1a2959bc901
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            converter.ini
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\plugins\config\converter.ini
                                                                                            • Size 646B
                                                                                            • SHA256 5b0a08439e8e93817772f84e1098f14152d9da36c2601a0600ddaae6f61359d0
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            shortcuts.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\shortcuts.xml
                                                                                            • Size 2KB
                                                                                            • SHA256 4e7bc3a7a30fe8e84c17d23e9741fadfe1071d77bf44d07df92fee387d78e93b
                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                            Submit Download

                                                                                            stylers.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\stylers.xml
                                                                                            • Size 249KB
                                                                                            • SHA256 4ae00761dd11585d61db5990ba180746dbfd1a22ae110290bd1b1c8517911e02
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            markdown._preinstalled.udl.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\userDefineLangs\markdown._preinstalled.udl.xml
                                                                                            • Size 6KB
                                                                                            • SHA256 d686a666d17b38fe523ce0f477cf8f6468b1cd341f80c8e2cc06a70b617c959b
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            markdown._preinstalled_DM.udl.xml
                                                                                            • Path C:\Users\Admin\AppData\Roaming\Notepad++\userDefineLangs\markdown._preinstalled_DM.udl.xml
                                                                                            • Size 6KB
                                                                                            • SHA256 49857fab550093b68419e1a7df3bdeb103477c038effbc5782350c28124aaeed
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483
                                                                                            • Path C:\Users\Admin\Downloads\d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483
                                                                                            • Size 17KB
                                                                                            • SHA256 d4acc750324c5ba8300c09bad748a1480dbe3716376dd36174740790159a6483
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download

                                                                                            npp.8.9.8.1.Installer.x64.exe.crdownload
                                                                                            • Path C:\Users\Admin\Downloads\npp.8.9.8.1.Installer.x64.exe.crdownload
                                                                                            • Size 6.6MB
                                                                                            • SHA256 26f3bcced788fadbac4e7e577b430ea2ce6060cf3bcad993ef4612ecd7d743da
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                            Submit Download