03582e7f7717b96acf5f09435099074b0ed6b0ad479f237c6e930d318f047b5e

Analysis

user interaction
yes
max time kernel
30s
max time network
32s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
spurdo crack by @lumera_win (tg) .exe
Size 55.5MB
Sample261026-xmc82avy2n
SHA256 03582e7f7717b96acf5f09435099074b0ed6b0ad479f237c6e930d318f047b5e
MD5 f451daf63dd2dd9904e196b8d5771bd5
SHA1 0c08208df3883058df1b11777f8d2ae92bf3b201
SHA512 6d90592dd75ab0476887fae9a8ce040708d8c15ed445555522929be3ba743d5a9e040572848be8968baacfbbf228b6f4c20dda1333837c32d74c15fc398deadc
SSDEEP 1572864:RD62O+PnHhBqoFEsaK1tjnzxyk7PeFHui9K5xarw2ttqeq:96T+PnHhcoFEsbrdIuGKirUe
TLSH
T151D733DDF64AA221C01ED6E679FF627D3830BF90DC926C5AFFE19D032581A143A78164
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	spurdo crack by @lumera_win (tg) .exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1800	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{A918D503-4BCF-497F-8C28-6F9A0556BF74}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1236	spurdo crack by @lumera_win (tg) .exe
1236	spurdo crack by @lumera_win (tg) .exe
1236	spurdo crack by @lumera_win (tg) .exe
1236	spurdo crack by @lumera_win (tg) .exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4956	msedge.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 1236 wrote to memory of 4956	1236	spurdo crack by @lumera_win (tg) .exe	91
PID 4956 wrote to memory of 2360	4956	msedge.exe	92
PID 4956 wrote to memory of 1800	4956	msedge.exe	93
PID 4956 wrote to memory of 984	4956	msedge.exe	94
PID 4956 wrote to memory of 984	4956	msedge.exe	94
PID 4956 wrote to memory of 2732	4956	msedge.exe	95
PID 4956 wrote to memory of 984	4956	msedge.exe	94
PID 4956 wrote to memory of 2732	4956	msedge.exe	95
PID 4956 wrote to memory of 5708	4956	msedge.exe	97
PID 4956 wrote to memory of 5708	4956	msedge.exe	97
PID 4956 wrote to memory of 2640	4956	msedge.exe	96
PID 4956 wrote to memory of 5708	4956	msedge.exe	97
PID 4956 wrote to memory of 2640	4956	msedge.exe	96
PID 4956 wrote to memory of 2640	4956	msedge.exe	96
PID 4956 wrote to memory of 1196	4956	msedge.exe	102
PID 4956 wrote to memory of 1196	4956	msedge.exe	102
PID 4956 wrote to memory of 1196	4956	msedge.exe	102
PID 4956 wrote to memory of 4020	4956	msedge.exe	105
PID 4956 wrote to memory of 4084	4956	msedge.exe	106
PID 4956 wrote to memory of 4020	4956	msedge.exe	105
PID 4956 wrote to memory of 4084	4956	msedge.exe	106
PID 4956 wrote to memory of 5572	4956	msedge.exe	108

C:\Users\Admin\AppData\Local\Temp\spurdo crack by @lumera_win (tg) .exe
"C:\Users\Admin\AppData\Local\Temp\spurdo crack by @lumera_win (tg) .exe"
1⤵
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://t.me/lumera_win
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ffeaf72c188,0x7ffeaf72c194,0x7ffeaf72c1a0
    3⤵
    PID:2360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,16531170639436331195,10970169420886013598,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,14210610685398285616,9508001222504370406,262144 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:2
    3⤵
    PID:984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,14875946826699089728,5237250722619088606,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:8
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3380,i,14413032073760148193,16337181406746952298,2097152 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
    3⤵
    PID:2640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,10949826660692578149,4560832504736044588,2097152 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
    3⤵
    PID:5708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4904,i,715128708535157407,12778798616476301846,2097152 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
    3⤵
    PID:1196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,4539697501765750337,1687034382196991026,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
    3⤵
    PID:4020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,8510745962647952625,16617465038156772577,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
    3⤵
    PID:4084
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,9160540867061555517,14965504817536174008,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
    3⤵
    PID:5544
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,9160540867061555517,14965504817536174008,524288 --field-trial-handle=2860,i,14622949898305884029,3174463447198580478,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
    3⤵
    PID:5572

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Geist-Medium.ttf.new

Path C:\Spurdo\assets\fonts\Geist-Medium.ttf.new
Size 76KB
SHA256 335f681900d781c9be2f2cca11969174d7b85ed373a89c316fdb9a98c20ab8e9
MD5 3e3add4a622094346f14ed2e203f56a8
SHA1 faebc62bcec081e652a1e54e3f46331749a1bb78
SHA512 4bdab1bd1b17cd18e84594d2af660dbe912325757e5e9b6c2b761005f4f8b373e67f09bcb643e385a403b28a59723244ca0c5c6fcee35fbfd0954c88732c55ce
SSDEEP 1536:yn162CHpE0cuGB8r644y9V2SSIPi+FoXGxR5FLHpomJZK/MawP:y1LCJE0Hw8pESSIqovFtZhawP
TLSH
T1E9733A53BB428B05EE072E7E8671D3A0A779BC39AE29D30FF9C12A69FC871584D11354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Geist-Regular.ttf.new

Path C:\Spurdo\assets\fonts\Geist-Regular.ttf.new
Size 76KB
SHA256 2ad37212f14cf44f76ae04d2eb23461472c0a2a91eaf5e46a2579a6743a367a8
MD5 ecc9e05ed90c3ea002ff21a81164815a
SHA1 cc383978a5fa714617c8aa4d30578cc9a5bfd853
SHA512 b2a35ba1850cd47bb7f9ce4638876560c3bd0c62c7d26e51363e19ad84aa5807cec31a609e5fad3a3dc058b7119e47e05296cd33b2da752d184a79896dc087f8
SSDEEP 1536:S2CHAy0cuGB8rn44444444xMYuSrD+UCrKtLKRVSMpmcUZu8TBmEy/B+A:zCgy0Hw8dMPSrD+UCLVSMpmRTQEYB+A
TLSH
T152734A17FB535715DA432E7D8A72C3A49B74FE29AE2DD70FF8417A62E88B1690C41308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Geist-SemiBold.ttf.new

Path C:\Spurdo\assets\fonts\Geist-SemiBold.ttf.new
Size 76KB
SHA256 11b980aa9cb939288617aab0d1afa842f9000427194b5f419dc1667bdbcd68a0
MD5 d61af3611dd7e4fd9dd08f99e64ec943
SHA1 247f5bf3871ba4891843f7483bef37848b4bcce9
SHA512 9b439fc4561a03a5e7696e8312d93df5078254c03d29c323e19686cae35bcec82c06425ecd0effdfbb98d8f153f9f7aadc8d2edc3350b275c1524de3ccdb4d00
SSDEEP 1536:PL2CHCP0cuGB8rW44PZ0SrBEq3WBnjUXNFlxrox+XDd+:PKCs0Hw8M6SrBEq3W5jOVxroxcs
TLSH
T159733A17BB569305DD026E7D86B6C7A053BCBC2DBE29D30FF8927E69FC872985801244
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GeistMono-Medium.ttf.new

Path C:\Spurdo\assets\fonts\GeistMono-Medium.ttf.new
Size 76KB
SHA256 c3abe0505993f3b3747ed05fffd124d110b46f96fd8b17ac69b77ad09302b970
MD5 28ef5d7e63e899b6a1329964148cb9a2
SHA1 d8bfa6203bb5360f4d5508e85320672cfdad5081
SHA512 714c7a106628a0586b1239b7adbe45933d16dd75c5fe1137f4e34c1c9ea823f87f0063017d8144337d2149d721d0b365f9430d1e1fcacf29bd00f68df17445c1
SSDEEP 1536:AbtI84VGB8Z8n/hVOz5QC8m3i22IZEqhRqa1zs6KO4xq:ALaw8GW8Mi22IZlLqa61O4xq
TLSH
T1C4731802FB135715F9120FB8527673B09364EF2B6B2BD71F9885A568AC875DC4A2C2CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GeistMono-Regular.ttf.new

Path C:\Spurdo\assets\fonts\GeistMono-Regular.ttf.new
Size 76KB
SHA256 a55c1b51cda4afeab9e471e7947b85a20f7c8831d7e6b1470c1b7fbdc0f0f15e
MD5 f84c9b172609157d69b10f78d5a27a94
SHA1 e38cca41bae7734a992897c770fe4757b706739e
SHA512 093ef00ea8bc827bebc19433b1a33668e92f525db66056a2524ed76682a689d2a31f01858a18af42c822febd2438471caca269854be9a7589479b294d9b2ea3a
SSDEEP 1536:rXh0z5VGB8Z85OmhPLqpVVga0jbYpZD4ZtoNuPh07oyqIm:rRM3w8GPOVVz0fYpB4wNu670R
TLSH
T162732A13EB125316F9420F79527377B09768EF2F3B2B971B8898B549AC872DD491C1C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tabler-icons.ttf.new

Path C:\Spurdo\assets\fonts\tabler-icons.ttf.new
Size 2.7MB
SHA256 bdd463aae8fc706301de6de489ac8429b3ccfbdee8cdf30dc18d647910ff5025
MD5 cc81d3954bfd5b8ad2d7f39ee482ca70
SHA1 81e2002943136bfddce77d8917ef6bdcefb6c000
SHA512 3cdc73b1ba9866eb15d3bc74c2497e1d6c820d5a5fd8052b035d69fd756bb1cf7b70addc3bbfc7d765f07ad254377686e5ce37910584852f9c89b11f932512c3
SSDEEP 49152:BdVBlTWZmnTjz/xyyGTmeN6gyJTffK6TDOS8g6fmkRAAq2SwrLV88rTyo/PyTQRc:Zx0TA
TLSH
T171D519CA5726C8DEB1B7A5AB4C90E04AC3D2E97C7117FC526BCD2367B5036D861F420A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat.new

Path C:\Spurdo\assets\libs\icudtl.dat.new
Size 10.0MB
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
TLSH
T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

156ea5b0-32d4-4140-b1fd-3562efe497b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\156ea5b0-32d4-4140-b1fd-3562efe497b5.tmp
Size 25KB
SHA256 d099302ddbab8136db08e4ac61d495623edf1de5a6f843123fe641f4b920a46c
MD5 2f1f2dbf8dc2763f6e2d3f7d82d172f9
SHA1 cd514c586157270886a2abace7a25da226d90580
SHA512 7f1dbdfd14288a2ad21b177896317565d847831b34a59eb09a3e7147819cfd698c9e0fd68fafe9b2148c62cf2b8976f1161c9ae68179e3f0d75d239989f4a105
SSDEEP 384:nFiFiZcIR3sNE8TUNTUlI4C5mgTId4zfMBhFd1rv0cLMYPlC1gL/7IzkoO:MFQR39wgwjLBhFdOc4YNCmN
TLSH
T188C23A71E8A9CDBBACEB8A95F3493A43EEF01163CA8C8AC4D5D95D1D00971DD170BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b3a6c49-f48b-4362-910a-39b32560458f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b3a6c49-f48b-4362-910a-39b32560458f.tmp
Size 26KB
SHA256 9923a10e2cd56d2a1277b52c3729b242a36301cc413a21901ea2eec990311ca5
MD5 a85fb689fc327b62253d75a9ece07592
SHA1 911fdebaafb46eb6954ddf5d1e311e38b4720bfd
SHA512 849a499c5719fa0f0b9734d6760455a1dde4cbfafe4739cee6d0ff5d89f7285bddef9e4d34948a27d989d7d99e5408f3db6fb6592b5a8d2d19662b628a202b59
SSDEEP 384:nRiFiZcI63sNQ8TUNTUlIm25mg0fO4zfMBhFd1rv0cLMYP9Csa+VYdzgL/7Izhop:4FQ63NwgSfgBhFdOc4YFChg++
TLSH
T13DC24B71E894C9ABECEB8BD5E78A3643DEF011A385CC9AC4D6D95D4D00871DD170BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3daf8176-f8fb-4817-b0ed-6e2f2d4488ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3daf8176-f8fb-4817-b0ed-6e2f2d4488ae.tmp
Size 25KB
SHA256 ba2f4a0c2043a044901d8541450fb4b3abb6b98b2876ab55c2678f5b70aa7dbd
MD5 9e75c077ae9bf9560ef7c0f6ce35c97b
SHA1 25cfab7428cd2039b6e3f885801a19e5a1b885ab
SHA512 1221b7a7d91dc96c923ce8951842807206bcd0ef2950be0e5a046a79a41ada5887c892c4ac3b75360ef6c86976050a1853b275b1fccbd5ebc94fb15f976c416c
SSDEEP 384:nQiFiZcI63sNp8TUNTUlIm25mg53n4zfMBhFd1rv0cLMYtgsa+VYdzgL/7Izhop:rFQ63wwgSUxBhFdOc4Ytghg++
TLSH
T140C23972EC98D9ABECEB8FD6A78A7A03DEF0016381DC59C4DAD95D4D009719D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

0b85d057-84f6-43a2-9bdf-91de4c379ced.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b85d057-84f6-43a2-9bdf-91de4c379ced.tmp
Size 12KB
SHA256 61ae78ba3193676d2cf428c8f06204b35b4e1dd575d9dc762db528d8c4b66fc9
MD5 2b6a84436b8227c5b8944c3aa13702dc
SHA1 84e10ca6812dc451ef0bf71c854885cb89748c27
SHA512 51d55f8658147404c7ee90582160c4dea0ca41aad8d6559c25533fd8b3c6841fd8a6de6c9cad0417986b7f053099a46d518e3299fab4b4a3d94ca48f680070bc
SSDEEP 192:sxZZRVjS/fnsdQZZNINAlzodptrHW6+WNcg//YbINhnYO9KIgjgJ:sxZZbS/fnsdOZNbu5Hbz/FbYpjE
TLSH
T18A42E815AD28A93B8CC7D219FA19BF53D3F95033A5941E48A6FCCA2C14EB6DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

30c1caa6-55b7-4aac-98b2-575514567bf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\30c1caa6-55b7-4aac-98b2-575514567bf2.tmp
Size 414B
SHA256 8570a23d5e03223a7eead674f277c28b281123f46fe43ac0192b7d925345a46c
MD5 213fa486ace0d6373ab21f0ea54f4200
SHA1 2b1946f2cdee9c2e9eac215c5e0381a12abf71c0
SHA512 20d59624599aa36f7324eccf0a7a4934fe21fe8305340484ec5f9c13e6b32e9c0e899ce5f55a7825672785803e87fd2aa2dc28e9f2b65418ecb9d81154ef1318
TLSH
T1EEE022E9C96ABC3B0CFC4B2954540B85EA41135B2B80998B3B3D911D8FB1B36428B96C
MD5 SHA1 SHA512 TLSH

Submit Download

71ea6d30-c475-4590-bcb8-c1a67db1df6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\71ea6d30-c475-4590-bcb8-c1a67db1df6e.tmp
Size 12KB
SHA256 8e09d1203ed3bd1dfd34595c98a309ea0e4cc2ca7318cd129671d9a75d543156
MD5 dab2d9446a18e116f699dbbb1fabb681
SHA1 f995071b5cae718aace272b9fcd1245fac518e41
SHA512 af5ef94190f9721b64e2857b57217aab13af5d772cb109b0ebac3e6fcd2bd4d793cf7db6678a89d6798302959d48b1e0193a29503c52a6bbbb197f4ecfcf380b
SSDEEP 192:sxZZRVjS/fnsUQZZNINAlzodptrHW6+WNcg//YbINUnYO9KIg5ugJ:sxZZbS/fnsUOZNbu5Hbz/FAYpsE
TLSH
T19342F815AD28A93B8CC7D21DFA55BF52D3F95032A5841E48A6FCCA2C05EBADD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eebbd7b-3d4d-4ff2-b3a2-7d724f9171cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9eebbd7b-3d4d-4ff2-b3a2-7d724f9171cb.tmp
Size 32KB
SHA256 086e4dadd2541ae80a71cabcca716c57c09fe0d4e1569fd75787ac3c81d93d2c
MD5 06a7530eb9f7b91e3588aa07de36f1be
SHA1 a3e442b064d6ef4b219c9469fa559b5465c30dc4
SHA512 c0bc4ad8d0ecde30cd326d901f9891398e14603cf2996e26590ac45540befbf08396ce6f34f6c9c4d7b402c617147176f10058555fe28ddbad7faa825b2ada5a
SSDEEP 768:0RyktjU7pLuLbvnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4wLWLlMC7fnroD:0RyktjYEbvnWvDBltu1ja5wLWLywf0LH
TLSH
T111E2EA3F780CCB7E4FC04E9DDD6A7E8B6DA802CB9598894047FA945C02C67EE511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 1ca4d0dddfafaa2c9012837fe66ec090252960abc5ebf177b25e0519df7f5462
MD5 32a80ca40c32cd92ebdcc8afe3a19e0f
SHA1 a1d1fe8d4ae5686db1263d623cfe66a758635c67
SHA512 20babbe09622060a07c675b4df44fdc23161588d59030928bd0abb8303bb4f111b964cd962b2ee598ae223a559edf4fef5d510af57043663f6dc64865801c9f3
TLSH
T1E151DAB87A9048D0F76C5C70D9DC2247FEF495843E935E4614A7E4B8A87A77CC0B1C50
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 105f438e51fe1d77a4333a86d2f3e73e7d33aaf91af35ef184cc44c9d40bc814
MD5 f2ca3b74b61b142d7aceaaa6905df9e8
SHA1 d92cd9673ef28172a5e437c0b0d38507629889b7
SHA512 e937854947c0be8aebef0cbadfd6a06a0746fef1509e806450e5c2936475b48daadca418cd75a7843208aeddfc317a03215dcb0e0407ab7d58c9b3242f3c68c1
TLSH
T10051D8B87A9088D0FB6C4871D9DC2247FEF485843E931E461597E8B8A87A77CC0B1850
MD5 SHA1 SHA512 TLSH

Submit Download

5830014c-b7a1-47ac-ba55-2cc7feb8ca15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5830014c-b7a1-47ac-ba55-2cc7feb8ca15.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

60a5f200-9a08-4b30-af84-0f46f8dc4fa1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60a5f200-9a08-4b30-af84-0f46f8dc4fa1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c21b7045-6181-4d5f-8f54-6625d0b5cd21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c21b7045-6181-4d5f-8f54-6625d0b5cd21.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 7d2874fe528a65e2fb4834b4b530421ec9e22786ea46df6042f88b1bc2936635
MD5 550eb2a1c67fb493d27500a3766a2c74
SHA1 97811cc21cbd34a1b3a7c9a35a2b468c9c899f2a
SHA512 23e5382dd63e9b67389ffb777ffafe4eb45f5efb32790f8aaa649b1a13441da8a09430c1ed423f64765565452a47720b828631ec40b2c3f67a5df1c87aab4bac
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXgDP0:OtfFvpopPxrB4Rhfgr0
TLSH
T167B2251571BA021138FE690C81B6872E064232B37158E67B7FBD14B69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da893003-acb3-44a7-9d8a-e1c28c062d43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\da893003-acb3-44a7-9d8a-e1c28c062d43.tmp
Size 27KB
SHA256 6373bda500a36c0904c7d9b9d5d9f50948334b12e5cc0715ad25c9c8ab1fbde3
MD5 b07520b2d9bfdcbc33d10106751494b6
SHA1 6f9aba109a62c4bc43da3cd997aa93c9ca41174a
SHA512 991a1dc7179872dd7dd7ed2fe34292e3003d13a0ee80b8177df928d280981d01699e64f3f801db335a6757e1a81fd9258df594b368f33507f1236a597d859626
SSDEEP 384:nFiFBQkUSvR3sNE8TUNTUlI4G5mgRId4zfMBhFd1rv0cLMYP+C2IQgL/7IzLIIla:MFzR39wgkZLBhFdOc4Y2C5sL4
TLSH
T11CC23A75E899DD6BECEB8A95F34A3683EEE01163C9888EC4D6C95D5C00C71DD270BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 12de46f3cc0152b73df0e1cf74af3d46e60930760641e6a456881522af714de5
MD5 6dc666426cd0e196531fdad0ef30ee3d
SHA1 36487001ebe9590cbc6871f3934050f04cb4b342
SHA512 7709c7bbf02b215ef951ff2d445984b10177d2d73baf28df7f5c9bbf055f27e0d7c971b617bd4d791ca2502bc833e4d329661bfaa9ef328703cd76b3347e1b04
TLSH
T12F412958B6FA1118B3B76F5AAFF6A9AE447EB8372F06D05D10110D4F0A66B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

say.cfg.new

Path C:\Users\Admin\AppData\Local\Spurdo\portable\web\assets\p1\0dp6BJ6msF2a\say.cfg.new
Size 64B
SHA256 2a222308951eb1caf7d184c7c1fb9ea01998b7ef1c522a1f4ae980ec9010734c
MD5 7bdb5cbd48e8ad69215b776fc08f548a
SHA1 a9658b2768fb505b38fe6abe1e75068a78dd0fb5
SHA512 906c0a7121078330e37e2bd6f27271888d3c75220b88687d1b3ebd92a6e94fafe1607e00bbeafd7f6c9506b15ed7a9d7bb5b8d5cab29fa4fe64f286b05e1ab04
TLSH
T192A0220A0C00000083030303E08300200F280022F023CE02028E02032082E00283A088
MD5 SHA1 SHA512 TLSH

Submit Download

disabled.cfg.new

Path C:\Users\Admin\AppData\Local\Spurdo\portable\web\assets\p1\R2cNMx9jlWsW\disabled.cfg.new
Size 58B
SHA256 133c4051d96fa2a99b54d451e0a0ffdfc363aa0c21a0a681b260e60864d9befb
MD5 c7f5961a4e9eb7a30286fb7ce2790155
SHA1 67ff5dac0337a9fc776799e3f979b81a416b1ed1
SHA512 cddcc109f098cefc22e42fda2395b78a87c4b09148a020a2a566eb7017d6943f02bcdd4f4c02a948a2305c2fb465b51fc01925b6ad9d31a551b238069a6318a0
TLSH
T11DA00237D01A00D4851F0D57B695C3C9810915214A17784B6640D5C52619014877011B
MD5 SHA1 SHA512 TLSH

Submit Download

default_avatar.png.new

Path C:\Users\Admin\AppData\Local\Spurdo\portable\web\assets\p1\aoZrU48PXog8\default_avatar.png.new
Size 23KB
SHA256 b530c9d2e8a9a05f475ee52bc54859b4d08faeac3f5c90bbb196f4c040396731
MD5 1e14e2054d1f7d56f2827cebf4c8e4ff
SHA1 2ccb8afdb34c4a21d7cf18a0182891359d9a14d3
SHA512 1a438d0fff86840335dbfccf9a59bdd14413d2ba92d9c10d4d3516524a0c2dd6e0d9d5a1cca2337165a41bac5a41153c0f00b463911cd16e248a321f5c4f067b
SSDEEP 384:NueAUEDug6plVLZ9b43+0iFZwW6W9O9jamxsoVASDAhiOgPAwdld:QeANaVLZZ+LiwW65jtsOhshTg46ld
TLSH
T17EB2CFB51F88825ED4295D3A027A1B3779B0AFCEF16504A266FBCEE0BC554F8C428758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

enabled.cfg.new

Path C:\Users\Admin\AppData\Local\Spurdo\portable\web\assets\p1\mSI7JiQTuXHW\enabled.cfg.new
Size 1KB
SHA256 9cfbd3e29e0602a6a5c01637b5fa29340d71347534f83f8e8c1f2d946bfa98b9
MD5 359ab0e629d1b1c89d83b40dbbd4e425
SHA1 904d9904d03e268fbe6e0d1d1ccc9faf2f283ddd
SHA512 99192c083773f927bd616ae9be4ff6fe7d42f39ed9ab84e57f715cd376c97bd42fe50b4a25f58445bc243b78e54c04ed9212e1bb53ec843d56fe9c68e0482509
TLSH
T16C316D38993F2678410DF5C3F3825E422F6A5A193B3B5EE829695A3D07453FCD781099
MD5 SHA1 SHA512 TLSH