Overview
overview
4Static
static
1admin/crea...act.js
windows10-2004-x64
3admin/crea...act.js
windows11-ltsc_2024-x64
3admin/dash...min.js
windows10-2004-x64
3admin/dash...min.js
windows11-ltsc_2024-x64
3admin/login_admin.js
windows10-2004-x64
3admin/login_admin.js
windows11-ltsc_2024-x64
3assets/boo...min.js
windows10-2004-x64
3assets/boo...min.js
windows11-ltsc_2024-x64
3assets/img...92.svg
windows10-2004-x64
3assets/img...92.svg
windows11-ltsc_2024-x64
4assets/img...12.svg
windows10-2004-x64
3assets/img...12.svg
windows11-ltsc_2024-x64
4assets/js/...min.js
windows10-2004-x64
3assets/js/...min.js
windows11-ltsc_2024-x64
3connection...ect.js
windows10-2004-x64
3connection...ect.js
windows11-ltsc_2024-x64
3partner_access.js
windows10-2004-x64
3partner_access.js
windows11-ltsc_2024-x64
3partner_exec.js
windows10-2004-x64
3partner_exec.js
windows11-ltsc_2024-x64
3register.js
windows10-2004-x64
3register.js
windows11-ltsc_2024-x64
3team/artif...der.js
windows10-2004-x64
3team/artif...der.js
windows11-ltsc_2024-x64
3team/artif...tor.js
windows10-2004-x64
3team/artif...tor.js
windows11-ltsc_2024-x64
3team/artifact_pdf.js
windows10-2004-x64
3team/artifact_pdf.js
windows11-ltsc_2024-x64
3team/dashboard.js
windows10-2004-x64
3team/dashboard.js
windows11-ltsc_2024-x64
3team/partn...ess.js
windows10-2004-x64
3team/partn...ess.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/10/2026, 12:09
Static task
static1
Behavioral task
behavioral1
Sample
admin/create_artifact.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
admin/create_artifact.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
admin/dashboard_admin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
admin/dashboard_admin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
admin/login_admin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
admin/login_admin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
assets/bootstrap/js/bootstrap.min.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
assets/bootstrap/js/bootstrap.min.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
assets/img/application-icon-192x192.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
assets/img/application-icon-192x192.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
assets/img/splash-screen-512x512.svg
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
assets/img/splash-screen-512x512.svg
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
assets/js/jquery.min.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
assets/js/jquery.min.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
connections/connect.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
connections/connect.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
partner_access.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
partner_access.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
partner_exec.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
partner_exec.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
register.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
register.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
team/artifact-template-builder.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
team/artifact-template-builder.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
team/artifact_executor.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
team/artifact_executor.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
team/artifact_pdf.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
team/artifact_pdf.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
team/dashboard.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
team/dashboard.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
team/partner_access.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
team/partner_access.js
Resource
win11ltsc2024-20260911-en
General
- Target assets/img/splash-screen-512x512.svg
- Size 1KB
- Sample261027-pbmdkade28
- SHA256 70dd6713e83c04d084a427da01aa17eaced6eb3ca4ab479821fba58e8898fd12
- MD5 72659835b4d47789564ffca41f5495fb
- SHA1 de263a8dc4a6679828d93c40252af47db8fb69af
- SHA512 add79d40af067070c25cc64698e60b284241d294394a5a655e836186bdab8741f447ee7e03fdce27dbdb8d0bd359533e6651a0d43ee275034662bb8f07ea13d4
- TLSH T100213354C7B14D7780A9C718A7B7D7002936829383A04BCCF3401A255E6A9F315697DF
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 808f3dde0c66dd01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\FileNames\ iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "3712645809" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\SuggestionsURLFallback = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}§ionHeight={ie:sectionHeight}&FORM=IE8SSC&market={language}" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\NTTopResultURL = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTTR" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a01934de0c66dd01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000053a5c49a9d82d8449ce7d7575a6bd78800000000020000000000106600000001000020000000bd66c14aea0f9a2b5de4852b1be39ab59b703f9049e49f576d53f92daffe93d9000000000e8000000002000020000000d3758bf84c8811037a564c56c6dc1d8956beb9be28bd87524637fd00dc2b2dae20000000145cd630f7e86d26c23179f77b7dca0c298d1b3a116d291e66cca326b0261cf240000000b861bc8a3c7e8e17728f9597643d8a203d377c64f69384bfeb47fd11f15f69880c68bd2e35b5fad1f143fe6fc9bbbfc84848bbe88326713b0bdebb3c828a997d iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames\en-US = "en-US.1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "499868276" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{08CC9529-D200-11F1-B7E7-5E640711BF8A} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\DisplayName = "Bing" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Version = "5" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\NTSuggestionsURL = "http://api.bing.com/qsml.aspx?query={searchTerms}&market={language}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}§ionHeight={ie:sectionHeight}&FORM=IENTSS" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\VersionManager iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\VersionManager IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000053a5c49a9d82d8449ce7d7575a6bd788000000000200000000001066000000010000200000007e3d7eb90b942fe589e5c7a3a01583babae2bd8cd3e7791634476c0d3df243f6000000000e80000000020000200000004bd042e53186cb94033889ee1b116d683403d81cb4e85e96e6381bf4cf82acc920000000bc6a36fc5af25db65f56e7fd83d8f116786b184fb4ab32593eb63708acea15d54000000006c87bb4556b5226660fc4a9e1ba5584f4a0548f2866ae1535273b32e41494c229d2f78e213f8ff3aabe7f2217ac5661e471150ec07400ea65e12c5688b02cbf iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\UpgradeTime = 16fc18bd3942dd01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconURLFallback = "http://www.bing.com/favicon.ico" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\SuggestionsURL = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}§ionHeight={ie:sectionHeight}&FORM=IE8SSC&market={language}" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\NTURL = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IENTSR" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\User Preferences iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\User Preferences\2BB20B33B4171CDAAB6469225AE6A582ED33D7B488 = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000053a5c49a9d82d8449ce7d7575a6bd7880000000002000000000010660000000100002000000005d2bae7a389c61f36499a8b5ad07541efe7b0f54846c98b07e138a669fbe75b000000000e8000000002000020000000bb0c6dc31eee18cc94b2865fc054769b744a0a7fa429a414b0599e865a9e3e2210000000ee7531f5dc7b1bf0858031c04f67023b40000000b652637b69826f94189fea5712162a34386365b48dae3fea9e044ab8ab48a72bc3c4c2341c49c8fc1c9ece6c94c4b750de93f935e8c819932b4d8121f9bf01cd iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\IESettingSync IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconURL = "http://www.bing.com/favicon.ico" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\User Preferences\3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31286796" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames\ iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\NTLogoPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\NTLogoURL = "http://go.microsoft.com/fwlink/?LinkID=403856&language={language}&scale={scalelevel}&contrast={contrast}" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateLowDateTime = "3719833150" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\Internet Explorer\VersionManager\LastCheckForUpdateHighDateTime = "31286796" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3188 iexplore.exe - Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3188 iexplore.exe 3188 iexplore.exe 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3188 wrote to memory of 2928 3188 iexplore.exe 83
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\assets\img\splash-screen-512x512.svg1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3188 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3188 CREDAT:17410 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2928
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959
- Size 471B
- SHA256 b8de7e94a4623204dc6106389acdbd1809b61bfaa341a30f772eaf30cac8cdc3
- MD5 153bf4040de2b2d7cc1e79af3e134669
- SHA1 f3c3e10128260600f854c5a83841332e69a7d5c3
- SHA512 95d4fa158fe6d1024cd6ac29bf4855ffe7a7d546c91c81fde25ebd7be3d337b2ceac798139adef8f860a376063296b70f8765c4f9ba0f730ad4e7a44e060f122
- TLSH T1CDF05447E069F4503DC144DC02D80A25303013B61886C055F1B408A10E383EA2E4F838
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_430EA0912164D1B129D6E1DC07C63959
- Size 416B
- SHA256 61b279fc16e485e3ff8ac5c3ee1443cf755acd5f9d1ba4ff20971db30591b5d6
- MD5 28eaff2bfaada5afbb1b06e6761e3c3e
- SHA1 e9f892e84c862895751252927c63ab83b67f1801
- SHA512 c8999ac7c85c13134ac87a18111827454fe67adb8556ef6004bcc2bc9e0ee1c9f13884192f2b70f871ef5dbbf907352e836c085384663460163047633d7d7f45
- TLSH T17DE0C03411FF011EF5F4E0344FD67426845DF1322419A2B42AD85F08B702A80AC03E2D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EQ5O6WBF\suggestions[1].en-US
- Size 17KB
- SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
- MD5 5a34cb996293fde2cb7a4ac89587393a
- SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
- SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
- SSDEEP 384:K4gN8sGygaEKfWYSJUKbO7UckxtBjCdY7mO3D0C5l+piEieDSV126ry1/XSGKwG3:K4gNFXiKfWfJ1Kockxbd7mAt5Mp5ie2F
- TLSH T13A823E4E61D88F57EA47B6B2D9084EA702E0C8794716DB93D62CFE63CDE33B25D02161
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LM36AMZP\favicon[1].ico
- Size 4KB
- SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
- MD5 da597791be3b6e732f0bc8b20e38ee62
- SHA1 1125c45d285c360542027d7554a5c442288974de
- SHA512 d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e
- SSDEEP 24:suZOWcCXPRS4QAUs/KBy3TYI42Apvl6wheXpktCH2Yn4KgISQggggFpz1k9PAYHu:HBRh+sCBykteatiBn4KWi1+Ne
- TLSH T1B9919C8A6AF4CD28CE621D24C53C52FD016BDE1DD19C2087D9E67F92323B96F91232C5
- MD5 SHA1 SHA512 SSDEEP TLSH