ea8bb5b759998d781315696a3cdcba0d5bb23a70ce6765e5b0e65a915d2be5b6

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 07:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Network_Toolkit_1.17.149/Open_Terminal.cmd
Size 108B
Sample261102-jm698aat2n
SHA256 ea8bb5b759998d781315696a3cdcba0d5bb23a70ce6765e5b0e65a915d2be5b6
MD5 8be7ad5e129889c8dcec17b4506b04e8
SHA1 407dbfb871090f0735301e252034c458f5828552
SHA512 1e658fdd7fe4b824ba863e4d448c4b72958d55650c500529235ca677f3bfafd3b61834231b87ae8247a04cf53e2cc70cd2cdd387ebc4d63e486d2dada16843d7
TLSH
T141B012217C312416266B48D098773605742B914EE201C8F260505BAC044FE9DF1CD0C1
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery execution

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4820	cmd.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2280	msedgewebview2.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4820 wrote to memory of 3336	4820	cmd.exe	90
PID 3336 wrote to memory of 2280	3336	Network_Toolkit.exe	91
PID 2280 wrote to memory of 3196	2280	msedgewebview2.exe	92
PID 2280 wrote to memory of 1248	2280	msedgewebview2.exe	93
PID 2280 wrote to memory of 1248	2280	msedgewebview2.exe	93
PID 2280 wrote to memory of 1248	2280	msedgewebview2.exe	93
PID 2280 wrote to memory of 1248	2280	msedgewebview2.exe	93
PID 2280 wrote to memory of 3944	2280	msedgewebview2.exe	94
PID 2280 wrote to memory of 4472	2280	msedgewebview2.exe	95
PID 2280 wrote to memory of 4472	2280	msedgewebview2.exe	95
PID 2280 wrote to memory of 4472	2280	msedgewebview2.exe	95
PID 2280 wrote to memory of 2648	2280	msedgewebview2.exe	96
PID 2280 wrote to memory of 2648	2280	msedgewebview2.exe	96
PID 2280 wrote to memory of 2648	2280	msedgewebview2.exe	96
PID 2280 wrote to memory of 2648	2280	msedgewebview2.exe	96
PID 2280 wrote to memory of 2648	2280	msedgewebview2.exe	96

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.149\Open_Terminal.cmd"
1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:4820
- C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.149\Network_Toolkit.exe
  "C:\Users\Admin\AppData\Local\Temp\Network_Toolkit_1.17.149\Network_Toolkit.exe" --terminal
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3336
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.149 --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=3336.2788.15585725106906128367 /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2280
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView /prefetch:4 /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x140,0x194,0x7fff86025fd8,0x7fff86025fe4,0x7fff86025ff0
      4⤵
      PID:3196
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.149 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1740 --field-trial-handle=1748,i,8377568958278299283,16318913817936737432,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2
      4⤵
      PID:1248
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.149 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2220 --field-trial-handle=1748,i,8377568958278299283,16318913817936737432,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2
      4⤵
      PID:3944
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.149 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2272 --field-trial-handle=1748,i,8377568958278299283,16318913817936737432,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2
      4⤵
      PID:4472
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView" --webview-exe-name=Network_Toolkit.exe --webview-exe-version=1.17.149 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3508 --field-trial-handle=1748,i,8377568958278299283,16318913817936737432,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:8e9a8de97db462a1ed676ceff707dd0f5999cad2 /prefetch:1
      4⤵
      PID:2648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

890a4cac-13f2-4270-bcae-6e6bb42cecd7.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\890a4cac-13f2-4270-bcae-6e6bb42cecd7.tmp
Size 16KB
SHA256 4ac502d197ddbdf788d3557e14b1d06712f1bd7aa8b113fae1c843a979557fad
MD5 a9b0cb83ec4066f8b95ec814ce1b53eb
SHA1 b099aade14c454143c09f562fb8aabce449cdb11
SHA512 3c18b5a4a2f9e387761778341e249812eeb494b8e9d1b5df6dc33769b72b9fdfcf8e88086759846f37024494852d5bfb79f379f60829d2cbb663c1e9f779e4a2
SSDEEP 384:7+OBqImmJvGBLx3NaFMJFH3NBSd3ER1UXzfg6r6:icvGtlNHOgUjNe
TLSH
T1FF729E761C66AE373CF7CA09BA8F274BCB656293C0D57BD4D9EC8F0E016A4841392915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 219e26ee4fce3408b20429e1f5aef56007ec5725a3369e83be10a61ae40f68a4
MD5 000d22766caf8a1f3eba7d755da7c47a
SHA1 cfa4f92382755f05ad15b224689b155d663b211d
SHA512 076a281c26d96977f9494a12a1677598505f3e693166601a95e0412dab67658fd84fff57ead28553536c13495e1c374c4d245c05913f72f49b643fed97b4df18
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 37233e859a216a70da570efd20f802dae790cad4f9677d323125c8d283854a56
MD5 1931db84b511e97c9916b20de62b7e38
SHA1 56b87ac846157844c724b1474778e813c3f10ba8
SHA512 f69659dd0a5a7935d1571e8a9d922a9c65b1d76ef3cb7a0b33b66bb85c56ce43661a2f472a73b614666d78bb5a20428d75265fc0cae308efcc1b451bc9c802bb
TLSH
T112D01213B6020174C42034330052A3080401C11F404641057829851D2A544940D028C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9af4c623d07fbe4fba78fbd82baf168366eb33553e9b4325fb2c9f64bd3a19ea
MD5 9a9c2cf20712e9d2e36c73f68118e085
SHA1 cb7c7115bd5c82461bc541f3a346e6fda8cd7aed
SHA512 5baaf536861f73ec0eeb837f31ecaa1e246b1a6b2d30043994b515bafb83595be8292cfa9cac545a3c7c85d388ccae5a12e7ed434d4c3e54e4b6ec9fae7b07f1
TLSH
T1AAD02B1263010AB4C6302C330282D3051981F11F8002C11CB819C42C2D144D40E018C6
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 c2f7aa8db4cc17528159cbd683acec78f50e6b240072c232a8a678d1d0555a6e
MD5 00d13ea49dbb7de63602ec1625e11d7d
SHA1 14ff17b7ff269b5ef8d236fc502b23f0c6f258f4
SHA512 3724a29090c1cb43d1c8c58425e2cc5c76d139710d0ebad9251159c1dd306a0dbb67099d9ee798556f7fc95216836921b4b327809e46dfba64cf09529d09cbef
TLSH
T17631A650511D4468EB9B0F3295EDAA40347C2B5824BB6D727CA6D6F0504CBCDC855FBF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 c069a22917f20575586c75c5640593e5ffa0ac094c6eed24568001b219907098
MD5 db3f0fb98b7cbbcf967eeb4b4647170e
SHA1 978eda704d7041329fbf8d956a67967c033929b9
SHA512 9ab3a56ab9711fdb3946d657ea41761a09677c0a57ded783961cce8743fb46348c85027f526fc1506fe4ae3eb325a9671e434a9783626e7e29ad1baa47be09c0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\Local State
Size 1KB
SHA256 3833909ca39b2b9b520c46524230e6c4d7d45d7ba55313468a51b0dcdd5aacd4
MD5 f14954c8c38503c6c263dde9b827283c
SHA1 7a0a297b5905ae4a094dab3b8e659bae598bb184
SHA512 9fa5b7828f435bcc427021be97a3720da99e19126caf99885d00c748b99e8f421cf22b00dfa6107d97b634399e773f6cda65aa9bb16de99452050f205b3126cd
TLSH
T11C213573D5759B32AC91675B20576E4B9F22506B41909F007ADD8E1C02E34CCE2ABC37
MD5 SHA1 SHA512 TLSH

Submit Download

af265bbd-9de0-4984-9e37-83241face945.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\af265bbd-9de0-4984-9e37-83241face945.tmp
Size 3KB
SHA256 9c07736b3636cc38c135f65bdfdc61954ab4871f778b97c304b71c04996058bf
MD5 510c05e66ea118829d01e08596c4c616
SHA1 8219177fad8039049f5be98dfa45f6a2bd31a349
SHA512 eaeb1d5b7500b7ada2770dc3f2ec7adb808bbe7215fbf2fee6e38d699933b2e8aeec7125807bfb3922519c1af3f4389ebc3634ad6094e4465061295fa74e6ab3
TLSH
T1376175376975A6374DE29B15B8872B07ABA55067A5817F54DAEC0F0C01D72C82382C27
MD5 SHA1 SHA512 TLSH

Submit Download

c466cc55-8a17-491f-8cc9-de4f0ab6b38e.tmp

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.WebView2\EBWebView\c466cc55-8a17-491f-8cc9-de4f0ab6b38e.tmp
Size 2KB
SHA256 be6ac13148e5065e79c838703802229f51d1013e532adf0ce730a5d1687616de
MD5 4ee0bfe7c46711f03a1355c07539b598
SHA1 91c02301702db9ceb0ac3ea75736ae041c5e66d3
SHA512 83e4dd3d229d024244cdb161245781e2ec2fbef5481c18af92351e524d35eff9f4715ebc468d27497ca73c59052f94dde6ecdb78e6c8258e803f011afcd78022
TLSH
T1CF5195336925A73799A29B19794B2F13DF3690AA56913F10ABDC0F1C01D759C6382C37
MD5 SHA1 SHA512 TLSH

Submit Download

Network_Toolkit.instance.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.instance.json
Size 173B
SHA256 0773294fda4f21ee0e4c787d1f4b04966dda3d3946c599486861fe0c8f43b8c5
MD5 1d034268bb473377ffaa149883e041e8
SHA1 c75c80a4b5678be5b9026c1b0c421d7b52aa9c62
SHA512 8e62316a3d993ad5a4ed81845b6cdd8406d3dc75ad1ccf1f76295271e3212ffdff85cea95743cac8cbd172f6e9aa8f8da8fd3bf923c08252ef5fcd966488e127
TLSH
T1AFC0C01322E220533B10871084634D10C61B141C46514E008C0D282012E70BB880F14C
MD5 SHA1 SHA512 TLSH

Submit Download

Network_Toolkit.macros.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.macros.json
Size 52B
SHA256 a784157c025ec52e787f5d9fca06fb295744523f6b511607c4a12843f465ce6c
MD5 0591e9c6d22659fcecc09179adc76f66
SHA1 72d2d01152ea990b82945cc80943c7666c253c63
SHA512 ecc90ba75b8a5dac21717171cd6e125cb58cad1d4750fa81753917a32ee14a8423c7b8c0275f2020ad39ddce711551c4f8daa1b39c5c1103a7c38cdbf75d7ac7
TLSH
T15D900220B432547291C167340951C659DB908EF114A17594415F840843695342361112
MD5 SHA1 SHA512 TLSH

Submit Download

Network_Toolkit.settings.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.settings.json
Size 7KB
SHA256 5d04a4e4689958731c45b92e80e40f01e08ad6480817ca4071a6d3ead044ad62
MD5 f9958b32761b5410f130ddaed7ba2cb8
SHA1 16fa6ed8f965fb986be7e6d0e1b41fe0224ff00b
SHA512 559a726589ff53f83f91dae77864de799c12487b0d55dcbc08aca57245707c7f9f84fde163ee6a183ac5de9b503e818b55bb3efff8af258684ccd64f55108352
SSDEEP 96:cgEDvh4GY07+N2cl8A9FXtjF6Vg3hk2jc4j746QBJtTRex03yuzQmffnz1DwGokR:cEXD9FdjFc2BMNsyjF1DHoREfi18
TLSH
T169F18725DC350DB706D5713A587A02036634A5930D1E3C6C778E8A8C1F4EB7F20FA6AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network_Toolkit.settings.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.settings.json
Size 30B
SHA256 8c4dae3cadc7ade59f0a31487984a9ef3bbfcada37f74ef294893ef2c03222fb
MD5 af0224d3857fc78a4204b351fd3ad41a
SHA1 1c76df76665ca8785725311456a108ff3abfc406
SHA512 3454c56f25c65d38234081f8044838250df562ffcd159c2f0739435b4ea65631c306591628cb44f78987f783e7828ae872d2d9c220bf1bc8bca72e076649adb1
MD5 SHA1 SHA512

Submit Download

Network_Toolkit.ssh_known_hosts.json

Path C:\Users\Admin\AppData\Local\NetworkToolkit\Network_Toolkit.Terminal\Network_Toolkit.ssh_known_hosts.json
Size 25B
SHA256 0d696708e74cdae5abf4adee42a30bad769d37391d737b892a49cb3adc3e4370
MD5 f301e80eb6cef3124cc558864571463e
SHA1 34cf2327941bb03b6870949c2ce69fbc79b19f75
SHA512 d1045a76211d0777b02733eadedbecc9b0ee97a277c1d297ff93416d5c60bc14b079a72fde1d73bdddebcf37ed7e09d1b5d4f64586304b254d1c229a75fc141c
MD5 SHA1 SHA512

Submit Download

memory/1248-39-0x00007FFFA6D80000-0x00007FFFA6D81000-memory.dmp

Download

memory/1248-429-0x0000021EB1C00000-0x0000021EB1CA8000-memory.dmp

Download

memory/2648-136-0x00007FFFA6D80000-0x00007FFFA6D81000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads