d284e1b7ac9d8fec4cac3ce0a920170e2541882623fc8cf4f41cc5bb2c1f85c8

Resubmissions

29/04/2026, 00:18

260429-alq26saz4q10

29/04/2026, 00:05

260429-adfapsay9k10

28/04/2026, 23:57

260428-3zwtssft5110

Analysis

user interaction
yes
max time kernel
209s
max time network
204s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/04/2026, 23:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Standard.Desktop.exe
Size 107.2MB
Sample260428-3zwtssft51
SHA256 d284e1b7ac9d8fec4cac3ce0a920170e2541882623fc8cf4f41cc5bb2c1f85c8
MD5 cb773e1a565f5ea7f28d0277d0400dbf
SHA1 be2f72c903bdb5c95c609cac5ef5ddff7269be63
SHA512 91823b79509c9c3b829fc045af86e908d19632a154dc44134a9f3c31ecbc6b751db3355bcf837c17cc0268286279276272a0a19e9f1fc9a7207df912fb4bc3fc
SSDEEP 786432:OJqNlihOa9yh5baRH3tMnSorOWrIOBGDG6QebRA/pUc43ZXh1AZpRGCQ8QYxtMt8:Uq7ihOaE8XtMFOWUOBd6mBa5fAnqt8
TLSH
T1F938BF02F7A58E3AC4BE8130D1724225D771F48A7351E78F3688A6BD3F933905E66366
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
55	5308	msedge.exe

Executes dropped EXE 7 IoCs

pid	Process
5436	aspnetcore-runtime-8.0.26-win-x64.exe
2416	aspnetcore-runtime-8.0.26-win-x64.exe
1260	AspNetCoreSharedFrameworkBundle-x64.exe
4580	AspNetCoreSharedFrameworkBundle-x64.exe
5376	AspNetCoreSharedFrameworkBundle-x64.exe
2496	AspNetCoreSharedFrameworkBundle-x64.exe
3884	AspNetCoreSharedFrameworkBundle-x64.exe

Loads dropped DLL 5 IoCs

pid	Process
2416	aspnetcore-runtime-8.0.26-win-x64.exe
4020	MsiExec.exe
2496	AspNetCoreSharedFrameworkBundle-x64.exe
3012	msedge.exe
6024	MsiExec.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{f600cee9-4c2d-456b-b0d0-46283c87fbc5} = "\"C:\\ProgramData\\Package Cache\\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{f600cee9-4c2d-456b-b0d0-46283c87fbc5} = "\"C:\\ProgramData\\Package Cache\\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\\AspNetCoreSharedFrameworkBundle-x64.exe\" /burn.runonce"	AspNetCoreSharedFrameworkBundle-x64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.runtimeconfig.json	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IISIntegration.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\eula.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.DataAnnotations.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.Extensions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.WebSockets.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Common.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Binder.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Xml.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Metadata.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Forms.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RequestDecompression.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Web.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Configuration.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Protocols.Json.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Web.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Session.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.JSInterop.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpsPolicy.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Identity.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.UserSecrets.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Threading.RateLimiting.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Embedded.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileSystemGlobbing.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\aspnetcorev2_inprocess.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.deps.json	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authorization.Policy.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Core.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\.version	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpOverrides.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Authorization.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Localization.Routing.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\THIRD-PARTY-NOTICES.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpLogging.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Razor.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Net.Http.Headers.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.IO.Pipelines.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Antiforgery.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.FileExtensions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpsPolicy.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Cors.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.Messages.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Html.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Session.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.ConfigurationExtensions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.UserSecrets.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Core.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.Abstractions.dll	msiexec.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\THIRD-PARTY-NOTICES.txt	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll	msiexec.exe
File created	C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Pkcs.dll	msiexec.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1126433297\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\~DF3812D56A8BB8240B.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\uk\messages.json	msedge.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\Installer\SourceHash{CDF2084D-21BE-3505-B0FB-7866136E1ADD}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI69E1.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\mn\messages.json	msedge.exe
File opened for modification	C:\Windows\Installer\e586685.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\fa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\it\messages.json	msedge.exe
File created	C:\Windows\Installer\e586685.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_993461294\manifest.json	msedge.exe
File opened for modification	C:\Windows\Installer\MSI679E.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1126433297\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\~DF036101E0E0B5BCCD.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1982651109\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1126433297\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1118602475\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1982651109\kp_pinslist.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1257523971\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_993461294\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4992_35778682\_locales\en_GB\messages.json	msedge.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.26-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aspnetcore-runtime-8.0.26-win-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AspNetCoreSharedFrameworkBundle-x64.exe

System Time Discovery 1 TTPs 4 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5308	msedge.exe
5436	aspnetcore-runtime-8.0.26-win-x64.exe
2416	aspnetcore-runtime-8.0.26-win-x64.exe
5676	msedge.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000e689d3d397d010a60000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff000000002701010000080000e689d3d30000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed35000000ffffffff000000000700010000680900e689d3d3000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff350000000000000005000000ffffffff000000000700010000f8ff1ae689d3d3000000000000f0ff350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1de689d3d3000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134218943499620505"	msedge.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe

Modifies registry class 45 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_AspNetCoreSharedFramework	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8D8250EED1A64D83E9DAC2D8101B06F4\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Media\1 = ";"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{8D174BDC-FCED-4C5D-9DD0-1F2373E81FB2}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8D8250EED1A64D83E9DAC2D8101B06F4	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{C545A89B-DA68-4969-846F-E0AC50B35808}	msedge.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Version = "8.0.26.26169"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\ = "{CDF2084D-21BE-3505-B0FB-7866136E1ADD}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Net	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\DisplayName = "Microsoft ASP.NET Core 8.0.26 - Shared Framework (x64)"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\LastUsedSource = "n;1;C:\\ProgramData\\Package Cache\\{CDF2084D-21BE-3505-B0FB-7866136E1ADD}v8.0.26.26169\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Language = "1033"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\DisplayName = "Microsoft ASP.NET Core 8.0.26 Shared Framework (x64)"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Version = "8.0.26.26169"	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_DepProvider	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\PackageCode = "F86B89D55D34260438EACA982BFEB579"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\D4802FDCEB1250530BBF876631E6A1DD\FT_ProductInfo	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\ProductName = "Microsoft ASP.NET Core 8.0.26 Shared Framework (x64)"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\Version = "134217754"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\PackageName = "aspnetcore-runtime-8.0.26-servicing.26169.11-win-x64.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\D4802FDCEB1250530BBF876631E6A1DD\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{CDF2084D-21BE-3505-B0FB-7866136E1ADD}v8.0.26.26169\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\ = "{f600cee9-4c2d-456b-b0d0-46283c87fbc5}"	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\Dependents	AspNetCoreSharedFrameworkBundle-x64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.AspNetCore.SharedFramework_x64_en_US.UTF-8,v8.0.26-servicing.26169.11\Dependents\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}	AspNetCoreSharedFrameworkBundle-x64.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3832	msiexec.exe
3832	msiexec.exe
3012	msedge.exe
3012	msedge.exe
4984	msedge.exe
4984	msedge.exe
3832	msiexec.exe
3832	msiexec.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeBackupPrivilege	2060	vssvc.exe
Token: SeRestorePrivilege	2060	vssvc.exe
Token: SeAuditPrivilege	2060	vssvc.exe
Token: SeShutdownPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	3832	msiexec.exe
Token: SeCreateTokenPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAssignPrimaryTokenPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLockMemoryPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncreaseQuotaPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeMachineAccountPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTcbPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSecurityPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeTakeOwnershipPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeLoadDriverPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemProfilePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemtimePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeProfSingleProcessPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeIncBasePriorityPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePagefilePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreatePermanentPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeBackupPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeShutdownPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeDebugPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeAuditPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSystemEnvironmentPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeChangeNotifyPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRemoteShutdownPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeUndockPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeSyncAgentPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeEnableDelegationPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeManageVolumePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeImpersonatePrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeCreateGlobalPrivilege	1260	AspNetCoreSharedFrameworkBundle-x64.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe
Token: SeTakeOwnershipPrivilege	3832	msiexec.exe
Token: SeRestorePrivilege	3832	msiexec.exe

Suspicious use of FindShellTrayWindow 13 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
2416	aspnetcore-runtime-8.0.26-win-x64.exe
4992	msedge.exe
2496	AspNetCoreSharedFrameworkBundle-x64.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 4992	4908	Standard.Desktop.exe	80
PID 4992 wrote to memory of 4808	4992	msedge.exe	81
PID 4992 wrote to memory of 5308	4992	msedge.exe	82
PID 4992 wrote to memory of 3416	4992	msedge.exe	84
PID 4992 wrote to memory of 3416	4992	msedge.exe	84
PID 4992 wrote to memory of 3416	4992	msedge.exe	84
PID 4992 wrote to memory of 388	4992	msedge.exe	85
PID 4992 wrote to memory of 388	4992	msedge.exe	85
PID 4992 wrote to memory of 1176	4992	msedge.exe	86
PID 4992 wrote to memory of 1176	4992	msedge.exe	86
PID 4992 wrote to memory of 1176	4992	msedge.exe	86
PID 4992 wrote to memory of 3672	4992	msedge.exe	87
PID 4992 wrote to memory of 3672	4992	msedge.exe	87
PID 4992 wrote to memory of 3672	4992	msedge.exe	87
PID 4992 wrote to memory of 6056	4992	msedge.exe	89
PID 4992 wrote to memory of 6056	4992	msedge.exe	89
PID 4992 wrote to memory of 6056	4992	msedge.exe	89
PID 4992 wrote to memory of 2168	4992	msedge.exe	90
PID 4992 wrote to memory of 5404	4992	msedge.exe	91
PID 4992 wrote to memory of 2168	4992	msedge.exe	90
PID 4992 wrote to memory of 2168	4992	msedge.exe	90
PID 4992 wrote to memory of 5404	4992	msedge.exe	91
PID 4992 wrote to memory of 1280	4992	msedge.exe	92
PID 4992 wrote to memory of 3268	4992	msedge.exe	93
PID 4992 wrote to memory of 2368	4992	msedge.exe	94
PID 4992 wrote to memory of 3268	4992	msedge.exe	93
PID 4992 wrote to memory of 2368	4992	msedge.exe	94
PID 4992 wrote to memory of 3096	4992	msedge.exe	96
PID 4992 wrote to memory of 4884	4992	msedge.exe	97
PID 4884 wrote to memory of 3296	4884	msedge.exe	98
PID 4992 wrote to memory of 5436	4992	msedge.exe	101
PID 5436 wrote to memory of 2416	5436	aspnetcore-runtime-8.0.26-win-x64.exe	102
PID 2416 wrote to memory of 1260	2416	aspnetcore-runtime-8.0.26-win-x64.exe	103
PID 3832 wrote to memory of 4020	3832	msiexec.exe	111
PID 4580 wrote to memory of 5376	4580	AspNetCoreSharedFrameworkBundle-x64.exe	114
PID 5376 wrote to memory of 2496	5376	AspNetCoreSharedFrameworkBundle-x64.exe	115
PID 4992 wrote to memory of 6092	4992	msedge.exe	116
PID 4992 wrote to memory of 916	4992	msedge.exe	117
PID 4992 wrote to memory of 5824	4992	msedge.exe	118
PID 4992 wrote to memory of 2988	4992	msedge.exe	119
PID 4992 wrote to memory of 2988	4992	msedge.exe	119
PID 4992 wrote to memory of 1192	4992	msedge.exe	120
PID 4992 wrote to memory of 1192	4992	msedge.exe	120
PID 4992 wrote to memory of 3012	4992	msedge.exe	121
PID 3012 wrote to memory of 2808	3012	msedge.exe	122
PID 3012 wrote to memory of 5676	3012	msedge.exe	123
PID 3012 wrote to memory of 5924	3012	msedge.exe	124
PID 3012 wrote to memory of 5924	3012	msedge.exe	124
PID 3012 wrote to memory of 5936	3012	msedge.exe	125
PID 3012 wrote to memory of 5924	3012	msedge.exe	124
PID 3012 wrote to memory of 5936	3012	msedge.exe	125
PID 3012 wrote to memory of 3268	3012	msedge.exe	128
PID 3012 wrote to memory of 5160	3012	msedge.exe	133
PID 3012 wrote to memory of 4512	3012	msedge.exe	134
PID 3012 wrote to memory of 5736	3012	msedge.exe	135
PID 3012 wrote to memory of 888	3012	msedge.exe	141
PID 3012 wrote to memory of 888	3012	msedge.exe	141
PID 3012 wrote to memory of 656	3012	msedge.exe	143
PID 3012 wrote to memory of 656	3012	msedge.exe	143
PID 3012 wrote to memory of 5176	3012	msedge.exe	144
PID 3012 wrote to memory of 5176	3012	msedge.exe	144
PID 3012 wrote to memory of 4948	3012	msedge.exe	145
PID 3012 wrote to memory of 4948	3012	msedge.exe	145
PID 3012 wrote to memory of 4984	3012	msedge.exe	146

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Standard.Desktop.exe
"C:\Users\Admin\AppData\Local\Temp\Standard.Desktop.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.AspNetCore.App&framework_version=8.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x308,0x7ffa81c1c188,0x7ffa81c1c194,0x7ffa81c1c1a0
    3⤵
    PID:4808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,408763803576226628,15646902035083238626,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:11
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,11408347982615333159,11718432061738086152,262144 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:2
    3⤵
    PID:3416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,5925763400013351870,3935293601994931590,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:13
    3⤵
    PID:388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,5934185146064733296,18373174390748800120,2097152 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:1176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,2765772687283475249,4602497371699148282,2097152 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
    3⤵
    PID:3672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4840,i,15601125442264338781,1828398193505796567,2097152 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
    3⤵
    PID:6056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,14722202576616498112,15231050557801121312,2097152 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1
    3⤵
    PID:2168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,4134372581994235028,11274729927455949621,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:14
    3⤵
    PID:5404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,14720990948716841898,12492669755733526347,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
    3⤵
    - Subvert Trust Controls: Mark-of-the-Web Bypass
    - NTFS ADS
    PID:1280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,2400582465926226050,2531219444023266669,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
    3⤵
    PID:3268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,7918390865637840460,1181116871107762194,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:14
    3⤵
    PID:2368
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,11938759145580689296,1771914777100284294,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
    3⤵
    PID:3344
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,11938759145580689296,1771914777100284294,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
    3⤵
    PID:3096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7336,i,10335629143057003828,5551174277627563468,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:14
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1140
      4⤵
      PID:3296
- - C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe
    "C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - System Time Discovery
    - Suspicious use of WriteProcessMemory
    PID:5436
  - - C:\Windows\Temp\{D044C639-DDED-45AD-A3FB-A37CF98880DD}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe
      "C:\Windows\Temp\{D044C639-DDED-45AD-A3FB-A37CF98880DD}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe" -burn.filehandle.attached=584 -burn.filehandle.self=580
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      System Time Discovery
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2416
    - - C:\Windows\Temp\{65B1C8A3-C42A-48F7-8454-FCB43ABA0190}\.be\AspNetCoreSharedFrameworkBundle-x64.exe
        
        "C:\Windows\Temp\{65B1C8A3-C42A-48F7-8454-FCB43ABA0190}\.be\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{D33A45A9-EF5D-4053-A755-B537F5417665} {DCD5439B-1095-474B-AB5F-2C139F545481} 2416
        5⤵
        Executes dropped EXE
        Adds Run key to start application
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of AdjustPrivilegeToken
        
        PID:1260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7252,i,711177383612964852,5294103570615532318,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
    3⤵
    PID:6092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,7173602228627911770,15333967582587706683,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:14
    3⤵
    PID:916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,4098033907943430387,14906387028472416269,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:14
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7704,i,17047472773581510502,7368625814275669659,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=728 /prefetch:14
    3⤵
    PID:2988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,8156675909843873389,5883031016895055754,524288 --field-trial-handle=2084,i,2651372978908916541,8254909742401794791,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:14
    3⤵
    PID:1192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Loads dropped DLL
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:3012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x290,0x7ffa81c1c188,0x7ffa81c1c194,0x7ffa81c1c1a0
      4⤵
      PID:2808
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,15993590101441541082,3386607260754717955,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:11
      4⤵
      System Time Discovery
      PID:5676
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,6387458420961409130,4436041399578619062,262144 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
      4⤵
      PID:5924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,6395318013839573662,17678137355472408716,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:13
      4⤵
      PID:5936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,4633967260130529245,7898530136560328272,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
      4⤵
      PID:5448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,4633967260130529245,7898530136560328272,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
      4⤵
      PID:3268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,4955615075417877325,14608212140258322895,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:14
      4⤵
      PID:5160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,14201177122323552969,9795780528264247063,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
      4⤵
      PID:4512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,11852154700756008890,4961210830530651904,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
      4⤵
      PID:5736
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,15807309566322702490,2335113570840024317,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
      4⤵
      PID:888
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,12324271377492381695,3376743139466012829,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
      4⤵
      PID:656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,5267269844046829511,12194035715305775464,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:14
      4⤵
      PID:5176
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,16898261422774340983,5554087030414905106,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
      4⤵
      PID:4948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,10838552789788788951,16290532474283244680,262144 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:4984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,12326262372343352938,1141160148962544100,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
      4⤵
      PID:1652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,7097456083934554647,7771961201514962683,524288 --field-trial-handle=2208,i,12264870049746305361,2210955149825258704,262144 --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:14
      4⤵
      PID:4664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3760

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:2060

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:3108

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3832
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding C0923146BA2844A56F59494E270C352C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4020
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 4A1081905C6D6FD899AEE804AC523015
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:6024

C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
"C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4580
- C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
  "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260429005911.log"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5376
- - C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
    "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=572 /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260429005911.log"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of FindShellTrayWindow
    PID:2496
  - - C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe
      "C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\AspNetCoreSharedFrameworkBundle-x64.exe" -q -burn.elevated BurnPipe.{0AE29AB4-4DD6-441A-AC64-3B6483C43CB4} {73B4E801-840D-4C6D-9109-D3E474FF7C2D} 2496
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry class
      PID:3884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1384

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3596

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
1⤵
PID:4692

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:5224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e586688.rbs

Path C:\Config.Msi\e586688.rbs
Size 41KB
SHA256 408bc435c3301624c04283627346500c765c971bf9cdc15375ea5aa40a0f2871
MD5 18031b4c8cf823ab2035330f9ab1d75e
SHA1 a0a26ae87afe83b449716ee8f71c908aefac49f5
SHA512 bc34c5283d62030842334c4e0550d69fbd7db951b4cc9049746d0d7c858d591c01dda466f952945cdc9b06a6ef86e05fa219d00ac067cc88e38ec236a403f32a
SSDEEP 768:Wxt29kz0qpOHMB3jwKfeW5N7xGTQOhWMUNqUoZuxZ1VDsMBxh3pyN0KuE5GE8Yez:8t29kz0qpOHMB3jwKfeW5N7xGTQOhWMm
TLSH
T1301351C1F647C2C6F223FD93AF507F1AF619AB435606E80A05CDD2688456E98DBBC4D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e58668c.rbs

Path C:\Config.Msi\e58668c.rbs
Size 85KB
SHA256 7bcd80071571797e54a6c0092a7fe5dee8bf7713141ee86b63058aa0dbb19a2a
MD5 7083d1edcc8a6542b2b00c6648c8f54f
SHA1 854f0df782b8cd3b9e0170c52ac7fa1621f0ffad
SHA512 c49088e3a75765402f6665e3a59de1587c903f84a4be80c11dea315bc77e44ad9b00930cd46f3f4d48955e0e3a032703df711a4c284c21693eb29316fd43fccd
SSDEEP 768:gBRtA5shu6y3BMmwLnM7i7jSxvmEcdUfRbvrY3Bacxr+ro:SmR32le+UYR6o
TLSH
T16E83FF43F38AD5D7D322B573EE212F1AFE029F524112D80745A9D15C843BFD8AFA8896
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.version

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\.version
Size 50B
SHA256 1955255d8a0ccedce85fa76bb7362b37bec8e5d5364b29dc12962760ab1371c1
MD5 9b9ded3a8518e803c05030ce27c7932b
SHA1 1785e50252fd5b80efe94376c0c8fdda404cfd60
SHA512 3322659e39eddb66b0e4e51d6de1f1c49cc92d7841d9d612c9bb753bd4ed9b11f877556c372235d7a24d4686b9e69fe70fc83a4c9783703b8f002bcfa0d48255
TLSH
T1A890029247152F0129498102449F4CFD35611701321A6405405D4B6852B1265811A0B6
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.AspNetCore.Antiforgery.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Antiforgery.dll
Size 118KB
SHA256 839a7c058d18f70f031c7bd7a26b3397f1d5a048284ba7f40ea072465174a110
MD5 d843632f2093e68039fa3d1695876dd1
SHA1 3b156d6c228eb9de5a4b101b338c3ff4ea8f3451
SHA512 f1f64fadd6d2fbd4cb50612028c43667e36ba07ea4b0033b90ed4cd103b824f28b14f78478b41d0905b7f522c0c17889f0673f45a2b1c2c2d7c0653e7e1190c1
SSDEEP 3072:en+cmA2GrBNPhPYe6UEh+8v3tzlVCX9H6WY:NvA2GtNPrmftom
TLSH
T1D8C34B04F3D84726E77A4A7C82F38D01F5B7F1821311E2EF4AA5998D1EE77C0A67061A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.App.deps.json

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.deps.json
Size 22KB
SHA256 27159fd96f3524379b0a8320f6a8ac22411c6d035ed76b1635c759e4c888192c
MD5 b18064fd2606b6d5ceea04791632c6a6
SHA1 ed5328044fb5b31e25c4aac18ea4da3c58ff491b
SHA512 ab8e4dba8a07bc7686f009eab480e370bb1eb10578b2e751b602f5f2842f011b83efe5bb04e7c103fc3a7a986ef47eeabaaf3aa1a0fdc48b6bccb45b6094636e
SSDEEP 96:QfUp2Z+LR/Ada5ZQDClgcYjcwcWVnWr4LdEnNLQdjOi8CCO/jU0UhUqUHUHUqUvj:Qil3aZCUeCfX/A8nzxd/
TLSH
T158A26A75C4400AFB4535BB9E6C782A4AF275039F3182544EB83D682E8F77EBA8055B7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.App.runtimeconfig.json

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.App.runtimeconfig.json
Size 289B
SHA256 13d6b39073018e2634688547903cd4b503eacb0da4eb31bd01fd5d40f579e7ce
MD5 5a2317cef7301a0a1d20ef12260a9878
SHA1 2e7d1aeb633fb390cfdb7fbe30cd7cc9f5103772
SHA512 cd07d2867713529b473bc646971afed0d866aa96ec1a6fa3851464672fb20ab84f2e6dffb73e40143fde784cb524c30b8e3f006cf89865915bdea0d857be9dec
TLSH
T180D0C776EE116E6712F12B69D0B1C683FA21A36B0014089174FE6E0C1F36AB64006BA9
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Abstractions.dll
Size 66KB
SHA256 28f813b94861e7d48f448f8c17c577957d071e9a08308165779e59519ea5b9f3
MD5 aa21f685f0821d7086a74ad0951d9993
SHA1 036b792f318c96749e1b5b0ceb68fbcec9347c8c
SHA512 1af7cee2fb8d40d9f661e63690ca3ef1f2a4bc398933aea0b6840037c3dd0787a6fefc57c5f898b59fe3002306db0b74258370838ce28881dd7ef9f376eb9fe1
SSDEEP 768:RiDGrx+UlOsOIBHC12zrWkOq2Oq2jnJ8qkG5Lqk226KaFNDm9PD2K3AZWZEpuQLN:R0Gp3BBi1eTavDKaKFQOWNL9kzw
TLSH
T19563AFD6C7D84312D67A133CD2A2960AD634FB8B5341EACF0A24EA4D1E77BC0D731669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.BearerToken.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.BearerToken.dll
Size 70KB
SHA256 95d072773acbf992da5c539e6c10f722ffb4ff7e4b71659dea853b41da5aaf36
MD5 41d0e49b317cd19b7e84f733fad9694c
SHA1 83906f08a4161d534292bbbdcb0c4d2a2c55f821
SHA512 814c4a323a0068ee481f3f6a36721452b4aa32194709f2f568be6665e5d8a606d2ae76b274c84414d5656311940354bc3d3710c9085add981e5232bfbe1a053f
SSDEEP 768:FgLrJV5zWmoAmkUF/urGJQwItWAjf+RYTP4coAplEa0TESMfJT2PQLF9zAug:F6JfRcF/urGJQptWcGWD4vAezkBAQ7zM
TLSH
T1A8634B0583CC0606C7B66278A273ED16E670F64F875EDDCF4988A5CD1E873C1AA3166B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Cookies.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Cookies.dll
Size 110KB
SHA256 6ac58347cf336f707ef1a3273f47b34932a7e3d063306a917982d5d75ff66cbc
MD5 3dbb4aee5f3b4c183a782ddd0f89f2e2
SHA1 09a67fec31fd251364cae9a8315c71d1ef1a901d
SHA512 36503232add3729f7f492976894ad8f82bb11b72e6a5bdfdff57f7ede50a290ba1ecb955eba77c2cc0dbb9752fe59a206547d8f90bb2c5d8b60951223da37779
SSDEEP 1536:NoDOoYPhEmp+TorDgFBtfdZ5WgaLvpG6RfLSFjeWBzU:No6ympCFQHL1lmtrA
TLSH
T14DB33A44B2988602DB6B873896678E53FAB5F6531710D4CF09CDE98D1ED3BC0E5702A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.Core.dll
Size 90KB
SHA256 0bd32eff8f4887e925c0bbb204723c873f9a0d120eb9a62a9630c11cc1f8e316
MD5 0078ee6069aae4863fca27f17405bdbe
SHA1 7ac175b3f27401c34539dd34a77bee98ec602b81
SHA512 8eb6698f382faaad8e4da7e675e26f178068e6fca60c8586ceb81bdb8e4df4d085a060e2af12fda9705c1f940a6748392b114da7b5c4689ec6059e795dc77b6a
SSDEEP 1536:7usflkFbIdD6rnAG0FkTmBbRRuVUCc4e4zH:70ZIdDgAGNmBb3uVUCc34z
TLSH
T126934C85B3DC4B03DBFB5A7D87769902ABB5F4479BA0E5CF048C888C1D96BC1A570227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.OAuth.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.OAuth.dll
Size 98KB
SHA256 b8a5cf3245b17ff0f7d6516f9dbc8286a882672ae5b992da52d1f98f83c817ae
MD5 bbbc185db6eee3ef2222ca2b86fd68e9
SHA1 8305769014b34a83a27d42a56c3053237d01afd4
SHA512 c344496cb740430d44864034fa12b319cbefee6ab3be9f94d3d139dab6681a1cb8d7a0451c7b21504fa549c093cbdc726616bcb527d05c1d2d91d969d7a1ba6b
SSDEEP 1536:7poluIJLgqzhlVA60aIykDQ/VZfb+R5bgNWW/52cb4z47:7tkA6LJb+5bgNWW/gy407
TLSH
T1A2A33A06B7D48706C6BA8A7DC9A78C45E9BBF68B1321D5DF0884958C0F93BC293F161D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authentication.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authentication.dll
Size 154KB
SHA256 fdad869088caa510423efc18a9d8654cfbff9785c075597b18d7d0aa39718573
MD5 5681b5b2e27c0abff467be36460b6bbe
SHA1 07ba53f388b287aad4906cef60c0327d079e09bd
SHA512 92d8816d2d57b96a03e28bb1b548b95a3759e31bfe405fe94ce1621acdd604fbdb1478255d7b9fda9da715805fd7ae1870817d712ebdb540e7dc1c6b27fce835
SSDEEP 3072:94rPTQxWwuXYlHsb9Ts+vvEQyygctoKqW47EplPZmPJDuoS34RTZEfHgq:0LUTY9TRvEQyygctoKqW47EplPZmPJDw
TLSH
T1B8F31732D39C4B22D3BF5B3892735802E6B3DE831361D5CB4599A94D5E83BC1F271269
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authorization.Policy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authorization.Policy.dll
Size 78KB
SHA256 311a121dc09ec38c6de2a19488575ba82086bf9dd8d1d138afd107b237a17fcb
MD5 9574f30483797cc3a5fe57254228be2f
SHA1 100a20a7760d87e8dad616f88bc35d0bd91c9ddb
SHA512 6e6d4b53eb17cd54c0392d9ff5f9fbdc1fc8775cc1d2564d51afdeb3546010120e509784f633ed8cf1f9166550a1f8c389579dc6deb5cf845d212814e0d0745c
SSDEEP 1536:N4QNT/JSagO7epprm1UJlp4YO3DiMuMB1zE:N9NVS5p4YciMl1Q
TLSH
T15773296583CC5303E56E917CDAA29D07E676F2D21721E4CF0988E68C1E87BC19371D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Authorization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Authorization.dll
Size 106KB
SHA256 3bdc00cb037fe490df07690c834b38b2d2707908255bd3d45662cfd41f2ad4ca
MD5 2bf54b16eca071b9ad0145133c56efaa
SHA1 fbd98d3e55afe72066914caca5bc315947f72a25
SHA512 f451a2994153abaef58bc7addd5154d640ab19c6bfda3c42bf48ea5dc7fdbb9702c50cac870d8e44af092f65e860e5022ac531bd541d348fbd6743d08d615ddf
SSDEEP 1536:XGw3xImbke9OhlEplMlU6dnK+g90PtpIdrRjn1IG0ESPfTaf0EHt6YfVz3:XGqxRbk2OhUGlU8Y0PgNRjn19lSurL
TLSH
T17DB34B15B3E88301D66A517CE9638C97E632F14B6705E7DF0A4CA9CE3E833D0D67252A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Authorization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Authorization.dll
Size 54KB
SHA256 e9df215562e7eafb9c8b05caa5f0f3b8c722f5808728ccc99bb852dca78722d3
MD5 4a9033a4deec31de96895941abe9eefb
SHA1 795443de15cc4edceea2fda76e98f2f413496197
SHA512 172e86b6bdd5f3f69148d1d8e5b863047d9c1b59b37934f1a0f4f7d3cc62ecac5463aa97713a907f0e413079d13ee088b8d0c4ad7243c4d599892124faf16b8a
SSDEEP 768:wNnvN3mYhoYaO+0M2SxX+msMZ650ZgMt7wo/RXxUP7N9zI:W1mgzzMfrgMtxhGvzI
TLSH
T1AE433AA283848302DBBA4578D7B38D23D6F5F54A6B01DADF0240E44C2F977C8D2756EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Endpoints.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Endpoints.dll
Size 706KB
SHA256 aacc21dd54f162305ba2bfcf6bf226b09363c4fc0d9583456cb6e53e3866270a
MD5 14d6aff10a472b35d2683a5f1784fe0b
SHA1 ff7ef6bc2647a0795c145fd6fe4b670470414a4f
SHA512 37f7aa8372c23c2c567a0855f83ba38ffa081c20ab176ec050245acb965682ae1a34a2b64ed557c0e69ec6910820ddce484a5ed5f4633c7584f18a164f08118a
SSDEEP 6144:IFw5UHj2BP1GCXFK0gzpeVpFzDe7nGN0ACw8g8yrmfjG7zzleI1Ds6Ygdukq+Cw:IFwODqP1GCpVTDe7nctJe6fqJw
TLSH
T1D4F45B23A3950217C7AF55B881332902EA757406A715CCCFA108EDDB2FA7BC1A27E775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Forms.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Forms.dll
Size 94KB
SHA256 4dc18911a6df739e962cc2db48999bc897699e9eb91bab8ae5bea54d47bbd962
MD5 646533f54ac67509c50fbec123025f14
SHA1 91e4993d4fae71b97246318016e907789f068753
SHA512 12f4165da36b379973a005810af020ab40450c192163236de5fa43f645d01c979099f5f7966373efa8bd7b6e1028df54632f4f734af1f70179bab4419238c61f
SSDEEP 768:pYy20zdkOop1H/oOPTq3CHBsz2CUCRD5yparhEIbRhZMv5150xDblz1oTYVG4SdY:p0/bz3u5zrhmv5MmTiGG46zy8Yvzq
TLSH
T1F7934A1973888212CEEE94B9D2A38C67E675F4DA5712D6CF0888E5CC1E937C0DAF151E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Server.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Server.dll
Size 846KB
SHA256 9e342ebc6157e45ccdbb881f6e2dab5b489d4ddf9ceecf6be87890b6d6ee51c6
MD5 2b2f7eaffd6fd88837c692f0ac4943af
SHA1 5ef195bf109a2b10de34b314c08d0e5ab9a07abc
SHA512 3f6f0decf6dfed1d69f2837d96b67334c31ac80cb17faef3bbde43f3677e97eef5e434b973a54ced0258387883c667e566ec71b8c77425a465c94c74f431b6ae
SSDEEP 12288:vSm9PJjnCkgukL3UL21vIKnYaZnypOvCUCOLj42/i+7Wdq:qm9RjnCkIL3ULkZnypOvCUCOLj42qcT
TLSH
T1EB056C42A3E04602E6AF96BAD3324503E773BC456764C2DF5088D9FD3F66BC09936726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.Web.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.Web.dll
Size 382KB
SHA256 a6a4164fdf35563a1bb3eddc5df9daeb21b585c5547fb74187b7651ab155f1ea
MD5 aae7788a5ef5a2366fd742c458199eed
SHA1 f9ae79bbbdca184f489a3ef4ba86e4b83b650ee9
SHA512 53743d2f79f8dacaac395f35271d201c0a0cf505af026c46c23cda60697caf421b5b136682133af6f7b7502d69876653d61fc1d429b5bb0537cb4f2f4c570c4e
SSDEEP 6144:T6FDaVxa2o/SDOBlLenGpZ/Wc5nbJLT2LBplYK9pOGEfB:T6FDCo/SDOzLenkxv2BplYepMB
TLSH
T1AC846C26F3945229CEAED27DC1618466E372A28397D2D3CB8544DDC9BF4B7C0A53A313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Components.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Components.dll
Size 806KB
SHA256 920905ca8e40f0e868956136498d8b3c262529e00e56848bfe757c4e745b34af
MD5 8a4873727682a7e7c219110989787149
SHA1 d5283575b77e3b865b55881d98e69fec00cb804f
SHA512 c5962d7254d1e7f936a4e1f5a2cb89276d6bf587c0986bc1dca7e14a5dd50a68caa3563257e57fdbf5bd0d826eedbf79e595b838055456e38fdd98566a72e6f7
SSDEEP 12288:VqFI+8WZYqreGpsso2Nr2ZYqvZI/QRfSJQAknVFGdebe4mS1+TRLVc6:VC8WZfzqvZI/QRqJ3iVF5e4mS156
TLSH
T189056B2AD3D40B01D97EE37DC23B8511D6B2A9975371D2CB0849E9A83F67FE09632361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Connections.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Connections.Abstractions.dll
Size 66KB
SHA256 39700ffa512e75bfdf4161cfaff08e5747b321efd1c020de5006f43375b65d56
MD5 c18184cf4815296189e8f207177972e6
SHA1 a7182b4bad1ea6e920d60c96a387e72ca08cafb2
SHA512 e5a253f7c5195fe119e594efca174acc7f173fb1bf38d404317279bfed3770e4cd00b066bae2d6e7dd4464d862fecbdd06a3e67a3fc197cedc931664e62283d1
SSDEEP 768:r31SWOP7ntkIvS8AMXoA96Floz54LXNtt1/+dZwV4VGI62KiDjl9ze:rlD18Ani5EXbz/KZwgGI67w3ze
TLSH
T135637C61835C8722EB7B677DE25789458675EF822313DACFD880ED188D733C4663136A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.CookiePolicy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.CookiePolicy.dll
Size 54KB
SHA256 327402de3a948c67637060e6640a4c0f7bdffc1f7b5b29a91c240b4ba3944133
MD5 8ff2b01cac41b334eb53ce1fb383a5b7
SHA1 512bc9beb2f539b74533a535f6fdf6f7a99f61a5
SHA512 a6a39d3cfeca593470a73364576c8ab812b774450ad8765d2f96f0e44c49f6ded2eed9eb202ac107987f518a5d2a2b9b17713ac7c1bb631c6749415a2e426f23
SSDEEP 384:eWWa8zxWikM7wI0OjfQ6UXo3/x+xJvEqqqD8sf78gtZwkvRQo647C5s+TfhQGEER:InjNU43/xIBP8dtQrxFhDjgrr9zvbue
TLSH
T188436C1A63D8430BC3395538D2738F6AE830F6831B52D5DF48ADE69C0E67BC19A7214B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cors.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cors.dll
Size 90KB
SHA256 f0dac026477d8c0b8cc3e3cf9123d08286ef21b2fa0b56a2842274349495a4e5
MD5 3fc08deb075a83821be8fbbdcdaac6e1
SHA1 364290fcfd99ab7001da51cfa40e063bc9eb5226
SHA512 3db6fb1e008614d04ff7bb266641e8e526e621952f399c64b5ab59998a9407d84f16a198a051fff5a7466809f1ec8518135e77a51e8765651c8ffefed1cb56eb
SSDEEP 1536:X/oxeqyxAuBJhsG6J7HuvCPHQ2lj81PcjZkazN:XQCAuBQGWOqQ2ty6R5
TLSH
T18A93490A73D42711D77A967CC6325D06EA31F6532722DAEF8C64998E0FC37C4A53272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cryptography.Internal.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cryptography.Internal.dll
Size 106KB
SHA256 8a01e5d77e0f954517e81b0434a9a001567ea6b43a207ba2731d050b38496e76
MD5 59b8d9406aca2e4d9d7e174b4acfbb05
SHA1 d8d7531222697af71b67127b9e3bdeac5b42f40f
SHA512 38c1eda8237a39d09cb0d341c245744ee71d2b403f61ffe4f95cf2b437f7a7178b2c21600728c7adec9845f4fd9253471e6e5444688598fc311e1308423ea9b1
SSDEEP 1536:u0tKQy1UtghHiFYCOn3o9OZGDGxfJWtWyCPT+6XPP9tda/xPvzqk:u0UQy1UEH+YCOncDGxfJWhCR3da/x3R
TLSH
T132B33A103BA4450AF5EDCEB49A77D945A670B057AB01EECF11C0C0AE2F57BC2E7B9225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Cryptography.KeyDerivation.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
Size 46KB
SHA256 a3d58c25ec403a6a80a4b43556b15665edbf5b7453dd487d1c284ee5f475bec9
MD5 5025b642fa95db4c7a35e0b1bfeab841
SHA1 a1035d29f6f0bb70558fc7bcd4c93bf4d21b2fcc
SHA512 b3886c1b5395ecfd58dc054dcd78287485283b2dda80623892a70d84a5c8ab70eea865092a6b9050066897f5eb07026916737cc9c7f254f08aff5621c718ae87
SSDEEP 384:vWsKB7W/jqk50qTounnhscIfPccjO0QaY00bPG8o59muPDHRN7/SNXuifSR9zrun:eIqk50CROBQj0cSjWlfe9zqwC
TLSH
T115238D59A7688207FB69DA3985B3CA4ABA34F5471783EBEF1014D29C0E837C1A73251D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.Abstractions.dll
Size 50KB
SHA256 1f22e1abdb7ed38f52c92320e5ca6ed34cfc9ca0c7b4eb0e4dc3703a8ffddc3c
MD5 e3ea1869290a2345b2679785dcb6dd97
SHA1 a91cd2276788bf7eb144ee6e0c2b09a031fe2146
SHA512 92cc11354f27cdad536f04cf11be75e355a5bb101e09428c90fd95750bcaa03f40ccb75f4b063590f55fd72f5fb8791b07509f351f374c33ea5025274c1a5e03
SSDEEP 384:AW/i5DWX7O0wbidbDgPu3aAM/dhJvOyYNBlEm4Dt3hYpO+PG1KfxVXU1dnMUiPDE:qdXb4ub2RT4DYI8tlU3n3e29z0wqhw
TLSH
T15B336C0497D88203DD7A493A4A3B8D9AF5F4F5C317919ACF11D8E18C0EA37C5A6317BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.Extensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.Extensions.dll
Size 46KB
SHA256 c29281df7bc54f89bd7c92acb910ef3529fec9ec747adf162294519a03746f1e
MD5 52752320459133744f725c48f8fc58e4
SHA1 dc316b02e76f0e1fe2911b0667147ceb73186ccd
SHA512 65090f927b04ae0815ab8a189836468e67060342c0191ae1809728126d943585ffbab84481687450a8a0c5943749e3c24ab5e35cf6bfbf2660fcd6a609e0dc0e
SSDEEP 384:OPW9lmqW1bIjw8dgTgv1X2eu5ISLsPynkg7Hmhp7ehPGqSA+7s9/hljHRN7mW9R8:OBhcb9Nmet8uYm/ymAdDjp/9znm
TLSH
T143236C6497AC420BEAFB55BCC5A3DE02EA35F29217D2D9DF1084D24C1DE3BC0963166E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.DataProtection.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.DataProtection.dll
Size 422KB
SHA256 fb500a959712f9f29410065d900a498151e572a1b61af1bb527c8ef0486e7e26
MD5 9079c77d2338fad12fc4827c7a21931e
SHA1 d52020a1869e96b1a756fd6ef245ab8c1fa3436a
SHA512 e66108cbe888d1031cf74d6d967b6716db033dfc6e6cbe2120c9d7cd5caa0cf3783267b521da7e8e5be0a444df620b3adc06a4b150a61acee87920e9eaf30e10
SSDEEP 6144:xQhI/jdLAGE9kn9MknV5GyY+oo0bB/zf8pMMyIs1zEI9HpOhdS2iCB/kR3/7:xDkGEwvnV57Yn/oMMyIs1zEkwi0/q/7
TLSH
T1D4946B12A3D40602EBBB97BD8222C101E535B71F97A2D6CFC545CD997F5BBC4863A322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.Abstractions.dll
Size 34KB
SHA256 c3bdd06ee55b8e73a71f89f622d09049cce6cf5e85a0c893ecf0469eb7d276ef
MD5 62df9dc794b26ed9698f7f13a4f87b56
SHA1 a88e6074d8c60862b339bc2d6936deae0969513d
SHA512 186f05f63cd7b62e90e91d2f34f142e5b6cca4d4d836337f099dc5a9ca201770be1edd743b92fc54b58e225fa36428782f341fed74a9129dab1217d7f5dad129
SSDEEP 384:PyWOrUUWvmsNI+GtYjFpWe1ZpZfG2ENiB/hljHRN7OOER9zg0uj+:PHPITopWUprDjXo9zbuq
TLSH
T19FF25BAAE728532BEC9B0E70B568DD573D39A7C61B00E5EB4140E6450E937C4EB31B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.HealthChecks.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.HealthChecks.dll
Size 50KB
SHA256 9bee921d35c333cfad8ca8ef662c608e0103c21e1b8ac84bc050fb5617114be2
MD5 60a47e8d52818fc7ce174bfa5efe526e
SHA1 e13102f8a87a6980d88ac2c2b3bd65d4c7ca9081
SHA512 aade964221f3a62f4981cd5465187794ab00cc9be81d87ef03a07ccff873c7c0d20891cc218c19063d342620aa56e6315ebaff75db267af683ee32fba5dd4b7b
SSDEEP 768:AANVt0+zcn2JbVCIkSKMUrpyp4R26JlDiP9zIE8:AANVt9/CXSpUrpyp4R2OYzD8
TLSH
T13C334909A7E48306DA7E957899239D07EE31F6476721EADF01C4E8CC6E937C4D931638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Diagnostics.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Diagnostics.dll
Size 442KB
SHA256 21378b12857853a3f8e91ede56cea5177a4341345fea91ed23797ec055bfc1e2
MD5 b722834fd884294e3bea684f95615b65
SHA1 7be86dd4da09d4d2e324f8a6dde51e6e85848a9c
SHA512 404e79c91fa701a2c2b6dc8d0ec123e4cf034120e85bf7dbf510895c48ce65641986f7fc9aea35575f1ba3c6af78e6aa173c64de4aec0491e729608ad49e00d4
SSDEEP 12288:BZbViVoFK1FJuBd4Ctxy0pi20Ufun+2/wLQU:BCV5qoovPd
TLSH
T180A4D52627EA0009E2779A784BE27465EB77FA531735D48F005C9A4E1B93BC18C72B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HostFiltering.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HostFiltering.dll
Size 46KB
SHA256 ca0401fc454981f4c36dc68ffea795e5d05b69c5cb52c0a0985c6ae4e6c5dbe1
MD5 270631787f976573f89af0e70cbfb26d
SHA1 ec490c8460610133382a57b56ea75f43bb458e76
SHA512 01be3245f5a49ef24c021651a7356cbe7bc00fc35f6312bc2e9a7f8a94a39776fded7c15dc7e5d70518c3841c217f7f51cdd94b18b50e73779b94eda67de7496
SSDEEP 768:NyQXigg/yKOl6GBueQwL5yd4DjHOkPO59z1:NyQSggIx/AoHO24z1
TLSH
T172237D9263E84206E7B65D758A31D90AFE34FB838B60E6EF06D4D64D1D933C0E631729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.Abstractions.dll
Size 42KB
SHA256 3e8290f6eceb8a7e44a98a5d019feac68953b417686ce41ca4bc748d6b58cf3d
MD5 fe33e411a76475d62e8cfe7270f8a53e
SHA1 cd6861e89b061164e0b9d8f621881ba1de07a346
SHA512 e72bf04df64e74da3e090d6e8f61e608301760c656e568019a63e6ee6b30427a6dfbc74cba8806f484283894a1ca671544edf11648a9775d635c1e3a13a7102d
SSDEEP 768:ZRB44xop0d2GAzQDbR/DjB9bmKAU+9zVYeL:ZRB410v1/bb6zj
TLSH
T18E134C96B7988342EEBB1AB0D5669D46BE39B3C64740D9EF049CF48D0D837C4D631638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.Server.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll
Size 30KB
SHA256 de937980bfc694374c34becc5c853117657973a03128619b43032dcc31b26cbc
MD5 2063f623f1fb20fbd11930283407338d
SHA1 2ec6109616bbd2570b4fcc958df6ea788bfef984
SHA512 71440af093db473f5c05879d2935d652b5f6f0681fceed6e5db16c842c22cccb65bf50f05084efcd4270f0df2b27041fe4ed19f937b6d68cd02ff67f75785237
SSDEEP 384:HW/ahLWV/YrRNoKHaURGTILF/hljHRN7PsYER9zg0C:jVt7nDjTo9zw
TLSH
T197D24BA7EB688303FCA7193165A9DA8B3E3DA3C35B40D66B0194F5851D637C1EB31638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Hosting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Hosting.dll
Size 450KB
SHA256 b04d00c39c0e7d14cf6d934f107548885b2305158e7875f5cdf583f75185e26b
MD5 138fe46acfe22c90fb8d233adde899a1
SHA1 4363c4665f476b83aa4fb13e11b8a6fff147fe36
SHA512 4e71526f60a67f161d2e43b1e1deeee102e1bd77b5f8cf57dcb404b68808ffb28544119f0a677d5a6b80b45a9061a8cd0da900a360bacf295fdf0e76919dd7ca
SSDEEP 6144:tOSBc88Qm1R9Ayyz827mqm4zNEIgi1h+1N7XaGL+bHH3Mq087:kSBeTAyyIMlmGNEIn6N7xC
TLSH
T129A43A165B940201EE7F56BC826B5051E573B64393B2C6CFC10CAEE9BF9B7C89931722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Html.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Html.Abstractions.dll
Size 42KB
SHA256 0b59c709125d746d4a9fc938ced9281fd16709856653590a6262f368d17e1186
MD5 59673e4f29b6020167cef95ec013c1eb
SHA1 7c2214916c313172e561caa78da56ea0210319ac
SHA512 778f594081b80a5751b6ee68a2f10ee347a2206e528b30dce2b4659f35f789cf3a4f6de3552e7be477e5d73e07b44f7166e25139ccb89a546be572ede7ab840b
SSDEEP 384:JWFIHtWBVmHAUQSg/Ij9hZ1v08nPk5PG1XKfsdC/hljHRN7exR9zQxihEb:PgmHAUrn91dPySeFDje79z8IEb
TLSH
T106137CAAABD88203DA67547892A3CD07FD35B6931B52C5EF159CE58A0DD37C0DA3063C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Abstractions.dll
Size 314KB
SHA256 c22dd4f939faa66e93fab9c9daeb8c28845ba023e79a55136b4699439c4a2b01
MD5 dceae131e35b20f53607ea92b5dd479d
SHA1 5b40f64b68720e3a168b475b5f54c3c10513b84c
SHA512 89d1980219ba3183ec37b8331750dd43daef7cfbe3101be083902e778ceda5a290da9954e1178bf23d354d026343bcb0bcca8a541b2f0e33e61d6a44fc6a28d6
SSDEEP 6144:hMmzgwtAMADwGTgfHWEIdlMm5UwDvRD09m90x8:hJzt3ADw6Q1ElMm5dDr28
TLSH
T161646C16F3D90247E77AE1BCC163C401F67968925392E7EB1658EBC91AE3BC0EE72141
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Connections.Common.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.Common.dll
Size 54KB
SHA256 da777d8cc070afce6806dfe27c1d1214f2ca013cf857a2f9c14cc5e14f406a41
MD5 83e314b44a820f871baf3dc4ca2ca777
SHA1 71618a25c35146cf60271a52757bfd2a141882f4
SHA512 2712eb330165fbb8f623349f1bff882e008e8cf2495490c943787dd88c882d3db440711676e4e0977b2b20427f15f88629a74e8d14bc4db3636731f5fb567bfe
SSDEEP 768:GDTloNGOIcmupYTwyzhDAscCyAe5RYfw19z0wf:GDpqzmupYTw+hDAsdyl+wHz0wf
TLSH
T152436C4893E04102FA699A38D1BB8901DA36FA423B32DADF9585DD8D1D637C1CA3177F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Connections.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Connections.dll
Size 318KB
SHA256 d9576d7acc867dbd205b1cbaacd887cf8aa6c1303aeecde9c1aeb083c5092855
MD5 742b11dfb3dc26980320b3ce518abbba
SHA1 77c40269401e38c2f1b661c9aaa863bc78ccbcc6
SHA512 ced70527163636a0563c23ff38d32299743cc353c774a8ffd00897842677371964941061c5ef2f581d62ee775e3656f1b9ae2efcb8d86ff0e105f428df690900
SSDEEP 6144:3k56zZy3EXs6hkM6KSrxYQEjTacngKo1aaG6:pMEkM6KSzbe6
TLSH
T1C2646B27A3A44A03F67FB5788253C141F77DB8428795E6DF065C69C90EA3BC08D7229B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Extensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Extensions.dll
Size 682KB
SHA256 40b517b64a44a48f00de99f2c483d11789119e543b0cb8fde81857a11eaa43b4
MD5 e02a29d50e701ef262f2e65aa20326cc
SHA1 854558dc714904d954b12b0bb283d024b2903ef7
SHA512 00c9a7d73f6515580513a69df98b892918e8141fadddf004df7140ff213a390c6b93040e89a64b8fd3cf291b6ffe9cd1b12d307688bb6846767093a297f87f01
SSDEEP 12288:t+UEl/xoZolQoymkYwFABjbyajk//CA72blWB7/Cn:tGxhYYwFq6aqyJj
TLSH
T1BFE44B17B7B84E00C33F9978D13A401AD771B89363A5CACF2554D98A1FA7FC29A39316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Features.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Features.dll
Size 70KB
SHA256 8bf8b3f935006c025cf86c57013d5f223aec0bd6d12598594fc2dfc4412a7da0
MD5 f2f3168f4dad52fe5ce4b7fa7a9be888
SHA1 8132df122b6f9f33cd13e075abf1fa8ee6f1ed41
SHA512 c486b2da48bbea644daee799500665ba30efdf0cffd1b479ab935b24387f9d310731bca75fd68fe42158a535fdb4b0ce22f3eef916db7584773ffaa13edc323d
SSDEEP 768:OOCOJxxTmplWbpSVtVEA8q19ag5MHB1yRDUnX6k02xlzQWpZnyO5eDyiJB9zt:R9xloCgMHnyEFJ1fiVzt
TLSH
T15663F86ABB18977AE62D13BDB2C25312B0FC62F25312EDDB2C659F190C437C1E235846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.Results.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.Results.dll
Size 242KB
SHA256 e4a1a5091f847ff3f1bc28bfad4501b2a7d32703dcb7b28970df53ac36d9ffeb
MD5 92cf95021ea562a5c5e51b36e59caff0
SHA1 f9878b8ee752696114d57b0c116c11382d3f5eb6
SHA512 1141503ff13655e08e21de2a8ea9172473ab543440a55de54be874adbc778c376e84c0c9ea422a0726ec4a23336d503add0c89065cd740ffa15d17b5132c6285
SSDEEP 6144:kr9FZOq0SFNqgKpi5i0sqtqdbp0oz/PRRGR3y8sb49GRJJwlb:krROjSXq9pi5i0sqtqdbp0oz/PRRGR3B
TLSH
T1E9344A29A3D40F07FBB9977C8297C601EA72A5068351CACF17A5E58A1F83BC0BE71715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Http.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Http.dll
Size 294KB
SHA256 488b0e748694544cecd35a651113b4f5ecb794de0b9e6339d94cb915d9e88126
MD5 afed7d656303199db6ee8bf4b2e5e64a
SHA1 11847f69053040e39d9777bc18d23ec114c70238
SHA512 42be945ccf748653115196e78fa7f95d6d84f38a965cc77c128422ecc1538e9b3f4943cdc20e144bd912d4d2cc2329d97819dad2ff08ff30d9f2e575b5fda2a8
SSDEEP 3072:18kMskEzk4FJ3qKmFAFbrnvfLgdg4TNp27XtxKnnDjkG78Zka1VWi6yBN6u3wDCK:akMABqO1vfgTNYYkI8ZkcxN6owDPYPzM
TLSH
T11B547D2767880613F63F717CC2B3D511E77CA247B392DACB06A4A9981E87BC59E31127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpLogging.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpLogging.dll
Size 194KB
SHA256 b0498b3f524b580b0ee4f06aa3647b7ef547ba0323ebc63f452969e4c6f577fd
MD5 d30a6a4286a30cf82ed2d279df3b2494
SHA1 c3de5faaad43c2f5500b57ba98ce79e46fb04c57
SHA512 8878e2e6b1387bdc5359949ab79293cdf58cc5a310fb6377df16610301a7a92eb5a8a3f93eaaa81c6a0d8a88e0b90f72041d4b038ed4ec61976be75624922674
SSDEEP 3072:6eIoVd7SaXlSTuqIns9LdUDseYrNzS/cGdpoAZb5td/4KJZPKo:Pj7JVSfm+id1Jxt
TLSH
T171145B1FAA947603C6EFD1B882579612F7B394431316DACB05989AE81E437D0FE73227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpOverrides.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpOverrides.dll
Size 78KB
SHA256 6db7ae31accea1c5000a6688d72c91596e814214c322c14076f8ac383eb66b39
MD5 e3589e7e6ec51cf1d6c9670c8cc2bd1b
SHA1 dd8d639f8b836dccaec02d09048a643c74728218
SHA512 57b1b04730c612d7be82525f596dd56e12f8c149903b4d45d7b2d9c2ab4aca101d60edcebbdc660e3d5a691a02c022b92a17f3c12616de2c0e8e1af6ad7731c7
SSDEEP 768:hE+s9WDIscAWkCCiPecEnZc2J8fIOm0sKKh7CRobzh9bqWMPA9fl1Bd2edvDUDjN:O7uWkCtTEZcwnuKhGA9Nx2wvDGdzn
TLSH
T171735D19ABEC9306E57E657CC1719D06A2B2F2A72321D9DF0E65958F0EB33C1CA30716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.HttpsPolicy.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.HttpsPolicy.dll
Size 50KB
SHA256 c8404f5b210a758ce8ead3c76c0fc7e75e0eaadf0d80c9eb775a77d784249efc
MD5 2f46d920bafef0254ef82aa9a5627cac
SHA1 c58bf9c7069caa39e8fd9f02d2062425e0994160
SHA512 83da05c00d65f8cb5125aef436084ff85a070812f6a010cf00b23be73b877926574dcb44f275c8997c60eafec7e44e5b1e3072d83ff79a4a5e894c07461e7a22
SSDEEP 384:PusWPpyuWOuPqtnbOYfcZxl1oDm7oHvJOhi5sRdZbF+mf4nLodG+6GCCnjtPDHRh:PxXPyCYfEl0m0Ohi5iFl4nYS8s09z1r
TLSH
T12A334B55E3944307E77EDA7882B28D06FD75F6871B20DAEF0589A28D0E537C4C23076A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Identity.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Identity.dll
Size 534KB
SHA256 c79799f77dca9408c5cbadf358a4349e5d5e15c4a82f1ea7ff354050f9614eb1
MD5 c9395849c05d05c9ee88f810465cabbb
SHA1 8ad268b96a34000d1fd6dbc714c92c3fc6a6fd10
SHA512 5aec2ab2f424eb21b5de1bde16f451d131bf0a135f41d152f36e12a1930e4f08472a1af26838228f850a2ec5ba909248b78562849005f050a5b295e0367ffdab
SSDEEP 6144:8knx/C45Z4mSTxrRXcTAnn5WcPT/1jvuP5fnVvnZy0t/lxz:8kxq4wxNXqAAcPT9v0VPZzzxz
TLSH
T1A0C45B55A3884B19C63F86FCBA739011F7F292038398D1DF8459AED51ED7BC04AB613A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Localization.Routing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Localization.Routing.dll
Size 30KB
SHA256 7373ba9b862aee1c9a2c7b534ef1865622957cd4428e8957434f9af1840baca5
MD5 f4bc7008e32ba7bef50edde9961d8753
SHA1 25f0b61bd5db25f853d720060df5a33ea4e6e6c6
SHA512 aee57f998afb6524c223840e1f5747eb7b22e813d1daea93ff3b7f03314442510a6597302d54379f85416b7f02682f9d10634cd442a9e404c9ffd7831507229b
SSDEEP 384:hyWiOi2BfUWB+HC2kY+avfrluGlWx/hljHRN7BuO9R9zO9uO:P7Bf7fZYD8hDjf9zwuO
TLSH
T1B8D24AA2D7684207FD9B6E7095A9DE437D39A3C32A0197AB0082E65D1C533C0EF3066C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Localization.dll
Size 66KB
SHA256 8f13392d6f4ddc15ac66544d2a9b8b4f505375cfd2b6191b53a2609f465788a3
MD5 db6dfde49024327612f304e57bf6dcc9
SHA1 e217c38dc7173184d76d200a9e1d22acf956d8e4
SHA512 040d6bcc9454e0807c4176ad76644c9a4b4088298e43fc82eb6dd2f625dbe483087bd9d16baad89eebddc0554835ca920a7674d6335fe1b1d1829fd3d991c4a6
SSDEEP 768:DhrfEWQqmu4cFwBrnJkaAwioPgG8jM99svqAA2a9z0wz:5sWQqmu4cUTeoPFvxL2Gz0wz
TLSH
T1FA635B29A7B88201D66E897DE663CE03E471F1CF4325E9DF4884E49F1D937C19B31A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Metadata.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Metadata.dll
Size 30KB
SHA256 7f5d2fb0ad9a8f6f09b6463ed078944a8587cd32302cc568414fc3d9cd8c11e9
MD5 c7ededa6a432a5bf851eb73441bf776f
SHA1 6a07e0226bd4da760727966f2f68097abfc4c7a0
SHA512 92ce5b385fb257b6b5e0ea782f5528897862335d29dc2871be2e63e21b56854655f28a47fdd319fecc4e694e0bd17c9deb2aea900ccbc1c4f8e1f9085af24f4b
SSDEEP 384:4jWeXYQWmjFGLzmQ/hljHRN7z+VTxR9zQxJj:TmmXDjz+VT79z8B
TLSH
T191D25CE69B689207EDA32D7096B9DA437D3CB3D369419A9B0450F9491CB33C1EB3067C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Abstractions.dll
Size 258KB
SHA256 2a5478ef5aa364c5454f9f19551e77dc9e3a5b0d75742ce1845f9b182a2a1527
MD5 9a478bd570f188976f218b46acad2981
SHA1 bc09c93a50efeddb6cd50759124c819736b9e1bd
SHA512 2593c13c5361d69a37210a80e74d76e87199b511323dee47e213f5f7bf8f273bf10495b57ba258e2e8584c1b1aedb335446be92c9ab0dfe2384af7a9a3c417a3
SSDEEP 3072:6C9pXxRCB/d9VOhKdPm/5ihxJaIbR91QPV6oQJoza03xTgq6e:lhgfdUO9bR91WOozZ3xTgq3
TLSH
T185446C3673EC4A13FA7E427C91BBD101D679B2C313A9E6CB57A4A99C2E43BC19E30151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.ApiExplorer.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.ApiExplorer.dll
Size 130KB
SHA256 5dfbd871ac8bcae805c7276fb00e23a1c45ac7c9defe862ec07878da1035e625
MD5 113a1ea5ed3990ad6eac968dc899fa40
SHA1 921e05de8c29db7ce70973623304a80e276ea44c
SHA512 ddbc2617dfb7f5879d605387000233f3e55458e4f360dc4b1f797b19bdeeb1b3acf7c7c8a8bdd9234473b5c698d3f664175b1f995f0d14fd7948a4e4480dc7c1
SSDEEP 1536:FMnsPmmYBhY4EMjVqppqq7Qe8IJaOEpDUjpFAB8W8Jn51836wxvAkJaFzDBc6z4y:FMn8HOQp0k8AafA9FABdzPYbHMy
TLSH
T1FDD32811F3664E25CF6E897CA6A38D15D0B3E9430711E9CF0A94AD5E1ED77C1B23222E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Core.dll
Size 1.9MB
SHA256 f6e166fa86b34a04b99fde96647633a513285259f3766b4061351f206ca9ebaf
MD5 287fc168094f8d2ac5ac8817ca67d020
SHA1 a3821f398902b5195931894a36651c17da2a3ab3
SHA512 9eaa8bc503134cdf95433797fe387e98c272c7bafbbb28271a7aa30483bd5ca7a3480ceb5dcd89f098a00aae1af03cea68abdb79437480a7889c57682130782f
SSDEEP 24576:3QrvS58nFDl06IPxWxSfw/wbaK88Ek6t18z2gclIIoqqFN:3WvSe06IImdEk6tS2/ZfYN
TLSH
T134955A35B7D44B13C23A997C926A4800D5B1A4C74791D6CF1AC0FE483F97FC0DA7A6AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Cors.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Cors.dll
Size 50KB
SHA256 c185e9751aba127cfa636c99c045c305043db717858979284d901817cd05f880
MD5 fa8d922af1940d5f6c84ef2c7914161e
SHA1 88f11fc6c197be6b70994b8b76a242aa53292d4c
SHA512 61e34068b2f9f9b63adf0c083fc79813ed84806239c87ece97fe82b7507aa78b4c99fc1f23223c6a4176a00aa437a6de3fe26f45155c666da6066ee4e2ea3f88
SSDEEP 768:vK6KzGIkyR8aR2W/uYZCdzzK7eDjUNULi9zPE:vZ3IkyRhz7HMO1zPE
TLSH
T129335B45D3884613DDA9A8789663AC07F974F6832B20E9DF09DAD98D1D93BC0F730619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.DataAnnotations.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.DataAnnotations.dll
Size 102KB
SHA256 898be6b84c990fa365665051cb5912c1876523aa940add14aa69f7d424335f90
MD5 9cfa0821e2f9816b4d4444a8a332c573
SHA1 029f9b4104943dc8d5f8896cba173df9de5ecf54
SHA512 76f18f6c56ae40022370d7608fe6ce6659e821f0795208678437ba1d7664e2e4ce29b73c17c1b3adf2c2a86ba09072337e4d04671c63916db9471d1be4ebe815
SSDEEP 1536:KD2xsqmWgUi95Po4jMGjpuV6MkTAqfeZunS/oByT250i9jUoYaBzGV:KD26qmzUifdjcwr7fe3/oByT25d9Qik
TLSH
T193A32798B3884613DAAAC17CE75B9E49E071F6470325DEDF08CA998D0E87FC09773652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Formatters.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Json.dll
Size 30KB
SHA256 30e928324d1a7dad8547dfdfa33106fb8132e3101e8363d44c6afff2d09fd2ed
MD5 ca87465060771386b768908302b75bfd
SHA1 75fb53c79e33b2f32ad5bf6b6e38d7cde7ebcbe7
SHA512 44a86d68ebe040d6533995bd267c775fe2da8c89cc66c456a31990b638c28e91f284ea4ef0be84c0b4f3bf1ee68b3c47762f75ec4d0e3f321354a91d4d9014be
SSDEEP 192:iuW3hqmWo5VCyg7Gj8eNE01WgVuAwmbxHnhWgN7aIWaLLbV46X01k9z3A5fPWE:iuW3hqmWQW7Gj8qE0PDHRN7/vFR9zUGE
TLSH
T1E8D24A9ACB684203FDA76DB045A9DA037D38A3D75E51AA6F11A1E6440C737C1EF3072E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Formatters.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Formatters.Xml.dll
Size 118KB
SHA256 9b2d1b6abf1ffbd8fdc6214e04ff84cc0ade237180e2a8d5e55991cfae0f4580
MD5 bbb73d9af8f73fad0f9c1dbe5264d831
SHA1 22f90e1eddfe934f415eb0ce36f6276f5d729944
SHA512 826dae6ee8cfc3a2146084f5b062f19023586c7e91dbb13efd094c476c4b6f57a423cf7a67f99448e543a7eaa86ef19a7781332358ef1cc40fca856cf5d47349
SSDEEP 1536:K6vyAQwnRunP9O/Bdv635eeuMSjcK8F5J1KqL/qORYrigvFket/7o9zO:K6v5RunP9ODvcufjcKoJ1KpORY+mT/Ay
TLSH
T1EFC33904B7A48702EB6E59BCC1238C42E2B6E1932F55D9CF4AC4D9CC1F93BC0B672656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Localization.dll
Size 50KB
SHA256 44913d387fa1ee6762521ef79fe43abdc4f50f11f5fbeb7f3419779d00b04c86
MD5 d739130f6c513c043591d0ca67dd0e9a
SHA1 cde4d4310b8f06a29154ead79be830a04eff74ac
SHA512 1d31aa32b7151d90bd84e321100b3f30128064fdf9cae2ea3454121a267d135042709f62b0477aa8828398817c5a9234d052d4233658e164088e01699afa1665
SSDEEP 384:WR/WOQW2kUIH5uWG4Ab53CQrZp5OOWuySr7vMBcB82VGSzJvN7kM2lSSYPDHRN7m:c/WOp7H57AMQzIOWbAMkNN7Kau9zwC
TLSH
T134334B59D7880211D97E55B4DAB3DA06FA78F7C35392ABCF0889C4882DD37C09B31A6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.Razor.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.Razor.dll
Size 238KB
SHA256 3c93d47b273f77432b4cc10c48bb4d102ec382ffd02fc678a0769ef7556e8909
MD5 45bfe0ef58a12966c6b1e66538291982
SHA1 e92a10a6e2bc86a8d0c78ea9574e0bc08de3923f
SHA512 edec6cca01d3a47d0a2dcbc331198306a0e9fad23c4e568814a6e8903607d2a6220d0da1abebd8f21d1cbfcda0e7ea92f3434949b9bc758dae9ebc2820c49b62
SSDEEP 3072:Lb23xFlof7eWIVhaFjwJPdP3cXsN7UdrirJ106ioWkp:nuof7eWIVbvmILqoR
TLSH
T101344B26E3A80D43FB7A45BCD1A7C502E276A6630335DECF4B6AD5861E877C05F3121A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.RazorPages.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.RazorPages.dll
Size 442KB
SHA256 5275b1bdcec655231e6903e57a26c8d850200bab4364ed3d9091bf230b37866d
MD5 5c5e66c79ba60d446ada60769aeb32ff
SHA1 d4aa017597edcafbbc6d16cd11df875e2af22d9d
SHA512 2ed05ba3f2b13056e96e185687aef489625ebf9e8e462db2990b54b1783e083a25b97fe08f2c457e90b35a42c7b9b21395c476aa08d39c99ce892ba8512052a5
SSDEEP 6144:tPaVNWsEnPo3ScTAHti5fdV9YQxyV1AJBc5JQrFdKKHDaJZCGgXGcgioN:tPINWQ3SaS0oQ4V1AM5JQrF/4CGgWioN
TLSH
T1F9A4492663E40206CB6B53FCD252D442E5B5E38BA780D7CFC4049D99BE8BFC5C936626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.TagHelpers.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.TagHelpers.dll
Size 274KB
SHA256 a6787e3ff9e77353a76376df11f6c4ef44f2f1818c5a7ecfa0508247a584f55a
MD5 bd0494b2c2abd81e6dfe07d7ddd7a8be
SHA1 dbaad45e880ad7656187c21f58a791fd7f422fb1
SHA512 623c5ed3cc55d694bd5b597ccdd751ae56c49c62ca1196aaaea06ec8bd06521d2c88fb0c13a3a27d66cdca01ceb4e68af22f27bfeaa503fdcd6d9c00cc844099
SSDEEP 3072:NSKZ7Vg83e7+cmR4uUbv/8oIo76qtYEPbYhSALVINlc5eth3vjqde:8KZ7Vg83Z4um/8w763EzSugeD/ug
TLSH
T162548D3AA3C44F16E77AA63C8713D941B7BDB5830306DAC70668D8D91F837C98A72536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.ViewFeatures.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.ViewFeatures.dll
Size 706KB
SHA256 5bb3ffc7883becba158d7136e94ff72e296873cf2a5a29a7074cbcc56d43684f
MD5 efce12725d1255ea17198e6d33545832
SHA1 a7c76b1421a2fea042d75ef88904102848237d59
SHA512 23821c407da6727ff397e86685af88ed075566b3192a6aecdc43762be71779c7b75e3ee34dd3f239f5238d6f71d5156b8d9883112df9a95506e72dbe12cb3271
SSDEEP 12288:ToVC5SG1PGp2pIfqtRvmF5eSJ6ZII1XPihkJrSPnE+yJcD/5:EVstup2pIfQmF5sXPy6Gn1yG
TLSH
T1A6F46C26ABD40A06C67EC67CC5324001EEB5B99353B1DECB2815EED91FA3FC2A731525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Mvc.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Mvc.dll
Size 42KB
SHA256 d9421b00ead19c88be20ca6fa078d23f72cc480d78570f40ca8a66a10899537e
MD5 9c1a5a89e21661208aa616f651c43fe6
SHA1 5f7d9fd8764462cdd0d09b57a3716f5eae960ac9
SHA512 57187997df3ede8afac40891330480327dbb1b48e0f0933f4adb75518f2ca21f2053434463753f23e023f4990d30ef0258f15788c9676227fc9f4f19bb20ef77
SSDEEP 768:qv7doFSYxwd8PfUIqvZjfRHdDj20rr9zvgR:C7dW7B3Sfx20Bza
TLSH
T12A135B8997444202C66A69B8CAA2EE0AFE35F3C75750D9DF009CF05C4E937C1DA316F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.OutputCaching.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.OutputCaching.dll
Size 254KB
SHA256 a1312a196b7f803f4f27f6f5e609b606035614b9c38e60ea16c98b1d0c60ab24
MD5 23769b16b25d85836aaf4b1fdd21bd01
SHA1 2e826ff55008c5e30995f7d79f6e94748cb9ee7f
SHA512 a28545407ae8e5cd0569f05481269511f6c234f923c2f1a954402a724f7289e3ed53eb8cfad3abcb3d9b92dcf41370a0876fa5bd64dde1896536a70404eca948
SSDEEP 3072:w+Fw4z2umua0stZyZgHOxnlwFze/lrxFn1A/aHumXkOY18VoN1joPN2MpbfCW9o3:hFwemuOtobXwMHisumXkH4C4tDfHY
TLSH
T1C8444B2B63984F13F72AD5788273CA46D772A502D397E7CB4BA8D8851F077C0AD36126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.RateLimiting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RateLimiting.dll
Size 94KB
SHA256 fd9ebb6aa4434e0e8225483fcae9d713dd115c6f9cac8fae4a69eeb65b81474b
MD5 0c4b3ee10331739f33dadb96bc681789
SHA1 5aa41f0c24ebb2fce4339f02b851a0a81571d034
SHA512 e20cb05b8e19a61188180816854d01b112a469194b3fd797782133eb9ab0eeeb48f6237f6a94f4c22273cd684d528c2d7619ea78e7e38df636154cb7f551c17c
SSDEEP 1536:2dZp0eX5g9mXG2b9zEiL+T6MWbnzGIYXzd:2h0a5g9mGQtEibJbzGXXp
TLSH
T163935C06B3DC5B15EAEA9978C27358129972F6635712E1CF9898E84C1FD3BC0D27072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Razor.Runtime.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.Runtime.dll
Size 70KB
SHA256 370dc646ef1baf5a7589a655d5e2d2e00626fa65bdc7c8fa8e1e34e288765bf7
MD5 7a59d995c2cd87deeb2bebc63961aa32
SHA1 27764c61e25647e8ba04fe3fbc6b75b1941bf957
SHA512 b41740dea4cde8734211effcc1e27db06764f8c91b35544084c47b43a7ce9802081a4ce46357805fa3f012463d3c2efbb45efd4c2ce45856a052f6df853c2365
SSDEEP 768:Ev3gHenKSzfR2t8JT6tIE/WEoDSAWDLnYIzMwHRyjqxT0lidRF4UDjUw9zt:Ev3gOy8g2E/WEoD8LnhwadcGdzt
TLSH
T18B637EA2F79C0305C63A4ABCD69B9D53E979F6922363C9CF4C98F60E1C937C09635426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Razor.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Razor.dll
Size 66KB
SHA256 039c7be47e7221338d067b2fd15584dc8f4a1893a17e4b0a7042830f33b52d52
MD5 4c7c650f2eca6de45165413878b2aeb7
SHA1 0dbdd04c86b398aef51361970bc2f910eb21c049
SHA512 3e8d09045249706cab0c589818567e901ae5950d715c572056050b379f1ac3bebbfd337eb402d039127c63217829dc63ae88ad03275088355bd546435b98e6d0
SSDEEP 1536:oUuHkEg8Q/EiIAZ0+diy9/FJj7IXdxau1zQ:oUuH1xiIAT0y9/FJP6Su18
TLSH
T13F636C25A7D88316CB69897CD697AA19E034B5D31332CDCF4D18EE4E0E973D09331EA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.RequestDecompression.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.RequestDecompression.dll
Size 50KB
SHA256 23ea82b0c9b68d9528297be05c05877d2fbc1eb2dbd5c737936f9f05aff996f9
MD5 4a17d0c7e0dbb9608725da1c065f72c2
SHA1 f1ab5df8808f605c8f617a3688ade5391d0ab779
SHA512 ff4028d050dac7884934408c1f9d4593fdbbb2eaa76664fcd5813be7d7c47776688613a344bb123701d517495dd973e4764c2f72a94ad78ac3c739965f532e0e
SSDEEP 384:8WiSpTWdURqkv/AOv6//F4IpfgS1CloJG7ku7A1SxSWwnE4+BrRYPGE07PUPRt91:t6Mf6//Ru7A2mobUJt9gcDjSPO59zH
TLSH
T149336B9593D84713E56AC9B08B62DD06FD79F6532721E9DF80CDF68D2D93BC08A3011A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCaching.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.Abstractions.dll
Size 30KB
SHA256 06b72ec61189bc442ddfcfd4d5d12aed3b50bbc53d32c5e648434c2f0a427aea
MD5 416f374d6c040eb12ae2ca8d36d633f9
SHA1 5f2df0ed0cb74d6433e17214440ef829636beaac
SHA512 e6c76f1debfcfe39c686d06a9606553ad8131014ec45f8426f4927fa7047a41510ce9e0ff1901f1a60fb6a4ce591977277a43d215b94e88794fdaf4b9af047e5
SSDEEP 384:wSWq9+yWEn3GggCEXuPDHRN7/9vuNXuifSR9zrurpSAm:wrCAKlilfe9zqSAm
TLSH
T12ED24AD58B689243FDAB6EB056BDDA077C3CA7C6AA119A5B1641F5881C633C0DF3063C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCaching.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCaching.dll
Size 146KB
SHA256 4c45c3cac09e04a04ff8f4029f43d11c56f183c189b578de83cbadc85c606f6a
MD5 f351f332d4cbbe9845e500a4c3bfa712
SHA1 9053fd2f5e0e80bb8cb507c79f4350f72a26b95e
SHA512 e215f88b52171cf894e956e5ea26b4d57fb56f86fb1d47b4b1976369f0981b5e019e24ae5d3a389b127ea3dccd6cffba6c8b9f7b4bd89331bbfb5b7f8c67dd1f
SSDEEP 3072:FjQycd50BTpqvLQLLaM4CA9wvew9LBPaEA:5QyczKcuMVwmw9c1
TLSH
T15AE3390493C44346EABBA67D42739903EAB3F5172B20D6CF0985DA8E1E47BC4FA31756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.ResponseCompression.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.ResponseCompression.dll
Size 82KB
SHA256 b63097a8db15414f259abf8ebd9ce1f9d66ab9bd0130cd7a8e2ef68dcb82e174
MD5 6c2ecacb167589b0f24a5ead8fe997f1
SHA1 7e6397cdd050b304269a80a7b2cc888a0cf4b4ad
SHA512 008426c83a3b8bd24fdd8b40faf4adb10db7b39d98d4bba842dc341768300730bcc7637d078ab9dce64f813d989709f4c284a2ef9815d16d3cf7aecc1bd96377
SSDEEP 1536:y0DqsJJ34IzSVrYVnGVIgf7oXIo7CC9Xjczp:y0DqcJFSVzKgf7op7CfN
TLSH
T17A832951B3A88612D37FD6749B629F0AE675F3832B11DACF0558B48C0ED37E0987126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Rewrite.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Rewrite.dll
Size 214KB
SHA256 9d9f6a63e7b32be74cf668e749be62f873781935d26084f9f0a33bfe5007f297
MD5 ccf907e8aa95acb5bd5b2535dfc905e5
SHA1 e6d6ab2e871cfd5cb87ec5c4531ad0feb97afa98
SHA512 13af9f91ab95c3012a64665b4e44635f77b1482f7cb83714419c1cc92f82e9902ad57354ad23302e665c0cbe79a7ec9190ab91c62526a3700eaf1752a5350c02
SSDEEP 6144:hoih1eIQRdlYYlmLUoHZCRcH8vc6xHoor:ynBgCRcH8vc6Joor
TLSH
T1FD243A2AA3D40E07E33E457C9293C609DB77B6975318C5CF0A66C99A0FC77C2BA31616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Routing.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.Abstractions.dll
Size 58KB
SHA256 d866a8ef84c5c8a06ccf684a5809168ca5c0a84f4145349b88c8b54154cfc623
MD5 e31b5ff8d6bd7b44d31b31bbd93e3376
SHA1 e7076af7f796916d05ebf844c58e620a9839e607
SHA512 e104ba0a3906de357f71f07b0216ad00a152e6826845c42e620d255ec2e6752aaa0e29551a08fa26ab80c8d58b118541296532e68144f9c221f2741b07c2f9a6
SSDEEP 768:JonnUOsq5Oo+3cSsAnpt97GnU9I+KgrDjSWrr9zvMKlT:JonUE7a3MiIgbvBzXT
TLSH
T18C436C1297884319C9AD8AB8C296F985F472F6C71723E6CF0588EE5E0E537C1D73123A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Routing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Routing.dll
Size 806KB
SHA256 a6dab3580bb81bf79e81d9615639e06ecc45a666172dbef4ae3d8aaac93653d8
MD5 83822aa80ca33040d4208c2f1a9dca11
SHA1 d6c082fac313cfdec912c6d68604b3dabc4c00f0
SHA512 b921f86c309029587af65c4b014b186ae152ea13bb8877416a650df5f67fc17c714e417b721c67ce0f49cdbb3960317b68db16328938634f97b3d21b18e491cd
SSDEEP 12288:hCvc3empZBYLBe0F6sEFPA+/fX45wdGuqIqZxdSvLpHF1apGe:hCSesBYn6sc/45wdFqIqovNHF1aF
TLSH
T11105582DD7D40A05D67E9B7CC26B4412E9A6B8836371D5CF4509A9F83F87BE2E231321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.HttpSys.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.HttpSys.dll
Size 626KB
SHA256 1372cca6eadb968e31f0c31849ce493626d4d0ace70d60c4ed63ce05504dc534
MD5 6a8beb254cb85d1b50e71fcd61c74c13
SHA1 b35c473f297872f6b6ba3ee9bd2df1f8e6031f99
SHA512 0455a7d29a2947ca62a27bd322f13438bedbcf7995bada82a4e1cc1e16e5b2eb082afd649ccbecc8715c86b70a4c0a0a67f852227e98b614daf7d4a8b30bc4d3
SSDEEP 6144:ZcTzXtgMqpQHKmmdpdXT+94aRO7Ldx2KvhubbWFhHnkzXKa6wFvIX0u+NIFlQvmi:2zdgCqd7H5x2PCkzXKcEjWViUESuxru
TLSH
T11BD47B1EA3D40A12D63F827CC4764633DB71BA86A315DACF644885991F73BC2EA36353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.IIS.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IIS.dll
Size 662KB
SHA256 03fde314cb52e7e5c0f64a8c6d3f179c471634e832117cd72e6d765236f6c960
MD5 f19b270104d2add0f16d4438e125e0b4
SHA1 10b4b4e3ca66353441f07a3b72089b528c15052f
SHA512 fa2c03778bf41ab338e22f939d02c88d6e0710da6d97ef8f13ae4416afe40274ca9c2056c59dd95ea75b162aecc2fc782b8b70d53edd6d2533bda0d31c1d6a08
SSDEEP 12288:M1WyaTlR8O6WitnDCTR7BLa55LFh9Os5NOms:jxTdO+TR7BLiO68P
TLSH
T12AE46C1AA3D80A95C62F8278C1734422DBF7A8826770DACF151CE5A91FA3FC1E535763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.IISIntegration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.IISIntegration.dll
Size 50KB
SHA256 70210cfa6bcefee13625eb29e36166677013bfaa47a0d972c98fdbfd475edfd2
MD5 9e040c564ef4d8606e46907fb481af4c
SHA1 c0cafa24dc2e847900930b2e27a0b2e15cc9c154
SHA512 aeb2c9a21e1faa337d097e559b2da8c970f9ad225e24b97dda8513b7c8f19f3c0259d1bb5932ddee05ad743f19a36ef2fea8a569412221379dfb5da9bb2715d7
SSDEEP 768:Gws2zpNwcxp+cQLgvD7pP5zx9fPDjhs9zv:GSzpNwcxAZLQ5THqzv
TLSH
T1EC335A58A398420BDFB69678D6E3C985EA34F6961722FADF18D4E88D0E533C4D730139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Core.dll
Size 2.2MB
SHA256 9188c06cfdbf7c921ade4743e246cfe149ddd9ec24b35e0b4eabcbd054b77fbf
MD5 836260a6d16408a8c3c8e6122418b394
SHA1 50cfdd0b8fa86d9a49e8f71585bac8a41371fbe5
SHA512 b3ea2e82a9a18f843352b36a7bedaefa18b105ebd4e76bd5fbd2edbec2cffe836e49f4e00d18e36eff93ab4e7df5e248f37b8c00d03c82ef4f032e1dbb5168f5
SSDEEP 24576:Bviqf1IpkxWPOLpCKU5WVWyBCiZ6qs5TUvCcXNqxoW2X8FtetsAi9pFXoU:EAuk6KuyBCiAqTvCD3FHJ9YU
TLSH
T195B56A15F3E89B06EA6FC5B98137461AE6B2B4424761D7CF11188A9C3F537C1DB3232A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.dll
Size 138KB
SHA256 6ae3fe1ffa0af912f0a414eacda9600b9487934c21811397896736402e448767
MD5 74bc693b93fa5611b0e2528c8544c98f
SHA1 264a124068747b4fb0209924e5ca733ff7e8fdde
SHA512 bd615efac8d0d695a25c541388d634a9cbd8df8bcc5d4bad1cdcdcd7c15eae5c7143dc362dff3a3da488de4df9488147c174c0e8b0bc8e3fd2d5f2da5f275c2c
SSDEEP 1536:HqO6BdyT7WWQmbr+Xim664rCi0mHXeVXG9kCYZXW0/0ocuD3ajHP8z4/N:HqO636r+SO+XGG9kCO0oXDM0MF
TLSH
T10ED37D5573AC4312C76F867895738952AB77EAA30711DBCF028C999D1DA37C0F1322AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Quic.dll
Size 234KB
SHA256 d566d0beef8432427832f8c4ef0b8a413866a0a920c9939ef2703dc2d755c242
MD5 374fddf4ddf0d3e780b57daf2779fa2f
SHA1 6ac4671872386819b8c211a3454b37490dfc1fc5
SHA512 7dce3fbb172bc3e9be04a584cb260e2d563e767658af52eb1db5320e07f6d1a35c61b1b68c2ee1df5a0b6b20b51cb9ec82dee4851bbdfea52ffac73a71ad14db
SSDEEP 3072:3E8nf257iwJ0dpqFS8FWeAJnKcgZoOzxWke7BiThY/9K25ZsIF/Vd9Td:Ub+pqFS8FmtKkOz6iTZ25ZLT9Z
TLSH
T16C345BD263D80E03F67FD5788673DA62AB72E9524700D3CF176885991E93BC09E3127A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets.dll
Size 162KB
SHA256 4cf08ca4f5f57435c230e519d2b0254547018da22f603d3d913f35a0332e5cc8
MD5 95f8f7ce271689e09230e24404c88bd8
SHA1 5653d8fdc0c91fbfcf220d109c212c3fe544c8ee
SHA512 e76ac03e3941b88ba6a17290cebcd2527a877d9be4d37d2270032676df1c977e077232314ed7ba695c1613f14dc34147b1dec8203f1c9818c33f54f82ffa8acb
SSDEEP 3072:kgqSPBVhj9QNKczn+tfMsI20o4r8CVRbjDVpbojabkD:bN9+KcD+tfMsI9jNRyO0
TLSH
T181F36B51539C8303D76F6A7C80635943EA73EB535790D9CB4188D79C2EEB7C2B23229A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Server.Kestrel.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Server.Kestrel.dll
Size 34KB
SHA256 0d37fe0903032308a7171ca5bbd34d393c296b245490a68df8dfc2a812829c67
MD5 d33965906438c0f6d718a0f9d95c83e4
SHA1 fd3fdc728362d19f5ba4f1d35eb7b455c94bfa04
SHA512 7c5618312055c73c0c87a8b2b584806db31a709fd947a28295dc43fdffdad9f4f8c11c0a7f2077b8c138f1bd860c74d09f7ea620c3a34606d81a3f7cfaeaa45e
SSDEEP 384:eWwDs8Wbt158FI0VjaAcseGC3+GD1Qkyn/hljHRN77EW9R9z1CR5g:9Vt158FI0VjaAcsouBDjX/9z9
TLSH
T1E2F25C8AC7544216ECAB2970D5ABDF46BD38E3C35301A6DF0656EA892C633C5DB3066C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.Session.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.Session.dll
Size 90KB
SHA256 ec73cc7d299bf448d9f43c8306eeca5c7dec6ed2a948e4d3a923bb5a9b5d7b82
MD5 2786d009f5ba38695a7d0755a0d4dbc8
SHA1 695791f88d4790914ebb2956c74ac91c69c189ba
SHA512 c12f2777dd45c84210225b75272dba3a71427ce90ad4c73f178099d874ca1bb876e702f75becaef167f9f494d3f8db8c5fc0695a8ca75597e43ffb7a49910abf
SSDEEP 1536:t0fh3CCmiDeK3nbzeknHMU35/Jj/2mkstDfRiTZfsO6zgY:t0f8CmiDeK3GksU/6mkst7AFspR
TLSH
T11C937D46B3E44B23C67E8A78C9328D52EB32F6432B21D5EF0995849D1E637C5CB7211B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Common.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Common.dll
Size 86KB
SHA256 496c80f09440e93d639e7542b07304d6d8a79c1022f7734f2a5c7a283f5880a4
MD5 7312662fe85726a83639dfe6638a45d2
SHA1 c9d7a3b9b7b94c70d413a3cb525e4f3ca808ad20
SHA512 ad2a03daff66b1e864206027a4fc385ea831a7e5bf0f93382c38a379b8275fea39dc2fad429f253916d1465750afebc5dd76fa6e607e29e48fbb6fc0b1422a85
SSDEEP 1536:hhRIVoNIs2rxanDtL7+7lEgMEL68x+OBDUBmO0M317cN2ikzc:hD0+UrMDt7+7KqL68YowBBr17oDkw
TLSH
T16E837EA6F3844303EA2DD67DC6B3AC62E630F2C35392D2CF1549A68D1F673C58531A66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Core.dll
Size 494KB
SHA256 a3a87df1be7c2acaa1a7fa8ac3b5e712df88a615194e3df12eb0c2c706f2b16f
MD5 fe8b6d98e44d5393bbb30288514f8396
SHA1 f176d85f42a2ce76584e40f99f7002dc078be4e3
SHA512 994a00d6000308011b534a6714aa7f24770660e998177874488a1f066f0bb36286f2b789c77e68afc87d34f1eac311ccb05aaee721ab03035981a2da02ac19f1
SSDEEP 6144:J09ullQtzGM5UfxHJ4BojC2H+QPrKYGl7B2qLKwiEwkq8x0VE:J09ull8X5UfxHW6u2H2vVdVp
TLSH
T196B46C11A3E60B16D33BE6BD89636002DBF3B6435796D2CFE848ED981E477C09572326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.Protocols.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.Protocols.Json.dll
Size 82KB
SHA256 d2cdcc997376f767d4c19dbf0f54e1d54b3eef7c912ce0c836e7f75c5605329d
MD5 fadd4cc81f8a58d60ae38ef0f79d874c
SHA1 caf63398aa348deb1c1e39186d6dcc157a9ee59f
SHA512 9bcd0ddd4897ca0dbfc15ae5cbaa36f14096966b69e6afb00fba939a438f2613cd28dff0d07e882692715044e7b4e39a2f8e4e908c3179fa033d40b62b850994
SSDEEP 1536:AF4bGaTcNQ2VEsGr/czPxxF+2JsOpXq4zgU:AF4bGYcNQmEsGbcF+os54L
TLSH
T1F58339A8B3D44A03F62CD97DC2B6A961D530F75653A0E6CF1596C58D2EF33C08A7122B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.SignalR.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.SignalR.dll
Size 38KB
SHA256 d3b91945e09e015d0ffd4cc2c9d3fe87b225a3ccc167c4497046d548a9ecb7db
MD5 7f07a1c82eced27e0ed6917243d8b500
SHA1 1279b182d586b992c587a15f76faf62cecc75a55
SHA512 e5da1a6f5907fe701d563c33792b3a4e7a44540dd4c6da8f414253c11163d652a4ecb2db83d600eb75b4ec0a67f2b484da56c3c56e30f549842fe51bd19ecd35
SSDEEP 384:LWr8jhWNm/TTxct7r7T0CP5XvOPDGiHXoZj/hljHRN7DkER9zgB+:b/TtcJHEL3kDjAo9zQ+
TLSH
T14B034DA69A580311E9B75930C9B69E42BD39EBC31740BABF04E6D2880D63BC1CE7153D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.StaticFiles.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.StaticFiles.dll
Size 162KB
SHA256 d59a85d8321fe146c1643869da4389cb2e6f123cc93422e948cfc91e80134979
MD5 4b2a7b82f2794d65d488bc9598713ed3
SHA1 dd5e96b6c0454cf7ecee3f5bc2a115c769fa3d24
SHA512 ab432e595ef708b25955b9e71139a816e0a718c88a9bf83968315c994fd6af6de5fed7b28860f2e506e729d4be8e3107b6bc711dcad66235e66917be4a063049
SSDEEP 3072:0dTK04AosZWEL1IdFPgUIExu1qxhkpZC9MgN8K+Qo3D:uQsZ5L1IXgU7kFKN85
TLSH
T196F3F80AF3D54509F27B9B7C96632403AABBB8869310D6CF09444A8E1FD3788B571F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.WebSockets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.WebSockets.dll
Size 74KB
SHA256 6f6ca3859d4d7e4d6c50cc889b2fc6e9db2effd171ee9b31c136511a2e1e4701
MD5 f3252371a71b841d00888e248c225a76
SHA1 0328c40ec8a83f9728bda4ed731e0c450aee4b66
SHA512 4ff24f135674190c188fce7af04a7f6acc34b084420b25ec769f30b5635300e53ab72b52d4d2344ea447a1b9b3e0cdfd9bcc5fab760edbd0a8312326d6bbf7c8
SSDEEP 768:EIaPmKmqY6tIgSJS1EKU/EYB8IB+GNrMltej1VYfkEE+3sXF0Dj4Y79z83:EIaPmK/zlmKUsYBF611WVmlRz83
TLSH
T139735C0153A4A312EE2EA574E563994BF670F38B2B21EADF1955984F2D937C0C332367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.WebUtilities.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.WebUtilities.dll
Size 250KB
SHA256 f5e9141b95e27981bbd9af122d77b61ed13945e9f746cafbdc3411fc20c0a23d
MD5 c8885e28698635dfabee58c5fb1374c0
SHA1 e15aa9078166fd4e8fa1c0557c841c6e744048a2
SHA512 e344c344a0776ee1019d8d873f346604f0daf4b194cab7aa6194a24ae02a63e4cd3d2529f957f4915245e83ffb4edeeae124846c882d251d894b54829c32ac09
SSDEEP 3072:M6nAFHbyBL8jD+zRgGush8ThFicSDaq1JmNGeQHrUv9zmuUtrDbH0YoL2vCKp+b8:WHQ6Nsh85Ocwt/H/mrOB
TLSH
T1E6444B16ABC40E03EB5ED17C8167E902E7B5A1564727EBCB02ACA9D92E13FC5DC36113
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.AspNetCore.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.AspNetCore.dll
Size 110KB
SHA256 2e5218c4e8345dd2277259673d1195d8ff48505e5095fb72d5dcf0c05b71925d
MD5 aef3261e93e3f0d4c8c486d4c432a4df
SHA1 a796325ebf7300c6d129b151e770e09d54f4b810
SHA512 e46324ad4ca49dddfae9748c83150488f924b517748f05fdf8862f3fb95ff371932806ffb761f18d1c7b584d53e098f29e9adba0f1ed6223c9a65f8de7ed3faf
SSDEEP 1536:CPJbfU6208H/oSBTK1pGEuFnqd49hFNlkf4XSp4OG7MDAzx:CxzU6MJtqGEydYGt48d
TLSH
T117B3276AB3C40601C77A52B886679D09F833F58B43D0E4EF1898D5AC0FD77C2A6B1257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Caching.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Abstractions.dll
Size 58KB
SHA256 921c8f948c7e32ca9b9a19c21d3d1d97353a84ecfc17eda5c54cc19be3736aba
MD5 4b0d7fe3ff1db06bf0f0d121db051c71
SHA1 164d1074292f1817c71f7ae3193a249c6bd817af
SHA512 d4a6c2de3a3bc1cd49a901eefe0ccff9b44bab70826c3f698e728a92dbbb55c1eedf8f0d5dd405a309536cfb215b01418047d0c15ba65e2969d4fcbe9aa1963a
SSDEEP 768:KHO5xRbvl54v2ERX5V/bgU0eZKIMtg5TAptEnPN9qcP6Dja/9zIJ:KHUxRbN+hJVDgU0eZKdgewPNwkzIJ
TLSH
T1A6436C4D83E88313DDBAA57DEA7285A1EA76E6C12712C5DF460CEEC90C437C0D63666C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Caching.Memory.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Caching.Memory.dll
Size 94KB
SHA256 d52c994cdaa4455d89e30d3e4253004a1cefc620a6d99cb02073194fe6606167
MD5 8b96947b66bb214761a5aab3e711e51b
SHA1 86371a7d9061c4a9447f82e1ead6ed4dd4f43a05
SHA512 5f1513b19f97677663d4a3ce278f111ff9db25a5aa9565da54861557634209eefa35958600e0373bf38cebf40074e7b49ceac2e6e41828dfd70c03c3067a42ae
SSDEEP 1536:pPwJXwJQR0rK+6gGnEwJBDZmBb/+rVA2tHglLSDQig1zG:pIJlR0p1eEOBDK+ruQASsdq
TLSH
T11C93491473984352DABA82BDC6BB9AC9D6B4F1432B11D7DF0848F54E1EC37C1CA76226
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Abstractions.dll
Size 46KB
SHA256 dd425f67b92ef0b79cc3ee6c40cd9eb0b1c5058d147c9de09ea57b8c8a786c73
MD5 e6289134066803f28cea65244547e429
SHA1 07219daff95958cb45361644ed641679665c8cd3
SHA512 e6b220a21b3fd3d1a52576d68596fe3a1bf52e4b0143972f2c44ca88775e4ad5ca57655cc1ed43a079ffedb1211be436f8c560002f652e72a235d77f2e6ed572
SSDEEP 384:3WsfNWjnpgMd/4Oh8tpdip1vv7kVm+6mD50kv96TG/FwzzRjz6qMvckxuAQF6sc+:92npNZj66V7kUeDSkXZpzJMDjmz9zBI
TLSH
T147236B75439C4313EBBB0AB6D1F2CD41AE76E6A3270195EF568DA60D0CA37C09B72218
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Binder.dll
Size 86KB
SHA256 4a70a880077cc21c3b15276d2613c92099c533bf6c544aca009b290739f8062e
MD5 f64d262379ac546567aa42fd1e00c7d5
SHA1 c6e56be0965fb667b622192b9615b873f7078c63
SHA512 6eae61f968d6a963c33e94a7e6242ed5d1d7b98a40404a2b56b17976fc8a6bdcdeca8179da80a602fcf3fecfa3e7b54fd4e3e1a1e753af2d5fd8a81a0cb48a1a
SSDEEP 1536:wMCdMbxxeTYMu8Etr7VJ6fIQG03rY34I4zo:BCqxMLEjJ6gQnE4c
TLSH
T169837C1673D44701E67A4AB889739A4ADAB1F5421322D3CF0A6DC90D0EB37C4A7737A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.CommandLine.dll
Size 46KB
SHA256 d2bc393e9dc2da345b86243124b9be3ace12fcb6fef2d4274f39d86bfad79901
MD5 1bdfef1f5fd1c5ee1b6f1396aaee32d3
SHA1 6f034ca716c5a391938ed6807ef117286699da31
SHA512 581740e605fd20912a2960a32dcfb6e0a1605e15cf15ff06347f5ad84c100225e19d68893e542a22b14c6ee079ad7f8c47abd85a246c47ec1070f1ca51f9e4b6
SSDEEP 384:vW9/nWGGbBuUcsrKgk8+5zaW6swnfiahCxwXaHsRJ0eB9C/hljHRN75tNcFAUyRG:iSBQglCzP6s+6K04IcGDjRcFAU+9zVi
TLSH
T13F234B6663BC4313FAB707B495B2D951AE34F3926B218ADF044EB2081F933C19B71729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 38KB
SHA256 757827024153723ff4687c18e7d02157eb36eed57759c436ee11d81294f039fb
MD5 90834d45f115e6bc6fae94699d46744a
SHA1 ca14ddb50ec73369ddc554374942ad7834f23133
SHA512 f2273a760f80c40cff2840b1438da50d53861561937771864b0983d94fbaa6d6ac404d48b032e3389c6131008d031c5b7ba5fdbdef39ada5d54f34613f2bc9a5
SSDEEP 384:CyWUPeWx18m6xos0pFW+K0ihWQSMchn8/hljHRN7O9fPOxFR9z2ecP5AM:H38m6xos0GPUQbDjePO59zO51
TLSH
T1F5035B55D7DC4602F6B72A34D6F6D612AC79F6831A115ABF012EA10E0D63780CB7173E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 50KB
SHA256 0d46c5710a1a2f3876ed0afce219f2291bd0b1b2b9ee08469524748815a18d7b
MD5 dadd176fd1563ff94039be249c665012
SHA1 4b66406aee600784b69ce5e3ee0d68e4ce06eaec
SHA512 ac2a93228a685dc9fa6af7c2be0352c65d9072e9d64f9278810685c6a24d0269e698c2f1dc13daac0c8d25b242f7cb0b55795e16762fea22aa358867d578eda6
SSDEEP 768:zsjxB6hVvXd4GVuCVCQ/qvyDjo6zs9zRnlL:wzmVvXdWQ/qYoPztl
TLSH
T170337D1A93A85303C8BB5A77EAB6D986DAF1F1831751D5CF488CE10C0EA73C0EB71569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Ini.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Ini.dll
Size 46KB
SHA256 ae41f64acb09ded7a94419ea1985844aac8481b01ad869caf25a3d0698c9d9f7
MD5 b572a5a6490484432ee373df4260757c
SHA1 427ed4d6eccdb255f7df62dd58940d360aa703fd
SHA512 910c93d3a216ab6d08927af699bfb243de2cf88fca45a4200b15e5f670ed40f650b4b2d102d631b94780a4934b8b928ba4da5274e5fa3de979b92253c000d864
SSDEEP 384:MWFvYWdib6Lb9huO4D9tS+Wa/rxFBrrSB8TDDvBoLLqnNp+v63iW1PDHRN77A4Mo:PX5Rhtl+tD9Hn1EqZSakXgE9zCeiz
TLSH
T191236C6D4B9C4203FBBA4AB5A9F6DA01DD35F68317609ADF445EE20C1ED33C09A7122D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Json.dll
Size 50KB
SHA256 67ffaf5230803dfeb9e19fe91cee5b23fc4cf64b55ed13f6e0f8f91a861da189
MD5 c6112a438e2ee57580281ba10298535e
SHA1 a08984ec1eafb43558ed94505d87170d85c8dcaa
SHA512 33820e255aa67f0fc8e9a9d292e1d712dbdd2ea63398f0a07cdfb1c2b9f504ac88c3c825cc7eb7211cbf01a116ad9d24b25aba6a5152432c50ed90797dbf7eb4
SSDEEP 768:+UxNahzUKBFi7kgExaFMj8DjD2s9zTj99:+9dBFJUFiuikz3
TLSH
T1ED335B55839C4312DABF8A7088BBDD4AE9F4F6831711D6CF099DD10D1EA73C88B72299
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.KeyPerFile.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.KeyPerFile.dll
Size 42KB
SHA256 baec41a304b0d04b1def9b048eed395ef4d8f04206457286059de9dbe3effbb9
MD5 c765e05e5963cefe8fd6cbf40798b803
SHA1 8d7f3f4110f5021df2911a356518ac15c7e2e207
SHA512 588dedb07d3739d7118c2595765db246d9bc435401e435ce23067ba1e9c083fad5dae00aedb82f14e139e0448c1b4b3891d9a776ed65a9e3eb1de3943c8a52d6
SSDEEP 384:9HWOk75WqBJ/nMuGMVJ7VZnFD/mkbiio1ENoeGWX/KPhmK+PDHRN7/zxTifX7R9M:9QdrfOMhDukI+t/v7MF9zAuI0jQ
TLSH
T1C9136D659FA84307CABA9A30C6B6CE05ED38E9C31710DAEF456DB14D6D5B3C0D63027A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 46KB
SHA256 686718e2ed043f6ff8cd0a6c8e5afe06245f2239c167cc5767eb9a8072ad0f51
MD5 6fa93ce26aae1336f9b5d156179ec5c4
SHA1 68aced8fc79e7235eccdc35ac002776e5f04c4c3
SHA512 0808236792f0cccce680a836fe36a9616eeb3a2658d7c0eef12dc6b7476cfed07a3bcd780bfcf3b63b6e2fff1cdce2cd6debee417f404f89af971a5f311d15f3
SSDEEP 384:KW9yVCWLymzRuyE1LAP5dD/NS9IE0EjjSWGfzRxL1iF0gzUFJ3i1/hljHRN7LER+:GaYR4APDJ4JZGlxcmFReDjLo9zE
TLSH
T12E236D99A3FC0302F77B4A35D976E951DD34FAA26B01BAEF0059E10D0E5B7C0DA71628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.Xml.dll
Size 62KB
SHA256 f76d9abb1f0b11b4f0036a3e6cdc4b02a74cfaca0bd06f45c330472e8f4607b9
MD5 3013e675f7b107ad2324e21dcadfb741
SHA1 89199e274f9bdee25c6a3a9dee3fd966c8d4ece4
SHA512 e806a93350860bfa591806fab00a873df4e2aabfcce7c0b6878c2a00e41e1769bbf3555992890b9457bcc4104d33dbdc48c5f6dd27cf95d47438f886ab28fe0f
SSDEEP 768:FXKBBwGaotme2ok1krR/O9MOfEnnHCTM+o/ULvmv83esrE1N9zwy:FKa5e2ok1kt/O9M+M+oioskvzZ
TLSH
T1CC535A7597E80702EA7A477DD6B7A80AE9F5F1832321C6CF4A5DD94C0E933C08B31629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Configuration.dll
Size 90KB
SHA256 5f88bca3f013fd8466ca69126565de4d57d172b88a8a07f21469178a19ddae14
MD5 c215eb66cdd253523c36bb65f6634f9d
SHA1 1703688f7a761e4e9a3731cda9c946134eed5971
SHA512 4e7dbf76633ac550ed7a43a7c885d62fafacd77085cd0fdce4195410b982747c95c0cb697d893c8828ddc1c05cecb0a540b95e96c3e8adfb41245d02464a02c4
SSDEEP 1536:2SDgWOt+j0v5RQ97rVcwXk/AX2+uptgUJOPC94RRz8g9:2SsWOcYRRQ97ZrRX2Hg6OFL9
TLSH
T1E1934C2973845E12C6F946B9D5A2DC09EE71F28B6302D1DF891DE54D1F973C09AF202E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 138KB
SHA256 497ab16afb3101f272200c4b11725215d2806aa12990ede9b41cdc6007c77a3c
MD5 8c0c291a61ee78a6310297b93c3046f3
SHA1 3b0293294f0a38420d6ed9071f8f5d3d9b568655
SHA512 4fd0026aa57f505841e022bda6581e16b4c7d677ab3e2950a9543dd4857c49b70398a9f94f8b868cbc35d64510807aab8b945f56e190a5e5751e3c248a9cbf07
SSDEEP 3072:v2zh1ih1kqlY9seQwDqTZ6dG/4UUnirpSlc:U1ih1kqlY9GwM6d6tpKc
TLSH
T19AD34A2473D4032AC66E427851330F61E8B3B8A71711D3CB162AC55A1F6BFC9B5B2DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.DependencyInjection.dll
Size 214KB
SHA256 72625b4397218a755a2d7c7bb664e75d4ccdbdb5d6b149bf77c67a234e3aa816
MD5 4d76b60b48695d683f1ecad0a7670c2c
SHA1 b8a5a5a07dd4db3c952f943bb5cb53575449a24a
SHA512 da65597012a3e95789fc60ae201a5698cea032fe11be2a0da0ac1550a7a7231d0acd7f3a5b6edbbf66d4ff34c2179fb0942bb8dc8b73050dda53afa991b4c6ea
SSDEEP 3072:2KB8zIROKMdx7iCT0Iq8hn4jEPgFxixSgeg4gDN3vJtvZdGi2JQxiNb0qZ1n:jB8EUdxmJIDhhPJjR/VElyqZ9
TLSH
T18D24393BA3980E43E67A4278B753C541EBF3D4461326D2CB4AA8D9481F83BC1BE76175
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 46KB
SHA256 1203c24a5301805962a892cf3ad7acc275e285da455d6f9b57c5b008bfe93944
MD5 5f8540655c4229e0121d1d5c47a3d018
SHA1 04cd8406b622ccbf2733ff047ef03059b46e0946
SHA512 2673b2cad08b88f18aa6cf52af68f6b219441afd1187f3e4025179f3f4adbbb163542d5203c82454bfdeb2e6ec2b2d4574d4fbe822c488902982865876f7b1ac
SSDEEP 384:mWOXURWbacvA41OPsnElB7TGPdQbtlrSuEsdS+YlOjqm6qSfRJBXn8I/hljHRN7Y:HIN1QsA7qF2hHNWZpDj6Ro9zq
TLSH
T1FB237C61E7BC4326DBBA0E38A5F1C5065B36D2D39B01E7DF0988864C1FA37C0D971A69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions.dll
Size 42KB
SHA256 df6f396429ed4b30483a1f4ff13c1614ff09ae61deb19fa70dbab552232523f1
MD5 5c173b052f6c4eceb8d0dd34cdb81a14
SHA1 d06f36520da7c6beb9add5769562183936421ec7
SHA512 7c7686a5e3cfba2f68a7219f27154ca9720a28a007fca4d72d3309a50e7147d413872755cc6cbe76d220aab9366598d50a9e5b6f16119f2e5110acf7e04d14a6
SSDEEP 768:KJbbvZHpUkPSwUfhqUEnokOkaVGU7WCprcDj22s9zTxOvS:KJbbvZHpUkPSwUfhiwJrO/kzdOvS
TLSH
T15C135C7983589317DABF0A74C26BCA432D39B7E2570395DF10D8E5182DD3BC5AA32638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.HealthChecks.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.HealthChecks.dll
Size 110KB
SHA256 5dcd69353c633edbc6db09a493607e7ee5443b82468fbe69c09b9bd7a859d3f3
MD5 01bd8b05417e74e181a5a9a3015c1875
SHA1 c7a08b95f147485028ebf457ffcc9067db6abd1a
SHA512 7a5a1311d86785a918875af55ce6571838399fa758714541757c9a0220b18c16929eaaf54fc981c36f96d6de0dfb59253c9945d9a0d5e23554d2bf3c5bb78fe4
SSDEEP 3072:pYLJ+5VZ1NhWce1V5KPqGW8TzZLP0V4btOpl86l+rkR3P1zrFmN1Et+MirxhZ04N:t0V5K5/Lnr06oHV75ApV
TLSH
T137B34B04B3C84316F67E6B789532AC52DEB3F6631762D1CF15D880990C93BDAAA31277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Diagnostics.dll
Size 70KB
SHA256 bea4668be7ae9a4b723b967f210729192788cbde368e43b8998b532819d7fe5f
MD5 40c5b55af9a8b1e4372b06bc1270b404
SHA1 b82c8ee1b7927c0552ea69af819a42e4173bbf0b
SHA512 8f7604e06211a596ff8f854de01c784ad755357bdf9cd988d158b6bbf6594e6e0a301a19b59df6b4c873220baa36c5b30706ae08c137ab60037e9853efcdd081
SSDEEP 768:64dpFs1zB+2S51QCOH+WNtrbFgK3/uTYBmtv9KUE4O7N9ztd:H3FKoGC+rm0X+9Kp4yvztd
TLSH
T1E7634B09A3980707CA758EB89263AD46F6B2F9D37310D5DF498C8A8D1DD73C48B3526A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Features.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Features.dll
Size 46KB
SHA256 27f882c00336e72d9daa4771b2c6e0b4b1207df9b45998d6326446aacf3e0154
MD5 4833ea5af8a87ec861abf686af1e38b0
SHA1 1e99d6dec8d2a372dbb0b53a5281706c5aa8a2a7
SHA512 946c524c63f32213950c19deb31baf641dcfd896849b3b3a55c8cec0c38411410c7d01e684c5dc2bae1a49d62290e00f7d91366a186ce901365e753303833709
SSDEEP 384:bMWe5ieWhCim0xDERhcpoOZkmrDiN+WVGMvfF7z2jzJpRGF3GOXWMSk2yzJLj6/x:b5hJDAQPkADiZvBGM/JH6DjiNs9zaQ
TLSH
T106235A1967B84307CBFB5A74A4A2C646AF35F7D39B00D5DF044CE5480C937C5AA3636A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 38KB
SHA256 3c3fd468e3dc3f946d0d3d01a3501b7cbc5b8c551c3e4a9e56a91ab6131092f9
MD5 5df51b1cf024c300e14a2b3fee802976
SHA1 6224a0d916b52878678243a0ffebbd30d74cb9a6
SHA512 d47a45e84a024b33b10fd24ba15ea7002a6d192a421f5d5902120195165bdaed87fe3d1ae95643027c40e5570b525dd27cdb04e14e134e2ee662c230ac6cf4f7
SSDEEP 384:eWs/hWjMjmf2xfv2So+MVV1i1w/hljHRN7u9fPOxFR9z2exZ:aFyfCfvlGEuDj+PO59zl
TLSH
T156037D659BA84312ECBA0E709DB6DA4A2E3DD3D74B01ADDF0449E1051EF3BC4DA31674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Composite.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Composite.dll
Size 34KB
SHA256 3e46b74393eabcd7330857eb6ede15d0f102382b682993b7f22f0c28fb859c85
MD5 440431fa49015ca2701412e5556fa2ef
SHA1 bb58ec92e89f6dcd4ac41f6d60b451e0deb2ab41
SHA512 df0bc59ca2aa445b1016d0ea7dfac94f2acbff5e356c251beec51bd73bc2cbacab8ff144ada209e8e96ae6f34364438a0ead80adcaa0012d23229fb8d6113773
SSDEEP 384:6TW7/nWq4okNpyeeOhRUkgrIMFVUTUyUB/hljHRN7BBuO9R9zOp1:6kR4zpyfOLO5oTxUBDj59zc
TLSH
T132F24B5186788607EDAB1A7097A3DC86693DD3D21E0096AF1988F6481CD37CACF72738
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Embedded.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Embedded.dll
Size 74KB
SHA256 f4d17ec721afa840865ddc63ac63b63acfe3eca0f6bb8d841da964e265d1412a
MD5 229eaa1f5e7295d2eba91b6ae1502ad3
SHA1 0c805c22c9439b58cbb7e64e2bc43088c5b91523
SHA512 5b1a1799634c69bf1ab6ead33101713a94612f2793037eb07d0ea2d422f02172a90c1d395930d51a443cf252f7a63dfc966a3925f572cad13194a546e20be6c1
SSDEEP 1536:R5rg34904sM10jBKiGYLpEispPtsJ8kszK:R5rM+0U10jB5upPts+Fu
TLSH
T1EC734B0197EC9301C67BDA3D82728A06D534F7932720D6DF0A88F98D1EDBBE09A31675
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileProviders.Physical.dll
Size 90KB
SHA256 ae87ed07e87fe056b5399237671552248558808444740cb3d447ee5543e8c5e5
MD5 9c517b609f9134621980cda7101d4b7c
SHA1 3e3e7326d0173bf8dce74833ccf0a4a48c59b99f
SHA512 87d3596bc0a7b402019d4b6eb9515603e355ffa92034f2c64fd5480c8055eaca1e69b7de08fa5527cf2c6de6dc5b500f6649b46656e967d8e8f87010c0277d38
SSDEEP 1536:zdexrR5FveH/Ijw4rF9dE8/WWNcnuHeIpdtUxgf7YThpzqOM:zUxtb4cN9PBiye8zYFpnM
TLSH
T138936D0573DE4209CBAAC6B885738D63D231F1832B12D7DF44B9AB8D2F833D59672169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.FileSystemGlobbing.dll
Size 98KB
SHA256 0057fa70b26c7d917ee9f7aaa51ce7fc119a65db7e4d16dfa9e92d037ac48305
MD5 18c1eeeaba57c476e1d26da6f4a218c9
SHA1 0e0a44f4aa6b75c52b4531d71c66d2d03074344d
SHA512 6ccf734cdc75436dfdcf79d4d811245ec92193687c36127b32aeb6f25844b69b0a1c62c03adda4f8a9e56531d4bbbf8ec1d431d910cf204a558fb21e19a351ac
SSDEEP 3072:PXffOBDgvPQ3QRVKbTE3LKuP04c+Y4dJQKA:/ffOBDCPjKSdJ1A
TLSH
T188A35B69B78C4201D6B982BEF6678881D630F1936752E3DF094CDACD3ED3BC19670626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Hosting.Abstractions.dll
Size 78KB
SHA256 da29c0cdda014fb777d8eae7fcfeb8d2cd6bf113efb9e3b245380f801adcb5ea
MD5 ab7461b1a98700c4c55afde6049be4a7
SHA1 647e991150ad676322c600584f92c1d657e7c15c
SHA512 a91de155d73597a32da9bfccc0c055f625110a8f78d554522237ea53a4d5f7f95ba1b272b2dd01f4e23e255859e6ec9c14473a841d8db271f284597fd0e9c4c3
SSDEEP 1536:lGu+u5hPGqU7GjPb6axWFvTbQeZ9lRkcz8:l95hPmmb6ax4nZLA
TLSH
T1E473F84163F84215FAFB3F34A9FA85168A35FD86AA35E69F054852CD0DB2BC08970737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Hosting.dll
Size 150KB
SHA256 0c838ba3467ce460c7aa1de8fbe33a8567fdfa9cf79f2fe42cf1db18ab8374e5
MD5 86c1ba82bbf4430affa21904db6da1bf
SHA1 789f6fa9458459db696e51049e3677937fff822e
SHA512 1433c808cf51fe95ee1027dec6b3f77808521b367bd70506677b5fe2a3c08682128a3c935df05b213a5a5b70da81f016c44a4ea2b47c613b272313ca92a47c26
SSDEEP 3072:dLClVXW7VizAfxcP2o1bbPED1Gi2kFExMI:VkjkmOo1El2ZZ
TLSH
T1F7E3382293D8070ADB6B91BCE5639953D633E58B1B01E5CB094CF55C2EDBFC1B632226
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Http.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Http.dll
Size 186KB
SHA256 2567cafac3050e6ec6d2d839f57d9498743c9c58fffc8e5663789ce858d59390
MD5 1979c147cbcf65c20f4c1a6cc181ae23
SHA1 03992bbcfb55ddb91692500c2d0e88047a8e45b5
SHA512 24c4c723d0da8d99c889c55f9f194d113219e0039ffb72d95ba22308a5e8cdc4683227def73946644024d8a5b077b4bd5d2e0856947ba606832f2234e6be6d89
SSDEEP 3072:4GkF+FFpckE5EOyf2tWhmPdvThfPX3YpyEfgoZH2YVOLHJk9DX:sF+FzjE5PTVX+PWYVO9kt
TLSH
T19F144B2A939C0507EF7F427DE1338591DBB3A8160721E1CF4999A9880F977C1BD326B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Identity.Core.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Identity.Core.dll
Size 438KB
SHA256 a2cb2b4337a14690f950c872d7880b2bb2fe11ffc07bba433613456dbe4b0e05
MD5 5c8c662e032e39c0a957ef545f8d28cf
SHA1 db25f3fd736abfbf99b0329de56fd9b132ab571f
SHA512 903ee5ba35839d1c6f8c5aa697bb8038db75fb3b1d44eeeef03715d2666b0c3a37c6af3f7221caf72b7544a339cfff9fef1498e313dc30b97cf4365ea7d0b497
SSDEEP 6144:z8QyuPNLEqRKwJUUKFrJxWGOfI54vTKb0hFjbeny:YuPNvRKwZKrmO54vBhdmy
TLSH
T1F1945B47A3D88305EF3F957AD1628410E6F296829BF1A7CFC048DE987E8B7C1987511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Identity.Stores.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Identity.Stores.dll
Size 86KB
SHA256 e50d6f9a5a5f469961681d3181093eb5fb520f86a7b3f0bfda2b201b8ae21289
MD5 f856a813265b6e252fde9398dc8ae704
SHA1 ad4adfa888eeaa618a6abedab345596f787364c6
SHA512 eacae1228f9fe60c3ecd6531d6db9a3733a6428982d652f8f39b2097176ec929cea3c7b44db4115ac99659001706c854eeef2974469c74c1433319df4f6dbbcb
SSDEEP 1536:IrgEPrdLkO4EFT52lpdxWn9UmgDUL1ZvQ1uy7E2MSlVrmEGICBfyRz8v:Ir3rtIEn2lpdxWn9UmgDUXv4lMSl1pGF
TLSH
T189834B41F3888911C5BA867C65278901E4F2F1C6671182FF65ECAD8D2DA33E97AF05B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Localization.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.Abstractions.dll
Size 34KB
SHA256 fb4aa1bb40e64b8cbf9162809e1f9689eb35b28699d6112ae6b96306e16593f5
MD5 adb357dc1bed8d590e33f4dc56698ca4
SHA1 2ede93b5312bfc51e5e775c2719e056a727c2b98
SHA512 71321607d535ef885077a5c9db24958b3c32dcc24972ddfb0516dd4dba0624dc74b2e59d66f6fc6e173a1aacb2bda1223560ad2302303b6fcffd578625ee7a4b
SSDEEP 384:+KsuW967jJD8WgjEHOCKwU6G1V4c2tO/hljHRN7pfPdlKR9zVrrx:+KssPJDqOO/qEigDjpfls9ztx
TLSH
T1ACF25A56DB68435AE8BF4E30DAA6CE423D39A7C7570156EF084CE4490D633C49B70B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Localization.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Localization.dll
Size 58KB
SHA256 4e4b0d4578c7a7be1d92f52c57c3c7e8c8e4621503c852edcf3ee8880b9f9d37
MD5 62da630814ae56d7cf12bdfd06e294c1
SHA1 32e91584e93a6e9b07ae105d508720d9b0206e2a
SHA512 2615b485cf7337029ed909c20dc694ed2561c769229ba4f8a58fce742fca1133d3bb9d068bee2030a1d30956e32f644426d0d3ea6edf40a37d2477400339a4f5
SSDEEP 768:KwNrDb64amHJRo4fdrbdrpdxv7vVcNvZ3qWVlvW1UHgE9zK:3PbtnvG5THPzK
TLSH
T1D2434BADE3D84212D67E4679CD739800EA72F2DB6F22D8EF4488D54C0E977C4963163A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Abstractions.dll
Size 146KB
SHA256 ccbae38b5a4a6f50f2a941741c2e455d087371ea9627e72b2ffdd39f591cd041
MD5 aa7b9925a1b6ae21b680abe24e5a7405
SHA1 9444bfdd9509a8f94b32c4f43ee4653d4da142f6
SHA512 1bd17a720c1c477f730b66fe75a18c543eb8b4e8dc5bec7629a32c8a21cca7eedf28b42ac9ecc5eed48489b20a75a3f3a75e1ac0bf28c66641263e641c46b243
SSDEEP 3072:3JVZgh2lsRMoVWbX1qIKsN02MPtJVoz4PmiFFuz4uv4R:By2SwFLonjGz4uK
TLSH
T134E35B2953CC6293C77F89BEC6538A42F6B7D3A64301DADB1888D80D1E57BC4F636225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Configuration.dll
Size 46KB
SHA256 0dbe927f8c8d1d785b73b2769c5092645f126854e4841fda0edbaa05813af848
MD5 2db1206c624d1b308f6fad8fcc07b119
SHA1 27333a3c4035d3adf209cccbaf404144f12de919
SHA512 50996785c4952d4c3361a236435d6e02343a632480a7a664320f95207afd7f25434f1ef47c830a8e85616bf64094d714cc24fe44dd1dd154e120057b0cf09c29
SSDEEP 768:YocU7HXTzMnsbLYKkLrZIGMjbJbY2EWxSDjG79z8Y:TzXTzMnmLotIGelFsGRz8Y
TLSH
T1A4236C5197948316E9764A75EAB2C906EF35E6C21321B2DF05BCA40D0DE73C0FB3623A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Console.dll
Size 154KB
SHA256 0983d1db2d2642fc73e6990715d5d28e03c1479a8294fe735de2424be6eec478
MD5 7d5911bf612753e48f1f48305e27cb30
SHA1 f2078892baf1cca17fc2b0340665f1e6aa1560b1
SHA512 03ba3088d8a4c3530a3f007f072cd679ee2615d1f1a4912cbc2c392f8e539f541ce8726b065a82a49746906d9faf47c46adbe8648e9e86d60ebcda4375f3b994
SSDEEP 3072:xoXTjiNMVTWWnCTDO7MG2csrfGyh/thvCE:fmFWHNRh/39
TLSH
T1CFF35C2AD79C0211CE7F857CD6A78951E57BD9834342EACB0D98D84C0FA7BC1F632622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.Debug.dll
Size 34KB
SHA256 8fc8b2555b5769a88b9a39d8bdb2b7651861b5ed01a349ee2f7f3abecee6e4fa
MD5 4faa9dd22da7d0d16509612095cd6483
SHA1 b4768ccde2a71419bab9c4cf6c771c31f40b6bde
SHA512 a2018c5f2d80ae4ed9172c18a845261e2a4932dd95471753e6793e1f4664cf00fba9fc2b5aafda432dff6430e51d892eb8b695483e5fe18127126de8697ea6e6
SSDEEP 384:WWJIpVMWY5LdrSk5CuC8P4mZjhqW/hljHRN7sZER9zgx2:OugECmg85DjMo9zu2
TLSH
T1B4F24B51ABAC5296E87E4D34DBF6EE427D39D7C25B02AAEF0188E6040D637C0DA3531D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.EventLog.dll
Size 46KB
SHA256 ab449907b30c7880a86b11e89c8443106414677a2cc62ccfc36640801eb97c94
MD5 f58fc37b13dc3e1ae369b1ca8158524d
SHA1 2fe011cea60b62ca0d0787838dac99cfb4877c14
SHA512 8a4b1847e2331bb2e2483a89d201cacabde85f2f0bce0dd0cdd7b4689cda812819350796a38c1333aef0dc48a7dc2ddd713cdb0ae22d1f45bec8e012dff39692
SSDEEP 768:wm3KvnzUkth6PtlWd2EBQ7DjYels9zvSJ1:wkMh6PtlWqczKD
TLSH
T193238C2587A8131BCA7A4935CBBADA01BE39E7CB5700E5EF0A5CFA4D1D933C1993112C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.EventSource.dll
Size 62KB
SHA256 b430407c07c36e5c491cc50da6de3141c551a1ff0c9a3c5626d48348b82987d2
MD5 4cf8376e3e3ff82cb3611ee989eacb67
SHA1 f5020fe613ad227d9ba43398488922d23ba454be
SHA512 e3871e9a37c9d0dac0cf5b2675d929ed2f4ff5e396832cdfcf8fe55cf3fe4933052cb10e713858ab22e1528b8b3215b9a04b1b491b63e51c9b646f17c93859ff
SSDEEP 768:gXRE2d5eoKXEs3qpl5yDj70oZXWNQdjO/uiKgADjSoo9z2:S+y4Es3qpl5Gj70kRheuiKgySogz2
TLSH
T12F536C206B88834BCDBA8938D767DE46D576F6972724E9CF4648D18C0EB37C19F31225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.TraceSource.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.TraceSource.dll
Size 38KB
SHA256 6cec0f5a7d3972027e1bb44e79f021dede7b90b5b6f6849c5c765a3513877488
MD5 eaee6dfc7da3800b0a3ac6e4a99a5fc7
SHA1 e4fbc88beabda35f36b3b697ab51c1c216662404
SHA512 d361d6487595217ce7903f023793765d16785a0040f8b456e3673e4276c8dc151c87c2f7306c8ce519c2c494f01f77959a1a3e362cd8eff4a85f61fd95f50d2f
SSDEEP 384:vjW3PsJW73zyBV7DOM3rBynViCrJYUNEqKTYhQ9gu0M+e/hljHRN7KU/mpmrj/RM:TUe76ErBy0CewEN9gufDjymrjZ9z4C0
TLSH
T1CF036CA187D84316EE6A69B89672DB51B934FA831B10E5CF0948F5480D63BC0DF316BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Logging.dll
Size 98KB
SHA256 e284b4edfc7b46987abf7db4858a23bfbe648459eb85002f1ae16e90f275966f
MD5 c62fbf550aafde0638e7aa2db8d63532
SHA1 2cf10682eb1290a9ed035e49490009cfeabcfc6a
SHA512 730fb7125289e65190199c9adc47765b58595b1ed03c9087daeaf9d7b046c577e10b51cfb79761bfbf77c006067b3592735b41ba0418d2c6fa1933c579b3a9c9
SSDEEP 1536:twx9aZ/LwpESzW/gh+K3qh+EYn+l/4pmOY8P/2Rz8g:twx9apL3R/g7a+EYnrpmR8Ps/
TLSH
T188A37C2073885212CA2E863FF6B6DD44D639F2932B12DEFF4A8CD54C2D977D0927215A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.ObjectPool.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.ObjectPool.dll
Size 42KB
SHA256 b456c2037689bde3b8e6fe6225da60804401c7b8a7e48a121c0402b22eba5d29
MD5 69306f91fbb7e8fb261c2ebfff580a84
SHA1 a0f1106355df5e8039a7bd24f7cb33e2dad44198
SHA512 f86d155026ef5a81fbd1c9a99997182d84f4f0bb8c0eea9c4af292cbb4daeed7ef0776e70802ee4a426b822674229c02c38ea61a100d06f495ea2d176fd0af8b
SSDEEP 384:O0Wc34QWPm1Nl9DkMhQNA9CaXSDtPGTgnVjgJQDpLZj/hljHRN7J4ER9zgvW0:OLNmN9DkMhQNAPIAYjgaRZjDjJ4o9zOr
TLSH
T140137D7657984313CABB06F499A6EE12EC39E3C2630192EF0298F58C1D973C0AB3553D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 38KB
SHA256 89f2996a151fce1d535017c8d8666fcd9da331a8eafa54f7f047f87ecc5b8a47
MD5 ca94bb5bd3b46c418cc1dc6eb52096b8
SHA1 e36526b8b7854da74978822322ac0086cbe790d5
SHA512 92f5be2f130d5e156f3403166e0f470038e5e4c4985f74a279c3b4ac6feb1f7c36aa54eb7d100507e38aeb767abffb0fed7ba68f682a37a7ea8d05670ef991b4
SSDEEP 384:t+zWzP0WrLrepYUKAt66KxTfh/A8hPDHRN7rjscmeR9z6keM:4cZLrepYUOOQv7N9zt
TLSH
T1C2034B489B484623DAB7D970DAB29CD2ED36E7865744B99F408DF0080C9A7C5EB3226D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.DataAnnotations.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.DataAnnotations.dll
Size 38KB
SHA256 5acb63e589615cc1d9d9e890eda77a3aa8088bf020446c855601492feeb9be33
MD5 3442ebe7e3711c6c7902e3b022f7d90e
SHA1 528385c68ba92426d8f4f1cd0f060d0b53751402
SHA512 895d97742b992f0afea4f3f8bbac0545e74e80e3b100324bb8e5651661bf25f40018159b0ac65dcf6e8f64f99d1c9772046ef8c0721ae47a04a485fa391167b6
SSDEEP 384:Fg3W7vqWDmqsvptbp7Hr5F5gH5eOz/ksjuQxZ7e9DjW0xhZG8HHOn6DXmwHPDHRT:Fgo/aRtbVL5F5yn8Zc7N9z6
TLSH
T1CF037C8487988311EDEFDDF05AB1E942AD31E6A25511592F9285E40D0CE37C0EF3677B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Options.dll
Size 138KB
SHA256 6ccb9bb2893066fa460ec528d0bffeaee6afe430c782820748c6361e8713fa25
MD5 94ff3d22ffbacfb525584d8fda118fe9
SHA1 6801b4ac8ddb437bab95833a68a00dbed633d8eb
SHA512 8a6140341f7effbe38992dfb7eb50e4521b105bae16b6a8526937c20b50d1d4d927ac16de1bd8b1a6a5cdadf503a598d0ba2806a0f6ecf9996a54f1c53f3dc31
SSDEEP 3072:L1EFLIEELjOz9DgGabQvhwMEIdZUPh6V6:xExILSS4hRd/UZy6
TLSH
T120D34929B7480702C7AF897DE11B9D20D933C192A31391EBA0FEE5482F673D1F5BA525
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.Primitives.dll
Size 82KB
SHA256 68d4a646e207680c8464a49788cf80f7dd5b7651e28269e91a179af859931cc0
MD5 865341e0f51c815b256a68f510012dfc
SHA1 06046c825ba68ea01dcd69857631aa60fc7c83af
SHA512 a22a1709ae19a6d3263899db435cbf7415cad48c0f52a4f5a1a85191a089d185a7062a7998d157982a0dc710e2ea8fd2de1801cf66786742b430192e3d6eb6f3
SSDEEP 1536:zywbaTeNi7qMHOrG29IbwkwFC/pag33ttBOP7yVfHTuia+1oK5mD44444YnnoIns:zySaTeNgqcI9IUkhag3lOP7yVf6iaEoa
TLSH
T1F9837D1173884B23EABDD538D462D90AE575F2923712DBCF8488991C6C63BCDDB3606B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.WebEncoders.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Extensions.WebEncoders.dll
Size 38KB
SHA256 c1e031094cd6372902250e8422b744ae1b62368ddf48887e7a56fc6c1052c233
MD5 b8953207082ef343accaa7aac2ae2712
SHA1 d6758305b51fddb4b87b988c536c48986c40c0d4
SHA512 e583872d10882ec5e6db10dac72673cfa954df53cb064e9e229b16664964e3fa4969bafddb8ca5949617502301d9753b00f244135488b64ee4ee150a3fecd33d
SSDEEP 384:eWPRK2WKrukgqtox3NAAwVnIGaLLXh5SPDHRN7HUNicDR9zwhya6:QirWeQrpgiT9zwC
TLSH
T184036D59CBC84223DE65C134E6A7CE4AA836B7C31B11AEDF109CD2540D933C5DE7126D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.JSInterop.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.JSInterop.dll
Size 142KB
SHA256 1fbf3e90a8e1fb1208a637aeebd1a6bed50dd5b7c4b7cb11db9f7e4d759f1abd
MD5 7bbfc511229c80f4b7785e9caa6ff59c
SHA1 1edf627fa79b31278e1cda0ff2fa6d960bc630a9
SHA512 3f4d6ad005a74bd166058bd7f1dfe4de5a7f4fdff3809c16dd34a7ffd178f23b0d11fb31172bd929cef256cd4b81edf5d84b59f4c74cac112110fc8124b4a16a
SSDEEP 3072:GwClfwZzo9INGCXDidgUH7x0QKiXYPs9UTKOgO:E8sCXUNaXPXKE
TLSH
T1D0E36C1AB3988701C6AE927DB6736D43E673F5821727D6CF0049D58E0E93BC1BE36216
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Net.Http.Headers.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\Microsoft.Net.Http.Headers.dll
Size 218KB
SHA256 58b88642e60ec665ed442a12f141634f1fc0bc4b742d0af63e72eb3dcbdfcae1
MD5 2cb54544048a5630e07de78ac07ac57f
SHA1 73ac26d8326ce51dc19150a4cefcd166c4b3c50a
SHA512 06ab0aa480070108306f0a15dc12c96ee1f2f449598608b0b6eb204fab7345214a0358e680226608f0b303f066ae7ad3bacced4ab04aea9bdc35057babdd4cbb
SSDEEP 3072:mkmYWoJ4x1MUbtSqV+wQ1WQ4pxyoRJodKlkVzCXnmGhZf/eRXuqXtUw8j60:pN4unuxoX8ouotUNjN
TLSH
T1C3245A5AF3984E63F66ED27C9157D101DB33A156C306EACB0BE8D9452F03BC1B93A522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.Messages.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.Messages.dll
Size 794KB
SHA256 6ece8ac0b02d83f71c536fb90236a1120d9b871ff607be9358950c2a94546a6d
MD5 5110a4d2ac9b49db989780a2e505badb
SHA1 1c91dcbbc5a7cb2fe176b7fe4a58e8e2033def78
SHA512 8aaf4fe503befa7124291d7f9c647b4e41a920273fbb7ac37cb404368d272efdb9c692b3fbf52f50d14e1a0a712c3daabc34a4e8d6648635dd53f4c442d13c91
SSDEEP 192:fir7irZWQhFJtvUmmnoHnhWgN7agWONeythuFwleX01k9z3A7dNSka:qr+/hljHRN7PFUwleR9z6dMB
TLSH
T10705B3A69F388342DB665870BFA6FBF22F3983871940952706C5E9453C533B4AE215FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Diagnostics.EventLog.dll
Size 378KB
SHA256 cf1362b227045f2d6bf6d81a24ebd8b6455d55cf125ec72fd3e763c7afcf8ba9
MD5 bfdce0cc196339bd5c6c6e9e3adabfc5
SHA1 9f96a3ae2310a80e5785807029fdea014876bebc
SHA512 7294ac67f6258b873dc80cc58ef90cc6f3fc5dac8684518996b7bfb2dd691c263cd8b26487943922d0f70d551efdf868f44593d862dd163a6e082f437eace2c9
SSDEEP 6144:5xDAncYUbvGwsTs5HKn4KjWVZWWiPSm1Wka+3eNauLn1Sj:526OM5qe6xQNa1
TLSH
T1DC846D30B3D4C619EA6E9A38C5228001D9B0F98757D1E7CF8540DE9D2F67BC1EA39366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.IO.Pipelines.dll
Size 190KB
SHA256 ac9f709b79692e4001dfaa194408686511ecaa9b79473b82b854420b16392f80
MD5 99f1fb7ca118c98c3c15c570d3a84590
SHA1 a3441815bfd6807262daaaf6331195b4947e1123
SHA512 1152aca7c638506f582829d173bfcfbad65f09399785012fb8bdb8032ca66b4f5ddca3da8b6513f27a3cbee663b8c9d54c8f24ea4c7ab3353f36f5874b0ba3ab
SSDEEP 3072:2Fp/bjiQPF9f/hPJvZLZzBDTudhyTZhOyE3C9qC4bgN0xmRpevE6UumHi90BM4Uj:Yb9b3hPJvXBuf3GevJwC90BMn
TLSH
T16F146C56939C4703D75FA6BC83A3A202C7B394927702D6CBCAB898542F577C1BF36162
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.Pkcs.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Pkcs.dll
Size 754KB
SHA256 d9104c8586e37642188d48d272d0061bf3183daf301fa61724739015b8160c56
MD5 a0fc44eb09d35d47c25a2324687fde13
SHA1 fc3090e032cf6668388ab07b63b0b661a1069487
SHA512 98435d7e03eee2873474c6d218288a45c3a4f67a363997a26c553486877ce0ff13219e064b9051f276525be7b422fc6381f2962b9ab8b5cf634bb27c0108aac8
SSDEEP 12288:G2sO5jm3r2sMG4btps8W9dG2chn8uEJh5UOSfBxccXMtxF7VWK2tYfARj:4g2MxKzch8ueMxcc8txF7VWK2tYYl
TLSH
T130F45B14E7D5871DD63FE578C1630022CA71B942A322E7CB46C9ED9A2B73BC2D635326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.Xml.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Security.Cryptography.Xml.dll
Size 450KB
SHA256 b3168062325e9ba628e6dce1efa2ca59de7776b7129c751fce2316ba46d1a74a
MD5 7d06676dbe5770c75bd60a5f2b1bf7db
SHA1 850ada8c203da3b634f348ac22d0041ae3534385
SHA512 de45deea51345ba577a333ca4ad8ba6326e8963dac0e5549604e4c36d13f15e5f535e5a2eee18fd5909bccfc08882a51201c6578815a113bfffc065754f18793
SSDEEP 6144:YZcWQLyPz2thA1cYGrRdqWlWRsGhNnXmEFpH1xwoqw/HgTyZuEHd8bO5wMTDa8i5:YbQLyPz2thMrSRQWcThNnXrUTll8COwV
TLSH
T1FAA42B2867D80908E7778A7C82726001E6F1FB531791D6CFC961AE9E2BD3BC19635732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.RateLimiting.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\System.Threading.RateLimiting.dll
Size 162KB
SHA256 891cb4e9a678ed15723c7b184c086b40c01befa419572d4c5ef2344ddf283516
MD5 9aff3597ebe6b92b4c2d7eb59a1d2ab0
SHA1 ce86518f0ad48a50af6b3ac15958fc64396b9809
SHA512 cf57a445daa5494e13573642983cf272e31438d317a61b32cb883b7f7c04eecd593078c3afab4a7f9aa9d06be36ec5e60a78ddff7b6b24450f0aa9fd6e450d9f
SSDEEP 3072:17dX7ZKa5OM2Wt3hlamiiYEazqSXXaLIYTbeNhxICyUG4Q:fMa5O/UlSrEfLoi
TLSH
T1FDF35A72139C4513C66F82BC816B8142EFB3BA835313D6DB4C9CA5891F57BC2BDB6426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

THIRD-PARTY-NOTICES.txt

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\THIRD-PARTY-NOTICES.txt
Size 55KB
SHA256 307d014f65d8482314f1400ddeae7a0cbabb96c2207bcc77f6233cc10588e5d9
MD5 69178a6c02d1247f7ed2736f923afe17
SHA1 ee0b6671593b99572da12b58cdb22b8795f196bb
SHA512 e40e1d562bd5253f366be749b947286a14952a04158c21529b7408a4eb19a89e288e1c68e63d4ba4177cf9f1256f1ca7792e385c8a8bb16a2ca2ea3ed2f207ef
SSDEEP 1536:F9tPvI/rpgjXsiQK2naDGoG3jZjuwzesze7zeZzxWzx3zxTuo9OFYwT3JdLHLEip:FcrFn2GoQjZjdzJzKzSz8zhzNOnJ5
TLSH
T10C43951F7E45037319F2C7616A69A8C5F21EA02E3B5B1904346DE2481B3B72DD6FF858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcorev2_inprocess.dll

Path C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App\8.0.26\aspnetcorev2_inprocess.dll
Size 374KB
SHA256 31bc5e43821ae0061e4d931cccbf57afcdd7cb3d2a3a634d5e400b19a2f7c961
MD5 dd912047f23d36612f9c9526e1639f48
SHA1 f98cc7894c2d964d45df98a44c6449ea1d9db751
SHA512 3f0b64ffee815a8592562d8ec38f580a3659715fb70ed3ea7708caed58d655090fa7c7446c325f1c7155b58e5da2a2a65a943a29254f0de75a99a0931e9e5505
SSDEEP 6144:dDycDRncxnpr/cCOn7h3JCaiu6YqRAyNFgnKUtNn+0q8VYcv0:YzxpSqXu6YYGgmY
TLSH
T153844C1AE7A80179F0B7D5B9CDA38801EA727C8D47B196CF1394895A0F33BD49E39712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eula.txt

Path C:\Program Files\dotnet\shared\eula.txt
Size 1KB
SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Submit Download

state.rsm

Path C:\ProgramData\Package Cache\{f600cee9-4c2d-456b-b0d0-46283c87fbc5}\state.rsm
Size 916B
SHA256 16443f8d15f473248409c240fdf782148f0f20f9bb5eff33812c709f13478cda
MD5 edeca387ef8314b1c284416ca6387d74
SHA1 b9630645824ecb4bc1cdd171b18fca72edab9d6c
SHA512 4d243fcb32c95d1cbb7944cd9a0dbee4727a23fb87b453f55ab02a75e3e5e341ce546d0840a7526cc23f5f4c86e2950ff72758f1bcb67b6c883f3a449142e0b9
TLSH
T131119A504FFA4628F3FAAB7069B59659243AB8212E32C62C044131868F32B91C974F73
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9cf5acc3a4797f1d8e969ab1970c2330530e33f7dac25d2b42a810961a67ea68
MD5 6bbadb85852ef58796e988ee6bd3abc6
SHA1 f87a8c99cc4052067a5b532f97bd1ccc92f6a0b9
SHA512 a3813b64d663d976b681f2ced98d428dc47f49c99219d4a147277e7c8375b07692a5a14501eee0df77c86f9da6e3205c49e89510005d4f3b21e3afff243fb088
TLSH
T13CD080155FF27C70D014E8F694187B41392DACA68D43A6115471EA7E4C224D48BD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ea750b8ccfa8d7c7a393cdf6c9c8a3be0f2f086fb814bb44905a02c83d9af71f
MD5 697a394c9a3ff43b8925489b648b073c
SHA1 5828315de0bd17378051f664204bff07d8659dea
SHA512 37519d78554ef3947030bf7fc74d2660bf2dc752f04de85daef8079fdce335d2e6ad77071de5a938f7422ad0bdd2acad3963260b61149fc0d91381c007a2514f
TLSH
T173D080115FF27C70D014E8F694187B413A3DA8A68D43A61154B1EA7E4C624D48FD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6800e182c01bd09b603d70b346d5b2016e6cec03d1bcf304b78b0a4f925afd1e
MD5 b97f0791fce3c033278b1a74e80750d5
SHA1 0fcb93f4f7883c36d2efb404c26dd8baf5dc0336
SHA512 df2e0dfada7090d21afcccf262e8ce8763c393ba97d1ab936339002c47e414a957cddad7835b150c05a67e2fea8a17739ddf616055416b1f9f660919cb2b2c80
TLSH
T14CD023757B47F875D17C40B1C1164B113779440938C79107F325408D5D7D9D8A7D41E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9f263956e3f69a99dee772e54cc9a9a7f80de1c6ecfb292c39272db6c1a63c06
MD5 8aa84b107c7cf9133d064641cd4e8b7f
SHA1 50d8eed7dd46548156e945e6929fa4270264e889
SHA512 52b58a632f3407c798ead08fdf47ffda8c2d0120b94c7fb908c19240c4e628de5fb30697d000598d73a91a5116bf7bc0cc563d62a23667f750910fc686b1f874
TLSH
T1FBD023756F06F864D67A40B3D8174B00377514553547A1075371444D5D35CC493C91EB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 527b39c9deae4c473f6433b02f94eb69fce5cc9f38d6c254cc50d71354bc743b
MD5 7e2d6fa1350b068e5cd6beed88f295ef
SHA1 05d5cb57019ab74d15c54ce7e52ab04fc5228e02
SHA512 7717f44076dd772153db76ec420e46bb254552ca44dbd8f22b3167353a81a127b5688951c92981d5d94222d22001feb49892e94a36ad94b0b0be3ca10e0b4d69
TLSH
T137D023716F06F864D67640B3D8574B00377514553547A1075371444D7D35CD493C91EB
MD5 SHA1 SHA512 TLSH

Submit Download

0adcbc95-5e44-44a6-a102-db0c5bf19893.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0adcbc95-5e44-44a6-a102-db0c5bf19893.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4f211e255e74121700fbcce41e129ec4163a8cfec9d73ccb19ccf966db4504d0
MD5 a608f95f8ed68d99203fb83738800be3
SHA1 2c43c41db0f53f857dad5a84b1c6f2315b8b5450
SHA512 b2660db9572a75191609dd82daf15bc8538c3bb614dd0ff6b9f73513abd043e446cf9e02dd9dc2ffa979078135085aa297282da861ac758f440b9d4d99d7f318
TLSH
T11FE02BAAC830AC3749FD8F2910584745F75013572790594F3E3CD2098FB16274547C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3cf03b51bab8456863de180cf718bd8c46fc3ff5690b2519521eb600f0bb6644
MD5 a8d2f37b66eed17e0b0f9600c45f7d96
SHA1 5559c91e5f1b98722ce89cc6dcce5540790ea1b6
SHA512 05e1b8490af9d6a7fc58672c144a6becd9c72283d42423e86dc61635b47e7bb61e67f673bddd1d6ed55b9c6a5a8ac03e7edff03855027706d11b284091b38e5d
TLSH
T1C671C5864AB28439E7E118F36EEE2410F1F08E9963BB1E7F11D505FCC95572190C9C83
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5888d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5888d2.TMP
Size 3KB
SHA256 0dd7e5df514b59ff624185d46423a400f9e4e545a1e899803188c7cfb328a15d
MD5 47ab54e3ceeefbc5fa85b9d70239d407
SHA1 8a0fe3522455c29e2944a47e8808f7612c21af0a
SHA512 02f50f2f1d004800525f25ba7fa3ed2c3b5243045df70a2f3a3456d6e6a4cbe3b8d6ada17f523a776bec776f60742d1e7ffff030f7bf0a12c1c4d5e131716629
TLSH
T17A71C5464AB68479E7E104F77EEE2051F2F08E98633B0E3F11D506FDCA24B219488D93
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 eaa6a89acfb0e9b878f12e8f798b80f8f73e8730bc45bbc6cda8dd9ec8770139
MD5 4d967761b014bbeedbb433e7081bc500
SHA1 c5116a51afa0a69bf67993b045379dd724628d1d
SHA512 2fd1bc665a24c8384563db1cdbdb42a2dc52aaa13cee1591bd2815e9144dff96b32f522ea882cb20efe521df61d61ab2396e0195ceacd13264173b2e0fc62ddd
SSDEEP 3:MsEllllkEthXllkl2zEkl1T:/M/xT02zn9
TLSH
T1474404057FC00405CD041030441DC3504373F430551557C7345104535CC75C00C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 66d9c7982b3398920ce0ac3a082aaac9d950acaad2f49495e8e5f8b8149aad7c
MD5 0d4d145997e849b4e2f82128ef0c69d6
SHA1 cf2b0779a1d8c4c65e82709011ca98e965cac107
SHA512 c35e775056a1ef0e26b6e306c97b1fd85ecd050761bb34c780fc4182acbbf6f08641ed63a234b1e7cd55e697314628659775be7da6e20ce757e652b3920b9b88
TLSH
T1CBE0268954E8C1EDA0247DD3877D670896D0B403B3C83E0A6B4B888A6101B8BA6CA680
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 aa80aafdc8a8b8a766d19e546186357d30ab741e234c9ccd272a7130713471f4
MD5 71968f88948e61463f3db5c0c9c57c4c
SHA1 ca0fb5dc49ade0430f4140c5c10a982b2ac38854
SHA512 0043f2be0dccc6a9d5f152696ab991160dcc09f956004ee4ae32aae3a66ec85a5bf3aa2a84ccccdc3955b4f555a3d1d21d22f8943e00ffed3ae015102e39d3c9
SSDEEP 96:6BCxOvUjo9IO8OXqLIngNUjos848OXq6nuXl87A307BlT+QBrvUjoqIO8OXqQInV:wa9Vx2uej7A307B5xBQ4oND2
TLSH
T1A3924103EE707443DF202A77231E6439D677911A6F97EEC57C214460C9B36D6906236A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 e0231099ade677a49836fc571e1b73acadf762c6b12b2a7fbe2a5c9c43cd8b3b
MD5 e839dcb573988338a836e051e7023ce4
SHA1 c35fb9d86f8be9a18e1df086e487ebef2146351e
SHA512 5e721916ae4cc4a2ee312a7e220eaf89eea95d7ac879281076de1978c7712bcca50c200c0c20e65f24171888e11263abd89f9d45776a532ef7cd08e67ca8f798
SSDEEP 384:PVcyyWn/MLcKFDa83uFBBQ1GkSumxo3RA7DNspUU:9mCtFBBlOR9UU
TLSH
T1E914464F9F302212CD7851365AEA55A79DAEF03F8753B7C97C6104A0CEE3692A01C5BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 6de86c9b838edd6adcc3927d6598d39694fedf851b74dbf3a79ec642044f1117
MD5 d7085ffe40f5bf73d72fa32fe69f74d1
SHA1 5f65b2f7232702f4fe21e6ef6b92626406f587c0
SHA512 6acd2e82b9b092a019534f02c807d93e82c7060fca857f853910ee2da03bd33d0624d6b322993b0111fd5af70fa8f0ad1ee73fec199f29bfdb7d7fe71e5a2baa
TLSH
T108E0D8AA64EDC59DE104364B439D6748C3A13407E7CC2A415F059C85B101108E2E59C1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4521c5edba98610f2c13f482e443c74c519ed6bcd20b2b88ee7b04d0057601f1
MD5 46869e9d695457a95c8e9887468bee38
SHA1 9b10a6da273a5a902807adc73beffa8df7560cb8
SHA512 a0d0dbe07008a9077a23f2b910b7381f750b741e4f1b93354c3d8c1feb480fa358ff204a4eeae9a38ac18da4f0227e10e020482d4875656189b33efc3bb5d82c
TLSH
T17551ADF783B4856E8A1195F0AA18AE2FCF2D0615435C7C6A89E4EE27D3E3471E10265B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 528c0fd8324f33e8ca87e87e9e0cea9a38e839cc7daecad4868b46bdc82ec22d
MD5 27b2a799f3815daba10aaeba35ab021b
SHA1 db16219c4d0e1a0ed4071375d258de037e6e3aac
SHA512 baedcf33cbe2d1321d2068a538b7c2ae157412dfa7e659ff04852cdec6193bf054f2ba46a4092df6336429a412575c1b7709af02add8253f0bcc53b016e0892c
SSDEEP 192:sxZjfRYyMqZ/K1Ml8MlQ/fasDaMmKqTYILcFzodp5Y/W6+WNrl9I/Y0lvaEMXIgs:sxZjfLtQ/fasWMEM3OG/bHI/5kjQ
TLSH
T1CD72E805AA349D778CDBD219FA45BF53D7F91562D2504E48AAFCCB0C04E6AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 8316c3bd2aba2cc20f49f0441b40cafe835d926f3435943e4f82cf067caae1dd
MD5 89e5a26f23fab2a60c59bd0f8be3bdc3
SHA1 7e15567f374d09a915622d950dd5726be4589984
SHA512 e5779f5bd0d89e952298ce1c34d152bc3e051c1ea2305cb21a053074d00f7f67ad03d415f93a396f9e27bc8cafbcc36bbd0b61be164d69f9947257e9a9ef64ee
SSDEEP 192:sxZjfRYyMqZ/K1Ml8SlQ/fasRbWpVrImKqTYILcFzodp5Y/W6+WNUwl9I/Y0JRac:sxZjfLtQ/faspWvrIEM3OG/bhI/57tWk
TLSH
T1D572E806A9349D7B8CD7D219FA45BF53D7F9152292944E489AFCCB0C04E6BED620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 9cda88cbc42adbb8255b297c356c4f78fd226509cbaa4144f019f720542a05a5
MD5 03b4ffaa189c4b8c6885c0540fdd34cf
SHA1 934b8914df9b9aa1d3d154d8faae23f3a2eefb3a
SHA512 67599149973f3f4f02e14a678022932e9627fbbae6bc1f7135fe5a17479be7da65d82e832f40bb6408897f17c1695f4d664b4589040632ae900f1f67bd6e788c
SSDEEP 768:EZN9b8PT24f7pLuL/CuWRmCCQx68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3h7yZLl+:EZN9b8PT24ZE/CuWRmCCQx6u1jaKh7ya
TLSH
T186031C3B280CCB7F4F804E9CDD26AE8E7DE801CB9698898447FA844C03D66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 25d4a2dcd6cbca6c4c95dfec4ab6b7b376dbef5fd63984f4aaf3b1cd120a9bae
MD5 56d02edd5d32168a89df6b4d357f6479
SHA1 b1c79b3d15db5b502919e6f01fde419601762401
SHA512 a5b546f26ec58583c9e669d084c6601fd4d33324f20a736935b0b6cc1d3ccb580c896f2af4c7c473bac0def651dbd468f6cdaed5318ba9b750773a0040197b86
SSDEEP 768:EZN9b8PT2EN7pLuLnRuWRmCCQx68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3D7yZLlm:EZN9b8PT2E7EnRuWRmCCQx6u1jaKD7yK
TLSH
T120031C3B2C0CCB7F4F804E9CDD26AE8E6DE801CB9698899447FA844C03D66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 6a00e5a6501594cb94c9a99fb64b7cb80abaf10e290cb5f38652cc42dfcafe3e
MD5 7cc4a8604ce6384961040022855fc7ce
SHA1 7efcef98ac1d92114f00cade85298eb4c8a99296
SHA512 ffd88cd2b7610d47836a923c16b307d6160a2e6c6de4290f55b1720bf0e9c2e6e6f891b4bdd8bfd863cb8557e69bdb1417a7a2a145eb38edc281f6ebb0c7cae4
TLSH
T194E04F9519E9C1F9B017328347698308D2A47427E7ED39026F4489C6A152544B19BD81
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 905279f2674946e22cb89253037f4fac9a4965bbd71c8946bfc0620072cda63e
MD5 d45091982041914169181a8f2f6c891c
SHA1 b379295e913c03d5844fd7ba0b54b4eafc479b18
SHA512 fd0e34e976ae1042aa6566149ee675c2862c1569f61819241423bb6da23d5c852119552edaf2371a3e0a870410d00dda583db73a11e52b19d448e53edbfff916
TLSH
T1FDB012CBBB605117C8DA8D7B0D844B44AB10E052110048038A1BCF20CC167F8AE11CC8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 4495a94fc31d2914e3c7a9a29f0261a059d4ffbff4794ce4d03afd24a5847386
MD5 6e066fb30b2c71c9b40526862606a796
SHA1 fd4a16b4549ac01120fae541cdad0df03c0dcfb7
SHA512 8283c89e330b9ebebd7ea3b4ceace2af26ac0d643b096252ce70588ee69f371d43f932df056c4e011f02dc13396a1cf121dccdf91955f0ea3d4154f39b64ccb2
TLSH
T15CE048A539D9D2AA7147319B5759E70881F2B407FBE829117B089585A206144B29B941
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 afe45be9f1359f265edb185ebda7e9ce5344e04a47a67ad8f88a27a6840eb7be
MD5 cfe01502128e015f37a8e99cb2c6d0c7
SHA1 b2fae3c631ff8b944dfa7cfa4c66f6075e96967b
SHA512 ee8ccd9d452fff239e691e2ef04cca7bb8c8d9c09ccbb429087b53d2fe9b3a649ac53369d5766f5d0eab1319f0d354b5cf5122084752a20cb8a6adf83bbf0323
TLSH
T126E086F596F9C2B9A00772C3876A970CC2F07817E7E93A46970844C6E101144B2FFD80
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 cc22d9853bcdbc0653023ba96d8a5c722cca6274653014701659fdbb53c2c944
MD5 0d5c8d4a9687db5a2b4f012dbbd13d46
SHA1 97235e346cf103042aed8fb06b51ac510d75bb54
SHA512 905a695cb9dfff320206ccf6e9b7cb84956d38172186acf4050b85dea5df7deabc6d60fbd09b5b80cbe0530f34af5608369eece03e10ccafc4315a39d2f0a867
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZhB1:cdOlNXJjSSjroduZhB1
TLSH
T1F6B25D15723B13D03ABD258A8594B4AF52C231633018E43F7BB954AA0F67E58DDFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c47cee6d-aa8d-427e-8a5d-8f8f0116c9e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c47cee6d-aa8d-427e-8a5d-8f8f0116c9e6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 17KB
SHA256 0a564934462af146350293bd2a532e185659f8ead4a670ce5d0135a5f7cc7a80
MD5 b284cfb86f82bedfe0eb338e42c4c6a4
SHA1 275dcf54aff2a9db723f1ec1fd85a41cbae46f21
SHA512 f7d183ea6cef381dbe7e9ba44473b7af15146cd64c4a611117e4ca12983fe79052766e06b4435845169f57c6af36c1ac898315b4dd75cdcae98a4200623d1076
SSDEEP 384:wBjssus57WKxpWKxrTWKxcWKxwQnIII2b2MIMOBI:sAs/5DQv
TLSH
T130829266AF961B73C66E6B730339876053D6EC420D62B79D3820584EDCF3A9782C45F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 17590be5035d4a89988bb1e33b0cea8d9a65882df31806f8303f487d59700e18
MD5 bdcc758055f7adb1b04d8c49140aa90d
SHA1 842c86cfbd03e5c59a9ec818b8332150204d4c6c
SHA512 e7f75fb458b42f3dde2b19998c4c3420d4b8d740c6858d583d54571353f010e3066f369071b408df9b28c75cb4debebecb1623efb5d26db1a4d853ef7b1d7286
TLSH
T1C1E02696FAE8C1FEB01D35870B2A5708C3803803FBD82D0B1F01C4CBA401701B6EA581
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 7d9a93db6b298f7bea6a31ccc4a9ed8b320225f462ab7d6673cddc42117d764a
MD5 fd9c2df44f605f92b021c9082dc31f31
SHA1 1b1d2bd6c7147c739e6cb86c5fcad5148ddc0811
SHA512 6635e19f3f50769179ac4645826c87b7221d58008b0dbd52d27357f6a608189fa4df5364685c5d3dd60680eab250d781f97376142529c7b87c0c673bc87c0de0
TLSH
T1A221BF16F324C149E18E8A3EA06B97350378E9129FBCDC0F44B920356DA2E001E8F6E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 f4303b2cf6e0de4fb7a086647173eff483671ead1d89f01021a661ef7ce2a7cb
MD5 41b960cea4ddacd6c9581e9b1c58b4e2
SHA1 eddad89098d427f946ceddddd08e970b54bb6aa2
SHA512 dec388a727f4f28f0abd1bdf568d26490db2ecc7735214135551941fa15f904353bff68b85318499067a295d43312e18597e3e81247a8f1b5218b56ada2a2560
TLSH
T187E0DF99B9E8C1EFA0117683076A8748C2913D03FBD83E021F8188CEA501642B6AA581
MD5 SHA1 SHA512 TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.5\data.txt
Size 145KB
SHA256 8a4065abfc1647d1c28b75bf085aa56548564259e7397c4c69ac8897fe32dfe8
MD5 b0b20dbce9a6cb67e97955ab73f93e88
SHA1 0e7127af885c382f161187e7a024e807022ff099
SHA512 68530316e481625d6a5760791bde390e953fc3ee244211889d05148f54740335b096a2e0000c329a53e5c1be0dc9e5054146158d12dc72946c43508b66abdf4a
SSDEEP 3072:gPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYElKb5ZPa:sX1aI5aZoKzMJ07NeZPa
TLSH
T194E3F120CDC51FE8CFAC252CA0BE0F0963D1C65DC42A668AD773FD4AAF9790496275C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 b1dcc1461480e0dc1193901cd8e4b8677b2af6732c185ab2dba4823629c2704e
MD5 9141ab658bc93948b362f851fab0ab20
SHA1 6b0ca15808b530bf802c000bb29a17d28422dca2
SHA512 2f56aa4a6bb60003d8c4682233bce9150a9cfcf17f26a6cd1739a14f8f475f10add48d718cd364c4c8535968e403f38808d1efd13dd8da5ca0917784435d2acb
SSDEEP 384:nEiFXSxmoWd8N48TUNTUlIRN4dgHKD14f+K6NTiSt4Su5x95jDs9kYm9dyx/7Igx:fFCx0dnwgSFK6hVJSx95jDs9kYqST
TLSH
T15BD23A3ADC58CE7B9DEE6B89A34A3653AEE00173C59C4E94DBD85E0D00935DC270BD29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 6a96a5ce95a9885fdb0759b0b98971837b5d5142b2595332770d6afbc644bcf4
MD5 e118c038b6f700b242d00eb15f575924
SHA1 f7f39e3db12817857bd4f26fde43ef6656b8bfb5
SHA512 c6f4c1bbfe92ffc4c0116d4df5f24da6c80165dd33ba0819f0d0afbef07588f50ddb2266cdc612ac949136d1644e0c3235fefac7d1738d631404f7d60746184b
SSDEEP 768:rFCx0dswgNFK6hIXkIbK//zUAs9kYqZts:1dUIUIbKHzUAsOhc
TLSH
T16DF22939DC948A7F99EE7B89A70E3522ADE44133C1B84998D7D91F0E80B749DF30B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9161898a61e904cd7dba4ec453f342e075185d27d7c4ac188e11b3a33c4f8e34
MD5 9a6af3656908a64ef6c03d5ca90c3ec4
SHA1 d007e3ab4548ea46373d7a0eefdf527700edbcc5
SHA512 b083c53d3f36979b9a1f9f2c72a3b3422c3c9c8602e6b891e20e143a96cc6ab780a539d2c4760ba10bcc124f4ab32bb07066f757c9f2bc71ec7b7d7b73afdd13
SSDEEP 384:nQiFZSxmoWz38N/8TUNTUlIRN4d50D14f+K6NTiSQE7PAs9kYm9drN1k+5vI+hs:rFgx0z3swgzFK6hIOPAs9kYqZts
TLSH
T1E4C25C32D8A8CE67ADEA5FD9B35A3653EEE040A3958C4ED4EAD85D0D00871DD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 5e544bff82a160bf4098e86ea64e1c4036854833696eebe02244378be36a050e
MD5 8a1631f8c7bf6eaad6d28bd94acaa509
SHA1 1c2679146799eab6f00baac473b4d57055e7c0b4
SHA512 76f5ceb68a1fa65dcfcd3278bd4d6cfd7ec2ac781bbb858eda331c275d73962f875dd55a822b0da701e6214c0eda525ee4727efd9f4c57e16b0657ff7768d666
SSDEEP 384:nviFavqMg38Ni8TUNTUlIxB4d45TpK14f+K6NTiSnZ3Ra4h/PrN1k+5vI+zC:6Fayv3FwgL1puK6h/Z3RaAfC
TLSH
T1DAC24B76E898DEBBEDEA4FC9A7497603EFE041A3954C4AD4DAD81D0E00931DD130BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 751a75dd873dc5c8feb9bf8cdaa72a6cf39ed17cc52b580c7785b01d433fac38
MD5 7af64711e6fd45a124c8e4e14872ab10
SHA1 f97761843629db41911f00795c9f835f100c066a
SHA512 774bbab74e0218475be93700714ad3b5bdd83aa44568325aa5259b90cc8be35fd67dcbd287a6dcee6b61655f8b8afb575f879041642f2ded06d30093a5ee99a8
SSDEEP 384:nKiFZSxmoWz38N/8TUNTUlIRN4d50D14f+K6NTiSQE7PAs9kYm9drN1k+5vI+hs:BFgx0z3swgzFK6hIOPAs9kYqZts
TLSH
T1ACC25C32D8A8CE67ADEA5FD9B35A3653EEE040A3958C4ED4EAD85D0D00871DD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 d97372e0420d39b5f5800290483391b0fba81a3d054df80e0c01904f5a8c0e01
MD5 11031a48562cb2d339fcf95f5133b88b
SHA1 78126e6006eafe4e53d15160f2de9fcd2cfa6c4c
SHA512 7de58c4e0691572a2e81f42af55ffc77382a4dfb38da501041e0f517ccefaf1cb6ab895bc038c5e448888796829ec49b9d7bbabcba984747ee10454e6004662d
SSDEEP 768:rFCx0dswgSFK6hIXkIbK//zUAs9kYqZts:1d9IUIbKHzUAsOhc
TLSH
T1D8F22939DC948A7F99EE7B89A70E3522ADE44133C1B84998D7D91F0E80B749DF30B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 10208beee280675126c9bba947819e77e6b2fcb34d5fc8a1ebf299008fd54e97
MD5 703077b6682839c8e5447e8f9cb79f7e
SHA1 38de888b9161d3096dab854b8ca7fa6271b61a77
SHA512 8f564ae5934209066b85f99ff1233360beeaa338ed204d939a19dfb8a554152f04efbbecb32d33df1a07c5dc5498ec67dba58d63e44ea89e10c4d75faf0c8688
SSDEEP 384:n2iFavqMg38Nr8TUNTUlIxB4dQIw14f+K6NTiSQE4P3Ra4h/PrN1k+5vI+zC:dFayv38wg8oK6hITP3RaAfC
TLSH
T118C25C72D898DEA7ADEA4FC9B7497643EEE041A3D58C4ED4DAD81D0E00931DD270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b8fe494cd483487d626f2c63129b3f835d914720eac8e4b9811d2227f616466b
MD5 b3b072aab01ff16a7efcad6588b78dac
SHA1 ee942b528c903f5a4ab7c6d2b5461aa3ccc33850
SHA512 57f86362f457a68b025f0c7fa2867aed065a591e6d9c04dc6a2b849fdd3b187022e8632076c26d1c46cc77fcad987cd9ebde362c253d024e20bb8e4d3ad20532
SSDEEP 384:nKiF4SxmoWn38N/8TUNTUlIRR4de0D14f+K6NTiSQE7PAs9kYm9drN1k+5vI+hs:BF9x0n3swguFK6hIOPAs9kYqZts
TLSH
T158C25C32D8A8CE67ADEA5FD9B74A3653EEE040B3958C4ED4EAD85D0D00871DD170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 e04c3c82bf0159c7c25942c7b33cdcf79312ea27c108ee4f505715764f9282b7
MD5 3b4d14778cf0197d2739e712af6a920b
SHA1 a711cb1f411386466329f4a5eae37b9054511645
SHA512 a2841f1b9e690f0f58e7f8228f6ce453ba327d3ac24bfdbb672f73a0974e8e69f8f3de1d028afdec9049e7da4d3a1441a719a4447a63fa2e8ced7dab3c62c1c3
SSDEEP 12:TLyeSjPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3iscQQtydSzcQAJmdWB:TLyT5UOl0afDdWec9sJG52DB5fc
TLSH
T12992CD23B9351073ECDA473ABD5345D10EBC175EC9ABB808DED048620DB1BC6A1991FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 1fc8e1e4921d58bdbfeb478e20bcabc5bdfb04b4b37085460d5b629594979f13
MD5 9a0f6f2d2d786c61dc1b97a1ac517c44
SHA1 175a9744b5a3fe0ae9e7bc0ce01009bb2714a7ab
SHA512 52b1be00cd4a87ae01be22502e3997db502fe944382cb0d0b995a0f8093879a537b17a9349bdc77060fe1f8729b0c951d3cdc475c30bb530d3057fcd1b626a61
SSDEEP 3:MsEllllkEthXllkl2zEelKB5:/M/xT02zNa5
TLSH
T14A44040C7FC41D05C51410304011C7D00370DD103F3157D3355104135CC75501C10040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 1ffdf3e2e9d8cf487c8ee2a28cb4371461cee56f24c35001ebfd67c7c9dfc2ee
MD5 acd2d9fe7de2de6d6b5e71ae4e36951d
SHA1 efe49d4cdefe78386cda4bd0fb9bd9329766d79c
SHA512 c2bf1ee0603dac63b439895179855983919fbfdcdb3321eba67801cf193760278008779254bf3be5e0e92f7940a5631883a82bd34d0217f071b7b2197006927d
TLSH
T14A4150E04C3D2AC1D4BD0A6E788B34FCD5E8DB29F4A4343D6864EA94467921D248443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 cc2a6f66131e42e108e064d01abb5754b66dda2f9ed28fcb9366d04d2896ccc0
MD5 64ecbb2d2a425f14f7bb485e9bf3f9d1
SHA1 a6b81d745443d7f197ae690da7c465a7a4563cfa
SHA512 37cfdfb60964f798f8558fabf20b95b2bf6999f47ad31218dd7ae342df68038e60d159cc3804f7381fff153a94c0a32172f4077c7d229dfabf94f0516ace4ae0
TLSH
T1454141E04C3E66C1D0BD0A7E749B38FC96DCD729F4A4357D2824EA94463A61D748443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 923996e6876503e3482adc9eb5370baf141a491cdb62d37d5967023e9a40ed37
MD5 3b2a51b7647a5990af71785e7dc4a07c
SHA1 73f2c844b2de13015856df207608288a31468d25
SHA512 eefaa2a37d064639c01af81757db99eb93896bf554331d4e5f4cf1d42e2cec558300e14ca30b600f1918b77f1d50d4dcfbafff3440676163eb7a1b2f3bd52c66
TLSH
T1A5414FE14C3E26C1D4FD0A3E749B38FC96D8D729F4A4347D6824EA940A3E61D648443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0474d5ca8bb0ffe26fda7efed8b0af854518b48ca9f41c1da5e64779be90d779
MD5 20abdaf20215df9bb80707a40eb14ead
SHA1 ff783fc3c321b47e49c59e99151b23e52ec6b4a1
SHA512 01e83b267c946271050d8a989cadc6d4d80e22236c1010086f16276d4331ab8fd361b6f4dd351975db709e7e2b30479d49162389e61ed14f9dfe5f21988f762f
TLSH
T11F4163E14C7D26C1D5BD0A6F748B38FCD5D8C719F4A4313D6824EA844A3961D658443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 21ca960a123e6cbbca9fe8ead6905bc5450cc645ad054dc26c7d29f7b613d157
MD5 5b3c699f9d8ac1b9346ca40288359f03
SHA1 7154ce3dbd575de2a72365e9921077115cd27c32
SHA512 fda621a970e81b932fd8f4989b195248d9f68bb809ebabbc951ffff066fd24a1addde0e0820bc9d30fde9971f11feff72510ea72fe41229239c03f39aa3e70de
TLSH
T1DF4130E14C3D6AC5D4BD0A6E749B34FC96DCD729F8A4343D6824EAD44A7A21D388483F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

dd_dd_AspNetCoreSharedFramework___20260429005911_000_AspNetCoreSharedFramework_x64.log

Path C:\Users\Admin\AppData\Local\Temp\dd_dd_AspNetCoreSharedFramework___20260429005911_000_AspNetCoreSharedFramework_x64.log
Size 2KB
SHA256 52f719c0985e436523f1f9a908711fcb41e13ea18f927767c2ea96a83aa117c4
MD5 10a14aac567dce6872a0265375f3481b
SHA1 e2ed45fd18cae42c74884c0565561ba1a9719d43
SHA512 1dcd3ed7d98a9f4be4380656f00ca174329a14108d2c6b45bcf50c9f65e7bf2f8af44d70b89052d328e292ae3d6fe9c9eb43c03f3119c3c272ea699ea6b95532
TLSH
T16141F5152FE50959B2B757879EF3C0135A33FCE26835CF0C23C6435A066BD0098A87BA
MD5 SHA1 SHA512 TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe

Path C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe
Size 10.0MB
SHA256 2819e0c6731c1ae34944778499e3d3e1ca81ac3ca05cb1cb7d252350b8e7ac65
MD5 603620067fb08340ce7bad9395512a9a
SHA1 aec0dda330a4f30c84911130ea89b2b8796bb969
SHA512 0a72cefaf82d475e50630e5a994367b3aeebefe3ea1d20a586c0dd215c559860691219080f3f49f7816210d4dd55eb19e09e3cbcf29fffef0bf9473a5826e744
SSDEEP 196608:KgZ2q0xUxwiAj/XCndOt+vhS7jLRxs9r/uG1vE4Bb2odqFY/p0Xi+Jp:z2qEUe3SnmL73ArbTp2rYy73
TLSH
T14AB63331A6650022E7F50677AD18E5313E3CA2382B1499A6E7C8EC1D3F790D16BF7297
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\aspnetcore-runtime-8.0.26-win-x64.exe:Zone.Identifier
Size 185B
SHA256 39962b125b4ccef222c1a08374679f8f5dedfedc8047ec6157bd0d5f37090772
MD5 78e38adbcebfffa27076a51fd865cef1
SHA1 06887cedca05cc8b379a3d13948b5d07bcf09a50
SHA512 577bd0390276385bdee3b577f21f04c56b3e6d75848694492fdd854967b2d9811310e8fb831ccb57dcbf3ae612f44769f9712430a8737561776d291bf28b2aa8
TLSH
T129C02293C80086034E1033830728F22DE20F22920580E3C88C8080E1D2430D5C1C5031
MD5 SHA1 SHA512 TLSH

Submit Download

MSI679E.tmp

Path C:\Windows\Installer\MSI679E.tmp
Size 219KB
SHA256 2bf33a9b9980e44d21d48f04cc6ac4eed4c68f207bd5990b7d3254a310b944ae
MD5 928f4b0fc68501395f93ad524a36148c
SHA1 084590b18957ca45b4a0d4576d1cc72966c3ea10
SHA512 7f2163f651693f9b73a67e90b5c820af060a23502667a5c32c3beb2d6b043f5459f22d61072a744089d622c05502d80f7485e0f86eb6d565ff711d5680512372
SSDEEP 3072:FVzl3qiEZybztEwiUx6D02cWVsV1v2vZR3X6j7zo6k2FkngTLrOrORT9flQnS6lg:FVIMEgXmEAR3oHon2VaFuG0eEp
TLSH
T1AF248D217494947EEAFA0832A57EDA71BF3DF2241760C8AEC3409D1E6D604C167B7B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1118602475\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1126433297\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1126433297\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1257523971\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1734011692\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_1982651109\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3012_993461294\manifest.json
Size 52B
SHA256 eb3cf0abd2ad7de40910be5f35246574a6de00ce226c6e9cef465ce6691bb937
MD5 bd68a51e561ab1326b00278d86346486
SHA1 0929e44106b4b17dbac9104a716a05aeae6dba3a
SHA512 beaf2390b2c037268ce9518e6e7a49ebe123fa1bb6ba59e3d0641e778a11fed8f863a3c0cf6a505a5e404d4f9cb14f0eca72efc1efb56384e3ba190a57c41c43
TLSH
T1E2900270042495175AC10E606571F8C59391661955850D1D04451548029546CE0602D8
MD5 SHA1 SHA512 TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{65B1C8A3-C42A-48F7-8454-FCB43ABA0190}\.ba\logo.png
Size 12KB
SHA256 c8e23a42e04fbd73f5f66f3b9f2ba34a777bc4769c413a0f78335a4e757baad5
MD5 84709eb22e4b05688067699ca9b0d322
SHA1 7c3381d8b6a58087cda95577cc2d25e7aa2c21d8
SHA512 04de70b7317ee1cbde73ac0fe84bd70983cf0ff7e769e5f9626c69eaa6e3e9724c95b14ccb7a5478ee639848d3f8c98e4dec599cc5e33ad71de638da589ba319
SSDEEP 192:k4VwCaltyB5RgMq8RymiBg06po6jKeTvw:k4VzalIB5Rgh8YmiBg06W6jKKw
TLSH
T16F42C15EE9EE8248E52D065234DB6E1A997A4CEF2E9D66B2E1B57E340C303E30D47481
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{65B1C8A3-C42A-48F7-8454-FCB43ABA0190}\.ba\wixstdba.dll
Size 190KB
SHA256 dcea15f3710822ffc262e62ec04cc7bbbf0f33f5d1a853609fbfb65cb6a45640
MD5 f1919c6bd85d7a78a70c228a5b227fbe
SHA1 71647ebf4e7bed3bc1663d520419ac550fe630ff
SHA512 c7ff9b19c9bf320454a240c6abbc382950176a6befce05ea73150eeb0085d0b6ed5b65b2dcb4b04621ef9cca1d5c4e59c6682b9c85d1d5845e5ce3e5eedfd2eb
SSDEEP 3072:sjEoXsLW9OLG8Qp51ySdjDXY33b+Av7O5IkI+/AYkPAEc527uu3k/gLtxavf0ir2:sjEo8LW9553hXWy15I2YrAW7FUVEihs3
TLSH
T1FF14AF1176D0A07AEBFB16307A39A5216E7DBA200FA0C9DF63449D2B1D715C19B36B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AspNetCoreSharedFramework_x64

Path C:\Windows\Temp\{65B1C8A3-C42A-48F7-8454-FCB43ABA0190}\AspNetCoreSharedFramework_x64
Size 9.8MB
SHA256 3b57b7129f88d3566896ff768dc7de0e4040989e7a91cf0edc4655eb9f400ff9
MD5 024c73aa5ff6ef31ec457b9fa24ec310
SHA1 cf5c7b1b478f0fe464ef33bad3c9b5dd895b3879
SHA512 b5ba6cbc2ed46f44d39681651b25902aa971aa10c29cb86115afdd39a7788114f60c416fe8a9892d371a5e4fc5c9be8902ea864e644261fee4252516131c30f6
SSDEEP 196608:bSexkGUfk0jhnFgKt6zPkVnN1+Y+MNkfroHiFCpAZ7i:jx0j3ncPkd+J9fUHOaai
TLSH
T1A3A633277DA2843AD4A90D708A76CB606F3DBC344B50E5974380BA2DEDF11D05B77AE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thm.wxl

Path C:\Windows\Temp\{8F50C307-B8BF-4A70-A996-CAC3ACA7927D}\.ba\thm.wxl
Size 4KB
SHA256 65507ddc6f2ab2a93b684684ba1d69fdf0b024296367cdce5dad31d5e49813d0
MD5 d4226d322e0a676476db291ab59c0cd1
SHA1 572f5e80c1b56aadfb15e227d96fb4b6fea47ce9
SHA512 b69e606d117785412744c131e9559c597d5efbb0b38b97f1369b11f39efd5330c7918369d6825a8f2a4a1490cd4a076981f0008621fbc28c08278481e6d74810
SSDEEP 96:JTNREsRDTxmupv9/KATZgoVOBq9Lr878U:zvNDW7R
TLSH
T18C91AA63B8CB27D1287361A4EE9195B95911D09C823B2CF4FC47454B838E927A3B3F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aspnetcore-runtime-8.0.26-win-x64.exe

Path C:\Windows\Temp\{D044C639-DDED-45AD-A3FB-A37CF98880DD}\.cr\aspnetcore-runtime-8.0.26-win-x64.exe
Size 589KB
SHA256 4eecc518c865e68838162dba37c7883c3cd8b9cb0d7a17bc649a554535e5d51a
MD5 213cbe07ed3f689b1c8620bc0a9bf49b
SHA1 737b918145da73c77855ba7507995cc80e2ee598
SHA512 d9e8fa928668bcfb2a5a899c84dc27ae647367baf042f894d02f3c8c87cbe1dea5e755d3bab6c14285b2d65d8ffc09a3ea40d325bcba6b6ad5e3d091195edd89
SSDEEP 12288:omEsd9PZfePv3xl7ft7V+6uC+zd5qLliP+woCYJjsXs8Ng2:om39PZfePv3r7fm6t+jqpi+SsU
TLSH
T117D47C32A5614032E7F10673B968D6303E3CE328275488AAE7D4AD1D7EB84D667F7253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3096-311-0x000001D7C5720000-0x000001D7C5A98000-memory.dmp

Download

memory/3108-782-0x0000015A79040000-0x0000015A793B8000-memory.dmp

Download

memory/3108-779-0x0000015A79040000-0x0000015A793B8000-memory.dmp

Download

memory/3268-1072-0x000001CC6FA00000-0x000001CC6FD78000-memory.dmp

Download

memory/3296-145-0x000002410D5F0000-0x000002410D5F9000-memory.dmp

Download

memory/3296-139-0x000002410D4E0000-0x000002410D5CA000-memory.dmp

Download

memory/3832-3775-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/3832-1286-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/3832-1117-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/3832-1266-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/3832-781-0x000001A2FC430000-0x000001A2FC439000-memory.dmp

Download

memory/3832-780-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/3832-4593-0x000001A2FAE70000-0x000001A2FB1E8000-memory.dmp

Download

memory/4692-1088-0x000002A0566E0000-0x000002A0566E9000-memory.dmp

Download

memory/4908-0-0x000002AEDCBE0000-0x000002AEDCF58000-memory.dmp

Download

memory/5224-2664-0x0000027CBA690000-0x0000027CBA77A000-memory.dmp

Download

memory/5224-1251-0x0000027CBA690000-0x0000027CBA77A000-memory.dmp

Download

memory/5224-1230-0x0000027CBA690000-0x0000027CBA77A000-memory.dmp

Download

memory/5224-1152-0x0000027CBA690000-0x0000027CBA77A000-memory.dmp

Download