26dc42d31a272d885a1b57585222b3a96a030e71b3bca49c4a765df7d1e3515c

Resubmissions

15/07/2024, 17:05

240715-vl491stbmf8

15/07/2024, 17:02

240715-vj8jnazhpq6

Analysis

max time kernel
953s
max time network
950s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 17:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
view.html
Size 85KB
Sample240715-vl491stbmf
SHA256 26dc42d31a272d885a1b57585222b3a96a030e71b3bca49c4a765df7d1e3515c
MD5 8d9958bacbf150d5a50f2ba71dd4f2dd
SHA1 415b2d09410c4601d9323d10f5889900f5e88161
SHA512 0e3daadb61c6f3d6871ab866645008c7335e6521789c712f9ba3782e25e413244225a340ba6288da07543f960bea36766577a9b22f0b7a6dab8698a70d636349
SSDEEP 1536:jReHjGCio32iNy9xepU67DwCrskWp+19L:X4ceh2A
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Downloads MZ/PE file
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 15 IoCs

pid	Process
1508	7z2407-x64.exe
2128	7z2407-x64.exe
3672	7zG.exe
4944	SCPSL.exe
2872	SCPSL.exe
3280	winrar-x64-701.exe
3796	winrar-x64-701.exe
2520	winrar-x64-701.exe
944	7zG.exe
1496	SCPSL.exe
4344	UnityCrashHandler64.exe
1968	UnityCrashHandler64.exe
2548	SCPSL.exe
1784	UnityCrashHandler64.exe
4500	UnityCrashHandler64.exe

Loads dropped DLL 20 IoCs

pid	Process
3468	Process not Found
3672	7zG.exe
4944	SCPSL.exe
4944	SCPSL.exe
4944	SCPSL.exe
2872	SCPSL.exe
2872	SCPSL.exe
2872	SCPSL.exe
3468	Process not Found
4876	taskmgr.exe
4876	taskmgr.exe
944	7zG.exe
1496	SCPSL.exe
1496	SCPSL.exe
1496	SCPSL.exe
4344	UnityCrashHandler64.exe
2548	SCPSL.exe
2548	SCPSL.exe
2548	SCPSL.exe
1784	UnityCrashHandler64.exe

Blocklisted process makes network request 1 IoCs

flow	pid	Process
246	4308	msiexec.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service

T1102

flow	ioc
26	drive.google.com
28	drive.google.com
157	drive.google.com
159	drive.google.com

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\exe\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\combase.pdb	UnityCrashHandler64.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Mono\bin\installvst	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.1-api\System.Windows.Forms.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile344\SupportedFrameworks\Windows 8.xml	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\gac\System.Reactive.Runtime.Remoting\2.2.0.0__31bf3856ad364e35\System.Reactive.Runtime.Remoting.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\Facades\System.Xml.XPath.XDocument.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5\Mono.Cecil.VB.Pdb.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\Facades\System.ServiceModel.NetTcp.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild\Microsoft\Microsoft.NET.Build.Extensions\net461\lib\System.Xml.XPath.XDocument.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.Cairo.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v11.0\FSharp\Microsoft.FSharp.Targets	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5\Mono.Messaging.dll	msiexec.exe
File created	C:\Program Files\Mono\bin\crlupdate	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\Sdks\Microsoft.NET.Sdk.Publish\tools\net46\en-US\Microsoft.Web.Delegation.resources.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild\Microsoft\Microsoft.NET.Build.Extensions\tools\net46\tr\Microsoft.NET.Build.Extensions.Tasks.resources.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\pkgconfig\dotnet.pc	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\Microsoft.VisualBasic.CrossTargeting.targets	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile92\System.ServiceModel.Web.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5-api\Microsoft.VisualBasic.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\System.Data.Linq.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\Facades\System.IO.FileSystem.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\Mono.Posix.dll	msiexec.exe
File created	C:\Program Files\Mono\bin\xbuild	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5.1-api\System.Reactive.Runtime.Remoting.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\ru\Microsoft.Build.Utilities.Core.resources.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.6.1-api\Mono.CompilerServices.SymbolWriter.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.6.2-api\Facades\System.Reflection.Extensions.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild\Microsoft\Microsoft.NET.Build.Extensions\net461\lib\System.Threading.Overlapped.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5\System.Core.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile47\RedistList\FrameworkList.xml	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\gac\System.Security\4.0.0.0__b03f5f7f11d50a3a\System.Security.pdb	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5\System.ServiceModel.Discovery.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.1-api\System.ServiceModel.Activation.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\Sdks\Microsoft.NET.Sdk\targets\Microsoft.NET.ObsoleteReferences.targets	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7-api\Facades\System.Runtime.Extensions.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7-api\System.Drawing.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile240\System.Xml.Serialization.dll	msiexec.exe
File created	C:\Program Files\Mono\bin\chktrust.bat	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\Roslyn\csi.rsp	msiexec.exe
File created	C:\Program Files\Mono\bin\xsp2.bat	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.6.2-api\System.Web.Razor.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.Security.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Reflection.Extensions.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.0-api\ICSharpCode.SharpZipLib.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7-api\System.Threading.Tasks.Dataflow.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile158\SupportedFrameworks\MonoTouch.xml	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5.2-api\Facades\System.Threading.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\ironruby\IronRuby.Tests.exe.config	msiexec.exe
File opened for modification	C:\Program Files\7-Zip\Lang\hi.txt	7z2407-x64.exe
File created	C:\Program Files\Mono\lib\mono\4.7.2-api\Mono.Security.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETFramework\v4.6.2\RedistList\FrameworkList.xml	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile6\System.Xml.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\mscorlib.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5.2-api\I18N.Rare.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile78\System.Globalization.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5.2-api\Mono.C5.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\xsp\test\1.1\asp.net\codebehind1.aspx	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5.2-api\System.Reactive.Windows.Threading.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\2.0-api\System.Reactive.PlatformServices.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.ObjectModel.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.7-api\System.IdentityModel.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.5\WindowsBase.dll	msiexec.exe
File created	C:\Program Files\Mono\lib\mono\4.6.2-api\I18N.CJK.dll	msiexec.exe
File opened for modification	C:\Program Files\7-Zip\Lang\si.txt	7z2407-x64.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sv.txt	7z2407-x64.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	msiexec.exe
File opened for modification	C:\Windows\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\vccorlib140.dll.363ED482_721F_3A34_85B3_A96CD936D64F	msiexec.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\kernel32.pdb	SCPSL.exe
File created	C:\Windows\Installer\e65368d.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0	msiexec.exe
File opened for modification	C:\Windows\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\vcruntime140.dll.363ED482_721F_3A34_85B3_A96CD936D64F	msiexec.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\msvcp140.dll.363ED482_721F_3A34_85B3_A96CD936D64F	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\msvcp140.dll.363ED482_721F_3A34_85B3_A96CD936D64F	msiexec.exe
File opened for modification	C:\Windows\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\exe\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\d3d11.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\MSI42B2.tmp	msiexec.exe
File created	C:\Windows\Installer\e65368f.msi	msiexec.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279	msiexec.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	SCPSL.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\symbols\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	msiexec.exe
File opened for modification	C:\Windows\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	SCPSL.exe
File opened for modification	C:\Windows\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\combase.pdb	UnityCrashHandler64.exe
File created	C:\Windows\Installer\SourceHash{B164CF7E-892F-4CF8-A753-3239D3102F97}	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\E7FC461BF2988FC47A3523933D01F279\5.18.0\F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA	msiexec.exe
File opened for modification	C:\Windows\symbols\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\d3d11.pdb	SCPSL.exe
File opened for modification	C:\Windows\ntdll.pdb	SCPSL.exe
File opened for modification	C:\Windows\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win32_x64_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\WindowsPlayer_x64_Master_mono.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1"	svchost.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\Downloads\\Release 8.0.1 (Revision III)\\Release 8.0.1 (Revision III)\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip	7z2407-x64.exe
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip	7z2407-x64.exe
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E7FC461BF2988FC47A3523933D01F279\ProductFeature	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\PackageName = "mono.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E7FC461BF2988FC47A3523933D01F279\VCRedist2013	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\Media\1 = ";"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\DD2E85F1A88DD2046AF72AE7E1AFFA84	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2990742725-2267136959-192470804-1000\{3AE91F71-44D7-4285-BE53-A7CE52C5D078}	svchost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\DD2E85F1A88DD2046AF72AE7E1AFFA84\E7FC461BF2988FC47A3523933D01F279	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\Media\2 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip	7z2407-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\Version = "85065728"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\Net\1 = "C:\\Users\\Admin\\Downloads\\Release 8.0.1 (Revision III)\\Release 8.0.1 (Revision III)\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\Media\3 = ";"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip	7z2407-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip32.dll"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\7-Zip	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E7FC461BF2988FC47A3523933D01F279	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E7FC461BF2988FC47A3523933D01F279\VCRedist2015	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\ = "7-Zip Shell Extension"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\7-Zip\ = "{23170F69-40C1-278A-1000-000100020000}"	7z2407-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E7FC461BF2988FC47A3523933D01F279\ProductIcon = "C:\\Windows\\Installer\\{B164CF7E-892F-4CF8-A753-3239D3102F97}\\app.ico"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ = "C:\\Program Files\\7-Zip\\7-zip.dll"	7z2407-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32\ThreadingModel = "Apartment"	7z2407-x64.exe

NTFS ADS 4 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\LocalLow\Hubert Moszka\SCP_ Secret Laboratory\Crashes\Crash_2024-07-15_171016\:\Users\Admin\AppData\LocalLow\Hubert Moszka\SCP_ Secret Laboratory\output_log.txt	SCPSL.exe
File created	C:\Users\Admin\AppData\LocalLow\Hubert Moszka\SCP_ Secret Laboratory\Crashes\Crash_2024-07-15_171052\:\Users\Admin\AppData\LocalLow\Hubert Moszka\SCP_ Secret Laboratory\output_log.txt	SCPSL.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 701120.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 947226.crdownload:SmartScreen	msedge.exe

Opens file in notepad (likely ransom note) 3 IoCs

ransomware

pid	Process
1324	NOTEPAD.EXE
2124	NOTEPAD.EXE
1884	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
208	msedge.exe
208	msedge.exe
4492	msedge.exe
4492	msedge.exe
4504	identity_helper.exe
4504	identity_helper.exe
4572	msedge.exe
4572	msedge.exe
920	msedge.exe
920	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
448	msedge.exe
4228	msedge.exe
4228	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 6 IoCs

pid	Process
3672	7zG.exe
4740	OpenWith.exe
2608	OpenWith.exe
944	7zG.exe
4876	taskmgr.exe
4428	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	3672	7zG.exe
Token: 35	3672	7zG.exe
Token: SeSecurityPrivilege	3672	7zG.exe
Token: SeSecurityPrivilege	3672	7zG.exe
Token: 33	1144	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1144	AUDIODG.EXE
Token: SeDebugPrivilege	4876	taskmgr.exe
Token: SeSystemProfilePrivilege	4876	taskmgr.exe
Token: SeCreateGlobalPrivilege	4876	taskmgr.exe
Token: SeRestorePrivilege	944	7zG.exe
Token: 35	944	7zG.exe
Token: SeSecurityPrivilege	944	7zG.exe
Token: SeSecurityPrivilege	944	7zG.exe
Token: 33	3128	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3128	AUDIODG.EXE
Token: SeShutdownPrivilege	4308	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4308	msiexec.exe
Token: SeSecurityPrivilege	3280	msiexec.exe
Token: SeCreateTokenPrivilege	4308	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4308	msiexec.exe
Token: SeLockMemoryPrivilege	4308	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4308	msiexec.exe
Token: SeMachineAccountPrivilege	4308	msiexec.exe
Token: SeTcbPrivilege	4308	msiexec.exe
Token: SeSecurityPrivilege	4308	msiexec.exe
Token: SeTakeOwnershipPrivilege	4308	msiexec.exe
Token: SeLoadDriverPrivilege	4308	msiexec.exe
Token: SeSystemProfilePrivilege	4308	msiexec.exe
Token: SeSystemtimePrivilege	4308	msiexec.exe
Token: SeProfSingleProcessPrivilege	4308	msiexec.exe
Token: SeIncBasePriorityPrivilege	4308	msiexec.exe
Token: SeCreatePagefilePrivilege	4308	msiexec.exe
Token: SeCreatePermanentPrivilege	4308	msiexec.exe
Token: SeBackupPrivilege	4308	msiexec.exe
Token: SeRestorePrivilege	4308	msiexec.exe
Token: SeShutdownPrivilege	4308	msiexec.exe
Token: SeDebugPrivilege	4308	msiexec.exe
Token: SeAuditPrivilege	4308	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4308	msiexec.exe
Token: SeChangeNotifyPrivilege	4308	msiexec.exe
Token: SeRemoteShutdownPrivilege	4308	msiexec.exe
Token: SeUndockPrivilege	4308	msiexec.exe
Token: SeSyncAgentPrivilege	4308	msiexec.exe
Token: SeEnableDelegationPrivilege	4308	msiexec.exe
Token: SeManageVolumePrivilege	4308	msiexec.exe
Token: SeImpersonatePrivilege	4308	msiexec.exe
Token: SeCreateGlobalPrivilege	4308	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe
Token: SeTakeOwnershipPrivilege	3280	msiexec.exe
Token: SeRestorePrivilege	3280	msiexec.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
1508	7z2407-x64.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe
4876	taskmgr.exe

Suspicious use of SetWindowsHookEx 49 IoCs

pid	Process
1508	7z2407-x64.exe
3532	OpenWith.exe
2032	OpenWith.exe
2128	7z2407-x64.exe
4944	SCPSL.exe
4740	OpenWith.exe
2872	SCPSL.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
2608	OpenWith.exe
3280	winrar-x64-701.exe
3280	winrar-x64-701.exe
3280	winrar-x64-701.exe
3796	winrar-x64-701.exe
3796	winrar-x64-701.exe
3796	winrar-x64-701.exe
2520	winrar-x64-701.exe
2520	winrar-x64-701.exe
2520	winrar-x64-701.exe
1496	SCPSL.exe
4428	OpenWith.exe
2548	SCPSL.exe
1592	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 4800	4492	msedge.exe	83
PID 4492 wrote to memory of 4800	4492	msedge.exe	83
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 4756	4492	msedge.exe	84
PID 4492 wrote to memory of 208	4492	msedge.exe	85
PID 4492 wrote to memory of 208	4492	msedge.exe	85
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86
PID 4492 wrote to memory of 5032	4492	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\view.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ccfe46f8,0x7ff8ccfe4708,0x7ff8ccfe4718
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1876 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1312 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2100 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7288 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:920
- C:\Users\Admin\Downloads\7z2407-x64.exe
  "C:\Users\Admin\Downloads\7z2407-x64.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5484 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1764 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2520 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2668 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8164 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6616 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3352 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2000,17684906917163327105,2410125494492548999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3300
- C:\Users\Admin\Downloads\winrar-x64-701.exe
  "C:\Users\Admin\Downloads\winrar-x64-701.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3280
- C:\Users\Admin\Downloads\winrar-x64-701.exe
  "C:\Users\Admin\Downloads\winrar-x64-701.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:3796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3320

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3532

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2032

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4624

C:\Users\Admin\Downloads\7z2407-x64.exe
"C:\Users\Admin\Downloads\7z2407-x64.exe"
1⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2128

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap5337:74:7zEvent15771
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:3672

C:\Users\Admin\Downloads\0.4.2b\SCPSL.exe
"C:\Users\Admin\Downloads\0.4.2b\SCPSL.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:4944

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x40c 0x498
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1144

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4740

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:1648

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\0.4.2b\readme.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1324

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\0.4.2b\steam_appid.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2124

C:\Users\Admin\Downloads\0.4.2b\SCPSL.exe
"C:\Users\Admin\Downloads\0.4.2b\SCPSL.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:2872

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:1700

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2608
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\0.4.2b\SCPSL_Data\Plugins\CSteamworks.dll
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:1884

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:4876

C:\Users\Admin\Downloads\winrar-x64-701.exe
"C:\Users\Admin\Downloads\winrar-x64-701.exe"
1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:2520

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\20cbc52159eb487a983fe2b83b642326 /t 4420 /p 2520
1⤵
PID:5000

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\" -ad -an -ai#7zMap23637:118:7zEvent1399
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:944

C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\SCPSL.exe
"C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\SCPSL.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:1496
- C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe
  "C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe" --attach 1496 2422813364224
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Drops file in Windows directory
  PID:4344
- - C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe
    "C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe" "1496" "2422813364224"
    3⤵
    - Executes dropped EXE
    PID:1968

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x40c 0x498
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3128

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4428

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
PID:3860

C:\Windows\System32\msiexec.exe
"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\mono.msi"
1⤵
- Blocklisted process makes network request
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
PID:4308

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:3280

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\readme.txt
1⤵
PID:3848

C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\SCPSL.exe
"C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\SCPSL.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:2548
- C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe
  "C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe" --attach 2548 2189590007808
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Drops file in Windows directory
  PID:1784
- - C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe
    "C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\UnityCrashHandler64.exe" "2548" "2189590007808"
    3⤵
    - Executes dropped EXE
    PID:4500

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1592

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
PID:1560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e65368e.rbs

Path C:\Config.Msi\e65368e.rbs
Size 1.3MB
SHA256 8de04a968e09aa56568d8b2d7caf3b8cf7a821475647cc817761834d4deb95ca
MD5 477c3d31926d5fda33be2f148545043a
SHA1 368f8eaaa21399f797d94e3735386a3af9e3d622
SHA512 ed8b7e77be96515fc5a9d9e2781721bcc8f60fa4cbba764cc9b1ba7cf388cf858f6c7e412e3c72ed4e6eaa2d856b997a75e42715d91f90c11db3a714109acb7b
SSDEEP 6144:HpeBqMxzlmd3X+ph/FvrHWWobF8fMRULzC0GB/0kIbXQlptPoNBSoo18zf:Sq93X+r9yWobX+zzG8TYptWIooS
MD5 SHA1 SHA512 SSDEEP

Submit Download

7-zip.chm

Path C:\Program Files\7-Zip\7-zip.chm
Size 117KB
SHA256 2d55ca494a8b6dcc739d84bdd112f5c50d612f8abf409c9fb5f2b5c2c84c37a0
MD5 b79894fbee3c882c3efc71ff3d4a21bb
SHA1 8bb4fa0e32cc892f8be396dbaa35acef7a53e36e
SHA512 b66a75ee3831c56967e2c64f8c9ba434f3cd9e4dc4c4fa79580e5ef81e8595863a477ce487921d46891bffcb31c6d45ea332e441c5c26df9a1ee59c0769f32b6
SSDEEP 3072:qM3Z/34Zzh/xqhrCG2dmQYsu7OBhZPUiuddwBf:hZP2t/xAe7gP60ddu
MD5 SHA1 SHA512 SSDEEP

Submit Download

7zFM.exe

Path C:\Program Files\7-Zip\7zFM.exe
Size 960KB
SHA256 5bc65256b92316f7792e27b0111e208aa6c27628a79a1dec238a4ad1cc9530f7
MD5 79e8ca28aef2f3b1f1484430702b24e1
SHA1 76087153a547ce3f03f5b9de217c9b4b11d12f22
SHA512 b8426b44260a3adcbeaa38c5647e09a891a952774ecd3e6a1b971aef0e4c00d0f2a2def9965ee75be6c6494c3b4e3a84ce28572e376d6c82db0b53ccbbdb1438
SSDEEP 12288:pAwMpB2IhUu/W3jZG6UTpwGSR9l99rMoTrQL+bmYRlj6gq5KKhf8/:qbpGyWzZG6UTpH6f9QoTlxL25KKhf8
MD5 SHA1 SHA512 SSDEEP

Submit Download

af.txt

Path C:\Program Files\7-Zip\Lang\af.txt
Size 4KB
SHA256 9cf684ea88ea5a479f510750e4089aee60bbb2452aa85285312bafcc02c10a34
MD5 df216fae5b13d3c3afe87e405fd34b97
SHA1 787ccb4e18fc2f12a6528adbb7d428397fc4678a
SHA512 a6eee3d60b88f9676200b40ca9c44cc4e64cf555d9b8788d4fde05e05b8ca5da1d2c7a72114a18358829858d10f2beff094afd3bc12b370460800040537cff68
SSDEEP 96:bdDW+Wz9my7MIlXq2sQqpxjOsgEGh4YdVDpZfir99v7+bv:sfwy7XlXq2sfpxjOsRGhfVDpZfCji
MD5 SHA1 SHA512 SSDEEP

Submit Download

an.txt

Path C:\Program Files\7-Zip\Lang\an.txt
Size 7KB
SHA256 3ab9f7aacd38c4cde814f86bc37eec2b9df8d0dddb95fc1d09a5f5bcb11f0eeb
MD5 f16218139e027338a16c3199091d0600
SHA1 da48140a4c033eea217e97118f595394195a15d5
SHA512 b2e99d70d1a7a2a1bfa2ffb61f3ca2d1b18591c4707e4c6c5efb9becdd205d646b3baa0e8cbd28ce297d7830d3dfb8f737266c66e53a83bdbe58b117f8e3ae14
SSDEEP 96:/iCx+nicrSC2WgvUZ8I/MbcGr74hjN8H7+UeT5xMWcZlFi6lCg6l+Rl2NIqpClH5:/OnVInvQ5kN74nK+febFi6Yg62I7bPFI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ar.txt

Path C:\Program Files\7-Zip\Lang\ar.txt
Size 12KB
SHA256 85a26c7b59d6d9932f71518ccd03eceeba42043cb1707719b72bfc348c1c1d72
MD5 5747381dc970306051432b18fb2236f2
SHA1 20c65850073308e498b63e5937af68b2e21c66f3
SHA512 3306e15b2c9bb2751b626f6f726de0bcafdc41487ba11fabfcef0a6a798572b29f2ee95384ff347b3b83b310444aaeec23e12bb3ddd7567222a0dd275b0180ff
SSDEEP 384:Z/YybL3XSV+HYFBLRTRZgZCjWg6IvLDlaJQZmbghr0MhI05z:F3XIBLRMZCjWgfvLpGQZcghrvIC
MD5 SHA1 SHA512 SSDEEP

Submit Download

az.txt

Path C:\Program Files\7-Zip\Lang\az.txt
Size 9KB
SHA256 055ec86aed86abbdbd52d8e99fec6e868d073a6df92c60225add16676994c314
MD5 3c297fbe9b1ed5582beabfc112b55523
SHA1 c605c20acf399a90ac9937935b4dbdb64fad9c9f
SHA512 417984a749471770157c44737ee76bfd3655ef855956be797433dadc2a71e12359454cc817b5c31c6af811067d658429a8706e15625bf4ca9f0db7586f0ae183
SSDEEP 192:ze8r7alD8BavrdGWTTB6wSOzGYcf4j0GgbX8SvggPrPnt:6eAD8Born6pAGYcfvbXQgDPt
MD5 SHA1 SHA512 SSDEEP

Submit Download

ba.txt

Path C:\Program Files\7-Zip\Lang\ba.txt
Size 10KB
SHA256 8a85c3fcb5f81157490971ee4f5e6b9e4f80be69a802ebed04e6724ce859713f
MD5 387ff78cf5f524fc44640f3025746145
SHA1 8480e549d00003de262b54bc342af66049c43d3b
SHA512 7851633ee62c00fa2c68f6f59220a836307e6dde37eae5e5dca3ca254d167e305fe1eb342f93112032dadafe9e9608c97036ac489761f7bdc776a98337152344
SSDEEP 192:EG9NeKlSU9fV6kPtwusVom5DvB4UlBFXCsMu:EG9FlSU9fV6kPt+hvBPLFXCE
MD5 SHA1 SHA512 SSDEEP

Submit Download

be.txt

Path C:\Program Files\7-Zip\Lang\be.txt
Size 11KB
SHA256 32071222af04465a3d98bb30e253579aa4beceaeb6b21ac7c15b25f46620bf30
MD5 b1dd654e9d8c8c1b001f7b3a15d7b5d3
SHA1 5a933ae8204163c90c00d97ba0c589f4d9f3f532
SHA512 0137900aeb21f53e4af4027ea15eed7696ed0156577fe6194c2b2097f5fb9d201e7e9d52a51a26ae9a426f8137692154d80676f8705f335fed9ae7e0e1d0a10e
SSDEEP 192:voiIwxssHdMMybRMIc++NBGC4ci/4f/iv1GBSHlzdRCU39ixod9t:voJ4s8SKs+NBDkA/m1GBSHlzdvMEX
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg.txt

Path C:\Program Files\7-Zip\Lang\bg.txt
Size 17KB
SHA256 62c6f410d011a109abecb79caa24d8aeb98b0046d329d611a4d07e66460eef3f
MD5 2d0c8197d84a083ef904f8f5608afe46
SHA1 5ae918d2bb3e9337538ef204342c5a1d690c7b02
SHA512 3243d24bc9fdb59e1964e4be353c10b6e9d4229ef903a5ace9c0cb6e1689403173b11db022ca2244c1ef0f568be95f21915083a8c5b016f07752026d332878a4
SSDEEP 384:MZ2tO2YSwozmsZ9mFL7AsbjftmxprJ4kgy0j7u4ybq:dCz7lbjaVgyCufq
MD5 SHA1 SHA512 SSDEEP

Submit Download

br.txt

Path C:\Program Files\7-Zip\Lang\br.txt
Size 4KB
SHA256 432bdb3eaa9953b084ee14eee8fe0abbc1b384cbdd984ccf35f0415d45aabba8
MD5 07504a4edab058c2f67c8bcb95c605dd
SHA1 3e2ae05865fb474f10b396bfefd453c074f822fa
SHA512 b3f54d695c2a12e97c93af4df09ce1800b49e40302bec7071a151f13866edfdfafc56f70de07686650a46a8664608d8d3ea38c2939f2f1630ce0bf968d669ccc
SSDEEP 96:uyzeGsp9Qb9PzXHsRu2aPm68ZMvpZkul6Wg1AQQYBgJ0ZQBGBl6agPNH20qIvUkw:FzeGsbSu9y8WvpZR6W+AQQYG8LgFW01S
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca.txt

Path C:\Program Files\7-Zip\Lang\ca.txt
Size 8KB
SHA256 07b5c0ac13d62882bf59db528168b6f0ffdf921d5442fae46319e84c90be3203
MD5 264fb4b86bcfb77de221e063beebd832
SHA1 a2eb0a43ea4002c2d8b5817a207eb24296336a20
SHA512 8d1a73e902c50fd390b9372483ebd2ec58d588bacf0a3b8c8b9474657c67705b6a284bb16bba4326d314c7a3cc11caf320da38d5acb42e685ed2f8a8b6f411f4
SSDEEP 192:3nw9pDahG/twoHcW5W3PpCPa5zRHKDBZ0EeKIl3d10aeKY8FDiM:yDGG/twoHJ5Wf9i0EpTAiM
MD5 SHA1 SHA512 SSDEEP

Submit Download

co.txt

Path C:\Program Files\7-Zip\Lang\co.txt
Size 11KB
SHA256 dcfb95b47a4435eb7504b804da47302d8a62bbe450dadf1a34baea51c7f60c77
MD5 de64842f09051e3af6792930a0456b16
SHA1 498b92a35f2a14101183ebe8a22c381610794465
SHA512 5dabeed739a753fd20807400dfc84f7bf1eb544704660a74afcf4e0205b7c71f1ddcf9f79ac2f7b63579735a38e224685b0125c49568cbde2d9d6add4c7d0ed8
SSDEEP 192:arUs6wOYcVCr1oX7A18zsuX/Y0Nf+6X5gOiAKNWw9BfpN5uc7Fd5:arWwzTr1oM1fuPJNf+26ORwAYH
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs.txt

Path C:\Program Files\7-Zip\Lang\cs.txt
Size 9KB
SHA256 a6e329f37aca346ef64f2c08cc36568d5383d5b325c0caf758857ed3ff3953f2
MD5 dbdcfc996677513ea17c583511a5323b
SHA1 d655664bc98389ed916bed719203f286bab79d3c
SHA512 df495a8e8d50d7ec24abb55ce66b7e9b8118af63db3eb2153a321792d809f7559e41de3a9c16800347623ab10292aac2e1761b716cb5080e99a5c8726f7cc113
SSDEEP 192:iqJoMyxE8vGIrd+ic1OT1o+SXhbStCBJjSvcQKiw:iEXYBeIrQiEOT1o+SXotsJjmK7
MD5 SHA1 SHA512 SSDEEP

Submit Download

cy.txt

Path C:\Program Files\7-Zip\Lang\cy.txt
Size 4KB
SHA256 470eaf5e67f5ead5b8c3ecc1b5b21b29d16c73591eb0047b681660346e25b3fb
MD5 6bdf25354b531370754506223b146600
SHA1 c2487c59eeeaa5c0bdb19d826fb1e926d691358e
SHA512 c357b07c176175cc36a85c42d91b0cada79dbfb584bdf57f22a6cb11898f88aecf4392037d5cea3e1bc02df7493bb27b9509226f810f1875105bbc33c6ae3f20
SSDEEP 96:8VTu+i2nCrWTXAwQGjC6IF5/uNXlziug14+UFxmeeqYgzf7Edm+8VR:8VTTCqTRC6Iv/uzg14+UFxJYgzTR
MD5 SHA1 SHA512 SSDEEP

Submit Download

da.txt

Path C:\Program Files\7-Zip\Lang\da.txt
Size 7KB
SHA256 5ccd481367f7d8c544de6177187aff53f1143ae451ae755ce9ed9b52c5f5d478
MD5 c397e8ac4b966e1476adbce006bb49e4
SHA1 3e473e3bc11bd828a1e60225273d47c8121f3f2c
SHA512 cbbece415d16b9984c82bd8fa4c03dbd1fec58ed04e9ef0a860b74d451d03d1c7e07b23b3e652374a3b9128a7987414074c2a281087f24a77873cc45ec5aadd2
SSDEEP 192:3vn3kbZyZSXQVPLCXiG8gYnJYZDAHZE9xM7T9kur4Yc6Fw9KHl:3v3tSAVPG8gYnJYZk+g7T9kur4PUwG
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.txt

Path C:\Program Files\7-Zip\Lang\de.txt
Size 9KB
SHA256 895f76bfa4b1165e4c5a11bdab70a774e7d05d4bbdaec0230f29dcc85d5d3563
MD5 1e30a705da680aaeceaec26dcf2981de
SHA1 965c8ed225fb3a914f63164e0df2d5a24255c3d0
SHA512 ff96e6578a1ee38db309e72a33f5de7960edcc260ca1f5d899a822c78595cc761fedbdcdd10050378c02d8a36718d76c18c6796498e2574501011f9d988da701
SSDEEP 192:AOIdBgDuDCfSGltxkRtDgfglyLCoMUGfZsDZIXl7OuKtgAZOKY3gTFFGFe6muWxW:/GgD9Si+bDgfgly4vZ3l7OuKOTgbGFkg
MD5 SHA1 SHA512 SSDEEP

Submit Download

el.txt

Path C:\Program Files\7-Zip\Lang\el.txt
Size 17KB
SHA256 2dd2130f94d31262b12680c080c96b38ad55c1007f9e610ec8473d4bb13d2908
MD5 5894a446df1321fbdda52a11ff402295
SHA1 a08bf21d20f8ec0fc305c87c71e2c94b98a075a4
SHA512 0a2c3d24e7e9add3ca583c09a63ba130d0088ed36947b9f7b02bb48be4d30ef8dc6b8d788535a941f74a7992566b969adf3bd729665e61bfe22b67075766f8de
SSDEEP 384:WkmihmxWquSsgldTiXtY5FxrbM/7uo6txGZ+r6GjuXxQlzHd:tmlwyidYnxrU7u/xk+r6GjuXxQdHd
MD5 SHA1 SHA512 SSDEEP

Submit Download

en.ttt

Path C:\Program Files\7-Zip\Lang\en.ttt
Size 7KB
SHA256 c218145bb039e1fd042fb1f5425b634a4bdc1f40b13801e33ed36cfdbda063ed
MD5 bf2e140e9d30d6c51d372638ba7f4bd9
SHA1 a4358379a21a050252d738f6987df587c0bd373d
SHA512 b524388f7476c9a43e841746764ff59bdb1f8a1b4299353156081a854ee4435b94b34b1a87c299ec23f8909e0652222595b3177ee0392e3b8c0ff0a818db7f9a
SSDEEP 192:TsTdB9OFKAgBCChWEZECopxnJSZo3QPiJeOAe:641oNhZZECixJSZ+Qc
MD5 SHA1 SHA512 SSDEEP

Submit Download

eo.txt

Path C:\Program Files\7-Zip\Lang\eo.txt
Size 4KB
SHA256 a6ef5a5a1e28d406fd78079d9cacf819b047a296adc7083d34f2bfb3d071e5af
MD5 29caad3b73f6557f0306f4f6c6338235
SHA1 d4b3147f23c75de84287ad501e7403e0fce69921
SHA512 77618995d9cf90603c5d4ad60262832d8ad64c91a5e6944efd447a5cc082a381666d986bb294d7982c8721b0113f867b86490ca11bb3d46980132c9e4df1bd92
SSDEEP 96:lcIh395xVDLRNvtj7ZjuJowdlKoF+M/LMtYUQs0xM3Hj8bH8fC:eg3Px9zt+d5ohGs0sHj88C
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.txt

Path C:\Program Files\7-Zip\Lang\es.txt
Size 10KB
SHA256 7199b362f43e9dca2049c0eeb8b1bb443488ca87e12d7dda0f717b2adbdb7f95
MD5 ed230f9f52ef20a79c4bed8a9fefdf21
SHA1 ec0153260b58438ad17faf1a506b22ad0fec1bdc
SHA512 32f0e954235420a535291cf58b823baacf4a84723231a8636c093061a8c64fcd0952c414fc5bc7080fd8e93f050505d308e834fea44b8ab84802d8449f076bc9
SSDEEP 192:5JD5oUEhpto75qEisSDlmED/UJ8Wn3bFEmL4FHjwjdBZ2QvcGFpo2ZI3v:5JtvEzG75qcSDlmcDw+EJBZFchFv
MD5 SHA1 SHA512 SSDEEP

Submit Download

et.txt

Path C:\Program Files\7-Zip\Lang\et.txt
Size 6KB
SHA256 6b2718882bb47e905f1fdd7b75ece5cc233904203c1407c6f0dcdc5e08e276da
MD5 d6a50c4139d0973776fc294ee775c2ac
SHA1 1881d68ae10d7eb53291b80bd527a856304078a0
SHA512 0fd14b4fd9b613d04ef8747dcd6a47f6f7777ac35c847387c0ea4b217f198aa8ac54ea1698419d4122b808f852e9110d1780edcb61a4057c1e2774aa5382e727
SSDEEP 192:P2ecDQC5HNYvLSjKJCNdnziL1xWKvjgeNH:uecb82ICNFWL1xWKvseNH
MD5 SHA1 SHA512 SSDEEP

Submit Download

eu.txt

Path C:\Program Files\7-Zip\Lang\eu.txt
Size 8KB
SHA256 a1c9d46b0639878951538f531bba69aeddd61e6ad5229e3bf9c458196851c7d8
MD5 c90cd9f1e3d05b80aba527eb765cbf13
SHA1 66d1e1b250e2288f1e81322edc3a272fc4d0fffc
SHA512 439375d01799da3500dfa48c54eb46f7b971a299dfebff31492f39887d53ed83df284ef196eb8bc07d99d0ec92be08a1bf1a7dbf0ce9823c85449cc6f948f24c
SSDEEP 192:ChNzKhWj2NvAG/UkpyRFJHbskP/jZKMOdp6EAEPW:ChNXj2uG/Ukpe/DEMOdp6Em
MD5 SHA1 SHA512 SSDEEP

Submit Download

ext.txt

Path C:\Program Files\7-Zip\Lang\ext.txt
Size 7KB
SHA256 8075fd31b4ebb54603f69abb59d383dcef2f5b66a9f63bb9554027fd2949671c
MD5 459b9c72a423304ffbc7901f81588337
SHA1 0ba0a0d9668c53f0184c99e9580b90ff308d79be
SHA512 033ced457609563e0f98c66493f665b557ddd26fab9a603e9de97978d9f28465c5ac09e96f5f8e0ecd502d73df29305a7e2b8a0ad4ee50777a75d6ab8d996d7f
SSDEEP 192:OpSxVzpOmch2EFMaoK1ibQuXgmDjExNxI/kudt+0/aqppl6jiapd9jpp:P5OtMEFMRDHMuKeaqpAic
MD5 SHA1 SHA512 SSDEEP

Submit Download

fa.txt

Path C:\Program Files\7-Zip\Lang\fa.txt
Size 12KB
SHA256 657f2aceb60d557f907603568b0096f9d94143ff5a624262bbfeb019d45d06d7
MD5 741e0235c771e803c1b2a0b0549eac9d
SHA1 7839ae307e2690721ad11143e076c77d3b699a3c
SHA512 f8662732464fa6a20f35edcce066048a6ba6811f5e56e9ca3d9aa0d198fc9517642b4f659a46d8cb8c87e890adc055433fa71380fb50189bc103d7fbb87e0be5
SSDEEP 384:WDvyYrnbU6Eyx9Vx8f1gJNOaSgIPukCC3NaxktY7:WD9px8f1gJss2CCsxkK7
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi.txt

Path C:\Program Files\7-Zip\Lang\fi.txt
Size 8KB
SHA256 12cc4a2cef76045e07dafc7aec7cf6f16a646c0bb80873ec89a5ae0b4844443b
MD5 a04b6a55f112679c7004226b6298f885
SHA1 06c2377ac6a288fe9edd42df0c52f63dce968312
SHA512 88c7ed08b35558d6d2cd8713b5d045fba366010b8c7a4a7e315c0073cd510d3da41b0438f277d2e0e9043b6fcb87e8417eb5698ab18b3c3d24be7ff64b038e38
SSDEEP 96:2dUdnzkcjnQjB54SpQzLFA2WFYicDA1MiV2ehLHq2MQvQM03jgoBHpbYqMeMioHQ:cUtkcjnsZARHicM32UhMeWcoZpcYMivv
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr.txt

Path C:\Program Files\7-Zip\Lang\fr.txt
Size 10KB
SHA256 397a3af716eb7f0084f3aa04ad36eab82aab881589a359e7d6d4be673e1789a8
MD5 a49801879184c9200b408375fc4408d7
SHA1 763231bd9b883692c0e5127207cbfc6a2a29bc7d
SHA512 f408203907594afa116a2003d0b65d77c9bca47663f7f6b26e9158b91dad40569e92851bf788a39105298561f854264a8dc57611637745e04e68585b837702f2
SSDEEP 192:Uk/px4B42mykLxrIppKQoYEgHVxX39tJzo2NXIWdE4hNvuaVkP51EUt:L/462mykLxkpp3odgHVxdtd5da4nvuSy
MD5 SHA1 SHA512 SSDEEP

Submit Download

fur.txt

Path C:\Program Files\7-Zip\Lang\fur.txt
Size 6KB
SHA256 6ba88938c468e7217bd300b607d7a730530e63d1f97562604ec0bb00d66a06c9
MD5 06b08fe12c0f075d317cf9a2a1dd96bc
SHA1 0062ba87b9207536b9088e94505d765268069f63
SHA512 9f9fb1c045d92c1f8035d547554457e3466ae861a04f1cd3f57965e4a92f0fc433b2a7b3e9e1e71588e97f8c73d5914a750deded5d3056e327d7efe19a220198
SSDEEP 192:M7Bz8oq24hcsQzhPDu1FnweRCV2RnnfI9Mw2yzryIclVXPWMcg:M7Bz7wcse7uvFFnQMw2yzryIgXP3cg
MD5 SHA1 SHA512 SSDEEP

Submit Download

fy.txt

Path C:\Program Files\7-Zip\Lang\fy.txt
Size 5KB
SHA256 c1c050ed6fe2f8fbc048fd7d82944b8ada784415b6e62316d590c3c7aa45e112
MD5 03d38f09189799a0d927727d071c54b6
SHA1 17ff3a2c83e6a0b0733f2a9a8ce6b83af4f1b137
SHA512 e511c1a271a3d78cb7f6111759eec4d7cfc2d46f71f87aa3c4ac1bb11cd4e55e7d4dbe54f9c5107025ffe8c5fcadad4359dc673bc802b82388e74a8f2fa60ff7
SSDEEP 96:TqjTBrLVXTzyIu8alVMSv5FbPtnG5kSksLzJ94KoD0vL0L5nsseiF3F3NPYrAE6g:Y1HyOmX5pPtnMzkYJ9HoD00xNPEAErS8
MD5 SHA1 SHA512 SSDEEP

Submit Download

config.xml

Path C:\Program Files\Mono\etc\mono\mconfig\config.xml
Size 25KB
SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
MD5 SHA1 SHA512 SSDEEP

Submit Download

ipy.exe.config

Path C:\Program Files\Mono\lib\ironpython\ipy.exe.config
Size 940B
SHA256 fe81cdc25ea1083cf6e84853891e61a5d336a14fa96e839d0fb09a0b71771baa
MD5 f8ad9f79d9fe20538ba0420795d49886
SHA1 dfc188aec59d9ca0c04d841414d27c94e1df4303
SHA512 769c0d8447f8b5e7ba41498c91d181d8b3f24b10c44a66e31acad236f5362eaf3bd2e510965cc64bc7934bd18518a834de66df6642922e4a52e1c7305ca1a8e8
MD5 SHA1 SHA512

Submit Download

Commons.Xml.Relaxng.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\Commons.Xml.Relaxng.dll
Size 35KB
SHA256 f9aeb15995631d18a2ab128accaaef89634b08ccc6b1c21440f977f170974f24
MD5 9b4e5f4927d9c241c836a9300e2d1c70
SHA1 b6d463c3a42e7989249a28806fe1d07d3bba00ec
SHA512 a05e0de3e06c658788c4a4ea6ad040825742d4394e1b21c0ae3d76693f0f76a2c89beced7465b2e36b1e8ebb5e49c71143c40483a08b6eec997fdc149a1b848a
SSDEEP 384:3eBM/zemFg5noCzEheoS9V2Law+A1UbXXnUSXMXHtzJURZ54vCyQhEKQc7RIINy4:3R/zRCqCzfv9V1ZbtuvPQlIvOany9
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.Other.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\I18N.Other.dll
Size 7KB
SHA256 3c7a25aa2944ec1908f0f99bd63f92b54bf46e365ad92903598c34159f7fb4b8
MD5 985102d7ecfc0f6f5d4552c1d6f61884
SHA1 7f0ac8e87e4cd4ee86dade8f01dd118c076a37ac
SHA512 36de598e010a08c37c24f499c24c6591e76715cba64c5ca0dd59791d1258bb2a17f32e581e96712cdadd455b49c03f5f6e1d9ccaf97f8165e6da4cf48c0d53a6
SSDEEP 192:ISSSSSSSSSeui4DIDIDIDIDIDIDIDvcx+whUjtf9XGoq:ISSSSSSSSSeui0x+whUB9zq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Debugger.Soft.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\Mono.Debugger.Soft.dll
Size 32KB
SHA256 bc749a0aecfb16d887568c4be6b3fcf9eca0b630d4337e85a5ae9ae4717478b9
MD5 559a8b42b5c54cd1378b1689fc987c0f
SHA1 fa3955a0da889001b9c89edb50243279fba91693
SHA512 6ed6d3349c1462fd4a371bab5d726015b4d3f0b03342b0a5b23a1d2dcb5490511014105ccfeaa3c8cbe1ff0ab9661b039b9152e93f3f3266a561e420ab457ed9
SSDEEP 768:kJx2cXqG7AJjTVBuOwENOO7hcNWDQfNOO+QsLv1NOVNq0nZO570sw2/Ua0:kJIcayjZ2S
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Messaging.RabbitMQ.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\Mono.Messaging.RabbitMQ.dll
Size 12KB
SHA256 3c4676044715e06435dcc6de975588f7dc388c2357da048ec4308993a30cd8c6
MD5 69361994aa734de66e58e39d01aab1ab
SHA1 508b0f0d8c388671c01cac667bdd133f5b916289
SHA512 0cb94ec4543db3365160870b3639fd51d6a655b10f345c6971f24b176245aad4bcf86a8ffb065ccffaef446546b1ec03a7769e7824a9d7bb8e5c1f1f56d86b52
SSDEEP 192:MA7ElW7kqHTg6/DWD4wPVVbMGBbWpehIvw0Ky4Ek4dN0n/sQdySePV:MZq0gW4wPcGBbfyqy04/0/BwLV
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Json.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\System.Json.dll
Size 9KB
SHA256 862ad38f55710c88b5fcd75fa2358cf7de0384dd6eb5c935890279dd629933a9
MD5 2c7caa0a7d512ddf03a4765a3abb844e
SHA1 32373eab2e58fec5fcf6e7c359ce4ce58dd0d775
SHA512 d746fc8d6794ef9edee297fd82e198c4306039d97022fd1622fb6414ee686444fc1142cc44a96730f9627c1ad99eac7a3143271e248853df6bfaadf745ef9305
SSDEEP 192:dSS72Wxgk3HnLgldPIkZmfPJMZZy2ZwZy7v/OsHNFeTZ:dZcllPZuJMZZy2ZwZgHrIZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Runtime.Remoting.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\System.Reactive.Runtime.Remoting.dll
Size 5KB
SHA256 3c82eec64bd4c842129becf8d7c8bf5493e00b00b359eb0787a6ab4bb394b0f5
MD5 bc12b6e0268889b0f4f5858410be4dc6
SHA1 48cec3c5e544e77dbef175eac76e4c54678e02a1
SHA512 7dbd0e2fed60f7f2f66063493cd56d255ef6fdb23b1f9c14c920216f5e9df394c9aefe199bcbcec3980bca2c0203c63e6c8996e3f772d0d656c1b125e8ca6f18
SSDEEP 96:rlsWc9MVhbv86/8RJiuTp+kMrOe9j/fLzG6WzVF7w:iWc9Ehbvp0RkSMSmj/fLa6Wzf7w
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.WebPages.Razor.dll

Path C:\Program Files\Mono\lib\mono\2.0-api\System.Web.WebPages.Razor.dll
Size 10KB
SHA256 23053ef0a76dbb6e07d7d00ccaf1961af81b0934f5716b522e26634d548496dc
MD5 5791fa9dc3fd30f8d0d9fed0c611a30f
SHA1 364db8293ffe01153d19ae34be22e3762b1be8ef
SHA512 f49aea867cd1f8dd58405c2fd6de25e21f2f28bf69a1dfa697e5be1201fe09f5a4cc157bf850c785f13927ed13e74961062ff2d2822f7893af7cf690b5dad301
SSDEEP 192:Z0rTJ/YmcSg6fyUQOT0M7+ICZxB3dT790WbVW:anJ/Bg6NT0HICZxBNT790WbVW
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.CJK.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\I18N.CJK.dll
Size 7KB
SHA256 b9fbaada4ff44519f9bd4f3737eae111c935472a361661d1f290f13dce5d5135
MD5 4b9d997fe23fd5e43f4851a9e5df5c55
SHA1 c1234e4173d0b010efa37cfd78b87cda67a7ba64
SHA512 6da83511fed5566709a1c0aae1ad7e2420a576dcc52a5c656a4d6841f994eedfe4034dfb26f7e39fd8b00ec6d3de8b11d9e16c7fcda2d7182de04aac2770f342
SSDEEP 96:nCgtzRnzMliaV+UYgkYCbqET4KsKlKPhI405D6EChsSf98hOdGI:Cg7nzMh+UKsKlKPlm63tf98YP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.CSharp.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\Mono.CSharp.dll
Size 223KB
SHA256 03b52309d71bc32cbdfb5b0f082bc7916fecd594a23272d6492f2089c6773869
MD5 a681961d728b09d002bc40e0bcc43f44
SHA1 cc9c3dee6336ced4359703166badd489a6a64f53
SHA512 68d1e4e9d9fbf84fe02f598d12fc3a60df3d66e64daed63df9060f79c6e549346f32c742b3e6f78dfdb416fd45d501d63508831a70c576f0f58359fc5751123c
SSDEEP 6144:udJQcrm5o7SaaXiI75VZ0UWYE3RXSIp8W:uDZSaaXiI753TrIKW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Data.Tds.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\Mono.Data.Tds.dll
Size 24KB
SHA256 fbbc6e345cadf4f128835b0654da2cc10f3c591180d09c1f3bb67f2868e0a606
MD5 79d95e67d40200103be99c11cac8bc0c
SHA1 3201f160681d41c414659773f7dc10dcca03895e
SHA512 d4e7ba99d0e127043a73c7dd65914b440424d0e4a9a4d21031fb9ee1f2fe800b9b7b88cee1c0bf22620ee0c99f484410762e77b8e6dc2ab5a9aeec08431757c5
SSDEEP 384:FsKQ+Kq8n+fTtEv56/C3CdbYukJ3EZz/XMqbwMPA065JuroG:c+0Fv566mS3oQzT065C
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Posix.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\Mono.Posix.dll
Size 89KB
SHA256 2a65ab5a8d236bceb0a92f231df3360d9213f68dc9e106ae925fe5570b34d0f1
MD5 f8508ea6384b941ca1798669448289c2
SHA1 cb66683affa7805d2bd46ff2004719cf9df747e8
SHA512 3e507cf0fa6bc029e98bf9ddcd1a549cd3564729e59376ca5240d755f38a90348a5f61503a4a7ce4b62434c9a00cbe9b4b44a059c5c468a6463ea530b442685b
SSDEEP 1536:iZDZj0rNNbXK05CBSqJVTN54u9+xaKbD86CEnrAwhdWiDUTE9iO9e0K:iZDZj0uBvN19+UG/xnrAwhdW2wS9e/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Security.Win32.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\Mono.Security.Win32.dll
Size 6KB
SHA256 1d6c970faf3fa851c1ca792f899d79bc81f166fbac0e92a675f06622cd37f720
MD5 baba9e971df3ec056a79450dad10205d
SHA1 1c1753d7847bb3554d514e02427115874e9b2e70
SHA512 2233366eb3bb903ad97d9986f594d49a377c156ab89273dec3f70e1116a034ae3cd699b1fddab30dc7bdc69fb25ce0f4297911256e8d2ed797531698f6b2dac4
SSDEEP 96:IwrJ1urqt2JTAqRBOM49W4XNj/j1jgj3jhfFE+hsSf9MOPz7tI5:I4CAqSpLRAThfaQtf9/PHtI5
MD5 SHA1 SHA512 SSDEEP

Submit Download

RabbitMQ.Client.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\RabbitMQ.Client.dll
Size 314KB
SHA256 20cdede0c968c80b81ac0c0063b69e66693e199e0dd2cdff7ac63a7820cfaae9
MD5 255e4019d227d5cfa85658d90540f779
SHA1 9f007a253026b4a4e9ba87567554d0a101e925fe
SHA512 cacb4f80d367a101836cb99adccb42388169daa04b1f074ac6578d536e4b9bf5e3fc6961a261bf9f0dfa967cbf38278a7be57b6007c97dd98a22bba946fd2b61
SSDEEP 3072:V9dZKA5GXgIdN6IQhyASn6TnL89g39RxlArqjyI4oBi3xz:V0Akxhn6TnY9sArqHi3
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Json.Microsoft.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\System.Json.Microsoft.dll
Size 13KB
SHA256 82500f979119736e0b9e6b381a91e6465f91b033e6fbf37eb95f20bb775bb0d4
MD5 11301a96ca0a38639042d6a8d02e0a41
SHA1 50a1f9cbde947cb6051a9f8f8c70eb1e0b419141
SHA512 24c4225016c7a1532807afa5e1f3de4b33704ae2c11a732225828fd683569d3e355f976ea2fd68106ce49230497c16f81fcc0a24849900a98aa9d7ddc770d25f
SSDEEP 192:dDywYEMmAkETwQ55cw6fMoPByZXNfcdAMjZCNWZwZ8Z8e4qWt1W:JYbkvjByZX/MjZC8ZwZSvBWt1W
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Debugger.dll

Path C:\Program Files\Mono\lib\mono\4.0-api\System.Reactive.Debugger.dll
Size 5KB
SHA256 9e26bcf1fdcc249eab6d538f79432c0b9a478506c374d4eb0ed7bd521f610456
MD5 03ee8e8dd014a2c6a1d7848186d4bbec
SHA1 d0c0c81cd46d4d8726223a67e1a2b4266b8da8c0
SHA512 6b89f9196d570dd4616d2d77f9df9c72e8e22595d7fcb2a2576e3dfadafe6b41fcbf7d8efe14ef01843eb217e8bdd4572aa544ed829e2c5bc691f61440571131
SSDEEP 48:6i+lbXl7sq8ZOyzY4khCqYq6qnTPhOFqBH5OMZtKCyopq6Om9/+JZWIm/lTnd7hW:ALlwHO/Tp+kZOe80p9oWjZd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.Web.Infrastructure.dll

Path C:\Program Files\Mono\lib\mono\4.5-api\Microsoft.Web.Infrastructure.dll
Size 6KB
SHA256 e65f473381f45e6b3f11ff14335de14cdac12c1cce0db1cccc1391fd0b7157ba
MD5 0310c160187ad7c0f9af1e186c6ff335
SHA1 0900052ed8b34307ac41d7dcfb00393b0ee9a977
SHA512 5d9f6e7c67c2623186e7530a0aa3d635e5e07edd37e6faad70f3aa1804257c1fa9824a28056f24b51227744d86af6dab424637b81ffda994b273dcb2edc58944
SSDEEP 96:zIDx0Nq/rH/eRta5ca83HIF8Agk+HqHCdTTp+kAwlKVlYyKW:0x0NqTHMa5ca893VdZFwVGyK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Options.dll

Path C:\Program Files\Mono\lib\mono\4.5-api\Mono.Options.dll
Size 11KB
SHA256 bfc6d43316545905d6641902bb9097e90f0e6644630fd0724a4a413759fe735a
MD5 d1631ad925b15091cd93bd9896038a06
SHA1 ebfbc9e61dd93dd28a39b613eaaed7b550533265
SHA512 3979f6fc3153c691cc0c752ab0694f23560ae61b8b2dbb29abc881ea294dbeee6acd03c1f792b01ae29d81bf4d58a643a0dcbd551abebfdd228bfce98e71f0a8
SSDEEP 192:2ax5ascRiXMhe5fVNH5h9eFqCcBwooW6Qwj8n1e74z0Z9uMOs9WCo6oGGWSzY65I:285ascsHz9eFqCcCooWDwj81e7W89uMB
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Core.dll

Path C:\Program Files\Mono\lib\mono\4.5-api\System.Reactive.Core.dll
Size 22KB
SHA256 1f7ca64eb13c3576b50b63cef8130a717f3e7d774731ea8f15ae17a63d13f369
MD5 efeed7f354c6724400710e0b5296ac99
SHA1 35109601ed8d2f89262751164f2e79879a80e5a8
SHA512 22a47a287a43828c9e76b5170bcae88ff66b4f9bc84ffb5dcdd8db61435f26b83198a3e9f15826d307cecddc7a5fd9aa953b91524581ec29ead19b334e93bddc
SSDEEP 384:A1t3b0QVYujFUby6lOsiROlMSoQkSY+UE7tIKtFhMC4MGmBitZLW/eTnYyvfam6I:+b0QVYuulP/YvitI2cPfnL/z
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Providers.dll

Path C:\Program Files\Mono\lib\mono\4.5-api\System.Reactive.Providers.dll
Size 66KB
SHA256 41cd43ed2ea280662b871e7f00c6ccbc413d05d782b6f3cd21f2892a0bcf3047
MD5 e2785b26a191d4fee9c38f144880ac83
SHA1 aa625394a6c16705dcca28a415dd72780ca99c81
SHA512 72c016eb8f434f9f12caf40a4d5c940ccae4432ad65d9d2dc2126072a616ffb0ef81c36781d2aaa12482619987f6f34d6a6503a0308d79b172c89f8dc05920f9
SSDEEP 1536:Swu8OE8EI8BP88dqIVXrR8KxvKgB7hW7aZzcF:SHs8fO869eKxvKC7hW7aZzcF
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.Rare.dll

Path C:\Program Files\Mono\lib\mono\4.5.1-api\I18N.Rare.dll
Size 13KB
SHA256 1f0b85ae2b8fd7041e4c8877ede197e24776f97a8a0aa41423c20470968bacc5
MD5 13866906842e763b933ec3b66f775268
SHA1 5edda8d10c7a94d4e9569d1d6097c86fd8947039
SHA512 4c8d01c7d3bde7023fbb1da53346771313040245f4dfd53dd18e42a46898cfa4f14f606bfe11c38cda62e910b65d4eca074656413007b2343a88eff6a93deca7
SSDEEP 96:6mZJF9D4cpm0WeF5mEE69kPHc6gqARl4K6lhsSf9EOdzX:6O9DzpmY2/69k7/06ztf9Xp
MD5 SHA1 SHA512 SSDEEP

Submit Download

ICSharpCode.SharpZipLib.dll

Path C:\Program Files\Mono\lib\mono\4.5.1-api\ICSharpCode.SharpZipLib.dll
Size 33KB
SHA256 52c4cce8c458164c1e9d8eeb8fb3c8324e2eeb761afc7b0c58241acf3b5ca6eb
MD5 14d0183867ec68c23bf63e338a0178bc
SHA1 a52528a26dbdb98273b91d32bed86ce0dbfe671a
SHA512 5e0cb110ca92506bf55b62b04225a3078e58da561def71aa1510ef0cb3bad5bac1004a74505b1f899d63fb00389944d30d4a209e45776bb4ccda0ee5161e88c4
SSDEEP 384:RcJVm2LHQRDpfryRQMGvqMq636EBCyTLRSmvA0bbwCmbRZGRZjAlcv6Q:R4VmwQRFuRQMGu6KEv3f6C0nGR1A86Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Security.dll

Path C:\Program Files\Mono\lib\mono\4.5.1-api\Mono.Security.dll
Size 75KB
SHA256 143b73d95cfb381fc6f56f1a5fcf6ce288589e753e00205fca6863442f3cceb2
MD5 91dcda0b37269df4c6bf5b6c8b4a19c0
SHA1 df878f4ba4e3986a87d3298f78f1ff8606536ad7
SHA512 ba3f08996e9ffe6df900dace46b02bfb1a2df6c3d8ca57af8101edf6ee144180cb19e810dd67bcf6856d5ff21fa695150fead3509409a9e2cf2163f59f807307
SSDEEP 1536:m/miq1EVsH4gQBbHTuY8n/un6l5HUnyEvYg6pQwU/:m/tq1XH4gQVmn/u6leyeYVvU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.WebBrowser.dll

Path C:\Program Files\Mono\lib\mono\4.5.1-api\Mono.WebBrowser.dll
Size 23KB
SHA256 d80a0e9f469097f0f1c42f3f2a12a41d8acc5da6984c6784a8b4eedc7f9a2e37
MD5 a811797eed1661832164e4854a70ef18
SHA1 fa11d45684f788e5033f949fa664bea3acde1716
SHA512 acd7600624d2adc4a4d5ea642a379748d8a80a71b238f695c9d59e70918b13a9eb39bc8ba3e6c90554ac00a49152c7bf38fd3e866dae78624367139bd7d24a5a
SSDEEP 384:duUL5cj7+bMuKRywe7dJkjpJ725aeqI7FIVyIDCaBiN+wkk0hfBT675Y3:0S5cKaRouyYe7VskY
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.Http.SelfHost.dll

Path C:\Program Files\Mono\lib\mono\4.5.1-api\System.Web.Http.SelfHost.dll
Size 9KB
SHA256 d62561aefc96c3c852e4ba34ceffa9da1575ff9ab1bd172ff5c3513e875c061a
MD5 e62ff85b8479802316cf37d2739b540e
SHA1 06fd9dabdd3cbb33f246a3688cd800816edd725a
SHA512 644da711ed4b440b17fcbe5ebc79b573422b60bf9081aef78cdf2a049cfd9ba643c176cd46f3ca34659dbe2531642fb8ab478f217ba29f5f52435298b1ec8b49
SSDEEP 96:9NrJKGwQzDvNF/NxAVGsahSJp9e/VmkWLYQkTpPkUD4DJj8CiOVWXdQTW:9yCz+P9e/VlWLYQ9l8UVWOTW
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.MidEast.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\I18N.MidEast.dll
Size 6KB
SHA256 81c35dad090f37debe208b073293dfcf3ee1aff57425c1eb9aa301c537dbe758
MD5 aee219e27530d42d4a6b2cf12bdfab2a
SHA1 85517a125501b4bfb69a1093885b0fc2cc6a608c
SHA512 b2c21b8dabd645c60391a4a862db53d7cc627048ed748539c0b18ebd16ce356a219e2af0d2f03e6028192748d24d3162dfa68e5cce33a356ca5a92efbdc37d71
SSDEEP 96:2yWBulCekL3aOqxq8ZxowZihsSf93O9d0:ihUjowmtf9ek
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.VisualBasic.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\Microsoft.VisualBasic.dll
Size 64KB
SHA256 dd7c08530e1429106c13b5ca82842ae9c17f03412c3d757bef518fc1ef8e4e83
MD5 b9caa1bac3495a47ba763b5510c90176
SHA1 b4b9c74f7e55fd6dbf04c69d58b15b2c1b19b96f
SHA512 6402e8fed3db28f3ba7d90784f32152f05dab5c658343b11146522696d3c484c3af240e9dbe315943410c1b1d34db036872ae53af15673808a00b2673c99f5e1
SSDEEP 1536:NT1o1gff5IdjTwC6yfSaul4sZD4HkYwJj3H3tLAiW300zhH6mllT48xknkMf:1R2ZT48xknj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.CodeContracts.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\Mono.CodeContracts.dll
Size 20KB
SHA256 253866617fdc5d907e9be9121c16fd3246863bef917082065b21d63aa07b8f68
MD5 05660cfaf2ffa8b97d634c6634883ffa
SHA1 32257506b5fb74398e0af871afd84a5ac0ff6d7a
SHA512 483e4849e30178f829ee5200a73697ad7e7628863cfebb0447ff18687cb2ed2d13b2b9a6196aba75fa5fe99c44eaa30b9941c40a239f841a37a4fb85401771d6
SSDEEP 384:RekHbsdiaa7TzjuYc27vAFD/6bZBbbBpft7cz:ReWracvux2zP3O
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Messaging.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\Mono.Messaging.dll
Size 18KB
SHA256 1b4f639d07823ddd3d812393d55a58ec866367d8b4f15d85aa4099a9f53043ed
MD5 d92c7b08bf1b6c785d89dc1ebe6c94b5
SHA1 2c031c404a481b132c4bb01242f0499f2f600eea
SHA512 719a738ab5275a1a939709e2c1cf54ef403679565146a23cf9e32b95ef9689b7152150f54830d154aaadc23e99aee0e6f907cad22cff0eee2161737a86b520d1
SSDEEP 192:WzDr4iL7krToDoCkEtki6BYb6tYLCPLW+2pVZwmgJOOgls2Izvb0XnJFw/e5dU2k:Wb4m7krToUSkM62a/EZ0gf43e1xMRp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Parallel.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\Mono.Parallel.dll
Size 7KB
SHA256 6c0ffb599f9f2d28161468b2dac55272d1252eaa50d2e6ee328e880ded1ffb0e
MD5 6bea271bf86c3c2ee13ecf104a1af62c
SHA1 8cff422c0344c9c8292c308d3d7ac788b43b2116
SHA512 ca682e2e43d0a39944cce4d984eb7c46a979cba62a41dfb4ef2cda71dff7559c71cee82ca56b2fdd60a60d9f3bec63e2871cf68ba6a0b18518f4d7fe3a935c3d
SSDEEP 96:pi3x0MSG8oMXgjN10qFGZffibYUhCGnsoTePhyzMHQmV7PDuYhs4k6T9O9FLG:8BTCgR10qkZusoT4hyzMHpPDumMUMj
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Numerics.Vectors.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\System.Numerics.Vectors.dll
Size 5KB
SHA256 e482bef161ba12bcb5989a901fb21e90162041827feed23f90e22f0474c82c43
MD5 85fe93fd64d03bc606c89392ddb7077f
SHA1 5a27f54013f0c7264d353ac5c5fe2b999ec2532f
SHA512 c08e0735d509d651e7fc89e55e422cdf04fd25fb7c6bff23cdcf66428f698f42af71c6109e95a27fbb4c19e0c4fea2d428e1849b969fee5e8cdb4653af69bda0
SSDEEP 48:6NIjW4XBdcr/6AqYAqJf+IvDBHDBHao4HxZ44U4LePb5IhefO/:DW6ebxvd96hHeP90
MD5 SHA1 SHA512 SSDEEP

Submit Download

WebMatrix.Data.dll

Path C:\Program Files\Mono\lib\mono\4.5.2-api\WebMatrix.Data.dll
Size 6KB
SHA256 0322b654cb25d0063d4f6a7fffdf1e61dc79a46fd2ba81879ec61e0d83590c9d
MD5 5a857772c3da84994f014ef5e431e70e
SHA1 1be30f08bd9c40ea1ffad8a2cbac506cc92fb9df
SHA512 fbc7ae2345c21b866e2125b537c2c29213fb562292c5b463fa72bc0089ac7e7d3c080d534475f7524f68c4a385b6c4e7ee680f76ebdaeb0853c64100569ac466
SSDEEP 96:kDZX5HAwJGxleDgvjAyb5z8DawIi4DfthJLkf9Z7hshkWJkbOcuNO:kDQleUE45z2awSDfthJLkf9Z1NERcF
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reflection.Metadata.dll

Path C:\Program Files\Mono\lib\mono\4.5\System.Reflection.Metadata.dll
Size 454KB
SHA256 652ded0ce5e153b85154ac65d00244aafb49e0fe8a958e2afb9c5bea83a957c0
MD5 50119d5845f7e74821108ff3f5058a63
SHA1 74443707eda9ebbb98a68a1d03a29d5305b25f11
SHA512 7510645c489dc890fd8e8dd89b3c08777e2928dce49f84a9fe409b5d8b5269b82e504668f5f7a1caa9cd863d42629c626572db9b40ee5aa9d815e4c2910536e3
SSDEEP 6144:wNXb/BmfTcqQ9d8l1+h2pThycq7/K5PBNplTm+sTosDAhmomkUulC+Cd3r335wq:wNrBmfIqzl1+h2pTQj76oWXCB1
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.West.dll

Path C:\Program Files\Mono\lib\mono\4.6-api\I18N.West.dll
Size 7KB
SHA256 f70fd3a9e78999fcde826a9b1bb65cb84892bbf76f31e5fd1895884da3bcff34
MD5 577b1a4309626de2f174984eb5a86077
SHA1 ff33f439a4b285081d67851d9fd293342c4cbc1b
SHA512 056e7601b2ca73a69dfb88b8a377e3ed095a152f382d8bc1f364673e8c03e35383ea9178e89a5263549bbe012ba50c6265fa7336377d548d41c5053158c839fe
SSDEEP 192://O9kko4W2/05uLlgzOBDn43C23t+3Mtf9Ou:XiP23t+329x
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Experimental.dll

Path C:\Program Files\Mono\lib\mono\4.6-api\System.Reactive.Experimental.dll
Size 9KB
SHA256 e7c56c7dc413fa222b1926c38f00222a7da1badee9718cc54c57450c01abe09a
MD5 966ac2cef6793c24fc0bf3360d3fc2bc
SHA1 a5785e1eaf55bab0bf477bacf0b5f23035925849
SHA512 95903eebf2c5b41b7d62ac4ad9a01da63149f2551ae4aabde0ff6a5fe067f63c4e088018138bf77d22d3cfd134ce5e905fb6fe5d1be6f4ee84a62a9a8146c1f7
SSDEEP 192:6h/fmrwUcU812p8wPf5cMVOClpQpUM8W7P:B02+xMVOcpQmWD
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.Mvc.dll

Path C:\Program Files\Mono\lib\mono\4.6-api\System.Web.Mvc.dll
Size 98KB
SHA256 b89b7488afdddfa20f75d7eb72398d30ff21eb996f62335aaf57d31c7cf24178
MD5 cbb935ae086f1b7338d3bcd7a84a716d
SHA1 31eb9f8d6f3a36180714107c76774f2c1a635e4f
SHA512 b54b029e9a13d38e3d09095041ae587ed4fd614aaf87f8ab4e988433d344d93a9a178b992d00492b10266744ae94bb16d8f8cea243f2e7195fe78f3c43b2cb55
SSDEEP 1536:Ske8ilwwfdHX6EGxP7fVEwObrzdQyn2vIC9fe/WdU6CPFz+L:He8ild16EGfwrRavIC9fe/WdRCwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.WebPages.Deployment.dll

Path C:\Program Files\Mono\lib\mono\4.6-api\System.Web.WebPages.Deployment.dll
Size 6KB
SHA256 b2dd91160769f23ee0ffa7fe7e48d961c76c0181bbc442bc097d3b53eba03a03
MD5 ac1369e774522e33fb20bd3b098abd0e
SHA1 ec5c1c6acb8d001818f2f9850a18628948794d28
SHA512 f20e9d7a0f7c77e2ea4572b3a30c9955a8ba5843baffd9fd1fa596e7c56bb094298cca9f7bd986ad9354b67569f0700957aa73aa0e77c8c626ebd6b21e39ffed
SSDEEP 96:FXjZrSOb+qtmE6w9Ob/Tp+kO1D4Dizl1CWurQW:RAmTmE6w9wOiWSQW
MD5 SHA1 SHA512 SSDEEP

Submit Download

cscompmgd.dll

Path C:\Program Files\Mono\lib\mono\4.6-api\cscompmgd.dll
Size 6KB
SHA256 d35151028cd27cfcdf5ae987a93a870922fb4d87292afab85d129dcc42fd2958
MD5 89ffba097e89b958fe61d238379eec7c
SHA1 1df15738d921073c70fa9f234ef33622a3c13eb7
SHA512 a9b64ee07e05da6724d50422562dec42e0fda0721353d534f7c207b2ec1b137c625723a02c33125721787fe56c6b297be6b76fbae7bbb22eb875959bd5df41cd
SSDEEP 96:l7BdNRBZY7kw9+BetPBxvTEkhmVLsCeZV01:lNdN2n4etPBxpIVLsCeZV
MD5 SHA1 SHA512 SSDEEP

Submit Download

I18N.dll

Path C:\Program Files\Mono\lib\mono\4.6.1-api\I18N.dll
Size 9KB
SHA256 6af5fc5d46e95cee7dd36b856169081dff4125bb1d3273ce25adca727105b38d
MD5 7ed9e3064ac4a21e40bbff1edb039037
SHA1 bda73b96adb3e6cdc414886c6e7e7695cf4c3380
SHA512 ebfcd721759cdb3087f9d618a4cf2a01b10090e1b9c93f2a19a11e2eac7ee99b31d2cb37e33bacef287c15d73d9905189dcc688a3ad96c0f66004e86654f04f5
SSDEEP 96:aS1y/bBj0fn+xOEd4N+FerIM3C8avUK93SM+jd/S9wgIM0UMMljlV7hsSf9zZCOL:/1oNofcdY+T8PK9CMQUtvlhDtf9zZdL
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.PlatformServices.dll

Path C:\Program Files\Mono\lib\mono\4.6.1-api\System.Reactive.PlatformServices.dll
Size 7KB
SHA256 57414c47cc7a8b002dd4f21a81bea522bce6993d8f71836352d35501aa0d173f
MD5 d9e683738357c9ca587d61db38b6622e
SHA1 3249e27702dd9037fbaed9b92a4eaa6e9333d84f
SHA512 a319d4f96b6aaf89e9333dc13497a0c928fa3f62bd628b7ce89fdc04729f7585b18dd3096981034b724cc8c9b1f110d1ac8e6d4e11c3e6e9e712f02085327386
SSDEEP 96:3GsMlZJy3+sYndnpPntbX9wQ5BAVOnTp+kwAOeh8T1WLD:4PjftbX9wQ5BMwwVWf
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.Http.dll

Path C:\Program Files\Mono\lib\mono\4.6.1-api\System.Web.Http.dll
Size 55KB
SHA256 5a0366e666f6fa6c2759a68b88a95c0db4cd019d9623ffa129b760d4bea89151
MD5 25c3f97e828e0a3d705eb176c467d8b7
SHA1 38a3ad9cea9c7f74ea53064137e830f7a9a4b0d2
SHA512 94b0f522aaea83295d780be9a6ce627f94692222e4063d870b717bb02c46d733d7390d0799f70aa12159a952ee40a184bd70570f82c9be1f0bd7dccf048e197f
SSDEEP 1536:M7G7+Lx5uLUNl+VlqJrJJJ5JkBJJDJJJKJJJqrJJJJiISzQeZlU1keKKjqpdrbTQ:tGx5uLUv+VlqJrJJJ5JkBJJDJJJKJJJy
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.Razor.dll

Path C:\Program Files\Mono\lib\mono\4.6.1-api\System.Web.Razor.dll
Size 59KB
SHA256 7f27acfd4469e514e19615b8cd4770114cca563bf8031df807802297064d4a43
MD5 bb2bae05933aa2ba6bfb4c08413bf1c9
SHA1 0380af980ede2604d861b27e4473e1b8964e5435
SHA512 8a0a7f00cd24ad21840fa89a1e44d328e4aa3979e75e4e1337541de936583ced25178d9db09b65d29ca6d328de8b591afa686f711b15c2a9f1d70f0c7c9302e2
SSDEEP 1536:DkOOvPJknbTQDfkzBVHQGZ+ZXZEbwS1mjalSy9U0j:HnbsDf4wGZ+ZXZErX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Tasklets.dll

Path C:\Program Files\Mono\lib\mono\4.6.2-api\Mono.Tasklets.dll
Size 4KB
SHA256 9c82c09050e37c308ddcb745443fa0ae91324ba2eb3dc6b46fda22fb909a1a83
MD5 3cd22a2c594b8b81e9ea0b7d19cafad2
SHA1 71475e0dfeafd8614b5edaf659099dde1a2e74f5
SHA512 100d2545b5dcdb1cec166feb0b62a6a4800d015755a08b33927c18e73ffc0dc5e68fc0b05cfafb825c526c359ab9df38e7939d05b85517415cdb3fc95aba00fc
MD5 SHA1 SHA512

Submit Download

SMDiagnostics.dll

Path C:\Program Files\Mono\lib\mono\4.6.2-api\SMDiagnostics.dll
Size 4KB
SHA256 5616d2a53012b862f7ea8dd355570a89be376304f3793d8e9eac5d4bd00a92f3
MD5 92840abfff30cea02d4eb2fc1d589a96
SHA1 f3de2bfc876e471778c738ed1943a8f1d94481ba
SHA512 511309d3865c6de8cbb9abf08a70742ecec84162c861b5f8936fce2c2f48698cdf91aabd2840c282e7e3c3c0b00dd45eee4c060d9d91dfa2d8865fa21849a8bb
MD5 SHA1 SHA512

Submit Download

System.Reactive.Interfaces.dll

Path C:\Program Files\Mono\lib\mono\4.6.2-api\System.Reactive.Interfaces.dll
Size 7KB
SHA256 c12b395ce6caa4eee69a73f00fff7c66aa2a5695660c23ab241088e24c12c489
MD5 9eff0640925f29e05e96bb3b93becbdc
SHA1 f5786d51f1d55e1b76eef65353d3f950f7cb88cf
SHA512 1a6c46ad63a5efcce9b565d62f7b1945dcb683a654206b429aa932b93d7a1c2a5cdc82f226e3ffd2b9037830e628afed6946e118710612ab19afac3522cdebf4
SSDEEP 96:Mg9iKIkfzk8gUBrjvB94SC+zYa+Tp+kgKkOeEy/tHpneWWchKxJ:M+i+bk2jvBmSC+z5CgKLG/LWR
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Observable.Aliases.dll

Path C:\Program Files\Mono\lib\mono\4.6.2-api\System.Reactive.Observable.Aliases.dll
Size 8KB
SHA256 3e20a9ea5d5b009058b4b41b5d8bbcc958a9b0606829b3466140859bce708724
MD5 4150b889ad46530ca2c0357688809894
SHA1 84b423200bcf27cc9dad7bcd2358356c218d68f1
SHA512 d5951a93f6a139e5fe9826e92b7ad449f58cc9b6086ac3a4d2d168e1fabbb5caf985d4cd31afdddc600b2847ecb9a752fcba27066f346bc71f7bb9089342ecae
SSDEEP 192:afihYVggXC0qYobSW3tDPKXqkhoxDmy23hIHqJhL:LWVgSqYobjU7N
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.WebPages.dll

Path C:\Program Files\Mono\lib\mono\4.6.2-api\System.Web.WebPages.dll
Size 34KB
SHA256 690a64f6ce4d5fb465114c78eb7ad55ccab1f06d1ade331eb1aa9ea43a93b2ac
MD5 b2b1bfdf690bf555680450edddc7e2ab
SHA1 7df74fdb9e5bd83d724af5bc7be25628929cc2fe
SHA512 3f54ddbb0c7677d73b4061293fa84a819df3ce48560b155d083df5f806a44a8c0a153a9cc907ddfe0c9cce7d2beb896eeba50cec9abc4293cab4ec7a7dfdff56
SSDEEP 384:VXDrrtibdMYnMRO8andpfXjPYOJfzs3946VYafotjmV007hwE7n6GfZnUmEzASbo:prEbddNlJfzs3amVSGmOnXr0o4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Data.Sqlite.dll

Path C:\Program Files\Mono\lib\mono\4.7-api\Mono.Data.Sqlite.dll
Size 27KB
SHA256 5101edb78c959eff227c7669e78b488b77141bb6cc16298d31be859f37bb8bcb
MD5 2ef958c6bceace63803d2727628acf17
SHA1 92803826eab86cc388bd3980f2f7574406e5ef96
SHA512 e68400293f25100c23e59df5c641485b605d1384b917a9a5d71a93bca7d906d4caa30d779ccad4890f9a081eefcb03e9e0ae6bf42a3cbcc399d12d340afb8cde
SSDEEP 384:AtHoKj6JMOyXhm98G5AwNBOfIxwCeyNj0j4KmvS/YZkQv93O4Fbub8bbMkCb+nz9:0oKjLOmPdfIxw/jUveYOQxVzr5
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Management.dll

Path C:\Program Files\Mono\lib\mono\4.7-api\Mono.Management.dll
Size 4KB
SHA256 12fc168b83a4811042b1c55b62646285405d266c3f54489022d1726883791bba
MD5 b46f3bf5927f37c3802d4a2cd90da114
SHA1 588a8c5bc6845d3db9cd7f9a417d0ec99ae7ddc4
SHA512 2db0ee0aa2b7522a7355db504554889debf709a84e9debec7ec2a44b39cf948b86511f49a7254c5b25108508cbe39ef1d9def197ba078454ea1a3c129e7c6b8e
MD5 SHA1 SHA512

Submit Download

Novell.Directory.Ldap.dll

Path C:\Program Files\Mono\lib\mono\4.7-api\Novell.Directory.Ldap.dll
Size 91KB
SHA256 42da3b42b8de35d8ce99d4d65c8f0f342c15433a419a8ceb6572b705519ec0bb
MD5 c4e88a295e77760df43a69f09c855c03
SHA1 f8913fbfe1642fce7c934d9bdefb6df38c745973
SHA512 b3238e27c48e5e26252ce67ef5048d3be1285af7eeda189e50c437b68c95c861d50145b92aafbca77bfca25fb2e94f1dbb86a767f7cceb53d98037d6a9ba411f
SSDEEP 1536:3ezM24HswPGeqbtnvo70liKl3WuD9uH6yn3nMu6FBZbj2YF2obS/:o4HxPGeqB3rl31A6y3MuCBZbj2J
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.Http.Formatting.dll

Path C:\Program Files\Mono\lib\mono\4.7-api\System.Net.Http.Formatting.dll
Size 19KB
SHA256 d695096fce1eff031f13b4ca689d0d0b5961538934999acbeeddcef8e944442a
MD5 57746a20eb7e7b0f04a60d5b79db0381
SHA1 bf4cb952dbe942e833586f4891151709ab69d6af
SHA512 c6e026e451450b6ead5bd60b19b6dd1fce3c6610abefd70dfc5c2c0beb17811f13e75d8910a28301d48ef0a799c618ade2914f74ee5b87b529d615785b8a1f34
SSDEEP 384:lqIIflEKmdazOFqtJrqMBY3uqVgwiGI+WkfW:EfiKbzRK9iGIE
MD5 SHA1 SHA512 SSDEEP

Submit Download

IBM.Data.DB2.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\IBM.Data.DB2.dll
Size 18KB
SHA256 12b2768f8ab211bca8a27091a0b15d45dfcbb6e4d54fa29ccf11fa54fcaaa5fe
MD5 a921fd40b316f6da5324e6aa95bbff99
SHA1 7d69e993d9b6eb5907ad97921fda1c5b1a9240bf
SHA512 7068be810b20085696e336063c0180daef9d29bfb498fe44f7f4629ca7a894f7ad1d81239e1177213f9ffba740a5e858c09d183ea3d78c3c4a177048fd5dd8c8
SSDEEP 384:zUcEs26R3zEEStd2fKqSIiOKjUfbjNB95RY:fWHqSbURY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Cairo.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.Cairo.dll
Size 24KB
SHA256 afccb350a2612de276321f84cf95aa2e67f7f654c30dd128089598068fc17f35
MD5 8684c67bcd20eaf0b89ec62cc69d32fb
SHA1 08bfb98dc08a4a4f61a590a7dd4d512e62589d23
SHA512 58277417f4bce8dd31b3afa2812bddd7984cea607fc787271001fcb55c40bd71af81a9e57f63dea4f19db0000cea90a626c490707046a309314fefff58ca4dec
SSDEEP 384:T7hbPhA5CnVba+0Pge4SLCF//a9+aAR/MFiY9b2UNAvagj1Y1bezT:3hlA5AebPp4+Cu+/REFiY9hNAS0l
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.CompilerServices.SymbolWriter.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.CompilerServices.SymbolWriter.dll
Size 14KB
SHA256 90a90ad5ac054d5ad89bd3dc4715751d68f903ef38f3fd5e6a8b926b3f8f6de5
MD5 81e49867649e1f790e268d5bbed1e480
SHA1 1bfe2e7c3577aaeb68d1f5362639891115ddf055
SHA512 7e87d2d420e28870c7e4dd976666c1c9894279d935a60d22a48036ab6a7eec6c69309cdaa4f69551f392abef9947d776ee9bd3f163f62779c6912fc1b8caa411
SSDEEP 192:SMBpzZoXWwWqEe/WA/ctjYCS6k5APQ3Nu5Nzfez7+ERq3Y0kGCPhjP:DpzQesctjYCfk5AP5Zw7+ERq3MnP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Http.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.Http.dll
Size 9KB
SHA256 8513ffa15160eb182e3abea0bde643b60c713a0706f9813193dcb09881d778a8
MD5 57365c3604ddee0514570ab8e22692e8
SHA1 22b60e791c0c3e6fb1fef7d87ae412a9faae86ec
SHA512 ed74b0a1d3b770afd5f572c50996eb5d25cdb5d6be5ea226cdbf483fffd2e09cc5d9e08ecd7712ccb4a6f577d0a8804a89a761cbc015870c3d0e577c6e19a1f7
SSDEEP 192:VAZPN+xaAd6QiJSHTZfTSSwsS2hJkds4NMp1tt2I:VARN+xSQiJaB9S2hmXMzWI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.Simd.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\Mono.Simd.dll
Size 33KB
SHA256 77e7e7f803e013f9b44d2c2767ea7615485f512c4a898ec9554504418f22e57a
MD5 e793a1125e88ec8008fee75214e83c00
SHA1 ba490fa8d24fc9dd046dc9902b6710fe4b220700
SHA512 18db10c9be31b4966ee4e3a934ea4293cea5acbb032dbf38f4c37af33d2fe0c0b794533f09eba783d1b2a376a3b8b71d073e43592fa5857ab9f24bda901c7de2
SSDEEP 768:7ZovNy95LQpiiiidiuiiirjiiid+iiiiidiWBiiiidssmiiiidssjiSiFiiiiipG:LIiiiidiuiiirjiiid+iiiiidiWBiiiC
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Windows.Forms.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\System.Reactive.Windows.Forms.dll
Size 6KB
SHA256 8d6198c1332e4a2f199579566634273d995a770fe81023c42557875617071f93
MD5 b4499e9a2f40ea1307db7f0e876b5f57
SHA1 ab45d5611411e678390d91200352bda9d4a68ebc
SHA512 301011d7585491fc7e9571edbb25dfb705a0fa26ad5a60fe5803c1aac99cc43f0adac4cef83b4b39078b7e5b6938a1661c8af523075285a6f17a6d19ddae9673
SSDEEP 48:67LkXVC4e7ZsLhClGmi/UmBqsaqhhR6DZQPTPhOFqBHYOMZAyPAQWqs30ZWIHIli:o+sTGLhC1fK9Tp+k4OeAyolAWnc
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.Http.WebHost.dll

Path C:\Program Files\Mono\lib\mono\4.7.1-api\System.Web.Http.WebHost.dll
Size 7KB
SHA256 c096053c7ecbc52145881c04663c55ee13e58d3db70788291decbe2df93164b3
MD5 567f98557c319ea48e1775b1d9f31137
SHA1 4dbb014dea594d06da52d08e2b44611b4d148e2f
SHA512 c3d966565ca09f3861aaa1ecb9e882373183ccdef3990397e1415810499f3c7fd039429cf8b661590b79b51ee3695f5b08a0f92d25b5f84926e2ccbe1c90f4fa
SSDEEP 96:uZuqVF8xGKVw4gV94MlnbjWrysJGKw90PZcKiI7qTp+k/MD4DJquOVWOyPW:SuE8MKV45FzweI7G/kVW7PW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mono.C5.dll

Path C:\Program Files\Mono\lib\mono\4.7.2-api\Mono.C5.dll
Size 68KB
SHA256 ad20d595c1f265d05fbbe96eb1267ad27359850af372b9ec9f7b84d45ec21660
MD5 95ddc7b2109fc510c2846d63b72a2e9f
SHA1 1f4cc7ec945e96bf1b95e92d71e2e55538ee0173
SHA512 cdf9b293e90257a47ebc50c49015ae864095678e5e270d42aaa7c33b25dd651068daafba4b3dc152000df13e99628e0b2d4de0c5731dd756d93d7112f2d88969
SSDEEP 768:5D/7W4XlAvhiMMxXGbhy49XPCPJb9VdhhhnwapRaqhhhJhhhI5kP7pjjlEok7uN5:53avMZNGFyEXPfkTpjjZAuN2ZnU
MD5 SHA1 SHA512 SSDEEP

Submit Download

PEAPI.dll

Path C:\Program Files\Mono\lib\mono\4.7.2-api\PEAPI.dll
Size 30KB
SHA256 60c3da99a3ca5f2f797adb2e621301278798979ec004429eb3a41db88a2d7c3b
MD5 8dccd202bf677823825ee67f4a23a0fd
SHA1 e331d7e6a18892131f51d6a708fb9b04a877edc2
SHA512 c16ffa77210656defc414636bacab00c87b414402f117d231d78712db67a05d1140a8b346bc8950ce6818dfea7fa266df06712e30e6b87ed6c967e1a9beaad87
SSDEEP 768:iVSoeBdwBf8zdYYithJLgRaoQR/dFDE1jN+sMHqPpz9:iVfenuTWEPgSqPP
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Linq.dll

Path C:\Program Files\Mono\lib\mono\4.7.2-api\System.Reactive.Linq.dll
Size 71KB
SHA256 595bd82812ec34b94afa4ad07258098e0fa456afde6f80586f3c670f3cb2b6c5
MD5 2974545c3decd526d09de5ee5ebd9808
SHA1 ca0f1e76b058161b6991b47ac36d5b9f47ce8f89
SHA512 b95fc15ee55cba5ece758fb73b8aed3c739a47d599db89a8f9c616fa4102918d33b80c7f58c56525b4a254cb720d609405e578c6822a9dc06ec97f20c9166de5
SSDEEP 768:OcIIbmT6Slz64nC4Cwy2DmRmCNb0/VBAIWJZsL1uQTPjFyp1LhetH2bxa4kKeWkK:Wtl21b4LWMLMsuhnbxiKeNaZu09T
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reactive.Windows.Threading.dll

Path C:\Program Files\Mono\lib\mono\4.7.2-api\System.Reactive.Windows.Threading.dll
Size 7KB
SHA256 fef7bbe9630fb0cac28e79fcba6403b729922723f20e99516be6707b44e06114
MD5 4ef75b4ef55b97d54cf39addf34f1673
SHA1 f0c04759849c4443ee2424ee1771774658f8aa83
SHA512 d4aa4639a43761efc8a68e5faeb4c15b43300e5ecc69663c966039e2d569736e3d4ac53dfe0310b3d5ddbdd966e57ba52dbf9830548b13d99a6b503ce7623310
SSDEEP 96:yzDbgafNgRWcU5BW8Ftnl2Tp+kuOePArtmWON:8b/cr+P6tpmWw
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Threading.Tasks.Dataflow.dll

Path C:\Program Files\Mono\lib\mono\4.7.2-api\System.Threading.Tasks.Dataflow.dll
Size 21KB
SHA256 f5a3a8d78926413c4a39a95ea2b4969d329a914b02b078499f2040a0178db5d4
MD5 5f6ea20cc2c7d1d6bd22cca49a21d7a6
SHA1 42c9a84cbf8c76bccbf0c7fb628314ef25e17cbe
SHA512 72caa599d84c8fd0e870d8e39b63cb1bcba4564b9cc409d985d6b23dd36852d315f95555e74350021b415be44b793aa9295aee2fd3ccf37ac90029936e077e18
SSDEEP 384:YW6rIiW0706EVMfHDArRw5E4WprXzX9yqZY17WR7W9GPU4/C/7Wz7W9GRWiBIqqU:YW6Y0LfDh5E7F/SGwjT4ikhEW4KPWw22
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Web.RegularExpressions.pdb

Path C:\Program Files\Mono\lib\mono\gac\System.Web.RegularExpressions\4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.pdb
Size 240B
SHA256 93e463e63396109b8986ecabfe95ab2e53338e09b9a3b6733fcecdcb87dc92f8
MD5 5a6e52b5a2c3fddfb1b76f0ee262566f
SHA1 fdb7f54ec8b135004e433473534fb4e91f856135
SHA512 b36803ac39b5b19a93d669a456237935cabbcfd92090fe0a62104a94348b02d784d0a81c5325594fd7f5b2c79eb08723216de94cdc1e69b3fc1609c2d304f6d9
MD5 SHA1 SHA512

Submit Download

VBCSCompiler.exe.config

Path C:\Program Files\Mono\lib\mono\msbuild\15.0\bin\Roslyn\VBCSCompiler.exe.config
Size 8KB
SHA256 90b96f91f7a09bb11babb21521be290a25ca83dd075ff52d0d9ef29c15587270
MD5 1b5ed8010fa6833581a9e3dc7a83d887
SHA1 ba6796f882f3234c7284a7e4dbce574dd9eebd44
SHA512 a9a516452efee2199100f7a5a46edfd81933739fa6e1ad1b57098524802befdc257c2759f2b153288f611eb8078c806b03f9d48d06037077b7b037a2ac052501
SSDEEP 96:lk4Foru4K4z4mG6YGCu8uHwfaSz0r0nuRr4uMu4yuUupOaSr0l0MuG6YzA:iBraUOAsPC
MD5 SHA1 SHA512 SSDEEP

Submit Download

mscorlib.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile136\mscorlib.dll
Size 179KB
SHA256 6d28da2c6ed3d50c0bd8a849db3e7794239a51d8854d9a179bef0c131bb52b02
MD5 e2b66d2309b8d0a0d4bc725039d65d58
SHA1 d1528495cbfe0d484a3919d31d006341ca48eb0b
SHA512 b489d4ca163eabd2b121ea4e4a0073cb4613d21b6eb4de1c3e1ebd7fead8a8762476b2f43557bf25b1bdbe0cfeedefcee69c33887c0cbfd369b3e65e2017df95
SSDEEP 3072:5F9Nf7yZzqeaT9/gmVZBt51sjRGZo6HptsYUC28sOu:5BEapYmVZzs4o4pCOu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Windows Phone 8.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile147\SupportedFrameworks\Windows Phone 8.xml
Size 255B
SHA256 b6532e4d291a7dfdcd67b1c515ec7ee5c73c3b3029fce873a9492a27a72a23a3
MD5 b2dbcddcc8c00cd1e644e55fc0031eb7
SHA1 e6bf94b0dc42ff34e0f78c7eb66210ac50267064
SHA512 388d5a141c039c2780653c6cdffdb5f4e36692ba09807f5ebfa4c84806bd5edede9c612665e68731eab5e840f4dfcb929107eeb826c2c45df783f1fe67ffef7b
MD5 SHA1 SHA512

Submit Download

Xamarin.TVOS.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile14\SupportedFrameworks\Xamarin.TVOS.xml
Size 99B
SHA256 d965f698a51db5d7cef6f0fc5472d27b833937ef1fca9508574ca533bd53e205
MD5 f522ce8b51fc5d7abbeba1bcefca9d68
SHA1 1479866bd864fea9cf598d5df53aa90d97f14efa
SHA512 bad19e2cb6e6247411c86bdea9c86a1bb16b8f4d686757f64513eccc68e7191174fcacfbfee611bef70140e3e07d732a80e7aaec4a01e6fdce274752ec1e7c3c
MD5 SHA1 SHA512

Submit Download

System.Core.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile14\System.Core.dll
Size 92KB
SHA256 61c59e25281808ef33dcc0c750df94cd287d2b9c2a0d47cde3c3a2e76246c485
MD5 b5a0397021415d6cef0b2dc95d7e5c3b
SHA1 155bcc1a55d9e492723bf7535fc0425f80bd96a7
SHA512 de5c43822f74358f7eff33f6b62c236d0eb13ab9de5aca3261872d8a38bd14432bfaada659bced102d19e7ce12fb5cc22a94634acde148f3732bc639575d08e6
SSDEEP 768:PqPbK6lVIsFvXMzpmRMOL8mOBwS0CCxwI0aIh25uClSIoAQ1HGgB8iMOO8:PebK6QzoMOGBwS0CYwI0aQWzsmgB8WO8
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.Serialization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile19\System.Xml.Serialization.dll
Size 28KB
SHA256 2b38b661a5717a42a9230b31f38e9664ac6501ea7deffa53d17f7cbb5bb78571
MD5 e0ab120cd5d4d19df27955db7efb5703
SHA1 6d778756d7e1fe467824e52edd35d3860cea68d5
SHA512 882655a8ed84c8f1d27dddb8240b9ebb7b3ef8d35a46ae0185d03428f918ebb52d674d70744b1282a3a359218893795d097ca93db6c61211f349215fd8d31b0d
SSDEEP 384:Gci/YkwXQXc3j0uSMIqWio75hNOWXj6BLiMZvtg8VRWJPdqZWUMnJ//0GftpBjmf:GcibEyc3QILiMZW8VkPdqu8i4yX2Lpp
MD5 SHA1 SHA512 SSDEEP

Submit Download

mscorlib.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile19\mscorlib.dll
Size 179KB
SHA256 e15000a57d6c0d6f4f977bfb9f89cc05a297445932be8302bbe49fe8579fc886
MD5 5696a27df64bbd365b141079b118efe2
SHA1 f2609d56bd3691ccb126946908cb9d8467a33f2b
SHA512 794220a1687b1ff5e8b48180c675cf02fc48a7048536091a57ebe594ce1a42729a30c5e685205ada59b8ac61b0213068951671619d9751e61827ed70ec2dffaf
SSDEEP 3072:iQ1q4bbh47EtSUzjXtS0Zt/MbvGpo6HpFsY8b8Jl:vJ4gYUzjdMMo4ptl
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile225\System.Xml.dll
Size 40KB
SHA256 ca42b5d79d9cd09ac8e8e463bc58ea4acded433c7386293b20937a254db6ffb6
MD5 c90d090feddab15ac92d085a488adf6c
SHA1 f0d51bd12defceb703dfc658893b6c430b958188
SHA512 8d984de3c77ea8a32ebda150a4efb2de4a0a274c1d5dd6c43343e9451897e27be115c45096370b85a4ac826a1365c8826f913f371259dd77efa2ae9f72840056
SSDEEP 384:AfppuRSl/D2/gDuYYE4JIIIIIII2443wwwfdPdTa8/t8/ndqRSg7spzvkQXeYF5a:ACRSC/g8E4WMxi8vkQvEDhEZ8iNoyL+
MD5 SHA1 SHA512 SSDEEP

Submit Download

Xamarin.iOS.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile240\SupportedFrameworks\Xamarin.iOS.xml
Size 105B
SHA256 a64318c44a5ee484c11cae504c7a372170af5229d08555812d6581c3a369d288
MD5 6eefc7ff98f542607e4b5da02b3a4c20
SHA1 17515a69aaefea5349ee8facb90e3d3153b94e0a
SHA512 0b2d8e0cf76bdaf38307335a16bed5009846e532f608110c5f47da56b221f2819aa79100a56aaf0fa2ce3d8867147527e08cef8494bb0df429468dbb53cf12e0
MD5 SHA1 SHA512

Submit Download

Microsoft.CSharp.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile24\Microsoft.CSharp.dll
Size 22KB
SHA256 2832c5957f3222df3e89372a16f78dc8d47464b31250a3480f55784c39f28c7d
MD5 b14f5c1f162c328af0c2e7a120427b16
SHA1 6fedaf46f9819d7ed44dbde0cb45d00924351025
SHA512 76ef6120bc55fdd25db3cd7cc47d8d61e37d46ec10e8aaa2458529e9b8a92b707a18f6f1320dfac4742db14df9b27d3b7f8352fbaa626cc7e37ec11621f0803e
SSDEEP 384:cDnKzC+22WloxW4MnJ//0GftpBjyKFtAHRN7BleAp8x1SZ+u:cOP1a8iQx5pK1K
MD5 SHA1 SHA512 SSDEEP

Submit Download

Xamarin.Mac.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile24\SupportedFrameworks\Xamarin.Mac.xml
Size 105B
SHA256 e9dbe984dd2a47b35fdd5015db5b1023d14719ce31377f4340797e6ae73575cc
MD5 2130697f0366789e00a14d4b5af5da28
SHA1 e0e2200f5a7c4ea89a912b946ff1337285106d69
SHA512 6d0cb8685dabc39d3f4166ed39d004a46f885ce976123a801140297b35783f94e7b97cda9eb29b6fcffd3386d813571c40a09e457e44b20f842be7537db8a3d3
MD5 SHA1 SHA512

Submit Download

System.Runtime.Serialization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile24\System.Runtime.Serialization.dll
Size 34KB
SHA256 81f356d98dc499d43a8d761dcfb7bf384aaf155d6bc79fd7644c952aa9de1d45
MD5 61a02f566d09a0c9d0b10109190503bd
SHA1 4120abeaa43b7fcaf10ed57d89a8ceb013757ad4
SHA512 69987372801ca18124cd4fd1a39355e8d00ae4518bbb34ffee591d7d1b62a8be5780ae7f9e1f867ccf2b82ca808be36af8a9bcd7d113f08a932827b4ccec9d9e
SSDEEP 768:ZryAHnOkjkRu3u5zk2SkLnY7nD/pM3FhB38iUGacYfh:Z2AHOkjkc3u5w2jLnY7nDmV8S5oh
MD5 SHA1 SHA512 SSDEEP

Submit Download

Silverlight 5.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile255\SupportedFrameworks\Silverlight 5.xml
Size 286B
SHA256 576b3823b0e35c4c8e238d032f0fc071e878bb84cb224d29d6705bb1b3aa7e02
MD5 c92d62e9fa42f7b7fa79e66518c303ba
SHA1 ef36c26cee9b4b5ab885e085f512a780e4a4ec06
SHA512 74ed49a8756cd70eddaefcd68ea7f6f6deca4d8fac1b9ac12de6cdc2f0b4b3c412b9830d33f4425ae2a6b55399736fba993a8d63466dd7db89619ccd035b462b
MD5 SHA1 SHA512

Submit Download

System.Xml.Linq.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile255\System.Xml.Linq.dll
Size 34KB
SHA256 0b54cbc472c3894f02aa79417deabc13d1b67c63948cea0f69034f943104e8de
MD5 cceb83bdbd4031d6b8d6203b04367876
SHA1 47c7a817d48e23846d5682429fff527b16a9333a
SHA512 10a368aa3332b66ac9372fb4cab97471e2e4d704d923c55e908a1d4ceb70420d64a0c5687186c6d50c901a6c7eabd9d0a2a11387bdb4a6ce245f4ae0908345d6
SSDEEP 384:ZvcCTvUZJ+fMT26uu0kTP9qhBk4hJT+eW6Oj6shmjWd2WP1q//0GftpBjPtjFtAF:Z1vmJ+9u4OeWMshVg8i1G4rW
MD5 SHA1 SHA512 SSDEEP

Submit Download

.NET Framework 4.0.3.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile336\SupportedFrameworks\.NET Framework 4.0.3.xml
Size 308B
SHA256 e305fd41cfc661e1e1bb09368358a390572a8ebe0fcd3a2a79ab7bc1c3d9f0d3
MD5 9c1a664ff72bf430ec26a151e5521b55
SHA1 f162d2e67965048ef25345d45c1cb0a258fe4be9
SHA512 bada2c9da98a264359d01f6b7c0ae2fad2f753abe95554a932e79321eef1d38a9aa0768e2e5cdd3b81eae4a7fe704db85006e215a7a7eb435a945f2b8437e033
MD5 SHA1 SHA512

Submit Download

Windows Phone Silverlight 8.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile344\SupportedFrameworks\Windows Phone Silverlight 8.xml
Size 302B
SHA256 fcebc23934d7c9eff7db603e530b5de4ce4a1fb57a625fc5512b52512a2afcc2
MD5 d72a30ca51e2deb02be391a11c217c85
SHA1 2fce3afcc53236eb8b2431e153d12f8be440570c
SHA512 c17356773c87a77a30be9c6e71de6cd64738b3255718589034d6afda7a6802021b8e6a4a718de10bf4588528d44e57de82ce286fef793b7a85846d5e03debf37
MD5 SHA1 SHA512

Submit Download

Windows Store apps (Windows 8).xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile42\SupportedFrameworks\Windows Store apps (Windows 8).xml
Size 263B
SHA256 a8bbbd7793329bdf66460689819fd5e3b738c9547378a0761e998d16f8efa1b6
MD5 f62ce52ddcac566b695178e1e78902da
SHA1 7b41f6aa0c83ecf6e78e72c0a72934039fa2dc03
SHA512 2649c2df42dcbb705283dab2ff7bfed82ef20524c7267533b1931e693385cee9867329ae85a343da42515e1edbe278b85b64336de7ef63b6c311fd2a28d47a3a
MD5 SHA1 SHA512

Submit Download

System.Net.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile42\System.Net.dll
Size 30KB
SHA256 e8ecd220b6ebb9b063dc53d2119c31d7344e8bc42298ad3aec9edca033260a7c
MD5 5c51224a58e56e1ecba9a4b9dbb5dd3c
SHA1 c1aa871cbfb88db5ece85d18a8901e96fb223c38
SHA512 7eff57f56de64d2556eb2c0c35135dad984dc44ab7b76f05739768c24e2939230f840b5157c539b13c772a19f53d3ffa39d982224b9debb94ca0019a98f1de02
SSDEEP 384:WM3q9/7UgdInyTSG8hHvKCSuS5KWSRGwEY1G7x4Wk0W8rMnJ//0GftpBjEafRFtk:ZmIgdInyTNWptiI8i6kiQgEtrE
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile42\System.dll
Size 35KB
SHA256 aabceb088c1070d373531c63c0028399458fa72a7e6b1f2c3d1233a966b6f1ed
MD5 97d45e6bef53636d8dd2ce00f24bbc52
SHA1 e77af5f1fd14f3a75ab4c78d950bc66366973ae6
SHA512 dbee2bf51039ad5b777b9cd1cdb94aea384cd486d9dda9d0ddaec228ff9c1502b04526866ecdc618c6ab01f6b2aa09b518b50af416af72a3e857da9fd830dcd1
SSDEEP 384:H5VWZWWqvD6mjLzgWX+YyDEIxSdYaovPW1/bPa7BB2m7uIPHWR1WH1q//0GftpBb:idqvD6UfCsyXgOOR8iJWbORvcr+
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.Serialization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile5\System.Xml.Serialization.dll
Size 26KB
SHA256 9ff35d1f8eb4faa65f63b46f5fdfec5651a9213c56f4d84f509380ac867042c8
MD5 59138311cbd29a330fb27dab889ffb2d
SHA1 c4cf643a66f68c363c77f054d4d3f71fd854c43a
SHA512 52686e98d1cb28713c9ef87aa9d52b1a1da32f97c1e28f51a3e24618ba67895c696a6741de13660b3ec7d6f1371a1af6ce00925f8a102dc6ec958948b4b68b48
SSDEEP 768:Sc7fZYF7fZYeESBZeS8ukidqO8ifV++rn:SOSBZ3T8kdrn
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.ServiceModel.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile6\System.ServiceModel.dll
Size 74KB
SHA256 acd52bc9e87532b95649ef4a5728772389fa88be05d80c97e8cc225cef246a75
MD5 1bb2e12cc0bd69a8ed042be01ddd672b
SHA1 1002a93ce7f68b2f9addb81f4609b706e2ca4da4
SHA512 77c59d97485b3333cb1efca18958ebc973c5c858b25fea6f1139a467e7643953ca81269d344cd582573bacb03a4ef6f813ec834539f7355f16a808e8b1b50dab
SSDEEP 1536:LpOStoQqR2OyfHkVAwM6sU/CvRLDbrWSdQVQM68HYd1y:LpLovyfH+sU/CvRL7E68ao
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile6\System.Xml.dll
Size 40KB
SHA256 b0c55cac410f739bf0fb496f39463a853a2ac2bd63b55476127967c1c9118d1d
MD5 2117fdd42de5967304d313303cf43803
SHA1 340c5cb9865bc3244dbed39af4cfa951f377ab57
SHA512 5f0b9e7dc7da8e670daa3631518dde073dc419d07d2828866c59b7afe8cfb588d59a31dc0489f0a29b1b64c52b5c92e5909b5e28c94a6ed1250bd820378e2894
SSDEEP 384:Lppu0w4DE4DM0fezyiDf6bQY9HhX5pzvkQXeYF5qfDbQ6nh8SEB7k5WFCWC1q//u:e03Yefez/CvkQvEDZQd8irK8NU
MD5 SHA1 SHA512 SSDEEP

Submit Download

.NET Framework 4.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\Profile\Profile92\SupportedFrameworks\.NET Framework 4.xml
Size 302B
SHA256 a9daf44b3fa7c1b7edecf89b37370cee9f3fc425df2349046550c55c4fba7609
MD5 dcdce95430e7d4805c750ee12e0a9903
SHA1 2633fe5948f5cc8c8cd9a736d1725700141ba57e
SHA512 64a6f2db7a1b52636965fc487aa81209f1c7be1528f63b09216014525569fc6abb95c22623c1697efb16fb4bd6a3b099a41d606867312262ecb2e76ce7a57220
MD5 SHA1 SHA512

Submit Download

System.ServiceModel.Web.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.0\System.ServiceModel.Web.dll
Size 20KB
SHA256 15b6d91c67dd31b41b602abe826dd4866abf1d57e9434b2d2096be4f7c3e7d92
MD5 7a428fff3284013f8b278b1a00391674
SHA1 707d2c072be87edd958f7adb8b5d10e9894a611c
SHA512 f3cabebe8559a8342cda8d0796c21657651b2f5a01619a9b34f437c6dccdf170eb014fcc84094f0ebd779b1880ff1a2899e0d707e82b3be7b327716e76543d4e
SSDEEP 384:JkOmk7BhwWFnW31q//0GftpBjReCFtAHRN7iPleAp8x1SZHh:Jv78iW5ibpK1s
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.VisualBasic.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\Microsoft.VisualBasic.dll
Size 26KB
SHA256 b56244467c3d115b27456a4d401a9324bc94ed66869004ea5463e324c43052eb
MD5 4f09efa8aa11664a5e196e809a57aa35
SHA1 aa8d1c452a47193bfe5d69beabbcd8fd6e59ca46
SHA512 e798f5ef276461e6e0af82529cebd3acfc66fa746381786876a25ade75601346e69b7effa927a04d31ff6cbd47c5383c2e7419d32927d2ca602517fe11827e7a
SSDEEP 384:neANo/4IXE4VeLWyHf9QbWz1LHB0GftpBjRdDHRN7EuHlXxHaV:eB5E4VarWiBDTn6V
MD5 SHA1 SHA512 SSDEEP

Submit Download

Windows Phone 8.1.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\SupportedFrameworks\Windows Phone 8.1.xml
Size 401B
SHA256 f887028bbd3085898089c870cf1b79e46b4205611bc5dad763da9829273e2d31
MD5 60d176223196b54d2f5251cc6fbb1b34
SHA1 4f2db95dc2bae70d8cc82b1baff87a9014562678
SHA512 37ee7f80e78d3057ea9db93e80bb8783f215e40f0d492cdfec87b055e1bb0a288aee0e0520a17d76d9305045af4468b90cca53cfcf9001ff671fd2f74fde5aed
MD5 SHA1 SHA512

Submit Download

System.Linq.Queryable.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Linq.Queryable.dll
Size 30KB
SHA256 11c61d0bb6a703d0f9effc24083308aaa24a53d3bfc136b1fd1e16569e82614a
MD5 3d4901bba847dc7274a5b8df060334c8
SHA1 1ca25cd79fb9e18110c849876a2dafc50b7ddb10
SHA512 59d0c4927266875d7803221859d5b99bdce7211ce15451a99087df539bc6f82d9dc8d0e5cb64386b69cc48aedc34e8169348974c7571bef49ee9c3e2f7250bbe
SSDEEP 384:/ZpeU2OtnXnAHJvvnYoVors/9vWP/Wd1LHB0GftpBj9W9DHRN7/+plGBPji:/lNXAHJrGaWia9DXBe
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.Http.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Net.Http.dll
Size 45KB
SHA256 bb39e3ec2a5c44c5d0e8e3d32592df7a2934f394702be91e81f1378c6c10146d
MD5 53e539a787433320ee4b24e06f3024a1
SHA1 5c03e03fc15c4a77f5cf861cb45b6758f8a0298c
SHA512 af9e6737939a7489930e572998eca79122753ccc43227df33f320f83fcf1e2738bcdf3e45423f9284763ffa32e723bc1310fa6cb87a7fd1d2d595a0ee446ce82
SSDEEP 768:bRBi0w3x1MdK5GSRrm2rN9+Ba58WiYDmNY:FBid7MURRrp6Ba5XLDQY
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.NetworkInformation.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Net.NetworkInformation.dll
Size 21KB
SHA256 4c838f8d0807efb732d9d26ff93715955db83b26826f9e8594790be657c6364c
MD5 255ad37f5df44f46b672196dd578fd69
SHA1 6f021c8599b9504e3802ec8835c9c95721417704
SHA512 a4f1348784159a28dc09daed09c3153409d7e919bc85c2117f55a24926d08f26e1ada9ac21190fe17188823af4d34c82b848387143a21bd9a9f748ebba12610e
SSDEEP 384:UJqHEe9pWHQWC1LHB0GftpBjXDHRN7wlGBPj+9O:zlmwWiRD9BV
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.Primitives.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Net.Primitives.dll
Size 26KB
SHA256 b56129c6323e327c29212a2f71dd1162200c5e2cf077bc2e48f2b06ab60ec98a
MD5 7be1ad76c92ba780c7f03ee26997d9f1
SHA1 c2490af41ee2b3704620e627cab0b9b20c1b8951
SHA512 9441947135bb1076eaf4536556df821d755f706a78963d6fc73c4219f24c65d288023b2af98b97e6fd4edf00edf1776adab9ad451df20a0f948334ec1379f449
SSDEEP 384:GVjVjVR/3XYF7Ej5/HuS5KWp333WfIWt1LHB0GftpBjhBDHRN78lGBPjc:GhVjVR/3XdbMBWiFDZBw
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.InteropServices.WindowsRuntime.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Runtime.InteropServices.WindowsRuntime.dll
Size 23KB
SHA256 92567ee268f17d6f7e34412304e8bc24482cf921f8cf9028600df6bd3ebcfe48
MD5 288ba4823a7c51a3651fbff6cddfcd37
SHA1 8a65e38b6e407023cf3ebc592ed07fcf425c08d2
SHA512 e6b8dadda68d3fe99e7a0c9e6bb5415d27cf7c9c0a545010ecde25c6ebda95137b400545d6c0a7de430299e7eed3dc50bf00e316b8e559c6c655d43cef0ccaed
SSDEEP 384:vmdYZH3HUnkq6K0eW3JWj1LHB0GftpBjp9QDHRN7aMlGBPj+q:vIcHA03OWi76DOBSq
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Serialization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Runtime.Serialization.dll
Size 21KB
SHA256 1531392627c586b7149d469de04cee8911004fa3670197ad2f457081a1e0e441
MD5 0918dbad6b539035a5ae20b9651c7813
SHA1 7818113fc8901bb14ed2bcba1d8a6a8d09c02b20
SHA512 8ecd7dafdacd968c9745a418fc12d49aff7288391537347bcd28326a99e4fdd3d045b8cc06bcb55ea620890c081d7455c20baf55a9a51a8b9f891eb04cff631a
SSDEEP 384:Har558eRWGNhBZW51LHB0GftpBj/I0kdHDHRN7BIl15nv:HE558e3NhBoWiFI0kpDBS1v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Text.Encoding.Extensions.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Text.Encoding.Extensions.dll
Size 22KB
SHA256 676165ebedf08d1e16b6981fc136cb4fc057530591e8857e56fea652c985aa4b
MD5 3f7e833f9e9fa85f14cac50f624c2bd5
SHA1 a372eda9efc21fd6ce607f0b82df81801ffc15cd
SHA512 29ab0e634dc271bf4e4452cd85660614e176770f70efd77f3eea2b1a9ac6818d7f415a310cedd917a06b58677cc818c94b9ddf59c3189f7300f3de73d4aa0617
SSDEEP 384:cfCAXLX8G3j5qWFXWb1LHB0GftpBjVZvUPDHRN7zX98lXxHq:cf7XLX8Gz5J0WiXNUPDzXkK
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Windows.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile111\System.Windows.dll
Size 20KB
SHA256 02ba9a80ccf8a540bb0cdd2a44ee97e9920213c5c6740ddcbae5003ab7562074
MD5 46b673fdbe3612455e4cf6729a8ade8a
SHA1 235c6c326948f5d685f9ba131dada01faaa05c00
SHA512 5db872a223da5bdcd991de9bc1b17625e0fe52e33ad88b31a35440541dd03f17910f76824e0ba481cee46a79429aeeb803eb5c54a795ba7f7d8fa8154d721e86
SSDEEP 384:FILK6jDaHggbW858WZ1ae00GftpBj/DHRN7anlXxHA:gKTAgnpasidDaHg
MD5 SHA1 SHA512 SSDEEP

Submit Download

.NET Framework 4.5.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\SupportedFrameworks\.NET Framework 4.5.xml
Size 304B
SHA256 59fffe560d134993a5e194c011231b21b69688de2d4734186cb07b715a477b3b
MD5 a925cb8893bb5ff9d0be724f0cf4f709
SHA1 a85855669732afe7327e05b2812f4f100adeacd7
SHA512 c0655d83e506507e05308d5a6d62a08d2a3e4c0fe81670649b4ebff38046c82b45e3d01944c702b62820f89cb5c842a309e9b10d4a0b4b44dad9343397e04d3b
MD5 SHA1 SHA512

Submit Download

Windows 8.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\SupportedFrameworks\Windows 8.xml
Size 288B
SHA256 0192e0f84bd87061ff84e0ef81e0ac653b35b1a8651e91ad7ea91fccb378136c
MD5 9709aabbb1ac60b2a40a19479fd37569
SHA1 f9709144a3a39f2853f16baa0bb9ac8f34e3ab92
SHA512 2b59a30903fd4b53b27046e0524aa4915acb57f0b5becc5bb3b091ca7722f77c30f0df6130bbdce1bf4b7ac36f5fe17b21dc12cb0ffdcbb6da7008a2318c46e2
MD5 SHA1 SHA512

Submit Download

Xamarin.Android.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\SupportedFrameworks\Xamarin.Android.xml
Size 101B
SHA256 0ab3133d7c8290b6640e315040937d6a916446db24c3ea9be429e942f88aa0e6
MD5 43a3cb6a602e28430b28f8d9a7f84d0a
SHA1 5902f8c7a07cc40a718ad02d27613a101e677d79
SHA512 072609ae5528aada76f88861aea02d6f9d0ddcb7b1010e1171d5b0cc377636db1d1871dd889c55584114e68a6945d4b06aa4984cdad3d4dac80e2e655592e702
MD5 SHA1 SHA512

Submit Download

System.Linq.Expressions.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\System.Linq.Expressions.dll
Size 47KB
SHA256 2722484e58f41e9e2c23671e7997480d136ac4ccf89b63b2b7f37d292d4a5a4f
MD5 227ee716a2037ef9c61707e7bfdc1188
SHA1 c36ad8bf1a05c535fdafff7a3c4ae4a357d7e811
SHA512 23985d460de7c4634abcc8218cd703ce23cb20920637edc05936fc166dbbbe752a733077fc1540afd9af6a9f8aa6ea9f9086ef308b8d23665737f58022d78b49
SSDEEP 768:JlwLFLNk1Tf7PrBhyrrJb4cTKguKsc6JrCeqK7fBHYJAuCWiCDQNX:i3OTZB46uZJDQF
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Serialization.Xml.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\System.Runtime.Serialization.Xml.dll
Size 34KB
SHA256 cda7c313193132773eff6a03e82b6637b5ffab3078cb07f9ef56f07eee4e9985
MD5 ddb549d99ee9f0eb3211eb47537d8787
SHA1 92703e64c1e783217188894d39863d551abd4173
SHA512 2f97784a4076933ccee7e2904f9d0e8ce86a0a418bbf2cb7a67898d6026e8bbe6993e4cd408caeddb9fb1d3160b962f5481c25ff8e66ade0e8e3235518a07f8c
SSDEEP 768:+E9VXE5u55s12mCe+9ycoB7Wi7W6Dn3MMw:rVU5u55s124+o8z6Dc/
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Text.RegularExpressions.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\System.Text.RegularExpressions.dll
Size 25KB
SHA256 e5e56f9e34d4309ff55ef7c3afbdbbab7bb67fdcfd67a31b67e5723f5973862e
MD5 4b36b05824a2b3e1f285df0ee4667d05
SHA1 c8f3da195b23eda7179eec58492f19d37dae7cd0
SHA512 eb0cea19242e70267be8922149ca2caddf3f473b28603b2e70f2d04d31c6eb631a8ed984ff239c4ae6ae87598c92a35b3b5472c3183a1fa244a56f3641c950c1
SSDEEP 384:FGdceOHHm3hQGS6KWnE76zWgzWYw1LHB0GftpBjFXK/DHRN7+al15ncY:FGdlxZQ6vJQWicD+w1z
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.Linq.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\System.Xml.Linq.dll
Size 20KB
SHA256 b45660e27832ba85c21fc1e79eeebc7c022e6dd70e9bd9b4e7cc9fa9b0be3545
MD5 2b6eb4f3e54dbb3c5e19ec29e94563b0
SHA1 e318e964ffe277fbf6abb52d8fb083a3dcae58e2
SHA512 5635b6f199993dd7059ff42e80733fb56b0467e65220518446789a0ae0591cac0bf525a988ea73d7fbf4d293bb1d972ef7d015adb0170148b7cae698b6bab477
SSDEEP 384:S/BJxeWl2W11b/L0GftpBjY7TDHRN7HlGBPjy:S/3xl3kieXDwB2
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.Serialization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile259\System.Xml.Serialization.dll
Size 20KB
SHA256 ac3028d93d68502be49eadfe4e64aac2681cf03a7a60afd6fe90c118404f2207
MD5 ea4031dd937904161e7e1e7f552d39c4
SHA1 a293d4b7e8dbd471449216ce9fca8cf1f4fb9a5b
SHA512 4a19164f13e143c690f4562854643c4cd75dbb5a1b7f9085acf861e8802c80d18edf9ccc7327167ac7f82ec076fc72a37f6e6ab9ee4918457885e7fb6946fe8a
SSDEEP 384:LYGnCRRWJKdqZWC1b/L0GftpBjEn2DHRN7jXYlXxHX6:LURkKdqxkiO2Djm36
MD5 SHA1 SHA512 SSDEEP

Submit Download

Xamarin.WatchOS.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile49\SupportedFrameworks\Xamarin.WatchOS.xml
Size 105B
SHA256 ac3cc4416f2b36383cb11ca55519ea1b2ab4f09e6085f1cbba58fe237e63f29d
MD5 39a50180b2c5fa54d97a6d7541ef5877
SHA1 ad7cef3e780c2d9498e0aeb16087a1950e7ab835
SHA512 e408cc58d09e3616fe4a435024513e13e0ee3e739dcfbfaf1909578b7f8cf53eec3e6db8c992b9298ae8ac93ef8db6f056275a1d98a7de3c857c1a4f1eba3205
MD5 SHA1 SHA512

Submit Download

System.Diagnostics.Tools.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile49\System.Diagnostics.Tools.dll
Size 20KB
SHA256 8222cc8eeeeb3b46bfce7aca3ecb3e26cbd077048a92b73cd4242acd902a7cb8
MD5 a5d18177421cb6ad9f3d3a87ff8b6e88
SHA1 03d46024be413d738ea5c1ed816e65bb6913f6a4
SHA512 85eaa9112568180c0558b2b2408ca5d03da61c496725e49bfffd0969ad7dce40115f7ddb67069f7f1404053242195a53a2fb7928ef3ff4e0af6d37a82a80cb28
SSDEEP 384:UTo8P0TWOaWl1LHB0GftpBjBHDHRN7YULlGBPjob:wZeLWinDtkBo
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reflection.Extensions.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile49\System.Reflection.Extensions.dll
Size 23KB
SHA256 c23f8b9ed01258e93a33c6bf56be1b80a07b953d35127ea13503705fdbee4218
MD5 ee5258313dc6e9d51c14a00d5f8b51f9
SHA1 efbb6e77a3ddf7b17fa0aa6182204daa2770ade7
SHA512 34a40bcb773f50ee2fffbe83e014cf664567c6a149f6c8f720a11c80a5ad9287759d71bc286231dc48b0f9c7860a3a1294ac9d1b22175d87760b39fe3993f9f8
SSDEEP 384:Z2TR3xRTXrAj2ZMaWq4WP1ae00GftpBjmm4+DHRN7SmlGBPjo:y3x9zq+7asio+DSjBc
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Text.Encoding.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile49\System.Text.Encoding.dll
Size 22KB
SHA256 0e7a38a927fd90083c88fa00811f15344a686a2f90ef9d6581fc583a224facee
MD5 951cec14c9a1ea221e2005b1a4514377
SHA1 88be05cde897991f30cf11d089e35e52fc3da801
SHA512 03995930eee3cc81c3d772b6f0fd80269de5c4e3aebc8a22eedf3c71811ba7d0baa8b0881397ddc53a8769f9033f0bc04e66fc1d2200efc55335bdf5bd0cd708
SSDEEP 384:DR1sBWCTWh1ae00GftpBjiPoDHRN70FlXxHRW2:DRWD+asikPoD0pj
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile49\System.dll
Size 23KB
SHA256 7cd8826cf21bfb1a939801cf9a248f61273e3c8abb59a5a1b32bbab853ff0231
MD5 e65a197e6e8cd8333d5d4d3745a84b8c
SHA1 9278b0642d131f2af744c2b3918b2131e3373ba9
SHA512 6f01df7a7325c54b5cdd6c2496fb527d6305e7c032a94707c5335bf648f4308f55dd0b75561b8b9f63d6db3790709728316ed28440563f0235330a4d2e05be00
SSDEEP 384:VMSKE+oEDan709XpyBWo1Wt1LHB0GftpBjTDHRN7IlXxHn:VrH9cWitDGH
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reflection.Primitives.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile78\System.Reflection.Primitives.dll
Size 29KB
SHA256 d889b8e2f13a8c28299650cb3668bfe4cd6820fdffff4a03eda6aba61b9abc1c
MD5 5ee6bd33f875007b934599394c449959
SHA1 8b4f63328588d460c602731ac47c105a4e4eb85c
SHA512 858c9223d2551d896371e4a9b86dcb6bf6d9cbb2d824889bc86ac1af120a2f0314ab28de1e13fd9ac60d765fc47c6dd5f3edb568f3fa7db0117d27195ab76c44
SSDEEP 384:8Sm1kMdK29fec+UJVyK/TZ3Sd4VfZ1FWqQWU1LHB0GftpBj0oVDHRN7DlGBPj1q:+1I29lL/TBSu13eWiOoVDcBo
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Extensions.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile78\System.Runtime.Extensions.dll
Size 37KB
SHA256 1fde07d19c925f17ad23d802f5583fc5ba0e3196c82431faa952e72621f216e9
MD5 56ceacbd124b3a2a77a03fc70280dd9b
SHA1 42ff4d8994cb2cb2e7cfe0718c4d964639843949
SHA512 cc8164a9f9787d196b2bdc71ffccb81bf70730d572c4d78147c73001b3a4f95b8a6b4da8e21eb1cda5f6032b53121e5ebe51b29d3780994cae7d4cd6437dc409
SSDEEP 384:zVrcY1ol1ts1gBmO5ZX/Q2520kNkcdTJ4eNewnwLWLTWEa1ae00GftpBjxwDHRNF:zpml1tQgBmOT7GTkHcsasinwDr7yW
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Security.Principal.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile78\System.Security.Principal.dll
Size 20KB
SHA256 f99b30e2e4fd449cd6c947734f234722b93e09c99253ce471ba310abbbe900ee
MD5 15562a5756ae01ce7d68e75c780919db
SHA1 149cbbd21bbbafacd850212be26a2bc01d094c79
SHA512 bb491d34ff631da5f50cbead0e7cadf5071a8c20c0011152814e9217d6a43a11aa1bd6cea86c49ad20efa56d02ddd0b172c4becec27ba775dea6561093173ef0
SSDEEP 384:soHYVoWrhWc1LHB0GftpBj+sRDHRN7gqlrlIeCb:sDV93WitDny
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Globalization.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile7\System.Globalization.dll
Size 35KB
SHA256 7b3b9be7dd90419503113acb3cb797f77c24faba3f9bdf4fe91d57dd616d6d39
MD5 849f648b4f96278669f6410f8c159f94
SHA1 fc66f3384835722177dc523e100574bd06c45725
SHA512 6d861de4896cf6ce40aef607b7af32908dbefd64b18ebfcac7344f5e09b671b607a33b5a01d70eb5e2afa14aeb4ecea152b235c59aa304e07f09cef878f7ee94
SSDEEP 384:znnsAcN2vBvla2F9jQC5Kzdo+viPtChAbYmbPqQ/3Cjuy8u92YCT0FRRWHRgRJ0c:zns9BQQziVy92YfDMyJuMWi5SrDJ+6w
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Resources.ResourceManager.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile7\System.Resources.ResourceManager.dll
Size 21KB
SHA256 107077ed0733208eb3ca0b67d8b50966e70d5246cb040fba6d37c5de547141af
MD5 6a8e0d369784d407e1f91dbda75d5f4b
SHA1 6f2260f154b01c7be3d353f5408d9f3a8450be0d
SHA512 4580062e38a98e4a40aa16a08c12122e093b3e1b9b5ed5a747c5efac32df1b85e9ae59728bf8bb7150becb6dddccf10bdcb14df6a30ed56406463f9478f12d19
SSDEEP 384:PVC7xny+ZKWGtWY1LHB0GftpBjt7DHRN7zlGBPju:PVC7BfCjWiLDsBK
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Serialization.Json.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile7\System.Runtime.Serialization.Json.dll
Size 22KB
SHA256 4c99f7224ffa72d790dfda66a84850e3f8885905c8f849f0cb100426379b6677
MD5 9b84038525bc452a769620339af58799
SHA1 7f1b815b5a93928fd23c46f1c5a07b8af54f5408
SHA512 7843cf32fd5b044c9b1ca5d8877226b9f88e0464ceb913ecfc025f1f26e191442e5df152fdea67b2711fd7d4025700f61f844f66dd1818e8afd84af16b9fb448
SSDEEP 384:JmSXdwr7LvW/iuBnWa1b/L0GftpBj0GDHRN7jUIlXxHl:nm3LciuBvkiCGDjUGF
MD5 SHA1 SHA512 SSDEEP

Submit Download

mscorlib.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\Profile\Profile7\mscorlib.dll
Size 37KB
SHA256 4ab28a7c7332754c943526daa497825fa4151a3ca82054b056f60a4f19305083
MD5 d2bba0a41bbc07848b4d4a5c2d9bd9f8
SHA1 7b07a9d2b7dfb50855a9e3c647629ff561773c9e
SHA512 d3b24b18a5ccd25407c74a793cdc11245124d1ca0f58783045e321ffe5704fba31d0e0822943391a7061cff6f21fe774c47b41e80bd047e309ed881f0179e84b
SSDEEP 384:c9sbkCmNWqUKF+1VgxPcearKBSJOsR6nCvlh7WunWp1LHB0GftpBj+jDHRN7Yd/L:cukBHmsSJOsjV6WisjDYaBPw
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Diagnostics.Debug.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Diagnostics.Debug.dll
Size 22KB
SHA256 028f4657dcd87eaf6f14e6d42df86846ffb8b4d4e7f4bad0d5ff6907850b5dbd
MD5 2046e08643e66cb73e422e4175a23d51
SHA1 99b72b741211069571701df0841d7373503cf383
SHA512 33dae8825ad75e158bf8dfa48bcb0e05d8522b1a58b957fc45728e5b1967dfff43eafa4a53c23f40fe5e0d462fcc974d709166ada17d27d3dcd7c24fe40df20c
SSDEEP 384:KoZvAYWuoWG1LHB0GftpBj0DHRN7zlXxH4efeW:zeE4WieDLYkeW
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Dynamic.Runtime.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Dynamic.Runtime.dll
Size 33KB
SHA256 39a24b3381c69f33f11df63eed7437d4ccfab7520e67d0dc36c711b5522c5d8b
MD5 3bfc77fdf6c2b9c9412e92240f63395a
SHA1 61802983bfcb8a839a493ad982f91397c910eaf9
SHA512 47c1a6e567a8197c583312089010ef7624156fc05502541f16bb0eb00288cd1c5699a288b72febab32473d6bc3ab5f6b25dd8c4d78ed861ae7f6fcf03af8f7d2
SSDEEP 384:enR+OgOYRwnBRHEqlaGw0xnj6HR/ZVZiZk9dbQLvZCZqZMZqZCK9znTPbZhZQEjr:6R+OgOYRwnjfHw6nq4T/nGWiphDlw
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.Requests.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Net.Requests.dll
Size 26KB
SHA256 d365d53d2dda25e4bad4523f15a14b06fcc15c81b04d3aa567f937ba03adf231
MD5 40f22c0b362992735ebaf4ef11de93ac
SHA1 feeddafd3d1a6c08d56fccd57fe1c7fc6bcc512f
SHA512 ad6bf39635997cf3c467a0548093e491d8dc8c444d32e7b28460ba5fbcee681923561782f31faeade28d4531b75c85a8021c9cae852edb5ad1d1acf3def7a3e6
SSDEEP 384:d4VrH+zKcYSUWZ4W21LHB0GftpBjFn4DHRN7wlGBPjJY:moCS70Wiz4D9BVY
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Numerics.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Numerics.dll
Size 19KB
SHA256 f7b0d820658bb45afcfd70fbe9114577361b85387f1d06d766e1db886c766571
MD5 3dc3e4a23a2160085eb4ea0ea40ef36c
SHA1 d0660901921c8e5cc174247123c643f9faa53103
SHA512 0acdbb4cbd21b8adf1a9f76ee75ef98bda058c139efedaf7e6e6b08aed71054cde01cf573cc6d80a4e6264e530ccd4f1079e070cffb4c475074d20a92267ad28
SSDEEP 384:p/rM3bW1TWq91LHB0GftpBjeqDHRN7VelXxHw:p/I3OTWilDCQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Reflection.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Reflection.dll
Size 35KB
SHA256 b9409b269a0352eb80a2b25bf8f768ab1e0055c55ab822d56f500d1ce6412806
MD5 296ae4021742100eccbe5a8456d0df73
SHA1 1e84ecbb5288b6d78003a2947933e05ad4bbf7ea
SHA512 f64600244cae2b15730c0b1476b5bf3c672d0fb0fa3810df2a2699e55c177133702a892ef0b0ce34d36402d57eeb4d6695e35791ddc1e81d37e70d56bb7c7975
SSDEEP 384:I/65Fu0j9XlOmPGNqLVmeKlR4WzMW41LHB0GftpBjSDHRN7ZOlXxHG:I/+PpVSrP1CWiwDZom
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Numerics.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Runtime.Numerics.dll
Size 28KB
SHA256 dd9a676f7e9f34a6d90eaeb8f92344329de15255bb83f7eb4572310bcd2d82e2
MD5 9fb622b72d3352801e4b3223ccf65323
SHA1 f7f985df2624223f0dd1bcf7cdc7ee29c9de20c0
SHA512 7a119b6bb756c61e3a90eec1bf0025d16fd9524437a286ca58ccb03c053419edf6b2b60da578994f4371c48be5533ff5db4bc31c9dca2b31abd8775eef811c1c
SSDEEP 384:QHEp7plclSlcx6Nm8oD2YW9RWd1LHB0GftpBjOCDHRN7YElXxH4:NFLUWcx6Nj70WijDDY
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Runtime.dll
Size 113KB
SHA256 4cdc297f2bdc20a76e7c97b302fbabcce3b348ba01eb098ffdb0268c4e330024
MD5 fc701d7f8e0c81ab5737ff529f39470f
SHA1 797433e20b7fce47a82bff82d55c9625634e8de9
SHA512 bf22dc737404ffec9723593acceb514a3462970877f5d3fe6797583a09dc8d0c58fb4e66f967425a09fad40c96822d29a83ce02e1ac2fee478618b60e803919a
SSDEEP 1536:22GEil92AgWTGTbSQ7d/H+EnHInhN/VDp9nKgoQqsPDlBA:22T+CTbSQ7d/H+EnSN/VDpNo7sRBA
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Threading.Tasks.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Threading.Tasks.dll
Size 43KB
SHA256 8b97c1294614b625f22a95abf0dd757ebd06dbde3bc60221a28043ead6b1fe3d
MD5 8706b39bdc035366f38957c286dea5e8
SHA1 5026ad149c082a8a8a6fe466d8c06a90514e3cb7
SHA512 7d52790f4388db4aadf510d410d189ab2d66e807b499094e09d5a028daaec1b100dc661eb37b9a5c96c9cff1237785b3d46751e14d74fdc9b704b079e2fe7acb
SSDEEP 768:hc42sjdeXPMLYF33tqphXW0x3FsRlEefVNBVlDd8tBt+uEpXkiLDhhBjS:PTjdeXPMLYF33tqphXW0x3FsRlEefVNS
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.XmlSerializer.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.5\System.Xml.XmlSerializer.dll
Size 31KB
SHA256 596176d733e6d2354737421dfb174f8a0c57c6ba691216c89c99c258e8ceeb49
MD5 398f49afb4d9789017871192fbd0e5e3
SHA1 4b346bd7109316763234630c5dd3ba381b2bed1f
SHA512 cc299534368edae7d090a95bd7aaabfc23cddb64459c2b846b581e0653756ab47f3e20ca0147755f88bdce6c6a4227aa820c28c159537c5c644dbc07a294d3c1
SSDEEP 384:FDl83LnL+GrCuX8zOs+tQ71TWFCSMIqWQo75hNzAWXj6LVGMZA7Q6kjoHNWeRWQv:pSLL+GljbSVGMZAiSTDkiPKD8w+
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Collections.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile151\System.Collections.dll
Size 41KB
SHA256 5937ef02739c862dfe6e319dcc0e31b9c8d785c8e9bcce91cb7e45010bc520a3
MD5 4ecf3dd3bb3f5a38de25fa892a451610
SHA1 318b8de09057035d9cf2fe112126a25605cbca8f
SHA512 16ef89e8b9fb850e0d1803f882335616ddeffd63e6eb2ed8fc80732a03bc1afd5c783ade469ad4aed1bd8d1ced99b032579a117b4ecb971d0d8e12826ced2515
SSDEEP 384:UQ3vPyy4X8KNrKfT6jVcShr8EuWurljyqus/7u9K8/kn8SP4/WWyZKEVak8rqGxu:UQXyyy0Tqzt8+bs42vfRacgWiQDOra
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Core.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile151\System.Core.dll
Size 23KB
SHA256 42e6e002ac8bc3f06de0d18262eea083172555ad9c36850b6014ea2deed3a2b0
MD5 b28edf5fa5cf632e9efcbceab98df5ea
SHA1 ec78c54613ea5ac403f35fa998a87f2df700150f
SHA512 da686ca26ccba36442240eebc71aee4f543650a8e9caeb5e48d3f4544e849b12bdffeaca9cec480dd030be1bf9842591e38d731155ed5c76ad39f0c518dd0a3b
SSDEEP 384:N/Xa+SIcDFY+gZWBYWc1LHB0GftpBjPDHRN7LalXxHi:NvaAcWWilDwC
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.ObjectModel.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile151\System.ObjectModel.dll
Size 31KB
SHA256 abd05486b939b5df73f64a0d60340956cb4334b4a4cba49cd948e409d0956b28
MD5 76cc7f14bf6823c670a17c99dd60c22c
SHA1 90c79d39d0b351a6f412e186b477b5a26bbb9170
SHA512 0ddb959d8cd6d771f435657c91ea12fc91cb54a0ed833ab081b73cf63f0dd6188f9a2bbc1ee0b8994310e83e89c948262b347ba607317439d9a8c75294e0cfba
SSDEEP 384:DARBRebgJV8wK9aeMGVik/lZKHTEVakSM8rqGxbZ4ZQZZZYZQA4o/ho+5lZa2djD:sBRio7bGFoAvkQbded7pRwWiHsDgBN
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.ServiceModel.Web.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile151\System.ServiceModel.Web.dll
Size 20KB
SHA256 628d37d05d6b52c9c847228277b0cdd8b73baab1858b8041c7eccb1079a4f0e9
MD5 1a10ca81b68c91995fcd3f0248674beb
SHA1 4460b2aaec6c0b548a9169fb40f90bf6dc438481
SHA512 b1b431b743f984c4b86165f17b01857d8847d9888ed589a82746ca4674ad0709c22378d5a4140db41d0dc7017cd98634ca7e1a5a468f2619c8454dafc95807f0
SSDEEP 384:qlSWNnW21ae00GftpBjkfUBDHRN7itlumCMB:YrasinBDiemzB
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Threading.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile151\System.Threading.dll
Size 31KB
SHA256 a12ccaf289ca3a5cecf2e8821eabab26f2913c3e09fee35da1a426182e980c6d
MD5 e47b9a68048b8a477e1b7754042c5984
SHA1 8127083b176f58dba27ad3cd6659a60217afbf95
SHA512 f8b3317a786b862b84ccfaecd177c174bbb5ec789e04bcf791e301fffc603e5b0598a038050907ca4c5e4d95a769cfcf488ced6d6975ac43a14ff02d5d3075cf
SSDEEP 384:4If4RzWWg5zHp3duHg3UXfBIkYKOjk0W2NW31ae00GftpBj/uODHRN78Qvl15n5:4HRqWg5zHp3dKvBnGJeasi1ZD8Qz15
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.CSharp.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\Microsoft.CSharp.dll
Size 21KB
SHA256 5e9072c28cfd4282e03a3a1cdc789ee7dd9621205939655a64522f5f4d8b981c
MD5 11dcac12fa254f91e53a88be7ea33902
SHA1 8b315dd7b7849d95d1d0dfb25d6d3583b84546ee
SHA512 fed1d494107983bfb0ed669dcedd322182ad2a380331ef6edbfbc3da1135fc05a45e4d0dfbb4b3ca8af16a6416c7c36c9a04418f774c46fd66245fcd77c0ee84
SSDEEP 384:cc2SgFKF51ze6sdmWlQxWq1ae00GftpBjtoDHRN7c/ulXxHzV:cyyd+hasi4DbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

MonoTouch.xml

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\SupportedFrameworks\MonoTouch.xml
Size 103B
SHA256 bf00b0413f2d3be874d9b53acca481d72b76cbd95d83ecda4f27430de126fa9a
MD5 9c118ea3c1c8f10bcccff5172b7920e4
SHA1 3389828518dbe218bd9d111aab2d9a1eab71396b
SHA512 e0bf068b7cfb9257f7002bc73442fa63459b86dbe9ed065ebc12cc6f5076774f4e9ab15ed1ea32fb6ff7bb0ac6310a005d5887a0f00bdf81599a1ed4294048e0
MD5 SHA1 SHA512

Submit Download

System.Collections.Concurrent.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.Collections.Concurrent.dll
Size 30KB
SHA256 b27a52f8fcd386331c7f0dc3934ff8066c59246267cc2776837d14152972b5ab
MD5 0a9f4078b4c426587858e7fb6c1dd303
SHA1 bd3717140a5b0e19dbc293cedbaa7816d73aa89d
SHA512 0f0541fa91f3a15250151f0ae07a3b3ec77ed000cceb8aafa62351256c34704b42a9079c3709d6e84cb00cc1e480a6d2994076f3a8c37c82b457bd4981397866
SSDEEP 384:UJJy0rVuVCSO3QBOWISomFg1xWV2ZK8rqGxxZbZyZUZgAR/o+oZa3uPsaq9QhpIH:UPjSfu9QhpIjBrrWiI8DFWJe
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.ComponentModel.EventBasedAsync.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.ComponentModel.EventBasedAsync.dll
Size 21KB
SHA256 49dd896c72def8d6b30232b80a8c1f739773e0e6d4cd44f040c89de40d3703c6
MD5 dd4e84786998af8b40133e81506f6db1
SHA1 591dfc83e599ab8f3ab673728bdf18b0eb5e8a0e
SHA512 219836e61276d280df3a4496ababac18707099e27cfd6eec5321d148c4847a873a12d10bd527e663be8cdaf4e7a67bf58974ce08b27baa48048aa51959670589
SSDEEP 384:nY1R8RD6CUSWP+W+1ae00GftpBjyejXDHRN7i5DlXxHm:jQCi6asi3TD8G
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.ComponentModel.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.ComponentModel.dll
Size 20KB
SHA256 df2c2e38b1ba65477c6f02a2e54a16dbbdd64c145e319c16dbd62f39effaa789
MD5 5e26df2177c101dd18f3fdadb8f8b69b
SHA1 edc5a329faae58288a945d7e8fa1d94fa2492749
SHA512 1d887b46936936469184f290082781fb825becdb036c1ff2622ae305639718c1c0615fb658d6cae1304c881af4a8e2dba7d9c0914c96825097cf7e2e88d5c087
SSDEEP 384:ahPfMQU+WfLWQ1ae00GftpBjj+QDHRN7x5lGBPj5+:4mdasiXD0BF+
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.IO.Compression.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.IO.Compression.dll
Size 22KB
SHA256 c6b19b1579ad957409a83aca1e194ac371fad13ba0b64cb90aa122b355bff668
MD5 049281b0fa564b9b9f3666c8e4114d20
SHA1 ca6488a8c04e9653b93983c95831c33f88d2cbee
SHA512 7337bb63b49a7e99bf6debffdecbe6b88adfc52b3cb225faba508537b7832a40c246feefc5c888f724d8d38c5d5c4d6529118f3cae2e74ae98f910f7cbf1cfed
SSDEEP 384:jIfzt7uahuAqWP1WB1LHB0GftpBjRuDHRN7CV9lGBPj+n:amATAWi/uDCVmBSn
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Net.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.Net.dll
Size 20KB
SHA256 cf27915b2916604dee3c5dd3f1366c8d5b3bc8788263bc952a7ae89a6f4454a5
MD5 1b40f2558b5aa64d201fae77420ff6ea
SHA1 12a885d00f844f1a751acb5775845c078c62838d
SHA512 f33f197d4f722fd12267da44f64edaf1369b553ae8cf38d6b0f8bc5c5e449ac6aa0a5d74736e62e2fd4f8a8a0b262f0ee0a9bee6eaf3a151a0780634fb86223f
SSDEEP 384:sSAkWWM0Wy21LHB0GftpBjmDHRN7IlGBPj2:swEICWiMDVBS
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Threading.Tasks.Parallel.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.Threading.Tasks.Parallel.dll
Size 25KB
SHA256 59ce6b7669d3648e1fc8bae067f5783726eb7af71ed39a3ca9760ba2f966559d
MD5 c23c8a632e3ff4c2eb12f03e9bf576c3
SHA1 77f5cb868162f4f2f14ebcd378755c1c74714beb
SHA512 1105bcb86c78aa48520e3374e3dc22db24c6a6a7f3ba164ea994c17b2e71e909b9d206c4aa6aa6c53d40e91ef8b2674203c97df732c3da130e2a3797c98edce6
SSDEEP 384:ylzd5neacEyARU5Ya4XW1QW41LHB0GftpBjNkWDHRN7z/nlXxH8:ylzwhmWisWDz/c
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.ReaderWriter.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.Xml.ReaderWriter.dll
Size 38KB
SHA256 e856284cc9c5901b69fba2326aee3442493928344f5f1c7111e4f7e24e3d4974
MD5 800106e2e98bd1299327c317b694cc88
SHA1 6cc12b13bb9e2239a9ce27405f2c7502cd92e717
SHA512 478b4353a6309d1f26e90a48410e019b9f7ec77f7cd8d8dcac53b9dc8667dbba38a2c869d823496b4a85067b7295901e1843adddbfe9bdfe613bdcc446a29b68
SSDEEP 384:6SlhuVmmo/8aQdN9hMCX+OsN8jHjcJjcgrmQXekF5qEhO3ZehmNcoKEAk2qWNuW5:/Qtvxj09rmQ7dhO3kZErmkki2DchO
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.XDocument.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\Profile\Profile44\System.Xml.XDocument.dll
Size 35KB
SHA256 8e5905c713d5f0966407cc780a692ce207416136849640e7f51451ebbd23a548
MD5 ee7ca3d328740e0826cca606f173837d
SHA1 31a7ef8d220e545d0817697b9dfa1c771e60373d
SHA512 6fcae217251800c7b2967ff6f61bb6c5f195bde72ea7de25bd3056daecc2d514f62daf7372580ba51da84348682cbecae141f16b058df4cc42aea32bfd4a9014
SSDEEP 768:cbfrNlILFTHu4OeWXJg99OIki62pvD8O6:4fplI5ju4OeWC9MhSZD8O6
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Diagnostics.Contracts.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Diagnostics.Contracts.dll
Size 24KB
SHA256 4b80e73d810dbd7f2958b1b5a21cf7ca2fb1b627d9135192bcc291b7155d1ee3
MD5 8cd4ff4753eb2b58ad8d7d1377ce7460
SHA1 3ee2c5f567030408fc50d9b30dc52c0e56af7c82
SHA512 288a3be9a79287f9cdc9cf102b00d197591c1b2ba4964fc316d975e40fe74169361d957af26418797cffddab324054caeb9f8bcb7b6f850664f50d94bb0944b8
SSDEEP 384:fC5l1lxUhPfWWKYW71ae00GftpBjhjDHRN7wZIG6lXxHWA:AWfyLasiLDwjc2A
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.IO.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.IO.dll
Size 29KB
SHA256 44c893ebc6915e59b8174742699429bb7147ba08350b2f3a1dacbfd643eb2a6c
MD5 b57924627cb89be8d2ae7ceafcfdc5c3
SHA1 a7b04fdd2409bd7e953c338603ac62169687623e
SHA512 981660097caaab82c9e4b2757007305f6f337685241ac37650a686f61a8c82a1f985c2f442d1ce6f86a5da14c5145000f43f374f82f1bb8314d4019345e929f3
SSDEEP 384:KjwXGOrXezyN2Cf7X3HWpbWLlWc1LHB0GftpBj3NDHRN7L7AlXxH7FmL5:K8GOazup2pszWiRNDL6by
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Linq.Parallel.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Linq.Parallel.dll
Size 35KB
SHA256 32f5b9ac1d268c8b640c6aa8d56bf55604de2ab17af6fbbf5acd78be3d9d6a33
MD5 d5d89893ab160afbe07c8a5fbea62539
SHA1 7de60debda7d5cc802827a827729cdbfbd343109
SHA512 c3f7c9d9e4e97b0cbacbf524bd6b8611f8d722a4040c067510830c4b023b9c9d57c7a1758986a575296afdd7d58694709941f7b97fc7234ccfa818ce9b57f7c2
SSDEEP 384:7WITEGtHGjdGZWVGWWl9uG0pfQtZgHqjONSY7mpAK39cHmznvVMV/Ms3Z2NHmNC0:7WLG3kwnvVR/bahWiMqDN68
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Linq.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Linq.dll
Size 32KB
SHA256 5d044f93bf24569a49a0871943c5e11b801875c76da96d09a4495a787d061069
MD5 f81b2d11548f481f3a078bc4b9d7ebf4
SHA1 7580fb771803ccb8f0be72c524637a2d2a30c23e
SHA512 0622604d252d0949a68f32c5f5771ca6222121fd6b30a012dd8438064e095f993561b131229bc492c691d424a69f082aadf13619af71bec3ca5b218104d2febf
SSDEEP 384:N9UhyjAqro3U8oI0/odo59kzHGhiCpoeOAPJBery2ZWhRWK1LHB0GftpBjmKDHR9:N9UTq03i6HhCpoxyBZWitDfiUt
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Runtime.Serialization.Primitives.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Runtime.Serialization.Primitives.dll
Size 23KB
SHA256 c9de315d4009912b226eae9e26975d57439f461231d4f9ba37e647f756e90dde
MD5 9b260d0445d91c9e092de766ab386cff
SHA1 4f1ba97134afdba540cdc4367239a550039b6441
SHA512 590503aaa790d25becb187288c8992340f6bbf21a083a20c7be7b79ad64cbca26a3e348147a352ba310fa280946c383df8f0870d3b7866e165f617e3bf17ab25
SSDEEP 384:9rCFpa8kMfVX2MDJ9WhOSBVW01b/L0GftpBjbXhDHRN71jl15num9:9CKMVYOSB/ki9XhD1P1B
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.Xml.dll

Path C:\Program Files\Mono\lib\mono\xbuild-frameworks\.NETPortable\v4.6\System.Xml.dll
Size 21KB
SHA256 35272f133c607f655508a9fe27316c1d21e2d8277e1686b717d21e96ebe8dd52
MD5 52cd7be9bd720a32b68169d0736f5426
SHA1 98ba1de60cca614c1cb19aba8f3999d405c1aaf7
SHA512 f3e07daced78191f1f98cf8a664cb4bbf34c09b6dd9b2f34798fd1ace9f20d9513b388b28337a7bba1aefa66cdfca0a1f76da357c789d380b796cccca09448c3
SSDEEP 384:IYz2W8CW31b/L0GftpBjX349DHRN7IlXxHP7P:nwZkipo9DGv7P
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.FSharp.NetSdk.props

Path C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v12.0\FSharp\Microsoft.FSharp.NetSdk.props
Size 3KB
SHA256 664ad23691ace1c4879bd6a54167253d632ac7ea79b7c9a7ec050acf689d5994
MD5 ad00a576aa87ef4e558136e0a8b4522e
SHA1 3f9fc9cfcfc174f34a82e2b6c9d994c1ed07de0f
SHA512 d05b7ca620ba8b89c3ae4227fc8a50bd85bec8b437d899e765361868adcec1b4a418cc568a84c09bacd7ab7939de682b03da7a1df15d34dc7bcf69eb62be2383
MD5 SHA1 SHA512

Submit Download

Microsoft.FSharp.NetSdk.targets

Path C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v14.0\FSharp\Microsoft.FSharp.NetSdk.targets
Size 6KB
SHA256 8e5014635a613c1783f6eca4c9d237d163f5b2f8368155aecfee2c0f1c62370e
MD5 90a78a8e8acae205aea530852a67d8d9
SHA1 c3d1ee349760748902860174c780c2e01523e04d
SHA512 55d17368f79da8a300790dbaba6d9f12bc87eb6ec0e16a855ce61eb16f4c680547bfb0903471c3f84b4ef0d6c6acdff098b141f76edf554243bbe871189be7d3
SSDEEP 96:JDmSriLMXwBXlrjhcTyXirSnhtd7ITuzIeRHTrcQ:nHXwBXtCTyXirSnhtd7IjeRHTrcQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft.FSharp.Targets

Path C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v14.0\FSharp\Microsoft.FSharp.Targets
Size 153B
SHA256 0ae45d8e6765d5a1b82a80ac429063f0ccf2fb4cfee5f24480f6c9d907d67a4b
MD5 6d28a3652985f8240ffd34fba50ce615
SHA1 09fafabe9d85ee2d3de57b47a8d93c3819b2ff76
SHA512 7414d58bf0f4296d3453777596b4656bbb3fb45ed89479c597d0328084b1e87d82704cc6ebe8168db409175b73e56a6f14829c060e92b0fd5234db85ac7562f5
MD5 SHA1 SHA512

Submit Download

Microsoft.Portable.FSharp.Targets

Path C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v14.0\FSharp\Microsoft.Portable.FSharp.Targets
Size 162B
SHA256 aed8267f980c6c2c9abdc2d3862326b4e78576b3c2c2402a24d6b6cda969f161
MD5 bab2d198def8f769e76008ce457c1dbc
SHA1 b8496c23f1d8539c3a38c1634ca8db7fec600194
SHA512 d5a4ac6164faa1d872a7438306e7b26af446b1fbe46d125c2fd462b6e24a5ec2cad02fba44dfedf2eaf63c87efed600e3d9e792ab8d356cc4ba6c4e94a9286ba
MD5 SHA1 SHA512

Submit Download

Microsoft.WebApplication.targets

Path C:\Program Files\Mono\lib\mono\xbuild\Microsoft\VisualStudio\v15.0\WebApplications\Microsoft.WebApplication.targets
Size 1KB
SHA256 57a1b65410e20f986f36870a460dc5eedbc217c6a2227faab0c12836c2a6cc4b
MD5 8ab27724241aa0793cda3010b3a3919d
SHA1 e99fa094e040f049bc7e07ed4faf9f3409b564e2
SHA512 27a945087584defa40be69a69140454c4ad97877064b26e96ad9dcf3f9538e970837f53010a19f390b889d79917dbcee5d01e28a9c5350fb98ffdc78e445916c
MD5 SHA1 SHA512

Submit Download

index.aspx

Path C:\Program Files\Mono\lib\xsp\test\1.1\index.aspx
Size 695B
SHA256 76247d9618ff5ab597553c7c43f5e1f7e09c46160340a8a98c52d9579e70c806
MD5 dffde1aaf27e610ee8721a9c65be595f
SHA1 7aa612e02c6e21ca8b81df3131285ae16c90a483
SHA512 d03d51acef53676b1a736aa3d182ea464d33bf4cbd37318a24a1d885d941cb0e849833154b4e0bf6f636eaeee178c8b01fa3c9e71c34fd37735727eb6af567b6
MD5 SHA1 SHA512

Submit Download

51de1c27-f29f-4756-8ef1-b7774e694b42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51de1c27-f29f-4756-8ef1-b7774e694b42.tmp
Size 12KB
SHA256 1f9f31695e56020f796ab425872740d8b19f4365c6eee5dfbd3b0749ae2403ea
MD5 181d0bb992df0c83854aa02b08dbbb53
SHA1 1ea35bb3be007eadafdcdea427a53acb39323c6e
SHA512 7d6b64ddacde7fc19ae1195bed5b8a713dac9664fec4823d9b8622150de427a3dd9a12a1a5c6a7aa1ab669d7a8e854d20949fd28030cad5377ea20050a8d6d25
SSDEEP 384:/9iIxuERzA83h09RZxY6ByLBnYvKze+JFqBX:0IxuERzA83h09RZx50LBnYyzeBBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1191573f2a7c12f0b9b8460e06dc36ca5386305eb8c883ebbbc8eb15f4d8e23e
MD5 2f842025e22e522658c640cfc7edc529
SHA1 4c2b24b02709acdd159f1b9bbeb396e52af27033
SHA512 6e4393fd43984722229020ef662fc5981f253de31f13f30fadd6660bbc9ededcbfd163f132f6adaf42d435873322a5d0d3eea60060cf0e7f2e256262632c5d05
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1971045943002ef01930add9ba1a96a92ddc10d6c581ce29e33c38c2120b130e
MD5 54aadd2d8ec66e446f1edb466b99ba8d
SHA1 a94f02b035dc918d8d9a46e6886413f15be5bff0
SHA512 7e077f903463da60b5587aed4f5352060df400ebda713b602b88c15cb2f91076531ea07546a9352df772656065e0bf27bd285905a60f036a5c5951076d35e994
MD5 SHA1 SHA512

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 64KB
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487
SSDEEP 1536:Lm4AGqOak9IP5qOYV7SofryJiRB3xVcVXsIBGCrmQR:LITk4qOq2oDwuhpDCaQR
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 69KB
SHA256 adbd44258f3952a53d9c99303e034d87c5c4f66c5c431910b1823bb3dd0326af
MD5 7d5e1b1b9e9321b9e89504f2c2153b10
SHA1 37847cc4c1d46d16265e0e4659e6b5611d62b935
SHA512 6f3dc2c523127a58def4364a56c3daa0b2d532891d06f6432ad89b740ee87eacacfcea6fa62a6785e6b9844d404baee4ea4a73606841769ab2dfc5f0efe40989
SSDEEP 1536:qWAno765Gx781oZHTSGGwp/VpGxBnnMYxuH92aXISJ+vWNQY+DaUsjmj:qWO1hodhHNouH9HISJnwDaUsj6
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 41KB
SHA256 9ed00a33812a1705d33ccf2c3717120f536e3f4e07e405539e1b01c5a38a14ea
MD5 de01a584e546502ef1f07ff3855a365f
SHA1 60007565a3e6c1161668779af9a93d84eac7bca8
SHA512 1582b69b40e05bad47f789e1b021cdd5e3f75548a39a99e0db1b15138425e530e25ce6e56185b1dfa5f51758d2709e52d53f309da2e662ebc34c8d4974ab6469
SSDEEP 768:3VKW57XaxPIr8nJZuX1gGcQaLTGRXF/HXdg9flwMKsWcqGM5PTpwx/YX1eHV7D2w:3VexwrkueGcQACXF8ftKlc/MkxGeHEl4
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 63KB
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44
SSDEEP 1536:ZNIPgrq59wJU9Czk2BFfKoUwOGeoDfEge1gS+UYSdU6D+sNZnwbo2Fa:TI4S67kEfU11yqlYS1/NZyo2Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 88KB
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16
SSDEEP 1536:WwVbiMNFmJrBrbhiWu0FKK9fLRXT+FjhwTn1sH5J3iotwUB4xzjIRB9h:zVOiFWwg3Rjm1wRW5JSywbo9h
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 1.2MB
SHA256 ba4913f000f60e3762611198396ef0bf07204cb4381a74d83328e6369eaf39b5
MD5 c71e53854f68266b9b7f2151cfcc5c32
SHA1 356fa2aa7d9a8c7585d846fadde297d33166ecd6
SHA512 d261f7efb5490d0e9e11517d1e96d8d090bb0a64584565afe335ab9becb54f399e5eea088156c999004b771f4cabaa107256822bc1c4085194a35744d7915270
SSDEEP 24576:NgbFE8r3zrCLswy29hqaJh/rQZG35WLZz99nbXCcIX6MVuMUUf5C2PT:Ni68HrCLrNhq0/rQqYLZp9nbycIXZVYo
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
Size 41KB
SHA256 576cff014b4dea0ff3a0c7a4044503b758bceb6a30c2678a1177446f456a4536
MD5 cfd2fdfedddc08d2932df2d665e36745
SHA1 b3ddd2ea3ff672a4f0babe49ed656b33800e79d0
SHA512 394c2f25b002b77fd5c12a4872fd669a0ef10c663b2803eb66e2cdaee48ca386e1f76fe552200535c30b05b7f21091a472a50271cd9620131dfb2317276dbe6c
SSDEEP 768:PlKvtdxxozAc6Ajm0BKj3FTXsODGWnh8f7tcxcsoV/EK+n8/KkC9wVwBi:PlKvtdxez3kFIJDf7kcsFEKkC8wBi
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 5064196e06bb0cb3fcd3ac94b0fcb3143c4662342fad4c71a96775361ee06e5d
MD5 73b9f087e9da4eeeb979969ae22edc85
SHA1 6fc0188c6a3c6665721b20379e413cf2c32d533e
SHA512 5d127f78dc324e13d9eab3a7162f5e803c46680b61173b1cd5da6e84fa421a4c303ecf93febc78501ce95fef45888d25a686d21d4a9bc3d2b9028db1f0a45b81
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b944428e99c794f8271c23dfee9622ff42d015ccfc6118aadfe1fab67f3806ce
MD5 c9f589148ca6cad87dc2f9ad695f4ca7
SHA1 bbe1855729096a40361ece093681d9b6ce98fe06
SHA512 62f90d23ca7ac19f842d974e4eba302568eb737685ab5cf07564a724ae306166e9d891ed7eb74d821729490faf4226aea45812f8d46eac406bd01c08b1737cd6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4f7d385a69509e4baaac373b7c2e23e5da848c422e1e8deb1621f1d0b4f14ec2
MD5 7a5aa80ed12dc77e6bcb84ae031080fb
SHA1 4732df9ee8030fa0b6766d5769bde6767aa47b64
SHA512 144f111f6e669627c2fec7adee237c62f23b5d54ee5b16922a2eb5eccbce97231d0656ddbef67663acc2d2521761fdb85934d146988162501972b2b93974214a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 769dd0cc15a85a8baf6338d3836045e6e1016e1b97d16e38755569f98a01b737
MD5 ba028c0c91e6843aa563240ff6aa8f24
SHA1 27f6dbca07e95e68fd522e3cd0e2f898d711ee7f
SHA512 70e53594a36efda934b18d169f2b0f0200f9884d81fca950fa1bc2a3d8b318729f9569148b327077cec0e23a942cda7a27d616f4629c7cba178f89817e1f9e54
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 c8bfa0f10b4042c611196a37419452840bc6fa98b615165c309c798ab5a0873c
MD5 2b08a6de723a45411ae283471ad34e55
SHA1 39e8eaaa8d5061c49a088d5efb1179c18c194f89
SHA512 7a785017ecf0482b9d77d6a047b072eb1940400f8379406fee0278492c2644878e6d49118ee872e6926ab8ebd01beed4f11811d2f8212679319c3a7f7d676b19
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 28fa0e89fd85b98e02e89c59833c56effe0aa8892017e4ecbb007e992de8fdfd
MD5 3933be935b15363a18923952325619bf
SHA1 43259f527bd06797e6d21b89ed3863d31eb21cb2
SHA512 28b221fe85ba1d5ad5b8cc6ea623af7c78031ca3b26086383849aa271ad8a9089f7da5b0b68acaf5d08032433a72df236f8fb9ceac6ae8733528475fec298483
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 85ebba18e7b6f7b4ee223b4f8ce7a162d3f1fa60f9f3020ab0a2bace876fd747
MD5 94d396f8777414fb562830d400321384
SHA1 b441c034ea29b37029dba3eef791fab50452c4b0
SHA512 42a8423bdd66a3a20aec4ced5379db673795310b7136fe993853b86362a8eb38106b007976b10fe5f7f59a1d7af9b8de57f14f5176848928782b29289087daa9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 1d89b16fce782e82a845598bcb2a5fc1039fc918a6c9680aee623f11f21b3ade
MD5 781374ec78cd2044b6790d0d4be291f4
SHA1 e6ec1e27cfb552d8a2e93c5e971fb90812a5eacf
SHA512 246119f4488353d27d867cf4d12435b596f9196458a29f7293b568eb03abdc235d036100e06da246fee5ce3458813e430dda228671e80722368cb3aecbccfc2a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 4301fe15c1d5fb8e489408072df0f85cd8520a5fb00c5de6fd4186ec08832299
MD5 e3ed5d650f12405eb39ce8b1860be281
SHA1 ed4baaa455d7c0a0013476167c2a46434e55f2a3
SHA512 5d752c587b6482a6c5070d9e4742f74f21fb81de9a02244732cb3b07746929c4c66966595bbcb432c20f786f65bab16bb8e04b707e8e2c4399af7553bc12431d
SSDEEP 96:Jgs9Bc0YGSD5OGgGuGKGXGx3GSGGGXGiGZGZG5hFYGdS2Gp9:J5Bc0YVD5OJHHOIJnofOqUhFYaS2Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 e72cfae69bd33f8f726eabe3c25b8c62e2697c9fc489cdb9edebd3536613925e
MD5 1ab2d85cf4d27f32d3dc7b40e684cedb
SHA1 2641f538262e6a5e97faecdad45db716e66cf458
SHA512 17bc98b7e50a2fd319eda28f50782640a56fa47116366b0d030320eafede83d1d0d6390ef33cf55453d75ec714245113ea87b1b0ee5e76e5f57ecd1c5be39053
SSDEEP 96:Jgs9BchF0YGP1D5TGLGgGuGKGXGx3GSGGGXGiGYGhG/G5Gg9:J5BchF0Yy1D5TsJHHOIJnofz4s0V
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 ef29999e11193ec06ae873c21f0c4360b4bc2beac2f26518cd9c42a9ff7efb8b
MD5 1529fd6c4acbae001327cdee8810a6d0
SHA1 96834ef44128f41b2064bc52ed59fa9cece127b1
SHA512 5ede3dc826add303a918d2a3642f55e373fde9e4bd2a70a62c3626174e310bb61ba0c7d6a62cba6a61fb6f9741489705d69007feb71c5ba38935d11805b946eb
SSDEEP 96:Jgs9Bc0YGSD5OGgGuGKGXGx3GSGGGXGiGYGhG/GCG5hdGNSD9:J5Bc0YVD5OJHHOIJnofz4sbUhduSZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 d5e587ea5f3d51d0c551085ab53d20f6b461093c72c4f06168a79608f81040c7
MD5 b94728dcc7829b008c9685646eecadd8
SHA1 6c3d08b63313dcfdc5110ab218241e290684d057
SHA512 77feab13401a0a27bb6f1ce0650676246879b276e0f1d6e636a872e7a33315405610607e4bd334a3a00435d03631e30f1a992c9579ab7e24a06f30eab49d0971
SSDEEP 96:Jgs9BchF0YGPX0D7OGl/EGkGd53+GhSGsGibK0TGc9:J5BchF0YyX0D7O4/EVyl+gSzzbK0Tb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 a8e6d6e9f48f1575a29bb144e95e0dae1e6ad463cf222ef8ca396d167c7d29a2
MD5 32e2c4d8a73c3e61bd0ab55e8057e446
SHA1 e72de5ed9508657f8d854127cb2f4b8970cc4d34
SHA512 a45fd81dd37b1e803be96b70f8d0c22efa57d2f963b2afa916bed85ecf7d8b991e8edf3db9a37dcc7439cf2eb74758135c25dad688bb4fd6f630bb1e4199dbf9
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 6d4bd2767d123a1b177385aaa6aced22d7de7a39c180c3657d35a462536dad96
MD5 d8d23195cd97ed20a0802a59b357302d
SHA1 eb94cc76dbc33610445dc3604c380a020583a79e
SHA512 34eff90e47672dea0427459001f2c0cb012caf672a6a9ab7958faec34b8832b43933e6105656ef5ef213ea04713e3852fc8c08f06327b6662ffe944a76b4c6dc
SSDEEP 192:ngkx3RL8GQqR63s0WMwquFQ1VtbR267rg:ng+L8GQlW1Ig
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 06a20a36ed1494781e5de3f0db1fca17169b7f139b50f05353e4af1ec687c28e
MD5 d742e6f031db687488feed95aba0365f
SHA1 ca13a32c8a0f03f86586dd9c51193e736e89f58e
SHA512 c24cbbf4de87a61d26d9869eff513b5741d37b77599353d31e3933046e501affa9e4c23592aa1a49d26ace6e14fe8f86b98718cbbd76a133892510b14c7892df
SSDEEP 96:ngk3xm/vQYmq211iZkQqRwpvWMoiVmdeHcib7UWQyV+VDCziEwb:ngkckRHiGQqRGWMX77ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 8974b3fa5b980d5973b6a11016f987d802815d0828985447e54d8848ee8f26c1
MD5 c2c94bc6c17144c550d446f5ef0e182d
SHA1 1b12fffc9e5f2a442c19b8e81b2253a42e349157
SHA512 53b8c0e7f87f9e2dbd78c22f7340aa028ebf99c64959138b727e65e56191891318b789490db60148a642349a48242e5d1ef7239e76bab58a71292b1411ee9b5c
SSDEEP 96:ngk3xm/v4mq21dLZkQqRwpr34JcWMoiVmdesuF1W1VtbR2cDb7UWQyV+VD7AiEwb:ngkc7RLLGQqR63QcWMcuFQ1VtbR2e7rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 92a187dc40ea073d81160cc49e6ff0623e6257c53044814c4e6327c30c3819c1
MD5 d7c60d0faea303f25b675c5db291419b
SHA1 87c83ceaa1bf31b94b5943976b0ad7c2b1a6a918
SHA512 96f9f6d4fb6854fd0ae3025548624c6e62dd015349c3b5e49c6f5e3efd5a9ead58f99348307204dc57cfac47a64380a8a4297901d34f25a8fa558bc9f2ba2540
SSDEEP 192:ngkxkRL8GQqR63s0WMwquFQ1VtbR2d7rg:ngxL8GQlW1Lg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b4ad968b13c7ca71a8e04840fc86a6a155cc29c0ad2b94aefa145099762613d8
MD5 9ab6b5c5f2644fe7f81449853cff8628
SHA1 a6fd444c2040242d9fd966f8d0291da9b36982b3
SHA512 c8767c1faa5a006dc9d0af4d53454ca45b9ed23100e0280e916a789a094f7b768970e612d0bc6e39a2e935d168994f9db88c6bc7aef1470aaa008704b442905c
SSDEEP 192:ngkhK0WHRLvGQqwGWMO77JaYZuDTY1Dy3R9J1VtbR2L0Rlg:ngzLvGQ4W9uSeRho
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 fa8825a1fe678a0407ef251ceff36e24cbd4207392e941086f8465c5ee71408b
MD5 d366fcf94077435b081df25f6b032ea8
SHA1 4802866c3a72172dd5b4589917a0991afa6ac116
SHA512 017ea786a16713fb11c78c5b793526e219857b7f54bee84ca90269b28f60629ba24ba74bbec173712f90be3392ee547427d015f860f0ea9ca4aca74f260fcceb
SSDEEP 96:ngk3xm/vnmq211iZkQqRwpvWMoiVmdeC1VtbR2cib7UWQyV+VD7AiEwb:ngkc2RHiGQqRGWMS1VtbR277rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 a78922ee648b52bce906bb7eec474de81e1ae2a0fff7fa5d3f8da04b3a131139
MD5 adbbcc862df00a17e64f44d8fd8edea1
SHA1 0c5a7e26e1f0b5718c017a2445e87ea5d50b8746
SHA512 8a126653a83166edae09ac6ae34ba08e9f308263f5b0b3fde0c908da343650941fc6b91df68ce4f0cae63b0d179e45413151c8ccbf95b982b354f24b8025b23a
SSDEEP 192:ngkxHRLHGQqwmi0vWMVaOuDTY1x9J1VtbR2LS7rg:ngQLHGQIDWFSxxg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 5f554dccf32afac7aee36973e32ec0b01dc9805969f8fb456a5b608c2b664158
MD5 968c57cdd52424798ef8794a2c559141
SHA1 ec515fbdb9858355f605e308741693597ed79039
SHA512 98fdf388dc3bf254c93ec66dda457cd2634b00738ae54d2ca1d1beda2c264edf6ad03fcb79ec66cf8fa7cd79b9951b8b396d2cb7c996862c67025b78e7909063
SSDEEP 192:ngkx3RL9GQqRmio0WMV+ZuD+uFR9J1VtbR2J7rg:nggL9GQHIWaJRCg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5d31e458cc16da92ba223c02a2d913b7b504e30bb009e8f9409908808abfab91
MD5 3cba74cbe237681eb314cb141757c224
SHA1 bfd2cc323246d0eab671b34e3b3b751530a1093a
SHA512 91903185dbafa779ae6321e738674fac127bd1b190561afd2134b20e3610875d7511d9e62ba30a7cd35a6c68d76e305ed23902a974df5394f30d4d68a1dc3c01
SSDEEP 96:ngk3xm/vnmq211iZkQqRwpvWMoiVmdeC1VtbR2cib7UWQyV+VDCAiEwb:ngkcWRHiGQqRGWMS1VtbR277rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 7d7a961117cd75fb87f08a9c73ce2115b489bd3b1d5edbd365b7de58cf9ad189
MD5 128503295d1df299893c15df780657a4
SHA1 dfd47634d061513cc90b388b1c3ca67b8ec974c9
SHA512 1a8d3c76e8f71e9d83d5795bd2c5537d8c42c873d2bb1e6cea9ccdd9e4f8907294e7706cdc5c3eaa6e93a294e63d9bd3739620f14f4d19ab6cb93b1e8c3ad5ef
SSDEEP 192:ngkP3RL8GQqR63s0WMwquFQ1VtbR267rg:ngmL8GQlW1Ig
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 ecca2ce7873c8e6564ee1d1689df3d87a6153238595d8d71ccfb432c58af0394
MD5 fe16b23fe80a49391f2693ef6f45eb5d
SHA1 5662d642e211a42c7b1f0f38536ff8ce81525aa2
SHA512 e3e741cdec1a6828d810133d128f72778ed98ba25eb3585b6f1c26800f9562c7806a68df4949a6b9c73bce0e486284d709a463e1bd49d86e6be582da5a8712f2
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 ba22033dbebdf4b913e3616e02f2b0d72f03ae899351ed8e1946bdf42289fadf
MD5 3199ca8ed637ec64b67788cb1c6e8db3
SHA1 eab559f6a22fa32dd8cf59e6557ccd3137a233cb
SHA512 493fffe6636c3be8da72edb857d1a9fef6cf75d53e61b7ccca7f92a1abaa5dc0495dd755065a3ce12fc2aad5e81840a90d8ffc096500e4a798fdb408e3438cd0
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 249e6a8a6a46c2714235eea9a78cd44f02873ac6cf0eb076e85dfeead40d603c
MD5 c1ca16236b2fac7981746fb5da0721d7
SHA1 d267b7f1f5f94e08c8e363244b2255548ae25cb1
SHA512 f655e5e80b9d04d0a015f04ff88f4c2d32e53eeb53594ab59de73bccd1c9fef5db34e04fa23206aaf1a06388aab3bca8751ffba1497639b9a20da80f6fae5d4d
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe58753b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58753b.TMP
Size 539B
SHA256 9ae60f9aea7270858fd93ff93bbde646c4ccf10535ee99bd469624aac87329e7
MD5 c9dba8d5490c007598eb146512ddff2f
SHA1 8b95f2a94036793d7eed83ada5e4e14983d756a5
SHA512 3217131643621f69ce0b07395228ba5cd24955d7af83443af835b8d217091b88a581467b8fbde07ff3dd916cb14005812ea11ae59180d6ac8420e0d632a41431
MD5 SHA1 SHA512

Submit Download

ad46fb12-3369-4af3-91f9-8f4fdf7db6be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad46fb12-3369-4af3-91f9-8f4fdf7db6be.tmp
Size 1KB
SHA256 134af6a2a7015c933e974f18701b0b878df48b4ce3278c870968c60db415b99a
MD5 69f4fef4bfff2394f3c808bccf4596f6
SHA1 8f00eaa326c7bee2e3406812a90edad02d94e12e
SHA512 522ba17fb876679b6f988e711ac518c76959c553f3298381a26852dbd4c536237baa1e43a67e158a5ceb04d0fbee13ca2dd66bbebe19f29003cf88f09e20c663
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 c409296676e6f6de44ca94d31e409846e091098af0325007b282c1eefd174998
MD5 a0e652769e6fc5539797028d794dbc0f
SHA1 edfc671ab58704685d97af41f63d40fb292a291a
SHA512 1272979ec3bd44f5d65f3dec6abb0a72cd8dabce24697b9b4d9dfa92d040bfa740a1a5feee3273ab68532b5b3176b4030c045af9dc50258ae3ab9598c31d909d
SSDEEP 384:99iIxuERzA83h09RZxY6B/wBnYHHKze+JFqBX:GIxuERzA83h09RZx5hwBnYKzeBBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 4bc9600df009859481be50bcd67a7cdbc7aef0055ef0b4a3d3ce0f50b97b416e
MD5 29c2ec5528b65ced2310d2ca4902bcac
SHA1 905545dc8e8b9b49d7b365e60c89efbf07b29816
SHA512 08add86de5dbe7200c8d15fe4c31c5dc3bdda9ac55e760b5620c0e979bb89f52cda07a424532a1a92ccc3c1bde4b64fb319e46ab0aafaee6f2d44f4bfaa45297
SSDEEP 384:R9iIxuERzA83h09RZxY6B/wBnYtKze+JFqBX:aIxuERzA83h09RZx5hwBnYozeBBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 fae73ea8239e79a61ee4c1b82038e2ba17ef9e66f1eb953599b3c76ab4e1fbdf
MD5 15962dba106331555e625158fad4ac8f
SHA1 e35154e238ce4c82e409516362af6d87c272dbaf
SHA512 08b7c553bc0dde50c51cf45a76038dad0f4446c9407d23357e0a3e741bb5d347850ac5d7c3ddad5c7758af064cddd478bb0e6e9dd4ebfc5e2f1fecbcec82cde6
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup/ee2RUO470tTKGrytYM1An:A9iIxuERzA83h09RZxY/A/3VKze+JFqJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6956161390977a9a57e0c5fe70dc33b3f25afcbe6dbfa3ece7c58636184fe0f2
MD5 e3b025fc2daff1ab55faadef471fd8c5
SHA1 e73f849094136abd00dd7885accc7a02214e72f5
SHA512 e8b3a66bdc88bc2ea4e75af7c95070defa6388c281aa9a1c732b3dd5db0815090e1cd65cd3da41d7f33840f8307b8f68b02cb120edf8df8c1888a6a4be83c45d
SSDEEP 384:N9iIxuERzA83h09RZxY6B/4BnYyKze+JFqBX:2IxuERzA83h09RZx5h4BnYTzeBBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e329e12e8bd5feecea498323113caab0a6f40e98f3ff11b98321a8f8d07b48f5
MD5 a736760cc8beba7069285c1784eac18e
SHA1 a77c4d1cd1bfcbf48070de32a679e3cff2c76062
SHA512 41a86e9a5e1bace240d46e07d026b13261044ccde5c674ce170d79a623403377667c73ee7570a14e0ce5ddbecd67bda249caf7c3039392d4d23e7e88e9a33159
SSDEEP 384:A9iIxuERzA83h09RZxY6B/sBnY7Kze+JFqBX:rIxuERzA83h09RZx5hsBnYOzeBBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 12KB
SHA256 899ae58871890eecf63c091f92ed87c69a93dba376b993eeb948cf29bffd9d6f
MD5 702dcd36f79e84678832d1751461ef24
SHA1 d5d12096f584246e5f10bddc7df83be9068dbab4
SHA512 ad4facf486799089e4e02e216252b855ccaa639e9967d8546a03f54e5e92b2f71589532e9006528b5123b90219dc94c390ddce5fb80b2c5bfac9ab674c9a234c
SSDEEP 96:Pm0JIqvBTw0Bj7/kJD8urkJcf3swz3DkJBBw8ekJ3udukJnIuX:PjPZ7jjkV8uk6PpDk+kNdkBI2
MD5 SHA1 SHA512 SSDEEP

Submit Download

level3.resS

Path C:\Users\Admin\Downloads\0.4.2b\SCPSL_Data\level3.resS
Size 128KB
SHA256 436e78a7e2c8c08f29b0e9cb26b712fe8e7d27cf51a03edea5f80548484de7dd
MD5 1c4e877c383515f125542fe71b550ae3
SHA1 947938e7c2b24223cc9b32b88e766e62812a2b77
SHA512 d853dc8c1f3f5d3cf3075002e5a3bc6e3d2f1ca4476de79dab7c852b6199f735a388c2d2b52f8902c44aad2a52b9447f2a5fb321074d7be776075b3b7cb087c8
SSDEEP 3072:Ucj2WxRrdhxsl5bcxql3cbH6FCkV2zhXVYCDyHk5tUl5RuI:RvrdkK+xRX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Compat.browser

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\MonoBleedingEdge\etc\mono\4.0\Browsers\Compat.browser
Size 1KB
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
MD5 SHA1 SHA512

Submit Download

DefaultWsdlHelpGenerator.aspx

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\MonoBleedingEdge\etc\mono\4.0\DefaultWsdlHelpGenerator.aspx
Size 59KB
SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
MD5 SHA1 SHA512 SSDEEP

Submit Download

level4.resS

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\SCPSL_Data\level4.resS
Size 128KB
SHA256 da638fa7aefaa12395084ae99dfa6f77fdd50a5a8b224a3c71fa175bded2edac
MD5 ca76b02b1ff725d496521dba50d08562
SHA1 846b8ac207f80a7f8bd010f1fa74362e58f59326
SHA512 f756684852f3c9f8f5f3beb638ba5d4abe4db2241919a02b187e8e844ab422df6fddb700520cb0de9fa3e0c7c0c03fa3070e6438a36f9b1db9b2fe8cd5a2e9aa
SSDEEP 1536:7hDpwmCgk59wK9uEfnL4nWhnydNOOK6iB0dwHoX1WZ0dg7yyAPHwaPQJO0EFj1I6:FDptCZsGLbh7yiI40dgAHwBk1Hvam9r
MD5 SHA1 SHA512 SSDEEP

Submit Download

NewInventory.txt

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\Translations\English (default)\NewInventory.txt
Size 1KB
SHA256 3294c8df27ff25fbe41a05fb99b7efb72a3f9588bbd26911662f7b9f62e14e5d
MD5 145567f4d91a2a0267c06c384d40e786
SHA1 a595f97b9208e4e347d3804d699cbbf70cad4408
SHA512 608014e1c653988fdbdd05f8f37cae58a765d9f9aa89a2811affe1829c3cfc114cbe36a25471ac21627be21b6931e604a4b2f9b08bfc1ab9ece555b60826c341
MD5 SHA1 SHA512

Submit Download

SCP079.txt

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\Translations\English (default)\SCP079.txt
Size 361B
SHA256 e6f19beb12a1ec47195e04ca1e0e8e1a8fc5f35ccc2a2b0974bd3f15ca29167a
MD5 58f6e0f8586d8859b800e51bf314a3f8
SHA1 54873d72a1894690b0b9d7a5ed7e223c3601fd21
SHA512 02d4c489319c3276317ba0027c03ebaf173e39c081367014eb9c4b3bd7ed6c6d812cc1c4afbdcb65a9f76bfadbf16dff349cabc5c1ff0386e2aa47f0baa7285b
MD5 SHA1 SHA512

Submit Download

Summary.txt

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\Translations\English (default)\Summary.txt
Size 780B
SHA256 be03b2802de935bb5c56ca9246237b9618c6cc5fdf17fac8c087aed652c31e20
MD5 55fab231abf1434185c7ad9bb2bc67c0
SHA1 a83842c9de49166a6e790b54562f41a274ae1061
SHA512 fdcdf6996eff9058133f5358c93f13f6a29555a6bb5489a0fd5cd689678ce4137c5bd1346a6880a25ca910efa9c1af02374153961b0a45c57adece56de1438c8
MD5 SHA1 SHA512

Submit Download

Version_7-0-0.txt

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\Translations\English (default)\Version_7-0-0.txt
Size 417B
SHA256 f690f6876f73364c243b620383387edba0fc175117676502746bbbc3808f03af
MD5 969855594ddce576b4b406f628e56823
SHA1 4fb9707459acd1b2c92304c55eda5d01a56a5b49
SHA512 74a4deea96ddfc5f4354c7ecff6509c8e429768f14a2001137d41f537b79c86392986ecc297aefa6438374adcb4bf20a2c49942e44dd088a845b9867fa065d1f
MD5 SHA1 SHA512

Submit Download

WeaponManager.txt

Path C:\Users\Admin\Downloads\Release 8.0.1 (Revision III)\Release 8.0.1 (Revision III)\Translations\German (Deutsch) by DasDavid & Mr.Panda\WeaponManager.txt
Size 572B
SHA256 edae0ba2b7eeeb9db59db56c58f4219b4f9cc22ce8dcd7f3b551256be8c47b6a
MD5 c6125cee12f04ebd1443ba467b6c73b5
SHA1 82a56597ff6005956fecb8e35b95541678c3dd7b
SHA512 e656584e1a176d8ee78ca41fb6ff69430bea6211055a28ad19735aee816fca223858c7a54a7d9e33d1f32570eb80bce5143e51656df441208b0e2b1a17cf1296
MD5 SHA1 SHA512

Submit Download

Unconfirmed 947226.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 947226.crdownload
Size 1.5MB
SHA256 ad12cec3a3957ff73a689e0d65a05b6328c80fd76336a1b1a6285335f8dab1ba
MD5 f1320bd826092e99fcec85cc96a29791
SHA1 c0fa3b83cf9f9ec5e584fbca4a0afa9a9faa13ed
SHA512 c6ba7770de0302dd90b04393a47dd7d80a0de26fab0bc11e147bf356e3e54ec69ba78e3df05f4f8718ba08ccaefbd6ea0409857973af3b6b57d271762685823a
SSDEEP 24576:GE413GbD17f+xGvqTQQc3iFwInAKPfzMc2NAjBWm5HrUq3IbWpeFy:GEVp1/SFwg1bMdN6Wm5HQq3YWUg
MD5 SHA1 SHA512 SSDEEP

Submit Download

winrar-x64-701.exe

Path C:\Users\Admin\Downloads\winrar-x64-701.exe
Size 3.7MB
SHA256 31f7ba37180f820313b2d32e76252344598409cb932109dd84a071cd58b64aa6
MD5 3a2f16a044d8f6d2f9443dff6bd1c7d4
SHA1 48c6c0450af803b72a0caa7d5e3863c3f0240ef1
SHA512 61daee2ce82c3b8e79f7598a79d72e337220ced7607e3ed878a3059ac03257542147dbd377e902cc95f04324e2fb7c5e07d1410f0a1815d5a05c5320e5715ef6
SSDEEP 98304:yNdBfKEHyrVcQky3zy1BK1X4Jg+opzZorSeksMURg0l5OOf:ky+GzkezMs1I5oDot8UeEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
MD5 SHA1 SHA512

Submit Download

memory/2872-1243-0x0000000010480000-0x00000000104A1000-memory.dmp

Download

memory/4876-1839-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1840-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1831-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1841-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1832-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1842-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1838-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1837-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1843-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download

memory/4876-1833-0x00000284580B0000-0x00000284580B1000-memory.dmp

Download