6e288427719601b22a65b0dce0115ba4a284ebb044bbe6f461eb2c7dfc4c39ea

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Potassium.exe
Size 72.1MB
Sample260418-wp8x2sd14j
SHA256 6e288427719601b22a65b0dce0115ba4a284ebb044bbe6f461eb2c7dfc4c39ea
MD5 3305ca9c0767024f308fc540115e0d87
SHA1 d9049b74a98dd3b7c758c7e06a95d693b740948e
SHA512 cb3ab5d33367f88ea061481188de63adb2efdb627836a9eea741686939ce956d64d1c45c23594746365c47106b89221c9972953758e70ad0c6b25ff5a7c58d86
SSDEEP 98304:I9dnSC5tF1H9dnSC5t/up1R5n/cIoCc5RNVex1K/kBKtwBYfnM7d:I9dnSC5BH9dnSC5ZudFcc+/m4hvmd
TLSH
T1DBF707F9936023BCDC4957BFB96138B4B60F747A37E5CD94C22E4E92581789ECA09843
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
74	2420	msedge.exe

Executes dropped EXE 7 IoCs

pid	Process
2808	aspnetcore-runtime-8.0.26-win-x64.exe
2576	aspnetcore-runtime-8.0.26-win-x64.exe
1800	AspNetCoreSharedFrameworkBundle-x64.exe
4660	AspNetCoreSharedFrameworkBundle-x64.exe
3796	AspNetCoreSharedFrameworkBundle-x64.exe
5040	AspNetCoreSharedFrameworkBundle-x64.exe
1148	AspNetCoreSharedFrameworkBundle-x64.exe

Loads dropped DLL 4 IoCs

pid	Process
2576	aspnetcore-runtime-8.0.26-win-x64.exe
5080	MsiExec.exe
5040	AspNetCoreSharedFrameworkBundle-x64.exe
1200	MsiExec.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{f600cee9-4c2d-456b-b0d0-46283c87fbc5} = "\"C:\\ProgramData\\Package Cache\\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{f600cee9-4c2d-456b-b0d0-46283c87fbc5} = "\"C:\\ProgramData\\Package Cache\\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Ini.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.IO.Pipelines.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.WebEncoders.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Cors.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Xml.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.IO.Pipelines.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Features.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpOverrides.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Forms.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Razor.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.StaticFiles.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\THIRD-PARTY-NOTICES.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.deps.json	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.CommandLine.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Composite.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.EnvironmentVariables.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Net.Http.Headers.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.TagHelpers.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RateLimiting.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.OAuth.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IIS.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Configuration.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IIS.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Threading.RateLimiting.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Xml.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Xml.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.DependencyInjection.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Metadata.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.StaticFiles.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Rewrite.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.ObjectPool.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Results.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.Runtime.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.HttpSys.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\aspnetcorev2_inprocess.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.ConfigurationExtensions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Json.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Server.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\aspnetcorev2_inprocess.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.dll	msiexec.exe

Drops file in Windows directory 27 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\~DFCDD0D398443105D9.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIEB53.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_2089183038\manifest.json	msedge.exe
File created	C:\Windows\Installer\e59a08c.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF0FD435D9AAFC35C2.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DFA98A10D19C09DA01.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIA30D.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF068C10AD2F85AFFA.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1565134385\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1565134385\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1771636862\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_511893104\protocols.json	msedge.exe
File opened for modification	C:\Windows\Installer\e59a08c.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFA5F898A389AC3C17.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_2089183038\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_2089183038\smart_switch_list.json	msedge.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIA1D4.tmp	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{CDF2084D-21BE-3505-B0FB-7866136E1ADD}	msiexec.exe
File created	C:\Windows\SystemTemp\~DF6DF27178686B3987.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIE519.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DFA9CDF8AA13EF7D8D.TMP	msiexec.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_511893104\manifest.json	msedge.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\e59a090.msi	msiexec.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.26-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.26-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2420	msedge.exe
2808	aspnetcore-runtime-8.0.26-win-x64.exe
2576	aspnetcore-runtime-8.0.26-win-x64.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134210093015278902"	msedge.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe

Modifies registry class 42 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Version = "8.0.26.26169"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Version = "8.0.26.26169"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{CDF2084D-21BE-3505-B0FB-7866136E1ADD}v8.0.26.26169\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3847269522-1618051987-1942096715-1000\{A096206E-509B-4226-9B21-CBC991839EF8}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Language = "1033"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Net	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_AspNetCoreSharedFramework	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\ = "{CDF2084D-21BE-3505-B0FB-7866136E1ADD}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_DepProvider	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8D8250EED1A64D83E9DAC2D8101B06F4	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\DisplayName = "Microsoft ASP.NET Core 8.0.26 Shared Framework (x64)"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\ProductName = "Microsoft ASP.NET Core 8.0.26 Shared Framework (x64)"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{CDF2084D-21BE-3505-B0FB-7866136E1ADD}v8.0.26.26169\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\AuthorizedLUAApp = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\ = "{f600cee9-4c2d-456b-b0d0-46283c87fbc5}"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\DisplayName = "Microsoft ASP.NET Core 8.0.26 - Shared Framework (x64)"	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\PackageCode = "F86B89D55D34260438EACA982BFEB579"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8D8250EED1A64D83E9DAC2D8101B06F4\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\PackageName = "aspnetcore-runtime-8.0.26-servicing.26169.11-win-x64.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Media	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_ProductInfo	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Version = "134217754"	msiexec.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1692	msiexec.exe
1692	msiexec.exe
1692	msiexec.exe
1692	msiexec.exe
7016	msedge.exe
7016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeBackupPrivilege	5048	vssvc.exe
Token: SeRestorePrivilege	5048	vssvc.exe
Token: SeAuditPrivilege	5048	vssvc.exe
Token: SeShutdownPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	1692	msiexec.exe
Token: SeCreateTokenPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAssignPrimaryTokenPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLockMemoryPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeMachineAccountPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTcbPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTakeOwnershipPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLoadDriverPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemProfilePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemtimePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeProfSingleProcessPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncBasePriorityPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePagefilePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePermanentPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeBackupPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeShutdownPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeDebugPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAuditPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemEnvironmentPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeChangeNotifyPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRemoteShutdownPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeUndockPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSyncAgentPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeEnableDelegationPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeManageVolumePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeImpersonatePrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreateGlobalPrivilege	1800	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe
Token: SeTakeOwnershipPrivilege	1692	msiexec.exe
Token: SeRestorePrivilege	1692	msiexec.exe

Suspicious use of FindShellTrayWindow 13 IoCs

pid	Process
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
1736	msedge.exe
2576	aspnetcore-runtime-8.0.26-win-x64.exe
5040	AspNetCoreSharedFrameworkBundle-x64.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3656 wrote to memory of 1736	3656	Potassium.exe	80
PID 1736 wrote to memory of 2108	1736	msedge.exe	81
PID 1736 wrote to memory of 2420	1736	msedge.exe	82
PID 1736 wrote to memory of 4548	1736	msedge.exe	83
PID 1736 wrote to memory of 4548	1736	msedge.exe	83
PID 1736 wrote to memory of 4548	1736	msedge.exe	83
PID 1736 wrote to memory of 1412	1736	msedge.exe	84
PID 1736 wrote to memory of 1412	1736	msedge.exe	84
PID 1736 wrote to memory of 4804	1736	msedge.exe	87
PID 1736 wrote to memory of 4804	1736	msedge.exe	87
PID 1736 wrote to memory of 4804	1736	msedge.exe	87
PID 1736 wrote to memory of 3084	1736	msedge.exe	86
PID 1736 wrote to memory of 3084	1736	msedge.exe	86
PID 1736 wrote to memory of 3084	1736	msedge.exe	86
PID 1736 wrote to memory of 3728	1736	msedge.exe	89
PID 1736 wrote to memory of 2976	1736	msedge.exe	90
PID 1736 wrote to memory of 3728	1736	msedge.exe	89
PID 1736 wrote to memory of 3728	1736	msedge.exe	89
PID 1736 wrote to memory of 3548	1736	msedge.exe	91
PID 1736 wrote to memory of 2976	1736	msedge.exe	90
PID 1736 wrote to memory of 2976	1736	msedge.exe	90
PID 1736 wrote to memory of 3548	1736	msedge.exe	91
PID 1736 wrote to memory of 3548	1736	msedge.exe	91
PID 1736 wrote to memory of 1100	1736	msedge.exe	92
PID 1736 wrote to memory of 1100	1736	msedge.exe	92
PID 1736 wrote to memory of 1100	1736	msedge.exe	92
PID 1736 wrote to memory of 1768	1736	msedge.exe	93
PID 1736 wrote to memory of 1768	1736	msedge.exe	93
PID 1736 wrote to memory of 3284	1736	msedge.exe	94
PID 1736 wrote to memory of 3284	1736	msedge.exe	94
PID 1736 wrote to memory of 2924	1736	msedge.exe	96
PID 1736 wrote to memory of 4856	1736	msedge.exe	97
PID 1736 wrote to memory of 2924	1736	msedge.exe	96
PID 1736 wrote to memory of 4856	1736	msedge.exe	97
PID 1736 wrote to memory of 4800	1736	msedge.exe	98
PID 1736 wrote to memory of 4800	1736	msedge.exe	98
PID 1736 wrote to memory of 4800	1736	msedge.exe	98
PID 1736 wrote to memory of 3140	1736	msedge.exe	99
PID 1736 wrote to memory of 4488	1736	msedge.exe	101
PID 3140 wrote to memory of 1084	3140	msedge.exe	102
PID 1736 wrote to memory of 2012	1736	msedge.exe	103
PID 1736 wrote to memory of 2012	1736	msedge.exe	103
PID 1736 wrote to memory of 2332	1736	msedge.exe	104
PID 1736 wrote to memory of 2332	1736	msedge.exe	104
PID 1736 wrote to memory of 1844	1736	msedge.exe	105
PID 1736 wrote to memory of 3320	1736	msedge.exe	106
PID 1736 wrote to memory of 1844	1736	msedge.exe	105
PID 1736 wrote to memory of 3320	1736	msedge.exe	106
PID 1736 wrote to memory of 3320	1736	msedge.exe	106
PID 1736 wrote to memory of 396	1736	msedge.exe	107
PID 1736 wrote to memory of 1012	1736	msedge.exe	108
PID 1736 wrote to memory of 4512	1736	msedge.exe	109
PID 1736 wrote to memory of 1012	1736	msedge.exe	108
PID 1736 wrote to memory of 4512	1736	msedge.exe	109
PID 1736 wrote to memory of 1028	1736	msedge.exe	110
PID 1736 wrote to memory of 1028	1736	msedge.exe	110
PID 1736 wrote to memory of 2612	1736	msedge.exe	111
PID 1736 wrote to memory of 3380	1736	msedge.exe	112
PID 1736 wrote to memory of 4120	1736	msedge.exe	113
PID 1736 wrote to memory of 2428	1736	msedge.exe	117
PID 1736 wrote to memory of 2428	1736	msedge.exe	117
PID 1736 wrote to memory of 4872	1736	msedge.exe	120
PID 1736 wrote to memory of 4872	1736	msedge.exe	120
PID 2808 wrote to memory of 2576	2808	aspnetcore-runtime-8.0.26-win-x64.exe	122

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Potassium.exe
"C:\Users\Admin\AppData\Local\Temp\Potassium.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.AspNetCore.App&framework_version=8.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ffb8a7ec188,0x7ffb8a7ec194,0x7ffb8a7ec1a0
    3⤵
    PID:2108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,17793776157267671039,7360548980386987636,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,14645393770926676843,14629519646538024389,262144 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,5477247433779330567,7240347097562137635,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:13
    3⤵
    PID:1412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,16469546241074310027,5851665949025826048,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:3084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,17464247309042201194,14622896775710163134,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
    3⤵
    PID:4804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,13096907138629144175,2127176637580233265,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,14006885879324760573,7519561043986369722,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:9
    3⤵
    PID:2976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4232,i,12671212415869847580,10268763063171911906,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
    3⤵
    PID:3548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4276,i,4826632615528258988,5579142878445607126,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:9
    3⤵
    PID:1100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,4706038739333731693,1765357167543271766,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:14
    3⤵
    PID:1768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,2687404120559640957,4557728913441659775,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:14
    3⤵
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,8002946587230292127,2829161792051837388,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
    3⤵
    PID:2924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,13229548387682738428,1478403968969776506,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:14
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5840,i,1049352851805151471,12698085895504871456,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:1
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,16594370599960622647,2317578209632367255,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3140
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1100
      4⤵
      PID:1084
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,10917962219943646908,9295025066939429418,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:5044
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,10917962219943646908,9295025066939429418,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
    3⤵
    PID:4488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,3552049377711869635,9830531789545810357,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
    3⤵
    PID:2012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,13095218750509495535,18195734585919342349,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
    3⤵
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,897623156900501620,13348404709529868524,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
    3⤵
    PID:1844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3672,i,7147064076169115759,9677357654900137382,2097152 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
    3⤵
    PID:3320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,4180661656986485762,10818105194462351245,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:14
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7260,i,2953397465351407226,4663338883612228695,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:14
    3⤵
    PID:1012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7220,i,15874096212298625925,15407661401383633196,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:14
    3⤵
    PID:4512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7232,i,7164754069344009696,6098973596622208866,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:14
    3⤵
    PID:1028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,633603727863893365,4472202475286890224,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
    3⤵
    PID:2612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,5407460140700518069,9502793752307822256,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=728 /prefetch:14
    3⤵
    PID:3380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,17675213754245464292,5273870807580549410,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:14
    3⤵
    PID:4120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,8563685927521115600,17673761989742677353,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
    3⤵
    PID:2428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,455109783600581406,14111182976551277810,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16191543761558323033,5456609236934257098,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:14
    3⤵
    PID:2088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,5251863428132696445,607021095029586065,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
    3⤵
    PID:2540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6348,i,8657071219467909706,16210676280929273412,262144 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:7016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,226654645173241567,2897810909533108822,524288 --field-trial-handle=2144,i,1517256396771902523,5867820918040360978,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:14
    3⤵
    PID:6856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2212

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1620

C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe
"C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- System Time Discovery
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Windows\Temp\{B664D807-ECF9-462A-BE89-A71896ECE555}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe
  "C:\Windows\Temp\{B664D807-ECF9-462A-BE89-A71896ECE555}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe" -burn.filehandle.attached=724 -burn.filehandle.self=728
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  - Suspicious use of FindShellTrayWindow
  PID:2576
- - C:\Windows\Temp\{09F3F6DD-2F4B-4522-BB47-51B9AB90AE8A}\.be\AspNetCoreSharedFrameworkBundle-x64.exe
    "C:\Windows\Temp\{09F3F6DD-2F4B-4522-BB47-51B9AB90AE8A}\.be\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{B2C707A7-D70D-4935-8C91-2A0B5FE9FA1D} {8F6F97D5-F9AF-4FB7-A30E-CDC510465BDC} 2576
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    PID:1800

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:5048

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:4212

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1692
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 1FE3E2D7AB1C7167C34400A88DCC008C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:5080
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 5D700F2E4CAA18B7635AB001177F6131
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:1200

C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
"C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4660
- C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
  "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260418190938.log"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:3796
- - C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
    "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -burn.filehandle.attached=548 -burn.filehandle.self=564 /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260418190938.log"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of FindShellTrayWindow
    PID:5040
  - - C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
      "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{FDB84B19-7B28-4A71-B3CB-6434A9C01E0D} {44121AAD-3ED7-42D6-B9BE-26E84E3B9803} 5040
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:1148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e59a08f.rbs

Path C:\Config.Msi\e59a08f.rbs
Size 41KB
SHA256 977438214310cfb2f1745f30b2d5a49076c3842782a5f5b063434f471aea8f85
MD5 7d9f17ae69a49f5a604af1de863a5795
SHA1 087cb1baa9c8f9a8b59827ef9aa82926fa3fda56
SHA512 5d92f97ce29a2f9481ae96c33a95c9bab3e1c5ee2e80e921b96f65dc3f73f2383d9c397559444a56481f3aad300560fad4c9f00ff19e9aad164aaa376fcd0ef5
SSDEEP 768:uxt29kz0qpOHMB3jwKfeW5N7xGTQOhWMUNqUoZuxZ1VDsMBxh3pyN0KuE5GE8Yev:kt29kz0qpOHMB3jwKfeW5N7xGTQOhWMi
TLSH
T1951341C1F647C2C6F223FD93AF507F1AF619AB434606E90A05CDD2688456E98DBBC4D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e59a093.rbs

Path C:\Config.Msi\e59a093.rbs
Size 85KB
SHA256 b467f412c9f654bd7286cb274f481308294816314c598b0db482d3b0ea65fa9f
MD5 8782655a559b88e07e28000f528d0d3d
SHA1 3f2244e87763cb6beb0405c6a9cc6764191d7091
SHA512 c1c4e950a46736fcddc33a5008cf52d69887a2d21e8f726b233e44b180861f9c23836c6f13777ecfd8bef96ac1d08a43a391a275bddbc7d0d81dc637c6e01306
SSDEEP 768:KBRtA5shu6y3BMmwLnD4ZBmrvOq5St9pH+sty9vwcxr+ro:4mR32V+8v98y76o
TLSH
T137830043F38BD5D7E222B572EE612F1AFE025F524102D80745ADE11C8437FD8AFA9896
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.version

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\.version
Size 50B
SHA256 1955255d8a0ccedce85fa76bb7362b37bec8e5d5364b29dc12962760ab1371c1
MD5 9b9ded3a8518e803c05030ce27c7932b
SHA1 1785e50252fd5b80efe94376c0c8fdda404cfd60
SHA512 3322659e39eddb66b0e4e51d6de1f1c49cc92d7841d9d612c9bb753bd4ed9b11f877556c372235d7a24d4686b9e69fe70fc83a4c9783703b8f002bcfa0d48255
TLSH
T1A890029247152F0129498102449F4CFD35611701321A6405405D4B6852B1265811A0B6
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.AspNetCore.Antiforgery.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Antiforgery.dll
Size 118KB
SHA256 839a7c058d18f70f031c7bd7a26b3397f1d5a048284ba7f40ea072465174a110
MD5 d843632f2093e68039fa3d1695876dd1
SHA1 3b156d6c228eb9de5a4b101b338c3ff4ea8f3451
SHA512 f1f64fadd6d2fbd4cb50612028c43667e36ba07ea4b0033b90ed4cd103b824f28b14f78478b41d0905b7f522c0c17889f0673f45a2b1c2c2d7c0653e7e1190c1
SSDEEP 3072:en+cmA2GrBNPhPYe6UEh+8v3tzlVCX9H6WY:NvA2GtNPrmftom
TLSH
T1D8C34B04F3D84726E77A4A7C82F38D01F5B7F1821311E2EF4AA5998D1EE77C0A67061A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.App.deps.json

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.deps.json
Size 22KB
SHA256 27159fd96f3524379b0a8320f6a8ac22411c6d035ed76b1635c759e4c888192c
MD5 b18064fd2606b6d5ceea04791632c6a6
SHA1 ed5328044fb5b31e25c4aac18ea4da3c58ff491b
SHA512 ab8e4dba8a07bc7686f009eab480e370bb1eb10578b2e751b602f5f2842f011b83efe5bb04e7c103fc3a7a986ef47eeabaaf3aa1a0fdc48b6bccb45b6094636e
SSDEEP 96:QfUp2Z+LR/Ada5ZQDClgcYjcwcWVnWr4LdEnNLQdjOi8CCO/jU0UhUqUHUHUqUvj:Qil3aZCUeCfX/A8nzxd/
TLSH
T158A26A75C4400AFB4535BB9E6C782A4AF275039F3182544EB83D682E8F77EBA8055B7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.App.runtimeconfig.json

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.runtimeconfig.json
Size 289B
SHA256 13d6b39073018e2634688547903cd4b503eacb0da4eb31bd01fd5d40f579e7ce
MD5 5a2317cef7301a0a1d20ef12260a9878
SHA1 2e7d1aeb633fb390cfdb7fbe30cd7cc9f5103772
SHA512 cd07d2867713529b473bc646971afed0d866aa96ec1a6fa3851464672fb20ab84f2e6dffb73e40143fde784cb524c30b8e3f006cf89865915bdea0d857be9dec
TLSH
T180D0C776EE116E6712F12B69D0B1C683FA21A36B0014089174FE6E0C1F36AB64006BA9
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Abstractions.dll
Size 66KB
SHA256 28f813b94861e7d48f448f8c17c577957d071e9a08308165779e59519ea5b9f3
MD5 aa21f685f0821d7086a74ad0951d9993
SHA1 036b792f318c96749e1b5b0ceb68fbcec9347c8c
SHA512 1af7cee2fb8d40d9f661e63690ca3ef1f2a4bc398933aea0b6840037c3dd0787a6fefc57c5f898b59fe3002306db0b74258370838ce28881dd7ef9f376eb9fe1
SSDEEP 768:RiDGrx+UlOsOIBHC12zrWkOq2Oq2jnJ8qkG5Lqk226KaFNDm9PD2K3AZWZEpuQLN:R0Gp3BBi1eTavDKaKFQOWNL9kzw
TLSH
T19563AFD6C7D84312D67A133CD2A2960AD634FB8B5341EACF0A24EA4D1E77BC0D731669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.BearerToken.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.BearerToken.dll
Size 70KB
SHA256 95d072773acbf992da5c539e6c10f722ffb4ff7e4b71659dea853b41da5aaf36
MD5 41d0e49b317cd19b7e84f733fad9694c
SHA1 83906f08a4161d534292bbbdcb0c4d2a2c55f821
SHA512 814c4a323a0068ee481f3f6a36721452b4aa32194709f2f568be6665e5d8a606d2ae76b274c84414d5656311940354bc3d3710c9085add981e5232bfbe1a053f
SSDEEP 768:FgLrJV5zWmoAmkUF/urGJQwItWAjf+RYTP4coAplEa0TESMfJT2PQLF9zAug:F6JfRcF/urGJQptWcGWD4vAezkBAQ7zM
TLSH
T1A8634B0583CC0606C7B66278A273ED16E670F64F875EDDCF4988A5CD1E873C1AA3166B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Cookies.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Cookies.dll
Size 110KB
SHA256 6ac58347cf336f707ef1a3273f47b34932a7e3d063306a917982d5d75ff66cbc
MD5 3dbb4aee5f3b4c183a782ddd0f89f2e2
SHA1 09a67fec31fd251364cae9a8315c71d1ef1a901d
SHA512 36503232add3729f7f492976894ad8f82bb11b72e6a5bdfdff57f7ede50a290ba1ecb955eba77c2cc0dbb9752fe59a206547d8f90bb2c5d8b60951223da37779
SSDEEP 1536:NoDOoYPhEmp+TorDgFBtfdZ5WgaLvpG6RfLSFjeWBzU:No6ympCFQHL1lmtrA
TLSH
T14DB33A44B2988602DB6B873896678E53FAB5F6531710D4CF09CDE98D1ED3BC0E5702A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Core.dll
Size 90KB
SHA256 0bd32eff8f4887e925c0bbb204723c873f9a0d120eb9a62a9630c11cc1f8e316
MD5 0078ee6069aae4863fca27f17405bdbe
SHA1 7ac175b3f27401c34539dd34a77bee98ec602b81
SHA512 8eb6698f382faaad8e4da7e675e26f178068e6fca60c8586ceb81bdb8e4df4d085a060e2af12fda9705c1f940a6748392b114da7b5c4689ec6059e795dc77b6a
SSDEEP 1536:7usflkFbIdD6rnAG0FkTmBbRRuVUCc4e4zH:70ZIdDgAGNmBb3uVUCc34z
TLSH
T126934C85B3DC4B03DBFB5A7D87769902ABB5F4479BA0E5CF048C888C1D96BC1A570227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.OAuth.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.OAuth.dll
Size 98KB
SHA256 b8a5cf3245b17ff0f7d6516f9dbc8286a882672ae5b992da52d1f98f83c817ae
MD5 bbbc185db6eee3ef2222ca2b86fd68e9
SHA1 8305769014b34a83a27d42a56c3053237d01afd4
SHA512 c344496cb740430d44864034fa12b319cbefee6ab3be9f94d3d139dab6681a1cb8d7a0451c7b21504fa549c093cbdc726616bcb527d05c1d2d91d969d7a1ba6b
SSDEEP 1536:7poluIJLgqzhlVA60aIykDQ/VZfb+R5bgNWW/52cb4z47:7tkA6LJb+5bgNWW/gy407
TLSH
T1A2A33A06B7D48706C6BA8A7DC9A78C45E9BBF68B1321D5DF0884958C0F93BC293F161D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.dll
Size 154KB
SHA256 fdad869088caa510423efc18a9d8654cfbff9785c075597b18d7d0aa39718573
MD5 5681b5b2e27c0abff467be36460b6bbe
SHA1 07ba53f388b287aad4906cef60c0327d079e09bd
SHA512 92d8816d2d57b96a03e28bb1b548b95a3759e31bfe405fe94ce1621acdd604fbdb1478255d7b9fda9da715805fd7ae1870817d712ebdb540e7dc1c6b27fce835
SSDEEP 3072:94rPTQxWwuXYlHsb9Ts+vvEQyygctoKqW47EplPZmPJDuoS34RTZEfHgq:0LUTY9TRvEQyygctoKqW47EplPZmPJDw
TLSH
T1B8F31732D39C4B22D3BF5B3892735802E6B3DE831361D5CB4599A94D5E83BC1F271269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authorization.Policy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authorization.Policy.dll
Size 78KB
SHA256 311a121dc09ec38c6de2a19488575ba82086bf9dd8d1d138afd107b237a17fcb
MD5 9574f30483797cc3a5fe57254228be2f
SHA1 100a20a7760d87e8dad616f88bc35d0bd91c9ddb
SHA512 6e6d4b53eb17cd54c0392d9ff5f9fbdc1fc8775cc1d2564d51afdeb3546010120e509784f633ed8cf1f9166550a1f8c389579dc6deb5cf845d212814e0d0745c
SSDEEP 1536:N4QNT/JSagO7epprm1UJlp4YO3DiMuMB1zE:N9NVS5p4YciMl1Q
TLSH
T15773296583CC5303E56E917CDAA29D07E676F2D21721E4CF0988E68C1E87BC19371D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authorization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authorization.dll
Size 106KB
SHA256 3bdc00cb037fe490df07690c834b38b2d2707908255bd3d45662cfd41f2ad4ca
MD5 2bf54b16eca071b9ad0145133c56efaa
SHA1 fbd98d3e55afe72066914caca5bc315947f72a25
SHA512 f451a2994153abaef58bc7addd5154d640ab19c6bfda3c42bf48ea5dc7fdbb9702c50cac870d8e44af092f65e860e5022ac531bd541d348fbd6743d08d615ddf
SSDEEP 1536:XGw3xImbke9OhlEplMlU6dnK+g90PtpIdrRjn1IG0ESPfTaf0EHt6YfVz3:XGqxRbk2OhUGlU8Y0PgNRjn19lSurL
TLSH
T17DB34B15B3E88301D66A517CE9638C97E632F14B6705E7DF0A4CA9CE3E833D0D67252A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Authorization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Authorization.dll
Size 54KB
SHA256 e9df215562e7eafb9c8b05caa5f0f3b8c722f5808728ccc99bb852dca78722d3
MD5 4a9033a4deec31de96895941abe9eefb
SHA1 795443de15cc4edceea2fda76e98f2f413496197
SHA512 172e86b6bdd5f3f69148d1d8e5b863047d9c1b59b37934f1a0f4f7d3cc62ecac5463aa97713a907f0e413079d13ee088b8d0c4ad7243c4d599892124faf16b8a
SSDEEP 768:wNnvN3mYhoYaO+0M2SxX+msMZ650ZgMt7wo/RXxUP7N9zI:W1mgzzMfrgMtxhGvzI
TLSH
T1AE433AA283848302DBBA4578D7B38D23D6F5F54A6B01DADF0240E44C2F977C8D2756EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Endpoints.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Endpoints.dll
Size 706KB
SHA256 aacc21dd54f162305ba2bfcf6bf226b09363c4fc0d9583456cb6e53e3866270a
MD5 14d6aff10a472b35d2683a5f1784fe0b
SHA1 ff7ef6bc2647a0795c145fd6fe4b670470414a4f
SHA512 37f7aa8372c23c2c567a0855f83ba38ffa081c20ab176ec050245acb965682ae1a34a2b64ed557c0e69ec6910820ddce484a5ed5f4633c7584f18a164f08118a
SSDEEP 6144:IFw5UHj2BP1GCXFK0gzpeVpFzDe7nGN0ACw8g8yrmfjG7zzleI1Ds6Ygdukq+Cw:IFwODqP1GCpVTDe7nctJe6fqJw
TLSH
T1D4F45B23A3950217C7AF55B881332902EA757406A715CCCFA108EDDB2FA7BC1A27E775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Forms.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Forms.dll
Size 94KB
SHA256 4dc18911a6df739e962cc2db48999bc897699e9eb91bab8ae5bea54d47bbd962
MD5 646533f54ac67509c50fbec123025f14
SHA1 91e4993d4fae71b97246318016e907789f068753
SHA512 12f4165da36b379973a005810af020ab40450c192163236de5fa43f645d01c979099f5f7966373efa8bd7b6e1028df54632f4f734af1f70179bab4419238c61f
SSDEEP 768:pYy20zdkOop1H/oOPTq3CHBsz2CUCRD5yparhEIbRhZMv5150xDblz1oTYVG4SdY:p0/bz3u5zrhmv5MmTiGG46zy8Yvzq
TLSH
T1F7934A1973888212CEEE94B9D2A38C67E675F4DA5712D6CF0888E5CC1E937C0DAF151E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Server.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Server.dll
Size 846KB
SHA256 9e342ebc6157e45ccdbb881f6e2dab5b489d4ddf9ceecf6be87890b6d6ee51c6
MD5 2b2f7eaffd6fd88837c692f0ac4943af
SHA1 5ef195bf109a2b10de34b314c08d0e5ab9a07abc
SHA512 3f6f0decf6dfed1d69f2837d96b67334c31ac80cb17faef3bbde43f3677e97eef5e434b973a54ced0258387883c667e566ec71b8c77425a465c94c74f431b6ae
SSDEEP 12288:vSm9PJjnCkgukL3UL21vIKnYaZnypOvCUCOLj42/i+7Wdq:qm9RjnCkIL3ULkZnypOvCUCOLj42qcT
TLSH
T1EB056C42A3E04602E6AF96BAD3324503E773BC456764C2DF5088D9FD3F66BC09936726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Web.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Web.dll
Size 382KB
SHA256 a6a4164fdf35563a1bb3eddc5df9daeb21b585c5547fb74187b7651ab155f1ea
MD5 aae7788a5ef5a2366fd742c458199eed
SHA1 f9ae79bbbdca184f489a3ef4ba86e4b83b650ee9
SHA512 53743d2f79f8dacaac395f35271d201c0a0cf505af026c46c23cda60697caf421b5b136682133af6f7b7502d69876653d61fc1d429b5bb0537cb4f2f4c570c4e
SSDEEP 6144:T6FDaVxa2o/SDOBlLenGpZ/Wc5nbJLT2LBplYK9pOGEfB:T6FDCo/SDOzLenkxv2BplYepMB
TLSH
T1AC846C26F3945229CEAED27DC1618466E372A28397D2D3CB8544DDC9BF4B7C0A53A313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.dll
Size 806KB
SHA256 920905ca8e40f0e868956136498d8b3c262529e00e56848bfe757c4e745b34af
MD5 8a4873727682a7e7c219110989787149
SHA1 d5283575b77e3b865b55881d98e69fec00cb804f
SHA512 c5962d7254d1e7f936a4e1f5a2cb89276d6bf587c0986bc1dca7e14a5dd50a68caa3563257e57fdbf5bd0d826eedbf79e595b838055456e38fdd98566a72e6f7
SSDEEP 12288:VqFI+8WZYqreGpsso2Nr2ZYqvZI/QRfSJQAknVFGdebe4mS1+TRLVc6:VC8WZfzqvZI/QRqJ3iVF5e4mS156
TLSH
T189056B2AD3D40B01D97EE37DC23B8511D6B2A9975371D2CB0849E9A83F67FE09632361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Connections.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Connections.Abstractions.dll
Size 66KB
SHA256 39700ffa512e75bfdf4161cfaff08e5747b321efd1c020de5006f43375b65d56
MD5 c18184cf4815296189e8f207177972e6
SHA1 a7182b4bad1ea6e920d60c96a387e72ca08cafb2
SHA512 e5a253f7c5195fe119e594efca174acc7f173fb1bf38d404317279bfed3770e4cd00b066bae2d6e7dd4464d862fecbdd06a3e67a3fc197cedc931664e62283d1
SSDEEP 768:r31SWOP7ntkIvS8AMXoA96Floz54LXNtt1/+dZwV4VGI62KiDjl9ze:rlD18Ani5EXbz/KZwgGI67w3ze
TLSH
T135637C61835C8722EB7B677DE25789458675EF822313DACFD880ED188D733C4663136A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.CookiePolicy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.CookiePolicy.dll
Size 54KB
SHA256 327402de3a948c67637060e6640a4c0f7bdffc1f7b5b29a91c240b4ba3944133
MD5 8ff2b01cac41b334eb53ce1fb383a5b7
SHA1 512bc9beb2f539b74533a535f6fdf6f7a99f61a5
SHA512 a6a39d3cfeca593470a73364576c8ab812b774450ad8765d2f96f0e44c49f6ded2eed9eb202ac107987f518a5d2a2b9b17713ac7c1bb631c6749415a2e426f23
SSDEEP 384:eWWa8zxWikM7wI0OjfQ6UXo3/x+xJvEqqqD8sf78gtZwkvRQo647C5s+TfhQGEER:InjNU43/xIBP8dtQrxFhDjgrr9zvbue
TLSH
T188436C1A63D8430BC3395538D2738F6AE830F6831B52D5DF48ADE69C0E67BC19A7214B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cors.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cors.dll
Size 90KB
SHA256 f0dac026477d8c0b8cc3e3cf9123d08286ef21b2fa0b56a2842274349495a4e5
MD5 3fc08deb075a83821be8fbbdcdaac6e1
SHA1 364290fcfd99ab7001da51cfa40e063bc9eb5226
SHA512 3db6fb1e008614d04ff7bb266641e8e526e621952f399c64b5ab59998a9407d84f16a198a051fff5a7466809f1ec8518135e77a51e8765651c8ffefed1cb56eb
SSDEEP 1536:X/oxeqyxAuBJhsG6J7HuvCPHQ2lj81PcjZkazN:XQCAuBQGWOqQ2ty6R5
TLSH
T18A93490A73D42711D77A967CC6325D06EA31F6532722DAEF8C64998E0FC37C4A53272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cryptography.Internal.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cryptography.Internal.dll
Size 106KB
SHA256 8a01e5d77e0f954517e81b0434a9a001567ea6b43a207ba2731d050b38496e76
MD5 59b8d9406aca2e4d9d7e174b4acfbb05
SHA1 d8d7531222697af71b67127b9e3bdeac5b42f40f
SHA512 38c1eda8237a39d09cb0d341c245744ee71d2b403f61ffe4f95cf2b437f7a7178b2c21600728c7adec9845f4fd9253471e6e5444688598fc311e1308423ea9b1
SSDEEP 1536:u0tKQy1UtghHiFYCOn3o9OZGDGxfJWtWyCPT+6XPP9tda/xPvzqk:u0UQy1UEH+YCOncDGxfJWhCR3da/x3R
TLSH
T132B33A103BA4450AF5EDCEB49A77D945A670B057AB01EECF11C0C0AE2F57BC2E7B9225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cryptography.KeyDerivation.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
Size 46KB
SHA256 a3d58c25ec403a6a80a4b43556b15665edbf5b7453dd487d1c284ee5f475bec9
MD5 5025b642fa95db4c7a35e0b1bfeab841
SHA1 a1035d29f6f0bb70558fc7bcd4c93bf4d21b2fcc
SHA512 b3886c1b5395ecfd58dc054dcd78287485283b2dda80623892a70d84a5c8ab70eea865092a6b9050066897f5eb07026916737cc9c7f254f08aff5621c718ae87
SSDEEP 384:vWsKB7W/jqk50qTounnhscIfPccjO0QaY00bPG8o59muPDHRN7/SNXuifSR9zrun:eIqk50CROBQj0cSjWlfe9zqwC
TLSH
T115238D59A7688207FB69DA3985B3CA4ABA34F5471783EBEF1014D29C0E837C1A73251D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.Abstractions.dll
Size 50KB
SHA256 1f22e1abdb7ed38f52c92320e5ca6ed34cfc9ca0c7b4eb0e4dc3703a8ffddc3c
MD5 e3ea1869290a2345b2679785dcb6dd97
SHA1 a91cd2276788bf7eb144ee6e0c2b09a031fe2146
SHA512 92cc11354f27cdad536f04cf11be75e355a5bb101e09428c90fd95750bcaa03f40ccb75f4b063590f55fd72f5fb8791b07509f351f374c33ea5025274c1a5e03
SSDEEP 384:AW/i5DWX7O0wbidbDgPu3aAM/dhJvOyYNBlEm4Dt3hYpO+PG1KfxVXU1dnMUiPDE:qdXb4ub2RT4DYI8tlU3n3e29z0wqhw
TLSH
T15B336C0497D88203DD7A493A4A3B8D9AF5F4F5C317919ACF11D8E18C0EA37C5A6317BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.Extensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.Extensions.dll
Size 46KB
SHA256 c29281df7bc54f89bd7c92acb910ef3529fec9ec747adf162294519a03746f1e
MD5 52752320459133744f725c48f8fc58e4
SHA1 dc316b02e76f0e1fe2911b0667147ceb73186ccd
SHA512 65090f927b04ae0815ab8a189836468e67060342c0191ae1809728126d943585ffbab84481687450a8a0c5943749e3c24ab5e35cf6bfbf2660fcd6a609e0dc0e
SSDEEP 384:OPW9lmqW1bIjw8dgTgv1X2eu5ISLsPynkg7Hmhp7ehPGqSA+7s9/hljHRN7mW9R8:OBhcb9Nmet8uYm/ymAdDjp/9znm
TLSH
T143236C6497AC420BEAFB55BCC5A3DE02EA35F29217D2D9DF1084D24C1DE3BC0963166E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.dll
Size 422KB
SHA256 fb500a959712f9f29410065d900a498151e572a1b61af1bb527c8ef0486e7e26
MD5 9079c77d2338fad12fc4827c7a21931e
SHA1 d52020a1869e96b1a756fd6ef245ab8c1fa3436a
SHA512 e66108cbe888d1031cf74d6d967b6716db033dfc6e6cbe2120c9d7cd5caa0cf3783267b521da7e8e5be0a444df620b3adc06a4b150a61acee87920e9eaf30e10
SSDEEP 6144:xQhI/jdLAGE9kn9MknV5GyY+oo0bB/zf8pMMyIs1zEI9HpOhdS2iCB/kR3/7:xDkGEwvnV57Yn/oMMyIs1zEkwi0/q/7
TLSH
T1D4946B12A3D40602EBBB97BD8222C101E535B71F97A2D6CFC545CD997F5BBC4863A322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.Abstractions.dll
Size 34KB
SHA256 c3bdd06ee55b8e73a71f89f622d09049cce6cf5e85a0c893ecf0469eb7d276ef
MD5 62df9dc794b26ed9698f7f13a4f87b56
SHA1 a88e6074d8c60862b339bc2d6936deae0969513d
SHA512 186f05f63cd7b62e90e91d2f34f142e5b6cca4d4d836337f099dc5a9ca201770be1edd743b92fc54b58e225fa36428782f341fed74a9129dab1217d7f5dad129
SSDEEP 384:PyWOrUUWvmsNI+GtYjFpWe1ZpZfG2ENiB/hljHRN7OOER9zg0uj+:PHPITopWUprDjXo9zbuq
TLSH
T19FF25BAAE728532BEC9B0E70B568DD573D39A7C61B00E5EB4140E6450E937C4EB31B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.HealthChecks.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.HealthChecks.dll
Size 50KB
SHA256 9bee921d35c333cfad8ca8ef662c608e0103c21e1b8ac84bc050fb5617114be2
MD5 60a47e8d52818fc7ce174bfa5efe526e
SHA1 e13102f8a87a6980d88ac2c2b3bd65d4c7ca9081
SHA512 aade964221f3a62f4981cd5465187794ab00cc9be81d87ef03a07ccff873c7c0d20891cc218c19063d342620aa56e6315ebaff75db267af683ee32fba5dd4b7b
SSDEEP 768:AANVt0+zcn2JbVCIkSKMUrpyp4R26JlDiP9zIE8:AANVt9/CXSpUrpyp4R2OYzD8
TLSH
T13C334909A7E48306DA7E957899239D07EE31F6476721EADF01C4E8CC6E937C4D931638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.dll
Size 442KB
SHA256 21378b12857853a3f8e91ede56cea5177a4341345fea91ed23797ec055bfc1e2
MD5 b722834fd884294e3bea684f95615b65
SHA1 7be86dd4da09d4d2e324f8a6dde51e6e85848a9c
SHA512 404e79c91fa701a2c2b6dc8d0ec123e4cf034120e85bf7dbf510895c48ce65641986f7fc9aea35575f1ba3c6af78e6aa173c64de4aec0491e729608ad49e00d4
SSDEEP 12288:BZbViVoFK1FJuBd4Ctxy0pi20Ufun+2/wLQU:BCV5qoovPd
TLSH
T180A4D52627EA0009E2779A784BE27465EB77FA531735D48F005C9A4E1B93BC18C72B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HostFiltering.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HostFiltering.dll
Size 46KB
SHA256 ca0401fc454981f4c36dc68ffea795e5d05b69c5cb52c0a0985c6ae4e6c5dbe1
MD5 270631787f976573f89af0e70cbfb26d
SHA1 ec490c8460610133382a57b56ea75f43bb458e76
SHA512 01be3245f5a49ef24c021651a7356cbe7bc00fc35f6312bc2e9a7f8a94a39776fded7c15dc7e5d70518c3841c217f7f51cdd94b18b50e73779b94eda67de7496
SSDEEP 768:NyQXigg/yKOl6GBueQwL5yd4DjHOkPO59z1:NyQSggIx/AoHO24z1
TLSH
T172237D9263E84206E7B65D758A31D90AFE34FB838B60E6EF06D4D64D1D933C0E631729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.Abstractions.dll
Size 42KB
SHA256 3e8290f6eceb8a7e44a98a5d019feac68953b417686ce41ca4bc748d6b58cf3d
MD5 fe33e411a76475d62e8cfe7270f8a53e
SHA1 cd6861e89b061164e0b9d8f621881ba1de07a346
SHA512 e72bf04df64e74da3e090d6e8f61e608301760c656e568019a63e6ee6b30427a6dfbc74cba8806f484283894a1ca671544edf11648a9775d635c1e3a13a7102d
SSDEEP 768:ZRB44xop0d2GAzQDbR/DjB9bmKAU+9zVYeL:ZRB410v1/bb6zj
TLSH
T18E134C96B7988342EEBB1AB0D5669D46BE39B3C64740D9EF049CF48D0D837C4D631638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.Server.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll
Size 30KB
SHA256 de937980bfc694374c34becc5c853117657973a03128619b43032dcc31b26cbc
MD5 2063f623f1fb20fbd11930283407338d
SHA1 2ec6109616bbd2570b4fcc958df6ea788bfef984
SHA512 71440af093db473f5c05879d2935d652b5f6f0681fceed6e5db16c842c22cccb65bf50f05084efcd4270f0df2b27041fe4ed19f937b6d68cd02ff67f75785237
SSDEEP 384:HW/ahLWV/YrRNoKHaURGTILF/hljHRN7PsYER9zg0C:jVt7nDjTo9zw
TLSH
T197D24BA7EB688303FCA7193165A9DA8B3E3DA3C35B40D66B0194F5851D637C1EB31638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.dll
Size 450KB
SHA256 b04d00c39c0e7d14cf6d934f107548885b2305158e7875f5cdf583f75185e26b
MD5 138fe46acfe22c90fb8d233adde899a1
SHA1 4363c4665f476b83aa4fb13e11b8a6fff147fe36
SHA512 4e71526f60a67f161d2e43b1e1deeee102e1bd77b5f8cf57dcb404b68808ffb28544119f0a677d5a6b80b45a9061a8cd0da900a360bacf295fdf0e76919dd7ca
SSDEEP 6144:tOSBc88Qm1R9Ayyz827mqm4zNEIgi1h+1N7XaGL+bHH3Mq087:kSBeTAyyIMlmGNEIn6N7xC
TLSH
T129A43A165B940201EE7F56BC826B5051E573B64393B2C6CFC10CAEE9BF9B7C89931722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Html.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Html.Abstractions.dll
Size 42KB
SHA256 0b59c709125d746d4a9fc938ced9281fd16709856653590a6262f368d17e1186
MD5 59673e4f29b6020167cef95ec013c1eb
SHA1 7c2214916c313172e561caa78da56ea0210319ac
SHA512 778f594081b80a5751b6ee68a2f10ee347a2206e528b30dce2b4659f35f789cf3a4f6de3552e7be477e5d73e07b44f7166e25139ccb89a546be572ede7ab840b
SSDEEP 384:JWFIHtWBVmHAUQSg/Ij9hZ1v08nPk5PG1XKfsdC/hljHRN7exR9zQxihEb:PgmHAUrn91dPySeFDje79z8IEb
TLSH
T106137CAAABD88203DA67547892A3CD07FD35B6931B52C5EF159CE58A0DD37C0DA3063C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Abstractions.dll
Size 314KB
SHA256 c22dd4f939faa66e93fab9c9daeb8c28845ba023e79a55136b4699439c4a2b01
MD5 dceae131e35b20f53607ea92b5dd479d
SHA1 5b40f64b68720e3a168b475b5f54c3c10513b84c
SHA512 89d1980219ba3183ec37b8331750dd43daef7cfbe3101be083902e778ceda5a290da9954e1178bf23d354d026343bcb0bcca8a541b2f0e33e61d6a44fc6a28d6
SSDEEP 6144:hMmzgwtAMADwGTgfHWEIdlMm5UwDvRD09m90x8:hJzt3ADw6Q1ElMm5dDr28
TLSH
T161646C16F3D90247E77AE1BCC163C401F67968925392E7EB1658EBC91AE3BC0EE72141
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Connections.Common.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.Common.dll
Size 54KB
SHA256 da777d8cc070afce6806dfe27c1d1214f2ca013cf857a2f9c14cc5e14f406a41
MD5 83e314b44a820f871baf3dc4ca2ca777
SHA1 71618a25c35146cf60271a52757bfd2a141882f4
SHA512 2712eb330165fbb8f623349f1bff882e008e8cf2495490c943787dd88c882d3db440711676e4e0977b2b20427f15f88629a74e8d14bc4db3636731f5fb567bfe
SSDEEP 768:GDTloNGOIcmupYTwyzhDAscCyAe5RYfw19z0wf:GDpqzmupYTw+hDAsdyl+wHz0wf
TLSH
T152436C4893E04102FA699A38D1BB8901DA36FA423B32DADF9585DD8D1D637C1CA3177F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Connections.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.dll
Size 318KB
SHA256 d9576d7acc867dbd205b1cbaacd887cf8aa6c1303aeecde9c1aeb083c5092855
MD5 742b11dfb3dc26980320b3ce518abbba
SHA1 77c40269401e38c2f1b661c9aaa863bc78ccbcc6
SHA512 ced70527163636a0563c23ff38d32299743cc353c774a8ffd00897842677371964941061c5ef2f581d62ee775e3656f1b9ae2efcb8d86ff0e105f428df690900
SSDEEP 6144:3k56zZy3EXs6hkM6KSrxYQEjTacngKo1aaG6:pMEkM6KSzbe6
TLSH
T1C2646B27A3A44A03F67FB5788253C141F77DB8428795E6DF065C69C90EA3BC08D7229B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Extensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Extensions.dll
Size 682KB
SHA256 40b517b64a44a48f00de99f2c483d11789119e543b0cb8fde81857a11eaa43b4
MD5 e02a29d50e701ef262f2e65aa20326cc
SHA1 854558dc714904d954b12b0bb283d024b2903ef7
SHA512 00c9a7d73f6515580513a69df98b892918e8141fadddf004df7140ff213a390c6b93040e89a64b8fd3cf291b6ffe9cd1b12d307688bb6846767093a297f87f01
SSDEEP 12288:t+UEl/xoZolQoymkYwFABjbyajk//CA72blWB7/Cn:tGxhYYwFq6aqyJj
TLSH
T1BFE44B17B7B84E00C33F9978D13A401AD771B89363A5CACF2554D98A1FA7FC29A39316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Features.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Features.dll
Size 70KB
SHA256 8bf8b3f935006c025cf86c57013d5f223aec0bd6d12598594fc2dfc4412a7da0
MD5 f2f3168f4dad52fe5ce4b7fa7a9be888
SHA1 8132df122b6f9f33cd13e075abf1fa8ee6f1ed41
SHA512 c486b2da48bbea644daee799500665ba30efdf0cffd1b479ab935b24387f9d310731bca75fd68fe42158a535fdb4b0ce22f3eef916db7584773ffaa13edc323d
SSDEEP 768:OOCOJxxTmplWbpSVtVEA8q19ag5MHB1yRDUnX6k02xlzQWpZnyO5eDyiJB9zt:R9xloCgMHnyEFJ1fiVzt
TLSH
T15663F86ABB18977AE62D13BDB2C25312B0FC62F25312EDDB2C659F190C437C1E235846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Results.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Results.dll
Size 242KB
SHA256 e4a1a5091f847ff3f1bc28bfad4501b2a7d32703dcb7b28970df53ac36d9ffeb
MD5 92cf95021ea562a5c5e51b36e59caff0
SHA1 f9878b8ee752696114d57b0c116c11382d3f5eb6
SHA512 1141503ff13655e08e21de2a8ea9172473ab543440a55de54be874adbc778c376e84c0c9ea422a0726ec4a23336d503add0c89065cd740ffa15d17b5132c6285
SSDEEP 6144:kr9FZOq0SFNqgKpi5i0sqtqdbp0oz/PRRGR3y8sb49GRJJwlb:krROjSXq9pi5i0sqtqdbp0oz/PRRGR3B
TLSH
T1E9344A29A3D40F07FBB9977C8297C601EA72A5068351CACF17A5E58A1F83BC0BE71715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.dll
Size 294KB
SHA256 488b0e748694544cecd35a651113b4f5ecb794de0b9e6339d94cb915d9e88126
MD5 afed7d656303199db6ee8bf4b2e5e64a
SHA1 11847f69053040e39d9777bc18d23ec114c70238
SHA512 42be945ccf748653115196e78fa7f95d6d84f38a965cc77c128422ecc1538e9b3f4943cdc20e144bd912d4d2cc2329d97819dad2ff08ff30d9f2e575b5fda2a8
SSDEEP 3072:18kMskEzk4FJ3qKmFAFbrnvfLgdg4TNp27XtxKnnDjkG78Zka1VWi6yBN6u3wDCK:akMABqO1vfgTNYYkI8ZkcxN6owDPYPzM
TLSH
T11B547D2767880613F63F717CC2B3D511E77CA247B392DACB06A4A9981E87BC59E31127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpLogging.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpLogging.dll
Size 194KB
SHA256 b0498b3f524b580b0ee4f06aa3647b7ef547ba0323ebc63f452969e4c6f577fd
MD5 d30a6a4286a30cf82ed2d279df3b2494
SHA1 c3de5faaad43c2f5500b57ba98ce79e46fb04c57
SHA512 8878e2e6b1387bdc5359949ab79293cdf58cc5a310fb6377df16610301a7a92eb5a8a3f93eaaa81c6a0d8a88e0b90f72041d4b038ed4ec61976be75624922674
SSDEEP 3072:6eIoVd7SaXlSTuqIns9LdUDseYrNzS/cGdpoAZb5td/4KJZPKo:Pj7JVSfm+id1Jxt
TLSH
T171145B1FAA947603C6EFD1B882579612F7B394431316DACB05989AE81E437D0FE73227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpOverrides.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpOverrides.dll
Size 78KB
SHA256 6db7ae31accea1c5000a6688d72c91596e814214c322c14076f8ac383eb66b39
MD5 e3589e7e6ec51cf1d6c9670c8cc2bd1b
SHA1 dd8d639f8b836dccaec02d09048a643c74728218
SHA512 57b1b04730c612d7be82525f596dd56e12f8c149903b4d45d7b2d9c2ab4aca101d60edcebbdc660e3d5a691a02c022b92a17f3c12616de2c0e8e1af6ad7731c7
SSDEEP 768:hE+s9WDIscAWkCCiPecEnZc2J8fIOm0sKKh7CRobzh9bqWMPA9fl1Bd2edvDUDjN:O7uWkCtTEZcwnuKhGA9Nx2wvDGdzn
TLSH
T171735D19ABEC9306E57E657CC1719D06A2B2F2A72321D9DF0E65958F0EB33C1CA30716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpsPolicy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpsPolicy.dll
Size 50KB
SHA256 c8404f5b210a758ce8ead3c76c0fc7e75e0eaadf0d80c9eb775a77d784249efc
MD5 2f46d920bafef0254ef82aa9a5627cac
SHA1 c58bf9c7069caa39e8fd9f02d2062425e0994160
SHA512 83da05c00d65f8cb5125aef436084ff85a070812f6a010cf00b23be73b877926574dcb44f275c8997c60eafec7e44e5b1e3072d83ff79a4a5e894c07461e7a22
SSDEEP 384:PusWPpyuWOuPqtnbOYfcZxl1oDm7oHvJOhi5sRdZbF+mf4nLodG+6GCCnjtPDHRh:PxXPyCYfEl0m0Ohi5iFl4nYS8s09z1r
TLSH
T12A334B55E3944307E77EDA7882B28D06FD75F6871B20DAEF0589A28D0E537C4C23076A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Identity.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Identity.dll
Size 534KB
SHA256 c79799f77dca9408c5cbadf358a4349e5d5e15c4a82f1ea7ff354050f9614eb1
MD5 c9395849c05d05c9ee88f810465cabbb
SHA1 8ad268b96a34000d1fd6dbc714c92c3fc6a6fd10
SHA512 5aec2ab2f424eb21b5de1bde16f451d131bf0a135f41d152f36e12a1930e4f08472a1af26838228f850a2ec5ba909248b78562849005f050a5b295e0367ffdab
SSDEEP 6144:8knx/C45Z4mSTxrRXcTAnn5WcPT/1jvuP5fnVvnZy0t/lxz:8kxq4wxNXqAAcPT9v0VPZzzxz
TLSH
T1A0C45B55A3884B19C63F86FCBA739011F7F292038398D1DF8459AED51ED7BC04AB613A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Localization.Routing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Localization.Routing.dll
Size 30KB
SHA256 7373ba9b862aee1c9a2c7b534ef1865622957cd4428e8957434f9af1840baca5
MD5 f4bc7008e32ba7bef50edde9961d8753
SHA1 25f0b61bd5db25f853d720060df5a33ea4e6e6c6
SHA512 aee57f998afb6524c223840e1f5747eb7b22e813d1daea93ff3b7f03314442510a6597302d54379f85416b7f02682f9d10634cd442a9e404c9ffd7831507229b
SSDEEP 384:hyWiOi2BfUWB+HC2kY+avfrluGlWx/hljHRN7BuO9R9zO9uO:P7Bf7fZYD8hDjf9zwuO
TLSH
T1B8D24AA2D7684207FD9B6E7095A9DE437D39A3C32A0197AB0082E65D1C533C0EF3066C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Localization.dll
Size 66KB
SHA256 8f13392d6f4ddc15ac66544d2a9b8b4f505375cfd2b6191b53a2609f465788a3
MD5 db6dfde49024327612f304e57bf6dcc9
SHA1 e217c38dc7173184d76d200a9e1d22acf956d8e4
SHA512 040d6bcc9454e0807c4176ad76644c9a4b4088298e43fc82eb6dd2f625dbe483087bd9d16baad89eebddc0554835ca920a7674d6335fe1b1d1829fd3d991c4a6
SSDEEP 768:DhrfEWQqmu4cFwBrnJkaAwioPgG8jM99svqAA2a9z0wz:5sWQqmu4cUTeoPFvxL2Gz0wz
TLSH
T1FA635B29A7B88201D66E897DE663CE03E471F1CF4325E9DF4884E49F1D937C19B31A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Metadata.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Metadata.dll
Size 30KB
SHA256 7f5d2fb0ad9a8f6f09b6463ed078944a8587cd32302cc568414fc3d9cd8c11e9
MD5 c7ededa6a432a5bf851eb73441bf776f
SHA1 6a07e0226bd4da760727966f2f68097abfc4c7a0
SHA512 92ce5b385fb257b6b5e0ea782f5528897862335d29dc2871be2e63e21b56854655f28a47fdd319fecc4e694e0bd17c9deb2aea900ccbc1c4f8e1f9085af24f4b
SSDEEP 384:4jWeXYQWmjFGLzmQ/hljHRN7z+VTxR9zQxJj:TmmXDjz+VT79z8B
TLSH
T191D25CE69B689207EDA32D7096B9DA437D3CB3D369419A9B0450F9491CB33C1EB3067C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Abstractions.dll
Size 258KB
SHA256 2a5478ef5aa364c5454f9f19551e77dc9e3a5b0d75742ce1845f9b182a2a1527
MD5 9a478bd570f188976f218b46acad2981
SHA1 bc09c93a50efeddb6cd50759124c819736b9e1bd
SHA512 2593c13c5361d69a37210a80e74d76e87199b511323dee47e213f5f7bf8f273bf10495b57ba258e2e8584c1b1aedb335446be92c9ab0dfe2384af7a9a3c417a3
SSDEEP 3072:6C9pXxRCB/d9VOhKdPm/5ihxJaIbR91QPV6oQJoza03xTgq6e:lhgfdUO9bR91WOozZ3xTgq3
TLSH
T185446C3673EC4A13FA7E427C91BBD101D679B2C313A9E6CB57A4A99C2E43BC19E30151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.ApiExplorer.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.ApiExplorer.dll
Size 130KB
SHA256 5dfbd871ac8bcae805c7276fb00e23a1c45ac7c9defe862ec07878da1035e625
MD5 113a1ea5ed3990ad6eac968dc899fa40
SHA1 921e05de8c29db7ce70973623304a80e276ea44c
SHA512 ddbc2617dfb7f5879d605387000233f3e55458e4f360dc4b1f797b19bdeeb1b3acf7c7c8a8bdd9234473b5c698d3f664175b1f995f0d14fd7948a4e4480dc7c1
SSDEEP 1536:FMnsPmmYBhY4EMjVqppqq7Qe8IJaOEpDUjpFAB8W8Jn51836wxvAkJaFzDBc6z4y:FMn8HOQp0k8AafA9FABdzPYbHMy
TLSH
T1FDD32811F3664E25CF6E897CA6A38D15D0B3E9430711E9CF0A94AD5E1ED77C1B23222E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Core.dll
Size 1.9MB
SHA256 f6e166fa86b34a04b99fde96647633a513285259f3766b4061351f206ca9ebaf
MD5 287fc168094f8d2ac5ac8817ca67d020
SHA1 a3821f398902b5195931894a36651c17da2a3ab3
SHA512 9eaa8bc503134cdf95433797fe387e98c272c7bafbbb28271a7aa30483bd5ca7a3480ceb5dcd89f098a00aae1af03cea68abdb79437480a7889c57682130782f
SSDEEP 24576:3QrvS58nFDl06IPxWxSfw/wbaK88Ek6t18z2gclIIoqqFN:3WvSe06IImdEk6tS2/ZfYN
TLSH
T134955A35B7D44B13C23A997C926A4800D5B1A4C74791D6CF1AC0FE483F97FC0DA7A6AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Cors.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Cors.dll
Size 50KB
SHA256 c185e9751aba127cfa636c99c045c305043db717858979284d901817cd05f880
MD5 fa8d922af1940d5f6c84ef2c7914161e
SHA1 88f11fc6c197be6b70994b8b76a242aa53292d4c
SHA512 61e34068b2f9f9b63adf0c083fc79813ed84806239c87ece97fe82b7507aa78b4c99fc1f23223c6a4176a00aa437a6de3fe26f45155c666da6066ee4e2ea3f88
SSDEEP 768:vK6KzGIkyR8aR2W/uYZCdzzK7eDjUNULi9zPE:vZ3IkyRhz7HMO1zPE
TLSH
T129335B45D3884613DDA9A8789663AC07F974F6832B20E9DF09DAD98D1D93BC0F730619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.DataAnnotations.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.DataAnnotations.dll
Size 102KB
SHA256 898be6b84c990fa365665051cb5912c1876523aa940add14aa69f7d424335f90
MD5 9cfa0821e2f9816b4d4444a8a332c573
SHA1 029f9b4104943dc8d5f8896cba173df9de5ecf54
SHA512 76f18f6c56ae40022370d7608fe6ce6659e821f0795208678437ba1d7664e2e4ce29b73c17c1b3adf2c2a86ba09072337e4d04671c63916db9471d1be4ebe815
SSDEEP 1536:KD2xsqmWgUi95Po4jMGjpuV6MkTAqfeZunS/oByT250i9jUoYaBzGV:KD26qmzUifdjcwr7fe3/oByT25d9Qik
TLSH
T193A32798B3884613DAAAC17CE75B9E49E071F6470325DEDF08CA998D0E87FC09773652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Formatters.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Json.dll
Size 30KB
SHA256 30e928324d1a7dad8547dfdfa33106fb8132e3101e8363d44c6afff2d09fd2ed
MD5 ca87465060771386b768908302b75bfd
SHA1 75fb53c79e33b2f32ad5bf6b6e38d7cde7ebcbe7
SHA512 44a86d68ebe040d6533995bd267c775fe2da8c89cc66c456a31990b638c28e91f284ea4ef0be84c0b4f3bf1ee68b3c47762f75ec4d0e3f321354a91d4d9014be
SSDEEP 192:iuW3hqmWo5VCyg7Gj8eNE01WgVuAwmbxHnhWgN7aIWaLLbV46X01k9z3A5fPWE:iuW3hqmWQW7Gj8qE0PDHRN7/vFR9zUGE
TLSH
T1E8D24A9ACB684203FDA76DB045A9DA037D38A3D75E51AA6F11A1E6440C737C1EF3072E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Formatters.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll
Size 118KB
SHA256 9b2d1b6abf1ffbd8fdc6214e04ff84cc0ade237180e2a8d5e55991cfae0f4580
MD5 bbb73d9af8f73fad0f9c1dbe5264d831
SHA1 22f90e1eddfe934f415eb0ce36f6276f5d729944
SHA512 826dae6ee8cfc3a2146084f5b062f19023586c7e91dbb13efd094c476c4b6f57a423cf7a67f99448e543a7eaa86ef19a7781332358ef1cc40fca856cf5d47349
SSDEEP 1536:K6vyAQwnRunP9O/Bdv635eeuMSjcK8F5J1KqL/qORYrigvFket/7o9zO:K6v5RunP9ODvcufjcKoJ1KpORY+mT/Ay
TLSH
T1EFC33904B7A48702EB6E59BCC1238C42E2B6E1932F55D9CF4AC4D9CC1F93BC0B672656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Localization.dll
Size 50KB
SHA256 44913d387fa1ee6762521ef79fe43abdc4f50f11f5fbeb7f3419779d00b04c86
MD5 d739130f6c513c043591d0ca67dd0e9a
SHA1 cde4d4310b8f06a29154ead79be830a04eff74ac
SHA512 1d31aa32b7151d90bd84e321100b3f30128064fdf9cae2ea3454121a267d135042709f62b0477aa8828398817c5a9234d052d4233658e164088e01699afa1665
SSDEEP 384:WR/WOQW2kUIH5uWG4Ab53CQrZp5OOWuySr7vMBcB82VGSzJvN7kM2lSSYPDHRN7m:c/WOp7H57AMQzIOWbAMkNN7Kau9zwC
TLSH
T134334B59D7880211D97E55B4DAB3DA06FA78F7C35392ABCF0889C4882DD37C09B31A6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Razor.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Razor.dll
Size 238KB
SHA256 3c93d47b273f77432b4cc10c48bb4d102ec382ffd02fc678a0769ef7556e8909
MD5 45bfe0ef58a12966c6b1e66538291982
SHA1 e92a10a6e2bc86a8d0c78ea9574e0bc08de3923f
SHA512 edec6cca01d3a47d0a2dcbc331198306a0e9fad23c4e568814a6e8903607d2a6220d0da1abebd8f21d1cbfcda0e7ea92f3434949b9bc758dae9ebc2820c49b62
SSDEEP 3072:Lb23xFlof7eWIVhaFjwJPdP3cXsN7UdrirJ106ioWkp:nuof7eWIVbvmILqoR
TLSH
T101344B26E3A80D43FB7A45BCD1A7C502E276A6630335DECF4B6AD5861E877C05F3121A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.RazorPages.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.RazorPages.dll
Size 442KB
SHA256 5275b1bdcec655231e6903e57a26c8d850200bab4364ed3d9091bf230b37866d
MD5 5c5e66c79ba60d446ada60769aeb32ff
SHA1 d4aa017597edcafbbc6d16cd11df875e2af22d9d
SHA512 2ed05ba3f2b13056e96e185687aef489625ebf9e8e462db2990b54b1783e083a25b97fe08f2c457e90b35a42c7b9b21395c476aa08d39c99ce892ba8512052a5
SSDEEP 6144:tPaVNWsEnPo3ScTAHti5fdV9YQxyV1AJBc5JQrFdKKHDaJZCGgXGcgioN:tPINWQ3SaS0oQ4V1AM5JQrF/4CGgWioN
TLSH
T1F9A4492663E40206CB6B53FCD252D442E5B5E38BA780D7CFC4049D99BE8BFC5C936626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.TagHelpers.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.TagHelpers.dll
Size 274KB
SHA256 a6787e3ff9e77353a76376df11f6c4ef44f2f1818c5a7ecfa0508247a584f55a
MD5 bd0494b2c2abd81e6dfe07d7ddd7a8be
SHA1 dbaad45e880ad7656187c21f58a791fd7f422fb1
SHA512 623c5ed3cc55d694bd5b597ccdd751ae56c49c62ca1196aaaea06ec8bd06521d2c88fb0c13a3a27d66cdca01ceb4e68af22f27bfeaa503fdcd6d9c00cc844099
SSDEEP 3072:NSKZ7Vg83e7+cmR4uUbv/8oIo76qtYEPbYhSALVINlc5eth3vjqde:8KZ7Vg83Z4um/8w763EzSugeD/ug
TLSH
T162548D3AA3C44F16E77AA63C8713D941B7BDB5830306DAC70668D8D91F837C98A72536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.ViewFeatures.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.ViewFeatures.dll
Size 706KB
SHA256 5bb3ffc7883becba158d7136e94ff72e296873cf2a5a29a7074cbcc56d43684f
MD5 efce12725d1255ea17198e6d33545832
SHA1 a7c76b1421a2fea042d75ef88904102848237d59
SHA512 23821c407da6727ff397e86685af88ed075566b3192a6aecdc43762be71779c7b75e3ee34dd3f239f5238d6f71d5156b8d9883112df9a95506e72dbe12cb3271
SSDEEP 12288:ToVC5SG1PGp2pIfqtRvmF5eSJ6ZII1XPihkJrSPnE+yJcD/5:EVstup2pIfQmF5sXPy6Gn1yG
TLSH
T1A6F46C26ABD40A06C67EC67CC5324001EEB5B99353B1DECB2815EED91FA3FC2A731525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.dll
Size 42KB
SHA256 d9421b00ead19c88be20ca6fa078d23f72cc480d78570f40ca8a66a10899537e
MD5 9c1a5a89e21661208aa616f651c43fe6
SHA1 5f7d9fd8764462cdd0d09b57a3716f5eae960ac9
SHA512 57187997df3ede8afac40891330480327dbb1b48e0f0933f4adb75518f2ca21f2053434463753f23e023f4990d30ef0258f15788c9676227fc9f4f19bb20ef77
SSDEEP 768:qv7doFSYxwd8PfUIqvZjfRHdDj20rr9zvgR:C7dW7B3Sfx20Bza
TLSH
T12A135B8997444202C66A69B8CAA2EE0AFE35F3C75750D9DF009CF05C4E937C1DA316F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.OutputCaching.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.OutputCaching.dll
Size 254KB
SHA256 a1312a196b7f803f4f27f6f5e609b606035614b9c38e60ea16c98b1d0c60ab24
MD5 23769b16b25d85836aaf4b1fdd21bd01
SHA1 2e826ff55008c5e30995f7d79f6e94748cb9ee7f
SHA512 a28545407ae8e5cd0569f05481269511f6c234f923c2f1a954402a724f7289e3ed53eb8cfad3abcb3d9b92dcf41370a0876fa5bd64dde1896536a70404eca948
SSDEEP 3072:w+Fw4z2umua0stZyZgHOxnlwFze/lrxFn1A/aHumXkOY18VoN1joPN2MpbfCW9o3:hFwemuOtobXwMHisumXkH4C4tDfHY
TLSH
T1C8444B2B63984F13F72AD5788273CA46D772A502D397E7CB4BA8D8851F077C0AD36126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.RateLimiting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RateLimiting.dll
Size 94KB
SHA256 fd9ebb6aa4434e0e8225483fcae9d713dd115c6f9cac8fae4a69eeb65b81474b
MD5 0c4b3ee10331739f33dadb96bc681789
SHA1 5aa41f0c24ebb2fce4339f02b851a0a81571d034
SHA512 e20cb05b8e19a61188180816854d01b112a469194b3fd797782133eb9ab0eeeb48f6237f6a94f4c22273cd684d528c2d7619ea78e7e38df636154cb7f551c17c
SSDEEP 1536:2dZp0eX5g9mXG2b9zEiL+T6MWbnzGIYXzd:2h0a5g9mGQtEibJbzGXXp
TLSH
T163935C06B3DC5B15EAEA9978C27358129972F6635712E1CF9898E84C1FD3BC0D27072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Razor.Runtime.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.Runtime.dll
Size 70KB
SHA256 370dc646ef1baf5a7589a655d5e2d2e00626fa65bdc7c8fa8e1e34e288765bf7
MD5 7a59d995c2cd87deeb2bebc63961aa32
SHA1 27764c61e25647e8ba04fe3fbc6b75b1941bf957
SHA512 b41740dea4cde8734211effcc1e27db06764f8c91b35544084c47b43a7ce9802081a4ce46357805fa3f012463d3c2efbb45efd4c2ce45856a052f6df853c2365
SSDEEP 768:Ev3gHenKSzfR2t8JT6tIE/WEoDSAWDLnYIzMwHRyjqxT0lidRF4UDjUw9zt:Ev3gOy8g2E/WEoD8LnhwadcGdzt
TLSH
T18B637EA2F79C0305C63A4ABCD69B9D53E979F6922363C9CF4C98F60E1C937C09635426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Razor.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.dll
Size 66KB
SHA256 039c7be47e7221338d067b2fd15584dc8f4a1893a17e4b0a7042830f33b52d52
MD5 4c7c650f2eca6de45165413878b2aeb7
SHA1 0dbdd04c86b398aef51361970bc2f910eb21c049
SHA512 3e8d09045249706cab0c589818567e901ae5950d715c572056050b379f1ac3bebbfd337eb402d039127c63217829dc63ae88ad03275088355bd546435b98e6d0
SSDEEP 1536:oUuHkEg8Q/EiIAZ0+diy9/FJj7IXdxau1zQ:oUuH1xiIAT0y9/FJP6Su18
TLSH
T13F636C25A7D88316CB69897CD697AA19E034B5D31332CDCF4D18EE4E0E973D09331EA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.RequestDecompression.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RequestDecompression.dll
Size 50KB
SHA256 23ea82b0c9b68d9528297be05c05877d2fbc1eb2dbd5c737936f9f05aff996f9
MD5 4a17d0c7e0dbb9608725da1c065f72c2
SHA1 f1ab5df8808f605c8f617a3688ade5391d0ab779
SHA512 ff4028d050dac7884934408c1f9d4593fdbbb2eaa76664fcd5813be7d7c47776688613a344bb123701d517495dd973e4764c2f72a94ad78ac3c739965f532e0e
SSDEEP 384:8WiSpTWdURqkv/AOv6//F4IpfgS1CloJG7ku7A1SxSWwnE4+BrRYPGE07PUPRt91:t6Mf6//Ru7A2mobUJt9gcDjSPO59zH
TLSH
T149336B9593D84713E56AC9B08B62DD06FD79F6532721E9DF80CDF68D2D93BC08A3011A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCaching.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.Abstractions.dll
Size 30KB
SHA256 06b72ec61189bc442ddfcfd4d5d12aed3b50bbc53d32c5e648434c2f0a427aea
MD5 416f374d6c040eb12ae2ca8d36d633f9
SHA1 5f2df0ed0cb74d6433e17214440ef829636beaac
SHA512 e6c76f1debfcfe39c686d06a9606553ad8131014ec45f8426f4927fa7047a41510ce9e0ff1901f1a60fb6a4ce591977277a43d215b94e88794fdaf4b9af047e5
SSDEEP 384:wSWq9+yWEn3GggCEXuPDHRN7/9vuNXuifSR9zrurpSAm:wrCAKlilfe9zqSAm
TLSH
T12ED24AD58B689243FDAB6EB056BDDA077C3CA7C6AA119A5B1641F5881C633C0DF3063C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCaching.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.dll
Size 146KB
SHA256 4c45c3cac09e04a04ff8f4029f43d11c56f183c189b578de83cbadc85c606f6a
MD5 f351f332d4cbbe9845e500a4c3bfa712
SHA1 9053fd2f5e0e80bb8cb507c79f4350f72a26b95e
SHA512 e215f88b52171cf894e956e5ea26b4d57fb56f86fb1d47b4b1976369f0981b5e019e24ae5d3a389b127ea3dccd6cffba6c8b9f7b4bd89331bbfb5b7f8c67dd1f
SSDEEP 3072:FjQycd50BTpqvLQLLaM4CA9wvew9LBPaEA:5QyczKcuMVwmw9c1
TLSH
T15AE3390493C44346EABBA67D42739903EAB3F5172B20D6CF0985DA8E1E47BC4FA31756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCompression.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCompression.dll
Size 82KB
SHA256 b63097a8db15414f259abf8ebd9ce1f9d66ab9bd0130cd7a8e2ef68dcb82e174
MD5 6c2ecacb167589b0f24a5ead8fe997f1
SHA1 7e6397cdd050b304269a80a7b2cc888a0cf4b4ad
SHA512 008426c83a3b8bd24fdd8b40faf4adb10db7b39d98d4bba842dc341768300730bcc7637d078ab9dce64f813d989709f4c284a2ef9815d16d3cf7aecc1bd96377
SSDEEP 1536:y0DqsJJ34IzSVrYVnGVIgf7oXIo7CC9Xjczp:y0DqcJFSVzKgf7op7CfN
TLSH
T17A832951B3A88612D37FD6749B629F0AE675F3832B11DACF0558B48C0ED37E0987126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Rewrite.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Rewrite.dll
Size 214KB
SHA256 9d9f6a63e7b32be74cf668e749be62f873781935d26084f9f0a33bfe5007f297
MD5 ccf907e8aa95acb5bd5b2535dfc905e5
SHA1 e6d6ab2e871cfd5cb87ec5c4531ad0feb97afa98
SHA512 13af9f91ab95c3012a64665b4e44635f77b1482f7cb83714419c1cc92f82e9902ad57354ad23302e665c0cbe79a7ec9190ab91c62526a3700eaf1752a5350c02
SSDEEP 6144:hoih1eIQRdlYYlmLUoHZCRcH8vc6xHoor:ynBgCRcH8vc6Joor
TLSH
T1FD243A2AA3D40E07E33E457C9293C609DB77B6975318C5CF0A66C99A0FC77C2BA31616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Routing.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.Abstractions.dll
Size 58KB
SHA256 d866a8ef84c5c8a06ccf684a5809168ca5c0a84f4145349b88c8b54154cfc623
MD5 e31b5ff8d6bd7b44d31b31bbd93e3376
SHA1 e7076af7f796916d05ebf844c58e620a9839e607
SHA512 e104ba0a3906de357f71f07b0216ad00a152e6826845c42e620d255ec2e6752aaa0e29551a08fa26ab80c8d58b118541296532e68144f9c221f2741b07c2f9a6
SSDEEP 768:JonnUOsq5Oo+3cSsAnpt97GnU9I+KgrDjSWrr9zvMKlT:JonUE7a3MiIgbvBzXT
TLSH
T18C436C1297884319C9AD8AB8C296F985F472F6C71723E6CF0588EE5E0E537C1D73123A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Routing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.dll
Size 806KB
SHA256 a6dab3580bb81bf79e81d9615639e06ecc45a666172dbef4ae3d8aaac93653d8
MD5 83822aa80ca33040d4208c2f1a9dca11
SHA1 d6c082fac313cfdec912c6d68604b3dabc4c00f0
SHA512 b921f86c309029587af65c4b014b186ae152ea13bb8877416a650df5f67fc17c714e417b721c67ce0f49cdbb3960317b68db16328938634f97b3d21b18e491cd
SSDEEP 12288:hCvc3empZBYLBe0F6sEFPA+/fX45wdGuqIqZxdSvLpHF1apGe:hCSesBYn6sc/45wdFqIqovNHF1aF
TLSH
T11105582DD7D40A05D67E9B7CC26B4412E9A6B8836371D5CF4509A9F83F87BE2E231321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.HttpSys.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.HttpSys.dll
Size 626KB
SHA256 1372cca6eadb968e31f0c31849ce493626d4d0ace70d60c4ed63ce05504dc534
MD5 6a8beb254cb85d1b50e71fcd61c74c13
SHA1 b35c473f297872f6b6ba3ee9bd2df1f8e6031f99
SHA512 0455a7d29a2947ca62a27bd322f13438bedbcf7995bada82a4e1cc1e16e5b2eb082afd649ccbecc8715c86b70a4c0a0a67f852227e98b614daf7d4a8b30bc4d3
SSDEEP 6144:ZcTzXtgMqpQHKmmdpdXT+94aRO7Ldx2KvhubbWFhHnkzXKa6wFvIX0u+NIFlQvmi:2zdgCqd7H5x2PCkzXKcEjWViUESuxru
TLSH
T11BD47B1EA3D40A12D63F827CC4764633DB71BA86A315DACF644885991F73BC2EA36353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.IIS.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IIS.dll
Size 662KB
SHA256 03fde314cb52e7e5c0f64a8c6d3f179c471634e832117cd72e6d765236f6c960
MD5 f19b270104d2add0f16d4438e125e0b4
SHA1 10b4b4e3ca66353441f07a3b72089b528c15052f
SHA512 fa2c03778bf41ab338e22f939d02c88d6e0710da6d97ef8f13ae4416afe40274ca9c2056c59dd95ea75b162aecc2fc782b8b70d53edd6d2533bda0d31c1d6a08
SSDEEP 12288:M1WyaTlR8O6WitnDCTR7BLa55LFh9Os5NOms:jxTdO+TR7BLiO68P
TLSH
T12AE46C1AA3D80A95C62F8278C1734422DBF7A8826770DACF151CE5A91FA3FC1E535763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.IISIntegration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IISIntegration.dll
Size 50KB
SHA256 70210cfa6bcefee13625eb29e36166677013bfaa47a0d972c98fdbfd475edfd2
MD5 9e040c564ef4d8606e46907fb481af4c
SHA1 c0cafa24dc2e847900930b2e27a0b2e15cc9c154
SHA512 aeb2c9a21e1faa337d097e559b2da8c970f9ad225e24b97dda8513b7c8f19f3c0259d1bb5932ddee05ad743f19a36ef2fea8a569412221379dfb5da9bb2715d7
SSDEEP 768:Gws2zpNwcxp+cQLgvD7pP5zx9fPDjhs9zv:GSzpNwcxAZLQ5THqzv
TLSH
T1EC335A58A398420BDFB69678D6E3C985EA34F6961722FADF18D4E88D0E533C4D730139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Core.dll
Size 2.2MB
SHA256 9188c06cfdbf7c921ade4743e246cfe149ddd9ec24b35e0b4eabcbd054b77fbf
MD5 836260a6d16408a8c3c8e6122418b394
SHA1 50cfdd0b8fa86d9a49e8f71585bac8a41371fbe5
SHA512 b3ea2e82a9a18f843352b36a7bedaefa18b105ebd4e76bd5fbd2edbec2cffe836e49f4e00d18e36eff93ab4e7df5e248f37b8c00d03c82ef4f032e1dbb5168f5
SSDEEP 24576:Bviqf1IpkxWPOLpCKU5WVWyBCiZ6qs5TUvCcXNqxoW2X8FtetsAi9pFXoU:EAuk6KuyBCiAqTvCD3FHJ9YU
TLSH
T195B56A15F3E89B06EA6FC5B98137461AE6B2B4424761D7CF11188A9C3F537C1DB3232A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll
Size 138KB
SHA256 6ae3fe1ffa0af912f0a414eacda9600b9487934c21811397896736402e448767
MD5 74bc693b93fa5611b0e2528c8544c98f
SHA1 264a124068747b4fb0209924e5ca733ff7e8fdde
SHA512 bd615efac8d0d695a25c541388d634a9cbd8df8bcc5d4bad1cdcdcd7c15eae5c7143dc362dff3a3da488de4df9488147c174c0e8b0bc8e3fd2d5f2da5f275c2c
SSDEEP 1536:HqO6BdyT7WWQmbr+Xim664rCi0mHXeVXG9kCYZXW0/0ocuD3ajHP8z4/N:HqO636r+SO+XGG9kCO0oXDM0MF
TLSH
T10ED37D5573AC4312C76F867895738952AB77EAA30711DBCF028C999D1DA37C0F1322AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll
Size 234KB
SHA256 d566d0beef8432427832f8c4ef0b8a413866a0a920c9939ef2703dc2d755c242
MD5 374fddf4ddf0d3e780b57daf2779fa2f
SHA1 6ac4671872386819b8c211a3454b37490dfc1fc5
SHA512 7dce3fbb172bc3e9be04a584cb260e2d563e767658af52eb1db5320e07f6d1a35c61b1b68c2ee1df5a0b6b20b51cb9ec82dee4851bbdfea52ffac73a71ad14db
SSDEEP 3072:3E8nf257iwJ0dpqFS8FWeAJnKcgZoOzxWke7BiThY/9K25ZsIF/Vd9Td:Ub+pqFS8FmtKkOz6iTZ25ZLT9Z
TLSH
T16C345BD263D80E03F67FD5788673DA62AB72E9524700D3CF176885991E93BC09E3127A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll
Size 162KB
SHA256 4cf08ca4f5f57435c230e519d2b0254547018da22f603d3d913f35a0332e5cc8
MD5 95f8f7ce271689e09230e24404c88bd8
SHA1 5653d8fdc0c91fbfcf220d109c212c3fe544c8ee
SHA512 e76ac03e3941b88ba6a17290cebcd2527a877d9be4d37d2270032676df1c977e077232314ed7ba695c1613f14dc34147b1dec8203f1c9818c33f54f82ffa8acb
SSDEEP 3072:kgqSPBVhj9QNKczn+tfMsI20o4r8CVRbjDVpbojabkD:bN9+KcD+tfMsI9jNRyO0
TLSH
T181F36B51539C8303D76F6A7C80635943EA73EB535790D9CB4188D79C2EEB7C2B23229A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.dll
Size 34KB
SHA256 0d37fe0903032308a7171ca5bbd34d393c296b245490a68df8dfc2a812829c67
MD5 d33965906438c0f6d718a0f9d95c83e4
SHA1 fd3fdc728362d19f5ba4f1d35eb7b455c94bfa04
SHA512 7c5618312055c73c0c87a8b2b584806db31a709fd947a28295dc43fdffdad9f4f8c11c0a7f2077b8c138f1bd860c74d09f7ea620c3a34606d81a3f7cfaeaa45e
SSDEEP 384:eWwDs8Wbt158FI0VjaAcseGC3+GD1Qkyn/hljHRN77EW9R9z1CR5g:9Vt158FI0VjaAcsouBDjX/9z9
TLSH
T1E2F25C8AC7544216ECAB2970D5ABDF46BD38E3C35301A6DF0656EA892C633C5DB3066C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Session.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Session.dll
Size 90KB
SHA256 ec73cc7d299bf448d9f43c8306eeca5c7dec6ed2a948e4d3a923bb5a9b5d7b82
MD5 2786d009f5ba38695a7d0755a0d4dbc8
SHA1 695791f88d4790914ebb2956c74ac91c69c189ba
SHA512 c12f2777dd45c84210225b75272dba3a71427ce90ad4c73f178099d874ca1bb876e702f75becaef167f9f494d3f8db8c5fc0695a8ca75597e43ffb7a49910abf
SSDEEP 1536:t0fh3CCmiDeK3nbzeknHMU35/Jj/2mkstDfRiTZfsO6zgY:t0f8CmiDeK3GksU/6mkst7AFspR
TLSH
T11C937D46B3E44B23C67E8A78C9328D52EB32F6432B21D5EF0995849D1E637C5CB7211B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Common.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Common.dll
Size 86KB
SHA256 496c80f09440e93d639e7542b07304d6d8a79c1022f7734f2a5c7a283f5880a4
MD5 7312662fe85726a83639dfe6638a45d2
SHA1 c9d7a3b9b7b94c70d413a3cb525e4f3ca808ad20
SHA512 ad2a03daff66b1e864206027a4fc385ea831a7e5bf0f93382c38a379b8275fea39dc2fad429f253916d1465750afebc5dd76fa6e607e29e48fbb6fc0b1422a85
SSDEEP 1536:hhRIVoNIs2rxanDtL7+7lEgMEL68x+OBDUBmO0M317cN2ikzc:hD0+UrMDt7+7KqL68YowBBr17oDkw
TLSH
T16E837EA6F3844303EA2DD67DC6B3AC62E630F2C35392D2CF1549A68D1F673C58531A66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Core.dll
Size 494KB
SHA256 a3a87df1be7c2acaa1a7fa8ac3b5e712df88a615194e3df12eb0c2c706f2b16f
MD5 fe8b6d98e44d5393bbb30288514f8396
SHA1 f176d85f42a2ce76584e40f99f7002dc078be4e3
SHA512 994a00d6000308011b534a6714aa7f24770660e998177874488a1f066f0bb36286f2b789c77e68afc87d34f1eac311ccb05aaee721ab03035981a2da02ac19f1
SSDEEP 6144:J09ullQtzGM5UfxHJ4BojC2H+QPrKYGl7B2qLKwiEwkq8x0VE:J09ull8X5UfxHW6u2H2vVdVp
TLSH
T196B46C11A3E60B16D33BE6BD89636002DBF3B6435796D2CFE848ED981E477C09572326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Protocols.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Protocols.Json.dll
Size 82KB
SHA256 d2cdcc997376f767d4c19dbf0f54e1d54b3eef7c912ce0c836e7f75c5605329d
MD5 fadd4cc81f8a58d60ae38ef0f79d874c
SHA1 caf63398aa348deb1c1e39186d6dcc157a9ee59f
SHA512 9bcd0ddd4897ca0dbfc15ae5cbaa36f14096966b69e6afb00fba939a438f2613cd28dff0d07e882692715044e7b4e39a2f8e4e908c3179fa033d40b62b850994
SSDEEP 1536:AF4bGaTcNQ2VEsGr/czPxxF+2JsOpXq4zgU:AF4bGYcNQmEsGbcF+os54L
TLSH
T1F58339A8B3D44A03F62CD97DC2B6A961D530F75653A0E6CF1596C58D2EF33C08A7122B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.dll
Size 38KB
SHA256 d3b91945e09e015d0ffd4cc2c9d3fe87b225a3ccc167c4497046d548a9ecb7db
MD5 7f07a1c82eced27e0ed6917243d8b500
SHA1 1279b182d586b992c587a15f76faf62cecc75a55
SHA512 e5da1a6f5907fe701d563c33792b3a4e7a44540dd4c6da8f414253c11163d652a4ecb2db83d600eb75b4ec0a67f2b484da56c3c56e30f549842fe51bd19ecd35
SSDEEP 384:LWr8jhWNm/TTxct7r7T0CP5XvOPDGiHXoZj/hljHRN7DkER9zgB+:b/TtcJHEL3kDjAo9zQ+
TLSH
T14B034DA69A580311E9B75930C9B69E42BD39EBC31740BABF04E6D2880D63BC1CE7153D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.StaticFiles.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.StaticFiles.dll
Size 162KB
SHA256 d59a85d8321fe146c1643869da4389cb2e6f123cc93422e948cfc91e80134979
MD5 4b2a7b82f2794d65d488bc9598713ed3
SHA1 dd5e96b6c0454cf7ecee3f5bc2a115c769fa3d24
SHA512 ab432e595ef708b25955b9e71139a816e0a718c88a9bf83968315c994fd6af6de5fed7b28860f2e506e729d4be8e3107b6bc711dcad66235e66917be4a063049
SSDEEP 3072:0dTK04AosZWEL1IdFPgUIExu1qxhkpZC9MgN8K+Qo3D:uQsZ5L1IXgU7kFKN85
TLSH
T196F3F80AF3D54509F27B9B7C96632403AABBB8869310D6CF09444A8E1FD3788B571F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.WebSockets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.WebSockets.dll
Size 74KB
SHA256 6f6ca3859d4d7e4d6c50cc889b2fc6e9db2effd171ee9b31c136511a2e1e4701
MD5 f3252371a71b841d00888e248c225a76
SHA1 0328c40ec8a83f9728bda4ed731e0c450aee4b66
SHA512 4ff24f135674190c188fce7af04a7f6acc34b084420b25ec769f30b5635300e53ab72b52d4d2344ea447a1b9b3e0cdfd9bcc5fab760edbd0a8312326d6bbf7c8
SSDEEP 768:EIaPmKmqY6tIgSJS1EKU/EYB8IB+GNrMltej1VYfkEE+3sXF0Dj4Y79z83:EIaPmK/zlmKUsYBF611WVmlRz83
TLSH
T139735C0153A4A312EE2EA574E563994BF670F38B2B21EADF1955984F2D937C0C332367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.WebUtilities.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.WebUtilities.dll
Size 250KB
SHA256 f5e9141b95e27981bbd9af122d77b61ed13945e9f746cafbdc3411fc20c0a23d
MD5 c8885e28698635dfabee58c5fb1374c0
SHA1 e15aa9078166fd4e8fa1c0557c841c6e744048a2
SHA512 e344c344a0776ee1019d8d873f346604f0daf4b194cab7aa6194a24ae02a63e4cd3d2529f957f4915245e83ffb4edeeae124846c882d251d894b54829c32ac09
SSDEEP 3072:M6nAFHbyBL8jD+zRgGush8ThFicSDaq1JmNGeQHrUv9zmuUtrDbH0YoL2vCKp+b8:WHQ6Nsh85Ocwt/H/mrOB
TLSH
T1E6444B16ABC40E03EB5ED17C8167E902E7B5A1564727EBCB02ACA9D92E13FC5DC36113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.dll
Size 110KB
SHA256 2e5218c4e8345dd2277259673d1195d8ff48505e5095fb72d5dcf0c05b71925d
MD5 aef3261e93e3f0d4c8c486d4c432a4df
SHA1 a796325ebf7300c6d129b151e770e09d54f4b810
SHA512 e46324ad4ca49dddfae9748c83150488f924b517748f05fdf8862f3fb95ff371932806ffb761f18d1c7b584d53e098f29e9adba0f1ed6223c9a65f8de7ed3faf
SSDEEP 1536:CPJbfU6208H/oSBTK1pGEuFnqd49hFNlkf4XSp4OG7MDAzx:CxzU6MJtqGEydYGt48d
TLSH
T117B3276AB3C40601C77A52B886679D09F833F58B43D0E4EF1898D5AC0FD77C2A6B1257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Caching.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Abstractions.dll
Size 58KB
SHA256 921c8f948c7e32ca9b9a19c21d3d1d97353a84ecfc17eda5c54cc19be3736aba
MD5 4b0d7fe3ff1db06bf0f0d121db051c71
SHA1 164d1074292f1817c71f7ae3193a249c6bd817af
SHA512 d4a6c2de3a3bc1cd49a901eefe0ccff9b44bab70826c3f698e728a92dbbb55c1eedf8f0d5dd405a309536cfb215b01418047d0c15ba65e2969d4fcbe9aa1963a
SSDEEP 768:KHO5xRbvl54v2ERX5V/bgU0eZKIMtg5TAptEnPN9qcP6Dja/9zIJ:KHUxRbN+hJVDgU0eZKdgewPNwkzIJ
TLSH
T1A6436C4D83E88313DDBAA57DEA7285A1EA76E6C12712C5DF460CEEC90C437C0D63666C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Caching.Memory.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Memory.dll
Size 94KB
SHA256 d52c994cdaa4455d89e30d3e4253004a1cefc620a6d99cb02073194fe6606167
MD5 8b96947b66bb214761a5aab3e711e51b
SHA1 86371a7d9061c4a9447f82e1ead6ed4dd4f43a05
SHA512 5f1513b19f97677663d4a3ce278f111ff9db25a5aa9565da54861557634209eefa35958600e0373bf38cebf40074e7b49ceac2e6e41828dfd70c03c3067a42ae
SSDEEP 1536:pPwJXwJQR0rK+6gGnEwJBDZmBb/+rVA2tHglLSDQig1zG:pIJlR0p1eEOBDK+ruQASsdq
TLSH
T11C93491473984352DABA82BDC6BB9AC9D6B4F1432B11D7DF0848F54E1EC37C1CA76226
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Abstractions.dll
Size 46KB
SHA256 dd425f67b92ef0b79cc3ee6c40cd9eb0b1c5058d147c9de09ea57b8c8a786c73
MD5 e6289134066803f28cea65244547e429
SHA1 07219daff95958cb45361644ed641679665c8cd3
SHA512 e6b220a21b3fd3d1a52576d68596fe3a1bf52e4b0143972f2c44ca88775e4ad5ca57655cc1ed43a079ffedb1211be436f8c560002f652e72a235d77f2e6ed572
SSDEEP 384:3WsfNWjnpgMd/4Oh8tpdip1vv7kVm+6mD50kv96TG/FwzzRjz6qMvckxuAQF6sc+:92npNZj66V7kUeDSkXZpzJMDjmz9zBI
TLSH
T147236B75439C4313EBBB0AB6D1F2CD41AE76E6A3270195EF568DA60D0CA37C09B72218
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Binder.dll
Size 86KB
SHA256 4a70a880077cc21c3b15276d2613c92099c533bf6c544aca009b290739f8062e
MD5 f64d262379ac546567aa42fd1e00c7d5
SHA1 c6e56be0965fb667b622192b9615b873f7078c63
SHA512 6eae61f968d6a963c33e94a7e6242ed5d1d7b98a40404a2b56b17976fc8a6bdcdeca8179da80a602fcf3fecfa3e7b54fd4e3e1a1e753af2d5fd8a81a0cb48a1a
SSDEEP 1536:wMCdMbxxeTYMu8Etr7VJ6fIQG03rY34I4zo:BCqxMLEjJ6gQnE4c
TLSH
T169837C1673D44701E67A4AB889739A4ADAB1F5421322D3CF0A6DC90D0EB37C4A7737A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.CommandLine.dll
Size 46KB
SHA256 d2bc393e9dc2da345b86243124b9be3ace12fcb6fef2d4274f39d86bfad79901
MD5 1bdfef1f5fd1c5ee1b6f1396aaee32d3
SHA1 6f034ca716c5a391938ed6807ef117286699da31
SHA512 581740e605fd20912a2960a32dcfb6e0a1605e15cf15ff06347f5ad84c100225e19d68893e542a22b14c6ee079ad7f8c47abd85a246c47ec1070f1ca51f9e4b6
SSDEEP 384:vW9/nWGGbBuUcsrKgk8+5zaW6swnfiahCxwXaHsRJ0eB9C/hljHRN75tNcFAUyRG:iSBQglCzP6s+6K04IcGDjRcFAU+9zVi
TLSH
T13F234B6663BC4313FAB707B495B2D951AE34F3926B218ADF044EB2081F933C19B71729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 38KB
SHA256 757827024153723ff4687c18e7d02157eb36eed57759c436ee11d81294f039fb
MD5 90834d45f115e6bc6fae94699d46744a
SHA1 ca14ddb50ec73369ddc554374942ad7834f23133
SHA512 f2273a760f80c40cff2840b1438da50d53861561937771864b0983d94fbaa6d6ac404d48b032e3389c6131008d031c5b7ba5fdbdef39ada5d54f34613f2bc9a5
SSDEEP 384:CyWUPeWx18m6xos0pFW+K0ihWQSMchn8/hljHRN7O9fPOxFR9z2ecP5AM:H38m6xos0GPUQbDjePO59zO51
TLSH
T1F5035B55D7DC4602F6B72A34D6F6D612AC79F6831A115ABF012EA10E0D63780CB7173E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 50KB
SHA256 0d46c5710a1a2f3876ed0afce219f2291bd0b1b2b9ee08469524748815a18d7b
MD5 dadd176fd1563ff94039be249c665012
SHA1 4b66406aee600784b69ce5e3ee0d68e4ce06eaec
SHA512 ac2a93228a685dc9fa6af7c2be0352c65d9072e9d64f9278810685c6a24d0269e698c2f1dc13daac0c8d25b242f7cb0b55795e16762fea22aa358867d578eda6
SSDEEP 768:zsjxB6hVvXd4GVuCVCQ/qvyDjo6zs9zRnlL:wzmVvXdWQ/qYoPztl
TLSH
T170337D1A93A85303C8BB5A77EAB6D986DAF1F1831751D5CF488CE10C0EA73C0EB71569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Ini.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Ini.dll
Size 46KB
SHA256 ae41f64acb09ded7a94419ea1985844aac8481b01ad869caf25a3d0698c9d9f7
MD5 b572a5a6490484432ee373df4260757c
SHA1 427ed4d6eccdb255f7df62dd58940d360aa703fd
SHA512 910c93d3a216ab6d08927af699bfb243de2cf88fca45a4200b15e5f670ed40f650b4b2d102d631b94780a4934b8b928ba4da5274e5fa3de979b92253c000d864
SSDEEP 384:MWFvYWdib6Lb9huO4D9tS+Wa/rxFBrrSB8TDDvBoLLqnNp+v63iW1PDHRN77A4Mo:PX5Rhtl+tD9Hn1EqZSakXgE9zCeiz
TLSH
T191236C6D4B9C4203FBBA4AB5A9F6DA01DD35F68317609ADF445EE20C1ED33C09A7122D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Json.dll
Size 50KB
SHA256 67ffaf5230803dfeb9e19fe91cee5b23fc4cf64b55ed13f6e0f8f91a861da189
MD5 c6112a438e2ee57580281ba10298535e
SHA1 a08984ec1eafb43558ed94505d87170d85c8dcaa
SHA512 33820e255aa67f0fc8e9a9d292e1d712dbdd2ea63398f0a07cdfb1c2b9f504ac88c3c825cc7eb7211cbf01a116ad9d24b25aba6a5152432c50ed90797dbf7eb4
SSDEEP 768:+UxNahzUKBFi7kgExaFMj8DjD2s9zTj99:+9dBFJUFiuikz3
TLSH
T1ED335B55839C4312DABF8A7088BBDD4AE9F4F6831711D6CF099DD10D1EA73C88B72299
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.KeyPerFile.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.KeyPerFile.dll
Size 42KB
SHA256 baec41a304b0d04b1def9b048eed395ef4d8f04206457286059de9dbe3effbb9
MD5 c765e05e5963cefe8fd6cbf40798b803
SHA1 8d7f3f4110f5021df2911a356518ac15c7e2e207
SHA512 588dedb07d3739d7118c2595765db246d9bc435401e435ce23067ba1e9c083fad5dae00aedb82f14e139e0448c1b4b3891d9a776ed65a9e3eb1de3943c8a52d6
SSDEEP 384:9HWOk75WqBJ/nMuGMVJ7VZnFD/mkbiio1ENoeGWX/KPhmK+PDHRN7/zxTifX7R9M:9QdrfOMhDukI+t/v7MF9zAuI0jQ
TLSH
T1C9136D659FA84307CABA9A30C6B6CE05ED38E9C31710DAEF456DB14D6D5B3C0D63027A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 46KB
SHA256 686718e2ed043f6ff8cd0a6c8e5afe06245f2239c167cc5767eb9a8072ad0f51
MD5 6fa93ce26aae1336f9b5d156179ec5c4
SHA1 68aced8fc79e7235eccdc35ac002776e5f04c4c3
SHA512 0808236792f0cccce680a836fe36a9616eeb3a2658d7c0eef12dc6b7476cfed07a3bcd780bfcf3b63b6e2fff1cdce2cd6debee417f404f89af971a5f311d15f3
SSDEEP 384:KW9yVCWLymzRuyE1LAP5dD/NS9IE0EjjSWGfzRxL1iF0gzUFJ3i1/hljHRN7LER+:GaYR4APDJ4JZGlxcmFReDjLo9zE
TLSH
T12E236D99A3FC0302F77B4A35D976E951DD34FAA26B01BAEF0059E10D0E5B7C0DA71628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Xml.dll
Size 62KB
SHA256 f76d9abb1f0b11b4f0036a3e6cdc4b02a74cfaca0bd06f45c330472e8f4607b9
MD5 3013e675f7b107ad2324e21dcadfb741
SHA1 89199e274f9bdee25c6a3a9dee3fd966c8d4ece4
SHA512 e806a93350860bfa591806fab00a873df4e2aabfcce7c0b6878c2a00e41e1769bbf3555992890b9457bcc4104d33dbdc48c5f6dd27cf95d47438f886ab28fe0f
SSDEEP 768:FXKBBwGaotme2ok1krR/O9MOfEnnHCTM+o/ULvmv83esrE1N9zwy:FKa5e2ok1kt/O9M+M+oioskvzZ
TLSH
T1CC535A7597E80702EA7A477DD6B7A80AE9F5F1832321C6CF4A5DD94C0E933C08B31629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.dll
Size 90KB
SHA256 5f88bca3f013fd8466ca69126565de4d57d172b88a8a07f21469178a19ddae14
MD5 c215eb66cdd253523c36bb65f6634f9d
SHA1 1703688f7a761e4e9a3731cda9c946134eed5971
SHA512 4e7dbf76633ac550ed7a43a7c885d62fafacd77085cd0fdce4195410b982747c95c0cb697d893c8828ddc1c05cecb0a540b95e96c3e8adfb41245d02464a02c4
SSDEEP 1536:2SDgWOt+j0v5RQ97rVcwXk/AX2+uptgUJOPC94RRz8g9:2SsWOcYRRQ97ZrRX2Hg6OFL9
TLSH
T1E1934C2973845E12C6F946B9D5A2DC09EE71F28B6302D1DF891DE54D1F973C09AF202E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 138KB
SHA256 497ab16afb3101f272200c4b11725215d2806aa12990ede9b41cdc6007c77a3c
MD5 8c0c291a61ee78a6310297b93c3046f3
SHA1 3b0293294f0a38420d6ed9071f8f5d3d9b568655
SHA512 4fd0026aa57f505841e022bda6581e16b4c7d677ab3e2950a9543dd4857c49b70398a9f94f8b868cbc35d64510807aab8b945f56e190a5e5751e3c248a9cbf07
SSDEEP 3072:v2zh1ih1kqlY9seQwDqTZ6dG/4UUnirpSlc:U1ih1kqlY9GwM6d6tpKc
TLSH
T19AD34A2473D4032AC66E427851330F61E8B3B8A71711D3CB162AC55A1F6BFC9B5B2DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.DependencyInjection.dll
Size 214KB
SHA256 72625b4397218a755a2d7c7bb664e75d4ccdbdb5d6b149bf77c67a234e3aa816
MD5 4d76b60b48695d683f1ecad0a7670c2c
SHA1 b8a5a5a07dd4db3c952f943bb5cb53575449a24a
SHA512 da65597012a3e95789fc60ae201a5698cea032fe11be2a0da0ac1550a7a7231d0acd7f3a5b6edbbf66d4ff34c2179fb0942bb8dc8b73050dda53afa991b4c6ea
SSDEEP 3072:2KB8zIROKMdx7iCT0Iq8hn4jEPgFxixSgeg4gDN3vJtvZdGi2JQxiNb0qZ1n:jB8EUdxmJIDhhPJjR/VElyqZ9
TLSH
T18D24393BA3980E43E67A4278B753C541EBF3D4461326D2CB4AA8D9481F83BC1BE76175
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 46KB
SHA256 1203c24a5301805962a892cf3ad7acc275e285da455d6f9b57c5b008bfe93944
MD5 5f8540655c4229e0121d1d5c47a3d018
SHA1 04cd8406b622ccbf2733ff047ef03059b46e0946
SHA512 2673b2cad08b88f18aa6cf52af68f6b219441afd1187f3e4025179f3f4adbbb163542d5203c82454bfdeb2e6ec2b2d4574d4fbe822c488902982865876f7b1ac
SSDEEP 384:mWOXURWbacvA41OPsnElB7TGPdQbtlrSuEsdS+YlOjqm6qSfRJBXn8I/hljHRN7Y:HIN1QsA7qF2hHNWZpDj6Ro9zq
TLSH
T1FB237C61E7BC4326DBBA0E38A5F1C5065B36D2D39B01E7DF0988864C1FA37C0D971A69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll
Size 42KB
SHA256 df6f396429ed4b30483a1f4ff13c1614ff09ae61deb19fa70dbab552232523f1
MD5 5c173b052f6c4eceb8d0dd34cdb81a14
SHA1 d06f36520da7c6beb9add5769562183936421ec7
SHA512 7c7686a5e3cfba2f68a7219f27154ca9720a28a007fca4d72d3309a50e7147d413872755cc6cbe76d220aab9366598d50a9e5b6f16119f2e5110acf7e04d14a6
SSDEEP 768:KJbbvZHpUkPSwUfhqUEnokOkaVGU7WCprcDj22s9zTxOvS:KJbbvZHpUkPSwUfhiwJrO/kzdOvS
TLSH
T15C135C7983589317DABF0A74C26BCA432D39B7E2570395DF10D8E5182DD3BC5AA32638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.HealthChecks.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.dll
Size 110KB
SHA256 5dcd69353c633edbc6db09a493607e7ee5443b82468fbe69c09b9bd7a859d3f3
MD5 01bd8b05417e74e181a5a9a3015c1875
SHA1 c7a08b95f147485028ebf457ffcc9067db6abd1a
SHA512 7a5a1311d86785a918875af55ce6571838399fa758714541757c9a0220b18c16929eaaf54fc981c36f96d6de0dfb59253c9945d9a0d5e23554d2bf3c5bb78fe4
SSDEEP 3072:pYLJ+5VZ1NhWce1V5KPqGW8TzZLP0V4btOpl86l+rkR3P1zrFmN1Et+MirxhZ04N:t0V5K5/Lnr06oHV75ApV
TLSH
T137B34B04B3C84316F67E6B789532AC52DEB3F6631762D1CF15D880990C93BDAAA31277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.dll
Size 70KB
SHA256 bea4668be7ae9a4b723b967f210729192788cbde368e43b8998b532819d7fe5f
MD5 40c5b55af9a8b1e4372b06bc1270b404
SHA1 b82c8ee1b7927c0552ea69af819a42e4173bbf0b
SHA512 8f7604e06211a596ff8f854de01c784ad755357bdf9cd988d158b6bbf6594e6e0a301a19b59df6b4c873220baa36c5b30706ae08c137ab60037e9853efcdd081
SSDEEP 768:64dpFs1zB+2S51QCOH+WNtrbFgK3/uTYBmtv9KUE4O7N9ztd:H3FKoGC+rm0X+9Kp4yvztd
TLSH
T1E7634B09A3980707CA758EB89263AD46F6B2F9D37310D5DF498C8A8D1DD73C48B3526A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Features.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Features.dll
Size 46KB
SHA256 27f882c00336e72d9daa4771b2c6e0b4b1207df9b45998d6326446aacf3e0154
MD5 4833ea5af8a87ec861abf686af1e38b0
SHA1 1e99d6dec8d2a372dbb0b53a5281706c5aa8a2a7
SHA512 946c524c63f32213950c19deb31baf641dcfd896849b3b3a55c8cec0c38411410c7d01e684c5dc2bae1a49d62290e00f7d91366a186ce901365e753303833709
SSDEEP 384:bMWe5ieWhCim0xDERhcpoOZkmrDiN+WVGMvfF7z2jzJpRGF3GOXWMSk2yzJLj6/x:b5hJDAQPkADiZvBGM/JH6DjiNs9zaQ
TLSH
T106235A1967B84307CBFB5A74A4A2C646AF35F7D39B00D5DF044CE5480C937C5AA3636A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 38KB
SHA256 3c3fd468e3dc3f946d0d3d01a3501b7cbc5b8c551c3e4a9e56a91ab6131092f9
MD5 5df51b1cf024c300e14a2b3fee802976
SHA1 6224a0d916b52878678243a0ffebbd30d74cb9a6
SHA512 d47a45e84a024b33b10fd24ba15ea7002a6d192a421f5d5902120195165bdaed87fe3d1ae95643027c40e5570b525dd27cdb04e14e134e2ee662c230ac6cf4f7
SSDEEP 384:eWs/hWjMjmf2xfv2So+MVV1i1w/hljHRN7u9fPOxFR9z2exZ:aFyfCfvlGEuDj+PO59zl
TLSH
T156037D659BA84312ECBA0E709DB6DA4A2E3DD3D74B01ADDF0449E1051EF3BC4DA31674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Composite.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Composite.dll
Size 34KB
SHA256 3e46b74393eabcd7330857eb6ede15d0f102382b682993b7f22f0c28fb859c85
MD5 440431fa49015ca2701412e5556fa2ef
SHA1 bb58ec92e89f6dcd4ac41f6d60b451e0deb2ab41
SHA512 df0bc59ca2aa445b1016d0ea7dfac94f2acbff5e356c251beec51bd73bc2cbacab8ff144ada209e8e96ae6f34364438a0ead80adcaa0012d23229fb8d6113773
SSDEEP 384:6TW7/nWq4okNpyeeOhRUkgrIMFVUTUyUB/hljHRN7BBuO9R9zOp1:6kR4zpyfOLO5oTxUBDj59zc
TLSH
T132F24B5186788607EDAB1A7097A3DC86693DD3D21E0096AF1988F6481CD37CACF72738
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Embedded.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Embedded.dll
Size 74KB
SHA256 f4d17ec721afa840865ddc63ac63b63acfe3eca0f6bb8d841da964e265d1412a
MD5 229eaa1f5e7295d2eba91b6ae1502ad3
SHA1 0c805c22c9439b58cbb7e64e2bc43088c5b91523
SHA512 5b1a1799634c69bf1ab6ead33101713a94612f2793037eb07d0ea2d422f02172a90c1d395930d51a443cf252f7a63dfc966a3925f572cad13194a546e20be6c1
SSDEEP 1536:R5rg34904sM10jBKiGYLpEispPtsJ8kszK:R5rM+0U10jB5upPts+Fu
TLSH
T1EC734B0197EC9301C67BDA3D82728A06D534F7932720D6DF0A88F98D1EDBBE09A31675
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Physical.dll
Size 90KB
SHA256 ae87ed07e87fe056b5399237671552248558808444740cb3d447ee5543e8c5e5
MD5 9c517b609f9134621980cda7101d4b7c
SHA1 3e3e7326d0173bf8dce74833ccf0a4a48c59b99f
SHA512 87d3596bc0a7b402019d4b6eb9515603e355ffa92034f2c64fd5480c8055eaca1e69b7de08fa5527cf2c6de6dc5b500f6649b46656e967d8e8f87010c0277d38
SSDEEP 1536:zdexrR5FveH/Ijw4rF9dE8/WWNcnuHeIpdtUxgf7YThpzqOM:zUxtb4cN9PBiye8zYFpnM
TLSH
T138936D0573DE4209CBAAC6B885738D63D231F1832B12D7DF44B9AB8D2F833D59672169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileSystemGlobbing.dll
Size 98KB
SHA256 0057fa70b26c7d917ee9f7aaa51ce7fc119a65db7e4d16dfa9e92d037ac48305
MD5 18c1eeeaba57c476e1d26da6f4a218c9
SHA1 0e0a44f4aa6b75c52b4531d71c66d2d03074344d
SHA512 6ccf734cdc75436dfdcf79d4d811245ec92193687c36127b32aeb6f25844b69b0a1c62c03adda4f8a9e56531d4bbbf8ec1d431d910cf204a558fb21e19a351ac
SSDEEP 3072:PXffOBDgvPQ3QRVKbTE3LKuP04c+Y4dJQKA:/ffOBDCPjKSdJ1A
TLSH
T188A35B69B78C4201D6B982BEF6678881D630F1936752E3DF094CDACD3ED3BC19670626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Hosting.Abstractions.dll
Size 78KB
SHA256 da29c0cdda014fb777d8eae7fcfeb8d2cd6bf113efb9e3b245380f801adcb5ea
MD5 ab7461b1a98700c4c55afde6049be4a7
SHA1 647e991150ad676322c600584f92c1d657e7c15c
SHA512 a91de155d73597a32da9bfccc0c055f625110a8f78d554522237ea53a4d5f7f95ba1b272b2dd01f4e23e255859e6ec9c14473a841d8db271f284597fd0e9c4c3
SSDEEP 1536:lGu+u5hPGqU7GjPb6axWFvTbQeZ9lRkcz8:l95hPmmb6ax4nZLA
TLSH
T1E473F84163F84215FAFB3F34A9FA85168A35FD86AA35E69F054852CD0DB2BC08970737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Hosting.dll
Size 150KB
SHA256 0c838ba3467ce460c7aa1de8fbe33a8567fdfa9cf79f2fe42cf1db18ab8374e5
MD5 86c1ba82bbf4430affa21904db6da1bf
SHA1 789f6fa9458459db696e51049e3677937fff822e
SHA512 1433c808cf51fe95ee1027dec6b3f77808521b367bd70506677b5fe2a3c08682128a3c935df05b213a5a5b70da81f016c44a4ea2b47c613b272313ca92a47c26
SSDEEP 3072:dLClVXW7VizAfxcP2o1bbPED1Gi2kFExMI:VkjkmOo1El2ZZ
TLSH
T1F7E3382293D8070ADB6B91BCE5639953D633E58B1B01E5CB094CF55C2EDBFC1B632226
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Http.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Http.dll
Size 186KB
SHA256 2567cafac3050e6ec6d2d839f57d9498743c9c58fffc8e5663789ce858d59390
MD5 1979c147cbcf65c20f4c1a6cc181ae23
SHA1 03992bbcfb55ddb91692500c2d0e88047a8e45b5
SHA512 24c4c723d0da8d99c889c55f9f194d113219e0039ffb72d95ba22308a5e8cdc4683227def73946644024d8a5b077b4bd5d2e0856947ba606832f2234e6be6d89
SSDEEP 3072:4GkF+FFpckE5EOyf2tWhmPdvThfPX3YpyEfgoZH2YVOLHJk9DX:sF+FzjE5PTVX+PWYVO9kt
TLSH
T19F144B2A939C0507EF7F427DE1338591DBB3A8160721E1CF4999A9880F977C1BD326B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Identity.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Identity.Core.dll
Size 438KB
SHA256 a2cb2b4337a14690f950c872d7880b2bb2fe11ffc07bba433613456dbe4b0e05
MD5 5c8c662e032e39c0a957ef545f8d28cf
SHA1 db25f3fd736abfbf99b0329de56fd9b132ab571f
SHA512 903ee5ba35839d1c6f8c5aa697bb8038db75fb3b1d44eeeef03715d2666b0c3a37c6af3f7221caf72b7544a339cfff9fef1498e313dc30b97cf4365ea7d0b497
SSDEEP 6144:z8QyuPNLEqRKwJUUKFrJxWGOfI54vTKb0hFjbeny:YuPNvRKwZKrmO54vBhdmy
TLSH
T1F1945B47A3D88305EF3F957AD1628410E6F296829BF1A7CFC048DE987E8B7C1987511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Identity.Stores.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Identity.Stores.dll
Size 86KB
SHA256 e50d6f9a5a5f469961681d3181093eb5fb520f86a7b3f0bfda2b201b8ae21289
MD5 f856a813265b6e252fde9398dc8ae704
SHA1 ad4adfa888eeaa618a6abedab345596f787364c6
SHA512 eacae1228f9fe60c3ecd6531d6db9a3733a6428982d652f8f39b2097176ec929cea3c7b44db4115ac99659001706c854eeef2974469c74c1433319df4f6dbbcb
SSDEEP 1536:IrgEPrdLkO4EFT52lpdxWn9UmgDUL1ZvQ1uy7E2MSlVrmEGICBfyRz8v:Ir3rtIEn2lpdxWn9UmgDUXv4lMSl1pGF
TLSH
T189834B41F3888911C5BA867C65278901E4F2F1C6671182FF65ECAD8D2DA33E97AF05B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Localization.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.Abstractions.dll
Size 34KB
SHA256 fb4aa1bb40e64b8cbf9162809e1f9689eb35b28699d6112ae6b96306e16593f5
MD5 adb357dc1bed8d590e33f4dc56698ca4
SHA1 2ede93b5312bfc51e5e775c2719e056a727c2b98
SHA512 71321607d535ef885077a5c9db24958b3c32dcc24972ddfb0516dd4dba0624dc74b2e59d66f6fc6e173a1aacb2bda1223560ad2302303b6fcffd578625ee7a4b
SSDEEP 384:+KsuW967jJD8WgjEHOCKwU6G1V4c2tO/hljHRN7pfPdlKR9zVrrx:+KssPJDqOO/qEigDjpfls9ztx
TLSH
T1ACF25A56DB68435AE8BF4E30DAA6CE423D39A7C7570156EF084CE4490D633C49B70B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.dll
Size 58KB
SHA256 4e4b0d4578c7a7be1d92f52c57c3c7e8c8e4621503c852edcf3ee8880b9f9d37
MD5 62da630814ae56d7cf12bdfd06e294c1
SHA1 32e91584e93a6e9b07ae105d508720d9b0206e2a
SHA512 2615b485cf7337029ed909c20dc694ed2561c769229ba4f8a58fce742fca1133d3bb9d068bee2030a1d30956e32f644426d0d3ea6edf40a37d2477400339a4f5
SSDEEP 768:KwNrDb64amHJRo4fdrbdrpdxv7vVcNvZ3qWVlvW1UHgE9zK:3PbtnvG5THPzK
TLSH
T1D2434BADE3D84212D67E4679CD739800EA72F2DB6F22D8EF4488D54C0E977C4963163A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Abstractions.dll
Size 146KB
SHA256 ccbae38b5a4a6f50f2a941741c2e455d087371ea9627e72b2ffdd39f591cd041
MD5 aa7b9925a1b6ae21b680abe24e5a7405
SHA1 9444bfdd9509a8f94b32c4f43ee4653d4da142f6
SHA512 1bd17a720c1c477f730b66fe75a18c543eb8b4e8dc5bec7629a32c8a21cca7eedf28b42ac9ecc5eed48489b20a75a3f3a75e1ac0bf28c66641263e641c46b243
SSDEEP 3072:3JVZgh2lsRMoVWbX1qIKsN02MPtJVoz4PmiFFuz4uv4R:By2SwFLonjGz4uK
TLSH
T134E35B2953CC6293C77F89BEC6538A42F6B7D3A64301DADB1888D80D1E57BC4F636225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Configuration.dll
Size 46KB
SHA256 0dbe927f8c8d1d785b73b2769c5092645f126854e4841fda0edbaa05813af848
MD5 2db1206c624d1b308f6fad8fcc07b119
SHA1 27333a3c4035d3adf209cccbaf404144f12de919
SHA512 50996785c4952d4c3361a236435d6e02343a632480a7a664320f95207afd7f25434f1ef47c830a8e85616bf64094d714cc24fe44dd1dd154e120057b0cf09c29
SSDEEP 768:YocU7HXTzMnsbLYKkLrZIGMjbJbY2EWxSDjG79z8Y:TzXTzMnmLotIGelFsGRz8Y
TLSH
T1A4236C5197948316E9764A75EAB2C906EF35E6C21321B2DF05BCA40D0DE73C0FB3623A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Console.dll
Size 154KB
SHA256 0983d1db2d2642fc73e6990715d5d28e03c1479a8294fe735de2424be6eec478
MD5 7d5911bf612753e48f1f48305e27cb30
SHA1 f2078892baf1cca17fc2b0340665f1e6aa1560b1
SHA512 03ba3088d8a4c3530a3f007f072cd679ee2615d1f1a4912cbc2c392f8e539f541ce8726b065a82a49746906d9faf47c46adbe8648e9e86d60ebcda4375f3b994
SSDEEP 3072:xoXTjiNMVTWWnCTDO7MG2csrfGyh/thvCE:fmFWHNRh/39
TLSH
T1CFF35C2AD79C0211CE7F857CD6A78951E57BD9834342EACB0D98D84C0FA7BC1F632622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Debug.dll
Size 34KB
SHA256 8fc8b2555b5769a88b9a39d8bdb2b7651861b5ed01a349ee2f7f3abecee6e4fa
MD5 4faa9dd22da7d0d16509612095cd6483
SHA1 b4768ccde2a71419bab9c4cf6c771c31f40b6bde
SHA512 a2018c5f2d80ae4ed9172c18a845261e2a4932dd95471753e6793e1f4664cf00fba9fc2b5aafda432dff6430e51d892eb8b695483e5fe18127126de8697ea6e6
SSDEEP 384:WWJIpVMWY5LdrSk5CuC8P4mZjhqW/hljHRN7sZER9zgx2:OugECmg85DjMo9zu2
TLSH
T1B4F24B51ABAC5296E87E4D34DBF6EE427D39D7C25B02AAEF0188E6040D637C0DA3531D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.EventLog.dll
Size 46KB
SHA256 ab449907b30c7880a86b11e89c8443106414677a2cc62ccfc36640801eb97c94
MD5 f58fc37b13dc3e1ae369b1ca8158524d
SHA1 2fe011cea60b62ca0d0787838dac99cfb4877c14
SHA512 8a4b1847e2331bb2e2483a89d201cacabde85f2f0bce0dd0cdd7b4689cda812819350796a38c1333aef0dc48a7dc2ddd713cdb0ae22d1f45bec8e012dff39692
SSDEEP 768:wm3KvnzUkth6PtlWd2EBQ7DjYels9zvSJ1:wkMh6PtlWqczKD
TLSH
T193238C2587A8131BCA7A4935CBBADA01BE39E7CB5700E5EF0A5CFA4D1D933C1993112C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.EventSource.dll
Size 62KB
SHA256 b430407c07c36e5c491cc50da6de3141c551a1ff0c9a3c5626d48348b82987d2
MD5 4cf8376e3e3ff82cb3611ee989eacb67
SHA1 f5020fe613ad227d9ba43398488922d23ba454be
SHA512 e3871e9a37c9d0dac0cf5b2675d929ed2f4ff5e396832cdfcf8fe55cf3fe4933052cb10e713858ab22e1528b8b3215b9a04b1b491b63e51c9b646f17c93859ff
SSDEEP 768:gXRE2d5eoKXEs3qpl5yDj70oZXWNQdjO/uiKgADjSoo9z2:S+y4Es3qpl5Gj70kRheuiKgySogz2
TLSH
T12F536C206B88834BCDBA8938D767DE46D576F6972724E9CF4648D18C0EB37C19F31225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.TraceSource.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.TraceSource.dll
Size 38KB
SHA256 6cec0f5a7d3972027e1bb44e79f021dede7b90b5b6f6849c5c765a3513877488
MD5 eaee6dfc7da3800b0a3ac6e4a99a5fc7
SHA1 e4fbc88beabda35f36b3b697ab51c1c216662404
SHA512 d361d6487595217ce7903f023793765d16785a0040f8b456e3673e4276c8dc151c87c2f7306c8ce519c2c494f01f77959a1a3e362cd8eff4a85f61fd95f50d2f
SSDEEP 384:vjW3PsJW73zyBV7DOM3rBynViCrJYUNEqKTYhQ9gu0M+e/hljHRN7KU/mpmrj/RM:TUe76ErBy0CewEN9gufDjymrjZ9z4C0
TLSH
T1CF036CA187D84316EE6A69B89672DB51B934FA831B10E5CF0948F5480D63BC0DF316BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.dll
Size 98KB
SHA256 e284b4edfc7b46987abf7db4858a23bfbe648459eb85002f1ae16e90f275966f
MD5 c62fbf550aafde0638e7aa2db8d63532
SHA1 2cf10682eb1290a9ed035e49490009cfeabcfc6a
SHA512 730fb7125289e65190199c9adc47765b58595b1ed03c9087daeaf9d7b046c577e10b51cfb79761bfbf77c006067b3592735b41ba0418d2c6fa1933c579b3a9c9
SSDEEP 1536:twx9aZ/LwpESzW/gh+K3qh+EYn+l/4pmOY8P/2Rz8g:twx9apL3R/g7a+EYnrpmR8Ps/
TLSH
T188A37C2073885212CA2E863FF6B6DD44D639F2932B12DEFF4A8CD54C2D977D0927215A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.ObjectPool.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.ObjectPool.dll
Size 42KB
SHA256 b456c2037689bde3b8e6fe6225da60804401c7b8a7e48a121c0402b22eba5d29
MD5 69306f91fbb7e8fb261c2ebfff580a84
SHA1 a0f1106355df5e8039a7bd24f7cb33e2dad44198
SHA512 f86d155026ef5a81fbd1c9a99997182d84f4f0bb8c0eea9c4af292cbb4daeed7ef0776e70802ee4a426b822674229c02c38ea61a100d06f495ea2d176fd0af8b
SSDEEP 384:O0Wc34QWPm1Nl9DkMhQNA9CaXSDtPGTgnVjgJQDpLZj/hljHRN7J4ER9zgvW0:OLNmN9DkMhQNAPIAYjgaRZjDjJ4o9zOr
TLSH
T140137D7657984313CABB06F499A6EE12EC39E3C2630192EF0298F58C1D973C0AB3553D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 38KB
SHA256 89f2996a151fce1d535017c8d8666fcd9da331a8eafa54f7f047f87ecc5b8a47
MD5 ca94bb5bd3b46c418cc1dc6eb52096b8
SHA1 e36526b8b7854da74978822322ac0086cbe790d5
SHA512 92f5be2f130d5e156f3403166e0f470038e5e4c4985f74a279c3b4ac6feb1f7c36aa54eb7d100507e38aeb767abffb0fed7ba68f682a37a7ea8d05670ef991b4
SSDEEP 384:t+zWzP0WrLrepYUKAt66KxTfh/A8hPDHRN7rjscmeR9z6keM:4cZLrepYUOOQv7N9zt
TLSH
T1C2034B489B484623DAB7D970DAB29CD2ED36E7865744B99F408DF0080C9A7C5EB3226D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.DataAnnotations.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.DataAnnotations.dll
Size 38KB
SHA256 5acb63e589615cc1d9d9e890eda77a3aa8088bf020446c855601492feeb9be33
MD5 3442ebe7e3711c6c7902e3b022f7d90e
SHA1 528385c68ba92426d8f4f1cd0f060d0b53751402
SHA512 895d97742b992f0afea4f3f8bbac0545e74e80e3b100324bb8e5651661bf25f40018159b0ac65dcf6e8f64f99d1c9772046ef8c0721ae47a04a485fa391167b6
SSDEEP 384:Fg3W7vqWDmqsvptbp7Hr5F5gH5eOz/ksjuQxZ7e9DjW0xhZG8HHOn6DXmwHPDHRT:Fgo/aRtbVL5F5yn8Zc7N9z6
TLSH
T1CF037C8487988311EDEFDDF05AB1E942AD31E6A25511592F9285E40D0CE37C0EF3677B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.dll
Size 138KB
SHA256 6ccb9bb2893066fa460ec528d0bffeaee6afe430c782820748c6361e8713fa25
MD5 94ff3d22ffbacfb525584d8fda118fe9
SHA1 6801b4ac8ddb437bab95833a68a00dbed633d8eb
SHA512 8a6140341f7effbe38992dfb7eb50e4521b105bae16b6a8526937c20b50d1d4d927ac16de1bd8b1a6a5cdadf503a598d0ba2806a0f6ecf9996a54f1c53f3dc31
SSDEEP 3072:L1EFLIEELjOz9DgGabQvhwMEIdZUPh6V6:xExILSS4hRd/UZy6
TLSH
T120D34929B7480702C7AF897DE11B9D20D933C192A31391EBA0FEE5482F673D1F5BA525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Primitives.dll
Size 82KB
SHA256 68d4a646e207680c8464a49788cf80f7dd5b7651e28269e91a179af859931cc0
MD5 865341e0f51c815b256a68f510012dfc
SHA1 06046c825ba68ea01dcd69857631aa60fc7c83af
SHA512 a22a1709ae19a6d3263899db435cbf7415cad48c0f52a4f5a1a85191a089d185a7062a7998d157982a0dc710e2ea8fd2de1801cf66786742b430192e3d6eb6f3
SSDEEP 1536:zywbaTeNi7qMHOrG29IbwkwFC/pag33ttBOP7yVfHTuia+1oK5mD44444YnnoIns:zySaTeNgqcI9IUkhag3lOP7yVf6iaEoa
TLSH
T1F9837D1173884B23EABDD538D462D90AE575F2923712DBCF8488991C6C63BCDDB3606B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.WebEncoders.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.WebEncoders.dll
Size 38KB
SHA256 c1e031094cd6372902250e8422b744ae1b62368ddf48887e7a56fc6c1052c233
MD5 b8953207082ef343accaa7aac2ae2712
SHA1 d6758305b51fddb4b87b988c536c48986c40c0d4
SHA512 e583872d10882ec5e6db10dac72673cfa954df53cb064e9e229b16664964e3fa4969bafddb8ca5949617502301d9753b00f244135488b64ee4ee150a3fecd33d
SSDEEP 384:eWPRK2WKrukgqtox3NAAwVnIGaLLXh5SPDHRN7HUNicDR9zwhya6:QirWeQrpgiT9zwC
TLSH
T184036D59CBC84223DE65C134E6A7CE4AA836B7C31B11AEDF109CD2540D933C5DE7126D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.JSInterop.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.JSInterop.dll
Size 142KB
SHA256 1fbf3e90a8e1fb1208a637aeebd1a6bed50dd5b7c4b7cb11db9f7e4d759f1abd
MD5 7bbfc511229c80f4b7785e9caa6ff59c
SHA1 1edf627fa79b31278e1cda0ff2fa6d960bc630a9
SHA512 3f4d6ad005a74bd166058bd7f1dfe4de5a7f4fdff3809c16dd34a7ffd178f23b0d11fb31172bd929cef256cd4b81edf5d84b59f4c74cac112110fc8124b4a16a
SSDEEP 3072:GwClfwZzo9INGCXDidgUH7x0QKiXYPs9UTKOgO:E8sCXUNaXPXKE
TLSH
T1D0E36C1AB3988701C6AE927DB6736D43E673F5821727D6CF0049D58E0E93BC1BE36216
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Net.Http.Headers.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Net.Http.Headers.dll
Size 218KB
SHA256 58b88642e60ec665ed442a12f141634f1fc0bc4b742d0af63e72eb3dcbdfcae1
MD5 2cb54544048a5630e07de78ac07ac57f
SHA1 73ac26d8326ce51dc19150a4cefcd166c4b3c50a
SHA512 06ab0aa480070108306f0a15dc12c96ee1f2f449598608b0b6eb204fab7345214a0358e680226608f0b303f066ae7ad3bacced4ab04aea9bdc35057babdd4cbb
SSDEEP 3072:mkmYWoJ4x1MUbtSqV+wQ1WQ4pxyoRJodKlkVzCXnmGhZf/eRXuqXtUw8j60:pN4unuxoX8ouotUNjN
TLSH
T1C3245A5AF3984E63F66ED27C9157D101DB33A156C306EACB0BE8D9452F03BC1B93A522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.Messages.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.Messages.dll
Size 794KB
SHA256 6ece8ac0b02d83f71c536fb90236a1120d9b871ff607be9358950c2a94546a6d
MD5 5110a4d2ac9b49db989780a2e505badb
SHA1 1c91dcbbc5a7cb2fe176b7fe4a58e8e2033def78
SHA512 8aaf4fe503befa7124291d7f9c647b4e41a920273fbb7ac37cb404368d272efdb9c692b3fbf52f50d14e1a0a712c3daabc34a4e8d6648635dd53f4c442d13c91
SSDEEP 192:fir7irZWQhFJtvUmmnoHnhWgN7agWONeythuFwleX01k9z3A7dNSka:qr+/hljHRN7PFUwleR9z6dMB
TLSH
T10705B3A69F388342DB665870BFA6FBF22F3983871940952706C5E9453C533B4AE215FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.dll
Size 378KB
SHA256 cf1362b227045f2d6bf6d81a24ebd8b6455d55cf125ec72fd3e763c7afcf8ba9
MD5 bfdce0cc196339bd5c6c6e9e3adabfc5
SHA1 9f96a3ae2310a80e5785807029fdea014876bebc
SHA512 7294ac67f6258b873dc80cc58ef90cc6f3fc5dac8684518996b7bfb2dd691c263cd8b26487943922d0f70d551efdf868f44593d862dd163a6e082f437eace2c9
SSDEEP 6144:5xDAncYUbvGwsTs5HKn4KjWVZWWiPSm1Wka+3eNauLn1Sj:526OM5qe6xQNa1
TLSH
T1DC846D30B3D4C619EA6E9A38C5228001D9B0F98757D1E7CF8540DE9D2F67BC1EA39366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.IO.Pipelines.dll
Size 190KB
SHA256 ac9f709b79692e4001dfaa194408686511ecaa9b79473b82b854420b16392f80
MD5 99f1fb7ca118c98c3c15c570d3a84590
SHA1 a3441815bfd6807262daaaf6331195b4947e1123
SHA512 1152aca7c638506f582829d173bfcfbad65f09399785012fb8bdb8032ca66b4f5ddca3da8b6513f27a3cbee663b8c9d54c8f24ea4c7ab3353f36f5874b0ba3ab
SSDEEP 3072:2Fp/bjiQPF9f/hPJvZLZzBDTudhyTZhOyE3C9qC4bgN0xmRpevE6UumHi90BM4Uj:Yb9b3hPJvXBuf3GevJwC90BMn
TLSH
T16F146C56939C4703D75FA6BC83A3A202C7B394927702D6CBCAB898542F577C1BF36162
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.Pkcs.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Pkcs.dll
Size 754KB
SHA256 d9104c8586e37642188d48d272d0061bf3183daf301fa61724739015b8160c56
MD5 a0fc44eb09d35d47c25a2324687fde13
SHA1 fc3090e032cf6668388ab07b63b0b661a1069487
SHA512 98435d7e03eee2873474c6d218288a45c3a4f67a363997a26c553486877ce0ff13219e064b9051f276525be7b422fc6381f2962b9ab8b5cf634bb27c0108aac8
SSDEEP 12288:G2sO5jm3r2sMG4btps8W9dG2chn8uEJh5UOSfBxccXMtxF7VWK2tYfARj:4g2MxKzch8ueMxcc8txF7VWK2tYYl
TLSH
T130F45B14E7D5871DD63FE578C1630022CA71B942A322E7CB46C9ED9A2B73BC2D635326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Xml.dll
Size 450KB
SHA256 b3168062325e9ba628e6dce1efa2ca59de7776b7129c751fce2316ba46d1a74a
MD5 7d06676dbe5770c75bd60a5f2b1bf7db
SHA1 850ada8c203da3b634f348ac22d0041ae3534385
SHA512 de45deea51345ba577a333ca4ad8ba6326e8963dac0e5549604e4c36d13f15e5f535e5a2eee18fd5909bccfc08882a51201c6578815a113bfffc065754f18793
SSDEEP 6144:YZcWQLyPz2thA1cYGrRdqWlWRsGhNnXmEFpH1xwoqw/HgTyZuEHd8bO5wMTDa8i5:YbQLyPz2thMrSRQWcThNnXrUTll8COwV
TLSH
T1FAA42B2867D80908E7778A7C82726001E6F1FB531791D6CFC961AE9E2BD3BC19635732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.RateLimiting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Threading.RateLimiting.dll
Size 162KB
SHA256 891cb4e9a678ed15723c7b184c086b40c01befa419572d4c5ef2344ddf283516
MD5 9aff3597ebe6b92b4c2d7eb59a1d2ab0
SHA1 ce86518f0ad48a50af6b3ac15958fc64396b9809
SHA512 cf57a445daa5494e13573642983cf272e31438d317a61b32cb883b7f7c04eecd593078c3afab4a7f9aa9d06be36ec5e60a78ddff7b6b24450f0aa9fd6e450d9f
SSDEEP 3072:17dX7ZKa5OM2Wt3hlamiiYEazqSXXaLIYTbeNhxICyUG4Q:fMa5O/UlSrEfLoi
TLSH
T1FDF35A72139C4513C66F82BC816B8142EFB3BA835313D6DB4C9CA5891F57BC2BDB6426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

THIRD-PARTY-NOTICES.txt

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\THIRD-PARTY-NOTICES.txt
Size 55KB
SHA256 307d014f65d8482314f1400ddeae7a0cbabb96c2207bcc77f6233cc10588e5d9
MD5 69178a6c02d1247f7ed2736f923afe17
SHA1 ee0b6671593b99572da12b58cdb22b8795f196bb
SHA512 e40e1d562bd5253f366be749b947286a14952a04158c21529b7408a4eb19a89e288e1c68e63d4ba4177cf9f1256f1ca7792e385c8a8bb16a2ca2ea3ed2f207ef
SSDEEP 1536:F9tPvI/rpgjXsiQK2naDGoG3jZjuwzesze7zeZzxWzx3zxTuo9OFYwT3JdLHLEip:FcrFn2GoQjZjdzJzKzSz8zhzNOnJ5
TLSH
T10C43951F7E45037319F2C7616A69A8C5F21EA02E3B5B1904346DE2481B3B72DD6FF858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcorev2_inprocess.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\aspnetcorev2_inprocess.dll
Size 374KB
SHA256 31bc5e43821ae0061e4d931cccbf57afcdd7cb3d2a3a634d5e400b19a2f7c961
MD5 dd912047f23d36612f9c9526e1639f48
SHA1 f98cc7894c2d964d45df98a44c6449ea1d9db751
SHA512 3f0b64ffee815a8592562d8ec38f580a3659715fb70ed3ea7708caed58d655090fa7c7446c325f1c7155b58e5da2a2a65a943a29254f0de75a99a0931e9e5505
SSDEEP 6144:dDycDRncxnpr/cCOn7h3JCaiu6YqRAyNFgnKUtNn+0q8VYcv0:YzxpSqXu6YYGgmY
TLSH
T153844C1AE7A80179F0B7D5B9CDA38801EA727C8D47B196CF1394895A0F33BD49E39712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eula.txt

Path C:\Program Files\dotnet\shared\eula.txt
Size 1KB
SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\state.rsm
Size 916B
SHA256 16443f8d15f473248409c240fdf782148f0f20f9bb5eff33812c709f13478cda
MD5 edeca387ef8314b1c284416ca6387d74
SHA1 b9630645824ecb4bc1cdd171b18fca72edab9d6c
SHA512 4d243fcb32c95d1cbb7944cd9a0dbee4727a23fb87b453f55ab02a75e3e5e341ce546d0840a7526cc23f5f4c86e2950ff72758f1bcb67b6c883f3a449142e0b9
TLSH
T131119A504FFA4628F3FAAB7069B59659243AB8212E32C62C044131868F32B91C974F73
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f00ccd228daef1e7764629352f6409e7c411bd43dff6a14e6176681c9e065b7d
MD5 24f2c2bfd492fe4e654457e784f4f6b8
SHA1 04fbc59c7b048d74c093cf2cdd864902a365343b
SHA512 4293a0df8e2ce03ba3585c17302c6752db46ca64a5021251bd26cf4e43302dbc01bead80831601d6a6832304146c7e33438cd767e01c1e04bffd675aa12c87bd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7f:fwUQC5VwBIiElEd2K57P7f
TLSH
T19CB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6a6727a0a4fa4cb1a57a4c321f756d9dd6f44ea45d205327c5e7e5f18c2f6950
MD5 8f53b23305ec44c09bb086cb47d00ebe
SHA1 a54d190b6b6e3b05a68b18a4e38bc67e0d914f6d
SHA512 24004588102e1fa8a9bf07c27541083145da06836345681ba0f438a086ca89db4bcfe563005d6b736f731acf1ba98f4abfdd021ee48bd0cd93d4afd01bba7f70
TLSH
T1DBD0805C57B76C31E554AD7004573F15BA55D5B39B49973164732C791C4104215911C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e365308021ade71cd7fd8bcb77743afa8328c70101415bb9b419c11ce7afa8b2
MD5 20d252cf697b00581a3fc1a7eb0aa400
SHA1 999f264f6caea10fd708d20094aec5024868af67
SHA512 7bdbd68d07d0b20ca7f49d51c821765822e32a81d51915eddc65d999ab43472632b096aaaf0a8fc634bc0a88ab61a5ff5c5b9e3a19f7fb7623f3e7b7a69eb13a
TLSH
T1ACD0805C17F76C31E554AD7004563F15BA55D5B39B49D73164732C791C4208215911C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 80d9ca4b4e35a87bef449d5b017cc9d3899ccacd17531e421555d4b82294c23c
MD5 02027a0e8545f9e1bd072cf56c4b26d2
SHA1 d3f1b6b3af1792441929488f0a1d9ea4fd169622
SHA512 5cfffe6f8e7bcff2e6a0b9a683d45d35baf0079a9c40c828970ba24ba279adce2ffd5a7743728efb3c381d57ec5edd317eb4726d1ba9d5c67ea90b0763b7b2b6
TLSH
T1227109C68384E62CE7E40D7D3A9DA434BA3246D9513EDE5776D2523DBA2EF110380491
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589bbe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589bbe.TMP
Size 3KB
SHA256 4e042e131a85916051f57b4e1919d4c3600baca69640515f84ca1655e20bec5a
MD5 bb13be3ef94636b174abca6adac735d3
SHA1 73526ea1a864b333721a26364d82cbb362efb208
SHA512 d9a137c9d3fab95d8804908bbf09e34b02334fbe384bdd1f84289af6cb73bb4280010ac6711d9a1c160c7c030d311c50c69e360ec76bdb5c9b1e97f7ee5376f0
TLSH
T1A76106C78384E62CE7E00DBD3E9D9430BA7106E9617EDE5736E2467DBA2EF1103804A1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 19a8d841fd1b4c41c0eb647ef921e585e087d953a1f0d2fbbec0159f0f0d9685
MD5 7072a78592bbd8e8ee6c35b8092506c9
SHA1 d7cba8a5d7771830bcde2e099dd80b954da7e032
SHA512 af4d8f552524577f807965e87ef9082c57037855aae66ea82ecaabe8ebb149736a8236c05c00bf546971924a50f5b369f90855746d0bb42ce1f11864fe221567
TLSH
T1CB519EF783E4856E8A1196F0AA18AF2FDF2D0515431C3D6989E4EE27D3E3471E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3dcea3647120b096e81e3a24b031da57782f14c5dcd0710c3610281848caf351
MD5 24af788071cd2c574ab37a37f7fe0ac0
SHA1 68b5e093de48134f79cc46a986c9d8947e56705a
SHA512 303bdc1a45bbafa9a37bf12c80cbc6fe643c8ba427b6a28693ff517567d4f344217080ee56106fe9372316926c7bf1d92ef51046a851fa29015a08dcedc2c2d2
SSDEEP 192:sxZ5R/yM//K1Ml8UQ3lp/fFsGNAY1AMFMIdp5W/W6+WNrih/A80Gcn5s+AIg5rJ:sxZ5nq1p/fFsGSYiA8/bI/sSRH
TLSH
T18662E91AAA349977CCCBD20AF651BF53D6F55563D6900E44AAFCCA0C05E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6d3dd5d650b4492b4a3b67ae21ca34d5109762b737798b1f53d5370a34370f0f
MD5 ce001b15a0272d7e4c1171ee0f37b578
SHA1 c716ae0e24dbe819887c531f6673a647938deb70
SHA512 6a38a323c0521f5564feccdf7d3a2ff9ee1dfecbd4c9fd6e6d078bca986c7c91ae9a2569a76bbc99e38d5966148ef410a10b583c10a2d72cab667599c35b4012
SSDEEP 192:sxZ5R/yM//K1Ml8Mlp/fFsGNAY1AMFMIdpfW/W6+WNrih/A80Gowms+AIg5rJ:sxZ5ntp/fFsGSYiAe/bI/s6RH
TLSH
T11F62E91AAA349977CCCBD209F651BF53D6F95563D2900E44AAFCCA0C05E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2af7cf39d3611d2ea1c8fe51180ce277bbea6de3809cd508523bcbb86e957797
MD5 69ab34e73ca7c9f14ff42bc9d3da7fd9
SHA1 5e4c1640a8f68bd976133602b71647d708484e42
SHA512 7e8dd3d121bedb103a0c1ecbe94fba3c2bfe0fa6c47b6e5de91229c2479bad1dd8504dc85a1ce7344c37508415b3b9de7447e96117288c5e2427a99ee7e7fda1
SSDEEP 192:sxZ5R/yM//K1Ml8Mgp/fFsvAT1AMFMIdpfW/W6+WNrih/A80GTims+AIg4J:sxZ5n4p/fFsITiAe/bI/sbRc
TLSH
T1EA52D81AAA349977CCCBD209F654BF53D6F55563D6800E449AFCCA0C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 8420de9c7c48ea0267e84446566205858e2ce9dc97da4fd79e1a400387e1e4e0
MD5 f2ca6f0d69af728a73077503746f5b9f
SHA1 129372107eca49c9acfd1c0400f139d14525029b
SHA512 39a02e74e4402a5367b80364331fbae07edfa90fe98470cfd206f96abeeefb48801ca1e37b750343ecf232638688a05ab3972de0f626f56d4ebd3beb4e66b83f
SSDEEP 768:oF91L8/j2sr7pLuLnqeWRmqSQBq8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3grzJLlc:oF91L8/j2s9EnqeWRmqSQBqu1jaKgrzo
TLSH
T114031C3B7C0CCB7E4F804E9CEC26BE9A6DE8018B9698C95447FA844C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 125fee399390c125bca57f3d68f6ba353005e7b6000389f47f9b377a6f157266
MD5 7f9546f9d8c82cbb60811ca72763cbbe
SHA1 c3ac72901af2a561f0e82f376a2edf1bc805fab7
SHA512 4cdbe4a9d986e28f10e7c5bc5399faa24c0de2a56626311a60aa8a2916b18620541ca76c39ae76ccf5e0fc395e662682c74f991f8aa6e882128bafe43b7a0443
SSDEEP 48:KAVI1KmYovyZmIPKXKEfZItKyY43yiH09RHS:KAV2KmYq6moKXKwZGKyYy9
TLSH
T155913090B53BD2403E7D79498690E56BA38234633428A43B3BBD51B66F67E108DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590ad4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590ad4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e4cd0247187b9dd02f80ce5fe26ecad44a5ce4c94db1d899d276490389703ec9
MD5 958c728b283249851415e5a260742860
SHA1 d57f0b48eabfabf7da68dd2f2f99ad84fdb7467d
SHA512 303c18e24136b18c95258f9db2544d4fb21cff1cb01dc406f7a10730723214c7cddad464e980767b05ee5389be29baa1cc199d448348897136a9fa374c2c39bc
SSDEEP 384:nDjccCs+Bt0S3v8NGUNsjAO1JX5Q/5+i8kNaMXH6PXU/AatId68vf3d:vccQP1Lw4wPaPXabW68Xd
TLSH
T157826D35A8B89C3B59E39549F1563643AFF410BB9A841F54FAEC8F1D008B6DC170E927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de892b9507c8fa72e0b9ed648a8c443300aa056d169bcd3835204670c507cec5
MD5 5cfb72cc70f4913cef1e684d1a1c1868
SHA1 7dda1650905111f86de532449da5097b91b6d9b8
SHA512 ff3c1e2cc2cae4807bf0cdef1da8a3523b2ec9cc36bf191cefbb494ea87c70dd60c9332e662619c2602753a2c5f332cd3473508967f704797a171c5255ed9a7e
SSDEEP 384:nYjccCs+Bt0S3H8NGU6sjAO1JX5Q/5+i8kNaMXH6PXU/AatId68vf3d:GccQnsLw4wPaPXabW68Xd
TLSH
T100826D36A8B89C3B59E39549F1563343AFF410BB9A841F54EAEC8F1D008B6DC170A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 971ac8565d4e382ced8c5e6fc96b24a00fad0c7517fadb69585206b45159fdf6
MD5 0da97c1ff1634f05f2759e5fed288b29
SHA1 d12c96032519497392b882fffc1906b4908d8e39
SHA512 c61b57ebc4d9845131a0522b08d2680423ea147dace94a67fda8093e60a0075f1f7bf9e7e94fa9e7ba50088db32293c7419ce707c6dfea278ad3b13f1d3fb5ee
SSDEEP 384:nRjccCs+Bt0S3v8NGUWsjAO1JX5Q/5+i8kNaMXH6PXU/AatId68vf3d:hccQPsLw4wPaPXabW68Xd
TLSH
T154826D35A8B89C3B59E3A549F1563643AFF410BB9A841F54FAEC8F1D008B6DC170E927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 69c7abcca929729fab671508af128fbc032d349165eed1f330d59f9bf71d81a9
MD5 85c1e14cc3893cfdf58114ec6edc1733
SHA1 96b6125275d3541e2935e27e8096621b9395cfae
SHA512 a785ea276621c02a7e13384d8018b68ad4f6b05e1a36c977d97c676cf4cd752ec032ad98ee8ddcd87371de7e1324c961653105593c4efcd43e5c0d32ac67c4f0
SSDEEP 384:n5iFAjccCs+Bt0S3J8NL8TUNTUlIl6sjdO1mDfwMX5Q/5+i8kNaMXHqPXU/AatI/:QFeccQpOwgebEw4wPKPXabW68Xd
TLSH
T197D294F594D7893BD8AE4787A33D2E429EBCC16775845A84BBC84E0CCC861BFC70A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c315873559751d9915682db697b0720780af6a7b015a288a58aea95474f333e8
MD5 30210bd8466af20eaa269197ca4b4720
SHA1 2c9512420c0a6516b3fb9b2254633aac62d02989
SHA512 04bb03669ab7f8123849e7e69a3b861a4c4f8d191f92c604c82d75ba0eca29d1e19faef75041713ccfbf17ecb071fb4b606f27ba7f49f716678980052566afe4
SSDEEP 192:ZGNjy6hNQmiUySGh3NYX5Hw/5++jzorkNPCcWYIVU6:ZGNe6RtGtNYX5Q/5+i8kNa2gU6
TLSH
T1C302FA39B86C7C7B9EE3AE45B44636179FE5116BE6952B84EAF80F1C00C769C2305C23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9861bd75b1ac4d8462751c7845bfd15157bcba254cb77a7455fe5a6d33663546
MD5 f562a55b65630fd1dee3fac1e0d3612d
SHA1 e01f2a0ba794c79d538048c174bc63c89261d840
SHA512 0a94a7862b9aa1539cde04a1c09607b7f593f4b0a2ac505b7fb3115ee9568920c084e6b435006a006cddd8fc3cd14a621fbd4bc9d4fc3bde315c42457de1cc3b
SSDEEP 192:mGNQh6hDQmiUyRl3HYX5Hw/5++jzorkNPCMXdhJqL9qSbU6:mGNU6rQxHYX5Q/5+i8kNaMXH2PU6
TLSH
T12512E835B868EC2B5DE3B945B48732539EE5217BEDC95F44E6E84B1C00CA69C270DC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

985405c6-abae-4a51-b738-ab9cc121256e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\985405c6-abae-4a51-b738-ab9cc121256e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

937e4439-4ace-46ff-90ab-d58f014b1b3b.tmp

Path C:\Users\Admin\AppData\Local\Temp\937e4439-4ace-46ff-90ab-d58f014b1b3b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

b01c2d92-1956-44ef-b25c-a51c7d3af179.tmp

Path C:\Users\Admin\AppData\Local\Temp\b01c2d92-1956-44ef-b25c-a51c7d3af179.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_dd_AspNetCoreSharedFramework___20260418190938_000_AspNetCoreSharedFramework_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260418190938_000_AspNetCoreSharedFramework_x64.log
Size 2KB
SHA256 e2f357fe9287e86b39493c2caad58c369debe0fddd7c91e62924f99f44dc682b
MD5 a82366baf7f4ce0a96bc8fe1a26e34b5
SHA1 916f5b1d864be618b8088cbbf828d78a769585c8
SHA512 4730eda24b47b03b0c125acac3cc6922367bce6db54dcff3d4cadcb1c407cbdb7e81cfde98848b97cbef592444213239ebb901de223d45b90f79f4a6a65a0589
TLSH
T1A74108591FD50815B1B75747DEF3C5631A33BCC2A8348B8C23858319476BE066CACB6E
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_1054348202\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f126d5b-19f3-4231-9898-f371644731cf.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1736_999532614\3f126d5b-19f3-4231-9898-f371644731cf.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe

Path C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe
Size 10.0MB
SHA256 2819e0c6731c1ae34944778499e3d3e1ca81ac3ca05cb1cb7d252350b8e7ac65
MD5 603620067fb08340ce7bad9395512a9a
SHA1 aec0dda330a4f30c84911130ea89b2b8796bb969
SHA512 0a72cefaf82d475e50630e5a994367b3aeebefe3ea1d20a586c0dd215c559860691219080f3f49f7816210d4dd55eb19e09e3cbcf29fffef0bf9473a5826e744
SSDEEP 196608:KgZ2q0xUxwiAj/XCndOt+vhS7jLRxs9r/uG1vE4Bb2odqFY/p0Xi+Jp:z2qEUe3SnmL73ArbTp2rYy73
TLSH
T14AB63331A6650022E7F50677AD18E5313E3CA2382B1499A6E7C8EC1D3F790D16BF7297
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier
Size 185B
SHA256 39962b125b4ccef222c1a08374679f8f5dedfedc8047ec6157bd0d5f37090772
MD5 78e38adbcebfffa27076a51fd865cef1
SHA1 06887cedca05cc8b379a3d13948b5d07bcf09a50
SHA512 577bd0390276385bdee3b577f21f04c56b3e6d75848694492fdd854967b2d9811310e8fb831ccb57dcbf3ae612f44769f9712430a8737561776d291bf28b2aa8
TLSH
T129C02293C80086034E1033830728F22DE20F22920580E3C88C8080E1D2430D5C1C5031
MD5 SHA1 SHA512 TLSH

Submit Download

MSIA1D4.tmp

Path C:\Windows\Installer\MSIA1D4.tmp
Size 219KB
SHA256 2bf33a9b9980e44d21d48f04cc6ac4eed4c68f207bd5990b7d3254a310b944ae
MD5 928f4b0fc68501395f93ad524a36148c
SHA1 084590b18957ca45b4a0d4576d1cc72966c3ea10
SHA512 7f2163f651693f9b73a67e90b5c820af060a23502667a5c32c3beb2d6b043f5459f22d61072a744089d622c05502d80f7485e0f86eb6d565ff711d5680512372
SSDEEP 3072:FVzl3qiEZybztEwiUx6D02cWVsV1v2vZR3X6j7zo6k2FkngTLrOrORT9flQnS6lg:FVIMEgXmEAR3oHon2VaFuG0eEp
TLSH
T1AF248D217494947EEAFA0832A57EDA71BF3DF2241760C8AEC3409D1E6D604C167B7B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1565134385\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_1771636862\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_2089183038\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1736_511893104\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{09F3F6DD-2F4B-4522-BB47-51B9AB90AE8A}\.ba\logo.png
Size 12KB
SHA256 c8e23a42e04fbd73f5f66f3b9f2ba34a777bc4769c413a0f78335a4e757baad5
MD5 84709eb22e4b05688067699ca9b0d322
SHA1 7c3381d8b6a58087cda95577cc2d25e7aa2c21d8
SHA512 04de70b7317ee1cbde73ac0fe84bd70983cf0ff7e769e5f9626c69eaa6e3e9724c95b14ccb7a5478ee639848d3f8c98e4dec599cc5e33ad71de638da589ba319
SSDEEP 192:k4VwCaltyB5RgMq8RymiBg06po6jKeTvw:k4VzalIB5Rgh8YmiBg06W6jKKw
TLSH
T16F42C15EE9EE8248E52D065234DB6E1A997A4CEF2E9D66B2E1B57E340C303E30D47481
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{09F3F6DD-2F4B-4522-BB47-51B9AB90AE8A}\.ba\wixstdba.dll
Size 190KB
SHA256 dcea15f3710822ffc262e62ec04cc7bbbf0f33f5d1a853609fbfb65cb6a45640
MD5 f1919c6bd85d7a78a70c228a5b227fbe
SHA1 71647ebf4e7bed3bc1663d520419ac550fe630ff
SHA512 c7ff9b19c9bf320454a240c6abbc382950176a6befce05ea73150eeb0085d0b6ed5b65b2dcb4b04621ef9cca1d5c4e59c6682b9c85d1d5845e5ce3e5eedfd2eb
SSDEEP 3072:sjEoXsLW9OLG8Qp51ySdjDXY33b+Av7O5IkI+/AYkPAEc527uu3k/gLtxavf0ir2:sjEo8LW9553hXWy15I2YrAW7FUVEihs3
TLSH
T1FF14AF1176D0A07AEBFB16307A39A5216E7DBA200FA0C9DF63449D2B1D715C19B36B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AspNetCoreSharedFramework_x64

Path C:\Windows\Temp\{09F3F6DD-2F4B-4522-BB47-51B9AB90AE8A}\AspNetCoreSharedFramework_x64
Size 9.8MB
SHA256 3b57b7129f88d3566896ff768dc7de0e4040989e7a91cf0edc4655eb9f400ff9
MD5 024c73aa5ff6ef31ec457b9fa24ec310
SHA1 cf5c7b1b478f0fe464ef33bad3c9b5dd895b3879
SHA512 b5ba6cbc2ed46f44d39681651b25902aa971aa10c29cb86115afdd39a7788114f60c416fe8a9892d371a5e4fc5c9be8902ea864e644261fee4252516131c30f6
SSDEEP 196608:bSexkGUfk0jhnFgKt6zPkVnN1+Y+MNkfroHiFCpAZ7i:jx0j3ncPkd+J9fUHOaai
TLSH
T1A3A633277DA2843AD4A90D708A76CB606F3DBC344B50E5974380BA2DEDF11D05B77AE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thm.wxl

Path C:\Windows\Temp\{7F2F2607-561D-4CEF-97A9-DA56CA1A2216}\.ba\thm.wxl
Size 4KB
SHA256 65507ddc6f2ab2a93b684684ba1d69fdf0b024296367cdce5dad31d5e49813d0
MD5 d4226d322e0a676476db291ab59c0cd1
SHA1 572f5e80c1b56aadfb15e227d96fb4b6fea47ce9
SHA512 b69e606d117785412744c131e9559c597d5efbb0b38b97f1369b11f39efd5330c7918369d6825a8f2a4a1490cd4a076981f0008621fbc28c08278481e6d74810
SSDEEP 96:JTNREsRDTxmupv9/KATZgoVOBq9Lr878U:zvNDW7R
TLSH
T18C91AA63B8CB27D1287361A4EE9195B95911D09C823B2CF4FC47454B838E927A3B3F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe

Path C:\Windows\Temp\{B664D807-ECF9-462A-BE89-A71896ECE555}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe
Size 589KB
SHA256 4eecc518c865e68838162dba37c7883c3cd8b9cb0d7a17bc649a554535e5d51a
MD5 213cbe07ed3f689b1c8620bc0a9bf49b
SHA1 737b918145da73c77855ba7507995cc80e2ee598
SHA512 d9e8fa928668bcfb2a5a899c84dc27ae647367baf042f894d02f3c8c87cbe1dea5e755d3bab6c14285b2d65d8ffc09a3ea40d325bcba6b6ad5e3d091195edd89
SSDEEP 12288:omEsd9PZfePv3xl7ft7V+6uC+zd5qLliP+woCYJjsXs8Ng2:om39PZfePv3r7fm6t+jqpi+SsU
TLSH
T117D47C32A5614032E7F10673B968D6303E3CE328275488AAE7D4AD1D7EB84D667F7253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1620-604-0x00000265E47D0000-0x00000265E48EE000-memory.dmp

Download

memory/1692-959-0x000001474A5C0000-0x000001474A5CC000-memory.dmp

Download

memory/1692-958-0x0000014749010000-0x0000014749388000-memory.dmp

Download

memory/1692-2318-0x0000014749010000-0x0000014749388000-memory.dmp

Download

memory/1692-4243-0x0000014749010000-0x0000014749388000-memory.dmp

Download

memory/3656-0-0x0000024A3F250000-0x0000024A3F5C8000-memory.dmp

Download

memory/4212-957-0x0000026E64440000-0x0000026E647B8000-memory.dmp

Download

memory/4212-970-0x0000026E64440000-0x0000026E647B8000-memory.dmp

Download

memory/4488-568-0x000001DECC000000-0x000001DECC378000-memory.dmp

Download

memory/4488-569-0x000001DECC000000-0x000001DECC378000-memory.dmp

Download